last executing test programs: 6m0.001123166s ago: executing program 1 (id=250): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000012c0)={r3, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5m58.860205763s ago: executing program 1 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5m58.494372014s ago: executing program 1 (id=254): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendto$unix(r6, 0x0, 0x0, 0xc844, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 5m51.930385898s ago: executing program 1 (id=267): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m50.851878971s ago: executing program 1 (id=274): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m48.275971501s ago: executing program 1 (id=282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) 5m47.865193345s ago: executing program 32 (id=282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) 9.979602248s ago: executing program 2 (id=1304): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYBLOB="6d6118bc700cf135a27936251b63070b8bcfa53aeeb52e81a799c1b38c7649d71cced66eb4c6faaefeb1294d25b4a449745e0593086f75fc1ac718261452f5226009e2829adb93e25e6efc900624674aa534fff553f6705aef32baf2660e2f2bf3bd461f56868166ba4fab7bc1c8019d5eafb36b46eb4828c9e838e12176a9dabcbbbf1deb883e499c1f17cfbd5feabfe4e687dae6fb7c18c6a6258aa1d01e837367bfe2c2490ea4601d363b7684876223fa039a5f60a4a2ad3fd4eb818b124b26ccc8116d", @ANYBLOB="b7351bccec3b4352fd97af8687a7dcf0e7aa01dbbbd1d1ed117e194e5fb6a7d77c0f6fd8e6fc44be774722c3f49c6dde7b90aa3f7e37cfefc9b45a88fe9cad24ad129d418696cfd00e3256204685aaf69c3be83b279df650e1421be8dd690cdf2ce9de13b8f523988347db96eb88051c0985d6a4274ec0d3c899a79dcc953e82ab698b0db5e6dbf33fcea9cfa286042ee69a1ae955b9316ddcf76869fd24f429db883a47592d93aa23"], 0x1c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd=r0, 0x0, 0x1fffffff, 0x8020, 0x0, 0x1, {0x2}}) r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) 8.072748749s ago: executing program 2 (id=1310): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x1c0, 0x12) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48014) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000580)={0x28, 0x0, 0x91b, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x10, 0x1d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{}, {0x0}, {&(0x7f0000000580)="7b00d9d94a99b56c3adc8d5844e932bb65a057dbe0037b23962de01dd193a0b2091d1c7bd939da0f5354c59601bcd0270b2aab42a0ca8cb4fc8dc7ce501d64942493e7abc341e9ff8434d451c2821db3e736889ab3", 0x55}, {0x0}, {&(0x7f0000000e80)="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", 0xd8e}], 0x5) 7.687888371s ago: executing program 2 (id=1311): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x100}}}, {{@ipv6={@remote, @private0, [0xff000000], [0xffffffff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'vlan0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x54}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x18, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r8 = signalfd4(r1, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f00000002c0)={@empty, @loopback, 0x0, "28def14ada7fe03584396d15257c45a97c7a183aff7b2065d6fa48ad80479a97", 0x800, 0xa1, 0x4, 0x44}, 0x3c) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bind$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 7.263889756s ago: executing program 4 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000001000001000000080007000000000014000200776730000000000000000000000000001c05088068000080380004000a004e2100000007fc000000000000000000000000000000570100001400040002004e207f000001000000000000000004000980240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x54c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.102016455s ago: executing program 0 (id=1314): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ff}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001200ffffff7f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e00010069"], 0x48}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r7 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e5}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c800"], 0x188}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20010840) 7.02835627s ago: executing program 4 (id=1315): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1002, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 6.759938206s ago: executing program 4 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x40}, 0xfffe) r4 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 5.886902116s ago: executing program 3 (id=1318): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000300000005000700080000005fb6465337590775be641b10308106b31a6b4d5f8b5b085961e39f6b21d5b50e024bd4507641ce05be2fa64fd72abda58b9a54fb136453e4fc1efe643ef454917a6f4184a547d8069805031deedfd8e74f82e5c76710"], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1f30}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}, {0x24, '\x00', @data=0x800, 0x5}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast2, 0x47f40b73}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x24044804) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r9, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 5.886428186s ago: executing program 4 (id=1319): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 5.609053532s ago: executing program 3 (id=1320): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$pagemap(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000001640)="0c007f00e0ffff", 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 4.572023623s ago: executing program 3 (id=1322): socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0xf57) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(0x0, &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) 4.193211105s ago: executing program 4 (id=1323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x3, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0xd, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e3, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x4, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000300)='./mnt\x00', 0x0, &(0x7f0000001500), 0x200) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r5) recvmmsg(r2, &(0x7f00000077c0)=[{{0x0, 0xfffffffffffffd22, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.550331673s ago: executing program 3 (id=1324): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, 0x0, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents(r1, &(0x7f0000000e80)=""/202, 0xca) 3.458234128s ago: executing program 0 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000001000001000000080007000000000014000200776730000000000000000000000000001c05088068000080380004000a004e2100000007fc000000000000000000000000000000570100001400040002004e207f000001000000000000000004000980240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x54c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.363934864s ago: executing program 3 (id=1326): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.251113711s ago: executing program 0 (id=1327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x0) 3.113348558s ago: executing program 0 (id=1328): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x25}, 0x20) capget(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 2.947123658s ago: executing program 2 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a00000005"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty, [], "3a6cbb0a0d000000"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000003060500"/19], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2.451898457s ago: executing program 5 (id=1330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1], 0x5c}, 0x1, 0x6c}, 0x0) 1.961118376s ago: executing program 2 (id=1331): r0 = syz_io_uring_complete(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d0f, 0x0) io_uring_enter(0xffffffffffffffff, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x18b, &(0x7f0000000140)={0x0, 0x42d7, 0x800, 0x0, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000100)={0x38, 0x0, 0x28, 0x10000, 0x4, 0x1, 0x4c, 0x1ff, 0xffff8001, 0xfffffffa}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x4, 0x6e, 0x5}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000100)=0x4, 0x4) 1.915371209s ago: executing program 5 (id=1332): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x14, 0x0) 1.7160082s ago: executing program 4 (id=1333): io_setup(0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000400)={0xd83, 0x1, 0x4, 0x0, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x9, 0x5, 0x7, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) 1.512254542s ago: executing program 3 (id=1334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000010c0)={0x38, 0x5, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1c4e) read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[], 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x200) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406316, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[0x0, 0x0]}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 920.044487ms ago: executing program 0 (id=1335): socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0xf57) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(0x0, &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) 886.939489ms ago: executing program 5 (id=1336): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, 0x0, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents(r1, &(0x7f0000000e80)=""/202, 0xca) 692.79651ms ago: executing program 5 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000001000001000000080007000000000014000200776730000000000000000000000000001c05088068000080380004000a004e2100000007fc000000000000000000000000000000570100001400040002004e207f000001000000000000000004000980240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x54c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 502.308831ms ago: executing program 5 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) 299.746013ms ago: executing program 5 (id=1339): socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x5, 0xf57) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x0}) request_key(0x0, &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112180000000000000005ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0xfffffffc}, 0x8}, 0x94) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x2, 0xfa11, 0x80200001}, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 158.259721ms ago: executing program 2 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000300000005000700080000005fb6465337590775be641b10308106b31a6b4d5f8b5b085961e39f6b21d5b50e024bd4507641ce05be2fa64fd72abda58b9a54fb136453e4fc1efe643ef454917a6f4184a547d8069805031deedfd8e74f82e5c76710"], 0x48}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1f30}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}, {0x24, '\x00', @data=0x800, 0x5}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast2, 0x47f40b73}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x24044804) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r10, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 0s ago: executing program 0 (id=1341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a00000005"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty, [], "3a6cbb0a0d000000"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000003060500"/19], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) kernel console output (not intermixed with test programs): addresses unique to avoid problems! [ 72.393621][ T7] usb 2-1: config 7 has an invalid interface number: 48 but max is 0 [ 72.404719][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.411462][ T7] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 72.411487][ T7] usb 2-1: config 7 has no interface number 0 [ 72.411517][ T7] usb 2-1: config 7 interface 48 has no altsetting 0 [ 72.459395][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.467599][ T7] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 72.472102][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.487118][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.490399][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.496288][ T7] usb 2-1: Product: syz [ 72.511074][ T7] usb 2-1: Manufacturer: syz [ 72.516217][ T7] usb 2-1: SerialNumber: syz [ 72.518612][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.542746][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.590587][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.594513][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.599273][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.625508][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.635914][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.645877][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.668202][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.749524][ T7] cdc_phonet: probe of 2-1:7.48 failed with error -22 [ 72.811855][ T7] usb 2-1: USB disconnect, device number 2 [ 73.130361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 73.170338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 73.190210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.200197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.210217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.220195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.230195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.230358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 73.238600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.247492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 73.255109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 74.138943][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 74.138963][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 74.138989][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 74.158581][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 74.165356][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 74.261895][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.302791][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.338675][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.359057][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.370785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.387467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.477963][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.498409][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.521375][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.536597][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.550506][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.590570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.652846][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.673173][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.687557][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.844250][ T4402] loop2: detected capacity change from 0 to 7 [ 74.866539][ T4402] Dev loop2: unable to read RDB block 7 [ 74.882158][ T4403] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 74.900686][ T4402] loop2: unable to read partition table [ 74.925777][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.927659][ T4402] loop2: partition table beyond EOD, truncated [ 74.980319][ T4402] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 76.021121][ T4411] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 76.836054][ T4426] xt_socket: unknown flags 0x4 [ 77.914543][ T4441] device syzkaller1 entered promiscuous mode [ 78.060616][ T4313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.161646][ T4446] Illegal XDP return value 3271394462 on prog (id 2) dev N/A, expect packet loss! [ 78.333680][ T4313] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 78.360517][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.376626][ T4313] usb 1-1: config 0 has no interface number 0 [ 78.421201][ T4313] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.447053][ T4313] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 78.486780][ T4313] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 78.500897][ T4453] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.520351][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.546397][ T4313] usb 1-1: config 0 descriptor?? [ 79.087335][ T4282] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 79.118952][ T4313] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 79.145814][ T48] usb 1-1: Failed to submit usb control message: -71 [ 79.156952][ T48] usb 1-1: unable to send the bmi data to the device: -71 [ 79.166421][ T48] usb 1-1: unable to get target info from device [ 79.180803][ T48] usb 1-1: could not get target info (-71) [ 79.189003][ T48] usb 1-1: could not probe fw (-71) [ 79.196589][ T4313] usb 1-1: USB disconnect, device number 2 [ 80.404685][ T4474] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 81.053415][ T4490] netlink: 'syz.0.30': attribute type 20 has an invalid length. [ 81.070450][ T4490] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.372201][ T127] cfg80211: failed to load regulatory.db [ 84.770431][ T4508] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 89.845944][ T4546] loop2: detected capacity change from 0 to 64 [ 91.364364][ T127] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.631136][ T4557] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 91.830224][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 91.843497][ T127] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 91.854796][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.868107][ T127] usb 2-1: Product: syz [ 91.873133][ T127] usb 2-1: Manufacturer: syz [ 91.877912][ T127] usb 2-1: SerialNumber: syz [ 91.909992][ T127] r8152-cfgselector 2-1: config 0 descriptor?? [ 92.854368][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 93.811245][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 93.817920][ T127] r8152-cfgselector 2-1: bad CDC descriptors [ 93.826674][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 93.834980][ T127] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 94.599964][ T4596] 9pnet_fd: Insufficient options for proto=fd [ 97.638189][ T127] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.850983][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 97.860554][ T127] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 97.900885][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.909282][ T127] usb 2-1: Product: syz [ 97.930407][ T127] usb 2-1: Manufacturer: syz [ 97.944241][ T127] usb 2-1: SerialNumber: syz [ 97.981673][ T127] r8152-cfgselector 2-1: config 0 descriptor?? [ 98.600246][ T4321] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.739017][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 98.765764][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 98.880276][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 98.891139][ T127] r8152-cfgselector 2-1: bad CDC descriptors [ 98.897701][ T4321] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 98.917466][ T4321] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 98.947836][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.978461][ T4321] usb 4-1: Product: syz [ 98.993892][ T4321] usb 4-1: Manufacturer: syz [ 99.015575][ T4321] usb 4-1: SerialNumber: syz [ 99.053616][ T4321] usb 4-1: config 0 descriptor?? [ 99.087004][ T4321] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 99.116202][ T4321] usb 4-1: setting power ON [ 99.141555][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 99.196522][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.222607][ T4321] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 99.256597][ T4321] usb 4-1: media controller created [ 100.569682][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 100.591713][ T127] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 100.592078][ T4626] dvb-usb: bulk message failed: -22 (4/0) [ 100.640248][ T4626] cxusb: i2c read failed [ 100.646710][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.757529][ T4321] usb 4-1: selecting invalid altsetting 6 [ 100.757602][ T4648] 9pnet_fd: Insufficient options for proto=fd [ 100.774397][ T4321] usb 4-1: digital interface selection failed (-22) [ 100.792008][ T4321] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 100.810774][ T4321] usb 4-1: setting power OFF [ 100.825210][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 100.844323][ T4321] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 100.859382][ T4321] (NULL device *): no alternate interface [ 100.935821][ T4321] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 100.970759][ T4321] usb 4-1: USB disconnect, device number 2 [ 105.028102][ T4690] 9pnet_fd: Insufficient options for proto=fd [ 105.597886][ T4697] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20003 [ 107.010379][ T127] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.250280][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 107.292950][ T127] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 107.303919][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.312374][ T127] usb 2-1: Product: syz [ 107.317207][ T127] usb 2-1: Manufacturer: syz [ 107.322138][ T127] usb 2-1: SerialNumber: syz [ 107.362250][ T127] r8152-cfgselector 2-1: config 0 descriptor?? [ 107.595038][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 107.640551][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 107.647445][ T127] r8152-cfgselector 2-1: bad CDC descriptors [ 109.316609][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 109.441170][ T4732] loop8: detected capacity change from 0 to 8 [ 109.528850][ T4732] Dev loop8: unable to read RDB block 8 [ 109.585059][ T4732] loop8: unable to read partition table [ 109.620103][ T4732] loop8: partition table beyond EOD, truncated [ 109.671815][ T4732] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 110.164035][ T127] r8152-cfgselector 2-1: Unknown version 0x0000 [ 110.181618][ T127] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 110.212373][ T4736] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 110.307105][ T4736] netlink: 'syz.0.104': attribute type 2 has an invalid length. [ 111.280320][ T4321] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.490480][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 111.497904][ T4321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.536032][ T4321] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.665636][ T4321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.697608][ T4321] usb 4-1: config 0 descriptor?? [ 112.630557][ T4321] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.740341][ T4461] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.850039][ T4321] usb 4-1: USB disconnect, device number 3 [ 112.940571][ T4461] usb 5-1: Using ep0 maxpacket: 8 [ 112.967059][ T4461] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 113.015611][ T4461] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 113.053723][ T4461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.083626][ T4461] usb 5-1: Product: syz [ 113.102441][ T4461] usb 5-1: Manufacturer: syz [ 113.137477][ T4461] usb 5-1: SerialNumber: syz [ 113.193551][ T4461] usb 5-1: config 0 descriptor?? [ 113.224918][ T4461] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 113.266101][ T4461] usb 5-1: setting power ON [ 113.282107][ T4461] dvb-usb: bulk message failed: -22 (2/0) [ 113.339808][ T4461] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.451051][ T4461] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 113.480305][ T4461] usb 5-1: media controller created [ 113.482929][ T4765] dvb-usb: bulk message failed: -22 (3/0) [ 113.510407][ T4769] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 113.546163][ T4765] cxusb: i2c rd: len=80 is too big! [ 113.546163][ T4765] [ 113.561495][ T4461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.677097][ T4461] usb 5-1: selecting invalid altsetting 6 [ 113.697733][ T4461] usb 5-1: digital interface selection failed (-22) [ 113.720864][ T4461] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 113.747682][ T4461] usb 5-1: setting power OFF [ 113.765830][ T4461] dvb-usb: bulk message failed: -22 (2/0) [ 113.782751][ T4461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 113.830494][ T4461] (NULL device *): no alternate interface [ 113.874275][ T4461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 113.947503][ T4461] usb 5-1: USB disconnect, device number 2 [ 114.054611][ T4773] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 114.140343][ T3598] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.400340][ T3598] usb 4-1: Using ep0 maxpacket: 16 [ 114.419150][ T3598] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 114.458789][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.532210][ T4789] trusted_key: encrypted_key: insufficient parameters specified [ 114.561579][ T3598] usb 4-1: Product: syz [ 114.628672][ T3598] usb 4-1: Manufacturer: syz [ 114.748622][ T3598] usb 4-1: SerialNumber: syz [ 114.864991][ T3598] r8152-cfgselector 4-1: config 0 descriptor?? [ 115.125219][ T4790] trusted_key: encrypted_key: insufficient parameters specified [ 115.285999][ T3598] r8152-cfgselector 4-1: Unknown version 0x0000 [ 115.311003][ T3598] r8152-cfgselector 4-1: Unknown version 0x0000 [ 115.334082][ T4788] trusted_key: encrypted_key: insufficient parameters specified [ 115.342325][ T3598] r8152-cfgselector 4-1: bad CDC descriptors [ 119.706316][ T4817] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 120.380632][ T3598] r8152-cfgselector 4-1: Unknown version 0x0000 [ 120.564461][ T4387] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 120.732202][ T4829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 127.360617][ T4880] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 128.804630][ T4899] mmap: syz.0.142 (4899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.042932][ T4387] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.270276][ T4387] usb 5-1: Using ep0 maxpacket: 8 [ 132.277649][ T4387] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 133.359914][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.363700][ T4387] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.423549][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.520956][ T4387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.529221][ T4387] usb 5-1: Product: syz [ 133.600530][ T4387] usb 5-1: Manufacturer: syz [ 133.605453][ T4387] usb 5-1: SerialNumber: syz [ 133.628256][ T4387] usb 5-1: config 0 descriptor?? [ 133.663362][ T4387] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.690225][ T4387] usb 5-1: setting power ON [ 133.695319][ T4387] dvb-usb: bulk message failed: -22 (2/0) [ 133.733323][ T4387] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.762661][ T4387] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 133.816269][ T4387] usb 5-1: media controller created [ 133.948777][ T4387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.580300][ T4387] usb 5-1: selecting invalid altsetting 6 [ 134.586559][ T4387] usb 5-1: digital interface selection failed (-22) [ 134.630465][ T4387] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 134.665235][ T4387] usb 5-1: setting power OFF [ 134.676529][ T4387] dvb-usb: bulk message failed: -22 (2/0) [ 134.696682][ T4387] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 134.737527][ T4387] (NULL device *): no alternate interface [ 134.796598][ T4387] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 134.894218][ T4387] usb 5-1: USB disconnect, device number 3 [ 136.444628][ T4927] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 142.200354][ T4313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.410273][ T4313] usb 3-1: Using ep0 maxpacket: 8 [ 142.505427][ T4313] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 142.514088][ T4313] usb 3-1: config 0 has no interface number 0 [ 142.520445][ T4313] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.545255][ T4313] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.575284][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 142.585698][ T4313] usb 3-1: Product: syz [ 142.600988][ T4313] usb 3-1: config 0 descriptor?? [ 142.613763][ T4313] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 142.813917][ T4313] usb 3-1: USB disconnect, device number 2 [ 142.820561][ C1] iowarrior 3-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 152.332592][ T5047] netlink: 'syz.4.186': attribute type 4 has an invalid length. [ 157.503643][ T5086] netlink: 'syz.4.206': attribute type 4 has an invalid length. [ 163.561046][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.910593][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 163.927184][ T4321] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 164.136407][ T4321] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.156566][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.179289][ T5150] netlink: 44 bytes leftover after parsing attributes in process `syz.0.225'. [ 164.208766][ T4321] usb 3-1: Product: syz [ 164.310921][ T4321] usb 3-1: Manufacturer: syz [ 164.365259][ T4321] usb 3-1: SerialNumber: syz [ 164.411847][ T4321] usb 3-1: config 0 descriptor?? [ 167.535683][ T3598] usb 3-1: USB disconnect, device number 3 [ 169.517619][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 169.672864][ T5195] device bridge0 entered promiscuous mode [ 169.798548][ T5197] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.096373][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 176.180656][ T5311] device bridge0 entered promiscuous mode [ 176.307079][ T5313] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.591304][ T5325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.261'. [ 180.040196][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.270348][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 180.277705][ T7] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 180.318480][ T7] usb 1-1: config 0 has no interface number 0 [ 180.349931][ T7] usb 1-1: config 0 interface 249 has no altsetting 0 [ 180.396114][ T7] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 180.450194][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.490226][ T7] usb 1-1: Product: syz [ 180.497639][ T7] usb 1-1: Manufacturer: syz [ 180.511175][ T7] usb 1-1: SerialNumber: syz [ 180.563453][ T7] usb 1-1: config 0 descriptor?? [ 180.802363][ T7] usb 1-1: USB disconnect, device number 3 [ 181.526751][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 181.555595][ T5348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 181.577365][ T5348] device team0 entered promiscuous mode [ 181.605116][ T5348] device team_slave_0 entered promiscuous mode [ 181.615002][ T5348] device team_slave_1 entered promiscuous mode [ 181.635692][ T5348] device bond0 entered promiscuous mode [ 181.641960][ T5348] device bond_slave_0 entered promiscuous mode [ 181.648778][ T5348] device bond_slave_1 entered promiscuous mode [ 181.674448][ T5348] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 181.709486][ T5279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 181.742516][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'. [ 181.880255][ T5353] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.634147][ T5279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.788083][ T5279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.917142][ T5279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.517558][ T5386] xt_socket: unknown flags 0x4 [ 186.130525][ T5279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.155743][ T5382] tipc: Failed to remove unknown binding: 66,0,0/0:4072182858/4072182859 [ 186.181563][ T5382] tipc: Failed to remove unknown binding: 66,0,0/0:4072182858/4072182859 [ 186.564352][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.573801][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.584416][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.605025][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 186.614763][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.631264][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.655268][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.884524][ T5404] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.154769][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 188.697096][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.704756][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 188.717409][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.736349][ T5394] device bridge_slave_0 entered promiscuous mode [ 189.164246][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.178522][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.209820][ T5394] device bridge_slave_1 entered promiscuous mode [ 189.665050][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.365734][ T5279] device hsr_slave_0 left promiscuous mode [ 190.374720][ T5279] device hsr_slave_1 left promiscuous mode [ 190.410635][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.418726][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.520734][ T5279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.549797][ T5279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.600927][ T5279] device bridge_slave_1 left promiscuous mode [ 190.608721][ T5279] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.720808][ T5279] device bridge_slave_0 left promiscuous mode [ 190.727930][ T5279] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.780337][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 190.897353][ T5279] device veth1_macvtap left promiscuous mode [ 190.913719][ T5279] device veth0_macvtap left promiscuous mode [ 190.940565][ T5279] device veth1_vlan left promiscuous mode [ 190.947092][ T5279] device veth0_vlan left promiscuous mode [ 191.340409][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 191.340426][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 191.340452][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 191.346664][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 192.774218][ T5490] xt_socket: unknown flags 0x4 [ 193.356395][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 193.674677][ T5499] Zero length message leads to an empty skb [ 193.698549][ T5499] netlink: 108 bytes leftover after parsing attributes in process `syz.4.305'. [ 194.027001][ T5279] team0 (unregistering): Port device team_slave_1 removed [ 194.130627][ T5279] team0 (unregistering): Port device team_slave_0 removed [ 194.181118][ T5279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.262455][ T5279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.384976][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391387][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.551076][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 196.857949][ T5279] bond0 (unregistering): Released all slaves [ 197.012714][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.050276][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 197.059457][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 197.245253][ T5394] team0: Port device team_slave_0 added [ 197.294042][ T5394] team0: Port device team_slave_1 added [ 197.376047][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.578407][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.698954][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.822362][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.879744][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.990754][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.175007][ T5394] device hsr_slave_0 entered promiscuous mode [ 198.215747][ T5394] device hsr_slave_1 entered promiscuous mode [ 200.631269][ T5545] 9pnet_fd: Insufficient options for proto=fd [ 200.703157][ T5394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.853204][ T5394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.879725][ T5394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.911774][ T5394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.551090][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.658734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.710960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.391953][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.432619][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.502250][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.571319][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.578539][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.712023][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.756777][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.786357][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.856290][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.863444][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.029218][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.220059][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.286113][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.379363][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.609414][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.695721][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.734677][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.768729][ T5394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.799823][ T5394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.575840][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.590957][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.641831][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.678374][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.702995][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.922493][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.932854][ T4929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.972684][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.503046][ T5624] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 207.531249][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.537696][ T5624] CIFS mount error: No usable UNC path provided in device string! [ 207.537696][ T5624] [ 207.548145][ T5624] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 209.915514][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.008777][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.110757][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.129898][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.151782][ T5394] device veth0_vlan entered promiscuous mode [ 210.182181][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.201540][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.236792][ T5394] device veth1_vlan entered promiscuous mode [ 210.870985][ T5649] xt_socket: unknown flags 0x4 [ 210.908249][ T5270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.182638][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.288031][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.339820][ T5394] device veth0_macvtap entered promiscuous mode [ 212.368642][ T5394] device veth1_macvtap entered promiscuous mode [ 212.471785][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.528656][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.555319][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.578735][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.629630][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.662231][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.692823][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.724018][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.763116][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.787798][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.819090][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.851919][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.887415][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.917943][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.962384][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.004701][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.028758][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.060021][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.100043][ T5394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.122278][ T5394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.146523][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.178429][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.223314][ T5277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.256298][ T5394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.290209][ T5394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.299443][ T5394] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.330192][ T5394] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.775250][ T5270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.242252][ T5684] CIFS mount error: No usable UNC path provided in device string! [ 214.242252][ T5684] [ 214.252673][ T5684] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.946078][ T5270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.984845][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.053383][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.180366][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.215557][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.533959][ T5700] device vxcan1 entered promiscuous mode [ 215.590251][ T4328] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 215.818380][ T4328] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 217.020318][ T4328] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 217.092449][ T4328] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 218.706266][ T5722] xt_socket: unknown flags 0x4 [ 218.834559][ T4328] usb 3-1: unable to read config index 1 descriptor/start: -71 [ 218.860209][ T4328] usb 3-1: can't read configurations, error -71 [ 219.475037][ T5736] CIFS mount error: No usable UNC path provided in device string! [ 219.475037][ T5736] [ 219.485487][ T5736] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.435861][ T4314] kernel write not supported for file /snd/seq (pid: 4314 comm: kworker/0:3) [ 225.328182][ T5786] xt_socket: unknown flags 0x4 [ 228.939653][ T5824] xt_socket: unknown flags 0x4 [ 229.048336][ T5833] netlink: 88 bytes leftover after parsing attributes in process `syz.3.381'. [ 229.068662][ T5833] netlink: 48 bytes leftover after parsing attributes in process `syz.3.381'. [ 230.150792][ T4314] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 230.344361][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 230.352065][ T4314] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 230.402258][ T4314] usb 6-1: config 0 has no interface number 0 [ 230.448689][ T4314] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 230.545029][ T4314] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 230.600994][ T4314] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.660188][ T4314] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 230.695547][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.745083][ T4314] usb 6-1: config 0 descriptor?? [ 230.775664][ T4314] ldusb 6-1:0.55: Interrupt in endpoint not found [ 232.251348][ T4314] usb 6-1: USB disconnect, device number 2 [ 234.489986][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054eaa800: rx timeout, send abort [ 234.991211][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054ea9000: rx timeout, send abort [ 235.000883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054eaa800: abort rx timeout. Force session deactivation [ 235.871439][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054ea9000: abort rx timeout. Force session deactivation [ 239.011293][ T5934] netlink: 452 bytes leftover after parsing attributes in process `syz.4.408'. [ 240.944988][ T5955] 9pnet_fd: Insufficient options for proto=fd [ 241.166227][ T5954] loop7: detected capacity change from 0 to 16384 [ 246.540638][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'. [ 246.616695][ T6009] 9pnet_fd: Insufficient options for proto=fd [ 246.767327][ T6007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.055160][ T6011] bond1: (slave veth3): Enslaving as an active interface with an up link [ 248.140336][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 248.220199][ T7] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 248.418224][ T7] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 248.450527][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.501230][ T7] usb 6-1: config 0 descriptor?? [ 248.537618][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 248.728640][ T7] gp8psk: usb in 128 operation failed. [ 248.939687][ T7] gp8psk: FW Version = 68.248.173 (0x44f8ad) Build 2048/49/50 [ 249.751204][ T6014] bond1 (unregistering): (slave veth3): Releasing backup interface [ 249.849128][ T6014] bond1 (unregistering): Released all slaves [ 252.715809][ T7] gp8psk: usb in 149 operation failed. [ 252.722028][ T7] gp8psk: failed to get FPGA version [ 252.744550][ T7] gp8psk: usb in 138 operation failed. [ 252.750213][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 252.761285][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 253.555373][ T127] usb 6-1: USB disconnect, device number 3 [ 256.165600][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.172373][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.876276][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 260.201799][ T6125] team0 (unregistering): Port device team_slave_0 removed [ 260.265247][ T6125] team0 (unregistering): Port device team_slave_1 removed [ 260.430942][ T6132] xt_socket: unknown flags 0x4 [ 265.036105][ T6178] syz.5.466 (6178) used greatest stack depth: 20344 bytes left [ 265.498742][ T6187] xt_socket: unknown flags 0x4 [ 266.580875][ T6196] syz.3.469 (6196): /proc/6196/oom_adj is deprecated, please use /proc/6196/oom_score_adj instead. [ 267.680926][ T6213] hsr0: VLAN not yet supported [ 267.686942][ T6213] netlink: 14 bytes leftover after parsing attributes in process `syz.2.473'. [ 268.934751][ T6213] device hsr_slave_0 left promiscuous mode [ 268.973458][ T6213] device hsr_slave_1 left promiscuous mode [ 273.680369][ T4314] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 273.920247][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 273.930766][ T4314] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 274.031437][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.092341][ T4314] usb 1-1: config 0 has no interfaces? [ 274.135450][ T4314] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 274.187426][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.257411][ T4314] usb 1-1: Product: syz [ 275.212236][ T4314] usb 1-1: Manufacturer: syz [ 275.218545][ T4314] usb 1-1: SerialNumber: syz [ 275.291102][ T4314] usb 1-1: config 0 descriptor?? [ 276.201442][ T4328] usb 1-1: USB disconnect, device number 4 [ 277.977294][ T6303] netlink: 'syz.3.494': attribute type 1 has an invalid length. [ 279.349462][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.427588][ T6329] device vxcan1 left promiscuous mode [ 280.568631][ T6331] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.723365][ T3598] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 280.823904][ T6357] vivid-000: disconnect [ 280.979288][ T3598] usb 1-1: Using ep0 maxpacket: 8 [ 280.996213][ T3598] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 281.099840][ T3598] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.224942][ T3598] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.355467][ T6343] vivid-000: reconnect [ 281.438253][ T6371] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 281.625847][ T3598] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 281.706222][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.746110][ T3598] usb 1-1: Product: syz [ 281.775970][ T3598] usb 1-1: Manufacturer: syz [ 281.828705][ T3598] usb 1-1: SerialNumber: syz [ 281.885393][ T3598] usb 1-1: config 0 descriptor?? [ 282.169988][ T4383] usb 1-1: USB disconnect, device number 5 [ 283.555972][ T6405] IPVS: dh: FWM 3 0x00000003 - no destination available [ 283.568859][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.590910][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.664667][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.971456][ T6406] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.366117][ T6435] netlink: 'syz.5.524': attribute type 1 has an invalid length. [ 286.520178][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 287.360117][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 287.367192][ T7] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 287.391317][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.424388][ T7] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.447720][ T7] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 287.499570][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.538952][ T7] usb 6-1: Product: syz [ 287.548237][ T7] usb 6-1: Manufacturer: syz [ 287.560197][ T7] usb 6-1: SerialNumber: syz [ 287.582030][ T7] usb 6-1: config 0 descriptor?? [ 287.807927][ T7] usb 6-1: USB disconnect, device number 4 [ 288.122183][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.214661][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.249596][ T6469] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.511542][ T6469] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.760925][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 292.140197][ T4313] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 292.363341][ T4313] usb 1-1: Using ep0 maxpacket: 8 [ 292.372935][ T4313] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 292.397765][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.434232][ T4313] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.450267][ T3598] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 292.470426][ T127] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 292.485134][ T4313] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 292.506216][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.570344][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 292.590434][ T4313] usb 1-1: Product: syz [ 292.612394][ T4313] usb 1-1: Manufacturer: syz [ 292.617556][ T4313] usb 1-1: SerialNumber: syz [ 292.640175][ T3598] usb 3-1: Using ep0 maxpacket: 8 [ 292.648255][ T3598] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 292.674581][ T127] usb 6-1: config 0 has no interfaces? [ 292.681223][ T4313] usb 1-1: config 0 descriptor?? [ 292.687581][ T127] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 292.710696][ T3598] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 292.726670][ T127] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.739092][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.750236][ T127] usb 6-1: Manufacturer: syz [ 292.780328][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 292.799424][ T7] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 292.811726][ T3598] usb 3-1: Product: syz [ 292.816014][ T3598] usb 3-1: Manufacturer: syz [ 292.834796][ T127] usb 6-1: config 0 descriptor?? [ 292.842785][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.873541][ T3598] usb 3-1: SerialNumber: syz [ 292.887159][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 292.931957][ T7] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 292.948874][ T127] usb 1-1: USB disconnect, device number 6 [ 292.965249][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.976750][ T3598] usb 3-1: config 0 descriptor?? [ 293.012894][ T3598] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 293.020759][ T7] usb 4-1: Product: syz [ 293.035677][ T3598] usb 3-1: setting power ON [ 293.040176][ T7] usb 4-1: Manufacturer: syz [ 293.044912][ T7] usb 4-1: SerialNumber: syz [ 293.049628][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 293.083788][ T7] usb 4-1: config 0 descriptor?? [ 293.118095][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.172471][ T3598] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 293.195228][ T3598] usb 3-1: media controller created [ 293.207423][ T6511] dvb-usb: bulk message failed: -22 (3/0) [ 293.220388][ T6511] dvb-usb: bulk message failed: -22 (4/0) [ 293.299041][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.315342][ T6517] cxusb: i2c rd: len=80 is too big! [ 293.315342][ T6517] [ 293.376672][ T4321] usb 4-1: USB disconnect, device number 5 [ 293.401583][ T3598] usb 3-1: selecting invalid altsetting 6 [ 293.431084][ T3598] usb 3-1: digital interface selection failed (-22) [ 293.459247][ T3598] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 293.487800][ T3598] usb 3-1: setting power OFF [ 293.499907][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 293.531871][ T3598] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 293.573425][ T3598] (NULL device *): no alternate interface [ 293.694959][ T3598] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 293.750240][ T3598] usb 3-1: USB disconnect, device number 6 [ 294.070933][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 294.163362][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.254596][ T6536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.371044][ T6543] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.755880][ T6556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.195337][ T6560] xt_socket: unknown flags 0x4 [ 297.290610][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 297.360223][ T6571] netlink: 'syz.4.557': attribute type 30 has an invalid length. [ 297.436459][ T6571] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.446214][ T6571] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.455176][ T6571] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.464136][ T6571] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.646417][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 297.696187][ T6571] netlink: 'syz.4.557': attribute type 30 has an invalid length. [ 297.802158][ T4321] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 297.814404][ T4313] usb 6-1: USB disconnect, device number 5 [ 298.020316][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 298.027566][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 298.079917][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.100217][ T4321] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.120144][ T4321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 298.150305][ T4321] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 298.161073][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 298.180450][ T4321] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 298.200166][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.227550][ T4321] usb 1-1: config 0 descriptor?? [ 298.251185][ T6577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.360189][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 298.373384][ T7] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 298.400284][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.419821][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.449353][ T7] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 298.461133][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.498091][ T7] usb 4-1: Product: syz [ 298.506028][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 298.514599][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.523106][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.523876][ T7] usb 4-1: Manufacturer: syz [ 298.530561][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.543862][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.551795][ T7] usb 4-1: SerialNumber: syz [ 298.552044][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.564492][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.571457][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.578317][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.588632][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.595864][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.602906][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.609891][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.617957][ T4282] Bluetooth: hci5: unexpected event 0x01 length: 0 < 1 [ 298.625174][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.625586][ T7] usb 4-1: config 0 descriptor?? [ 298.632436][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.644422][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.651707][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.659362][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.666898][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.674114][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.681453][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.688282][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.695375][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.702579][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.709584][ T4282] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 298.718736][ T4285] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 298.742504][ T4321] usb 1-1: USB disconnect, device number 7 [ 299.993477][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 300.014273][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.028798][ T22] usb 4-1: USB disconnect, device number 6 [ 300.044307][ T6594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.168189][ T6594] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.989058][ T6628] xt_socket: unknown flags 0x4 [ 303.421333][ T6644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.484706][ T6644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.562659][ T6644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.856349][ T6649] ieee802154 phy0 wpan0: encryption failed: -22 [ 307.830335][ T127] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 308.295174][ T127] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 308.480246][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.499920][ T127] usb 5-1: Product: syz [ 308.510352][ T127] usb 5-1: Manufacturer: syz [ 308.515223][ T127] usb 5-1: SerialNumber: syz [ 308.682710][ T6692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.728007][ T127] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 308.771326][ T127] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 308.828559][ T127] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 308.850015][ T127] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 308.895905][ T127] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 308.914524][ T6695] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.956687][ T127] lan78xx: probe of 5-1:1.0 failed with error -32 [ 308.978582][ T127] usb 5-1: USB disconnect, device number 4 [ 309.500436][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 310.949416][ T6723] dlm: no locking on control device [ 311.112858][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 311.346112][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.385566][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 311.400024][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 311.406086][ T6734] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 311.578097][ T6739] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.810348][ T4387] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 312.040179][ T4387] usb 4-1: Using ep0 maxpacket: 16 [ 312.049162][ T4387] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.083951][ T4387] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.116084][ T4387] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.134924][ T4387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.157100][ T4387] usb 4-1: Product: syz [ 312.172496][ T4387] usb 4-1: Manufacturer: syz [ 312.187385][ T4387] usb 4-1: SerialNumber: syz [ 312.410982][ T4387] usb 4-1: 0:2 : does not exist [ 312.442184][ T4387] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 312.614926][ T4387] usb 4-1: USB disconnect, device number 7 [ 312.669599][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.739490][ T6755] vivid-008: disconnect [ 313.547183][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 313.611053][ T4387] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 313.622485][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 313.692482][ T6775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 313.695805][ T6748] vivid-008: reconnect [ 313.820805][ T4387] usb 1-1: Using ep0 maxpacket: 8 [ 313.840575][ T4387] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 313.887285][ T6776] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.893780][ T4387] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.933313][ T4387] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.967223][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.015589][ T4387] usbtmc 1-1:16.0: bulk endpoints not found [ 314.225041][ T127] usb 1-1: USB disconnect, device number 8 [ 316.895337][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.921589][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.987890][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.263795][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.270685][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.400428][ T4313] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 317.435590][ T6819] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484305][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 317.515008][ T6829] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 317.610236][ T4313] usb 6-1: Using ep0 maxpacket: 8 [ 318.363134][ T4313] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 318.374896][ T4313] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 318.390223][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.399482][ T4313] usb 6-1: Product: syz [ 318.404352][ T4313] usb 6-1: Manufacturer: syz [ 318.409434][ T4313] usb 6-1: SerialNumber: syz [ 318.425049][ T4313] usb 6-1: config 0 descriptor?? [ 318.455406][ T4313] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 318.465502][ T4313] usb 6-1: setting power ON [ 318.470687][ T4313] dvb-usb: bulk message failed: -22 (2/0) [ 318.495774][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.511103][ T4313] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 318.520942][ T4313] usb 6-1: media controller created [ 318.544607][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.596495][ T4313] usb 6-1: selecting invalid altsetting 6 [ 318.615607][ T4313] usb 6-1: digital interface selection failed (-22) [ 318.628942][ T4313] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 318.695004][ T4313] usb 6-1: setting power OFF [ 318.707843][ T4313] dvb-usb: bulk message failed: -22 (2/0) [ 318.714126][ T4313] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 318.749098][ T4313] (NULL device *): no alternate interface [ 318.789964][ T4313] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 318.859479][ T4313] usb 6-1: USB disconnect, device number 6 [ 319.230268][ T22] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 319.457136][ T22] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 319.473065][ T22] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 319.507962][ T22] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 319.576382][ T22] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 319.595834][ T22] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 319.662313][ T22] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 319.692501][ T22] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 319.715925][ T22] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 319.737078][ T22] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 319.792521][ T22] usb 3-1: string descriptor 0 read error: -22 [ 319.799045][ T22] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 319.929131][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.007182][ T22] adutux 3-1:168.0: interrupt endpoints not found [ 320.806141][ T6839] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 321.082402][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.106927][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.149375][ T6876] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.155335][ T6876] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.045344][ T22] usb 3-1: USB disconnect, device number 7 [ 324.630578][ T6904] process 'syz.5.649' launched './file0' with NULL argv: empty string added [ 324.713423][ T6900] xt_socket: unknown flags 0x4 [ 326.080196][ T4387] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 326.290138][ T4387] usb 6-1: Using ep0 maxpacket: 8 [ 326.333730][ T4387] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 326.377246][ T4387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.437043][ T4387] usb 6-1: Product: syz [ 326.459303][ T4387] usb 6-1: Manufacturer: syz [ 326.492349][ T4387] usb 6-1: SerialNumber: syz [ 326.548212][ T4387] usb 6-1: config 0 descriptor?? [ 327.651796][ T4387] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 328.077630][ T6934] vivid-000: disconnect [ 328.250944][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.273972][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.284773][ T6938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.413034][ T6941] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.421735][ T4387] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 331.472812][ T4335] usb 6-1: USB disconnect, device number 7 [ 331.491300][ T6908] vivid-000: reconnect [ 331.589712][ T6971] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 332.212186][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.379970][ T6998] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 333.064805][ T6990] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.540297][ T4335] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 334.511931][ T4335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 334.533885][ T4335] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 334.557970][ T7034] vivid-000: disconnect [ 334.570159][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.610227][ T7038] CIFS mount error: No usable UNC path provided in device string! [ 334.610227][ T7038] [ 334.622551][ T7038] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 334.651783][ T4335] usb 5-1: config 0 descriptor?? [ 334.672355][ T4335] smsusb:smsusb_probe: board id=8, interface number 0 [ 334.759372][ T4335] smsusb:smsusb_probe: Device initialized with return code -19 [ 334.814361][ T7019] vivid-000: reconnect [ 335.059851][ T7046] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 336.135756][ T26] audit: type=1326 audit(1771282308.421:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 336.264038][ T7055] tipc: Started in network mode [ 336.289545][ T7055] tipc: Node identity 7f000001, cluster identity 4711 [ 336.574109][ T7072] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.678206][ T7055] tipc: Enabling of bearer rejected, failed to enable media [ 336.706802][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 336.791252][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.799861][ T26] audit: type=1326 audit(1771282309.261:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 336.837120][ T7068] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.847094][ T26] audit: type=1326 audit(1771282309.261:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 336.888609][ T26] audit: type=1326 audit(1771282309.261:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 336.913832][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.944745][ T7070] device bridge0 entered promiscuous mode [ 336.983402][ T26] audit: type=1326 audit(1771282309.441:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 337.014019][ T7063] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 337.056947][ T7063] tipc: Enabled bearer , priority 10 [ 337.103364][ T26] audit: type=1326 audit(1771282309.571:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 337.212776][ T26] audit: type=1326 audit(1771282309.681:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7014 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 337.929100][ T7096] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 338.188170][ T22] tipc: Node number set to 2130706433 [ 339.428449][ T4387] usb 5-1: USB disconnect, device number 5 [ 339.628034][ T7132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 339.661639][ T7132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.785546][ T7132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.338072][ T7128] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.443326][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.727'. [ 342.670248][ T7160] tc_dump_action: action bad kind [ 342.730319][ T7171] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 344.549867][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.582763][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.640539][ T7183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.801739][ T7193] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 344.892853][ T7190] device bridge0 entered promiscuous mode [ 344.894909][ T7195] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.341969][ T7205] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 348.135620][ T7207] xt_socket: unknown flags 0x4 [ 348.675798][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 348.699599][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.712051][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.901509][ T7248] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 349.695046][ T7249] device bridge0 entered promiscuous mode [ 349.720194][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 349.751775][ T7239] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.943629][ T7256] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 349.970509][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 349.985796][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.069422][ T22] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 350.189345][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.501290][ T22] usb 3-1: config 0 descriptor?? [ 354.355720][ T7295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.800612][ T7295] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.950931][ T22] usbhid 3-1:0.0: can't add hid device: -71 [ 354.968641][ T22] usbhid: probe of 3-1:0.0 failed with error -71 [ 355.015012][ T22] usb 3-1: USB disconnect, device number 8 [ 356.681934][ T7293] xt_socket: unknown flags 0x4 [ 360.453768][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 360.496669][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.600448][ T7356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.658407][ T7357] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.071754][ T4321] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 364.780158][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 364.802428][ T4321] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 364.815024][ T7392] binder: 7386:7392 unknown command 1077961494 [ 364.823610][ T7392] binder: 7386:7392 ioctl c0306201 200000000100 returned -22 [ 364.834249][ T4321] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 364.896017][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.955836][ T4321] usb 1-1: Product: syz [ 364.996752][ T4321] usb 1-1: Manufacturer: syz [ 365.024165][ T4321] usb 1-1: SerialNumber: syz [ 365.154135][ T4321] usb 1-1: config 0 descriptor?? [ 365.205060][ T4321] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 365.297794][ T4321] usb 1-1: setting power ON [ 365.331961][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 365.443008][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.087530][ T4321] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 366.210268][ T4321] usb 1-1: media controller created [ 366.249745][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.369058][ T4321] usb 1-1: selecting invalid altsetting 6 [ 366.383237][ T4321] usb 1-1: digital interface selection failed (-22) [ 366.416037][ T4321] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 366.442318][ T4321] usb 1-1: setting power OFF [ 366.471336][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 366.498499][ T4321] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 366.545618][ T4321] (NULL device *): no alternate interface [ 366.563575][ T7419] vivid-004: disconnect [ 366.608045][ T4321] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 366.670226][ T4321] usb 1-1: USB disconnect, device number 9 [ 367.045777][ T7413] vivid-004: reconnect [ 367.533877][ T7425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.620158][ T7448] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 371.950146][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 371.963193][ T4321] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 372.150285][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 372.240109][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 372.278790][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.289589][ T22] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 372.298047][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.317238][ T4321] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.322002][ T22] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 372.336649][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.345590][ T4321] usb 1-1: Product: syz [ 372.349971][ T4321] usb 1-1: Manufacturer: syz [ 372.355500][ T4321] usb 1-1: SerialNumber: syz [ 372.406136][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.441305][ T22] usb 3-1: Product: syz [ 372.480915][ T22] usb 3-1: Manufacturer: syz [ 372.501338][ T22] usb 3-1: SerialNumber: syz [ 372.541616][ T22] usb 3-1: config 0 descriptor?? [ 372.571070][ T4321] usb 1-1: 0:2 : does not exist [ 372.591089][ T22] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 372.606094][ T4321] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 372.666440][ T4321] usb 1-1: USB disconnect, device number 10 [ 372.687944][ T22] usb 3-1: setting power ON [ 372.726963][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 372.776167][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.813215][ T22] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 372.822647][ T22] usb 3-1: media controller created [ 372.840419][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.878770][ T22] usb 3-1: selecting invalid altsetting 6 [ 372.938342][ T22] usb 3-1: digital interface selection failed (-22) [ 372.958666][ T22] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 372.977349][ T22] usb 3-1: setting power OFF [ 372.985277][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 373.018659][ T22] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 373.079713][ T22] (NULL device *): no alternate interface [ 373.439821][ T22] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 373.567929][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.739759][ T22] usb 3-1: USB disconnect, device number 9 [ 376.220381][ T7490] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 377.548962][ T7518] vivid-004: disconnect [ 377.881642][ T7528] netlink: 'syz.5.823': attribute type 12 has an invalid length. [ 378.035737][ T7510] vivid-004: reconnect [ 378.050439][ T4313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 378.252890][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 378.259891][ T4313] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 378.303378][ T4313] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 378.333430][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.371436][ T4313] usb 5-1: Product: syz [ 378.402971][ T4313] usb 5-1: Manufacturer: syz [ 378.430103][ T4313] usb 5-1: SerialNumber: syz [ 378.491411][ T4313] usb 5-1: config 0 descriptor?? [ 378.531799][ T4313] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 378.590243][ T4313] usb 5-1: setting power ON [ 378.610233][ T4313] dvb-usb: bulk message failed: -22 (2/0) [ 378.639162][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.679145][ T4313] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 378.702571][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.708918][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.745736][ T4313] usb 5-1: media controller created [ 378.794350][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.900820][ T4313] usb 5-1: selecting invalid altsetting 6 [ 378.919752][ T4313] usb 5-1: digital interface selection failed (-22) [ 378.966420][ T4313] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 379.024718][ T4313] usb 5-1: setting power OFF [ 379.039234][ T4313] dvb-usb: bulk message failed: -22 (2/0) [ 379.055467][ T4313] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 379.078436][ T4313] (NULL device *): no alternate interface [ 379.122989][ T4313] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 379.233944][ T4313] usb 5-1: USB disconnect, device number 6 [ 379.290284][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.610786][ T7551] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 383.300201][ T127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 383.501073][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 383.513729][ T127] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 383.552652][ T127] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 383.581339][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.617831][ T127] usb 5-1: Product: syz [ 383.633479][ T127] usb 5-1: Manufacturer: syz [ 383.646043][ T127] usb 5-1: SerialNumber: syz [ 383.669365][ T127] usb 5-1: config 0 descriptor?? [ 383.689967][ T127] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 383.771893][ T127] usb 5-1: setting power ON [ 383.814177][ T127] dvb-usb: bulk message failed: -22 (2/0) [ 383.856438][ T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.882688][ T127] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 383.970213][ T127] usb 5-1: media controller created [ 384.032028][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.140223][ T127] usb 5-1: selecting invalid altsetting 6 [ 384.167574][ T127] usb 5-1: digital interface selection failed (-22) [ 384.190453][ T127] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 384.294409][ T127] usb 5-1: setting power OFF [ 384.305071][ T127] dvb-usb: bulk message failed: -22 (2/0) [ 384.335232][ T127] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 384.364680][ T127] (NULL device *): no alternate interface [ 384.429898][ T127] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 384.552841][ T127] usb 5-1: USB disconnect, device number 7 [ 384.577025][ T7597] vivid-006: disconnect [ 385.573030][ T7605] usb usb7: usbfs: process 7605 (syz.2.848) did not claim interface 0 before use [ 385.691924][ T7608] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 385.835587][ T7588] vivid-006: reconnect [ 387.329144][ T7632] ptrace attach of "./syz-executor exec"[5394] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ /dev/snd/seq Àÿ ÿÿÿÿ   ro ./file0 nel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ [ 391.089099][ T7715] xt_socket: unknown flags 0x4 [ 392.834543][ T7729] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 393.770238][ T7750] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 394.029166][ T7758] vivid-000: disconnect [ 394.210177][ T4335] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 394.430193][ T4335] usb 4-1: Using ep0 maxpacket: 16 [ 394.443909][ T4335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.489794][ T7745] vivid-000: reconnect [ 394.517168][ T4335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.579869][ T4335] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.653796][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.765404][ T4335] usb 4-1: Product: syz [ 394.783268][ T4335] usb 4-1: Manufacturer: syz [ 394.826652][ T4335] usb 4-1: SerialNumber: syz [ 395.049870][ T4335] usb 4-1: 0:2 : does not exist [ 395.065964][ T4335] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 395.145520][ T4335] usb 4-1: USB disconnect, device number 8 [ 395.426322][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.113700][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.146379][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.160815][ T7781] kvm [7780]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4859 [ 396.191626][ T7781] kvm [7780]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x195f [ 396.201469][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.222251][ T7781] kvm [7780]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 396.261060][ T7781] kvm [7780]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x587b [ 396.381759][ T7785] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.323506][ T7797] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 397.482448][ T7767] xt_hashlimit: size too large, truncated to 1048576 [ 398.740296][ T7819] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 399.549475][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 399.729324][ T7828] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.841985][ T4716] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 401.868426][ T7846] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 401.930615][ T7846] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 401.992156][ T7846] pit: kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 402.098044][ T7846] pit: kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 402.156125][ T7846] pit: kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 402.226433][ T7846] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 402.245178][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.254070][ T7846] pit: kvm: requested 76266 ns i8254 timer period limited to 200000 ns [ 402.347680][ T7869] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 403.454284][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.463485][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.381822][ T7876] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.595459][ T7883] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 404.880147][ T7894] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 405.927252][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.064321][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 408.092545][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.165546][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.326366][ T7939] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.752370][ T7941] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 409.410869][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 410.135225][ T7964] binder: 7955:7964 unknown command 1077961494 [ 410.166585][ T7964] binder: 7955:7964 ioctl c0306201 200000000100 returned -22 [ 410.858135][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.373242][ T7982] xt_socket: unknown flags 0x4 [ 412.004319][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.154603][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.346941][ T7979] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.250347][ T7999] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 414.469829][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 414.762560][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.784695][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 414.849369][ T8026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 414.861358][ T8033] binder: 8022:8033 unknown command 1077961494 [ 414.878128][ T8033] binder: 8022:8033 ioctl c0306201 200000000100 returned -22 [ 414.936555][ T8036] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.800089][ T8011] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 415.960086][ T8011] usb 4-1: device descriptor read/64, error -71 [ 416.234234][ T8011] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 416.410248][ T8011] usb 4-1: device descriptor read/64, error -71 [ 416.540661][ T8011] usb usb4-port1: attempt power cycle [ 416.691769][ T8052] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 416.960100][ T8011] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 417.108967][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 417.164807][ T8011] usb 4-1: device descriptor read/8, error -71 [ 417.450106][ T8011] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 417.504831][ T8011] usb 4-1: device descriptor read/8, error -71 [ 417.630550][ T8011] usb usb4-port1: unable to enumerate USB device [ 419.067262][ T8111] binder: 8106:8111 unknown command 1077961494 [ 419.098175][ T8111] binder: 8106:8111 ioctl c0306201 200000000100 returned -22 [ 419.560381][ T4383] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 419.687969][ T8089] xt_hashlimit: max too large, truncated to 1048576 [ 419.760113][ T4383] usb 6-1: Using ep0 maxpacket: 16 [ 419.771049][ T4383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 419.841644][ T4383] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 419.870103][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.909053][ T4383] usb 6-1: Product: syz [ 419.926618][ T4383] usb 6-1: Manufacturer: syz [ 419.950090][ T4383] usb 6-1: SerialNumber: syz [ 419.985926][ T4383] usb 6-1: config 0 descriptor?? [ 420.011781][ T4383] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 420.052330][ T4383] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 420.250102][ T22] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 420.470168][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 420.477518][ T22] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 420.538985][ T22] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 420.579495][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.613589][ T4383] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 420.620625][ T22] usb 3-1: Product: syz [ 420.624987][ T22] usb 3-1: Manufacturer: syz [ 420.629629][ T22] usb 3-1: SerialNumber: syz [ 420.728456][ T22] usb 3-1: config 0 descriptor?? [ 420.775281][ T22] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 420.810479][ T22] usb 3-1: setting power ON [ 420.844670][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 420.901494][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.939014][ T22] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 420.966965][ T8130] dvb-usb: bulk message failed: -22 (3/0) [ 420.992048][ T8130] dvb-usb: bulk message failed: -22 (4/0) [ 420.997936][ T8130] cxusb: i2c read failed [ 421.010163][ T22] usb 3-1: media controller created [ 421.057099][ T4383] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 421.089387][ T4383] em28xx 6-1:0.0: board has no eeprom [ 421.128409][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.199164][ T22] usb 3-1: selecting invalid altsetting 6 [ 421.239130][ T22] usb 3-1: digital interface selection failed (-22) [ 421.277656][ T22] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 421.304768][ T22] usb 3-1: setting power OFF [ 421.319751][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 421.335074][ T22] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 421.399334][ T22] (NULL device *): no alternate interface [ 421.624619][ T22] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 421.765200][ T22] usb 3-1: USB disconnect, device number 10 [ 422.222833][ T8114] em28xx 6-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 422.290133][ T4383] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 422.317630][ T4383] em28xx 6-1:0.0: dvb set to bulk mode. [ 422.359557][ T8011] em28xx 6-1:0.0: Binding DVB extension [ 422.410398][ T4383] usb 6-1: USB disconnect, device number 8 [ 422.435907][ T4383] em28xx 6-1:0.0: Disconnecting em28xx [ 422.517921][ T8011] em28xx 6-1:0.0: Registering input extension [ 422.541136][ T4383] em28xx 6-1:0.0: Closing input extension [ 422.550659][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 422.603337][ T4383] em28xx 6-1:0.0: Freeing device [ 422.840258][ T22] usb 3-1: device descriptor read/64, error -71 [ 423.120296][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 423.310289][ T22] usb 3-1: device descriptor read/64, error -71 [ 423.440362][ T22] usb usb3-port1: attempt power cycle [ 423.900522][ T22] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 423.952908][ T22] usb 3-1: device descriptor read/8, error -71 [ 424.230227][ T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 424.292713][ T22] usb 3-1: device descriptor read/8, error -71 [ 424.442364][ T22] usb usb3-port1: unable to enumerate USB device [ 424.519702][ T8214] netlink: 'syz.5.977': attribute type 24 has an invalid length. [ 424.980177][ T3598] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 425.113464][ T8241] vivid-008: disconnect [ 425.170296][ T3598] usb 6-1: Using ep0 maxpacket: 8 [ 425.184331][ T3598] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 425.227402][ T3598] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 425.253630][ T3598] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.334080][ T3598] usb 6-1: Product: syz [ 425.339934][ T3598] usb 6-1: Manufacturer: syz [ 425.368766][ T3598] usb 6-1: SerialNumber: syz [ 425.404554][ T3598] usb 6-1: config 0 descriptor?? [ 425.454298][ T3598] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 425.476887][ T3598] usb 6-1: setting power ON [ 425.539340][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 425.605448][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 425.637896][ T8219] dvb-usb: bulk message failed: -22 (3/0) [ 425.650959][ T8219] dvb-usb: bulk message failed: -22 (4/0) [ 425.658553][ T3598] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 425.704622][ T8219] cxusb: i2c read failed [ 425.717232][ T3598] usb 6-1: media controller created [ 425.764409][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.777916][ T8220] vivid-008: reconnect [ 425.878574][ T3598] usb 6-1: selecting invalid altsetting 6 [ 425.908052][ T3598] usb 6-1: digital interface selection failed (-22) [ 425.930475][ T3598] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 425.973544][ T3598] usb 6-1: setting power OFF [ 425.986372][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 425.999941][ T3598] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 426.019041][ T3598] (NULL device *): no alternate interface [ 426.039899][ T3598] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 426.085258][ T3598] usb 6-1: USB disconnect, device number 9 [ 427.378524][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.423834][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.461511][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.640515][ T8274] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.621353][ T8296] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 429.176677][ T8320] binder: 8314:8320 unknown command 1077961494 [ 429.276115][ T8320] binder: 8314:8320 ioctl c0306201 200000000100 returned -22 [ 429.641305][ T8328] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 431.930790][ T8356] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 432.380450][ T4314] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 433.260615][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 433.272378][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.340230][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.357399][ T4314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.370887][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.379524][ T4314] usb 4-1: Product: syz [ 433.388059][ T4314] usb 4-1: Manufacturer: syz [ 433.401454][ T4314] usb 4-1: SerialNumber: syz [ 433.644912][ T4314] usb 4-1: 0:2 : does not exist [ 433.687085][ T4314] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 433.809713][ T4314] usb 4-1: USB disconnect, device number 13 [ 437.756612][ T8435] vivid-000: disconnect [ 438.185987][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 438.345218][ T8427] vivid-000: reconnect [ 440.421438][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.427879][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.293338][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1041'. [ 444.750666][ T8510] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 444.790527][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 445.061662][ T8501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.717460][ T8525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1045'. [ 449.178291][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 449.546259][ T8570] binder: 8565:8570 unknown command 1077961494 [ 449.558217][ T8570] binder: 8565:8570 ioctl c0306201 200000000100 returned -22 [ 453.187375][ T8615] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 453.290124][ T4314] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 453.510153][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 453.519437][ T4314] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 453.544887][ T4314] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.604501][ T4314] usb 6-1: config 0 has no interfaces? [ 453.640940][ T4314] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 453.685804][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.724779][ T4314] usb 6-1: Product: syz [ 453.738807][ T4314] usb 6-1: Manufacturer: syz [ 453.756329][ T4314] usb 6-1: SerialNumber: syz [ 453.777590][ T4314] usb 6-1: config 0 descriptor?? [ 453.998610][ T8011] usb 6-1: USB disconnect, device number 10 [ 455.960117][ T4335] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 456.171688][ T4335] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.197399][ T4335] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.283775][ T4335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.335800][ T4335] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 456.390208][ T4335] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 456.470228][ T4335] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.499597][ T4335] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.542695][ T4335] usb 6-1: Product: syz [ 456.547096][ T4335] usb 6-1: Manufacturer: syz [ 456.601895][ T4335] cdc_wdm 6-1:1.0: skipping garbage [ 456.624549][ T4335] cdc_wdm 6-1:1.0: skipping garbage [ 456.670681][ T4335] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 456.786271][ T4335] cdc_wdm 6-1:1.0: Unknown control protocol [ 457.292689][ T4335] usb 6-1: USB disconnect, device number 11 [ 457.905538][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 461.010122][ T4383] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 461.271391][ T4383] usb 4-1: Using ep0 maxpacket: 8 [ 461.842397][ T4383] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 461.891225][ T4383] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.942858][ T4383] usb 4-1: config 0 has no interfaces? [ 461.953516][ T4383] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 462.005831][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.038075][ T4383] usb 4-1: Product: syz [ 462.046361][ T4383] usb 4-1: Manufacturer: syz [ 462.064966][ T4383] usb 4-1: SerialNumber: syz [ 462.089056][ T4383] usb 4-1: config 0 descriptor?? [ 462.230127][ T8714] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 462.317531][ T4383] usb 4-1: USB disconnect, device number 14 [ 462.896377][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 465.710063][ T4328] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 465.900423][ T4328] usb 6-1: Using ep0 maxpacket: 8 [ 465.908178][ T4328] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 465.939558][ T4328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.000108][ T4328] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.096567][ T4328] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 466.124021][ T4328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.238940][ T4328] usb 6-1: Product: syz [ 467.259263][ T4328] usb 6-1: Manufacturer: syz [ 467.277977][ T4328] usb 6-1: SerialNumber: syz [ 467.321047][ T4328] usb 6-1: config 0 descriptor?? [ 467.555960][ T4328] usb 6-1: USB disconnect, device number 12 [ 467.652899][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 469.386500][ T8789] tipc: Started in network mode [ 469.401026][ T8789] tipc: Node identity 84e, cluster identity 4711 [ 469.408556][ T8789] tipc: Node number set to 2126 [ 472.280140][ T4328] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 472.292828][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 472.580118][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 472.587203][ T4328] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 472.599730][ T4328] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.610531][ T4328] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.623422][ T4328] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 472.633418][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.643568][ T4328] usb 3-1: Product: syz [ 472.650287][ T4328] usb 3-1: Manufacturer: syz [ 472.655250][ T4328] usb 3-1: SerialNumber: syz [ 472.669949][ T4328] usb 3-1: config 0 descriptor?? [ 472.765803][ T8834] loop2: detected capacity change from 0 to 7 [ 472.777008][ T4261] loop2: p1 [ 472.787906][ T4261] loop2: partition table partially beyond EOD, truncated [ 472.807850][ T4261] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 472.830450][ T8834] loop2: p1 [ 472.836784][ T8834] loop2: partition table partially beyond EOD, truncated [ 472.852667][ T8834] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 472.884942][ T4328] usb 3-1: USB disconnect, device number 15 [ 472.986299][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1133'. [ 475.127735][ T8842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.608233][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 475.830313][ T8862] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 476.190109][ T127] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 476.373837][ T127] usb 6-1: Using ep0 maxpacket: 16 [ 476.391120][ T127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.424754][ T127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.476291][ T127] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 476.506956][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.537400][ T127] usb 6-1: Product: syz [ 476.554615][ T127] usb 6-1: Manufacturer: syz [ 476.560129][ T4321] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 477.284139][ T127] usb 6-1: SerialNumber: syz [ 477.440178][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 477.446823][ T4321] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 477.483964][ T4321] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 477.509235][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.533981][ T127] usb 6-1: 0:2 : does not exist [ 477.546485][ T127] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 477.558326][ T4321] usb 4-1: Product: syz [ 477.585345][ T4321] usb 4-1: Manufacturer: syz [ 477.611116][ T127] usb 6-1: USB disconnect, device number 13 [ 477.667848][ T4321] usb 4-1: SerialNumber: syz [ 477.691257][ T4321] usb 4-1: config 0 descriptor?? [ 477.729594][ T4321] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 477.769637][ T4321] usb 4-1: setting power ON [ 477.789779][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 477.810109][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 477.844815][ T4321] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 477.874004][ T4321] usb 4-1: media controller created [ 477.911084][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.928733][ T8883] dvb-usb: bulk message failed: -22 (3/0) [ 477.950334][ T8883] dvb-usb: bulk message failed: -22 (4/0) [ 477.963919][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.988609][ T8883] cxusb: i2c read failed [ 478.057824][ T4321] usb 4-1: selecting invalid altsetting 6 [ 478.094876][ T4321] usb 4-1: digital interface selection failed (-22) [ 478.126573][ T4321] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 478.149651][ T4321] usb 4-1: setting power OFF [ 478.160190][ T4321] dvb-usb: bulk message failed: -22 (2/0) [ 478.172938][ T4321] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 478.201862][ T4321] (NULL device *): no alternate interface [ 478.260396][ T4321] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 478.380448][ T4321] usb 4-1: USB disconnect, device number 15 [ 481.732892][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1157'. [ 482.149206][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 482.763726][ T8959] fuse: Bad value for 'fd' [ 482.873992][ T8959] netlink: 'syz.3.1160': attribute type 12 has an invalid length. [ 485.270182][ T127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 485.471472][ T127] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.498400][ T127] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 485.570173][ T127] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.620152][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 485.683351][ T127] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 485.741801][ T127] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.790112][ T127] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.829446][ T127] usb 5-1: Product: syz [ 485.860251][ T127] usb 5-1: Manufacturer: syz [ 485.938049][ T127] cdc_wdm 5-1:1.0: skipping garbage [ 485.966140][ T127] cdc_wdm 5-1:1.0: skipping garbage [ 485.990788][ T127] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 486.010148][ T127] cdc_wdm 5-1:1.0: Unknown control protocol [ 488.045719][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 488.053009][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 488.060430][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 488.067399][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 488.082233][ T3598] usb 5-1: USB disconnect, device number 8 [ 490.800387][ T9053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.610116][ T4335] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 492.871577][ T4335] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 494.078288][ T4335] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 494.123583][ T4335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 494.156642][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1189'. [ 494.159524][ T4335] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 494.210732][ T4335] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 494.260313][ T4335] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.291208][ T4335] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.340159][ T4335] usb 6-1: Product: syz [ 494.344663][ T4335] usb 6-1: Manufacturer: syz [ 494.398727][ T4335] usb 6-1: can't set config #1, error -71 [ 494.418567][ T4335] usb 6-1: USB disconnect, device number 14 [ 495.206754][ T9102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.300209][ T9125] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 497.640145][ T4383] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 497.850492][ T4383] usb 4-1: Using ep0 maxpacket: 16 [ 497.859883][ T4383] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.871379][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1199'. [ 497.928673][ T4383] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.974158][ T4383] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.000146][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.008620][ T4383] usb 4-1: Product: syz [ 498.013057][ T4383] usb 4-1: Manufacturer: syz [ 498.018054][ T4383] usb 4-1: SerialNumber: syz [ 498.233456][ T4383] usb 4-1: 0:2 : does not exist [ 498.263915][ T4383] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 498.293668][ T4383] usb 4-1: USB disconnect, device number 16 [ 498.584724][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.866449][ T9188] vivid-000: disconnect [ 500.939148][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.297570][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 501.362706][ T9173] vivid-000: reconnect [ 501.585479][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.592296][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.866772][ T26] audit: type=1326 audit(1771282475.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.076545][ T26] audit: type=1326 audit(1771282475.461:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.170193][ T26] audit: type=1326 audit(1771282475.461:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.340337][ T26] audit: type=1326 audit(1771282475.461:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.420039][ T26] audit: type=1326 audit(1771282475.471:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.546725][ T26] audit: type=1326 audit(1771282475.471:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.647121][ T26] audit: type=1326 audit(1771282475.471:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.730323][ T26] audit: type=1326 audit(1771282475.471:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.813628][ T26] audit: type=1326 audit(1771282475.471:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.970190][ T26] audit: type=1326 audit(1771282476.321:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b559bf79 code=0x7ffc0000 [ 503.994707][ T9241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.213711][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1231'. [ 504.423764][ T9246] xt_hashlimit: size too large, truncated to 1048576 [ 504.465588][ T9211] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1221'. [ 504.476321][ T9211] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 505.050898][ T9251] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 505.480289][ T4383] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 506.120123][ T4383] usb 6-1: Using ep0 maxpacket: 16 [ 506.126956][ T4383] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.179521][ T4383] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.228133][ T4383] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.243739][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.257432][ T4383] usb 6-1: Product: syz [ 506.281090][ T4383] usb 6-1: Manufacturer: syz [ 506.286466][ T4383] usb 6-1: SerialNumber: syz [ 506.509634][ T4383] usb 6-1: 0:2 : does not exist [ 506.529369][ T4383] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 506.611960][ T4383] usb 6-1: USB disconnect, device number 15 [ 506.659946][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.674936][ T4383] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 507.688511][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 507.910061][ T4383] usb 6-1: Using ep0 maxpacket: 32 [ 507.924111][ T4383] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 507.935325][ T4383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 507.947444][ T4383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 507.968545][ T4383] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 508.007132][ T4383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.025159][ T4383] usb 6-1: Product: syz [ 508.032723][ T4383] usb 6-1: Manufacturer: syz [ 508.048392][ T4383] usb 6-1: SerialNumber: syz [ 508.060918][ T4383] usb 6-1: config 0 descriptor?? [ 511.596459][ T3598] usb 6-1: USB disconnect, device number 16 [ 513.721033][ T4461] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 513.920133][ T4461] usb 6-1: Using ep0 maxpacket: 8 [ 514.641711][ T4461] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 514.733355][ T4461] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 514.783047][ T4461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.811314][ T4461] usb 6-1: Product: syz [ 514.853549][ T4461] usb 6-1: Manufacturer: syz [ 514.858839][ T4461] usb 6-1: SerialNumber: syz [ 514.885816][ T4461] usb 6-1: config 0 descriptor?? [ 514.914756][ T4461] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 514.940116][ T4461] usb 6-1: setting power ON [ 514.951613][ T4461] dvb-usb: bulk message failed: -22 (2/0) [ 514.973456][ T4461] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 515.039033][ T4461] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 515.058234][ T4461] usb 6-1: media controller created [ 515.101798][ T9383] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 515.113255][ T4461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.124488][ T9378] dvb-usb: bulk message failed: -22 (3/0) [ 515.153720][ T9378] dvb-usb: bulk message failed: -22 (4/0) [ 515.159499][ T9378] cxusb: i2c read failed [ 515.235595][ T4461] usb 6-1: selecting invalid altsetting 6 [ 515.268165][ T4461] usb 6-1: digital interface selection failed (-22) [ 515.300282][ T4461] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 515.342928][ T4461] usb 6-1: setting power OFF [ 515.357474][ T4461] dvb-usb: bulk message failed: -22 (2/0) [ 515.374227][ T4461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 515.404804][ T4461] (NULL device *): no alternate interface [ 515.467696][ T4461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 515.539498][ T4461] usb 6-1: USB disconnect, device number 17 [ 519.074903][ T3598] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 519.270153][ T3598] usb 3-1: Using ep0 maxpacket: 8 [ 519.276694][ T3598] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 519.298155][ T3598] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 519.328686][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.356973][ T3598] usb 3-1: Product: syz [ 519.379520][ T3598] usb 3-1: Manufacturer: syz [ 519.395228][ T3598] usb 3-1: SerialNumber: syz [ 519.411022][ T3598] usb 3-1: config 0 descriptor?? [ 519.437727][ T3598] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 519.468381][ T9438] binder: 9435:9438 unknown command 1077961494 [ 519.475892][ T9438] binder: 9435:9438 ioctl c0306201 200000000100 returned -22 [ 519.483879][ T3598] usb 3-1: setting power ON [ 519.498826][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 519.529702][ T3598] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.561031][ T3598] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 519.601476][ T3598] usb 3-1: media controller created [ 519.624591][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.635561][ T9429] dvb-usb: bulk message failed: -22 (3/0) [ 519.645495][ T9429] dvb-usb: bulk message failed: -22 (4/0) [ 519.667047][ T9429] cxusb: i2c read failed [ 519.709684][ T3598] usb 3-1: selecting invalid altsetting 6 [ 519.766532][ T3598] usb 3-1: digital interface selection failed (-22) [ 519.817110][ T3598] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 519.863317][ T3598] usb 3-1: setting power OFF [ 519.869188][ T3598] dvb-usb: bulk message failed: -22 (2/0) [ 519.897989][ T3598] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 519.947559][ T3598] (NULL device *): no alternate interface [ 520.031835][ T3598] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 520.127140][ T3598] usb 3-1: USB disconnect, device number 16 [ 520.626103][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 522.041776][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.253746][ T9474] i2c i2c-0: dtv_property_process_set: SET cmd 0x79735f77 undefined [ 522.544362][ T3598] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 522.582562][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 522.640138][ T4461] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 522.750135][ T3598] usb 5-1: Using ep0 maxpacket: 16 [ 522.767702][ T3598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.791847][ T3598] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.814779][ T3598] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.834640][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.843207][ T4461] usb 6-1: Using ep0 maxpacket: 8 [ 522.848633][ T3598] usb 5-1: Product: syz [ 522.854008][ T3598] usb 5-1: Manufacturer: syz [ 522.859239][ T3598] usb 5-1: SerialNumber: syz [ 522.865835][ T4461] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 522.880063][ T4461] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 522.891636][ T4461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.900464][ T4461] usb 6-1: Product: syz [ 522.905163][ T4461] usb 6-1: Manufacturer: syz [ 522.910401][ T4461] usb 6-1: SerialNumber: syz [ 522.918286][ T4461] usb 6-1: config 0 descriptor?? [ 522.936481][ T4461] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 522.955213][ T4461] usb 6-1: setting power ON [ 522.960303][ T4461] dvb-usb: bulk message failed: -22 (2/0) [ 522.971082][ T4461] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.982207][ T4461] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 522.991065][ T4461] usb 6-1: media controller created [ 523.012453][ T4461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.031247][ T4461] usb 6-1: selecting invalid altsetting 6 [ 523.037266][ T4461] usb 6-1: digital interface selection failed (-22) [ 523.044395][ T4461] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 523.066890][ T4461] usb 6-1: setting power OFF [ 523.082937][ T3598] usb 5-1: 0:2 : does not exist [ 523.095458][ T4461] dvb-usb: bulk message failed: -22 (2/0) [ 523.105523][ T3598] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 523.113259][ T4461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 523.123793][ T4461] (NULL device *): no alternate interface [ 523.130092][ T9479] dvb-usb: bulk message failed: -22 (3/0) [ 523.139552][ T3598] usb 5-1: USB disconnect, device number 9 [ 523.180748][ T9479] dvb-usb: bulk message failed: -22 (4/0) [ 523.189657][ T9479] cxusb: i2c read failed [ 523.196770][ T4461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 523.223551][ T4461] usb 6-1: USB disconnect, device number 18 [ 523.395458][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.212784][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 524.212794][ T26] audit: type=1326 audit(1771282496.681:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 524.374046][ T26] audit: type=1326 audit(1771282496.711:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 524.476494][ T26] audit: type=1326 audit(1771282496.711:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 524.593933][ T26] audit: type=1326 audit(1771282496.711:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 524.639776][ T26] audit: type=1326 audit(1771282496.711:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dd979bf79 code=0x7ffc0000 [ 525.925824][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 526.954949][ T9541] vivid-000: disconnect [ 526.960718][ T9539] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 527.981073][ T9541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1314'. [ 528.345591][ T9523] vivid-000: reconnect [ 529.946157][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 531.326489][ T9605] binder: 9601:9605 unknown command 1077961494 [ 531.334120][ T9605] binder: 9601:9605 ioctl c0306201 200000000100 returned -22 [ 532.509118][ T26] audit: type=1326 audit(1771282504.971:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31299bf79 code=0x7ffc0000 [ 532.638090][ T26] audit: type=1326 audit(1771282504.971:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9617 comm="syz.5.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb31299bf79 code=0x7ffc0000 [ 532.822680][ T9623] ================================================================== [ 532.831142][ T9623] BUG: KFENCE: use-after-free read in dvb_device_open+0xc6/0x370 [ 532.831142][ T9623] [ 532.841436][ T9623] Use-after-free read at 0xffff88823bc70f18 (in kfence-#55): [ 532.848905][ T9623] dvb_device_open+0xc6/0x370 [ 532.853580][ T9623] chrdev_open+0x5c5/0x6a0 [ 532.858149][ T9623] do_dentry_open+0x7e9/0x10d0 [ 532.863087][ T9623] path_openat+0x2635/0x2ee0 [ 532.867769][ T9623] do_filp_open+0x1f1/0x430 [ 532.872263][ T9623] do_sys_openat2+0x150/0x4b0 [ 532.876931][ T9623] __x64_sys_openat+0x135/0x160 [ 532.881855][ T9623] do_syscall_64+0x4c/0xa0 [ 532.886257][ T9623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.892374][ T9623] [ 532.894781][ T9623] kfence-#55: 0xffff88823bc70f00-0xffff88823bc70fd7, size=216, cache=kmalloc-256 [ 532.894781][ T9623] [ 532.898413][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 532.906403][ T9623] allocated by task 1 on cpu 1 at 13.064378s: [ 532.906542][ T9623] __kmem_cache_alloc_node+0x1fa/0x260 [ 532.927452][ T9623] kmalloc_trace+0x26/0xe0 [ 532.932039][ T9623] dvb_register_device+0x311/0x2150 [ 532.937230][ T9623] dvb_register_frontend+0x645/0x920 [ 532.942853][ T9623] vidtv_bridge_probe+0x9a1/0xf70 [ 532.948160][ T9623] platform_probe+0x137/0x1c0 [ 532.952876][ T9623] really_probe+0x2aa/0xc70 [ 532.958087][ T9623] __driver_probe_device+0x18c/0x330 [ 532.964103][ T9623] driver_probe_device+0x4f/0x420 [ 532.969600][ T9623] __driver_attach+0x44a/0x6e0 [ 532.974826][ T9623] bus_for_each_dev+0x182/0x1f0 [ 532.980047][ T9623] bus_add_driver+0x30a/0x5a0 [ 532.984719][ T9623] driver_register+0x32d/0x430 [ 532.989830][ T9623] vidtv_bridge_init+0x39/0x67 [ 532.994668][ T9623] do_one_initcall+0x26a/0x840 [ 532.999685][ T9623] do_initcall_level+0x137/0x1e4 [ 533.004835][ T9623] do_initcalls+0x4b/0x8a [ 533.009168][ T9623] kernel_init_freeable+0x415/0x5be [ 533.014444][ T9623] kernel_init+0x19/0x1b0 [ 533.018800][ T9623] ret_from_fork+0x1f/0x30 [ 533.023393][ T9623] [ 533.025832][ T9623] freed by task 9539 on cpu 1 at 526.968511s: [ 533.031931][ T9623] dvb_device_open+0x2e7/0x370 [ 533.036687][ T9623] chrdev_open+0x5c5/0x6a0 [ 533.041325][ T9623] do_dentry_open+0x7e9/0x10d0 [ 533.046185][ T9623] path_openat+0x2635/0x2ee0 [ 533.051037][ T9623] do_filp_open+0x1f1/0x430 [ 533.055526][ T9623] do_sys_openat2+0x150/0x4b0 [ 533.060220][ T9623] __x64_sys_openat+0x135/0x160 [ 533.065351][ T9623] do_syscall_64+0x4c/0xa0 [ 533.070042][ T9623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.076721][ T9623] [ 533.079144][ T9623] CPU: 1 PID: 9623 Comm: syz.2.1340 Not tainted syzkaller #0 [ 533.086702][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.097469][ T9623] RIP: 0010:dvb_device_open+0xc6/0x370 [ 533.103241][ T9623] Code: 8b 3f 4d 85 ff 0f 84 80 01 00 00 4c 89 64 24 08 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 2a 21 0e fb <4d> 8b 2c 24 4d 85 ed 0f 84 5b 01 00 00 4c 89 e8 48 c1 e8 03 80 3c [ 533.123191][ T9623] RSP: 0018:ffffc900052c77b0 EFLAGS: 00010246 [ 533.129246][ T9623] RAX: 1ffffffff2df821b RBX: dffffc0000000000 RCX: 0000000000000000 [ 533.137478][ T9623] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 533.145639][ T9623] RBP: 1ffff1104778e1e3 R08: ffffffff8d8ac92f R09: 1ffffffff1b15925 [ 533.153604][ T9623] R10: dffffc0000000000 R11: fffffbfff1b15926 R12: ffff88823bc70f18 [ 533.161943][ T9623] R13: 1ffff92000a58f04 R14: ffff888029202720 R15: ffff88823bc70f00 [ 533.170006][ T9623] FS: 00007fed67df66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 533.179034][ T9623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.185789][ T9623] CR2: ffff88823bc70f18 CR3: 0000000025054000 CR4: 00000000003506e0 [ 533.194232][ T9623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 533.202234][ T9623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 533.210232][ T9623] Call Trace: [ 533.213545][ T9623] [ 533.216556][ T9623] ? do_raw_spin_unlock+0x11d/0x230 [ 533.221970][ T9623] chrdev_open+0x5c5/0x6a0 [ 533.226564][ T9623] ? cd_forget+0x160/0x160 [ 533.231164][ T9623] ? fsnotify_perm+0x39b/0x550 [ 533.236209][ T9623] ? cd_forget+0x160/0x160 [ 533.240629][ T9623] do_dentry_open+0x7e9/0x10d0 [ 533.245851][ T9623] path_openat+0x2635/0x2ee0 [ 533.250710][ T9623] ? verify_lock_unused+0x140/0x140 [ 533.255905][ T9623] ? do_syscall_64+0x4c/0xa0 [ 533.260661][ T9623] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.267351][ T9623] ? do_filp_open+0x430/0x430 [ 533.272037][ T9623] do_filp_open+0x1f1/0x430 [ 533.276727][ T9623] ? vfs_tmpfile+0x480/0x480 [ 533.281401][ T9623] ? _raw_spin_unlock+0x24/0x40 [ 533.286334][ T9623] ? alloc_fd+0x58f/0x630 [ 533.290776][ T9623] do_sys_openat2+0x150/0x4b0 [ 533.295456][ T9623] ? up_read+0x20/0x20 [ 533.299528][ T9623] ? do_sys_open+0xe0/0xe0 [ 533.304120][ T9623] ? lock_chain_count+0x20/0x20 [ 533.309275][ T9623] __x64_sys_openat+0x135/0x160 [ 533.314218][ T9623] do_syscall_64+0x4c/0xa0 [ 533.318805][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 533.323562][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 533.328324][ T9623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.334392][ T9623] RIP: 0033:0x7fed69b5c84e [ 533.338898][ T9623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.358673][ T9623] RSP: 002b:00007fed67df5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.367430][ T9623] RAX: ffffffffffffffda RBX: 00007fed67df66c0 RCX: 00007fed69b5c84e [ 533.375675][ T9623] RDX: 0000000000000002 RSI: 00007fed67df5c00 RDI: ffffffffffffff9c [ 533.383660][ T9623] RBP: 00007fed67df5c00 R08: 0000000000000000 R09: 0000000000000000 [ 533.391625][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 533.399680][ T9623] R13: 00007fed69e16038 R14: 00007fed69e15fa0 R15: 00007ffe9d925078 [ 533.408026][ T9623] [ 533.411048][ T9623] ================================================================== [ 533.419294][ T9623] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 533.427530][ T9623] CPU: 1 PID: 9623 Comm: syz.2.1340 Not tainted syzkaller #0 [ 533.435335][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.445889][ T9623] Call Trace: [ 533.449169][ T9623] [ 533.452106][ T9623] dump_stack_lvl+0x188/0x24e [ 533.456880][ T9623] ? memcpy+0x3c/0x60 [ 533.460955][ T9623] ? show_regs_print_info+0x12/0x12 [ 533.466284][ T9623] ? load_image+0x400/0x400 [ 533.470841][ T9623] panic+0x2e5/0x730 [ 533.474922][ T9623] ? bpf_jit_dump+0xd0/0xd0 [ 533.479540][ T9623] check_panic_on_warn+0x80/0xa0 [ 533.485274][ T9623] kfence_report_error+0x7bf/0xb00 [ 533.490488][ T9623] ? kfence_print_stack+0x290/0x290 [ 533.495690][ T9623] ? dvb_device_open+0xc6/0x370 [ 533.500681][ T9623] ? chrdev_open+0x5c5/0x6a0 [ 533.505342][ T9623] ? do_dentry_open+0x7e9/0x10d0 [ 533.510720][ T9623] ? path_openat+0x2635/0x2ee0 [ 533.515673][ T9623] ? do_filp_open+0x1f1/0x430 [ 533.520747][ T9623] ? do_sys_openat2+0x150/0x4b0 [ 533.525779][ T9623] ? __x64_sys_openat+0x135/0x160 [ 533.530973][ T9623] ? do_syscall_64+0x4c/0xa0 [ 533.535648][ T9623] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.541921][ T9623] ? _raw_spin_lock+0x40/0x40 [ 533.546810][ T9623] ? search_bpf_extables+0x22/0x3c0 [ 533.552015][ T9623] kfence_handle_page_fault+0x471/0x6e0 [ 533.557744][ T9623] ? trim_init_extable+0x3b0/0x3b0 [ 533.563041][ T9623] ? rcu_guarded_free+0x50/0x50 [ 533.568006][ T9623] ? search_bpf_extables+0x367/0x3c0 [ 533.573413][ T9623] ? search_bpf_extables+0x22/0x3c0 [ 533.578969][ T9623] page_fault_oops+0x1af/0x8f0 [ 533.584259][ T9623] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 533.589978][ T9623] ? is_prefetch+0x3d7/0x610 [ 533.595030][ T9623] ? page_fault_oops+0x8f0/0x8f0 [ 533.600184][ T9623] exc_page_fault+0xa8/0x100 [ 533.604849][ T9623] ? mutex_lock_nested+0x10/0x10 [ 533.609951][ T9623] asm_exc_page_fault+0x22/0x30 [ 533.614984][ T9623] RIP: 0010:dvb_device_open+0xc6/0x370 [ 533.620883][ T9623] Code: 8b 3f 4d 85 ff 0f 84 80 01 00 00 4c 89 64 24 08 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 2a 21 0e fb <4d> 8b 2c 24 4d 85 ed 0f 84 5b 01 00 00 4c 89 e8 48 c1 e8 03 80 3c [ 533.640919][ T9623] RSP: 0018:ffffc900052c77b0 EFLAGS: 00010246 [ 533.647216][ T9623] RAX: 1ffffffff2df821b RBX: dffffc0000000000 RCX: 0000000000000000 [ 533.655259][ T9623] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 533.663496][ T9623] RBP: 1ffff1104778e1e3 R08: ffffffff8d8ac92f R09: 1ffffffff1b15925 [ 533.671652][ T9623] R10: dffffc0000000000 R11: fffffbfff1b15926 R12: ffff88823bc70f18 [ 533.680578][ T9623] R13: 1ffff92000a58f04 R14: ffff888029202720 R15: ffff88823bc70f00 [ 533.688937][ T9623] ? do_raw_spin_unlock+0x11d/0x230 [ 533.694272][ T9623] chrdev_open+0x5c5/0x6a0 [ 533.698700][ T9623] ? cd_forget+0x160/0x160 [ 533.703294][ T9623] ? fsnotify_perm+0x39b/0x550 [ 533.708069][ T9623] ? cd_forget+0x160/0x160 [ 533.712501][ T9623] do_dentry_open+0x7e9/0x10d0 [ 533.717444][ T9623] path_openat+0x2635/0x2ee0 [ 533.722038][ T9623] ? verify_lock_unused+0x140/0x140 [ 533.727327][ T9623] ? do_syscall_64+0x4c/0xa0 [ 533.732099][ T9623] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.738626][ T9623] ? do_filp_open+0x430/0x430 [ 533.743537][ T9623] do_filp_open+0x1f1/0x430 [ 533.748236][ T9623] ? vfs_tmpfile+0x480/0x480 [ 533.752917][ T9623] ? _raw_spin_unlock+0x24/0x40 [ 533.757789][ T9623] ? alloc_fd+0x58f/0x630 [ 533.762300][ T9623] do_sys_openat2+0x150/0x4b0 [ 533.767082][ T9623] ? up_read+0x20/0x20 [ 533.771148][ T9623] ? do_sys_open+0xe0/0xe0 [ 533.775650][ T9623] ? lock_chain_count+0x20/0x20 [ 533.780495][ T9623] __x64_sys_openat+0x135/0x160 [ 533.785335][ T9623] do_syscall_64+0x4c/0xa0 [ 533.789745][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 533.794676][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 533.799466][ T9623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.805817][ T9623] RIP: 0033:0x7fed69b5c84e [ 533.810618][ T9623] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 533.830813][ T9623] RSP: 002b:00007fed67df5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 533.839936][ T9623] RAX: ffffffffffffffda RBX: 00007fed67df66c0 RCX: 00007fed69b5c84e [ 533.848598][ T9623] RDX: 0000000000000002 RSI: 00007fed67df5c00 RDI: ffffffffffffff9c [ 533.857620][ T9623] RBP: 00007fed67df5c00 R08: 0000000000000000 R09: 0000000000000000 [ 533.865960][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 533.874194][ T9623] R13: 00007fed69e16038 R14: 00007fed69e15fa0 R15: 00007ffe9d925078 [ 533.883417][ T9623] [ 533.886933][ T9623] Kernel Offset: disabled [ 533.891830][ T9623] Rebooting in 86400 seconds..