last executing test programs: 2m10.771121167s ago: executing program 0 (id=453): r0 = socket$inet6(0xa, 0x80001, 0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 2m8.704860894s ago: executing program 0 (id=458): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {0x0}], 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 2m6.050926978s ago: executing program 0 (id=463): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @private=0x81000, 0x0, 0x0, 'lc\x00', 0x0, 0x80000000, 0x100000}, 0x2c) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, 0x0, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r0, &(0x7f0000001200)=[{0x0}], 0x1, 0x4, 0xb) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 2m4.553328648s ago: executing program 0 (id=471): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) 2m3.921807759s ago: executing program 0 (id=473): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m52.241298701s ago: executing program 0 (id=505): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358", 0xe0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m51.548896327s ago: executing program 32 (id=505): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358", 0xe0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 14.353120372s ago: executing program 1 (id=831): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003fc0)=[{&(0x7f0000000100)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1, 0x0, 0x0, 0x20000004}], 0x1, 0x20000000) sendmsg$inet_sctp(r0, 0x0, 0x24000000) shutdown(r0, 0x1) r1 = dup(r0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0), &(0x7f0000000340)=0x8) 13.915993767s ago: executing program 1 (id=833): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$alg(r0, &(0x7f0000000180)=""/183, 0xb7) 13.779651839s ago: executing program 3 (id=834): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r4}}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 13.646000609s ago: executing program 1 (id=835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket(0x840000000002, 0x3, 0xfa) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000000c0)=""/53, 0x0) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0x5) 9.715162076s ago: executing program 1 (id=844): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 9.584989786s ago: executing program 5 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000e80)) 8.775135592s ago: executing program 1 (id=848): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0}], 0x1}) syz_usb_disconnect(r0) 8.765950593s ago: executing program 4 (id=849): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 8.526949532s ago: executing program 5 (id=850): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x48, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x440, 0x55) getdents64(r5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/234, 0xea) 7.784846132s ago: executing program 4 (id=851): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') keyctl$set_timeout(0xf, 0x0, 0x45) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 7.776597492s ago: executing program 3 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a0800"], 0x94}}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.005366385s ago: executing program 5 (id=854): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket(0x840000000002, 0x3, 0xfa) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f00000000c0)=""/53, &(0x7f0000000100)=0x35) connect$inet(r2, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r3, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0x5) 6.846773518s ago: executing program 4 (id=855): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000000)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@dioread_lock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {}, {@errors_continue}, {@sysvgroups}, {@jqfmt_vfsold}, {@nobarrier}, {@test_dummy_encryption}]}, 0x1, 0x479, &(0x7f0000000480)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 6.751012735s ago: executing program 3 (id=856): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000500)={0x0}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) close(r3) syz_io_uring_setup(0x3bcf, 0x0, 0x0, 0x0) 5.858436377s ago: executing program 3 (id=857): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x48, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x440, 0x55) getdents64(r5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/234, 0xea) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004) 5.813018311s ago: executing program 2 (id=858): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000020c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@grpjquota}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001040)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) 4.906781564s ago: executing program 3 (id=859): r0 = socket$inet6(0xa, 0x80001, 0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.631712086s ago: executing program 2 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.619326267s ago: executing program 4 (id=861): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$I2C_FUNCS(r2, 0x705, &(0x7f0000000040)=0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)={0x14}) r7 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r6, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r6, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b018000000109021b0001000001000904f7000176246700090582020002"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4080000}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x41) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x0, 0x201, 0x80, 0x7, 0x2, 0x9, 0x10000, r8}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x100, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, r10}}, 0x30) ioctl$FS_IOC_GETFLAGS(r0, 0x4008af14, &(0x7f0000000040)) 4.33489014s ago: executing program 3 (id=862): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r4}}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 4.33451144s ago: executing program 2 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x14, 0x1, 0x5, 0xf}, {0x24, 0x0, 0x7}, {0x6, 0x8, 0x3, 0x7ffffdbd}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) inotify_init() r3 = timerfd_create(0x8, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000100}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") 3.495968547s ago: executing program 1 (id=864): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x501043) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8080, 0x40) openat$dsp1(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa59e0abe22112e7e5addee3ab6de7ecefaaaaaaaaaaaaaaaa2786dd603000bb00082b00fc020000000000000000000001000000fe8000000000000000de0b00000000aa00009a030000089078"], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 3.406892695s ago: executing program 2 (id=865): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{&(0x7f0000000200)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="b7a395420f5b2fc7e0e70eacd35b727c04bb84d61727940480500f47fcd62e8f0a35e6bc7b6f520e88a09130e986f1b40d40607bf1a72d6518d59c77deaf31789919f5eae26281c76f24eec8867d9e386dbe", 0x52}], 0x1, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0xca000}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff81}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff80}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}], 0xa8}}, {{&(0x7f0000000600)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000ac0)="fef2b82de2be41fa508058da821d5f624855de16799b8771e177e9359301d037da036705413bc22bc7d5a586b9f17300f8d896751999b24e704bcf5ed46c5e2491a706ff183377dcca55b361f43ecd55b24cf329b1aaba93e14a2423e0595da811ba365d424e70f496f68dfba6f7361634dead08741fef25deaa710167458108223f421fdfaafd41e4ee80150130f1dabb936e36d74380321288474b6a95d8df2320080e989982a0b5cb089fede2d12125776bd197c0a3c62a04f7f22d305ad50505", 0xc2}, {&(0x7f0000000800)="65867a05b97357a80165c2f839c8bfb3f3e10068d13c4adf957080b77298d1072fe01a53b292bd842e13600bf9fee7e041a4f19cbaeec6f5339c0aa241eedcdc66e46b97853fb87ef4250020efd72a91327dd930bb678c223f2a36a79bc59e6ef61c530b2fd31b1d8f70bdbf58c0e3cbaaf64bdc28e423f317d8468b0b03b792d6ea4df30c38c7eab6b0c2254d51e19401758a94ec6ee7333cc850247b3c3de08ab858cd032d1654b7599c011c8ebd6de3c61dae75f3f59e5fef9b10e856ca", 0xbf}, {&(0x7f0000000bc0)="2d0172ad428ceea24069f8df5fd6264157718e08e1d0ea16fe3a5c4914527d17280cb9ab26bff4b911d84ca300fc62b808faa43e5e0acb198982f68314a873d674b49ccc8144e5d4ef181560899e9f4d9427d815e5d3adbdea9910615cc33344f04765a86adae9cb573c33e2ebdf8fd0724b3d388471926e73dbfca12b4df91740697a6a1f3e8f4c92f584a470a44c8bd2331d02ddf0ecb26421dfdabf77a0f70030d6e8da99b84c06fb47cda1abf31e40a26731a6b55538db142a00313bfe5ecb9d5a4e764b7515afc1b3414fa1387bf809d691", 0xd4}, {&(0x7f0000000cc0)="78afb5de7a34a0d5fcc50aedc6f004939e10a60392b6d867fc9acfb738c01825ee349f6822d0f92f0e8ef254fbace6125fe773a75d7063a0684578d0d182aeea1333e76ff7f7934d020bad25f0fd209d3fc94a2d", 0x54}, {&(0x7f0000000d40)="0c10f87230dd8b801d9ccbcb0eaae54f6d564eff889fe55540e24d672ffef7349899b41f259d33c6c6eef72e5a3440339ce13282a8ee1716c587797e084739a0446657798fb01300b2c9ef7745417b84622f863e53dc256642b493ea47ce39ebf0bf4245606d9850996452974f5c63d62ac7908ca674abdf55afab9de99f8eb258a160d26c21c870093904799318d4", 0x8f}, {&(0x7f0000000480)="af2d807279e9302fc946ac6ba100acf4bb07c9a3d3565088e2ae8c604ced", 0x1e}, {&(0x7f0000000e00)="ebb6d678efc4be59ebf3775ef0464ded5c51b197bb385fad398139518bf908d797f71b0c2339e8ee6445866a66857665defb9f473142d9ba9ee75acc17c8158a05c4f27d3e4444dcf336bef9ec1008c59a26cc672a21680657ef0dba0a6674f453c18b89be012dc3c1d5c71c99b6b76c721025b57008bac3a13c", 0x7a}], 0x7, &(0x7f0000000e80)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}, {{&(0x7f0000000ec0)=@x25, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f40)="e2b17d24887d67f8d8fb0324beee68a28c", 0x11}], 0x1, &(0x7f0000000fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x70dc9525}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xd8}}], 0x4, 0x4000000) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)=""/131, 0x83}], 0x1}, 0x60) 3.286805264s ago: executing program 5 (id=866): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900013000000000400004803c0001800b00010065787468647200002c00028008000740000000000500020000000000080003400000004a08000640000000010800"], 0x94}}, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.254665357s ago: executing program 2 (id=867): openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x24, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000005c0)=@multiplanar_mmap={0x81, 0x4, 0x4, 0x2000, 0x80, {}, {0x2, 0x2, 0x4, 0x7, 0x2, 0x4, "4360c0ba"}, 0x3, 0x1, {0x0}, 0x9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2.290651125s ago: executing program 2 (id=868): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f0000002740)=ANY=[], 0x1, 0x5fed, &(0x7f0000008240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.161701695s ago: executing program 5 (id=869): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x48, 0x9f2, 0xe7, 0x3, 0x2, 0xb1, 0x8, 0x5, 0x4, 0xe, [0xfffffffe, 0x2, 0x6, 0x3, 0x6, 0x6, 0x200, 0xd]}}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, 0x0, 0x440, 0x55) getdents64(r5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) getresgid(&(0x7f0000000c40), &(0x7f0000000140), 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX, @ANYBLOB="00006b746769643d0092", @ANYRES8, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/234, 0xea) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4004) 1.190174623s ago: executing program 5 (id=870): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@nojournal_checksum}, {@orlov}, {@user_xattr}, {@quota}, {@delalloc}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/199, 0xffffff92) 1.100429191s ago: executing program 4 (id=871): ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r4, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000002700)={0xffff, [[0x9, 0x1, 0x5, 0x5, 0x7, 0x10, 0x3, 0x400], [0x5, 0x401, 0x1a, 0x4, 0x8, 0x6, 0x3, 0x3], [0x4, 0x1, 0xd1af, 0xffffb3c0, 0x3, 0x9, 0x4d90, 0x7]], '\x00', [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x401, 0xc, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x7, 0x1, 0x0, 0x1}, {0xea, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x100, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x752, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x1}, {0xa7, 0x1, 0x0, 0x1}], '\x00', 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=872): r0 = socket$inet6(0xa, 0x80001, 0x3) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 488008.048:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5274 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dbcb8ebe9 code=0x7ffc0000 [ 130.617775][ T5290] device vti0 entered promiscuous mode [ 130.763735][ T4256] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.804432][ T4256] usb 4-1: device descriptor read/8, error -71 [ 131.093739][ T4256] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.134424][ T4256] usb 4-1: device descriptor read/8, error -71 [ 131.255354][ T4256] usb usb4-port1: unable to enumerate USB device [ 131.879138][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.887485][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.090777][ T5296] device wg1 left promiscuous mode [ 132.379410][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.431348][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.718202][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.726924][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.950275][ T5296] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.959701][ T5296] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.973144][ T5296] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.987261][ T5296] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.101456][ T5299] device vlan2 entered promiscuous mode [ 133.119257][ T5300] netlink: 48 bytes leftover after parsing attributes in process `syz.4.252'. [ 134.193810][ T4366] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.388335][ T4366] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.408532][ T4366] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.430978][ T26] audit: type=1326 audit(1756488012.218:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5324 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111038ebe9 code=0x7ffc0000 [ 134.475391][ T4366] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.554706][ T26] audit: type=1326 audit(1756488012.248:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5324 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f111038ebe9 code=0x7ffc0000 [ 134.579882][ T4366] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.629032][ T4366] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.656535][ T26] audit: type=1326 audit(1756488012.248:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5324 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111038ebe9 code=0x7ffc0000 [ 134.680208][ T4366] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.737905][ T4366] usb 4-1: Product: syz [ 134.753600][ T4366] usb 4-1: Manufacturer: syz [ 134.779242][ T4366] cdc_wdm 4-1:1.0: skipping garbage [ 134.792487][ T26] audit: type=1326 audit(1756488012.248:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5324 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111038ebe9 code=0x7ffc0000 [ 134.822104][ T5330] qrtr: Invalid version 0 [ 134.826822][ T4366] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 134.898980][ T26] audit: type=1326 audit(1756488012.258:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5324 comm="syz.4.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f111038ebe9 code=0x7ffc0000 [ 134.983401][ T4366] usb 4-1: USB disconnect, device number 11 [ 135.413818][ T4324] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.446638][ T5343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.265'. [ 135.515877][ T5346] vivid-000: ================= START STATUS ================= [ 135.554514][ T5345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.264'. [ 135.583981][ T4324] usb 3-1: device descriptor read/64, error -71 [ 135.594364][ T5346] vivid-000: Test Pattern: 75% Colorbar [ 135.615160][ T5346] vivid-000: Fill Percentage of Frame: 100 [ 135.621909][ T5346] vivid-000: Horizontal Movement: No Movement [ 135.632319][ T5350] netlink: 'syz.1.264': attribute type 13 has an invalid length. [ 135.641714][ T5346] vivid-000: Vertical Movement: No Movement [ 135.652778][ T5346] vivid-000: OSD Text Mode: All [ 135.658822][ T5346] vivid-000: Show Border: false [ 135.664399][ T5346] vivid-000: Show Square: false [ 135.670230][ T5346] vivid-000: Sensor Flipped Horizontally: false [ 135.680771][ T5346] vivid-000: Sensor Flipped Vertically: false [ 135.692908][ T5346] vivid-000: Insert SAV Code in Image: false [ 135.705065][ T5346] vivid-000: Insert EAV Code in Image: false [ 135.716484][ T5346] vivid-000: Insert Video Guard Band: false [ 135.729715][ T5346] vivid-000: Reduced Framerate: false [ 135.739174][ T5346] vivid-000: Enable Capture Cropping: true [ 135.750269][ T5346] vivid-000: Enable Capture Composing: true [ 135.759717][ T5346] vivid-000: Enable Capture Scaler: true [ 135.769824][ T5346] vivid-000: Timestamp Source: End of Frame [ 135.840172][ T5346] vivid-000: Colorspace: sRGB [ 135.851269][ T5346] vivid-000: Transfer Function: [ 135.855121][ T4324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 135.869515][ T5346] Default [ 135.877468][ T5346] vivid-000: Y'CbCr Encoding: Default [ 135.897383][ T5346] vivid-000: HSV Encoding: Hue 0-179 [ 135.908590][ T5346] vivid-000: Quantization: Default [ 135.917552][ T5346] vivid-000: Apply Alpha To Red Only: false [ 135.921371][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.931757][ T5346] vivid-000: Standard Aspect Ratio: 4x3 [ 135.942825][ T5346] vivid-000: DV Timings Signal Mode: [ 135.947309][ T5350] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.960192][ T5346] Current DV Timings inactive [ 135.965750][ T5346] vivid-000: DV Timings: 640x480p59 inactive [ 135.971863][ T5346] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 135.979685][ T5346] vivid-000: Maximum EDID Blocks: 2 [ 135.986428][ T5346] vivid-000: Limited RGB Range (16-235): false [ 135.994346][ T5346] vivid-000: Rx RGB Quantization Range: Automatic [ 136.002177][ T5346] vivid-000: Power Present: 0x00000001 [ 136.008920][ T5346] tpg source WxH: 640x360 (Y'CbCr) [ 136.014553][ T5346] tpg field: 1 [ 136.019009][ T5346] tpg crop: 640x360@0x0 [ 136.024216][ T5346] tpg compose: 640x360@0x0 [ 136.036969][ T5346] tpg colorspace: 8 [ 136.055600][ T5346] tpg transfer function: 0/0 [ 136.067552][ T4324] usb 3-1: device descriptor read/64, error -71 [ 136.075892][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.094914][ T5346] tpg Y'CbCr encoding: 0/0 [ 136.099612][ T5346] tpg quantization: 0/0 [ 136.108198][ T5346] tpg RGB range: 0/2 [ 136.112537][ T5346] vivid-000: ================== END STATUS ================== [ 136.115564][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.162791][ T5350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.214687][ T4324] usb usb3-port1: attempt power cycle [ 136.498312][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 136.498325][ T26] audit: type=1326 audit(1756488014.288:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.535941][ T26] audit: type=1326 audit(1756488014.318:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.561006][ T26] audit: type=1326 audit(1756488014.318:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.588049][ T26] audit: type=1326 audit(1756488014.318:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.616717][ T26] audit: type=1326 audit(1756488014.328:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.653815][ T4324] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 136.662745][ T26] audit: type=1326 audit(1756488014.328:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.694635][ T4324] usb 3-1: device descriptor read/8, error -71 [ 136.723564][ T26] audit: type=1326 audit(1756488014.328:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.777520][ T5365] qrtr: Invalid version 0 [ 136.796392][ T26] audit: type=1326 audit(1756488014.328:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5359 comm="syz.0.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86678ebe9 code=0x7ffc0000 [ 136.973968][ T4324] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 137.014253][ T4324] usb 3-1: device descriptor read/8, error -71 [ 137.134337][ T4324] usb usb3-port1: unable to enumerate USB device [ 138.063049][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 138.564457][ T4366] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.625892][ T4324] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 138.763811][ T4366] usb 1-1: Using ep0 maxpacket: 8 [ 138.772513][ T4366] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 138.783230][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.807857][ T4366] usb 1-1: Product: syz [ 138.812055][ T4366] usb 1-1: Manufacturer: syz [ 138.838685][ T4324] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.855211][ T4324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.870138][ T4366] usb 1-1: SerialNumber: syz [ 138.884502][ T4366] usb 1-1: config 0 descriptor?? [ 138.891203][ T4324] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.901075][ T4324] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.916354][ T4366] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 138.925464][ T4366] dvb-usb: bulk message failed: -22 (2/0) [ 138.932569][ T4324] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.974751][ T4366] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.002333][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.036008][ T4366] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 139.045133][ T4324] usb 3-1: Product: syz [ 139.051589][ T4324] usb 3-1: Manufacturer: syz [ 139.063883][ T4366] usb 1-1: media controller created [ 139.090022][ T4324] cdc_wdm 3-1:1.0: skipping garbage [ 139.127703][ T4324] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 139.159819][ T4366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.331191][ T5394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.349230][ T126] usb 3-1: USB disconnect, device number 16 [ 139.378664][ T5394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.440907][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.448387][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.459945][ T26] audit: type=1326 audit(1756488017.248:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 139.482461][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.543305][ T26] audit: type=1326 audit(1756488017.248:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 139.669468][ T5390] device wg1 left promiscuous mode [ 139.675287][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 139.684797][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.701873][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.714348][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.727316][ T7] usb 2-1: config 0 descriptor?? [ 139.945293][ T7] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 140.372460][ T7] usb 2-1: USB disconnect, device number 8 [ 140.577829][ T5390] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.587039][ T5390] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.597177][ T5390] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.606625][ T5390] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.725274][ T5390] device vlan2 left promiscuous mode [ 141.038425][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 141.185787][ T5427] device wireguard0 entered promiscuous mode [ 141.211764][ T5432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.224336][ T5432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.277232][ T4366] cxusb: set interface failed [ 141.285872][ T4366] dvb-usb: bulk message failed: -22 (1/0) [ 141.476627][ T4366] DVB: Unable to find symbol mt352_attach() [ 141.482571][ T4366] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 141.753930][ T4366] rc_core: IR keymap rc-dvico-portable not found [ 141.765546][ T4366] Registered IR keymap rc-empty [ 141.808223][ T4366] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 141.862340][ T4366] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input9 [ 141.925220][ T4366] dvb-usb: schedule remote query interval to 100 msecs. [ 141.951140][ T4366] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 142.030030][ T4366] usb 1-1: USB disconnect, device number 6 [ 142.102900][ T4366] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 142.533801][ T4366] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.725360][ T4366] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 142.740064][ T4366] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.765985][ T4366] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.800401][ T4366] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.829105][ T4366] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.841572][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.860548][ T4366] usb 1-1: Product: syz [ 142.865260][ T4366] usb 1-1: Manufacturer: syz [ 142.875035][ T4366] cdc_wdm 1-1:1.0: skipping garbage [ 142.881040][ T4366] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 143.090062][ T4256] usb 1-1: USB disconnect, device number 7 [ 143.133759][ T126] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.323782][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 143.330842][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.359367][ T126] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.382859][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.417615][ T126] usb 3-1: config 0 descriptor?? [ 143.663569][ T126] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 143.719692][ T5463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 144.117460][ T4256] usb 3-1: USB disconnect, device number 17 [ 144.354967][ T5479] device wg1 entered promiscuous mode [ 145.853989][ T4348] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.093737][ T4348] usb 1-1: Using ep0 maxpacket: 8 [ 146.100493][ T4348] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.103524][ T4366] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 146.148609][ T4348] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.163172][ T4366] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.247608][ T4348] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.316247][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.360843][ T4348] usb 1-1: config 0 descriptor?? [ 146.400744][ T4348] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 146.538821][ T5512] device vti0 left promiscuous mode [ 146.562625][ T5512] device vlan2 left promiscuous mode [ 146.928015][ T5523] netlink: 32 bytes leftover after parsing attributes in process `syz.4.317'. [ 146.944015][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 147.033823][ T4348] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 147.145784][ T7] usb 3-1: config 0 has no interfaces? [ 147.154490][ T7] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 147.166141][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.178057][ T7] usb 3-1: config 0 descriptor?? [ 147.247120][ T4348] usb 4-1: Using ep0 maxpacket: 8 [ 147.254752][ T4348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.268714][ T4348] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.279131][ T4348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.292050][ T4348] usb 4-1: config 0 descriptor?? [ 147.407663][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 147.428200][ T5515] device bond0 entered promiscuous mode [ 147.436611][ T5515] device bond_slave_0 entered promiscuous mode [ 147.450294][ T5515] device bond_slave_1 entered promiscuous mode [ 147.460658][ T5515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.471586][ T5515] device bond0 left promiscuous mode [ 147.479733][ T5515] device bond_slave_0 left promiscuous mode [ 147.488682][ T5515] device bond_slave_1 left promiscuous mode [ 147.511191][ T4348] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 147.666374][ T4256] usb 3-1: USB disconnect, device number 18 [ 147.969273][ T4256] usb 4-1: USB disconnect, device number 12 [ 148.619134][ T7] usb 1-1: USB disconnect, device number 8 [ 148.703933][ T4256] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 148.913730][ T4256] usb 3-1: Using ep0 maxpacket: 32 [ 148.940083][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 148.976489][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.989193][ T5543] netlink: 48 bytes leftover after parsing attributes in process `syz.2.322'. [ 150.281239][ T5571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.331'. [ 150.985674][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.175713][ T7] usb 1-1: config 0 has no interfaces? [ 151.181454][ T7] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 151.227575][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.278140][ T7] usb 1-1: config 0 descriptor?? [ 151.501322][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 151.521518][ T5572] delete_channel: no stack [ 151.530944][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 151.623146][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 151.677236][ T5579] device bond0 entered promiscuous mode [ 151.682826][ T5579] device bond_slave_0 entered promiscuous mode [ 151.847630][ T5579] device bond_slave_1 entered promiscuous mode [ 151.948324][ T5579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.037787][ T5579] device bond0 left promiscuous mode [ 152.068426][ T5579] device bond_slave_0 left promiscuous mode [ 152.097065][ T5579] device bond_slave_1 left promiscuous mode [ 152.169553][ T4256] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.201359][ T4256] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 152.227219][ T4256] usb 3-1: can't read configurations, error -71 [ 152.296426][ T7] usb 1-1: USB disconnect, device number 9 [ 152.338664][ T5591] device hsr0 entered promiscuous mode [ 152.456625][ T5596] ptrace attach of "./syz-executor exec"[4266] was attempted by "./syz-executor exec"[5596] [ 153.291213][ T126] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 153.317400][ T126] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.183775][ T4366] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.383804][ T4366] usb 5-1: Using ep0 maxpacket: 8 [ 154.392902][ T4366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.426233][ T4366] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.456955][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.576043][ T4366] usb 5-1: config 0 descriptor?? [ 155.282954][ T4366] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 155.398039][ T5588] device hsr0 left promiscuous mode [ 155.413977][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.613796][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 155.620492][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.653341][ T126] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.680470][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.737805][ T126] usb 2-1: config 0 descriptor?? [ 155.769958][ T126] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 155.815556][ T126] usb 5-1: USB disconnect, device number 7 [ 156.362536][ T126] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 156.385746][ T126] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.403421][ T5655] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[5655] [ 156.581206][ T5656] fido_id[5656]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.732211][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 157.683989][ T5399] usb 2-1: USB disconnect, device number 9 [ 157.777496][ T5671] vivid-000: ================= START STATUS ================= [ 157.803424][ T5671] vivid-000: Test Pattern: 75% Colorbar [ 157.821499][ T5671] vivid-000: Fill Percentage of Frame: 100 [ 157.841700][ T5671] vivid-000: Horizontal Movement: No Movement [ 157.841726][ T5671] vivid-000: Vertical Movement: No Movement [ 157.879194][ T5671] vivid-000: OSD Text Mode: All [ 157.886864][ T5671] vivid-000: Show Border: false [ 157.896785][ T5671] vivid-000: Show Square: false [ 157.904882][ T5671] vivid-000: Sensor Flipped Horizontally: false [ 157.914803][ T5671] vivid-000: Sensor Flipped Vertically: false [ 157.924905][ T5671] vivid-000: Insert SAV Code in Image: false [ 157.932677][ T5671] vivid-000: Insert EAV Code in Image: false [ 157.940944][ T5671] vivid-000: Insert Video Guard Band: false [ 157.947174][ T5671] vivid-000: Reduced Framerate: false [ 157.954893][ T5671] vivid-000: Enable Capture Cropping: true [ 157.962618][ T5671] vivid-000: Enable Capture Composing: true [ 157.974222][ T5671] vivid-000: Enable Capture Scaler: true [ 157.984158][ T5671] vivid-000: Timestamp Source: End of Frame [ 157.996263][ T5671] vivid-000: Colorspace: sRGB [ 158.005099][ T5671] vivid-000: Transfer Function: Default [ 158.020787][ T5671] vivid-000: Y'CbCr Encoding: Default [ 158.062098][ T5671] vivid-000: HSV Encoding: Hue 0-179 [ 158.072500][ T5671] vivid-000: Quantization: Default [ 158.086595][ T5671] vivid-000: Apply Alpha To Red Only: false [ 158.098674][ T5671] vivid-000: Standard Aspect Ratio: 4x3 [ 158.108877][ T5671] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 158.118010][ T5671] vivid-000: DV Timings: 640x480p59 inactive [ 158.129440][ T5671] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 158.144466][ T5671] vivid-000: Maximum EDID Blocks: 2 [ 158.149760][ T5671] vivid-000: Limited RGB Range (16-235): false [ 158.157879][ T5671] vivid-000: Rx RGB Quantization Range: Automatic [ 158.164709][ T5671] vivid-000: Power Present: 0x00000001 [ 158.172500][ T5671] tpg source WxH: 640x360 (Y'CbCr) [ 158.180185][ T5671] tpg field: 1 [ 158.184629][ T5671] tpg crop: 640x360@0x0 [ 158.190189][ T5671] tpg compose: 640x360@0x0 [ 158.196424][ T5671] tpg colorspace: 8 [ 158.200847][ T5671] tpg transfer function: 0/0 [ 158.207450][ T5671] tpg Y'CbCr encoding: 0/0 [ 158.220737][ T5671] tpg quantization: 0/0 [ 158.226304][ T5671] tpg RGB range: 0/2 [ 158.231835][ T5671] vivid-000: ================== END STATUS ================== [ 159.057930][ T4256] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 159.114774][ T4256] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.348576][ T5701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'. [ 159.496862][ T5692] fido_id[5692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 159.713912][ T4270] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.903784][ T4270] usb 2-1: Using ep0 maxpacket: 8 [ 159.911068][ T4270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.921091][ T4270] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.930344][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.951668][ T4270] usb 2-1: config 0 descriptor?? [ 159.962473][ T4270] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 160.514005][ T4270] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 160.570432][ T4366] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 160.581303][ T4366] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.667719][ T5733] fido_id[5733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.724334][ T4270] usb 3-1: Using ep0 maxpacket: 8 [ 160.731823][ T4270] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.754256][ T4270] usb 3-1: config 4 interface 0 has no altsetting 0 [ 160.778316][ T4270] usb 3-1: string descriptor 0 read error: -22 [ 160.784641][ T4270] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 160.793892][ T4270] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 160.828400][ T4270] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 160.838523][ T4270] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 160.849417][ T4270] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 160.856918][ T4270] usb 3-1: media controller created [ 160.874994][ T4270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.283864][ T4256] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.475787][ T4256] usb 1-1: Using ep0 maxpacket: 32 [ 161.488524][ T4256] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 161.511859][ T4256] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 161.550576][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.568010][ T4256] usb 1-1: Product: syz [ 161.578039][ T4256] usb 1-1: Manufacturer: syz [ 161.587526][ T4256] usb 1-1: SerialNumber: syz [ 161.606517][ T4256] usb 1-1: config 0 descriptor?? [ 161.616230][ T5743] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 161.739320][ T4256] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 161.914004][ T4270] zl10353_read_register: readreg error (reg=127, ret==0) [ 162.048219][ T4270] usb 3-1: USB disconnect, device number 21 [ 162.494266][ T4256] usb 2-1: USB disconnect, device number 10 [ 163.296055][ T5776] netlink: 48 bytes leftover after parsing attributes in process `syz.3.396'. [ 164.142262][ T5784] device syzkaller0 entered promiscuous mode [ 165.045003][ T5399] usb 1-1: USB disconnect, device number 10 [ 165.045111][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 167.376736][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 167.386507][ T5797] device hsr_slave_0 left promiscuous mode [ 167.398805][ T5797] device hsr_slave_1 left promiscuous mode [ 169.928501][ T5861] device syzkaller0 entered promiscuous mode [ 170.843736][ T5399] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 171.063743][ T5399] usb 3-1: Using ep0 maxpacket: 8 [ 171.073173][ T5399] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 171.125652][ T5399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.149426][ T5399] usb 3-1: Product: syz [ 171.167094][ T5399] usb 3-1: Manufacturer: syz [ 171.184683][ T5399] usb 3-1: SerialNumber: syz [ 171.216184][ T5399] usb 3-1: config 0 descriptor?? [ 171.255146][ T5399] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 171.297785][ T5399] dvb-usb: bulk message failed: -22 (2/0) [ 171.311829][ T5880] delete_channel: no stack [ 171.388630][ T5399] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.406052][ T5399] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 171.451580][ T5399] usb 3-1: media controller created [ 171.540456][ T5399] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.634136][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.663099][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.547315][ T5399] cxusb: set interface failed [ 173.561078][ T5399] dvb-usb: bulk message failed: -22 (1/0) [ 173.662289][ T5399] DVB: Unable to find symbol mt352_attach() [ 173.679295][ T5399] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 173.923744][ T5399] rc_core: IR keymap rc-dvico-portable not found [ 173.931367][ T5399] Registered IR keymap rc-empty [ 173.959347][ T5399] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 173.998251][ T5399] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 174.016167][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.439'. [ 174.045155][ T5399] dvb-usb: schedule remote query interval to 100 msecs. [ 174.061833][ T5399] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 174.109964][ T5399] usb 3-1: USB disconnect, device number 22 [ 174.188354][ T5399] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 174.941904][ T5937] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[5937] [ 175.191252][ T5908] device vti0 left promiscuous mode [ 175.763860][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.963888][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 176.003941][ T5949] netlink: 48 bytes leftover after parsing attributes in process `syz.1.443'. [ 176.286512][ T5968] device syzkaller0 entered promiscuous mode [ 177.465297][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.473699][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.773363][ T5976] device wg1 left promiscuous mode [ 178.176734][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.227620][ T5976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.660050][ T5976] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.669527][ T5976] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.679084][ T5976] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.688669][ T5976] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.826254][ T5976] device vlan2 left promiscuous mode [ 178.994406][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.016067][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.037623][ T7] usb 2-1: can't read configurations, error -71 [ 180.079940][ T4324] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.263756][ T4324] usb 1-1: Using ep0 maxpacket: 8 [ 180.294071][ T4324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.312404][ T4324] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.321946][ T4324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.357670][ T4324] usb 1-1: config 0 descriptor?? [ 180.587061][ T4324] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 180.993508][ T4324] usb 1-1: USB disconnect, device number 11 [ 181.604825][ T6005] vivid-000: ================= START STATUS ================= [ 181.619790][ T6006] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[6006] [ 181.637409][ T6005] vivid-000: Test Pattern: 75% Colorbar [ 181.649947][ T6005] vivid-000: Fill Percentage of Frame: 100 [ 181.664789][ T6005] vivid-000: Horizontal Movement: No Movement [ 181.671047][ T6005] vivid-000: Vertical Movement: No Movement [ 181.671073][ T6005] vivid-000: OSD Text Mode: All [ 181.671091][ T6005] vivid-000: Show Border: false [ 181.671107][ T6005] vivid-000: Show Square: false [ 181.671123][ T6005] vivid-000: Sensor Flipped Horizontally: false [ 181.671140][ T6005] vivid-000: Sensor Flipped Vertically: false [ 181.671158][ T6005] vivid-000: Insert SAV Code in Image: false [ 181.671175][ T6005] vivid-000: Insert EAV Code in Image: false [ 181.671194][ T6005] vivid-000: Insert Video Guard Band: false [ 181.671218][ T6005] vivid-000: Reduced Framerate: false [ 181.671235][ T6005] vivid-000: Enable Capture Cropping: true [ 181.671254][ T6005] vivid-000: Enable Capture Composing: true [ 181.671273][ T6005] vivid-000: Enable Capture Scaler: true [ 181.671292][ T6005] vivid-000: Timestamp Source: End of Frame [ 181.671310][ T6005] vivid-000: Colorspace: sRGB [ 181.671327][ T6005] vivid-000: Transfer Function: Default [ 181.671345][ T6005] vivid-000: Y'CbCr Encoding: Default [ 181.671363][ T6005] vivid-000: HSV Encoding: Hue 0-179 [ 181.671382][ T6005] vivid-000: Quantization: Default [ 181.671400][ T6005] vivid-000: Apply Alpha To Red Only: false [ 181.671418][ T6005] vivid-000: Standard Aspect Ratio: 4x3 [ 181.671437][ T6005] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 181.671460][ T6005] vivid-000: DV Timings: 640x480p59 inactive [ 181.678668][ T6005] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 181.678690][ T6005] vivid-000: Maximum EDID Blocks: 2 [ 181.678710][ T6005] vivid-000: Limited RGB Range (16-235): false [ 181.678728][ T6005] vivid-000: Rx RGB Quantization Range: Automatic [ 181.678745][ T6005] vivid-000: Power Present: 0x00000001 [ 181.681759][ T6005] tpg source WxH: 640x360 (Y'CbCr) [ 181.681771][ T6005] tpg field: 1 [ 181.681776][ T6005] tpg crop: 640x360@0x0 [ 181.681787][ T6005] tpg compose: 640x360@0x0 [ 181.681798][ T6005] tpg colorspace: 8 [ 181.681804][ T6005] tpg transfer function: 0/0 [ 181.681812][ T6005] tpg Y'CbCr encoding: 0/0 [ 181.681820][ T6005] tpg quantization: 0/0 [ 181.681828][ T6005] tpg RGB range: 0/2 [ 181.681836][ T6005] vivid-000: ================== END STATUS ================== [ 182.452449][ T5982] device vlan2 entered promiscuous mode [ 182.467175][ T5982] device hsr_slave_1 entered promiscuous mode [ 182.725516][ T6016] loop4: detected capacity change from 0 to 1756 [ 182.863744][ T4256] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 182.958059][ T6025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.469'. [ 183.053767][ T4256] usb 3-1: Using ep0 maxpacket: 8 [ 183.062688][ T4256] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 183.079569][ T6030] loop0: detected capacity change from 0 to 512 [ 183.109170][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.132401][ T4256] usb 3-1: Product: syz [ 183.141098][ T4256] usb 3-1: Manufacturer: syz [ 183.153943][ T4256] usb 3-1: SerialNumber: syz [ 183.166944][ T4256] usb 3-1: config 0 descriptor?? [ 183.176701][ T6030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.180310][ T4256] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 183.194350][ T4256] dvb-usb: bulk message failed: -22 (2/0) [ 183.202193][ T4256] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.218200][ T4256] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 183.227928][ T4256] usb 3-1: media controller created [ 183.227977][ T6030] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.243957][ T4256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.558807][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.587331][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.720854][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 183.880014][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 183.947574][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 183.978461][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.211269][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.265182][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 184.290977][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.452490][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.474954][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 184.503046][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.669204][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.693781][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 184.710375][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.811485][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 184.834431][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 184.905611][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 184.971989][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 185.003757][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 185.042539][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 185.115060][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 185.182700][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 185.223755][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 185.231383][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.312577][ T7] usb 5-1: config 4 interface 0 has no altsetting 0 [ 185.393026][ T7] usb 5-1: string descriptor 0 read error: -22 [ 185.399402][ T7] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 185.408989][ T7] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 185.432495][ T7] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 185.443447][ T7] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.454417][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 185.461655][ T7] usb 5-1: media controller created [ 185.484537][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.577878][ T4256] cxusb: set interface failed [ 185.588339][ T4256] dvb-usb: bulk message failed: -22 (1/0) [ 185.630655][ T6044] dvb-usb: bulk message failed: -22 (5/0) [ 185.658169][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 185.686522][ T4256] DVB: Unable to find symbol mt352_attach() [ 185.695042][ T4256] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 185.744879][ T7] usb 5-1: USB disconnect, device number 8 [ 185.853732][ T4256] rc_core: IR keymap rc-dvico-portable not found [ 185.861365][ T4256] Registered IR keymap rc-empty [ 185.876948][ T4256] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 185.900896][ T4256] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input12 [ 185.928045][ T4256] dvb-usb: schedule remote query interval to 100 msecs. [ 185.943370][ T4256] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 185.970492][ T4256] usb 3-1: USB disconnect, device number 23 [ 185.993907][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 185.999965][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 186.006230][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 186.012270][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 186.018384][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 186.085872][ T4256] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 186.146651][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 186.357233][ T6059] device syzkaller0 entered promiscuous mode [ 186.598207][ T6069] ptrace attach of "./syz-executor exec"[4265] was attempted by "./syz-executor exec"[6069] [ 187.860940][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 188.816441][ T4271] EXT4-fs error: 71 callbacks suppressed [ 188.817665][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 188.847106][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 188.925219][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 188.949034][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.018770][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.042050][ T4271] EXT4-fs warning: 32 callbacks suppressed [ 189.042232][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.062037][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.082802][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.131645][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.155610][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.169593][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.203790][ T4256] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 189.245540][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.264848][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.274129][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.289438][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 189.357926][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.417115][ T4256] usb 5-1: Using ep0 maxpacket: 8 [ 189.427464][ T4256] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 189.448040][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.464259][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.472534][ T4256] usb 5-1: Product: syz [ 189.480944][ T4256] usb 5-1: Manufacturer: syz [ 189.491312][ T4256] usb 5-1: SerialNumber: syz [ 189.518492][ T4256] usb 5-1: config 0 descriptor?? [ 189.539007][ T4256] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 189.570720][ T4256] dvb-usb: bulk message failed: -22 (2/0) [ 189.577531][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.594306][ T4256] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.615400][ T4256] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 189.639777][ T4256] usb 5-1: media controller created [ 189.682540][ T4256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.725562][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.904254][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 189.926896][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.948280][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.084992][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 190.235628][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 191.349649][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 191.619203][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 191.948073][ T4256] cxusb: set interface failed [ 191.952824][ T4256] dvb-usb: bulk message failed: -22 (1/0) [ 192.035996][ T4324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.051088][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.491'. [ 192.126120][ T4256] DVB: Unable to find symbol mt352_attach() [ 192.133250][ T4256] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 192.233842][ T4324] usb 2-1: Using ep0 maxpacket: 8 [ 192.242857][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.286119][ T4324] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.319430][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.353690][ T4256] rc_core: IR keymap rc-dvico-portable not found [ 192.360618][ T4324] usb 2-1: config 0 descriptor?? [ 192.362345][ T4256] Registered IR keymap rc-empty [ 192.399031][ T4256] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 192.440729][ T4256] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input13 [ 192.485130][ T4256] dvb-usb: schedule remote query interval to 100 msecs. [ 192.501073][ T4256] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 192.526523][ T4256] usb 5-1: USB disconnect, device number 9 [ 192.593939][ T4324] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.619672][ T4256] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 192.689887][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 192.689901][ T26] audit: type=1326 audit(1756488070.478:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 192.779742][ T26] audit: type=1326 audit(1756488070.478:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 192.831352][ T6112] loop4: detected capacity change from 0 to 32768 [ 192.861568][ T6112] ======================================================= [ 192.861568][ T6112] WARNING: The mand mount option has been deprecated and [ 192.861568][ T6112] and is ignored by this kernel. Remove the mand [ 192.861568][ T6112] option from the mount to silence this warning. [ 192.861568][ T6112] ======================================================= [ 192.909088][ T26] audit: type=1326 audit(1756488070.518:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 192.934406][ T26] audit: type=1326 audit(1756488070.518:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 193.058147][ T26] audit: type=1326 audit(1756488070.518:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 193.105005][ T4256] usb 2-1: USB disconnect, device number 13 [ 193.145927][ T26] audit: type=1326 audit(1756488070.528:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 193.154671][ T6112] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 193.238041][ T26] audit: type=1326 audit(1756488070.528:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 193.296179][ T26] audit: type=1326 audit(1756488070.528:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6117 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177978ebe9 code=0x7ffc0000 [ 193.822112][ T4265] ocfs2: Unmounting device (7,4) on (node local) [ 193.852149][ T4271] EXT4-fs error: 92 callbacks suppressed [ 193.852165][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 193.906463][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.070437][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.104249][ T4271] EXT4-fs warning: 40 callbacks suppressed [ 194.104266][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.104575][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.165373][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165453][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279547][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.279955][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.280230][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.295041][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 194.410687][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.422426][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.422904][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.655199][ T4271] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.656371][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.656804][ T4271] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /98/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.669918][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 194.732360][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.826255][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.941193][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 194.944329][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 195.021196][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 195.053606][ T4271] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 195.280458][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 195.617415][ T6157] loop2: detected capacity change from 0 to 4096 [ 195.678183][ T6157] ntfs: volume version 3.1. [ 196.403793][ T4270] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 196.603776][ T4270] usb 3-1: Using ep0 maxpacket: 8 [ 196.611106][ T4270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.657073][ T4270] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.696229][ T4270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.740925][ T4270] usb 3-1: config 0 descriptor?? [ 196.905374][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.915243][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.923791][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.970536][ T4270] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 197.001448][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.012533][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.020244][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.443924][ T33] device hsr_slave_0 left promiscuous mode [ 197.495515][ T126] usb 3-1: USB disconnect, device number 25 [ 197.550425][ T33] device hsr_slave_1 left promiscuous mode [ 197.590284][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.622247][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.660345][ T33] device bridge_slave_1 left promiscuous mode [ 197.682116][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.815196][ T33] device bridge_slave_0 left promiscuous mode [ 197.821467][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.223790][ T4256] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 198.423951][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 198.439409][ T4256] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.451922][ T4256] usb 2-1: config 4 interface 0 has no altsetting 0 [ 198.468780][ T4256] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 198.472030][ T33] team0 (unregistering): Port device team_slave_1 removed [ 198.505501][ T4256] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 198.533060][ T4256] usb 2-1: Manufacturer: syz [ 198.541263][ T4256] usb 2-1: SerialNumber: syz [ 198.583605][ T33] team0 (unregistering): Port device team_slave_0 removed [ 198.686749][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.758164][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.779372][ T4256] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 198.804725][ T4256] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.817580][ T4256] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 198.825984][ T4256] usb 2-1: media controller created [ 198.843537][ T4256] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.870938][ T4256] zl10353_read_register: readreg error (reg=127, ret==0) [ 198.959535][ T4256] usb 2-1: USB disconnect, device number 14 [ 199.113814][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 199.718742][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 200.028692][ T33] bond0 (unregistering): Released all slaves [ 200.604547][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 200.703748][ T4270] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.903818][ T4256] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 200.905450][ T4270] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 201.009310][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.035789][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.046584][ T4270] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 201.062011][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.089746][ T4270] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 201.100947][ T6169] device bridge_slave_0 entered promiscuous mode [ 201.113875][ T4256] usb 2-1: Using ep0 maxpacket: 8 [ 201.127157][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.142952][ T4270] usb 5-1: Manufacturer: syz [ 201.149673][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.167841][ T4256] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.170157][ T4270] usb 5-1: config 0 descriptor?? [ 201.183817][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.193879][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 201.213149][ T6169] device bridge_slave_1 entered promiscuous mode [ 201.228086][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.251731][ T4256] usb 2-1: config 0 descriptor?? [ 201.369579][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.435439][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.478179][ T4256] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 201.582733][ T6169] team0: Port device team_slave_0 added [ 201.624510][ T6169] team0: Port device team_slave_1 added [ 201.653974][ T4270] rc_core: IR keymap rc-hauppauge not found [ 201.660178][ T4270] Registered IR keymap rc-empty [ 201.695449][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.717926][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.748510][ T4270] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 201.818452][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.829653][ T4270] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 201.873514][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.902957][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.907044][ T4324] usb 2-1: USB disconnect, device number 15 [ 201.980516][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.183839][ T6169] device hsr_slave_0 entered promiscuous mode [ 202.197041][ T6169] device hsr_slave_1 entered promiscuous mode [ 202.782665][ T6169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 202.802225][ T6260] loop1: detected capacity change from 0 to 16 [ 202.832217][ T6169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.875921][ T6260] erofs: (device loop1): mounted with root inode @ nid 36. [ 202.881812][ T6169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 202.955000][ T6169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.354877][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 204.193256][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.252651][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.272314][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.308059][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.338374][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.360498][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.393431][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.400591][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.474178][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.525526][ T7] usb 5-1: USB disconnect, device number 10 [ 204.539602][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.583385][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.635347][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.643582][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.692910][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.704433][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.768373][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.798288][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.830644][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.865951][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.906286][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.933444][ T6300] loop1: detected capacity change from 0 to 4096 [ 205.008798][ T6304] device vti0 entered promiscuous mode [ 205.046609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.114390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.348752][ T6169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.434560][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 205.478357][ T6169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.582664][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.604944][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.893893][ T126] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 205.986169][ T6320] device wireguard1 entered promiscuous mode [ 206.083786][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 206.090793][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.129765][ T126] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.158423][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.196804][ T126] usb 3-1: config 0 descriptor?? [ 206.362173][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.373334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.409278][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.460194][ T126] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 206.954844][ T6348] ptrace attach of "./syz-executor exec"[4268] was attempted by "./syz-executor exec"[6348] [ 206.982774][ T5399] usb 3-1: USB disconnect, device number 26 [ 207.282652][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.302474][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.362799][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.400617][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.426372][ T6169] device veth0_vlan entered promiscuous mode [ 207.439760][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.460840][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.495667][ T6169] device veth1_vlan entered promiscuous mode [ 207.562283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.620833][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.646388][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.662249][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.710516][ T6169] device veth0_macvtap entered promiscuous mode [ 207.767255][ T6169] device veth1_macvtap entered promiscuous mode [ 207.898458][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.949485][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.967823][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.040142][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.123891][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.202665][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.232876][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.273797][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.364289][ T6169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.404407][ T6169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.457716][ T6169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.502615][ T6169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.848478][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.895666][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.933087][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.959300][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.975590][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.003867][ T4366] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 209.030824][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.228003][ T4366] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 209.256937][ T4366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.278301][ T4366] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 209.301442][ T4366] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 209.325265][ T4366] usb 3-1: Manufacturer: syz [ 209.342583][ T4366] usb 3-1: config 0 descriptor?? [ 209.563777][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.613973][ T4366] rc_core: IR keymap rc-hauppauge not found [ 209.619941][ T4366] Registered IR keymap rc-empty [ 209.667898][ T4366] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 209.788128][ T4366] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 210.383793][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 210.392821][ T7] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 210.499263][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.544152][ T7] usb 6-1: Product: syz [ 210.548364][ T7] usb 6-1: Manufacturer: syz [ 210.553031][ T7] usb 6-1: SerialNumber: syz [ 210.595914][ T7] usb 6-1: config 0 descriptor?? [ 210.616070][ T7] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 210.647180][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 210.667973][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.704205][ T7] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 210.726585][ T7] usb 6-1: media controller created [ 210.780935][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.987130][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.028646][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.186231][ T6439] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[6439] [ 212.265795][ T7] cxusb: set interface failed [ 212.278802][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 212.571445][ T6448] loop5: detected capacity change from 0 to 16 [ 212.623041][ T6448] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.806925][ T7] DVB: Unable to find symbol mt352_attach() [ 212.818809][ T7] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 213.953730][ T7] rc_core: IR keymap rc-dvico-portable not found [ 213.963881][ T7] Registered IR keymap rc-empty [ 213.989096][ T7] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1 [ 214.058621][ T7] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1/input16 [ 214.102788][ T4270] usb 3-1: USB disconnect, device number 27 [ 214.137125][ T7] dvb-usb: schedule remote query interval to 100 msecs. [ 214.195699][ T7] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 214.283012][ T7] usb 6-1: USB disconnect, device number 2 [ 214.368745][ T7] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 214.840762][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.560'. [ 215.460597][ T6471] delete_channel: no stack [ 215.723722][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 215.933865][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 215.942728][ T7] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 216.013105][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.023232][ T7] usb 6-1: Product: syz [ 216.030814][ T7] usb 6-1: Manufacturer: syz [ 216.035931][ T7] usb 6-1: SerialNumber: syz [ 216.128238][ T7] usb 6-1: config 0 descriptor?? [ 216.145373][ T7] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 216.533495][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 216.820937][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.844576][ T7] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 216.853414][ T7] usb 6-1: media controller created [ 216.901587][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.981070][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.064098][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.713789][ T4366] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 218.471628][ T7] cxusb: set interface failed [ 218.476731][ T4366] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 218.476771][ T4366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.477908][ T4366] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 218.523977][ T4270] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 218.526795][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 218.545729][ T4366] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 218.555092][ T4366] usb 5-1: Manufacturer: syz [ 218.577620][ T4366] usb 5-1: config 0 descriptor?? [ 218.713787][ T4270] usb 3-1: Using ep0 maxpacket: 16 [ 218.720643][ T4270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 218.723978][ T7] DVB: Unable to find symbol mt352_attach() [ 218.748771][ T7] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 218.763570][ T4270] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.772705][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.823700][ T4366] rc_core: IR keymap rc-hauppauge not found [ 218.829674][ T4366] Registered IR keymap rc-empty [ 218.845760][ T4270] usb 3-1: Product: syz [ 218.849973][ T4270] usb 3-1: Manufacturer: syz [ 218.855553][ T4366] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 218.889320][ T4270] usb 3-1: SerialNumber: syz [ 218.897248][ T4366] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 218.926667][ T4270] usb 3-1: config 0 descriptor?? [ 218.936524][ T4270] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 218.963865][ T4270] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 218.977498][ T6549] device wireguard0 entered promiscuous mode [ 218.985517][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.046717][ T7] rc_core: IR keymap rc-dvico-portable not found [ 219.053095][ T7] Registered IR keymap rc-empty [ 219.060281][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.238701][ T7] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1 [ 219.260235][ T7] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1/input18 [ 219.279646][ T7] dvb-usb: schedule remote query interval to 100 msecs. [ 219.295632][ T7] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 219.544615][ T4270] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 219.819042][ T7] usb 6-1: USB disconnect, device number 3 [ 219.912449][ T7] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 219.972611][ T4270] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 219.993705][ T4270] em28xx 3-1:0.0: board has no eeprom [ 220.244177][ T6575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.581'. [ 220.314419][ T4270] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 220.329317][ T4270] em28xx 3-1:0.0: dvb set to bulk mode. [ 220.365262][ T4324] em28xx 3-1:0.0: Binding DVB extension [ 220.422893][ T4270] usb 3-1: USB disconnect, device number 28 [ 220.476788][ T4270] em28xx 3-1:0.0: Disconnecting em28xx [ 220.550917][ T6582] netlink: 32 bytes leftover after parsing attributes in process `syz.5.582'. [ 220.780896][ T4324] em28xx 3-1:0.0: Registering input extension [ 220.811802][ T4270] em28xx 3-1:0.0: Closing input extension [ 220.951333][ T4270] em28xx 3-1:0.0: Freeing device [ 222.181056][ T4366] usb 5-1: USB disconnect, device number 11 [ 222.951896][ T6615] loop1: detected capacity change from 0 to 16 [ 222.975851][ T6615] erofs: (device loop1): mounted with root inode @ nid 36. [ 225.953042][ T6640] vivid-000: ================= START STATUS ================= [ 226.427411][ T6640] vivid-000: Test Pattern: 75% Colorbar [ 226.447010][ T6640] vivid-000: Fill Percentage of Frame: 100 [ 226.451582][ T6640] vivid-000: Horizontal Movement: No Movement [ 226.451606][ T6640] vivid-000: Vertical Movement: No Movement [ 226.451625][ T6640] vivid-000: OSD Text Mode: All [ 226.451642][ T6640] vivid-000: Show Border: false [ 226.451659][ T6640] vivid-000: Show Square: false [ 226.451678][ T6640] vivid-000: Sensor Flipped Horizontally: false [ 226.451697][ T6640] vivid-000: Sensor Flipped Vertically: false [ 226.451716][ T6640] vivid-000: Insert SAV Code in Image: false [ 226.451735][ T6640] vivid-000: Insert EAV Code in Image: false [ 226.451755][ T6640] vivid-000: Insert Video Guard Band: false [ 226.451775][ T6640] vivid-000: Reduced Framerate: false [ 226.451797][ T6640] vivid-000: Enable Capture Cropping: true [ 226.451818][ T6640] vivid-000: Enable Capture Composing: true [ 226.451838][ T6640] vivid-000: Enable Capture Scaler: true [ 226.451857][ T6640] vivid-000: Timestamp Source: End of Frame [ 226.451875][ T6640] vivid-000: Colorspace: sRGB [ 226.451896][ T6640] vivid-000: Transfer Function: Default [ 226.451913][ T6640] vivid-000: Y'CbCr Encoding: Default [ 226.451932][ T6640] vivid-000: HSV Encoding: Hue 0-179 [ 226.451950][ T6640] vivid-000: Quantization: Default [ 226.451970][ T6640] vivid-000: Apply Alpha To Red Only: false [ 226.451992][ T6640] vivid-000: Standard Aspect Ratio: 4x3 [ 226.452013][ T6640] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 226.452038][ T6640] vivid-000: DV Timings: 640x480p59 inactive [ 226.452062][ T6640] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 226.452083][ T6640] vivid-000: Maximum EDID Blocks: 2 [ 226.452105][ T6640] vivid-000: Limited RGB Range (16-235): false [ 226.452124][ T6640] vivid-000: Rx RGB Quantization Range: Automatic [ 226.452143][ T6640] vivid-000: Power Present: 0x00000001 [ 226.452166][ T6640] tpg source WxH: 640x360 (Y'CbCr) [ 226.452179][ T6640] tpg field: 1 [ 226.452186][ T6640] tpg crop: 640x360@0x0 [ 226.452199][ T6640] tpg compose: 640x360@0x0 [ 226.452211][ T6640] tpg colorspace: 8 [ 226.452218][ T6640] tpg transfer function: 0/0 [ 226.452256][ T6640] tpg Y'CbCr encoding: 0/0 [ 226.452265][ T6640] tpg quantization: 0/0 [ 226.452274][ T6640] tpg RGB range: 0/2 [ 226.452283][ T6640] vivid-000: ================== END STATUS ================== [ 227.077320][ T6651] loop2: detected capacity change from 0 to 32768 [ 227.125458][ T6651] JBD2: Ignoring recovery information on journal [ 227.192989][ T6651] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 227.391989][ T6671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.602'. [ 227.415409][ T4266] ocfs2: Unmounting device (7,2) on (node local) [ 228.826201][ T6697] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 228.862812][ T6697] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 228.979085][ T6697] comedi comedi3: 8255: I/O port conflict (0x10000004,4) [ 229.001360][ T6697] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 229.599054][ T6697] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffbf1,4) [ 229.763800][ T6697] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 230.763805][ T5399] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 231.483734][ T5399] usb 6-1: Using ep0 maxpacket: 8 [ 231.492915][ T5399] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 231.521067][ T5399] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.631416][ T5399] usb 6-1: Product: syz [ 231.650194][ T5399] usb 6-1: Manufacturer: syz [ 231.665629][ T5399] usb 6-1: SerialNumber: syz [ 231.733890][ T4270] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 232.292264][ T5399] usb 6-1: config 0 descriptor?? [ 232.352434][ T5399] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 232.427867][ T5399] dvb-usb: bulk message failed: -22 (2/0) [ 232.457485][ T5399] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.476277][ T4270] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 232.496002][ T5399] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 232.506373][ T4270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.535160][ T4270] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 232.542047][ T5399] usb 6-1: media controller created [ 232.570988][ T4270] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 232.584112][ T5399] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.603839][ T4270] usb 3-1: Manufacturer: syz [ 232.629583][ T4270] usb 3-1: config 0 descriptor?? [ 232.702512][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.716933][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.933725][ T4270] rc_core: IR keymap rc-hauppauge not found [ 232.939841][ T4270] Registered IR keymap rc-empty [ 232.974143][ T4270] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 233.049448][ T4270] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 233.654490][ T6774] netlink: 32 bytes leftover after parsing attributes in process `syz.3.627'. [ 233.881141][ T5399] cxusb: set interface failed [ 233.886100][ T5399] dvb-usb: bulk message failed: -22 (1/0) [ 233.973809][ T4270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 234.138574][ T5399] DVB: Unable to find symbol mt352_attach() [ 234.144768][ T5399] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 234.805344][ T4270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.900501][ T4270] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.926318][ T4270] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.948280][ T4270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.962808][ T4270] usb 5-1: SerialNumber: syz [ 235.107779][ T6799] ptrace attach of "./syz-executor exec"[6169] was attempted by "./syz-executor exec"[6799] [ 235.163700][ T5399] rc_core: IR keymap rc-dvico-portable not found [ 235.173590][ T5399] Registered IR keymap rc-empty [ 235.211170][ T5399] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1 [ 235.226437][ T4270] usb 5-1: 0:2 : does not exist [ 235.275613][ T5399] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1/input21 [ 235.357919][ T5399] dvb-usb: schedule remote query interval to 100 msecs. [ 235.383756][ T5399] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 235.443100][ T4270] usb 5-1: USB disconnect, device number 12 [ 235.455057][ T5399] usb 6-1: USB disconnect, device number 4 [ 235.589506][ T4640] udevd[4640]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.634577][ T5399] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 236.888308][ T4270] usb 3-1: USB disconnect, device number 29 [ 237.743730][ T5399] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 238.774521][ T5399] usb 3-1: config 0 has no interfaces? [ 238.781191][ T5399] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 238.793045][ T5399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.803371][ T5399] usb 3-1: config 0 descriptor?? [ 238.975531][ T6859] loop4: detected capacity change from 0 to 16 [ 239.041977][ T6859] erofs: (device loop4): mounted with root inode @ nid 36. [ 239.056261][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 239.237018][ T6832] device team0 entered promiscuous mode [ 239.253763][ T6832] device team_slave_0 entered promiscuous mode [ 239.274871][ T6832] device team_slave_1 entered promiscuous mode [ 239.312150][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz.5.649'. [ 239.361304][ T6832] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.418952][ T6832] device team0 left promiscuous mode [ 239.447073][ T6832] device team_slave_0 left promiscuous mode [ 239.475906][ T6832] device team_slave_1 left promiscuous mode [ 239.667644][ T5399] usb 3-1: USB disconnect, device number 30 [ 239.761048][ T6876] loop1: detected capacity change from 0 to 128 [ 239.833103][ T6876] EXT4-fs: Ignoring removed orlov option [ 239.930632][ T6876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 239.950118][ T6876] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.143227][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 242.289028][ T6915] loop1: detected capacity change from 0 to 256 [ 243.498546][ T6929] loop1: detected capacity change from 0 to 16 [ 243.701856][ T6929] erofs: (device loop1): mounted with root inode @ nid 36. [ 244.246141][ T6945] device syzkaller0 entered promiscuous mode [ 245.105346][ T6977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.672'. [ 245.408079][ T5399] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 245.631785][ T5399] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.644303][ T5399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.667251][ T5399] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 245.687544][ T5399] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 245.705810][ T5399] usb 5-1: Manufacturer: syz [ 245.726165][ T5399] usb 5-1: config 0 descriptor?? [ 245.953981][ T5399] rc_core: IR keymap rc-hauppauge not found [ 245.960057][ T5399] Registered IR keymap rc-empty [ 245.975091][ T5399] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 246.005440][ T5399] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22 [ 247.273715][ T7014] loop1: detected capacity change from 0 to 256 [ 248.799064][ T7005] netlink: 60 bytes leftover after parsing attributes in process `syz.5.676'. [ 249.127280][ T7023] loop2: detected capacity change from 0 to 16 [ 249.161295][ T7023] erofs: (device loop2): mounted with root inode @ nid 36. [ 250.072984][ T4324] usb 5-1: USB disconnect, device number 13 [ 250.656868][ T7069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.688'. [ 252.286215][ T7081] delete_channel: no stack [ 253.565317][ T4256] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 253.573761][ T4270] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 253.763866][ T4270] usb 6-1: Using ep0 maxpacket: 32 [ 253.771384][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 253.813992][ T4270] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 253.846917][ T4270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.879491][ T4270] usb 6-1: Product: syz [ 253.908892][ T4270] usb 6-1: Manufacturer: syz [ 253.915423][ T4256] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 253.920817][ T4270] usb 6-1: SerialNumber: syz [ 253.933974][ T4256] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.969419][ T4270] usb 6-1: config 0 descriptor?? [ 254.302375][ T4270] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 254.547839][ T4256] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 254.563654][ T4256] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 254.571680][ T4256] usb 3-1: Manufacturer: syz [ 254.674738][ T4270] usb 6-1: USB disconnect, device number 5 [ 254.702753][ T4256] usb 3-1: config 0 descriptor?? [ 254.813828][ T4256] rc_core: IR keymap rc-hauppauge not found [ 254.819776][ T4256] Registered IR keymap rc-empty [ 254.836128][ T4256] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 254.858770][ T4256] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 254.923757][ T4324] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.145310][ T4324] usb 2-1: config 0 has no interfaces? [ 255.150837][ T4324] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 255.286999][ T7168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.711'. [ 255.301723][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.354721][ T4324] usb 2-1: config 0 descriptor?? [ 255.590249][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 255.606122][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.613854][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.653153][ T7151] device bond0 entered promiscuous mode [ 255.675155][ T7151] device bond_slave_0 entered promiscuous mode [ 255.701923][ T7151] device bond_slave_1 entered promiscuous mode [ 255.728237][ T7151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.749477][ T7151] device bond0 left promiscuous mode [ 255.761674][ T7151] device bond_slave_0 left promiscuous mode [ 255.778005][ T7151] device bond_slave_1 left promiscuous mode [ 256.077257][ T4256] usb 2-1: USB disconnect, device number 16 [ 256.138424][ T7169] delete_channel: no stack [ 257.151820][ T7182] loop1: detected capacity change from 0 to 256 [ 257.710874][ T4640] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.897901][ T7187] device wireguard0 entered promiscuous mode [ 257.930006][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.964471][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.976224][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.986721][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.023702][ T4270] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 258.067086][ T7] usb 3-1: USB disconnect, device number 32 [ 258.223781][ T4270] usb 5-1: Using ep0 maxpacket: 16 [ 258.230894][ T4270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 258.267709][ T4270] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 258.295686][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.320109][ T4270] usb 5-1: Product: syz [ 258.324578][ T4270] usb 5-1: Manufacturer: syz [ 258.335212][ T4270] usb 5-1: SerialNumber: syz [ 258.342086][ T4270] usb 5-1: config 0 descriptor?? [ 258.361482][ T4270] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 258.370979][ T4270] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 258.957331][ T4270] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 259.818048][ T4270] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 259.827499][ T4270] em28xx 5-1:0.0: board has no eeprom [ 260.143680][ T4270] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 260.154564][ T4270] em28xx 5-1:0.0: dvb set to bulk mode. [ 260.163759][ T4366] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 260.178152][ T4324] em28xx 5-1:0.0: Binding DVB extension [ 260.248350][ T4270] usb 5-1: USB disconnect, device number 14 [ 260.261853][ T4270] em28xx 5-1:0.0: Disconnecting em28xx [ 260.353709][ T4366] usb 3-1: Using ep0 maxpacket: 8 [ 260.360766][ T4366] usb 3-1: unable to get BOS descriptor or descriptor too short [ 260.380255][ T4324] em28xx 5-1:0.0: Registering input extension [ 260.388901][ T4270] em28xx 5-1:0.0: Closing input extension [ 260.409038][ T4366] usb 3-1: config 4 interface 0 has no altsetting 0 [ 260.427107][ T4366] usb 3-1: string descriptor 0 read error: -22 [ 260.440421][ T4366] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 260.461386][ T4270] em28xx 5-1:0.0: Freeing device [ 260.490817][ T4366] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 260.531156][ T4366] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 260.543292][ T4366] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.555767][ T4366] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 260.563567][ T4366] usb 3-1: media controller created [ 260.578073][ T4366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.903786][ T7220] delete_channel: no stack [ 261.143215][ T7228] loop5: detected capacity change from 0 to 256 [ 261.705237][ T4366] zl10353_read_register: readreg error (reg=127, ret==0) [ 261.979172][ T4366] usb 3-1: USB disconnect, device number 33 [ 262.953937][ T7240] loop4: detected capacity change from 0 to 128 [ 263.222055][ T7241] syz.4.731: attempt to access beyond end of device [ 263.222055][ T7241] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 263.309496][ T7240] syz.4.731: attempt to access beyond end of device [ 263.309496][ T7240] loop4: rw=524288, sector=145, nr_sectors = 8 limit=128 [ 263.329906][ T7240] syz.4.731: attempt to access beyond end of device [ 263.329906][ T7240] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 263.350722][ T7240] syz.4.731: attempt to access beyond end of device [ 263.350722][ T7240] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 263.454639][ T7240] syz.4.731: attempt to access beyond end of device [ 263.454639][ T7240] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 263.474352][ T7240] syz.4.731: attempt to access beyond end of device [ 263.474352][ T7240] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 264.593057][ T7247] Invalid ELF header magic: != ELF [ 264.603418][ T7247] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 265.181326][ T7269] ptrace attach of "./syz-executor exec"[4268] was attempted by "./syz-executor exec"[7269] [ 266.264043][ T4366] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 266.313699][ T4324] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 266.465079][ T4366] usb 5-1: config 0 has no interfaces? [ 266.470573][ T4366] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 266.506151][ T4366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.515129][ T4324] usb 3-1: Using ep0 maxpacket: 16 [ 266.523318][ T4324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 266.548728][ T4366] usb 5-1: config 0 descriptor?? [ 266.555735][ T4324] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 266.582250][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.604967][ T4324] usb 3-1: Product: syz [ 266.618622][ T4324] usb 3-1: Manufacturer: syz [ 266.633340][ T4324] usb 3-1: SerialNumber: syz [ 266.658278][ T4324] usb 3-1: config 0 descriptor?? [ 266.679899][ T4324] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 266.710953][ T4324] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 266.797832][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 266.889740][ T7272] device team0 entered promiscuous mode [ 266.902469][ T7272] device team_slave_0 entered promiscuous mode [ 266.925638][ T7272] device team_slave_1 entered promiscuous mode [ 266.954966][ T7272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.026554][ T4270] usb 5-1: USB disconnect, device number 15 [ 267.283096][ T4324] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 268.153515][ T4324] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 268.172678][ T4324] em28xx 3-1:0.0: board has no eeprom [ 268.514723][ T4324] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 268.528568][ T4324] em28xx 3-1:0.0: dvb set to bulk mode. [ 268.547496][ T4270] em28xx 3-1:0.0: Binding DVB extension [ 268.756567][ T4324] usb 3-1: USB disconnect, device number 34 [ 268.864027][ T4324] em28xx 3-1:0.0: Disconnecting em28xx [ 269.173855][ T5399] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 269.437308][ T5399] usb 5-1: Using ep0 maxpacket: 32 [ 269.491693][ T5399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 270.253824][ T4270] em28xx 3-1:0.0: Registering input extension [ 270.280233][ T4324] em28xx 3-1:0.0: Closing input extension [ 270.320551][ T4324] em28xx 3-1:0.0: Freeing device [ 270.346968][ T5399] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 270.396203][ T5399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.438808][ T5399] usb 5-1: Product: syz [ 270.462094][ T5399] usb 5-1: Manufacturer: syz [ 270.478612][ T5399] usb 5-1: SerialNumber: syz [ 270.507754][ T5399] usb 5-1: config 0 descriptor?? [ 270.524298][ T7300] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 270.535967][ T5399] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input27 [ 270.664880][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 271.675170][ T7343] loop2: detected capacity change from 0 to 256 [ 272.260195][ T4640] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.032467][ T4256] usb 5-1: USB disconnect, device number 16 [ 273.032505][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 273.151361][ T7352] loop5: detected capacity change from 0 to 256 [ 277.006647][ T7400] loop4: detected capacity change from 0 to 256 [ 277.752022][ T7407] loop4: detected capacity change from 0 to 16 [ 277.889475][ T7407] erofs: (device loop4): mounted with root inode @ nid 36. [ 278.073841][ T4270] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 278.308399][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.588280][ T4270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.599132][ T4270] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 278.609642][ T4270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.689273][ T4270] usb 6-1: config 0 descriptor?? [ 279.118183][ T4366] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 279.534958][ T4270] hid (null): bogus close delimiter [ 279.552431][ T4270] wacom 0003:056A:030C.000A: bogus close delimiter [ 279.562235][ T4270] wacom 0003:056A:030C.000A: item 0 2 2 10 parsing failed [ 279.577750][ T4270] wacom 0003:056A:030C.000A: parse failed [ 279.590342][ T4270] wacom: probe of 0003:056A:030C.000A failed with error -22 [ 279.724753][ T4366] usb 5-1: Using ep0 maxpacket: 16 [ 279.731730][ T4366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.821244][ T4270] usb 6-1: USB disconnect, device number 6 [ 279.829633][ T4366] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.855745][ T4366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.865469][ T4366] usb 5-1: Product: syz [ 279.869651][ T4366] usb 5-1: Manufacturer: syz [ 279.893799][ T4366] usb 5-1: SerialNumber: syz [ 279.900751][ T4366] usb 5-1: config 0 descriptor?? [ 279.925255][ T4366] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.934673][ T4366] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 280.732033][ T4366] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 281.181842][ T4366] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 281.201313][ T4366] em28xx 5-1:0.0: board has no eeprom [ 281.303960][ T7452] loop5: detected capacity change from 0 to 256 [ 281.895760][ T4259] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.928100][ T7437] delete_channel: no stack [ 281.934487][ T126] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 281.983731][ T4366] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 281.996514][ T4366] em28xx 5-1:0.0: dvb set to bulk mode. [ 282.077774][ T4366] em28xx 5-1:0.0: Binding DVB extension [ 282.091763][ T7] usb 5-1: USB disconnect, device number 17 [ 282.105136][ T7] em28xx 5-1:0.0: Disconnecting em28xx [ 282.153826][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 282.160353][ T126] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 282.222558][ T7456] vivid-000: ================= START STATUS ================= [ 282.230375][ T126] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 282.256921][ T7456] vivid-000: Test Pattern: 75% Colorbar [ 282.262529][ T7456] vivid-000: Fill Percentage of Frame: 100 [ 282.272476][ T126] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 282.285433][ T4366] em28xx 5-1:0.0: Registering input extension [ 282.291644][ T7] em28xx 5-1:0.0: Closing input extension [ 282.303866][ T7456] vivid-000: Horizontal Movement: No Movement [ 282.304807][ T126] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 282.323788][ T7456] vivid-000: Vertical Movement: No Movement [ 282.324220][ T126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.336841][ T7456] vivid-000: OSD Text Mode: All [ 282.341891][ T7456] vivid-000: Show Border: false [ 282.348629][ T7456] vivid-000: Show Square: false [ 282.352915][ T126] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 282.368155][ T7456] [ 282.372600][ T7456] vivid-000: Sensor Flipped Horizontally: false [ 282.381428][ T7456] vivid-000: Sensor Flipped Vertically: false [ 282.384859][ T126] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 282.392783][ T7] em28xx 5-1:0.0: Freeing device [ 282.405252][ T7456] [ 282.407676][ T7456] vivid-000: Insert SAV Code in Image: false [ 282.414274][ T7456] vivid-000: Insert EAV Code in Image: false [ 282.420927][ T126] usb 3-1: Product: syz [ 282.425141][ T7456] vivid-000: Insert Video Guard Band: false [ 282.433422][ T126] usb 3-1: Manufacturer: syz [ 282.438628][ T7456] vivid-000: Reduced Framerate: false [ 282.448560][ T7456] vivid-000: Enable Capture Cropping: true [ 282.454209][ T126] usb 3-1: SerialNumber: syz [ 282.459048][ T7456] vivid-000: Enable Capture Composing: true [ 282.471712][ T7456] vivid-000: Enable Capture Scaler: true [ 282.477679][ T7456] vivid-000: Timestamp Source: End of Frame [ 282.480554][ T126] usb 3-1: config 0 descriptor?? [ 282.488705][ T7456] vivid-000: Colorspace: sRGB [ 282.496440][ T7456] vivid-000: Transfer Function: Default [ 282.509518][ T7456] vivid-000: Y'CbCr Encoding: Default [ 282.510679][ T126] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 282.526255][ T7456] [ 282.530685][ T7456] vivid-000: HSV Encoding: Hue 0-179 [ 282.543068][ T7456] vivid-000: Quantization: Default [ 282.555499][ T7456] vivid-000: Apply Alpha To Red Only: false [ 282.562217][ T7456] vivid-000: Standard Aspect Ratio: 4x3 [ 282.574382][ T7456] vivid-000: DV Timings Signal Mode: Current DV Timings [ 282.580636][ T126] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 282.595825][ T7456] inactive [ 282.601303][ T7456] vivid-000: DV Timings: 640x480p59 inactive [ 282.615717][ T7456] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 282.628512][ T7456] vivid-000: Maximum EDID Blocks: 2 [ 282.636158][ T7456] vivid-000: Limited RGB Range (16-235): false [ 282.642574][ T7456] vivid-000: Rx RGB Quantization Range: Automatic [ 282.650013][ T7456] vivid-000: Power Present: 0x00000001 [ 282.655941][ T7456] tpg source WxH: 640x360 (Y'CbCr) [ 282.664778][ T7456] tpg field: 1 [ 282.671416][ T7456] tpg crop: 640x360@0x0 [ 282.678580][ T7456] tpg compose: 640x360@0x0 [ 282.683049][ T7456] tpg colorspace: 8 [ 282.687511][ T7456] tpg transfer function: 0/0 [ 282.695204][ T7456] tpg Y'CbCr encoding: 0/0 [ 282.701810][ T7456] tpg quantization: 0/0 [ 282.711721][ T7456] tpg RGB range: 0/2 [ 282.717792][ T7456] vivid-000: ================== END STATUS ================== [ 282.943062][ T126] usb 3-1: USB disconnect, device number 35 [ 282.949157][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 282.982338][ T126] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 283.092172][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.794'. [ 283.149258][ T7446] ldusb: No device or device unplugged -19 [ 283.633857][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 283.932602][ T7476] ptrace attach of "./syz-executor exec"[4265] was attempted by "./syz-executor exec"[7476] [ 283.953810][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 283.960996][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.971880][ T7] usb 2-1: config 4 interface 0 has no altsetting 0 [ 283.983720][ T7] usb 2-1: string descriptor 0 read error: -22 [ 283.991046][ T7] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 284.004250][ T7] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 284.034343][ T7] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 284.104187][ T7] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.115010][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 284.122170][ T7] usb 2-1: media controller created [ 284.151525][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.772862][ T7486] loop5: detected capacity change from 0 to 256 [ 285.168599][ T4259] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.276600][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 285.476221][ T7] usb 2-1: USB disconnect, device number 17 [ 285.683778][ T126] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 285.883737][ T126] usb 6-1: Using ep0 maxpacket: 16 [ 285.892538][ T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 285.915360][ T126] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 285.932590][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.971852][ T126] usb 6-1: Product: syz [ 285.977948][ T126] usb 6-1: Manufacturer: syz [ 285.986872][ T126] usb 6-1: SerialNumber: syz [ 286.007771][ T126] usb 6-1: config 0 descriptor?? [ 286.032058][ T126] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 286.047511][ T126] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 286.608401][ T7499] delete_channel: no stack [ 286.635633][ T126] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 287.059713][ T126] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 287.112059][ T126] em28xx 6-1:0.0: board has no eeprom [ 287.327214][ T7518] vivid-000: ================= START STATUS ================= [ 287.347506][ T7518] vivid-000: Test Pattern: 75% Colorbar [ 287.358836][ T7518] vivid-000: Fill Percentage of Frame: 100 [ 287.372149][ T7518] vivid-000: Horizontal Movement: No Movement [ 287.385257][ T7518] vivid-000: Vertical Movement: No Movement [ 287.391336][ T7518] vivid-000: OSD Text Mode: All [ 287.463784][ T126] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 287.471651][ T126] em28xx 6-1:0.0: dvb set to bulk mode. [ 287.573109][ T7518] vivid-000: Show Border: false [ 287.602978][ T7518] vivid-000: Show Square: false [ 287.617870][ T7518] vivid-000: Sensor Flipped Horizontally: false [ 287.633170][ T4366] em28xx 6-1:0.0: Binding DVB extension [ 287.649489][ T7518] vivid-000: Sensor Flipped Vertically: false [ 287.663856][ T126] usb 6-1: USB disconnect, device number 7 [ 287.754842][ T126] em28xx 6-1:0.0: Disconnecting em28xx [ 287.765615][ T7518] vivid-000: Insert SAV Code in Image: false [ 287.773726][ T7518] vivid-000: Insert EAV Code in Image: false [ 287.787953][ T7518] vivid-000: Insert Video Guard Band: false [ 287.797255][ T7518] vivid-000: Reduced Framerate: false [ 287.804492][ T7518] vivid-000: Enable Capture Cropping: true [ 287.887548][ T7530] loop4: detected capacity change from 0 to 256 [ 288.473800][ T7518] vivid-000: Enable Capture Composing: true [ 288.482953][ T7518] vivid-000: Enable Capture Scaler: true [ 288.518535][ T4640] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.588828][ T7534] tipc: Started in network mode [ 288.609673][ T7534] tipc: Node identity 06197b536b8b, cluster identity 4711 [ 288.669510][ T7518] vivid-000: Timestamp Source: End of Frame [ 288.703993][ T7534] tipc: Enabled bearer , priority 0 [ 288.718472][ T7518] vivid-000: Colorspace: sRGB [ 288.725152][ T7536] device syzkaller0 entered promiscuous mode [ 288.732218][ T7518] vivid-000: Transfer Function: Default [ 288.741122][ T7518] vivid-000: Y'CbCr Encoding: Default [ 288.752224][ T7518] vivid-000: HSV Encoding: Hue 0-179 [ 288.763224][ T7518] vivid-000: Quantization: Default [ 288.767631][ T4366] em28xx 6-1:0.0: Registering input extension [ 288.779021][ T7518] vivid-000: Apply Alpha To Red Only: false [ 288.791567][ T7518] vivid-000: Standard Aspect Ratio: 4x3 [ 288.797823][ T126] em28xx 6-1:0.0: Closing input extension [ 288.811136][ T7518] [ 288.814365][ T7518] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 288.814398][ T7518] vivid-000: DV Timings: 640x480p59 inactive [ 288.824491][ T7518] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 288.827823][ T7518] vivid-000: Maximum EDID Blocks: 2 [ 288.830821][ T7518] vivid-000: Limited RGB Range (16-235): false [ 288.845355][ T7518] vivid-000: Rx RGB Quantization Range: Automatic [ 288.845383][ T7518] vivid-000: Power Present: 0x00000001 [ 288.847169][ T7518] tpg source WxH: 640x360 (Y'CbCr) [ 288.848289][ T7518] tpg field: 1 [ 288.851617][ T7518] tpg crop: 640x360@0x0 [ 288.852713][ T7518] tpg compose: 640x360@0x0 [ 288.854637][ T7518] tpg colorspace: 8 [ 288.855735][ T7518] tpg transfer function: 0/0 [ 288.857109][ T7518] tpg Y'CbCr encoding: 0/0 [ 288.859312][ T7518] tpg quantization: 0/0 [ 288.860938][ T7518] tpg RGB range: 0/2 [ 288.862054][ T7518] vivid-000: ================== END STATUS ================== [ 288.874262][ T7534] tipc: Resetting bearer [ 288.876657][ T126] em28xx 6-1:0.0: Freeing device [ 288.887749][ T7533] tipc: Resetting bearer [ 288.938327][ T7533] tipc: Disabling bearer [ 289.131074][ T7545] device syzkaller0 entered promiscuous mode [ 289.293686][ T7] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 289.493674][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 289.509445][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 289.539497][ T7] usb 5-1: config 4 interface 0 has no altsetting 0 [ 289.578041][ T7] usb 5-1: string descriptor 0 read error: -22 [ 289.601466][ T7] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 289.612041][ T7] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 289.646720][ T7] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 289.657837][ T7] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.670900][ T7] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 289.678480][ T7] usb 5-1: media controller created [ 289.743425][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.793936][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 290.939293][ T7] usb 5-1: USB disconnect, device number 18 [ 291.699249][ T126] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 291.897398][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 291.905961][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.918438][ T126] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.928543][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.936762][ T126] usb 5-1: Product: syz [ 291.941126][ T126] usb 5-1: Manufacturer: syz [ 291.947495][ T126] usb 5-1: SerialNumber: syz [ 291.962713][ T126] usb 5-1: config 0 descriptor?? [ 291.979351][ T126] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 291.989001][ T126] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 292.592799][ T126] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 292.952873][ T7589] loop2: detected capacity change from 0 to 8 [ 292.977762][ T7589] SQUASHFS error: xz decompression failed, data probably corrupt [ 292.986021][ T7589] SQUASHFS error: Failed to read block 0x108: -5 [ 292.992394][ T7589] SQUASHFS error: Unable to read metadata cache entry [106] [ 292.999793][ T7589] SQUASHFS error: Unable to read inode 0x11f [ 293.017744][ T126] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 293.030259][ T126] em28xx 5-1:0.0: board has no eeprom [ 293.044614][ T4640] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.255907][ T7593] vivid-000: ================= START STATUS ================= [ 293.432820][ T7593] vivid-000: Test Pattern: 75% Colorbar [ 293.440829][ T7593] vivid-000: Fill Percentage of Frame: 100 [ 293.440855][ T7593] vivid-000: Horizontal Movement: No Movement [ 293.460277][ T7593] vivid-000: Vertical Movement: No Movement [ 293.467394][ T7593] vivid-000: OSD Text Mode: All [ 293.472707][ T7593] vivid-000: Show Border: false [ 293.653802][ T126] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 293.658555][ T7593] vivid-000: Show Square: false [ 293.681575][ T126] em28xx 5-1:0.0: dvb set to bulk mode. [ 293.692145][ T7593] vivid-000: Sensor Flipped Horizontally: false [ 293.700300][ T7593] vivid-000: Sensor Flipped Vertically: false [ 293.707255][ T4366] em28xx 5-1:0.0: Binding DVB extension [ 293.715257][ T7579] em28xx 5-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 293.725536][ T7593] vivid-000: Insert SAV Code in Image: false [ 293.735565][ T126] usb 5-1: USB disconnect, device number 19 [ 293.759945][ T126] em28xx 5-1:0.0: Disconnecting em28xx [ 293.777082][ T7593] vivid-000: Insert EAV Code in Image: false [ 293.788340][ T7593] vivid-000: Insert Video Guard Band: false [ 293.794887][ T7593] vivid-000: Reduced Framerate: false [ 293.800724][ T7593] vivid-000: Enable Capture Cropping: true [ 293.807148][ T7593] vivid-000: Enable Capture Composing: true [ 293.816489][ T7593] vivid-000: Enable Capture Scaler: true [ 293.823408][ T7593] vivid-000: Timestamp Source: End of Frame [ 293.829883][ T7593] vivid-000: Colorspace: sRGB [ 293.848303][ T4366] em28xx 5-1:0.0: Registering input extension [ 293.853950][ T7593] vivid-000: Transfer Function: Default [ 293.856238][ T126] em28xx 5-1:0.0: Closing input extension [ 293.862204][ T7593] vivid-000: Y'CbCr Encoding: Default [ 293.873422][ T7593] vivid-000: HSV Encoding: Hue 0-179 [ 293.879669][ T7593] vivid-000: Quantization: Default [ 293.886998][ T7593] vivid-000: Apply Alpha To Red Only: false [ 293.894131][ T7593] vivid-000: Standard Aspect Ratio: 4x3 [ 293.915107][ T7593] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 293.923071][ T7593] vivid-000: DV Timings: 640x480p59 inactive [ 293.930343][ T7593] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 293.943174][ T126] em28xx 5-1:0.0: Freeing device [ 293.953814][ T7593] vivid-000: Maximum EDID Blocks: 2 [ 293.966127][ T7593] vivid-000: Limited RGB Range (16-235): false [ 293.975375][ T7593] vivid-000: Rx RGB Quantization Range: Automatic [ 293.983108][ T7593] vivid-000: Power Present: 0x00000001 [ 293.992796][ T7593] tpg source WxH: 640x360 (Y'CbCr) [ 294.000323][ T7593] tpg field: 1 [ 294.004878][ T7593] tpg crop: 640x360@0x0 [ 294.009620][ T7593] tpg compose: 640x360@0x0 [ 294.021799][ T7593] tpg colorspace: 8 [ 294.029293][ T7593] tpg transfer function: 0/0 [ 294.035702][ T7593] tpg Y'CbCr encoding: 0/0 [ 294.041731][ T7593] tpg quantization: 0/0 [ 294.046080][ T7593] tpg RGB range: 0/2 [ 294.050477][ T7593] vivid-000: ================== END STATUS ================== [ 297.052351][ T7647] loop2: detected capacity change from 0 to 256 [ 298.808589][ T7659] 8021q: VLANs not supported on gre0 [ 298.994973][ T7661] device syzkaller1 entered promiscuous mode [ 299.163803][ T4366] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 300.418341][ T4366] usb 2-1: Using ep0 maxpacket: 16 [ 300.425638][ T4366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 300.449198][ T4366] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 300.757257][ T7682] loop4: detected capacity change from 0 to 512 [ 300.774272][ T4366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.782303][ T4366] usb 2-1: Product: syz [ 300.968064][ T4366] usb 2-1: Manufacturer: syz [ 300.979899][ T4366] usb 2-1: SerialNumber: syz [ 300.990025][ T4366] usb 2-1: config 0 descriptor?? [ 301.019579][ T4366] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 301.072749][ T4366] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 301.645255][ T4366] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 301.981680][ T7708] loop2: detected capacity change from 0 to 1024 [ 301.995259][ T7708] EXT4-fs: Ignoring removed orlov option [ 302.596608][ T7682] EXT4-fs (loop4): Test dummy encryption mode enabled [ 302.605467][ T4366] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 302.619562][ T4366] em28xx 2-1:0.0: board has no eeprom [ 302.756581][ T7708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 302.766579][ T7682] EXT4-fs error (device loop4): __ext4_iget:5077: inode #11: block 1: comm syz.4.855: invalid block [ 302.807494][ T7682] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.855: couldn't read orphan inode 11 (err -117) [ 302.829695][ T7682] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.951136][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 302.963864][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 302.978262][ T4366] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 302.987041][ T4366] em28xx 2-1:0.0: dvb set to bulk mode. [ 302.993251][ T4270] em28xx 2-1:0.0: Binding DVB extension [ 303.138508][ T4324] usb 2-1: USB disconnect, device number 18 [ 303.140064][ T7663] em28xx 2-1:0.0: reading from i2c device at 0x0 failed (error=-19) [ 303.153024][ T4324] em28xx 2-1:0.0: Disconnecting em28xx [ 303.296002][ T4270] em28xx 2-1:0.0: Registering input extension [ 303.303200][ T4324] em28xx 2-1:0.0: Closing input extension [ 303.348114][ T4324] em28xx 2-1:0.0: Freeing device [ 303.547844][ T7737] loop2: detected capacity change from 0 to 256 [ 303.561031][ T4366] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.753901][ T4366] usb 5-1: Using ep0 maxpacket: 8 [ 303.771658][ T4366] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 303.786174][ T4366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.016658][ T4366] usb 5-1: Product: syz [ 304.023638][ T4366] usb 5-1: Manufacturer: syz [ 304.028912][ T4366] usb 5-1: SerialNumber: syz [ 304.045186][ T4366] usb 5-1: config 0 descriptor?? [ 304.057591][ T4366] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 304.066336][ T4366] dvb-usb: bulk message failed: -22 (2/0) [ 304.107721][ T4366] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.196896][ T4366] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 304.283687][ T4366] usb 5-1: media controller created [ 304.353513][ T4366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.520551][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.524076][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.465756][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 305.773982][ T7767] loop5: detected capacity change from 0 to 256 [ 305.864424][ T4259] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.328971][ T4366] cxusb: set interface failed [ 306.341122][ T4366] dvb-usb: bulk message failed: -22 (1/0) [ 306.551067][ T7770] loop5: detected capacity change from 0 to 1024 [ 306.561203][ T4259] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.582879][ T4366] DVB: Unable to find symbol mt352_attach() [ 306.588964][ T4366] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 306.636619][ T7770] EXT4-fs: Ignoring removed oldalloc option [ 306.782450][ T7770] EXT4-fs: Ignoring removed orlov option [ 307.591153][ T7762] loop2: detected capacity change from 0 to 32768 [ 307.618313][ T7770] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 307.674377][ T4366] rc_core: IR keymap rc-dvico-portable not found [ 307.680769][ T4366] Registered IR keymap rc-empty [ 307.695500][ T4366] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 307.711206][ T4366] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input32 [ 307.728269][ T4366] dvb-usb: schedule remote query interval to 100 msecs. [ 307.743303][ T4366] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 307.755956][ T4366] usb 5-1: USB disconnect, device number 20 [ 307.793530][ T7762] ialloc: diAlloc returned -5! [ 307.821260][ T7770] ================================================================== [ 307.829351][ T7770] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00 [ 307.836718][ T7770] Read of size 4 at addr ffff88804696b458 by task syz.5.870/7770 [ 307.844425][ T7770] [ 307.846743][ T7770] CPU: 1 PID: 7770 Comm: syz.5.870 Not tainted syzkaller #0 [ 307.854000][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.864044][ T7770] Call Trace: [ 307.867300][ T7770] [ 307.870207][ T7770] dump_stack_lvl+0x168/0x22e [ 307.874867][ T7770] ? __lock_acquire+0x7c50/0x7c50 [ 307.879870][ T7770] ? show_regs_print_info+0x12/0x12 [ 307.885048][ T7770] ? load_image+0x3b0/0x3b0 [ 307.889530][ T7770] ? __virt_addr_valid+0x465/0x540 [ 307.894637][ T7770] ? ext4_find_extent+0xbcc/0xe00 [ 307.899642][ T7770] print_report+0xa8/0x210 [ 307.904042][ T7770] kasan_report+0x10b/0x140 [ 307.908541][ T7770] ? ext4_find_extent+0xbcc/0xe00 [ 307.913542][ T7770] ext4_find_extent+0xbcc/0xe00 [ 307.918370][ T7770] ext4_ext_map_blocks+0x27d/0x66d0 [ 307.923563][ T7770] ? mark_lock+0x94/0x320 [ 307.927899][ T7770] ? ext4_ext_release+0x10/0x10 [ 307.932740][ T7770] ? rwsem_write_trylock+0x12f/0x1b0 [ 307.938016][ T7770] ? ext4_es_lookup_extent+0x443/0xb20 [ 307.943460][ T7770] ext4_map_blocks+0x9d1/0x1b60 [ 307.948312][ T7770] ? ext4_issue_zeroout+0x250/0x250 [ 307.953502][ T7770] ? create_page_buffers+0x1d4/0x4a0 [ 307.958778][ T7770] _ext4_get_block+0x1d7/0x4e0 [ 307.963536][ T7770] ? ext4_get_block+0x40/0x40 [ 307.968200][ T7770] ? create_page_buffers+0x24f/0x4a0 [ 307.973470][ T7770] __block_write_begin_int+0x54b/0x1a70 [ 307.979012][ T7770] ? ext4_es_is_delayed+0x40/0x40 [ 307.984028][ T7770] ? page_zero_new_buffers+0x650/0x650 [ 307.989479][ T7770] ? ext4_journal_check_start+0x17e/0x240 [ 307.995189][ T7770] block_page_mkwrite+0x2d8/0x5f0 [ 308.000206][ T7770] ? ext4_es_is_delayed+0x40/0x40 [ 308.005231][ T7770] ext4_page_mkwrite+0x3b2/0x10c0 [ 308.010249][ T7770] ? ext4_es_is_delayed+0x40/0x40 [ 308.015287][ T7770] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 308.021521][ T7770] ? count_memcg_event_mm+0x8f/0x3b0 [ 308.026795][ T7770] ? count_memcg_event_mm+0x358/0x3b0 [ 308.032159][ T7770] ? vm_normal_page+0x95/0x1d0 [ 308.036921][ T7770] do_page_mkwrite+0x16b/0x5c0 [ 308.041675][ T7770] wp_page_shared+0x167/0x370 [ 308.046341][ T7770] handle_mm_fault+0x1ca6/0x3e70 [ 308.051274][ T7770] ? numa_migrate_prep+0x250/0x250 [ 308.056391][ T7770] ? lock_chain_count+0x20/0x20 [ 308.061241][ T7770] ? __up_read+0x27c/0x660 [ 308.065673][ T7770] ? lock_mm_and_find_vma+0xae/0x2f0 [ 308.070960][ T7770] do_user_addr_fault+0x51f/0xb10 [ 308.075991][ T7770] exc_page_fault+0x60/0x100 [ 308.080575][ T7770] ? __might_fault+0xa6/0x120 [ 308.085249][ T7770] asm_exc_page_fault+0x22/0x30 [ 308.090091][ T7770] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 308.096692][ T7770] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 308.116290][ T7770] RSP: 0018:ffffc9000eabfc38 EFLAGS: 00050202 [ 308.122355][ T7770] RAX: ffffffff8406fc01 RBX: 0000000000000841 RCX: 0000000000000781 [ 308.130311][ T7770] RDX: 0000000000000841 RSI: ffff88805dd600c0 RDI: 0000200000001000 [ 308.138264][ T7770] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100bbac109 [ 308.146337][ T7770] R10: 0000000000000000 R11: 0000000000000108 R12: 00007fffffffe7bf [ 308.154294][ T7770] R13: 1ffff92001d57fa4 R14: 0000200000000f40 R15: ffff88805dd60000 [ 308.162254][ T7770] ? _copy_to_user+0x11/0x130 [ 308.166938][ T7770] _copy_to_user+0xea/0x130 [ 308.171437][ T7770] do_getxattr+0x336/0x370 [ 308.175842][ T7770] path_getxattr+0x24f/0x400 [ 308.180422][ T7770] ? file_end_write+0x156/0x250 [ 308.185353][ T7770] ? setxattr+0x2d0/0x2d0 [ 308.189675][ T7770] ? lock_chain_count+0x20/0x20 [ 308.194531][ T7770] ? lockdep_hardirqs_on+0x94/0x140 [ 308.199719][ T7770] do_syscall_64+0x4c/0xa0 [ 308.204116][ T7770] ? clear_bhb_loop+0x60/0xb0 [ 308.208784][ T7770] ? clear_bhb_loop+0x60/0xb0 [ 308.213443][ T7770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.219323][ T7770] RIP: 0033:0x7fdfe8b8ebe9 [ 308.223736][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.243330][ T7770] RSP: 002b:00007fdfe9a1b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 308.251746][ T7770] RAX: ffffffffffffffda RBX: 00007fdfe8db5fa0 RCX: 00007fdfe8b8ebe9 [ 308.259733][ T7770] RDX: 0000200000000f40 RSI: 0000200000000280 RDI: 0000200000000240 [ 308.267702][ T7770] RBP: 00007fdfe8c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.275759][ T7770] R10: 00000000ffffff92 R11: 0000000000000246 R12: 0000000000000000 [ 308.283719][ T7770] R13: 00007fdfe8db6038 R14: 00007fdfe8db5fa0 R15: 00007ffe747b8468 [ 308.291718][ T7770] [ 308.294731][ T7770] [ 308.297052][ T7770] The buggy address belongs to the physical page: [ 308.303446][ T7770] page:ffffea00011a5ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4696b [ 308.313590][ T7770] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 308.320708][ T7770] raw: 00fff00000000000 ffffea0001162ac8 ffffea00013aeac8 0000000000000000 [ 308.329292][ T7770] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 308.337869][ T7770] page dumped because: kasan: bad access detected [ 308.344279][ T7770] page_owner tracks the page as freed [ 308.349635][ T7770] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7773, tgid 7772 (syz.4.871), ts 306702450757, free_ts 307531397043 [ 308.367357][ T7770] post_alloc_hook+0x173/0x1a0 [ 308.372179][ T7770] get_page_from_freelist+0x1a26/0x1ac0 [ 308.377721][ T7770] __alloc_pages+0x1df/0x4e0 [ 308.382299][ T7770] __folio_alloc+0xe/0x30 [ 308.386613][ T7770] vma_alloc_folio+0x4a3/0x900 [ 308.391375][ T7770] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 308.397145][ T7770] shmem_get_folio_gfp+0x1361/0x3400 [ 308.402500][ T7770] shmem_fault+0x1be/0x7b0 [ 308.406913][ T7770] __do_fault+0x13b/0x4e0 [ 308.411234][ T7770] handle_mm_fault+0x28ca/0x3e70 [ 308.416168][ T7770] __get_user_pages+0x3ff/0xeb0 [ 308.421065][ T7770] populate_vma_page_range+0x214/0x2b0 [ 308.426510][ T7770] __mm_populate+0x248/0x370 [ 308.431114][ T7770] vm_mmap_pgoff+0x203/0x2b0 [ 308.435697][ T7770] do_syscall_64+0x4c/0xa0 [ 308.440114][ T7770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.445997][ T7770] page last free stack trace: [ 308.450649][ T7770] free_unref_page_prepare+0x8b4/0x9a0 [ 308.456096][ T7770] free_unref_page_list+0xbb/0x8e0 [ 308.461195][ T7770] release_pages+0x1f92/0x2200 [ 308.465949][ T7770] __pagevec_release+0x6d/0xe0 [ 308.470795][ T7770] shmem_undo_range+0x75b/0x2050 [ 308.475726][ T7770] shmem_evict_inode+0x248/0xa40 [ 308.480658][ T7770] evict+0x485/0x870 [ 308.484550][ T7770] __dentry_kill+0x431/0x650 [ 308.489133][ T7770] dentry_kill+0xb8/0x290 [ 308.493456][ T7770] dput+0xfa/0x1d0 [ 308.497169][ T7770] __fput+0x5e0/0x920 [ 308.501142][ T7770] task_work_run+0x1ca/0x250 [ 308.505717][ T7770] do_exit+0x93e/0x2400 [ 308.509857][ T7770] do_group_exit+0x217/0x2d0 [ 308.514436][ T7770] __x64_sys_exit_group+0x3b/0x40 [ 308.519447][ T7770] do_syscall_64+0x4c/0xa0 [ 308.523872][ T7770] [ 308.526293][ T7770] Memory state around the buggy address: [ 308.531931][ T7770] ffff88804696b300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 308.540082][ T7770] ffff88804696b380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 308.548134][ T7770] >ffff88804696b400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 308.556178][ T7770] ^ [ 308.563095][ T7770] ffff88804696b480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 308.571140][ T7770] ffff88804696b500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 308.579181][ T7770] ================================================================== [ 308.640912][ T7770] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 308.648145][ T7770] CPU: 0 PID: 7770 Comm: syz.5.870 Not tainted syzkaller #0 [ 308.655443][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.665515][ T7770] Call Trace: [ 308.668804][ T7770] [ 308.671741][ T7770] dump_stack_lvl+0x168/0x22e [ 308.674669][ T4366] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 308.686477][ T7770] ? memcpy+0x3c/0x60 [ 308.690478][ T7770] ? show_regs_print_info+0x12/0x12 [ 308.695694][ T7770] ? load_image+0x3b0/0x3b0 [ 308.700217][ T7770] panic+0x2c9/0x710 [ 308.704130][ T7770] ? bpf_jit_dump+0xd0/0xd0 [ 308.708653][ T7770] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 308.714577][ T7770] ? _raw_spin_unlock+0x40/0x40 [ 308.719457][ T7770] ? print_memory_metadata+0x314/0x400 [ 308.725020][ T7770] check_panic_on_warn+0x80/0xa0 [ 308.729976][ T7770] ? ext4_find_extent+0xbcc/0xe00 [ 308.735014][ T7770] end_report+0x66/0x110 [ 308.739274][ T7770] kasan_report+0x118/0x140 [ 308.743797][ T7770] ? ext4_find_extent+0xbcc/0xe00 [ 308.748838][ T7770] ext4_find_extent+0xbcc/0xe00 [ 308.753709][ T7770] ext4_ext_map_blocks+0x27d/0x66d0 [ 308.758934][ T7770] ? mark_lock+0x94/0x320 [ 308.763289][ T7770] ? ext4_ext_release+0x10/0x10 [ 308.768166][ T7770] ? rwsem_write_trylock+0x12f/0x1b0 [ 308.773475][ T7770] ? ext4_es_lookup_extent+0x443/0xb20 [ 308.778972][ T7770] ext4_map_blocks+0x9d1/0x1b60 [ 308.784284][ T7770] ? ext4_issue_zeroout+0x250/0x250 [ 308.789511][ T7770] ? create_page_buffers+0x1d4/0x4a0 [ 308.794818][ T7770] _ext4_get_block+0x1d7/0x4e0 [ 308.799661][ T7770] ? ext4_get_block+0x40/0x40 [ 308.804360][ T7770] ? create_page_buffers+0x24f/0x4a0 [ 308.809667][ T7770] __block_write_begin_int+0x54b/0x1a70 [ 308.815235][ T7770] ? ext4_es_is_delayed+0x40/0x40 [ 308.820281][ T7770] ? page_zero_new_buffers+0x650/0x650 [ 308.825763][ T7770] ? ext4_journal_check_start+0x17e/0x240 [ 308.831522][ T7770] block_page_mkwrite+0x2d8/0x5f0 [ 308.836566][ T7770] ? ext4_es_is_delayed+0x40/0x40 [ 308.841604][ T7770] ext4_page_mkwrite+0x3b2/0x10c0 [ 308.846641][ T7770] ? ext4_es_is_delayed+0x40/0x40 [ 308.851682][ T7770] ? ext4_change_inode_journal_flag+0x6b0/0x6b0 [ 308.857944][ T7770] ? count_memcg_event_mm+0x8f/0x3b0 [ 308.863354][ T7770] ? count_memcg_event_mm+0x358/0x3b0 [ 308.868804][ T7770] ? vm_normal_page+0x95/0x1d0 [ 308.873569][ T7770] do_page_mkwrite+0x16b/0x5c0 [ 308.878687][ T7770] wp_page_shared+0x167/0x370 [ 308.883387][ T7770] handle_mm_fault+0x1ca6/0x3e70 [ 308.888327][ T7770] ? numa_migrate_prep+0x250/0x250 [ 308.893441][ T7770] ? lock_chain_count+0x20/0x20 [ 308.898290][ T7770] ? __up_read+0x27c/0x660 [ 308.902717][ T7770] ? lock_mm_and_find_vma+0xae/0x2f0 [ 308.907995][ T7770] do_user_addr_fault+0x51f/0xb10 [ 308.913016][ T7770] exc_page_fault+0x60/0x100 [ 308.917594][ T7770] ? __might_fault+0xa6/0x120 [ 308.922257][ T7770] asm_exc_page_fault+0x22/0x30 [ 308.927121][ T7770] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 308.933711][ T7770] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 308.953314][ T7770] RSP: 0018:ffffc9000eabfc38 EFLAGS: 00050202 [ 308.959377][ T7770] RAX: ffffffff8406fc01 RBX: 0000000000000841 RCX: 0000000000000781 [ 308.967362][ T7770] RDX: 0000000000000841 RSI: ffff88805dd600c0 RDI: 0000200000001000 [ 308.975414][ T7770] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100bbac109 [ 308.983409][ T7770] R10: 0000000000000000 R11: 0000000000000108 R12: 00007fffffffe7bf [ 308.991393][ T7770] R13: 1ffff92001d57fa4 R14: 0000200000000f40 R15: ffff88805dd60000 [ 308.999381][ T7770] ? _copy_to_user+0x11/0x130 [ 309.004066][ T7770] _copy_to_user+0xea/0x130 [ 309.008569][ T7770] do_getxattr+0x336/0x370 [ 309.012984][ T7770] path_getxattr+0x24f/0x400 [ 309.017608][ T7770] ? file_end_write+0x156/0x250 [ 309.022454][ T7770] ? setxattr+0x2d0/0x2d0 [ 309.026780][ T7770] ? lock_chain_count+0x20/0x20 [ 309.031620][ T7770] ? lockdep_hardirqs_on+0x94/0x140 [ 309.036807][ T7770] do_syscall_64+0x4c/0xa0 [ 309.041213][ T7770] ? clear_bhb_loop+0x60/0xb0 [ 309.045873][ T7770] ? clear_bhb_loop+0x60/0xb0 [ 309.050531][ T7770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.056416][ T7770] RIP: 0033:0x7fdfe8b8ebe9 [ 309.060905][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.080503][ T7770] RSP: 002b:00007fdfe9a1b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 309.088908][ T7770] RAX: ffffffffffffffda RBX: 00007fdfe8db5fa0 RCX: 00007fdfe8b8ebe9 [ 309.096868][ T7770] RDX: 0000200000000f40 RSI: 0000200000000280 RDI: 0000200000000240 [ 309.104914][ T7770] RBP: 00007fdfe8c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 309.112884][ T7770] R10: 00000000ffffff92 R11: 0000000000000246 R12: 0000000000000000 [ 309.120879][ T7770] R13: 00007fdfe8db6038 R14: 00007fdfe8db5fa0 R15: 00007ffe747b8468 [ 309.128842][ T7770] [ 309.136913][ T7770] Kernel Offset: disabled [ 309.141239][ T7770] Rebooting in 86400 seconds..