last executing test programs: 12m16.129953079s ago: executing program 1 (id=444): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 12m10.868190665s ago: executing program 1 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000240)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sed\x00', 0x8, 0x7, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fallocate(0xffffffffffffffff, 0x0, 0xf797, 0x7) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xff000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12m6.476085652s ago: executing program 1 (id=456): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") 12m5.743234294s ago: executing program 1 (id=460): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000000480)=0x3, 0x2}], 0x1, 0x0, &(0x7f0000001100), 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m3.436926279s ago: executing program 1 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 12m2.289647895s ago: executing program 1 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{&(0x7f0000001440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001480)="a2", 0x1}], 0x1}}], 0x1, 0x4000804) 11m46.279364458s ago: executing program 32 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{&(0x7f0000001440)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001480)="a2", 0x1}], 0x1}}], 0x1, 0x4000804) 8m58.753065145s ago: executing program 0 (id=877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) 8m57.230659934s ago: executing program 0 (id=880): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="13000000010203fe7a", 0x9}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004058}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m55.837130166s ago: executing program 0 (id=881): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f6"], 0x34}}, 0x0) 8m55.59738645s ago: executing program 0 (id=883): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, 0x0) 8m55.227919561s ago: executing program 0 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002030500000000000040000002000000090002"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) 8m54.195147581s ago: executing program 0 (id=886): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x14, 0x19, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0xa}}, 0x14}}, 0x40840) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x20050800) fcntl$setlease(r0, 0x400, 0x0) 8m38.980236651s ago: executing program 33 (id=886): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x14, 0x19, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0xa}}, 0x14}}, 0x40840) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x20050800) fcntl$setlease(r0, 0x400, 0x0) 6m43.87480177s ago: executing program 3 (id=1158): unshare(0x2020480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) unshare(0x20080) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) 6m43.568224998s ago: executing program 3 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty, [], "3a6cbb0a0d000000"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000003060500"/19], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 6m42.558352917s ago: executing program 3 (id=1163): setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340)={0xfffffffc}, 0x4) unshare(0x2040400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x0) write$nbd(r4, &(0x7f0000000440)={0x67446698, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6m40.367908575s ago: executing program 3 (id=1164): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@local, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x2, 0x0) 6m34.388084115s ago: executing program 3 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpgrp(0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x2002c005) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300060000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 6m32.373264032s ago: executing program 3 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000001c0)={@local, 0x2}) r6 = dup2(r5, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x40000, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0xb93, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x1b4b, 0x8, 0x0, 0x0, 0x0, 0x2, 0x55], [0x0, 0xb0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x10800000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x80, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = msgget$private(0x0, 0x297) msgsnd(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x80, 0x800) msgrcv(r9, 0x0, 0x0, 0x0, 0x1c165beb71004d5b) setsockopt$inet_udp_encap(r8, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 6m17.054232348s ago: executing program 34 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000001c0)={@local, 0x2}) r6 = dup2(r5, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x40000, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0xb93, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x1b4b, 0x8, 0x0, 0x0, 0x0, 0x2, 0x55], [0x0, 0xb0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0xff, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x10800000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x80, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x0, 0x8f4, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x45c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = msgget$private(0x0, 0x297) msgsnd(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x80, 0x800) msgrcv(r9, 0x0, 0x0, 0x0, 0x1c165beb71004d5b) setsockopt$inet_udp_encap(r8, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) 7.471714523s ago: executing program 4 (id=2331): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x24000080) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8004) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xdaf}}, './file0\x00'}) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000240)=@raw={0xfe, 0x6, "00fcffffff00"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00007df000/0x2000)=nil, 0x2000, 0x3000008, 0x30, 0xffffffffffffffff, 0xfdbd9000) 6.958331433s ago: executing program 7 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 6.580107985s ago: executing program 7 (id=2335): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents(r1, &(0x7f0000000e80)=""/202, 0xca) 6.444657573s ago: executing program 7 (id=2336): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xeb) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340b1bf747ec7f9b12eb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000000c0)={0x3, 0x100, 0x5}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f00000013c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.901596225s ago: executing program 2 (id=2339): socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@ctrl_frame=@ba={{}, {0xc}, @device_a, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x9}, {0x8, 0x8}, "7b30a7ce02da76f559201a987b1f6eac1056c8bf1433fba3cf6e3f7a2bf6866843f412c3c2682cd219abf0d79a1fbe3b1e029da5e11e2017e9873aa40a9d16d750f4671ec73b1f7d81557da0be7c02845882547d04e18c44e34b20a237b8ca43edff439908036993c6447291141a23ad37991df4812e0e18b2e173501a8eb4fa"}}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 5.698650887s ago: executing program 6 (id=2340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x5, 0x10}, {}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.698186177s ago: executing program 5 (id=2341): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 5.497373538s ago: executing program 5 (id=2342): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.337579978s ago: executing program 6 (id=2343): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a", 0xd}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 5.330442338s ago: executing program 7 (id=2344): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069"], 0x48}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 5.227947364s ago: executing program 5 (id=2345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x3, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0xd, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e3, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x4, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', 0x0, &(0x7f0000001500), 0x200) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r4) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0xfffffffffffffd22, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.140431409s ago: executing program 2 (id=2346): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents(r1, &(0x7f0000000e80)=""/202, 0xca) 5.023670526s ago: executing program 6 (id=2347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 4.809372619s ago: executing program 2 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000300000005000700080000005fb6465337590775be641b10308106b31a6b4d5f8b5b085961e39f6b21d5b50e024bd4507641ce05be2fa64fd72abda58b9a54fb136453e4fc1efe643ef454917a6f4184a547d8069805031deedfd8e74f82e5c76710"], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1f30}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}, {0x24, '\x00', @data=0x800, 0x5}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast2, 0x47f40b73}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x24044804) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r10, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 4.808613959s ago: executing program 7 (id=2349): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r5, &(0x7f00000000c0)=@name, &(0x7f0000000280)=0x10) 4.752250042s ago: executing program 6 (id=2350): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a0000000500040000000000050001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x0) 3.569783131s ago: executing program 7 (id=2351): io_setup(0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xd83, 0x1, 0x4, 0x0, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x7, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) 3.446035869s ago: executing program 2 (id=2352): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 3.405873601s ago: executing program 6 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400180000"], 0x5c}, 0x1, 0x6c}, 0x0) 3.405061051s ago: executing program 4 (id=2354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x5, 0x10}, {}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.149092056s ago: executing program 2 (id=2355): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.106538178s ago: executing program 6 (id=2356): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xeb) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f00000000c0)={0x3, 0x100, 0x5}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f00000013c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.066759601s ago: executing program 4 (id=2357): socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@ctrl_frame=@ba={{}, {0xc}, @device_a, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0x9}, {0x8, 0x8}, "7b30a7ce02da76f559201a987b1f6eac1056c8bf1433fba3cf6e3f7a2bf6866843f412c3c2682cd219abf0d79a1fbe3b1e029da5e11e2017e9873aa40a9d16d750f4671ec73b1f7d81557da0be7c02845882547d04e18c44e34b20a237b8ca43edff439908036993c6447291141a23ad37991df4812e0e18b2e173501a8eb4fa"}}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 2.708013112s ago: executing program 2 (id=2358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x3, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0xd, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e3, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x4, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='./mnt\x00', 0x0, &(0x7f0000001500), 0x200) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) listen(0xffffffffffffffff, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0xfffffffffffffd22, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.167705833s ago: executing program 4 (id=2359): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents(r1, 0x0, 0x0) 1.963921485s ago: executing program 5 (id=2360): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069"], 0x48}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 1.862336391s ago: executing program 4 (id=2361): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r5, &(0x7f00000000c0)=@name, &(0x7f0000000280)=0x10) 681.62731ms ago: executing program 4 (id=2362): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 427.049095ms ago: executing program 5 (id=2363): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a0000000500040000000000050001"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x0) 0s ago: executing program 5 (id=2364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000300000005000700080000005fb6465337590775be641b10308106b31a6b4d5f8b5b085961e39f6b21d5b50e024bd4507641ce05be2fa64fd72abda58b9a54fb136453e4fc1efe643ef454917a6f4184a547d8069805031deedfd8e74f82e5c76710"], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1f30}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}, {0x24, '\x00', @data=0x800, 0x5}]}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x24044804) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r9, @ANYBLOB="07b0cf7e2c89cc"], 0x0) kernel console output (not intermixed with test programs): 0.491457][ T6527] usb 3-1: USB disconnect, device number 11 [ 601.117371][ T9194] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 601.482742][ T9123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 601.536231][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 601.592482][ T9123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 601.611367][ T9123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 601.752509][ T9123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 602.363431][ T9] device hsr_slave_0 left promiscuous mode [ 602.423104][ T9] device hsr_slave_1 left promiscuous mode [ 602.452307][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.489778][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.524616][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.544134][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.576254][ T9] device bridge_slave_1 left promiscuous mode [ 602.595453][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.613315][ T9] device bridge_slave_0 left promiscuous mode [ 602.659836][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.745588][ T9] device bridge0 left promiscuous mode [ 602.776335][ T9] device veth1_macvtap left promiscuous mode [ 602.799825][ T9] device veth0_macvtap left promiscuous mode [ 602.847676][ T9] device veth1_vlan left promiscuous mode [ 602.853478][ T9] device veth0_vlan left promiscuous mode [ 602.936342][ T9217] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1209'. [ 608.212213][ T9] team0 (unregistering): Port device team_slave_1 removed [ 608.368239][ T9] team0 (unregistering): Port device team_slave_0 removed [ 608.410969][ T9253] ieee802154 phy0 wpan0: encryption failed: -22 [ 608.478794][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.606071][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.567068][ T9] bond0 (unregistering): Released all slaves [ 609.698511][ T9228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1210'. [ 609.737326][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 609.756957][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.784788][ T9250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.857484][ T9251] device bridge0 entered promiscuous mode [ 611.313060][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.368234][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.402748][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.538378][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.617817][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.638763][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.673518][ T4418] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.680684][ T4418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.799192][ T9282] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 612.114621][ T9123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.178766][ T9123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.247422][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 612.260119][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 612.296980][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 612.329350][ T4418] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.336537][ T4418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.389197][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 612.430532][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 612.450137][ T9291] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1224'. [ 612.476550][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.511527][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.536637][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.562669][ T9291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1224'. [ 612.577462][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.601384][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.640598][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.682356][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 612.718379][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.759333][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.789262][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.423302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.446576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.497682][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.151921][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.168928][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.258431][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.265266][ T4325] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 616.300355][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.326579][ T9123] device veth0_vlan entered promiscuous mode [ 616.334613][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.360221][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.391492][ T9123] device veth1_vlan entered promiscuous mode [ 616.475221][ T4325] usb 3-1: device descriptor read/64, error -71 [ 616.622577][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 616.643793][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 616.704657][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.746467][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.755240][ T4325] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 616.787167][ T9123] device veth0_macvtap entered promiscuous mode [ 616.896599][ T9123] device veth1_macvtap entered promiscuous mode [ 616.915577][ T4325] usb 3-1: device descriptor read/64, error -71 [ 617.106490][ T4325] usb usb3-port1: attempt power cycle [ 617.122264][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.168951][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.181875][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1232'. [ 617.242005][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.477644][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.545211][ T4325] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 617.585841][ T4325] usb 3-1: device descriptor read/8, error -71 [ 617.640558][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.799665][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.835087][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.877405][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.916322][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.957755][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 617.976906][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.025475][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.045158][ T4325] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 618.064510][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.097174][ T4325] usb 3-1: device descriptor read/8, error -71 [ 618.106586][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.197384][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.215591][ T4325] usb usb3-port1: unable to enumerate USB device [ 618.255638][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.293092][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.335345][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.374083][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.547917][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.593538][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.678176][ T9366] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 618.998087][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.060693][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 619.090213][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.948702][ T9123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.965062][ T9123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.994163][ T9123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.003514][ T9123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.442928][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.144582][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.199070][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.245724][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.270811][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.343523][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.335156][ T6527] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 622.525962][ T6527] usb 5-1: Using ep0 maxpacket: 8 [ 622.534426][ T6527] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 622.595714][ T6527] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 622.673103][ T6527] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 622.703999][ T6527] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 622.734657][ T6527] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.766007][ T6527] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 622.823813][ T6527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.895023][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 622.907818][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.956882][ T9411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.077398][ T6527] usb 5-1: usb_control_msg returned -32 [ 623.093315][ T6527] usbtmc 5-1:16.0: can't read capabilities [ 623.185126][ T9416] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.298287][ T9414] device bridge0 entered promiscuous mode [ 624.101186][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.107647][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.660830][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1248'. [ 624.984109][ T9467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.816316][ T9469] bond1: (slave veth3): Enslaving as an active interface with an up link [ 626.118254][ T9475] netlink: 'syz.5.1246': attribute type 1 has an invalid length. [ 626.288087][ T4440] usb 5-1: USB disconnect, device number 10 [ 627.441916][ T9471] bond1 (unregistering): (slave veth3): Releasing backup interface [ 627.470281][ T9471] bond1 (unregistering): Released all slaves [ 627.941569][ T9492] 9pnet_fd: Insufficient options for proto=fd [ 628.312885][ T9501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.387106][ T9501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 628.394644][ T9501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.599997][ T9501] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.253310][ T9539] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 630.404967][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1261'. [ 630.966055][ T9545] device vxcan1 entered promiscuous mode [ 635.636589][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 635.900418][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1279'. [ 637.806692][ T9609] team0 (unregistering): Port device team_slave_0 removed [ 637.962242][ T9623] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 638.374810][ T9609] team0 (unregistering): Port device team_slave_1 removed [ 642.237083][ T9684] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1293'. [ 642.463101][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1293'. [ 644.756387][ T9705] device vlan0 entered promiscuous mode [ 645.833334][ T9722] netlink: 'syz.6.1302': attribute type 1 has an invalid length. [ 648.344588][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1304'. [ 652.845414][ T9768] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1305'. [ 653.059158][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1305'. [ 653.202530][ T9772] loop7: detected capacity change from 0 to 16384 [ 655.199206][ T9817] 9pnet_fd: Insufficient options for proto=fd [ 655.393728][ T9821] netlink: 'syz.5.1323': attribute type 1 has an invalid length. [ 656.893255][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1325'. [ 657.095883][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 659.677848][ T9876] syz.5.1341 (9876): /proc/9876/oom_adj is deprecated, please use /proc/9876/oom_score_adj instead. [ 661.185407][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1348'. [ 661.400942][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1348'. [ 662.581048][ T9916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 662.622710][ T9916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.663240][ T9916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.782451][ T9919] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.459286][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1360'. [ 665.282517][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1361'. [ 665.525447][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1361'. [ 668.093959][ T9975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 668.178179][ T9975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.222175][ T9975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 669.353586][ T9975] ieee802154 phy0 wpan0: encryption failed: -22 [ 669.600652][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1375'. [ 670.365614][T10004] xt_socket: unknown flags 0x4 [ 671.397990][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1375'. [ 671.652504][T10018] netlink: 'syz.5.1379': attribute type 1 has an invalid length. [ 673.946302][T10060] hsr0: VLAN not yet supported [ 673.955211][T10060] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1389'. [ 673.981727][T10060] device hsr_slave_0 left promiscuous mode [ 673.996509][T10060] device hsr_slave_1 left promiscuous mode [ 674.182639][T10052] can0: slcan on pty24. [ 674.617013][T10073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1393'. [ 674.806612][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 674.822086][T10039] can0 (unregistered): slcan off pty24. [ 676.516280][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1386'. [ 677.675165][ T5090] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 677.905199][ T5090] usb 5-1: Using ep0 maxpacket: 8 [ 677.920974][ T5090] usb 5-1: config 6 has an invalid interface number: 51 but max is 1 [ 677.951357][ T5090] usb 5-1: config 6 has no interface number 1 [ 677.979279][ T5090] usb 5-1: config 6 interface 0 has no altsetting 0 [ 678.005880][ T5090] usb 5-1: config 6 interface 51 has no altsetting 0 [ 678.032513][ T5090] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 678.072255][ T5090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.095046][ T5090] usb 5-1: Product: syz [ 678.119561][ T5090] usb 5-1: Manufacturer: syz [ 678.124199][ T5090] usb 5-1: SerialNumber: syz [ 678.867659][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1404'. [ 680.035130][ T7] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 680.271532][ T7] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 680.293963][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.340185][ T7] usb 8-1: config 0 descriptor?? [ 680.443093][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 680.650982][ T5090] xr_serial 5-1:6.51: xr_serial converter detected [ 680.690011][ T5090] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 680.697222][ T7] gp8psk: usb in 128 operation failed. [ 680.713294][ T5090] xr_serial: probe of ttyUSB0 failed with error -71 [ 680.781855][ T5090] usb 5-1: USB disconnect, device number 11 [ 680.831776][ T5090] xr_serial 5-1:6.0: device disconnected [ 680.908318][ T7] gp8psk: FW Version = 68.248.173 (0x44f8ad) Build 2048/49/50 [ 681.010051][T10149] IPVS: dh: FWM 3 0x00000003 - no destination available [ 682.978628][ T7] gp8psk: usb in 149 operation failed. [ 682.989906][ T7] gp8psk: failed to get FPGA version [ 683.016759][ T7] gp8psk: usb in 138 operation failed. [ 683.043614][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 683.083445][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 685.540270][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.548899][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.988563][ T5090] usb 8-1: USB disconnect, device number 2 [ 686.777411][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1433'. [ 686.797844][T10233] netlink: 'syz.7.1433': attribute type 30 has an invalid length. [ 686.822676][T10233] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.832209][T10233] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.841012][T10233] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.849802][T10233] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.862711][T10235] netlink: 'syz.4.1434': attribute type 10 has an invalid length. [ 686.898692][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.930248][T10235] team0: Port device bond0 added [ 686.960881][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1433'. [ 686.990933][T10233] netlink: 'syz.7.1433': attribute type 30 has an invalid length. [ 687.298485][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1435'. [ 687.655535][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1435'. [ 687.706270][T10235] syz.4.1434 (10235) used greatest stack depth: 20816 bytes left [ 693.014667][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1451'. [ 693.256375][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1451'. [ 698.412614][T10338] vivid-000: disconnect [ 698.459796][T10337] vivid-000: reconnect [ 698.488365][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1465'. [ 698.750060][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1465'. [ 700.799066][T10366] vivid-004: disconnect [ 701.228781][T10361] vivid-004: reconnect [ 701.615466][ T4559] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 701.740880][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.836764][ T4559] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 701.862844][ T4559] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 701.939687][ T4559] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 701.987372][ T4559] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 702.015900][ T4559] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 702.056056][ T4559] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 702.118297][ T4559] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 702.162129][ T4559] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 702.209311][ T4559] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 702.259563][ T4559] usb 5-1: string descriptor 0 read error: -22 [ 702.278504][ T4559] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 702.312247][ T4559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.390181][ T4559] adutux 5-1:168.0: interrupt endpoints not found [ 702.906189][T10383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 703.158428][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 703.370366][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 703.655039][ T4559] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 703.815126][ T4558] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 703.845166][ T4559] usb 3-1: Using ep0 maxpacket: 8 [ 703.853231][ T4559] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 703.879274][ T4559] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 703.888595][ T4559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.897266][ T4559] usb 3-1: Product: syz [ 703.901634][ T4559] usb 3-1: Manufacturer: syz [ 703.907920][ T4559] usb 3-1: SerialNumber: syz [ 703.924574][ T4559] usb 3-1: config 0 descriptor?? [ 703.936029][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 703.944246][ T4559] usb 3-1: setting power ON [ 703.951568][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 703.971424][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 703.983652][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 703.992533][ T4559] usb 3-1: media controller created [ 704.005246][ T4558] usb 8-1: Using ep0 maxpacket: 8 [ 704.012092][ T4558] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 704.023113][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.032647][ T4558] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.063849][ T4559] usb 3-1: selecting invalid altsetting 6 [ 704.072013][ T4559] usb 3-1: digital interface selection failed (-22) [ 704.080877][ T4558] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 704.091336][ T4558] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.102380][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 704.111863][ T4558] usb 8-1: Product: syz [ 704.119159][ T4559] usb 3-1: setting power OFF [ 704.124582][ T4558] usb 8-1: Manufacturer: syz [ 704.129616][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 704.140208][ T4558] usb 8-1: SerialNumber: syz [ 704.146503][T10411] dvb-usb: bulk message failed: -22 (3/0) [ 704.152479][T10411] dvb-usb: bulk message failed: -22 (4/0) [ 704.159127][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 704.174809][ T4558] usb 8-1: config 0 descriptor?? [ 704.187745][ T4559] (NULL device *): no alternate interface [ 704.230130][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 704.256620][ T4559] usb 3-1: USB disconnect, device number 16 [ 704.394252][ T4558] usb 8-1: USB disconnect, device number 3 [ 704.502466][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1490'. [ 704.773561][ T4325] usb 5-1: USB disconnect, device number 12 [ 705.285379][T10446] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 707.140573][ T4559] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 707.244390][T10479] netlink: 'syz.5.1509': attribute type 1 has an invalid length. [ 707.368291][ T4559] usb 5-1: Using ep0 maxpacket: 8 [ 707.971990][ T4559] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 707.993708][ T4559] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.042732][ T4559] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 708.078712][ T4559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.103728][ T4559] usb 5-1: Product: syz [ 708.117279][ T4559] usb 5-1: Manufacturer: syz [ 708.134412][ T4559] usb 5-1: SerialNumber: syz [ 708.196992][ T4559] usb 5-1: config 0 descriptor?? [ 708.420798][ T4559] usb 5-1: USB disconnect, device number 13 [ 708.693545][T10500] netlink: 'syz.7.1517': attribute type 12 has an invalid length. [ 708.713248][T10500] netlink: 'syz.7.1517': attribute type 29 has an invalid length. [ 708.735160][T10500] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1517'. [ 708.758181][T10500] netlink: 'syz.7.1517': attribute type 1 has an invalid length. [ 708.770965][T10500] netlink: 'syz.7.1517': attribute type 2 has an invalid length. [ 709.617808][T10512] netlink: 'syz.7.1520': attribute type 1 has an invalid length. [ 710.278645][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1526'. [ 711.425164][ T4559] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 712.265238][ T4559] usb 7-1: Using ep0 maxpacket: 8 [ 713.036237][ T4559] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 713.050459][ T4559] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 713.083758][ T4559] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 713.092987][ T4559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.101358][ T4559] usb 7-1: Product: syz [ 713.105760][ T4559] usb 7-1: Manufacturer: syz [ 713.110376][ T4559] usb 7-1: SerialNumber: syz [ 713.116988][ T4559] usb 7-1: config 0 descriptor?? [ 713.335789][ T4559] usb 7-1: USB disconnect, device number 5 [ 713.431837][T10558] netlink: 'syz.5.1537': attribute type 1 has an invalid length. [ 714.710813][T10577] dlm: no locking on control device [ 715.938181][ T4558] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 716.043152][T10593] netlink: 'syz.7.1549': attribute type 1 has an invalid length. [ 716.176192][ T4558] usb 7-1: Using ep0 maxpacket: 8 [ 716.495015][ T4558] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 716.527251][ T4558] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 716.745162][ T4558] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.768904][ T4558] usb 7-1: Product: syz [ 716.773119][ T4558] usb 7-1: Manufacturer: syz [ 716.795479][ T4558] usb 7-1: SerialNumber: syz [ 716.820218][ T4558] usb 7-1: config 0 descriptor?? [ 716.837459][ T4558] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 716.849938][ T4558] usb 7-1: setting power ON [ 716.854546][ T4558] dvb-usb: bulk message failed: -22 (2/0) [ 716.892556][ T4558] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 716.923711][ T4558] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 716.944097][ T4558] usb 7-1: media controller created [ 717.015085][ T4558] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 717.058550][ T4558] usb 7-1: selecting invalid altsetting 6 [ 717.080699][ T4558] usb 7-1: digital interface selection failed (-22) [ 717.104406][ T4558] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 717.130829][ T4558] usb 7-1: setting power OFF [ 717.146103][ T4558] dvb-usb: bulk message failed: -22 (2/0) [ 717.151877][ T4558] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 717.175086][ T4558] (NULL device *): no alternate interface [ 717.229673][ T4558] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 717.279527][ T4558] usb 7-1: USB disconnect, device number 6 [ 718.345099][ T9126] Bluetooth: hci1: command 0x0406 tx timeout [ 718.528074][T10619] xt_socket: unknown flags 0x4 [ 719.209921][T10635] netlink: 'syz.7.1562': attribute type 1 has an invalid length. [ 720.423561][T10648] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1568'. [ 720.434209][T10648] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1568'. [ 720.845558][T10657] vivid-008: disconnect [ 721.255078][ T4558] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 721.353388][T10649] vivid-008: reconnect [ 721.445229][ T4558] usb 7-1: Using ep0 maxpacket: 8 [ 721.456685][ T4558] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 721.536890][ T4558] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 721.596701][ T4558] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.675073][ T4558] usb 7-1: Product: syz [ 721.711975][ T4558] usb 7-1: Manufacturer: syz [ 721.755080][ T4558] usb 7-1: SerialNumber: syz [ 721.825168][ T4558] usb 7-1: config 0 descriptor?? [ 721.847622][ T4558] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 721.899990][ T4558] usb 7-1: setting power ON [ 721.938516][ T4558] dvb-usb: bulk message failed: -22 (2/0) [ 721.976539][ T4558] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 722.025705][ T4558] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 722.079830][ T4558] usb 7-1: media controller created [ 722.130567][ T4558] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.213907][ T4558] usb 7-1: selecting invalid altsetting 6 [ 722.219822][ T4558] usb 7-1: digital interface selection failed (-22) [ 722.235028][ T4558] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 722.267794][ T4558] usb 7-1: setting power OFF [ 722.272412][ T4558] dvb-usb: bulk message failed: -22 (2/0) [ 722.295128][ T4558] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 722.335058][ T4558] (NULL device *): no alternate interface [ 722.396145][ T4558] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 722.551557][ T4558] usb 7-1: USB disconnect, device number 7 [ 723.077389][T10684] netlink: 'syz.7.1575': attribute type 1 has an invalid length. [ 724.706532][T10707] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 725.108530][T10716] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 726.701804][T10741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.795702][ T4779] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 727.045476][ T4779] usb 7-1: Using ep0 maxpacket: 16 [ 727.197869][ T4779] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.225007][ T4779] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 727.234288][ T4779] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.292286][T10751] netlink: 'syz.7.1599': attribute type 1 has an invalid length. [ 727.950392][ T4779] usb 7-1: config 0 descriptor?? [ 729.261482][T10755] xt_socket: unknown flags 0x4 [ 729.489028][ T4779] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 729.952878][T10737] xt_TCPMSS: Only works on TCP SYN packets [ 731.422754][T10786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.097557][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 732.361382][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 732.830369][ T4558] usb 7-1: USB disconnect, device number 8 [ 736.255294][ T4779] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 736.456185][ T4779] usb 6-1: Using ep0 maxpacket: 8 [ 736.463988][ T4779] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 736.492571][ T4779] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 736.513259][ T4779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.552161][ T4779] usb 6-1: Product: syz [ 736.566744][ T4779] usb 6-1: Manufacturer: syz [ 736.571412][ T4779] usb 6-1: SerialNumber: syz [ 736.613908][ T4779] usb 6-1: config 0 descriptor?? [ 736.634204][ T4779] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 736.652614][ T4779] usb 6-1: setting power ON [ 736.657797][ T4779] dvb-usb: bulk message failed: -22 (2/0) [ 736.677285][ T4779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 736.703752][ T4779] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 736.728421][ T4779] usb 6-1: media controller created [ 738.937520][ T4779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.015633][ T4779] usb 6-1: selecting invalid altsetting 6 [ 739.035090][ T4779] usb 6-1: digital interface selection failed (-22) [ 739.055341][ T4779] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 739.099185][ T4779] usb 6-1: setting power OFF [ 739.118550][ T4779] dvb-usb: bulk message failed: -22 (2/0) [ 739.124319][ T4779] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 739.175287][ T4779] (NULL device *): no alternate interface [ 740.060714][ T4779] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 740.159397][ T4779] usb 6-1: USB disconnect, device number 7 [ 742.414453][T10865] xt_socket: unknown flags 0x4 [ 744.958516][T10888] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 746.980047][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.106455][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.934850][T10960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.285374][T10985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'. [ 757.350647][T10985] tc_dump_action: action bad kind [ 758.025098][ T6527] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 758.255312][ T6527] usb 7-1: Using ep0 maxpacket: 8 [ 758.261917][ T6527] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 758.292226][ T6527] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 758.332457][ T6527] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.403254][ T6527] usb 7-1: Product: syz [ 758.430517][ T6527] usb 7-1: Manufacturer: syz [ 758.449764][ T6527] usb 7-1: SerialNumber: syz [ 758.558714][ T6527] usb 7-1: config 0 descriptor?? [ 758.607886][ T6527] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 758.652369][ T6527] usb 7-1: setting power ON [ 758.752949][ T6527] dvb-usb: bulk message failed: -22 (2/0) [ 758.877425][ T4558] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 759.050135][ T6527] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 759.112869][ T6527] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 759.155636][ T6527] usb 7-1: media controller created [ 759.771817][ T6527] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 759.789763][ T4558] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 759.811788][ T4558] usb 8-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 759.836873][ T4558] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.861752][ T4558] usb 8-1: config 0 descriptor?? [ 759.888898][ T4558] smsusb:smsusb_probe: board id=8, interface number 0 [ 759.918599][ T4558] smsusb:smsusb_probe: Device initialized with return code -19 [ 760.001156][ T6527] usb 7-1: selecting invalid altsetting 6 [ 760.017624][ T6527] usb 7-1: digital interface selection failed (-22) [ 760.037689][ T6527] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 760.088497][ T6527] usb 7-1: setting power OFF [ 760.102038][ T6527] dvb-usb: bulk message failed: -22 (2/0) [ 760.129309][ T6527] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 760.195725][ T6527] (NULL device *): no alternate interface [ 760.284048][ T6527] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 760.414162][ T6527] usb 7-1: USB disconnect, device number 9 [ 760.427840][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 760.427852][ T26] audit: type=1326 audit(1771282332.593:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 760.530219][T11020] tipc: Started in network mode [ 760.538689][T11020] tipc: Node identity 7f000001, cluster identity 4711 [ 760.609485][T11020] tipc: Enabling of bearer rejected, failed to enable media [ 760.623580][ T26] audit: type=1326 audit(1771282332.633:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 760.646302][ T4779] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 760.835036][ T4779] usb 6-1: Using ep0 maxpacket: 8 [ 760.840469][ T26] audit: type=1326 audit(1771282332.633:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 760.924641][ T4779] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 761.044770][ T4779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.923883][ T26] audit: type=1326 audit(1771282332.653:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 761.969391][ T26] audit: type=1326 audit(1771282332.663:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 762.008885][ T26] audit: type=1326 audit(1771282332.673:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 762.035315][ T26] audit: type=1326 audit(1771282332.683:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 762.057830][ T26] audit: type=1326 audit(1771282332.683:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 762.098995][ T26] audit: type=1326 audit(1771282332.683:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 762.109292][ T4779] usb 6-1: Product: syz [ 762.216468][ T4779] usb 6-1: Manufacturer: syz [ 762.246999][ T4779] usb 6-1: SerialNumber: syz [ 762.303429][ T4779] usb 6-1: config 0 descriptor?? [ 762.435391][ T26] audit: type=1326 audit(1771282332.683:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11002 comm="syz.7.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 763.368957][ T6527] usb 8-1: USB disconnect, device number 4 [ 763.475635][ T4559] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 763.557511][ T4779] usb 6-1: can't set config #0, error -71 [ 763.584644][ T4779] usb 6-1: USB disconnect, device number 8 [ 763.695350][ T4559] usb 5-1: Using ep0 maxpacket: 8 [ 763.702147][ T4559] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 763.724017][ T4559] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 763.743507][ T4559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.761825][ T4559] usb 5-1: Product: syz [ 763.782859][ T4559] usb 5-1: Manufacturer: syz [ 763.810457][ T4559] usb 5-1: SerialNumber: syz [ 763.833916][ T4559] usb 5-1: config 0 descriptor?? [ 763.846331][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 763.859781][ T4559] usb 5-1: setting power ON [ 763.864349][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 763.886154][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.902891][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 763.913917][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 763.923241][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 763.933631][T11078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 763.942620][ T4559] usb 5-1: media controller created [ 764.045951][T11063] dvb-usb: bulk message failed: -22 (3/0) [ 764.066396][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 764.069417][T11063] dvb-usb: bulk message failed: -22 (4/0) [ 764.171228][ T4559] usb 5-1: selecting invalid altsetting 6 [ 764.202002][ T4559] usb 5-1: digital interface selection failed (-22) [ 764.227168][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 764.257481][ T4559] usb 5-1: setting power OFF [ 764.276818][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 764.317211][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 764.358448][ T4559] (NULL device *): no alternate interface [ 764.383022][T11078] ieee802154 phy0 wpan0: encryption failed: -22 [ 764.422593][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 764.474376][ T4559] usb 5-1: USB disconnect, device number 14 [ 764.873678][T11100] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 765.107300][T11112] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 765.255278][ T6527] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 765.445034][ T6527] usb 5-1: Using ep0 maxpacket: 16 [ 765.516510][ T6527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.541694][ T6527] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 765.582185][ T6527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.622525][ T6527] usb 5-1: config 0 descriptor?? [ 766.025275][ T4779] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 766.086299][ T6527] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 766.246501][ T4779] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 766.290641][ T4779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.362673][ T4779] usb 6-1: config 0 descriptor?? [ 766.414100][ T4779] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 766.489466][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 766.542498][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 766.589746][T11108] xt_TCPMSS: Only works on TCP SYN packets [ 766.617181][ T4779] gp8psk: usb in 128 operation failed. [ 766.671331][T11145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 766.824885][ T4779] gp8psk: FW Version = 68.248.173 (0x44f8ad) Build 2048/49/50 [ 767.032318][T11145] ieee802154 phy0 wpan0: encryption failed: -22 [ 767.693255][ T4559] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 768.535251][ T4559] usb 7-1: Using ep0 maxpacket: 8 [ 768.543292][ T4559] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 768.589181][ T4559] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 768.625124][ T4559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.657964][ T4559] usb 7-1: Product: syz [ 768.671181][ T4559] usb 7-1: Manufacturer: syz [ 768.687889][ T4559] usb 7-1: SerialNumber: syz [ 768.721663][ T4559] usb 7-1: config 0 descriptor?? [ 768.806321][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 768.814389][ T4559] usb 7-1: setting power ON [ 768.872751][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 768.895295][ T4779] gp8psk: usb in 149 operation failed. [ 768.900889][ T4779] gp8psk: failed to get FPGA version [ 768.923151][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 768.979414][ T4779] gp8psk: usb in 138 operation failed. [ 768.987246][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 769.029757][ T4779] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 769.043172][ T4559] usb 7-1: media controller created [ 769.090921][ T4779] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 769.208323][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.370572][ T4559] usb 7-1: selecting invalid altsetting 6 [ 769.390525][ T4559] usb 7-1: digital interface selection failed (-22) [ 769.412701][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 769.439094][ T4559] usb 7-1: setting power OFF [ 769.455522][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 769.518878][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 769.585331][ T4559] (NULL device *): no alternate interface [ 769.805226][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 769.920367][ T4440] usb 5-1: USB disconnect, device number 15 [ 769.951038][ T4559] usb 7-1: USB disconnect, device number 10 [ 770.139421][ T4779] usb 6-1: USB disconnect, device number 9 [ 770.993523][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1725'. [ 771.293519][T11204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 771.332459][T11204] device vxcan1 left promiscuous mode [ 771.416512][T11204] device vlan0 left promiscuous mode [ 771.429978][T11204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 771.454273][T11204] IPv6: ADDRCONF(NETDEV_CHANGE): dvmrp1: link becomes ready [ 772.815357][T11214] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.834437][T11215] binder: 11206:11215 unknown command 1077961494 [ 772.901318][T11215] binder: 11206:11215 ioctl c0306201 200000000100 returned -22 [ 773.395617][ T4559] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 773.616104][ T4559] usb 3-1: Using ep0 maxpacket: 8 [ 773.623389][ T4559] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 773.662034][ T4559] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 773.698844][ T4559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.734420][ T4559] usb 3-1: Product: syz [ 773.755723][ T4559] usb 3-1: Manufacturer: syz [ 773.767195][ T4559] usb 3-1: SerialNumber: syz [ 773.789382][ T4559] usb 3-1: config 0 descriptor?? [ 773.819852][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 773.844455][ T4559] usb 3-1: setting power ON [ 773.858269][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 773.883755][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 773.909906][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 773.936883][ T4559] usb 3-1: media controller created [ 774.011224][T11220] dvb-usb: bulk message failed: -22 (3/0) [ 774.037531][T11220] dvb-usb: bulk message failed: -22 (4/0) [ 774.060733][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.129243][ T4559] usb 3-1: selecting invalid altsetting 6 [ 774.145219][ T4559] usb 3-1: digital interface selection failed (-22) [ 774.160808][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 774.185970][ T4559] usb 3-1: setting power OFF [ 774.195185][T11228] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 774.203377][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 774.233920][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 774.295052][ T4559] (NULL device *): no alternate interface [ 774.374870][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 774.431564][ T4559] usb 3-1: USB disconnect, device number 17 [ 775.651694][ T4325] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 775.881855][ T4325] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 775.904017][ T4325] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.971640][ T4325] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 776.018666][ T4325] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.054095][ T4325] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 776.079929][ T4325] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 776.093557][ T4325] usb 8-1: Product: syz [ 776.099946][ T4325] usb 8-1: Manufacturer: syz [ 776.139803][ T4325] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 776.337274][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1734'. [ 776.369972][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1734'. [ 776.394759][ T4559] usb 8-1: USB disconnect, device number 5 [ 777.445776][T11279] vivid-004: disconnect [ 778.611368][T11267] vivid-004: reconnect [ 778.645201][ T4325] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 778.845141][ T4325] usb 7-1: Using ep0 maxpacket: 8 [ 778.856970][ T4325] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 778.906321][ T4325] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 778.944273][ T4325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.993517][ T4325] usb 7-1: Product: syz [ 779.013759][ T4325] usb 7-1: Manufacturer: syz [ 779.023894][ T4325] usb 7-1: SerialNumber: syz [ 779.046937][ T4325] usb 7-1: config 0 descriptor?? [ 779.085621][ T4325] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 779.110568][ T4325] usb 7-1: setting power ON [ 779.120673][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 779.162376][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 779.216823][ T4325] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 779.265622][ T4325] usb 7-1: media controller created [ 779.286054][T11281] dvb-usb: bulk message failed: -22 (3/0) [ 779.295087][T11281] dvb-usb: bulk message failed: -22 (4/0) [ 779.385801][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.490040][ T4325] usb 7-1: selecting invalid altsetting 6 [ 779.543945][ T4325] usb 7-1: digital interface selection failed (-22) [ 779.613338][ T4325] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 779.702556][ T4325] usb 7-1: setting power OFF [ 779.722247][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 779.742289][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 779.803747][ T4325] (NULL device *): no alternate interface [ 779.918117][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 780.027953][ T4325] usb 7-1: USB disconnect, device number 11 [ 780.495531][T11305] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 780.895463][ T4325] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 781.225080][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 781.234309][ T4325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.303523][ T4325] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.352315][ T4325] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.417762][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.486991][ T4325] usb 3-1: Product: syz [ 781.491287][ T4325] usb 3-1: Manufacturer: syz [ 781.501673][ T4325] usb 3-1: SerialNumber: syz [ 781.633381][T11328] ptrace attach of "./syz-executor exec"[4278] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ /dev/snd/seq Àÿ ÿÿÿÿ   ro ./file0 nel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ [ 781.731209][ T4325] usb 3-1: 0:2 : does not exist [ 781.944083][ T4325] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 782.034903][ T4325] usb 3-1: USB disconnect, device number 18 [ 782.555135][T11336] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 784.268858][T11375] netlink: 'syz.5.1768': attribute type 12 has an invalid length. [ 784.865198][T11388] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 788.185358][ T4440] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 788.283960][T11431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.385252][ T4440] usb 5-1: Using ep0 maxpacket: 8 [ 788.396870][ T4440] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 788.424746][ T4440] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 788.485917][ T4440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.493950][ T4440] usb 5-1: Product: syz [ 788.499018][ T4440] usb 5-1: Manufacturer: syz [ 788.503652][ T4440] usb 5-1: SerialNumber: syz [ 788.525192][ T4440] usb 5-1: config 0 descriptor?? [ 788.542674][ T4440] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 788.551994][ T4440] usb 5-1: setting power ON [ 788.557619][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 788.648128][ T4440] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 788.675575][ T4440] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 788.693039][ T4440] usb 5-1: media controller created [ 788.734781][T11427] dvb-usb: bulk message failed: -22 (3/0) [ 788.745230][T11427] dvb-usb: bulk message failed: -22 (4/0) [ 788.748026][ T4440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 788.750970][T11427] cxusb: i2c read failed [ 788.803928][ T4440] usb 5-1: selecting invalid altsetting 6 [ 788.821118][ T4440] usb 5-1: digital interface selection failed (-22) [ 788.844564][ T4440] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 788.874241][ T4440] usb 5-1: setting power OFF [ 788.909854][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 788.923610][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 788.946717][ T4440] (NULL device *): no alternate interface [ 789.013887][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 789.066186][ T4440] usb 5-1: USB disconnect, device number 16 [ 794.995528][ T4325] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 795.240864][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 795.285174][ T4325] usb 5-1: Using ep0 maxpacket: 8 [ 795.291917][ T4325] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 795.335493][ T4325] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 795.431408][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.493188][ T4325] usb 5-1: Product: syz [ 795.532617][ T4325] usb 5-1: Manufacturer: syz [ 795.604294][ T4325] usb 5-1: SerialNumber: syz [ 795.962964][ T4325] usb 5-1: config 0 descriptor?? [ 795.983520][ T4325] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 796.024359][ T4325] usb 5-1: setting power ON [ 796.033056][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 796.050927][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 796.089894][ T4325] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 796.101379][ T4325] usb 5-1: media controller created [ 796.186173][T11499] dvb-usb: bulk message failed: -22 (3/0) [ 796.191961][T11499] dvb-usb: bulk message failed: -22 (4/0) [ 796.210621][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 796.225129][T11499] cxusb: i2c read failed [ 796.300279][ T4325] usb 5-1: selecting invalid altsetting 6 [ 796.318208][ T4325] usb 5-1: digital interface selection failed (-22) [ 796.342786][ T4325] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 796.362293][ T4325] usb 5-1: setting power OFF [ 796.374758][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 796.386404][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 796.421490][ T4325] (NULL device *): no alternate interface [ 796.430455][ T4440] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 796.490812][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 796.575148][ T4325] usb 5-1: USB disconnect, device number 17 [ 796.625321][ T4440] usb 8-1: device descriptor read/64, error -71 [ 796.905544][ T4440] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 797.078426][ T4440] usb 8-1: device descriptor read/64, error -71 [ 798.387108][ T4440] usb usb8-port1: attempt power cycle [ 798.523951][T11536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.096967][ T4440] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 799.294500][ T4440] usb 8-1: device descriptor read/8, error -71 [ 801.785736][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 803.755058][ T4440] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 803.946018][ T4440] usb 6-1: Using ep0 maxpacket: 8 [ 803.959508][ T4440] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 803.978054][ T4440] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 803.988016][ T4325] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 804.005213][ T4440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.029678][ T4440] usb 6-1: Product: syz [ 804.035232][ T4440] usb 6-1: Manufacturer: syz [ 804.039863][ T4440] usb 6-1: SerialNumber: syz [ 804.053090][ T4440] usb 6-1: config 0 descriptor?? [ 804.073315][ T4440] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 804.089424][ T4440] usb 6-1: setting power ON [ 804.098542][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 804.134022][ T4440] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 804.165275][ T4325] usb 3-1: device descriptor read/64, error -71 [ 804.188137][ T4440] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 804.200174][ T4440] usb 6-1: media controller created [ 804.240663][ T4440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.278071][T11593] dvb-usb: bulk message failed: -22 (3/0) [ 804.294100][T11593] dvb-usb: bulk message failed: -22 (4/0) [ 804.303950][T11593] cxusb: i2c read failed [ 804.318188][ T4440] usb 6-1: selecting invalid altsetting 6 [ 804.329465][ T4440] usb 6-1: digital interface selection failed (-22) [ 804.337867][ T4440] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 804.358218][ T4440] usb 6-1: setting power OFF [ 804.362946][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 804.372770][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 804.384248][ T4440] (NULL device *): no alternate interface [ 804.431890][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 804.448045][ T4325] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 804.471159][ T4440] usb 6-1: USB disconnect, device number 10 [ 804.609593][ T4325] usb 3-1: device descriptor read/64, error -71 [ 804.760547][ T4325] usb usb3-port1: attempt power cycle [ 805.109354][T11619] xt_hashlimit: size too large, truncated to 1048576 [ 805.175300][ T4325] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 805.225718][ T4325] usb 3-1: device descriptor read/8, error -71 [ 806.965192][ T4325] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 807.019654][ T4325] usb 3-1: device descriptor read/8, error -71 [ 807.219462][ T4325] usb usb3-port1: unable to enumerate USB device [ 807.281621][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 808.335013][ T4325] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 808.418574][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.426593][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.545083][ T4325] usb 3-1: Using ep0 maxpacket: 8 [ 808.552242][ T4325] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 808.591682][ T4325] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 808.605241][T11662] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 808.643824][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.691392][ T4325] usb 3-1: Product: syz [ 808.705894][ T4325] usb 3-1: Manufacturer: syz [ 808.740845][ T4325] usb 3-1: SerialNumber: syz [ 808.768405][ T4325] usb 3-1: config 0 descriptor?? [ 808.800742][ T4325] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 808.819312][ T4325] usb 3-1: setting power ON [ 808.823854][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 808.876210][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.940834][ T4325] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 808.973032][ T4325] usb 3-1: media controller created [ 808.981773][T11660] dvb-usb: bulk message failed: -22 (3/0) [ 808.993334][T11660] dvb-usb: bulk message failed: -22 (4/0) [ 809.043965][T11660] cxusb: i2c read failed [ 809.058676][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.409494][ T4325] usb 3-1: selecting invalid altsetting 6 [ 810.485279][ T4325] usb 3-1: digital interface selection failed (-22) [ 810.501388][ T4325] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 810.519384][ T4325] usb 3-1: setting power OFF [ 810.529833][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 810.539858][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 810.558343][ T4325] (NULL device *): no alternate interface [ 810.579960][T11677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.649072][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 810.664260][ T4325] usb 3-1: USB disconnect, device number 23 [ 810.706349][ T126] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 810.885141][ T126] usb 6-1: device descriptor read/64, error -71 [ 811.045437][T11688] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 811.159380][ T126] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 811.335317][ T126] usb 6-1: device descriptor read/64, error -71 [ 811.477027][ T126] usb usb6-port1: attempt power cycle [ 811.945168][ T126] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 812.265610][ T126] usb 6-1: device descriptor read/8, error -71 [ 813.495148][ T7] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 815.165008][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 815.195055][ T7] usb 8-1: device descriptor read/all, error -71 [ 815.935177][ T126] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 815.976825][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 816.007628][ T126] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 816.044222][ T126] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 816.082669][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.099792][ T126] usb 6-1: Product: syz [ 816.116205][ T126] usb 6-1: Manufacturer: syz [ 816.129273][ T126] usb 6-1: SerialNumber: syz [ 816.154239][ T126] usb 6-1: config 0 descriptor?? [ 816.181037][ T126] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 816.210226][ T126] usb 6-1: setting power ON [ 816.222288][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 816.242388][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 816.267022][ T126] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 816.280169][ T126] usb 6-1: media controller created [ 816.363252][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.376982][T11728] dvb-usb: bulk message failed: -22 (3/0) [ 816.404137][T11728] dvb-usb: bulk message failed: -22 (4/0) [ 816.474189][T11728] cxusb: i2c read failed [ 816.519429][ T126] usb 6-1: selecting invalid altsetting 6 [ 816.530146][ T126] usb 6-1: digital interface selection failed (-22) [ 816.538098][ T126] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 816.577991][ T126] usb 6-1: setting power OFF [ 816.592173][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 816.642873][ T126] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 816.703046][ T126] (NULL device *): no alternate interface [ 816.795986][ T126] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 816.862444][ T126] usb 6-1: USB disconnect, device number 14 [ 819.325626][T11758] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 819.566308][T11764] vivid-004: disconnect [ 819.802875][ T4325] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 820.531916][T11755] vivid-004: reconnect [ 820.549452][T11772] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 820.558763][T11772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 820.567098][T11772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.595112][ T4325] usb 7-1: Using ep0 maxpacket: 16 [ 820.602733][ T4325] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 820.621872][ T4325] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 820.643936][ T4325] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 820.654559][ T4325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.669568][ T4325] usb 7-1: Product: syz [ 820.673743][ T4325] usb 7-1: Manufacturer: syz [ 820.683014][ T4325] usb 7-1: SerialNumber: syz [ 820.727437][T11773] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.916113][ T4325] usb 7-1: 0:2 : does not exist [ 820.966548][ T4325] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 821.006452][ T4325] usb 7-1: USB disconnect, device number 12 [ 821.236048][ T9041] udevd[9041]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 822.145977][T11790] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 824.095883][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1895'. [ 824.162451][T11808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.511299][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 824.521246][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 824.530073][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 824.700520][T11814] ieee802154 phy0 wpan0: encryption failed: -22 [ 825.879740][T11821] binder: 11816:11821 unknown command 1077961494 [ 825.985126][T11821] binder: 11816:11821 ioctl c0306201 200000000100 returned -22 [ 826.215432][T11831] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 826.433873][T11826] xt_hashlimit: size too large, truncated to 1048576 [ 826.527414][T11835] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 826.557107][T11835] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 826.620819][T11835] pit: kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 826.659397][T11835] pit: kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 826.694126][T11835] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 826.743354][T11846] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 826.758915][T11835] pit: kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 826.804510][T11835] pit: kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 826.846952][T11835] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 826.878206][T11835] pit: kvm: requested 64533 ns i8254 timer period limited to 200000 ns [ 826.930740][T11835] pit: kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 829.388651][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1911'. [ 829.442240][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.331195][T11890] netlink: 'syz.6.1917': attribute type 24 has an invalid length. [ 831.644914][T11899] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 832.830375][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 833.853538][T11917] xt_socket: unknown flags 0x4 [ 834.464509][T11922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.811212][T11949] binder: 11945:11949 unknown command 1077961494 [ 837.928775][T11949] binder: 11945:11949 ioctl c0306201 200000000100 returned -22 [ 840.336775][T11984] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 840.746120][ T4440] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 841.065135][ T4440] usb 3-1: Using ep0 maxpacket: 16 [ 841.074284][ T4440] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.795209][ T4440] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 841.886763][ T4440] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 841.917978][ T4440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.938292][ T4440] usb 3-1: Product: syz [ 841.951542][ T4440] usb 3-1: Manufacturer: syz [ 841.972717][ T4440] usb 3-1: SerialNumber: syz [ 842.268628][ T4440] usb 3-1: 0:2 : does not exist [ 842.300443][ T4440] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 842.334543][ T4440] usb 3-1: USB disconnect, device number 24 [ 842.615875][ T9041] udevd[9041]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.055356][T12020] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 843.963806][T12050] create_pit_timer: 12 callbacks suppressed [ 843.963818][T12050] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 844.026458][T12050] pit: kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 844.052480][T12050] pit: kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 844.097240][T12050] pit: kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 844.124530][T12050] pit: kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 844.167354][T12050] pit: kvm: requested 20952 ns i8254 timer period limited to 200000 ns [ 844.226731][T12050] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 844.271025][T12050] pit: kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 844.312540][T12050] pit: kvm: requested 153371 ns i8254 timer period limited to 200000 ns [ 844.785078][T12073] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 845.004148][T12074] xt_hashlimit: size too large, truncated to 1048576 [ 847.645255][T12090] syz.2.1964 (12090) used greatest stack depth: 20208 bytes left [ 848.497032][ T126] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 848.721451][ T126] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 848.764976][ T126] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 848.819883][ T126] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 848.914249][ T126] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 848.948094][ T126] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 849.040147][ T126] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 849.070461][ T126] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 849.122435][ T126] usb 7-1: Product: syz [ 849.125873][T12136] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 849.163273][ T126] usb 7-1: Manufacturer: syz [ 849.199936][ T126] cdc_wdm 7-1:1.0: skipping garbage [ 849.209459][ T126] cdc_wdm 7-1:1.0: skipping garbage [ 849.230283][ T126] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 849.266867][ T126] cdc_wdm 7-1:1.0: Unknown control protocol [ 849.574527][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 849.581402][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 849.589328][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 849.595956][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 849.603304][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 849.609916][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 849.617077][ T4558] usb 7-1: USB disconnect, device number 13 [ 849.746246][T12154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 850.253652][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 850.879813][T12182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 850.967411][T12182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 851.097491][T12182] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 851.250728][T12190] ieee802154 phy0 wpan0: encryption failed: -22 [ 852.695135][T12203] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 852.903326][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1988'. [ 852.914806][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1989'. [ 853.160614][T12214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.411327][T12221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.842469][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1993'. [ 854.393069][T12242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.475553][T12242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 855.389468][T12242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 855.719418][T12242] ieee802154 phy0 wpan0: encryption failed: -22 [ 856.611718][T12264] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 856.675814][T12265] binder: 12260:12265 unknown command 1077961494 [ 856.697440][T12265] binder: 12260:12265 ioctl c0306201 200000000100 returned -22 [ 856.984056][T12274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.026379][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2005'. [ 858.323217][T12289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 858.334410][T12289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 858.343016][T12289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 858.981489][T12289] ieee802154 phy0 wpan0: encryption failed: -22 [ 859.605706][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 862.009844][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 862.026685][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.034246][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 862.174052][T12330] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.846464][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 867.903170][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 867.935226][T12398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 868.168538][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2046'. [ 868.266910][T12401] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.865348][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.871767][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.305066][ T126] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 870.505027][ T4779] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 870.515300][ T126] usb 7-1: Using ep0 maxpacket: 8 [ 870.534754][ T126] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 870.563157][ T126] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 870.582486][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.611345][ T126] usb 7-1: Product: syz [ 870.627036][ T126] usb 7-1: Manufacturer: syz [ 870.633286][T12423] xt_hashlimit: size too large, truncated to 1048576 [ 870.640275][ T126] usb 7-1: SerialNumber: syz [ 870.676173][ T126] usb 7-1: config 0 descriptor?? [ 870.706393][ T126] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 870.724992][ T4779] usb 8-1: Using ep0 maxpacket: 8 [ 870.731120][ T126] usb 7-1: setting power ON [ 870.736883][ T4779] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 870.763021][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 870.776882][ T4779] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 870.820236][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 870.829881][ T4779] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.840797][ T126] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 870.855180][ T4779] usb 8-1: Product: syz [ 870.859464][ T4779] usb 8-1: Manufacturer: syz [ 870.877362][ T126] usb 7-1: media controller created [ 870.882757][ T4779] usb 8-1: SerialNumber: syz [ 870.904379][T12420] cxusb: i2c rd: len=80 is too big! [ 870.904379][T12420] [ 870.919990][ T4779] usb 8-1: config 0 descriptor?? [ 870.938007][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 870.965884][ T4779] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 870.992062][ T4779] usb 8-1: setting power ON [ 871.000794][ T126] usb 7-1: selecting invalid altsetting 6 [ 871.006852][ T4779] dvb-usb: bulk message failed: -22 (2/0) [ 871.015210][ T126] usb 7-1: digital interface selection failed (-22) [ 871.033804][ T4779] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 871.044878][ T126] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 871.057230][ T4779] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 871.070624][ T126] usb 7-1: setting power OFF [ 871.081264][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 871.090080][ T4779] usb 8-1: media controller created [ 871.115040][ T126] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 871.165586][T12422] dvb-usb: bulk message failed: -22 (3/0) [ 871.177061][T12422] dvb-usb: bulk message failed: -22 (4/0) [ 871.191186][T12422] cxusb: i2c read failed [ 871.205349][ T126] (NULL device *): no alternate interface [ 871.206850][ T4779] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.338016][ T126] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 871.351463][ T4779] usb 8-1: selecting invalid altsetting 6 [ 871.367559][ T4779] usb 8-1: digital interface selection failed (-22) [ 871.384743][ T126] usb 7-1: USB disconnect, device number 14 [ 871.402692][ T4779] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 871.435524][ T4779] usb 8-1: setting power OFF [ 871.450210][ T4779] dvb-usb: bulk message failed: -22 (2/0) [ 871.456992][ T4779] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 871.466866][ T4779] (NULL device *): no alternate interface [ 871.526765][ T4779] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 871.599298][ T4779] usb 8-1: USB disconnect, device number 12 [ 871.781679][T12439] binder: 12434:12439 unknown command 1077961494 [ 871.791786][T12439] binder: 12434:12439 ioctl c0306201 200000000100 returned -22 [ 873.166700][T12453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 874.155238][T12453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 874.162846][T12453] IPv6: ADDRCONF(NETDEV_CHANGE): dvmrp1: link becomes ready [ 874.292127][T12453] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.826930][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 877.516890][T12526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.547603][T12527] fuse: Bad value for 'fd' [ 877.702172][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 877.882610][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 877.892820][T12529] IPv6: ADDRCONF(NETDEV_CHANGE): dvmrp1: link becomes ready [ 877.913770][T12524] netlink: 'syz.7.2070': attribute type 12 has an invalid length. [ 877.950871][T12529] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.041017][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2083'. [ 881.120481][T12591] xt_hashlimit: size too large, truncated to 1048576 [ 881.859120][T12594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.328164][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 882.361722][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 882.378072][T12598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 883.846820][T12598] ieee802154 phy0 wpan0: encryption failed: -22 [ 884.965206][ T4325] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 885.175019][ T4325] usb 8-1: Using ep0 maxpacket: 8 [ 885.184366][ T4325] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 885.226084][ T4325] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 885.262134][ T4325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.312526][ T4325] usb 8-1: Product: syz [ 885.331790][ T4325] usb 8-1: Manufacturer: syz [ 885.350637][ T4325] usb 8-1: SerialNumber: syz [ 885.393501][ T4325] usb 8-1: config 0 descriptor?? [ 885.446993][ T4325] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 885.497236][ T4325] usb 8-1: setting power ON [ 885.512976][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 885.565622][ T4325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 885.609404][ T4325] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 885.635104][ T4325] usb 8-1: media controller created [ 885.644655][T12624] dvb-usb: bulk message failed: -22 (3/0) [ 885.655279][T12624] dvb-usb: bulk message failed: -22 (4/0) [ 885.676962][T12624] cxusb: i2c read failed [ 885.686850][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 885.777269][ T4325] usb 8-1: selecting invalid altsetting 6 [ 885.797382][ T4325] usb 8-1: digital interface selection failed (-22) [ 885.898625][ T4325] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 885.964658][ T4325] usb 8-1: setting power OFF [ 885.972659][ T4325] dvb-usb: bulk message failed: -22 (2/0) [ 885.990750][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 886.025316][ T4325] (NULL device *): no alternate interface [ 886.099263][ T4325] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 886.134306][ T4325] usb 8-1: USB disconnect, device number 13 [ 889.589619][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 889.589630][ T26] audit: type=1326 audit(1771282461.763:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 889.641399][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2103'. [ 889.764996][ T26] audit: type=1326 audit(1771282461.793:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 889.875043][ T26] audit: type=1326 audit(1771282461.793:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 889.967702][ T26] audit: type=1326 audit(1771282461.793:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.069735][ T26] audit: type=1326 audit(1771282461.793:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.268188][ T26] audit: type=1326 audit(1771282461.793:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.477222][ T26] audit: type=1326 audit(1771282461.793:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.508977][ T26] audit: type=1326 audit(1771282461.793:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.585087][ T26] audit: type=1326 audit(1771282461.793:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.617172][ T26] audit: type=1326 audit(1771282461.793:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 890.705026][ T4559] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 890.867533][T12700] netlink: 'syz.7.2107': attribute type 12 has an invalid length. [ 890.915093][ T4559] usb 3-1: Using ep0 maxpacket: 8 [ 890.921853][ T4559] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 890.947564][ T4559] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 890.994005][ T4559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.022332][ T4559] usb 3-1: Product: syz [ 891.048542][ T4559] usb 3-1: Manufacturer: syz [ 891.073627][ T4559] usb 3-1: SerialNumber: syz [ 891.101358][ T4559] usb 3-1: config 0 descriptor?? [ 891.162912][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 891.181940][ T4559] usb 3-1: setting power ON [ 891.190664][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 891.208734][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 891.232151][T12676] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2105'. [ 891.244578][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 891.265324][T12676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.274855][T12676] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 891.290693][ T4559] usb 3-1: media controller created [ 891.339016][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 891.350512][T12691] dvb-usb: bulk message failed: -22 (3/0) [ 891.366469][T12691] dvb-usb: bulk message failed: -22 (4/0) [ 891.372289][T12691] cxusb: i2c read failed [ 891.444750][ T4559] usb 3-1: selecting invalid altsetting 6 [ 891.475221][ T4559] usb 3-1: digital interface selection failed (-22) [ 891.485498][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 891.534478][ T4559] usb 3-1: setting power OFF [ 891.555347][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 891.561121][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 891.634017][ T4559] (NULL device *): no alternate interface [ 891.715349][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 891.801330][ T4559] usb 3-1: USB disconnect, device number 25 [ 897.556306][T12791] xt_hashlimit: size too large, truncated to 1048576 [ 900.164969][ T4440] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 900.355348][ T4440] usb 7-1: Using ep0 maxpacket: 8 [ 900.370219][ T4440] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 900.441546][ T4440] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 900.479920][ T4440] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.518303][ T4440] usb 7-1: Product: syz [ 900.522743][ T4440] usb 7-1: Manufacturer: syz [ 900.579086][ T4440] usb 7-1: SerialNumber: syz [ 900.621720][ T4440] usb 7-1: config 0 descriptor?? [ 900.671263][ T4440] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 900.735032][ T4440] usb 7-1: setting power ON [ 900.751475][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 900.784185][ T4440] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 900.835045][ T4440] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 900.863868][T12808] dvb-usb: bulk message failed: -22 (3/0) [ 900.884098][T12808] dvb-usb: bulk message failed: -22 (4/0) [ 900.909285][ T4440] usb 7-1: media controller created [ 900.936011][T12808] cxusb: i2c read failed [ 901.029736][ T4440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.085535][ T4440] usb 7-1: selecting invalid altsetting 6 [ 901.091558][ T4440] usb 7-1: digital interface selection failed (-22) [ 901.102873][ T4440] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 901.133924][ T4440] usb 7-1: setting power OFF [ 901.191959][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 901.223880][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 901.307869][ T4440] (NULL device *): no alternate interface [ 901.381319][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 901.593752][ T4440] usb 7-1: USB disconnect, device number 15 [ 901.889657][T12833] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 901.995186][T12833] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 902.020105][T12833] IPv6: ADDRCONF(NETDEV_CHANGE): dvmrp1: link becomes ready [ 902.214713][T12836] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.705440][ T4559] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 905.934990][ T4559] usb 6-1: Using ep0 maxpacket: 8 [ 905.941567][ T4559] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 905.992797][ T4559] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 906.042701][ T4559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.083197][ T4559] usb 6-1: Product: syz [ 906.093321][ T4559] usb 6-1: Manufacturer: syz [ 906.123700][ T4559] usb 6-1: SerialNumber: syz [ 906.185849][ T4559] usb 6-1: config 0 descriptor?? [ 906.218319][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 906.245360][ T4559] usb 6-1: setting power ON [ 906.261487][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 906.296203][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.351795][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 906.394501][T12878] dvb-usb: bulk message failed: -22 (3/0) [ 906.401151][ T4559] usb 6-1: media controller created [ 906.406894][T12878] dvb-usb: bulk message failed: -22 (4/0) [ 906.412676][T12878] cxusb: i2c read failed [ 906.481757][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.568774][ T4559] usb 6-1: selecting invalid altsetting 6 [ 906.625861][ T4559] usb 6-1: digital interface selection failed (-22) [ 906.697230][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 906.773659][ T4559] usb 6-1: setting power OFF [ 906.845078][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 906.910813][T12901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2143'. [ 906.917134][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 907.034082][ T4559] (NULL device *): no alternate interface [ 907.129781][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 907.219655][ T4559] usb 6-1: USB disconnect, device number 15 [ 909.480088][T12938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.327035][T12957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2156'. [ 910.465053][ T4559] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 910.665008][ T4559] usb 8-1: Using ep0 maxpacket: 8 [ 910.671894][ T4559] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 910.737451][ T4559] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 910.798419][ T4559] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.806909][T12968] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 910.859100][ T4559] usb 8-1: Product: syz [ 910.863329][ T4559] usb 8-1: Manufacturer: syz [ 910.913236][ T4559] usb 8-1: SerialNumber: syz [ 910.969511][ T4559] usb 8-1: config 0 descriptor?? [ 911.033088][ T4559] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 911.063029][ T4559] usb 8-1: setting power ON [ 911.072405][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 911.099703][ T4559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 911.115907][ T4559] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 911.131491][ T4559] usb 8-1: media controller created [ 911.207736][T12954] dvb-usb: bulk message failed: -22 (3/0) [ 911.218672][ T4559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.228913][T12954] dvb-usb: bulk message failed: -22 (4/0) [ 911.236833][T12954] cxusb: i2c read failed [ 911.265154][ T4565] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 911.319412][ T4559] usb 8-1: selecting invalid altsetting 6 [ 911.325320][ T4559] usb 8-1: digital interface selection failed (-22) [ 911.356905][ T4559] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 911.382023][ T4559] usb 8-1: setting power OFF [ 911.389695][ T4559] dvb-usb: bulk message failed: -22 (2/0) [ 911.399630][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 911.426280][ T4559] (NULL device *): no alternate interface [ 911.465127][ T4565] usb 5-1: Using ep0 maxpacket: 16 [ 911.493103][ T4565] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 911.511208][ T4565] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 911.521617][ T4559] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 911.557113][ T4559] usb 8-1: USB disconnect, device number 14 [ 911.569412][ T4565] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 911.580530][ T4565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.600976][ T4565] usb 5-1: Product: syz [ 911.608660][ T4565] usb 5-1: Manufacturer: syz [ 911.624604][ T4565] usb 5-1: SerialNumber: syz [ 911.848861][ T4565] usb 5-1: 0:2 : does not exist [ 911.862573][ T4565] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 912.023670][ T4565] usb 5-1: USB disconnect, device number 18 [ 912.135520][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 912.135534][ T26] audit: type=1326 audit(1771282484.313:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.194442][ T26] audit: type=1326 audit(1771282484.313:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.246477][ T26] audit: type=1326 audit(1771282484.343:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.272610][ T26] audit: type=1326 audit(1771282484.343:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.307578][ T26] audit: type=1326 audit(1771282484.343:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.343420][ T26] audit: type=1326 audit(1771282484.343:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.394989][ T26] audit: type=1326 audit(1771282484.343:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.489936][ T26] audit: type=1326 audit(1771282484.343:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.7.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7432f9bf79 code=0x7ffc0000 [ 912.534696][T13001] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2167'. [ 913.794233][T13022] binder: 13017:13022 unknown command 1077961494 [ 913.815022][T13022] binder: 13017:13022 ioctl c0306201 200000000100 returned -22 [ 914.165256][T13028] batman_adv: batadv0: Adding interface: dummy0 [ 914.212695][T13028] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.328821][T13028] batman_adv: batadv0: Interface activated: dummy0 [ 914.529616][T13033] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2178'. [ 916.988701][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2189'. [ 917.245043][ T4565] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 917.455365][ T4565] usb 5-1: Using ep0 maxpacket: 8 [ 917.462677][ T4565] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 917.479473][ T4565] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 917.495098][ T4565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.503314][ T4565] usb 5-1: Product: syz [ 917.507623][ T4565] usb 5-1: Manufacturer: syz [ 917.512427][ T4565] usb 5-1: SerialNumber: syz [ 917.522237][ T4565] usb 5-1: config 0 descriptor?? [ 917.531816][ T4565] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 917.548460][ T4565] usb 5-1: setting power ON [ 917.555167][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 917.569391][ T4565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 917.581667][ T4565] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 917.590494][ T4565] usb 5-1: media controller created [ 917.674176][ T4565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 917.737831][ T4565] usb 5-1: selecting invalid altsetting 6 [ 917.753910][ T4565] usb 5-1: digital interface selection failed (-22) [ 917.772395][ T4565] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 917.803581][ T4565] usb 5-1: setting power OFF [ 917.821999][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 917.840980][T13088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 917.875674][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 917.901576][T13088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 917.928634][ T4565] (NULL device *): no alternate interface [ 917.948674][T13088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 917.982647][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 918.055429][ T4565] usb 5-1: USB disconnect, device number 19 [ 922.123276][T13150] binder: 13149:13150 unknown command 1074553619 [ 922.162747][T13150] binder: 13149:13150 ioctl c0306201 200000000280 returned -22 [ 922.434012][T13163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 922.472443][T13163] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 922.515181][T13163] IPv6: ADDRCONF(NETDEV_CHANGE): dvmrp1: link becomes ready [ 922.615437][ T6527] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 922.702054][T13170] netlink: 'syz.4.2203': attribute type 12 has an invalid length. [ 922.815003][ T6527] usb 7-1: Using ep0 maxpacket: 8 [ 922.829476][ T6527] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 922.857063][ T6527] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 922.895885][ T6527] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.925102][ T6527] usb 7-1: Product: syz [ 922.929310][ T6527] usb 7-1: Manufacturer: syz [ 922.933933][ T6527] usb 7-1: SerialNumber: syz [ 922.963160][ T6527] usb 7-1: config 0 descriptor?? [ 922.996263][ T6527] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 923.012028][ T6527] usb 7-1: setting power ON [ 923.021525][ T6527] dvb-usb: bulk message failed: -22 (2/0) [ 923.049160][ T6527] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 923.065413][ T6527] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 923.081810][ T6527] usb 7-1: media controller created [ 923.104158][ T6527] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 923.140146][ T6527] usb 7-1: selecting invalid altsetting 6 [ 923.155189][ T6527] usb 7-1: digital interface selection failed (-22) [ 923.171699][ T6527] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 923.209548][ T6527] usb 7-1: setting power OFF [ 923.227422][ T6527] dvb-usb: bulk message failed: -22 (2/0) [ 923.233264][ T6527] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 923.259715][ T6527] (NULL device *): no alternate interface [ 923.347020][ T6527] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 923.456465][ T6527] usb 7-1: USB disconnect, device number 16 [ 926.554031][T13217] binder: 13210:13217 unknown command 1077961494 [ 926.583669][T13217] binder: 13210:13217 ioctl c0306201 200000000100 returned -22 [ 928.015052][T12704] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 928.215097][T12704] usb 3-1: Using ep0 maxpacket: 8 [ 928.230856][T12704] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 928.290608][T12704] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 928.326592][T12704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.355212][T12704] usb 3-1: Product: syz [ 928.359411][T12704] usb 3-1: Manufacturer: syz [ 928.364023][T12704] usb 3-1: SerialNumber: syz [ 928.423715][T12704] usb 3-1: config 0 descriptor?? [ 928.476505][T12704] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 928.535444][T12704] usb 3-1: setting power ON [ 928.559840][T12704] dvb-usb: bulk message failed: -22 (2/0) [ 928.631407][T12704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 928.681522][T12704] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 928.730989][T12704] usb 3-1: media controller created [ 928.836106][T12704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.974001][T12704] usb 3-1: selecting invalid altsetting 6 [ 928.987109][T12704] usb 3-1: digital interface selection failed (-22) [ 929.007396][T12704] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 929.050240][T12704] usb 3-1: setting power OFF [ 929.076142][T12704] dvb-usb: bulk message failed: -22 (2/0) [ 929.104582][T12704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 929.138291][T12704] (NULL device *): no alternate interface [ 929.226612][T12704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 929.328503][T12704] usb 3-1: USB disconnect, device number 26 [ 931.300568][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.306954][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.150869][T13313] vivid-004: disconnect [ 934.245057][T12704] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 934.444955][T12704] usb 5-1: Using ep0 maxpacket: 8 [ 934.451574][T12704] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 934.484807][T12704] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 934.571041][T12704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.586982][T12704] usb 5-1: Product: syz [ 934.601339][T12704] usb 5-1: Manufacturer: syz [ 934.606194][T12704] usb 5-1: SerialNumber: syz [ 934.622736][T12704] usb 5-1: config 0 descriptor?? [ 934.687022][T12704] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 934.710642][T12704] usb 5-1: setting power ON [ 934.742948][T12704] dvb-usb: bulk message failed: -22 (2/0) [ 934.757451][T12704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 934.815763][T12704] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 934.830884][T12704] usb 5-1: media controller created [ 934.896103][T12704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.945632][T12704] usb 5-1: selecting invalid altsetting 6 [ 934.961575][T12704] usb 5-1: digital interface selection failed (-22) [ 934.985005][T12704] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 935.035242][T12704] usb 5-1: setting power OFF [ 935.040266][T12704] dvb-usb: bulk message failed: -22 (2/0) [ 935.075082][T12704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 935.122915][T12704] (NULL device *): no alternate interface [ 935.161448][T13303] vivid-004: reconnect [ 935.267689][T12704] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 935.329837][T12704] usb 5-1: USB disconnect, device number 20 [ 938.126845][ T126] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 938.338067][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 938.348110][ T126] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 938.395738][ T126] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 938.424972][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.459954][ T126] usb 3-1: Product: syz [ 938.478092][ T126] usb 3-1: Manufacturer: syz [ 938.482733][ T126] usb 3-1: SerialNumber: syz [ 938.593616][ T126] usb 3-1: config 0 descriptor?? [ 938.653462][ T126] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 938.781564][ T126] usb 3-1: setting power ON [ 938.786604][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 938.804289][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 938.858291][ T126] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 938.937088][ T126] usb 3-1: media controller created [ 939.005002][ T4440] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 939.042211][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.171902][ T126] usb 3-1: selecting invalid altsetting 6 [ 939.212442][ T126] usb 3-1: digital interface selection failed (-22) [ 939.237780][ T4440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18135, setting to 1024 [ 939.264817][ T126] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 939.273629][ T4440] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.01 [ 939.293728][ T4440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.301952][ T126] usb 3-1: setting power OFF [ 939.313481][ T126] dvb-usb: bulk message failed: -22 (2/0) [ 939.455506][ T4440] usb 5-1: config 0 descriptor?? [ 939.460581][ T126] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 939.523258][ T4440] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 939.547570][ T126] (NULL device *): no alternate interface [ 939.670699][ T126] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 939.804540][ T126] usb 3-1: USB disconnect, device number 27 [ 941.158963][ T4440] usb 5-1: USB disconnect, device number 21 [ 943.755069][ T4565] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 943.995353][ T4565] usb 7-1: Using ep0 maxpacket: 8 [ 944.005631][ T4565] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 944.110729][ T4565] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 945.119434][ T4565] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.168264][ T4565] usb 7-1: Product: syz [ 945.189033][ T4565] usb 7-1: Manufacturer: syz [ 945.214068][ T4565] usb 7-1: SerialNumber: syz [ 945.247845][ T4565] usb 7-1: config 0 descriptor?? [ 945.291011][ T4565] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 945.320067][ T4565] usb 7-1: setting power ON [ 945.324748][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 945.396534][ T4565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 945.453141][ T4565] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 945.492330][ T4565] usb 7-1: media controller created [ 945.537824][ T4565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 945.588582][ T4565] usb 7-1: selecting invalid altsetting 6 [ 945.599657][ T4565] usb 7-1: digital interface selection failed (-22) [ 945.612476][ T4565] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 945.632079][ T4565] usb 7-1: setting power OFF [ 945.644461][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 945.664698][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 945.684542][ T4565] (NULL device *): no alternate interface [ 945.702251][T13484] xt_hashlimit: size too large, truncated to 1048576 [ 945.739057][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 945.781192][ T4565] usb 7-1: USB disconnect, device number 17 [ 946.112790][ T26] audit: type=1326 audit(1771282518.283:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 946.240178][ T26] audit: type=1326 audit(1771282518.283:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 946.334141][ T26] audit: type=1326 audit(1771282518.283:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 946.437786][ T26] audit: type=1326 audit(1771282518.283:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.4.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243599bf79 code=0x7ffc0000 [ 946.705064][T13501] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 946.820519][T13505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 947.104984][T12704] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 947.145863][T13509] binder: 13506:13509 unknown command 1077961494 [ 947.152546][T13509] binder: 13506:13509 ioctl c0306201 200000000100 returned -22 [ 947.295102][T12704] usb 7-1: Using ep0 maxpacket: 16 [ 947.304763][T12704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.348564][T12704] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 947.372133][T12704] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 947.418009][T12704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.472786][T12704] usb 7-1: Product: syz [ 947.491655][T12704] usb 7-1: Manufacturer: syz [ 947.512138][T12704] usb 7-1: SerialNumber: syz [ 947.765735][T12704] usb 7-1: 0:2 : does not exist [ 947.785934][T12704] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 947.865220][T12704] usb 7-1: USB disconnect, device number 18 [ 948.756211][T13521] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 950.837329][T13543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2290'. [ 951.071975][T13548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.228975][T13540] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2288'. [ 951.555031][ T4565] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 951.754976][ T4565] usb 3-1: Using ep0 maxpacket: 8 [ 951.761796][ T4565] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 951.792028][ T4565] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 951.815051][ T4565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.827714][ T4565] usb 3-1: Product: syz [ 951.831987][ T4565] usb 3-1: Manufacturer: syz [ 951.837827][ T4565] usb 3-1: SerialNumber: syz [ 951.844290][ T4565] usb 3-1: config 0 descriptor?? [ 951.852923][ T4565] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 951.864201][ T4565] usb 3-1: setting power ON [ 951.871213][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 951.885419][ T4565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 951.900336][ T4565] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 951.909272][ T4565] usb 3-1: media controller created [ 951.937994][ T4565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 951.965873][ T4565] usb 3-1: selecting invalid altsetting 6 [ 951.971790][ T4565] usb 3-1: digital interface selection failed (-22) [ 951.978769][ T4565] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 952.734476][ T4565] usb 3-1: setting power OFF [ 952.798079][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 952.803827][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 952.844517][ T4565] (NULL device *): no alternate interface [ 952.990727][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 953.027218][ T4565] usb 3-1: USB disconnect, device number 28 [ 953.034282][ T9041] udevd[9041]: setting owner of /dev/bus/usb/003/028 to uid=0, gid=0 failed: No such file or directory [ 956.265015][ T4565] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 956.435027][T13623] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 956.484974][ T4565] usb 6-1: Using ep0 maxpacket: 8 [ 956.491934][ T4565] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 956.537618][ T4565] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 956.568561][ T4565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.603657][ T4565] usb 6-1: Product: syz [ 956.617218][ T4565] usb 6-1: Manufacturer: syz [ 956.634235][ T4565] usb 6-1: SerialNumber: syz [ 956.663013][ T4565] usb 6-1: config 0 descriptor?? [ 956.716968][ T4565] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 956.744944][ T4565] usb 6-1: setting power ON [ 956.755108][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 956.803005][ T4565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 956.843804][ T4565] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 956.886855][T13616] dvb-usb: bulk message failed: -22 (3/0) [ 956.892616][T13616] dvb-usb: bulk message failed: -22 (3/0) [ 956.914974][ T4565] usb 6-1: media controller created [ 956.974666][ T4565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 957.032920][ T4565] usb 6-1: selecting invalid altsetting 6 [ 957.064395][ T4565] usb 6-1: digital interface selection failed (-22) [ 957.121933][ T4565] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 957.181920][ T4565] usb 6-1: setting power OFF [ 957.283507][ T4565] dvb-usb: bulk message failed: -22 (2/0) [ 957.338584][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 957.360477][ T4565] (NULL device *): no alternate interface [ 957.391746][T13648] vivid-004: disconnect [ 957.503446][ T4565] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 957.541692][ T4565] usb 6-1: USB disconnect, device number 16 [ 958.038516][T13639] vivid-004: reconnect [ 960.905475][T13679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2324'. [ 960.985229][T13678] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 961.405169][ T4559] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 961.609186][ T4559] usb 7-1: Using ep0 maxpacket: 16 [ 961.616039][ T4559] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.649390][ T4559] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 961.678960][ T4559] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.694944][ T4559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.699680][ T4440] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 961.702942][ T4559] usb 7-1: Product: syz [ 961.744925][ T4559] usb 7-1: Manufacturer: syz [ 961.749652][ T4559] usb 7-1: SerialNumber: syz [ 961.904918][ T4440] usb 3-1: Using ep0 maxpacket: 8 [ 961.911970][ T4440] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 961.948801][ T4440] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 961.962326][ T4440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.971919][ T4440] usb 3-1: Product: syz [ 961.984130][ T4440] usb 3-1: Manufacturer: syz [ 961.987493][ T4559] usb 7-1: 0:2 : does not exist [ 962.000939][ T4440] usb 3-1: SerialNumber: syz [ 962.002849][ T4559] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 962.027154][ T4440] usb 3-1: config 0 descriptor?? [ 962.051540][ T4440] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 962.056959][T13702] xt_hashlimit: size too large, truncated to 1048576 [ 962.087414][ T4559] usb 7-1: USB disconnect, device number 19 [ 962.103977][ T9041] udevd[9041]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.141576][ T4440] usb 3-1: setting power ON [ 962.150248][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 962.183877][ T4440] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 962.242041][ T4440] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 962.261960][T13696] dvb-usb: bulk message failed: -22 (3/0) [ 962.275072][T13696] dvb-usb: bulk message failed: -22 (3/0) [ 962.302027][ T4440] usb 3-1: media controller created [ 962.374385][ T4440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 962.441320][ T4440] usb 3-1: selecting invalid altsetting 6 [ 962.495077][ T4440] usb 3-1: digital interface selection failed (-22) [ 962.503426][ T4440] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 962.554127][ T4440] usb 3-1: setting power OFF [ 962.574330][ T4440] dvb-usb: bulk message failed: -22 (2/0) [ 962.594264][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 962.616091][ T4440] (NULL device *): no alternate interface [ 962.708779][ T4440] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 962.761338][ T4440] usb 3-1: USB disconnect, device number 29 [ 962.978516][T13726] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2337'. [ 963.085519][T13730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.219615][T13764] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2350'. [ 965.313410][T13761] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 965.551423][T13777] netlink: 'syz.6.2353': attribute type 24 has an invalid length. [ 965.604134][T13777] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2353'. [ 965.951073][T13790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.583620][T13827] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2363'. [ 969.008441][T13831] ================================================================== [ 969.016542][T13831] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 969.023809][T13831] Read of size 8 at addr ffff88802965ec18 by task syz.5.2364/13831 [ 969.031699][T13831] [ 969.034032][T13831] CPU: 0 PID: 13831 Comm: syz.5.2364 Not tainted syzkaller #0 [ 969.041590][T13831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.051668][T13831] Call Trace: [ 969.054962][T13831] [ 969.057912][T13831] dump_stack_lvl+0x188/0x24e [ 969.062606][T13831] ? read_lock_is_recursive+0x10/0x10 [ 969.068007][T13831] ? show_regs_print_info+0x12/0x12 [ 969.073225][T13831] ? load_image+0x400/0x400 [ 969.077747][T13831] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 969.083214][T13831] ? __virt_addr_valid+0x188/0x540 [ 969.088348][T13831] ? __virt_addr_valid+0x465/0x540 [ 969.093480][T13831] ? dvb_device_open+0xc6/0x370 [ 969.098349][T13831] print_report+0xa8/0x210 [ 969.102812][T13831] kasan_report+0x10b/0x140 [ 969.107353][T13831] ? dvb_device_open+0xc6/0x370 [ 969.112235][T13831] dvb_device_open+0xc6/0x370 [ 969.116923][T13831] ? do_raw_spin_unlock+0x11d/0x230 [ 969.122135][T13831] chrdev_open+0x5c5/0x6a0 [ 969.126567][T13831] ? cd_forget+0x160/0x160 [ 969.130999][T13831] ? fsnotify_perm+0x39b/0x550 [ 969.135777][T13831] ? cd_forget+0x160/0x160 [ 969.140202][T13831] do_dentry_open+0x7e9/0x10d0 [ 969.144986][T13831] path_openat+0x2635/0x2ee0 [ 969.149601][T13831] ? verify_lock_unused+0x140/0x140 [ 969.154820][T13831] ? do_syscall_64+0x4c/0xa0 [ 969.159423][T13831] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.165514][T13831] ? do_filp_open+0x430/0x430 [ 969.170232][T13831] do_filp_open+0x1f1/0x430 [ 969.174743][T13831] ? vfs_tmpfile+0x480/0x480 [ 969.179361][T13831] ? _raw_spin_unlock+0x24/0x40 [ 969.184227][T13831] ? alloc_fd+0x58f/0x630 [ 969.188626][T13831] do_sys_openat2+0x150/0x4b0 [ 969.193326][T13831] ? up_read+0x20/0x20 [ 969.197407][T13831] ? do_sys_open+0xe0/0xe0 [ 969.201841][T13831] ? lock_chain_count+0x20/0x20 [ 969.206711][T13831] __x64_sys_openat+0x135/0x160 [ 969.211584][T13831] do_syscall_64+0x4c/0xa0 [ 969.216022][T13831] ? clear_bhb_loop+0x60/0xb0 [ 969.220710][T13831] ? clear_bhb_loop+0x60/0xb0 [ 969.225406][T13831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.231315][T13831] RIP: 0033:0x7fbf6ff5c84e [ 969.235750][T13831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 969.255371][T13831] RSP: 002b:00007fbf70d94b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 969.263791][T13831] RAX: ffffffffffffffda RBX: 00007fbf70d956c0 RCX: 00007fbf6ff5c84e [ 969.271770][T13831] RDX: 0000000000000002 RSI: 00007fbf70d94c00 RDI: ffffffffffffff9c [ 969.279753][T13831] RBP: 00007fbf70d94c00 R08: 0000000000000000 R09: 0000000000000000 [ 969.287736][T13831] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 969.295725][T13831] R13: 00007fbf70216038 R14: 00007fbf70215fa0 R15: 00007fff25c5d778 [ 969.303714][T13831] [ 969.306748][T13831] [ 969.309085][T13831] Allocated by task 1: [ 969.313156][T13831] kasan_set_track+0x4b/0x70 [ 969.317762][T13831] __kasan_kmalloc+0x8e/0xa0 [ 969.322363][T13831] dvb_register_device+0x311/0x2150 [ 969.327574][T13831] dvb_register_frontend+0x645/0x920 [ 969.332875][T13831] vidtv_bridge_probe+0x9a1/0xf70 [ 969.337916][T13831] platform_probe+0x137/0x1c0 [ 969.342613][T13831] really_probe+0x2aa/0xc70 [ 969.347130][T13831] __driver_probe_device+0x18c/0x330 [ 969.352425][T13831] driver_probe_device+0x4f/0x420 [ 969.357471][T13831] __driver_attach+0x44a/0x6e0 [ 969.362256][T13831] bus_for_each_dev+0x182/0x1f0 [ 969.367128][T13831] bus_add_driver+0x30a/0x5a0 [ 969.371830][T13831] driver_register+0x32d/0x430 [ 969.376628][T13831] vidtv_bridge_init+0x39/0x67 [ 969.381424][T13831] do_one_initcall+0x26a/0x840 [ 969.386209][T13831] do_initcall_level+0x137/0x1e4 [ 969.391184][T13831] do_initcalls+0x4b/0x8a [ 969.395537][T13831] kernel_init_freeable+0x415/0x5be [ 969.400753][T13831] kernel_init+0x19/0x1b0 [ 969.405091][T13831] ret_from_fork+0x1f/0x30 [ 969.409516][T13831] [ 969.411846][T13831] Freed by task 13761: [ 969.415918][T13831] kasan_set_track+0x4b/0x70 [ 969.420531][T13831] kasan_save_free_info+0x2d/0x50 [ 969.425563][T13831] ____kasan_slab_free+0x126/0x1e0 [ 969.430690][T13831] slab_free_freelist_hook+0x131/0x1a0 [ 969.436164][T13831] __kmem_cache_free+0xb6/0x1f0 [ 969.441026][T13831] dvb_device_open+0x2e7/0x370 [ 969.445802][T13831] chrdev_open+0x5c5/0x6a0 [ 969.450231][T13831] do_dentry_open+0x7e9/0x10d0 [ 969.455007][T13831] path_openat+0x2635/0x2ee0 [ 969.459627][T13831] do_filp_open+0x1f1/0x430 [ 969.464141][T13831] do_sys_openat2+0x150/0x4b0 [ 969.468829][T13831] __x64_sys_openat+0x135/0x160 [ 969.473692][T13831] do_syscall_64+0x4c/0xa0 [ 969.478129][T13831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.484033][T13831] [ 969.486359][T13831] The buggy address belongs to the object at ffff88802965ec00 [ 969.486359][T13831] which belongs to the cache kmalloc-256 of size 256 [ 969.500509][T13831] The buggy address is located 24 bytes inside of [ 969.500509][T13831] 256-byte region [ffff88802965ec00, ffff88802965ed00) [ 969.513711][T13831] [ 969.516043][T13831] The buggy address belongs to the physical page: [ 969.522469][T13831] page:ffffea0000a59780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2965e [ 969.532625][T13831] head:ffffea0000a59780 order:1 compound_mapcount:0 compound_pincount:0 [ 969.540954][T13831] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 969.548944][T13831] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017441b40 [ 969.557532][T13831] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 969.566111][T13831] page dumped because: kasan: bad access detected [ 969.572533][T13831] page_owner tracks the page as allocated [ 969.578246][T13831] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12006044172, free_ts 0 [ 969.597969][T13831] post_alloc_hook+0x173/0x1a0 [ 969.602745][T13831] get_page_from_freelist+0x1a1e/0x1ab0 [ 969.608411][T13831] __alloc_pages+0x1ec/0x4f0 [ 969.613030][T13831] alloc_page_interleave+0x24/0x1e0 [ 969.618238][T13831] alloc_slab_page+0x5d/0x160 [ 969.622922][T13831] new_slab+0x87/0x2c0 [ 969.627003][T13831] ___slab_alloc+0xbc6/0x1240 [ 969.631689][T13831] __kmem_cache_alloc_node+0x1a0/0x260 [ 969.637156][T13831] kmalloc_trace+0x26/0xe0 [ 969.641586][T13831] bus_add_driver+0xda/0x5a0 [ 969.646182][T13831] driver_register+0x32d/0x430 [ 969.650954][T13831] usb_register_driver+0x202/0x3d0 [ 969.656076][T13831] do_one_initcall+0x26a/0x840 [ 969.660857][T13831] do_initcall_level+0x137/0x1e4 [ 969.665810][T13831] do_initcalls+0x4b/0x8a [ 969.670158][T13831] kernel_init_freeable+0x415/0x5be [ 969.675377][T13831] page_owner free stack trace missing [ 969.680749][T13831] [ 969.683082][T13831] Memory state around the buggy address: [ 969.688714][T13831] ffff88802965eb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 969.696779][T13831] ffff88802965eb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 969.704853][T13831] >ffff88802965ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.712922][T13831] ^ [ 969.717778][T13831] ffff88802965ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 969.725856][T13831] ffff88802965ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 969.733934][T13831] ================================================================== [ 969.811027][T13831] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 969.818239][T13831] CPU: 1 PID: 13831 Comm: syz.5.2364 Not tainted syzkaller #0 [ 969.825698][T13831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.835754][T13831] Call Trace: [ 969.839045][T13831] [ 969.842000][T13831] dump_stack_lvl+0x188/0x24e [ 969.846683][T13831] ? memcpy+0x3c/0x60 [ 969.850657][T13831] ? show_regs_print_info+0x12/0x12 [ 969.855877][T13831] ? load_image+0x400/0x400 [ 969.860420][T13831] panic+0x2e5/0x730 [ 969.864322][T13831] ? bpf_jit_dump+0xd0/0xd0 [ 969.868831][T13831] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 969.874818][T13831] ? _raw_spin_unlock+0x40/0x40 [ 969.879778][T13831] check_panic_on_warn+0x80/0xa0 [ 969.884716][T13831] ? dvb_device_open+0xc6/0x370 [ 969.889565][T13831] end_report+0x66/0x110 [ 969.893819][T13831] kasan_report+0x118/0x140 [ 969.898331][T13831] ? dvb_device_open+0xc6/0x370 [ 969.903201][T13831] dvb_device_open+0xc6/0x370 [ 969.907906][T13831] ? do_raw_spin_unlock+0x11d/0x230 [ 969.913113][T13831] chrdev_open+0x5c5/0x6a0 [ 969.917555][T13831] ? cd_forget+0x160/0x160 [ 969.921975][T13831] ? fsnotify_perm+0x39b/0x550 [ 969.926777][T13831] ? cd_forget+0x160/0x160 [ 969.931204][T13831] do_dentry_open+0x7e9/0x10d0 [ 969.935969][T13831] path_openat+0x2635/0x2ee0 [ 969.940561][T13831] ? verify_lock_unused+0x140/0x140 [ 969.945763][T13831] ? do_syscall_64+0x4c/0xa0 [ 969.950350][T13831] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 969.956410][T13831] ? do_filp_open+0x430/0x430 [ 969.961090][T13831] do_filp_open+0x1f1/0x430 [ 969.965596][T13831] ? vfs_tmpfile+0x480/0x480 [ 969.970376][T13831] ? _raw_spin_unlock+0x24/0x40 [ 969.975231][T13831] ? alloc_fd+0x58f/0x630 [ 969.979589][T13831] do_sys_openat2+0x150/0x4b0 [ 969.984264][T13831] ? up_read+0x20/0x20 [ 969.988337][T13831] ? do_sys_open+0xe0/0xe0 [ 969.992760][T13831] ? lock_chain_count+0x20/0x20 [ 969.997632][T13831] __x64_sys_openat+0x135/0x160 [ 970.002481][T13831] do_syscall_64+0x4c/0xa0 [ 970.006893][T13831] ? clear_bhb_loop+0x60/0xb0 [ 970.011567][T13831] ? clear_bhb_loop+0x60/0xb0 [ 970.016243][T13831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 970.022135][T13831] RIP: 0033:0x7fbf6ff5c84e [ 970.026560][T13831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.046166][T13831] RSP: 002b:00007fbf70d94b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 970.054594][T13831] RAX: ffffffffffffffda RBX: 00007fbf70d956c0 RCX: 00007fbf6ff5c84e [ 970.062560][T13831] RDX: 0000000000000002 RSI: 00007fbf70d94c00 RDI: ffffffffffffff9c [ 970.070527][T13831] RBP: 00007fbf70d94c00 R08: 0000000000000000 R09: 0000000000000000 [ 970.078581][T13831] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 970.086584][T13831] R13: 00007fbf70216038 R14: 00007fbf70215fa0 R15: 00007fff25c5d778 [ 970.094577][T13831] [ 970.098184][T13831] Kernel Offset: disabled [ 970.102511][T13831] Rebooting in 86400 seconds..