last executing test programs: 5.065207408s ago: executing program 2 (id=861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.964730068s ago: executing program 2 (id=863): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe0100000200000002000000800000", @ANYRES32, @ANYBLOB="060000000000000000d862010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000739d0000000000000004000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000440)=""/165, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x7, 0xf81}, 0x10, 0x28035, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[r1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x1, 0x7, 0x6}, {0x0, 0x2, 0x10, 0x8}, {0x2, 0x5, 0x9, 0x1}, {0x0, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x0, 0x9}, {0x4, 0x5, 0x10}, {0x2, 0x5, 0x8b0, 0x6}, {0x5, 0x5, 0x10, 0x4}]}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) 4.604093067s ago: executing program 1 (id=867): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x4005) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000280)={0x0, 0x211d, 0x400, 0x40205, 0x11e}, 0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1c000000010401040000e26624ea00000a0000040500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x20004000) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 4.396691426s ago: executing program 4 (id=870): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) 3.739319507s ago: executing program 0 (id=875): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000980)=[@wrmsr={0x65, 0x20, {0xa0f, 0xf80000000}}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @code={0xa, 0x82, {"c443d148b6224600000bc4e3791daf5b000000f5c74424000c000000c7442402bd000000c7442406000000000f011424f3410f09656467360f79d4420fc77600410fe118c744240013f71158c744240200300000c7442406000000000f01142466bad004b800200000ef66bad104b0a0ee"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6816, 0x5, 0xd, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x4e, 0x1000000000000000, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x7b, {"c744240044000000c7442402c6eb0000c7442406000000000f011424b9d40b0000b846000000ba000000000f306545aa0f01f8c4e27d789a74000000c4c1085916b9800000c00f3235000800000f300f01fab9800000c00f3235008000000f3066450f3881b0074315f4"}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x9, 0x4, 0x614}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x77}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd3, 0x3, 0x8, 0x1}}], 0x2e5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.631815605s ago: executing program 0 (id=876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 3.515347233s ago: executing program 0 (id=877): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRES32=r1, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 3.276629775s ago: executing program 4 (id=879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xc01, 0x0) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={0x0}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES8, @ANYRESOCT=r1, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0x10000000}) 3.254874851s ago: executing program 3 (id=880): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x24080000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000100)="120000001a009b8a5feee09a140000003b9b", 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbb9d4c7b8fe7a1ac8000300d1320f237c6b3d8cfc030000000000", @ANYBLOB="0600950010000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4820) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r4, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca3e, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 3.015725444s ago: executing program 2 (id=881): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)="18", 0x1a000}], 0x1}}], 0x1, 0x20001000) 2.912715614s ago: executing program 2 (id=882): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYBLOB, @ANYRES8], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0xda96) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.772496666s ago: executing program 3 (id=883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.715377134s ago: executing program 4 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xfb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x9f, 0x76, 0x31, 0x20, 0x7ca, 0xb800, 0xd927, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x2, 0x90, 0x40, [{{0x9, 0x4, 0xe1, 0xc, 0x0, 0x3, 0x0, 0x0, 0x10}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x8000d, 0xfffffffc) syz_open_dev$vim2m(&(0x7f0000000040), 0xd11, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0xc1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000780), 0x12) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000c0000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0f00b685ae220a933be563bcb400"], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.560797104s ago: executing program 0 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.490556281s ago: executing program 3 (id=886): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000980)=[@wrmsr={0x65, 0x20, {0xa0f, 0xf80000000}}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @code={0xa, 0x82, {"c443d148b6224600000bc4e3791daf5b000000f5c74424000c000000c7442402bd000000c7442406000000000f011424f3410f09656467360f79d4420fc77600410fe118c744240013f71158c744240200300000c7442406000000000f01142466bad004b800200000ef66bad104b0a0ee"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6816, 0x5, 0xd, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x4e, 0x1000000000000000, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x7b, {"c744240044000000c7442402c6eb0000c7442406000000000f011424b9d40b0000b846000000ba000000000f306545aa0f01f8c4e27d789a74000000c4c1085916b9800000c00f3235000800000f300f01fab9800000c00f3235008000000f3066450f3881b0074315f4"}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x9, 0x4, 0x614}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x77}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd3, 0x3, 0x8, 0x1}}], 0x2e5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 2.481103539s ago: executing program 0 (id=887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 2.427551538s ago: executing program 3 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.393117651s ago: executing program 0 (id=889): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004043554d00000000000001090224000100003000090410907f03000000092100000001220a000905810300"], 0x0) 2.061389186s ago: executing program 3 (id=890): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa8daaaafeffff"], 0x0) 1.823636349s ago: executing program 3 (id=891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe0100000200000002000000800000", @ANYRES32, @ANYBLOB="060000000000000000d862010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000739d0000000000000004000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000440)=""/165, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x7, 0xf81}, 0x10, 0x28035, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[r1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x1, 0x7, 0x6}, {0x0, 0x2, 0x10, 0x8}, {0x2, 0x5, 0x9, 0x1}, {0x0, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x0, 0x9}, {0x4, 0x5, 0x10}, {0x2, 0x5, 0x8b0, 0x6}, {0x5, 0x5, 0x10, 0x4}]}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) 1.202367036s ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) close(r1) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r4], 0x1c}}, 0x20000080) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, 0xa8) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x18) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.098237486s ago: executing program 2 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x1d, 0x3, 0x9, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000000c0)="80", 0x1, 0x48d4, &(0x7f00000001c0)={0x11, 0xf6, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 984.602754ms ago: executing program 1 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0xc01, 0x0) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={0x0}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES8, @ANYRESOCT=r1, @ANYRESDEC], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0x10000000}) 778.727703ms ago: executing program 2 (id=895): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRES32=r1, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 628.671364ms ago: executing program 4 (id=896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 447.994018ms ago: executing program 4 (id=897): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x24080000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000100)="120000001a009b8a5feee09a140000003b9b", 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbb9d4c7b8fe7a1ac8000300d1320f237c6b3d8cfc030000000000", @ANYBLOB="0600950010000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4820) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r4, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 346.646818ms ago: executing program 1 (id=898): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000980)=[@wrmsr={0x65, 0x20, {0xa0f, 0xf80000000}}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @code={0xa, 0x82, {"c443d148b6224600000bc4e3791daf5b000000f5c74424000c000000c7442402bd000000c7442406000000000f011424f3410f09656467360f79d4420fc77600410fe118c744240013f71158c744240200300000c7442406000000000f01142466bad004b800200000ef66bad104b0a0ee"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6816, 0x5, 0xd, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x4e, 0x1000000000000000, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x7b, {"c744240044000000c7442402c6eb0000c7442406000000000f011424b9d40b0000b846000000ba000000000f306545aa0f01f8c4e27d789a74000000c4c1085916b9800000c00f3235000800000f300f01fab9800000c00f3235008000000f3066450f3881b0074315f4"}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x9, 0x4, 0x614}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x77}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd3, 0x3, 0x8, 0x1}}], 0x2e5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 271.153833ms ago: executing program 1 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 147.568189ms ago: executing program 1 (id=900): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRES32=r1, @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r7, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 0s ago: executing program 4 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): sb: MAC address reading failed. [ 135.217839][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.274860][ T1324] usb 3-1: USB disconnect, device number 9 [ 135.361437][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 135.437284][ T4229] DVB: Unable to find symbol stb0899_attach() [ 135.477322][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 135.776718][ T5715] device syzkaller0 entered promiscuous mode [ 135.783469][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 135.789611][ T4229] Registered IR keymap rc-empty [ 135.809317][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 135.858594][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 135.914934][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 135.955785][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 135.955785][ T4229] [ 135.985396][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 136.072512][ T4229] usb 2-1: USB disconnect, device number 12 [ 136.200601][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 136.348321][ T5720] netlink: 'syz.1.468': attribute type 6 has an invalid length. [ 136.654625][ T4185] usb 5-1: string descriptor 0 read error: -71 [ 136.802995][ T4185] usbhid 5-1:0.1: can't add hid device: -71 [ 136.812225][ T4229] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 136.830602][ T4185] usbhid: probe of 5-1:0.1 failed with error -71 [ 136.856018][ T4185] usb 5-1: USB disconnect, device number 8 [ 137.004037][ T1324] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.205907][ T4229] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.245912][ T4229] usb 2-1: config 0 has no interface number 0 [ 137.276401][ T4229] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 137.276905][ T5738] 9pnet_virtio: no channels available for device 127.0.0.1 [ 137.315749][ T4229] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.328660][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.364927][ T4229] usb 2-1: config 0 descriptor?? [ 137.401986][ T4230] usbhid 1-1:0.16: can't add hid device: -71 [ 137.410436][ T4230] usbhid: probe of 1-1:0.16 failed with error -71 [ 137.424970][ T4230] usb 1-1: USB disconnect, device number 15 [ 137.441958][ T1324] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.442039][ T5720] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.461885][ T4185] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.467213][ T1324] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.507645][ T4229] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 137.608235][ T1324] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.623069][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.639195][ T1324] usb 4-1: SerialNumber: syz [ 137.665753][ T4238] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.701721][ T4185] usb 5-1: Using ep0 maxpacket: 32 [ 137.798335][ T21] usb 2-1: USB disconnect, device number 13 [ 137.841907][ T4230] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 137.862080][ T4185] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.887266][ T5730] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 137.919757][ T5730] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.931730][ T4238] usb 3-1: Using ep0 maxpacket: 8 [ 137.945856][ T4185] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 137.962906][ T4185] usb 5-1: config 102 has no interface number 0 [ 137.971216][ T4185] usb 5-1: config 102 interface 225 has no altsetting 0 [ 138.006602][ T1324] usb 4-1: skipping empty audio interface (v1) [ 138.050251][ T1324] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 138.060408][ T1324] usb 4-1: USB disconnect, device number 8 [ 138.151837][ T4185] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 138.171206][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.181515][ T4185] usb 5-1: Product: syz [ 138.188031][ T4185] usb 5-1: Manufacturer: syz [ 138.193013][ T4185] usb 5-1: SerialNumber: syz [ 138.221916][ T4230] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.232573][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.252035][ T4238] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 138.261736][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.270147][ T4238] usb 3-1: Product: syz [ 138.276497][ T4238] usb 3-1: Manufacturer: syz [ 138.284545][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.304208][ T4238] usb 3-1: SerialNumber: syz [ 138.314808][ T4238] usb 3-1: config 0 descriptor?? [ 138.322103][ T4230] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.345030][ T4230] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.359869][ T4230] usb 1-1: Manufacturer: syz [ 138.373938][ T4238] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 138.381055][ T4230] usb 1-1: config 0 descriptor?? [ 138.388631][ T4238] pctv452e: pctv452e_power_ctrl: 1 [ 138.388631][ T4238] [ 138.396931][ T4238] usb 3-1: selecting invalid altsetting 3 [ 138.404773][ T4238] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 138.404773][ T4238] [ 138.416731][ T4238] dvb-usb: bulk message failed: -22 (5/0) [ 138.432702][ T4238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.466562][ T4238] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 138.476352][ T4238] usb 3-1: media controller created [ 138.482459][ T4238] dvb-usb: bulk message failed: -22 (8/0) [ 138.489950][ T4238] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 138.498864][ T4238] dvb-usb: MAC address reading failed. [ 138.501847][ T4230] rc_core: IR keymap rc-hauppauge not found [ 138.526342][ T4230] Registered IR keymap rc-empty [ 138.526402][ T4238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.554652][ T4230] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 138.573726][ T4185] (null): radio-mr800 - initialization failed [ 138.578918][ T5738] dvb-usb: bulk message failed: -22 (7/0) [ 138.584581][ T4185] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 138.599097][ T4230] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 138.612138][ T5738] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 138.624207][ T4185] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 138.661689][ T4185] usb 5-1: USB disconnect, device number 9 [ 138.729381][ T4238] DVB: Unable to find symbol stb0899_attach() [ 138.742069][ T4238] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 138.869815][ T5749] tipc: Enabling of bearer rejected, failed to enable media [ 138.918728][ T5749] device syzkaller0 entered promiscuous mode [ 138.931773][ T4238] rc_core: IR keymap rc-tt-1500 not found [ 138.938259][ T4238] Registered IR keymap rc-empty [ 138.946848][ T4238] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 138.966625][ T4238] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input26 [ 138.996480][ T4238] dvb-usb: schedule remote query interval to 100 msecs. [ 139.008722][ T4238] pctv452e: pctv452e_power_ctrl: 0 [ 139.008722][ T4238] [ 139.027166][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 139.041064][ T4238] usb 3-1: USB disconnect, device number 10 [ 139.211585][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 139.574194][ T4229] usb 1-1: USB disconnect, device number 16 [ 139.653056][ T5767] netlink: 64 bytes leftover after parsing attributes in process `syz.2.485'. [ 140.002054][ T4233] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.163140][ T5777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.488'. [ 140.194127][ T1324] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 140.372135][ T4233] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.402146][ T4233] usb 2-1: config 0 has no interface number 0 [ 140.430514][ T4233] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.464413][ T4233] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.475784][ T1324] usb 3-1: Using ep0 maxpacket: 16 [ 140.496050][ T4233] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 140.515839][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.537060][ T4233] usb 2-1: config 0 descriptor?? [ 140.591879][ T1324] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.617764][ T1324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.637485][ T1324] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 140.671653][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.687539][ T4230] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.697214][ T1324] usb 3-1: config 0 descriptor?? [ 140.842146][ T4238] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.044593][ T5784] 9pnet_virtio: no channels available for device 127.0.0.1 [ 141.072047][ T4230] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.091672][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.092731][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 141.195843][ T4230] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 141.236534][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 141.256576][ T4230] usb 1-1: SerialNumber: syz [ 141.291912][ T4238] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.381788][ T4229] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.381883][ T4238] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 141.417457][ T4238] usb 4-1: config 102 has no interface number 0 [ 141.432443][ T4238] usb 4-1: config 102 interface 225 has no altsetting 0 [ 141.538924][ T5780] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 141.601433][ T5780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.615145][ T4238] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 141.640096][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.651733][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 141.657078][ T4238] usb 4-1: Product: syz [ 141.663982][ T4238] usb 4-1: Manufacturer: syz [ 141.669681][ T4238] usb 4-1: SerialNumber: syz [ 141.685338][ T4230] usb 1-1: skipping empty audio interface (v1) [ 141.723394][ T4230] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 141.749983][ T4230] usb 1-1: USB disconnect, device number 17 [ 141.972065][ T4229] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 141.990576][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.000906][ T4229] usb 5-1: Product: syz [ 142.001116][ T4480] udevd[4480]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.011934][ T4229] usb 5-1: Manufacturer: syz [ 142.034793][ T4229] usb 5-1: SerialNumber: syz [ 142.044164][ T4229] usb 5-1: config 0 descriptor?? [ 142.052182][ T4238] (null): radio-mr800 - initialization failed [ 142.064553][ T4238] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 142.079963][ T4238] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 142.098119][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 142.105474][ T4238] usb 4-1: USB disconnect, device number 9 [ 142.110434][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 142.110434][ T4229] [ 142.126123][ T4229] usb 5-1: selecting invalid altsetting 3 [ 142.137569][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 142.137569][ T4229] [ 142.153573][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 142.167694][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.212112][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 142.238022][ T4229] usb 5-1: media controller created [ 142.249782][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 142.263874][ T4229] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 142.279340][ T4229] dvb-usb: MAC address reading failed. [ 142.294569][ T5784] dvb-usb: bulk message failed: -22 (7/0) [ 142.301776][ T5784] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 142.315754][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.386487][ T4229] DVB: Unable to find symbol stb0899_attach() [ 142.395839][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 142.424670][ T5790] tipc: Enabling of bearer rejected, failed to enable media [ 142.441041][ T5790] device syzkaller0 entered promiscuous mode [ 142.526911][ T5793] netlink: 'syz.3.494': attribute type 6 has an invalid length. [ 142.551717][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 142.568140][ T4229] Registered IR keymap rc-empty [ 142.575754][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 142.582087][ T4233] usb 2-1: string descriptor 0 read error: -71 [ 142.602738][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input27 [ 142.634004][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 142.657550][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 142.657550][ T4229] [ 142.679597][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 142.684224][ T5797] tipc: Started in network mode [ 142.707853][ T4229] usb 5-1: USB disconnect, device number 10 [ 142.721811][ T4233] usbhid 2-1:0.1: can't add hid device: -71 [ 142.729716][ T4233] usbhid: probe of 2-1:0.1 failed with error -71 [ 142.729867][ T5797] tipc: Node identity b64bced17132, cluster identity 4711 [ 142.746855][ T5797] tipc: Enabled bearer , priority 0 [ 142.776687][ T5797] device syzkaller0 entered promiscuous mode [ 142.794990][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 142.817489][ T4233] usb 2-1: USB disconnect, device number 14 [ 142.825753][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 142.851365][ T5796] tipc: Resetting bearer [ 142.857840][ T4230] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 142.888168][ T5796] tipc: Disabling bearer [ 142.981757][ T1324] usbhid 3-1:0.0: can't add hid device: -71 [ 142.990036][ T1324] usbhid: probe of 3-1:0.0 failed with error -71 [ 143.037111][ T1324] usb 3-1: USB disconnect, device number 11 [ 143.261697][ T4233] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 143.282034][ T4230] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.295103][ T4230] usb 4-1: config 0 has no interface number 0 [ 143.321138][ T4230] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 143.377038][ T4230] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.411707][ T4229] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 143.421355][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.450247][ T4230] usb 4-1: config 0 descriptor?? [ 143.472005][ T5793] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 143.495088][ T4230] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 143.531753][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 143.677521][ T5813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.502'. [ 143.769569][ T4230] usb 4-1: USB disconnect, device number 10 [ 143.775877][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 143.786077][ T4229] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.826132][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.844961][ T4233] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 143.900552][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.957078][ T4233] usb 1-1: Product: syz [ 143.962157][ T4233] usb 1-1: Manufacturer: syz [ 143.966971][ T4233] usb 1-1: SerialNumber: syz [ 144.011797][ T4229] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.042906][ T4233] usb 1-1: config 0 descriptor?? [ 144.052023][ T4229] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.060248][ T4229] usb 5-1: Manufacturer: syz [ 144.106752][ T4233] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 144.118288][ T4229] usb 5-1: config 0 descriptor?? [ 144.132802][ T4233] pctv452e: pctv452e_power_ctrl: 1 [ 144.132802][ T4233] [ 144.151007][ T4233] usb 1-1: selecting invalid altsetting 3 [ 144.187737][ T5819] tipc: Enabling of bearer rejected, failed to enable media [ 144.198927][ T4233] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 144.198927][ T4233] [ 144.218022][ T5819] device syzkaller0 entered promiscuous mode [ 144.230228][ T4233] dvb-usb: bulk message failed: -22 (5/0) [ 144.259258][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.301938][ T4233] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 144.320472][ T4233] usb 1-1: media controller created [ 144.331827][ T4229] rc_core: IR keymap rc-hauppauge not found [ 144.336504][ T4233] dvb-usb: bulk message failed: -22 (8/0) [ 144.356869][ T4233] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 144.369907][ T4229] Registered IR keymap rc-empty [ 144.382494][ T4233] dvb-usb: MAC address reading failed. [ 144.412277][ T4229] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 144.468236][ T4229] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 144.473318][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.620422][ T4233] DVB: Unable to find symbol stb0899_attach() [ 144.632879][ T4233] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 144.881697][ T4229] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.976920][ T4230] usb 5-1: USB disconnect, device number 11 [ 144.991878][ T4233] rc_core: IR keymap rc-tt-1500 not found [ 145.006619][ T4233] Registered IR keymap rc-empty [ 145.039686][ T4233] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 145.067465][ T4233] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input29 [ 145.116079][ T4233] dvb-usb: schedule remote query interval to 100 msecs. [ 145.131674][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 145.144815][ T4233] pctv452e: pctv452e_power_ctrl: 0 [ 145.144815][ T4233] [ 145.180476][ T4233] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 145.252493][ T4233] dvb-usb: bulk message failed: -22 (4/0) [ 145.269570][ T4233] dvb-usb: error -22 while querying for an remote control event. [ 145.361999][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 145.411759][ T4233] dvb-usb: bulk message failed: -22 (4/0) [ 145.419594][ T4233] dvb-usb: error -22 while querying for an remote control event. [ 145.482756][ T4229] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 145.512507][ T4229] usb 2-1: config 102 has no interface number 0 [ 145.549966][ T4229] usb 2-1: config 102 interface 225 has no altsetting 0 [ 145.562627][ T4233] dvb-usb: bulk message failed: -22 (4/0) [ 145.579740][ T4233] dvb-usb: error -22 while querying for an remote control event. [ 145.721883][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.760289][ T4233] dvb-usb: bulk message failed: -22 (4/0) [ 145.771957][ T4229] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 145.795794][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.811690][ T4233] dvb-usb: error -22 while querying for an remote control event. [ 145.840274][ T4229] usb 2-1: Product: syz [ 145.860590][ T4229] usb 2-1: Manufacturer: syz [ 145.901628][ T4229] usb 2-1: SerialNumber: syz [ 145.992962][ T5851] netlink: 64 bytes leftover after parsing attributes in process `syz.4.512'. [ 145.997967][ T4233] dvb-usb: bulk message failed: -22 (4/0) [ 146.003035][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 146.066079][ T4233] dvb-usb: error -22 while querying for an remote control event. [ 146.191799][ T4230] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.218048][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 146.234842][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 146.238225][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.269436][ T5854] netlink: 64 bytes leftover after parsing attributes in process `syz.2.513'. [ 146.294315][ T4230] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 146.333129][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.389369][ T4230] usb 4-1: config 0 descriptor?? [ 146.401787][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 146.415987][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 146.469027][ T4238] usb 1-1: USB disconnect, device number 18 [ 146.505315][ T4229] (null): radio-mr800 - initialization failed [ 146.525076][ T4229] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 146.546973][ T4229] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 146.580630][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 146.597090][ T4229] usb 2-1: USB disconnect, device number 15 [ 146.715550][ T5865] tipc: Enabling of bearer rejected, failed to enable media [ 146.733954][ T5865] device syzkaller0 entered promiscuous mode [ 146.907032][ T5867] netlink: 'syz.0.518': attribute type 6 has an invalid length. [ 147.241702][ T4229] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 147.489190][ T5877] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 147.581909][ T4191] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 147.636176][ T5882] netlink: 64 bytes leftover after parsing attributes in process `syz.1.524'. [ 147.687727][ T4229] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.716623][ T4229] usb 1-1: config 0 has no interface number 0 [ 147.736907][ T4229] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 147.750187][ T4229] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.782435][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.829915][ T4229] usb 1-1: config 0 descriptor?? [ 147.862071][ T5867] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.907274][ T4229] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 147.961721][ T4191] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 147.970421][ T4191] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.045494][ T5901] tipc: Enabling of bearer rejected, failed to enable media [ 148.059661][ T5901] device syzkaller0 entered promiscuous mode [ 148.081973][ T4191] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.096023][ T4191] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.110410][ T4191] usb 3-1: Manufacturer: syz [ 148.125889][ T4191] usb 3-1: config 0 descriptor?? [ 148.163187][ T4238] usb 1-1: USB disconnect, device number 19 [ 148.181750][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 148.289989][ T5907] 9pnet_virtio: no channels available for device 127.0.0.1 [ 148.302715][ T4233] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 148.361893][ T4191] rc_core: IR keymap rc-hauppauge not found [ 148.368495][ T4191] Registered IR keymap rc-empty [ 148.380574][ T4191] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 148.411259][ T4191] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 148.522061][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 148.540711][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 148.547983][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 148.578287][ T4230] usb 4-1: USB disconnect, device number 11 [ 148.585437][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.629258][ T5912] netlink: 64 bytes leftover after parsing attributes in process `syz.3.532'. [ 148.842887][ T4238] usb 3-1: USB disconnect, device number 12 [ 148.871733][ T4233] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 148.881744][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 148.923493][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.952100][ T4233] usb 2-1: Product: syz [ 148.962742][ T4233] usb 2-1: Manufacturer: syz [ 148.975801][ T4233] usb 2-1: SerialNumber: syz [ 148.996366][ T4233] usb 2-1: config 0 descriptor?? [ 149.053017][ T4233] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 149.071826][ T4233] pctv452e: pctv452e_power_ctrl: 1 [ 149.071826][ T4233] [ 149.099443][ T4233] usb 2-1: selecting invalid altsetting 3 [ 149.119546][ T4233] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 149.119546][ T4233] [ 149.173202][ T4233] dvb-usb: bulk message failed: -22 (5/0) [ 149.187168][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.201969][ T4229] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 149.222136][ T4233] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 149.232481][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.251054][ T4229] usb 5-1: Product: syz [ 149.269354][ T4229] usb 5-1: Manufacturer: syz [ 149.276070][ T4233] usb 2-1: media controller created [ 149.286393][ T4233] dvb-usb: bulk message failed: -22 (8/0) [ 149.291827][ T4229] usb 5-1: SerialNumber: syz [ 149.298469][ T4233] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 149.312833][ T4233] dvb-usb: MAC address reading failed. [ 149.329545][ T4229] usb 5-1: config 0 descriptor?? [ 149.385337][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 149.401331][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.414747][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 149.414747][ T4229] [ 149.445223][ T4229] usb 5-1: selecting invalid altsetting 3 [ 149.472936][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 149.472936][ T4229] [ 149.519246][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 149.539980][ T4233] DVB: Unable to find symbol stb0899_attach() [ 149.550714][ T4233] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 149.568264][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.584842][ T5907] dvb-usb: bulk message failed: -22 (7/0) [ 149.590983][ T5907] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 149.662332][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 149.701861][ T4229] usb 5-1: media controller created [ 149.735142][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 149.803536][ T4229] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 149.832551][ T4229] dvb-usb: MAC address reading failed. [ 149.862040][ T4233] rc_core: IR keymap rc-tt-1500 not found [ 149.867820][ T4233] Registered IR keymap rc-empty [ 149.881785][ T4233] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 149.898597][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.925519][ T4233] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input31 [ 149.941043][ T4233] dvb-usb: schedule remote query interval to 100 msecs. [ 149.953562][ T4233] pctv452e: pctv452e_power_ctrl: 0 [ 149.953562][ T4233] [ 149.967082][ T4233] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 150.061673][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 150.098097][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 150.187511][ T4229] DVB: Unable to find symbol stb0899_attach() [ 150.201516][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 150.241654][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 150.254784][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 150.307543][ T5932] netlink: 64 bytes leftover after parsing attributes in process `syz.4.538'. [ 150.416700][ T5937] tipc: Enabling of bearer rejected, failed to enable media [ 150.443442][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 150.451701][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 150.480570][ T5943] device syzkaller0 entered promiscuous mode [ 150.482034][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 150.525379][ T4229] Registered IR keymap rc-empty [ 150.552225][ T4229] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1 [ 150.611885][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc1/input32 [ 150.622559][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 150.651632][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 150.695198][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 150.721880][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 150.721880][ T4229] [ 150.744709][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 150.819806][ T4229] usb 5-1: USB disconnect, device number 12 [ 150.833923][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 150.862037][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 150.948542][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 150.954283][ T5957] netlink: 'syz.0.543': attribute type 6 has an invalid length. [ 151.021700][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 151.031688][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 151.163901][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 151.172564][ T21] dvb-usb: error -22 while querying for an remote control event. [ 151.191771][ T4191] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 151.229017][ T4231] usb 2-1: USB disconnect, device number 16 [ 151.252544][ T4238] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 151.343819][ T4231] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 151.361865][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.414192][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 151.471705][ T4229] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.611818][ T4191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.652085][ T5969] 9pnet_virtio: no channels available for device 127.0.0.1 [ 151.660839][ T4191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.671921][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 151.677908][ T4238] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.689126][ T4238] usb 1-1: config 0 has no interface number 0 [ 151.696971][ T4238] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 151.708843][ T4238] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.730169][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.752225][ T4191] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.766333][ T4238] usb 1-1: config 0 descriptor?? [ 151.776905][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.792264][ T5957] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 151.806457][ T4191] usb 4-1: SerialNumber: syz [ 151.820669][ T4238] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 151.861966][ T4229] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.871807][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.931879][ T4231] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 151.961896][ T4229] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 151.975867][ T4229] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 151.990476][ T4229] usb 5-1: Manufacturer: syz [ 152.004738][ T4229] usb 5-1: config 0 descriptor?? [ 152.032103][ T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 152.055122][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.085783][ T5952] netlink: 'syz.3.541': attribute type 10 has an invalid length. [ 152.101901][ T1108] usb 1-1: USB disconnect, device number 20 [ 152.114462][ T21] usb 3-1: Product: syz [ 152.118967][ T21] usb 3-1: Manufacturer: syz [ 152.146066][ T21] usb 3-1: SerialNumber: syz [ 152.161200][ T21] usb 3-1: config 0 descriptor?? [ 152.172940][ T4229] rc_core: IR keymap rc-hauppauge not found [ 152.184975][ T4229] Registered IR keymap rc-empty [ 152.191638][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 152.195212][ T4229] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 152.215465][ T4229] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 152.263317][ T21] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 152.313989][ T4191] usb 4-1: skipping empty audio interface (v1) [ 152.336888][ T21] pctv452e: pctv452e_power_ctrl: 1 [ 152.336888][ T21] [ 152.358913][ T21] usb 3-1: selecting invalid altsetting 3 [ 152.382257][ T21] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 152.382257][ T21] [ 152.385927][ T4191] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 152.411261][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 152.463424][ T4191] usb 4-1: USB disconnect, device number 12 [ 152.464424][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.487956][ T5327] udevd[5327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.488404][ T4231] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 152.596050][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.605467][ T21] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 152.619730][ T21] usb 3-1: media controller created [ 152.629634][ T4231] usb 2-1: Product: syz [ 152.636647][ T21] dvb-usb: bulk message failed: -22 (8/0) [ 152.647825][ T4231] usb 2-1: Manufacturer: syz [ 152.655719][ T21] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 152.668038][ T4231] usb 2-1: SerialNumber: syz [ 152.679725][ T4231] usb 2-1: config 0 descriptor?? [ 152.689545][ T21] dvb-usb: MAC address reading failed. [ 152.729822][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.743297][ T4231] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 152.767872][ T4231] pctv452e: pctv452e_power_ctrl: 1 [ 152.767872][ T4231] [ 152.788327][ T4231] usb 2-1: selecting invalid altsetting 3 [ 152.816607][ T4231] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 152.816607][ T4231] [ 152.865486][ T4231] dvb-usb: bulk message failed: -22 (5/0) [ 152.900791][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.914284][ T21] DVB: Unable to find symbol stb0899_attach() [ 152.923658][ T21] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 152.940717][ T5969] dvb-usb: bulk message failed: -22 (7/0) [ 152.949107][ T5969] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 152.965349][ T4229] usb 5-1: USB disconnect, device number 13 [ 152.971954][ T4231] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 152.991258][ T4231] usb 2-1: media controller created [ 153.018407][ T4231] dvb-usb: bulk message failed: -22 (8/0) [ 153.028262][ T4231] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 153.044572][ T4231] dvb-usb: MAC address reading failed. [ 153.069835][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.131722][ T21] rc_core: IR keymap rc-tt-1500 not found [ 153.137798][ T21] Registered IR keymap rc-empty [ 153.154930][ T21] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 153.187374][ T21] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input34 [ 153.199207][ T4231] DVB: Unable to find symbol stb0899_attach() [ 153.211945][ T4231] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 153.244173][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 153.251879][ T21] pctv452e: pctv452e_power_ctrl: 0 [ 153.251879][ T21] [ 153.259361][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 153.371642][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 153.378199][ T21] dvb-usb: error -22 while querying for an remote control event. [ 153.404605][ T5988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.553'. [ 153.461797][ T4231] rc_core: IR keymap rc-tt-1500 not found [ 153.467791][ T4231] Registered IR keymap rc-empty [ 153.518256][ T4231] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 153.568918][ T4231] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input35 [ 153.585050][ T5990] tipc: Enabling of bearer rejected, failed to enable media [ 153.602385][ T5990] device syzkaller0 entered promiscuous mode [ 153.610551][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 153.617831][ T4231] dvb-usb: schedule remote query interval to 100 msecs. [ 153.625184][ T21] dvb-usb: error -22 while querying for an remote control event. [ 153.635692][ T4231] pctv452e: pctv452e_power_ctrl: 0 [ 153.635692][ T4231] [ 153.678932][ T4231] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 153.734365][ T4231] usb 2-1: USB disconnect, device number 17 [ 153.766347][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 153.777586][ T21] dvb-usb: error -22 while querying for an remote control event. [ 153.866865][ T4231] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 153.924555][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 153.940541][ T21] dvb-usb: error -22 while querying for an remote control event. [ 154.092110][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 154.101576][ T21] dvb-usb: error -22 while querying for an remote control event. [ 154.208324][ T6011] netlink: 'syz.1.560': attribute type 6 has an invalid length. [ 154.259031][ T21] usb 3-1: USB disconnect, device number 13 [ 154.270533][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 154.283278][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 154.351741][ T4191] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 154.441260][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 154.570718][ T6023] 9pnet_virtio: no channels available for device 127.0.0.1 [ 154.611805][ T4191] usb 5-1: Using ep0 maxpacket: 8 [ 154.881697][ T4238] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 155.001926][ T4191] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 155.011682][ T21] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 155.019685][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.044407][ T4191] usb 5-1: Product: syz [ 155.048714][ T4191] usb 5-1: Manufacturer: syz [ 155.057760][ T4191] usb 5-1: SerialNumber: syz [ 155.074750][ T4191] usb 5-1: config 0 descriptor?? [ 155.113548][ T4191] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 155.122243][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 155.140585][ T4191] pctv452e: pctv452e_power_ctrl: 1 [ 155.140585][ T4191] [ 155.148972][ T4191] usb 5-1: selecting invalid altsetting 3 [ 155.155808][ T4191] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 155.155808][ T4191] [ 155.170211][ T4191] dvb-usb: bulk message failed: -22 (5/0) [ 155.177600][ T6030] tipc: Enabling of bearer rejected, failed to enable media [ 155.200194][ T6030] device syzkaller0 entered promiscuous mode [ 155.209263][ T4191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.254159][ T4191] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 155.263461][ T4191] usb 5-1: media controller created [ 155.268816][ T4191] dvb-usb: bulk message failed: -22 (8/0) [ 155.280486][ T4191] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 155.290477][ T4191] dvb-usb: MAC address reading failed. [ 155.325466][ T4191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.405146][ T21] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 155.414061][ T4238] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 155.438421][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.443115][ T4191] DVB: Unable to find symbol stb0899_attach() [ 155.450113][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.471743][ T4191] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 155.496579][ T4238] usb 4-1: Product: syz [ 155.507623][ T4238] usb 4-1: Manufacturer: syz [ 155.517400][ T4238] usb 4-1: SerialNumber: syz [ 155.547852][ T4238] usb 4-1: config 0 descriptor?? [ 155.561970][ T21] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 155.606243][ T21] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 155.637358][ T21] usb 3-1: Manufacturer: syz [ 155.663670][ T4238] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 155.702161][ T21] usb 3-1: config 0 descriptor?? [ 155.707443][ T4238] pctv452e: pctv452e_power_ctrl: 1 [ 155.707443][ T4238] [ 155.721056][ T4238] usb 4-1: selecting invalid altsetting 3 [ 155.729432][ T4238] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 155.729432][ T4238] [ 155.744934][ T4238] dvb-usb: bulk message failed: -22 (5/0) [ 155.761838][ T4191] rc_core: IR keymap rc-tt-1500 not found [ 155.771667][ T4191] Registered IR keymap rc-empty [ 155.793554][ T4238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.827333][ T6048] dummy0: mtu less than device minimum [ 155.834341][ T4191] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 155.864873][ T4238] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 155.865359][ T6023] dvb-usb: bulk message failed: -22 (7/0) [ 155.891402][ T6023] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 155.905001][ T4191] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input36 [ 155.927056][ T4191] dvb-usb: schedule remote query interval to 100 msecs. [ 155.951997][ T4191] pctv452e: pctv452e_power_ctrl: 0 [ 155.951997][ T4191] [ 155.979567][ T4191] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 155.993096][ T4238] usb 4-1: media controller created [ 156.031049][ T4238] dvb-usb: bulk message failed: -22 (8/0) [ 156.039756][ T4238] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 156.049978][ T4238] dvb-usb: MAC address reading failed. [ 156.062515][ T21] rc_core: IR keymap rc-hauppauge not found [ 156.064164][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 156.078269][ T21] Registered IR keymap rc-empty [ 156.085953][ T21] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 156.108343][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 156.114174][ T4238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.134710][ T21] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input37 [ 156.251704][ T4238] DVB: Unable to find symbol stb0899_attach() [ 156.263013][ T4238] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 156.315941][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 156.322410][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 156.457934][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 156.469808][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 156.481901][ T4238] rc_core: IR keymap rc-tt-1500 not found [ 156.488460][ T4238] Registered IR keymap rc-empty [ 156.519940][ T4238] rc rc2: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc2 [ 156.584608][ T4238] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc2/input38 [ 156.602723][ T4238] dvb-usb: schedule remote query interval to 100 msecs. [ 156.609949][ T4238] pctv452e: pctv452e_power_ctrl: 0 [ 156.609949][ T4238] [ 156.617786][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 156.630612][ T4238] usb 4-1: USB disconnect, device number 13 [ 156.651885][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 156.667945][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 156.699322][ T21] usb 3-1: USB disconnect, device number 14 [ 156.751511][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 156.873655][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 156.884151][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 157.061642][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 157.071109][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 157.145967][ T4191] usb 5-1: USB disconnect, device number 14 [ 157.234938][ T4191] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 157.386411][ T6075] netlink: 'syz.4.580': attribute type 6 has an invalid length. [ 157.446934][ T6078] tipc: Enabled bearer , priority 0 [ 157.476941][ T6078] device syzkaller0 entered promiscuous mode [ 157.540243][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 157.608697][ T6076] tipc: Resetting bearer [ 157.713884][ T6076] tipc: Disabling bearer [ 157.902272][ T6096] 9pnet_virtio: no channels available for device 127.0.0.1 [ 158.045250][ T6102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.588'. [ 158.201801][ T1108] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.371686][ T21] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 158.471762][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 158.591718][ T4238] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.762762][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.780494][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.801843][ T1108] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 158.818216][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.833921][ T1108] usb 2-1: Product: syz [ 158.839072][ T1108] usb 2-1: Manufacturer: syz [ 158.844233][ T1108] usb 2-1: SerialNumber: syz [ 158.861656][ T4238] usb 1-1: Using ep0 maxpacket: 8 [ 158.866983][ T1108] usb 2-1: config 0 descriptor?? [ 158.871960][ T21] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.891758][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.909163][ T21] usb 4-1: SerialNumber: syz [ 158.934792][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 158.946071][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 158.946071][ T1108] [ 158.954259][ T1108] usb 2-1: selecting invalid altsetting 3 [ 158.960757][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 158.960757][ T1108] [ 158.983169][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 158.994631][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.027740][ T6120] device syzkaller0 entered promiscuous mode [ 159.034388][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 159.045139][ T1108] usb 2-1: media controller created [ 159.050847][ T1108] dvb-usb: bulk message failed: -22 (8/0) [ 159.071373][ T1108] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 159.087739][ T1108] dvb-usb: MAC address reading failed. [ 159.117644][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.133090][ T6096] dvb-usb: bulk message failed: -22 (7/0) [ 159.140018][ T6096] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 159.185395][ T6105] netlink: 'syz.3.589': attribute type 10 has an invalid length. [ 159.221873][ T4238] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 159.236366][ T21] usb 4-1: skipping empty audio interface (v1) [ 159.250703][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.287124][ T21] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 159.290605][ T1108] DVB: Unable to find symbol stb0899_attach() [ 159.311722][ T4238] usb 1-1: Product: syz [ 159.332127][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 159.342854][ T4238] usb 1-1: Manufacturer: syz [ 159.365264][ T21] usb 4-1: USB disconnect, device number 14 [ 159.376906][ T4238] usb 1-1: SerialNumber: syz [ 159.408034][ T4238] usb 1-1: config 0 descriptor?? [ 159.483421][ T4238] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 159.492566][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 159.502585][ T1108] Registered IR keymap rc-empty [ 159.518789][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 159.532950][ T4238] pctv452e: pctv452e_power_ctrl: 1 [ 159.532950][ T4238] [ 159.559282][ T4238] usb 1-1: selecting invalid altsetting 3 [ 159.560740][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input39 [ 159.593854][ T4238] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 159.593854][ T4238] [ 159.612247][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.613772][ T6132] tipc: Enabled bearer , priority 0 [ 159.645852][ T4238] dvb-usb: bulk message failed: -22 (5/0) [ 159.663063][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 159.691147][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 159.691147][ T1108] [ 159.712219][ T4238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.752722][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 159.797841][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 159.812028][ T4238] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 159.846429][ T4238] usb 1-1: media controller created [ 159.857309][ T1108] usb 2-1: USB disconnect, device number 18 [ 159.873034][ T4238] dvb-usb: bulk message failed: -22 (8/0) [ 159.895211][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 159.907826][ T4238] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 159.916500][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 159.976900][ T4238] dvb-usb: MAC address reading failed. [ 160.016699][ T4238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.067939][ T6146] tipc: Disabling bearer [ 160.116577][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 160.179952][ T4238] DVB: Unable to find symbol stb0899_attach() [ 160.187568][ T4238] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 160.287227][ T6156] netlink: 'syz.4.601': attribute type 6 has an invalid length. [ 160.411802][ T4238] rc_core: IR keymap rc-tt-1500 not found [ 160.438434][ T4238] Registered IR keymap rc-empty [ 160.465045][ T4238] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 160.493193][ T4238] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input40 [ 160.506280][ T4238] dvb-usb: schedule remote query interval to 100 msecs. [ 160.513446][ T4238] pctv452e: pctv452e_power_ctrl: 0 [ 160.513446][ T4238] [ 160.521794][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 160.611811][ T4229] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.621807][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 160.627761][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 160.761915][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 160.770016][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 160.831739][ T4233] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 160.897716][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 160.902829][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 160.902859][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.011714][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.020412][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.024025][ T6176] netlink: 64 bytes leftover after parsing attributes in process `syz.2.608'. [ 161.082004][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 161.163281][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.170590][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.211798][ T4233] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.231094][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.248249][ T4233] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 161.265169][ T4229] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 161.276806][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.286504][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.297591][ T4229] usb 4-1: Product: syz [ 161.305617][ T4233] usb 2-1: config 0 descriptor?? [ 161.313242][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.315312][ T4229] usb 4-1: Manufacturer: syz [ 161.328899][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.338541][ T4229] usb 4-1: SerialNumber: syz [ 161.349203][ T4229] usb 4-1: config 0 descriptor?? [ 161.403230][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 161.417360][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 161.417360][ T4229] [ 161.430870][ T4229] usb 4-1: selecting invalid altsetting 3 [ 161.441687][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 161.441687][ T4229] [ 161.446802][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.459978][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.468760][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 161.492195][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.531885][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 161.546494][ T4229] usb 4-1: media controller created [ 161.557279][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 161.568179][ T4229] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 161.577014][ T4229] dvb-usb: MAC address reading failed. [ 161.581647][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.591414][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.600653][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.694624][ T4229] DVB: Unable to find symbol stb0899_attach() [ 161.710358][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 161.752527][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.764415][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.901675][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 161.902374][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 161.927937][ T4229] Registered IR keymap rc-empty [ 161.951843][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 161.989044][ T4229] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 162.037459][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input41 [ 162.096173][ T4191] usb 1-1: USB disconnect, device number 21 [ 162.103197][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 162.124712][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 162.124712][ T4229] [ 162.157507][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 162.168342][ T6197] tipc: Enabled bearer , priority 0 [ 162.264878][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 162.319218][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 162.327227][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 162.350127][ T6201] tipc: Resetting bearer [ 162.420712][ T4191] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 162.457624][ T6196] tipc: Disabling bearer [ 162.464667][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 162.478885][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 162.601696][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 162.610401][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 162.737831][ T6208] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.815895][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 162.824698][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 162.941798][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 162.948264][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 163.071673][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 163.077751][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 163.211694][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 163.231376][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 163.314849][ T6224] netlink: 'syz.0.620': attribute type 6 has an invalid length. [ 163.383961][ T6227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.621'. [ 163.394102][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 163.407569][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 163.480525][ T4238] usb 4-1: USB disconnect, device number 15 [ 163.557977][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 163.611780][ T1108] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 163.971838][ T1108] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.980240][ T1108] usb 1-1: config 0 has no interface number 0 [ 164.017557][ T1108] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 164.023906][ T6246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 164.036819][ T1108] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.052262][ T6244] tipc: Enabled bearer , priority 0 [ 164.062339][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 164.072161][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.083893][ T6244] tipc: Resetting bearer [ 164.092932][ T1108] usb 1-1: config 0 descriptor?? [ 164.109462][ T6243] tipc: Disabling bearer [ 164.115713][ T6224] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 164.136193][ T1108] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 164.221733][ T4233] usbhid 2-1:0.0: can't add hid device: -71 [ 164.236785][ T4233] usbhid: probe of 2-1:0.0 failed with error -71 [ 164.268700][ T4233] usb 2-1: USB disconnect, device number 19 [ 164.409542][ T4229] usb 1-1: USB disconnect, device number 22 [ 164.415664][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 164.811719][ T4233] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 165.191754][ T4233] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 165.211857][ T4233] usb 2-1: config 0 has no interface number 0 [ 165.236640][ T4233] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 165.292127][ T4233] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.326438][ T4233] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.357394][ T4233] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 165.373072][ T1108] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 165.402529][ T4233] usb 2-1: config 0 interface 16 has no altsetting 0 [ 165.417400][ T4233] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 165.464542][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.510984][ T4233] usb 2-1: config 0 descriptor?? [ 165.631744][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 165.722844][ T4191] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 165.911845][ T1108] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 165.923729][ T6295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.639'. [ 165.927640][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.951832][ T1108] usb 4-1: Product: syz [ 165.956308][ T1108] usb 4-1: Manufacturer: syz [ 165.961138][ T1108] usb 4-1: SerialNumber: syz [ 165.979356][ T1108] usb 4-1: config 0 descriptor?? [ 166.001808][ T4191] usb 1-1: Using ep0 maxpacket: 16 [ 166.025331][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 166.046682][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 166.046682][ T1108] [ 166.061415][ T1108] usb 4-1: selecting invalid altsetting 3 [ 166.076870][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 166.076870][ T1108] [ 166.103659][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 166.125837][ T4191] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.138350][ T4229] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 166.153651][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.173178][ T4191] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.189260][ T4191] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 166.199770][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 166.220651][ T1108] usb 4-1: media controller created [ 166.228123][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.239731][ T1108] dvb-usb: bulk message failed: -22 (8/0) [ 166.250697][ T4191] usb 1-1: config 0 descriptor?? [ 166.257097][ T1108] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 166.266380][ T1108] dvb-usb: MAC address reading failed. [ 166.286647][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.349875][ T1108] DVB: Unable to find symbol stb0899_attach() [ 166.364896][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 166.521981][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.533674][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 166.543553][ T1108] Registered IR keymap rc-empty [ 166.552067][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.567583][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 166.592879][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input42 [ 166.617665][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 166.629795][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 166.629795][ T1108] [ 166.649141][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 166.661849][ T4229] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.679498][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.727414][ T4229] usb 5-1: SerialNumber: syz [ 166.753903][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 166.760433][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 166.881737][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 166.887744][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 166.997027][ T6293] netlink: 'syz.4.638': attribute type 10 has an invalid length. [ 167.041690][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 167.048390][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 167.118526][ T6293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 167.137169][ T6303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.194136][ T4229] usb 5-1: skipping empty audio interface (v1) [ 167.257532][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 167.267033][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 167.284122][ T4229] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 167.336965][ T4229] usb 5-1: USB disconnect, device number 15 [ 167.373718][ T5327] udevd[5327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.411963][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 167.420574][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 167.532711][ T6307] device syzkaller0 entered promiscuous mode [ 167.571680][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 167.585586][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 167.701663][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 167.709747][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 167.721827][ T4233] usbhid 2-1:0.16: can't add hid device: -71 [ 167.735436][ T4233] usbhid: probe of 2-1:0.16 failed with error -71 [ 167.802771][ T4233] usb 2-1: USB disconnect, device number 20 [ 167.873607][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 167.894025][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 168.021657][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 168.041397][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 168.201718][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 168.209095][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 168.218505][ T4233] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 168.342356][ T4230] dvb-usb: bulk message failed: -22 (4/0) [ 168.368878][ T4230] dvb-usb: error -22 while querying for an remote control event. [ 168.463660][ T4238] usb 4-1: USB disconnect, device number 16 [ 168.605923][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 168.619181][ T4233] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.648084][ T4233] usb 2-1: config 0 has no interface number 0 [ 168.665754][ T4233] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 168.746750][ T4233] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 168.784154][ T4233] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.841800][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.850245][ T6327] netlink: 'syz.3.651': attribute type 33 has an invalid length. [ 168.880941][ T4233] usb 2-1: config 0 descriptor?? [ 168.922032][ T6309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.929188][ T6327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.651'. [ 168.959646][ T6329] device syzkaller0 entered promiscuous mode [ 168.972835][ T4233] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.030070][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 169.245443][ T4233] usb 2-1: USB disconnect, device number 21 [ 169.251697][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 169.521875][ T4191] usbhid 1-1:0.0: can't add hid device: -71 [ 169.535034][ T4191] usbhid: probe of 1-1:0.0 failed with error -71 [ 169.558924][ T4191] usb 1-1: USB disconnect, device number 23 [ 169.731791][ T4230] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 169.731834][ T4238] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 170.113770][ T4238] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 170.121898][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.133155][ T4238] usb 4-1: config 0 has no interface number 0 [ 170.172400][ T4238] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 170.206092][ T4238] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.231629][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.241881][ T4238] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.309627][ T4238] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 170.341950][ T4230] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.358921][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.377657][ T4230] usb 5-1: SerialNumber: syz [ 170.436247][ T4238] usb 4-1: config 0 interface 16 has no altsetting 0 [ 170.457366][ T4238] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 170.478593][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.530609][ T4238] usb 4-1: config 0 descriptor?? [ 170.638718][ T6351] netlink: 'syz.4.656': attribute type 10 has an invalid length. [ 170.734394][ T4230] usb 5-1: skipping empty audio interface (v1) [ 170.798300][ T4230] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 170.831979][ T4230] usb 5-1: USB disconnect, device number 16 [ 170.869889][ T6375] device syzkaller0 entered promiscuous mode [ 170.882751][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.136716][ T6380] sock: sock_set_timeout: `syz.2.666' (pid 6380) tries to set negative timeout [ 171.551666][ T21] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 171.560378][ T1324] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 171.814819][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 171.962047][ T1324] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.970859][ T21] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.983404][ T1324] usb 1-1: config 0 has no interface number 0 [ 171.989910][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.998650][ T1324] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 172.011918][ T21] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 172.022294][ T1324] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 172.035961][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.046908][ T1324] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.057358][ T21] usb 3-1: config 0 descriptor?? [ 172.064332][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.085577][ T1324] usb 1-1: config 0 descriptor?? [ 172.111828][ T6386] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 172.137728][ T1324] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 172.259692][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 172.432117][ T1324] usb 1-1: USB disconnect, device number 24 [ 172.451645][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 172.451928][ T4238] usbhid 4-1:0.16: can't add hid device: -71 [ 172.498361][ T4238] usbhid: probe of 4-1:0.16 failed with error -71 [ 172.533483][ T4238] usb 4-1: USB disconnect, device number 17 [ 172.611853][ T6404] device syzkaller0 entered promiscuous mode [ 173.251091][ T6420] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 173.362763][ T6420] device bond1 entered promiscuous mode [ 173.369711][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.409621][ T6425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.438727][ T6425] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 173.451391][ T6425] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 173.466322][ T6425] bond1: (slave wireguard0): making interface the new active one [ 173.474758][ T6425] device wireguard0 entered promiscuous mode [ 173.483439][ T6425] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 173.493242][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 173.561791][ T4230] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 173.991852][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.014558][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.053013][ T4238] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 174.155313][ T4230] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.165265][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.183077][ T4230] usb 2-1: SerialNumber: syz [ 174.311674][ T4238] usb 4-1: Using ep0 maxpacket: 8 [ 174.445788][ T6422] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 174.492191][ T6422] wlan1: mtu greater than device maximum [ 174.498040][ T6422] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 174.517125][ T6442] device syzkaller0 entered promiscuous mode [ 174.551634][ T4191] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 174.560582][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 174.564181][ T4230] usb 2-1: skipping empty audio interface (v1) [ 174.610659][ T4230] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 174.621834][ T4238] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 174.638066][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.645705][ T4230] usb 2-1: USB disconnect, device number 22 [ 174.672159][ T5327] udevd[5327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.691740][ T4238] usb 4-1: Product: syz [ 174.696098][ T4238] usb 4-1: Manufacturer: syz [ 174.705091][ T4238] usb 4-1: SerialNumber: syz [ 174.772953][ T4238] usb 4-1: config 0 descriptor?? [ 174.832905][ T4238] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 174.841764][ T21] usbhid 3-1:0.0: can't add hid device: -71 [ 174.848264][ T21] usbhid: probe of 3-1:0.0 failed with error -71 [ 174.857641][ T4238] pctv452e: pctv452e_power_ctrl: 1 [ 174.857641][ T4238] [ 174.893689][ T21] usb 3-1: USB disconnect, device number 15 [ 174.909863][ T4238] usb 4-1: selecting invalid altsetting 3 [ 174.925215][ T4238] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 174.925215][ T4238] [ 174.941513][ T4238] dvb-usb: bulk message failed: -22 (5/0) [ 174.941753][ T4191] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 174.962469][ T4238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.975375][ T4191] usb 1-1: config 0 has no interface number 0 [ 175.001923][ T4191] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 175.002087][ T4238] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 175.022084][ T4191] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.042121][ T4191] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.101041][ T4191] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 175.101817][ T4238] usb 4-1: media controller created [ 175.123532][ T4238] dvb-usb: bulk message failed: -22 (8/0) [ 175.129828][ T4238] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 175.138821][ T4238] dvb-usb: MAC address reading failed. [ 175.161444][ T4191] usb 1-1: config 0 interface 16 has no altsetting 0 [ 175.180555][ T4238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.189957][ T4191] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 175.216822][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.266010][ T4191] usb 1-1: config 0 descriptor?? [ 175.311252][ T4238] DVB: Unable to find symbol stb0899_attach() [ 175.320371][ T4238] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 175.371687][ T21] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 175.471864][ T4238] rc_core: IR keymap rc-tt-1500 not found [ 175.481177][ T4238] Registered IR keymap rc-empty [ 175.499723][ T4238] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 175.525038][ T4238] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input43 [ 175.556713][ T4238] dvb-usb: schedule remote query interval to 100 msecs. [ 175.578589][ T4238] pctv452e: pctv452e_power_ctrl: 0 [ 175.578589][ T4238] [ 175.599911][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 175.682045][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 175.691726][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 175.792192][ T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.807991][ T21] usb 5-1: config 0 has no interface number 0 [ 175.836868][ T21] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 175.867929][ T21] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 175.886431][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.896061][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 175.898291][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.914427][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 175.916681][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 175.925627][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 175.952435][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 175.959843][ T21] usb 5-1: config 0 descriptor?? [ 175.969935][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 176.001893][ T6446] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.025305][ T21] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 176.127241][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 176.137247][ T21] dvb-usb: error -22 while querying for an remote control event. [ 176.170525][ T6465] device syzkaller0 entered promiscuous mode [ 176.261729][ T4238] dvb-usb: bulk message failed: -22 (4/0) [ 176.267619][ T4238] dvb-usb: error -22 while querying for an remote control event. [ 176.299653][ T4230] usb 5-1: USB disconnect, device number 17 [ 176.411690][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 176.417663][ T21] dvb-usb: error -22 while querying for an remote control event. [ 176.562402][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 176.576374][ T21] dvb-usb: error -22 while querying for an remote control event. [ 176.706227][ T4238] usb 4-1: USB disconnect, device number 18 [ 176.750660][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 176.823283][ T6475] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 176.945070][ T21] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 177.169435][ T6487] device syzkaller0 entered promiscuous mode [ 177.221753][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 177.290014][ T6493] device syzkaller0 entered promiscuous mode [ 177.341792][ T4191] usbhid 1-1:0.16: can't add hid device: -71 [ 177.361203][ T4191] usbhid: probe of 1-1:0.16 failed with error -71 [ 177.371993][ T21] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.390245][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.401766][ T1108] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 177.401785][ T21] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 177.422974][ T4191] usb 1-1: USB disconnect, device number 25 [ 177.429530][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.474083][ T21] usb 2-1: config 0 descriptor?? [ 177.771903][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.789628][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.901934][ T1108] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.911275][ T4191] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 177.924185][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.946167][ T1108] usb 5-1: SerialNumber: syz [ 178.171724][ T4191] usb 3-1: Using ep0 maxpacket: 8 [ 178.225330][ T6485] netlink: 'syz.4.703': attribute type 10 has an invalid length. [ 178.283351][ T1108] usb 5-1: skipping empty audio interface (v1) [ 178.353577][ T1108] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 178.423636][ T1108] usb 5-1: USB disconnect, device number 18 [ 178.449015][ T5327] udevd[5327]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.551736][ T4191] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 178.587245][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.625639][ T4191] usb 3-1: Product: syz [ 178.636137][ T4191] usb 3-1: Manufacturer: syz [ 178.658599][ T4191] usb 3-1: SerialNumber: syz [ 178.688384][ T4191] usb 3-1: config 0 descriptor?? [ 178.753638][ T4191] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 178.781972][ T4191] pctv452e: pctv452e_power_ctrl: 1 [ 178.781972][ T4191] [ 178.849312][ T4191] usb 3-1: selecting invalid altsetting 3 [ 178.869036][ T4191] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 178.869036][ T4191] [ 178.910212][ T4191] dvb-usb: bulk message failed: -22 (5/0) [ 178.970725][ T4191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.031884][ T4191] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 179.053108][ T4191] usb 3-1: media controller created [ 179.076463][ T4191] dvb-usb: bulk message failed: -22 (8/0) [ 179.109835][ T4191] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 179.138363][ T4191] dvb-usb: MAC address reading failed. [ 179.170201][ T4191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.346712][ T4191] DVB: Unable to find symbol stb0899_attach() [ 179.355843][ T4191] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 179.631710][ T4191] rc_core: IR keymap rc-tt-1500 not found [ 179.645838][ T4191] Registered IR keymap rc-empty [ 179.681789][ T4191] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 179.750923][ T4191] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input44 [ 179.790900][ T4191] dvb-usb: schedule remote query interval to 100 msecs. [ 179.812845][ T4191] pctv452e: pctv452e_power_ctrl: 0 [ 179.812845][ T4191] [ 179.843200][ T4191] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 179.921644][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 179.954760][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 180.091654][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 180.105637][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 180.212238][ T6396] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.243475][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 180.256646][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 180.402524][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 180.409726][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 180.561825][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 180.571308][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 180.591730][ T6396] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 180.624744][ T6396] usb 4-1: config 0 has no interface number 0 [ 180.651153][ T6396] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 180.703132][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 180.715092][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 180.734065][ T6396] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.807272][ T6396] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.818487][ T6396] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 180.838950][ T6396] usb 4-1: config 0 interface 16 has no altsetting 0 [ 180.841696][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 180.851727][ T6396] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 180.870794][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 180.880889][ T6396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.942982][ T6396] usb 4-1: config 0 descriptor?? [ 180.960739][ T4238] usb 3-1: USB disconnect, device number 16 [ 180.991801][ T21] usbhid 2-1:0.0: can't add hid device: -71 [ 180.998282][ T21] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.040320][ T21] usb 2-1: USB disconnect, device number 23 [ 181.047601][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 181.216805][ T6546] device gretap0 entered promiscuous mode [ 181.411655][ T21] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 181.791768][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.809982][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.931914][ T21] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.941698][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.954373][ T21] usb 2-1: SerialNumber: syz [ 182.220613][ T6540] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 182.233617][ T6540] wlan1: mtu greater than device maximum [ 182.247636][ T6540] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 182.307015][ T21] usb 2-1: skipping empty audio interface (v1) [ 182.381952][ T21] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 182.427308][ T21] usb 2-1: USB disconnect, device number 24 [ 182.575397][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 182.652753][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.681628][ T4191] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.895858][ T6574] netlink: 64 bytes leftover after parsing attributes in process `syz.1.736'. [ 182.943138][ T4191] usb 3-1: Using ep0 maxpacket: 16 [ 182.951734][ T6396] usbhid 4-1:0.16: can't add hid device: -71 [ 182.958151][ T6396] usbhid: probe of 4-1:0.16 failed with error -71 [ 182.987567][ T6396] usb 4-1: USB disconnect, device number 19 [ 183.074344][ T4191] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.088263][ T4191] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.103025][ T4191] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 183.116462][ T4191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.129425][ T4191] usb 3-1: config 0 descriptor?? [ 183.134858][ T6579] device syzkaller0 entered promiscuous mode [ 183.851719][ T4229] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 184.058868][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 184.101655][ T4229] usb 5-1: Using ep0 maxpacket: 8 [ 184.381771][ T4229] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 184.401163][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.432395][ T4229] usb 5-1: Product: syz [ 184.445241][ T4229] usb 5-1: Manufacturer: syz [ 184.456500][ T4229] usb 5-1: SerialNumber: syz [ 184.487582][ T4229] usb 5-1: config 0 descriptor?? [ 184.533783][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 184.553547][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 184.553547][ T4229] [ 184.590466][ T4229] usb 5-1: selecting invalid altsetting 3 [ 184.611236][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 184.611236][ T4229] [ 184.639102][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 184.651597][ T4230] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 184.678404][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.722036][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 184.737866][ T4229] usb 5-1: media controller created [ 184.750356][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 184.767650][ T4229] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 184.796156][ T4229] dvb-usb: MAC address reading failed. [ 184.849944][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.977928][ T4229] DVB: Unable to find symbol stb0899_attach() [ 184.984590][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 185.031895][ T4230] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.074797][ T4230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.181822][ T4230] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.200347][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.251690][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 185.257527][ T4229] Registered IR keymap rc-empty [ 185.264193][ T4230] usb 2-1: SerialNumber: syz [ 185.278712][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 185.322540][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 185.366454][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 185.387475][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 185.387475][ T4229] [ 185.412436][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 185.491626][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 185.498014][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 185.537998][ T6604] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 185.553755][ T6604] wlan1: mtu greater than device maximum [ 185.561489][ T6604] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 185.634775][ T4230] usb 2-1: skipping empty audio interface (v1) [ 185.676156][ T4230] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 185.693586][ T21] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 185.727994][ T4230] usb 2-1: USB disconnect, device number 25 [ 185.748059][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 185.754076][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 185.764957][ T5327] udevd[5327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.883533][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 185.892162][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 185.947662][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 186.021663][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 186.027538][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 186.084685][ T4191] usbhid 3-1:0.0: can't add hid device: -71 [ 186.091704][ T4191] usbhid: probe of 3-1:0.0 failed with error -71 [ 186.111776][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 186.137601][ T4191] usb 3-1: USB disconnect, device number 17 [ 186.177236][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 186.184596][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 186.211801][ T21] usb 1-1: config 102 has an invalid interface number: 225 but max is 0 [ 186.236978][ T21] usb 1-1: config 102 has no interface number 0 [ 186.266876][ T21] usb 1-1: config 102 interface 225 has no altsetting 0 [ 186.304701][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 186.321215][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 186.461722][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 186.471759][ T21] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 186.487451][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 186.521669][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.568990][ T21] usb 1-1: Product: syz [ 186.597896][ T21] usb 1-1: Manufacturer: syz [ 186.611917][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 186.618192][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 186.632398][ T21] usb 1-1: SerialNumber: syz [ 186.832314][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 186.832781][ T6625] netlink: 64 bytes leftover after parsing attributes in process `syz.2.755'. [ 186.839500][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 186.890616][ T4238] usb 5-1: USB disconnect, device number 19 [ 187.008553][ T4238] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 187.033647][ T21] (null): radio-mr800 - initialization failed [ 187.043006][ T21] radio-mr800: probe of 1-1:102.225 failed with error -22 [ 187.061013][ T21] usbhid 1-1:102.225: couldn't find an input interrupt endpoint [ 187.093029][ T21] usb 1-1: USB disconnect, device number 26 [ 187.116627][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 187.282146][ T6636] device syzkaller0 entered promiscuous mode [ 187.516161][ T6645] tipc: Enabled bearer , priority 0 [ 187.539352][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 187.564653][ T6645] tipc: Resetting bearer [ 187.582673][ T6644] tipc: Disabling bearer [ 187.711649][ T4238] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 187.967765][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.767'. [ 187.977788][ T4238] usb 2-1: Using ep0 maxpacket: 16 [ 188.102220][ T4238] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.139540][ T4238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.160074][ T4238] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 188.176053][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.191207][ T4238] usb 2-1: config 0 descriptor?? [ 188.213770][ T6661] device syzkaller0 entered promiscuous mode [ 188.541878][ T1108] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 188.612820][ T6666] device syzkaller0 entered promiscuous mode [ 188.801715][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 188.839278][ T6676] tipc: Enabled bearer , priority 0 [ 188.869215][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 188.882405][ T6676] tipc: Resetting bearer [ 188.906140][ T6675] tipc: Disabling bearer [ 188.912544][ T4191] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 189.134866][ T1108] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 189.153005][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.173701][ T1108] usb 3-1: Product: syz [ 189.181992][ T1108] usb 3-1: Manufacturer: syz [ 189.186644][ T1108] usb 3-1: SerialNumber: syz [ 189.201687][ T4191] usb 5-1: Using ep0 maxpacket: 32 [ 189.217757][ T1108] usb 3-1: config 0 descriptor?? [ 189.294465][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 189.308208][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 189.308208][ T1108] [ 189.322130][ T1108] usb 3-1: selecting invalid altsetting 3 [ 189.335983][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 189.335983][ T1108] [ 189.355634][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 189.368668][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.391814][ T4191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.431887][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 189.462630][ T1108] usb 3-1: media controller created [ 189.475951][ T1108] dvb-usb: bulk message failed: -22 (8/0) [ 189.498053][ T4191] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 189.508020][ T1108] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 189.521052][ T4191] usb 5-1: config 102 has no interface number 0 [ 189.531436][ T4191] usb 5-1: config 102 interface 225 has no altsetting 0 [ 189.541323][ T1108] dvb-usb: MAC address reading failed. [ 189.561296][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.680388][ T1108] DVB: Unable to find symbol stb0899_attach() [ 189.689904][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 189.722359][ T4191] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 189.739864][ T4191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.769964][ T4191] usb 5-1: Product: syz [ 189.785025][ T4191] usb 5-1: Manufacturer: syz [ 189.800480][ T4191] usb 5-1: SerialNumber: syz [ 189.921646][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 189.927972][ T1108] Registered IR keymap rc-empty [ 189.942494][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 189.977307][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input46 [ 189.989416][ T4229] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 190.021407][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 190.037142][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 190.037142][ T1108] [ 190.059213][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 190.142131][ T4185] dvb-usb: bulk message failed: -22 (4/0) [ 190.150772][ T4185] dvb-usb: error -22 while querying for an remote control event. [ 190.234764][ T4191] (null): radio-mr800 - initialization failed [ 190.249936][ T4191] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 190.271060][ T4191] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 190.309364][ T4191] usb 5-1: USB disconnect, device number 20 [ 190.349661][ T4185] dvb-usb: bulk message failed: -22 (4/0) [ 190.358558][ T4185] dvb-usb: error -22 while querying for an remote control event. [ 190.401807][ T4229] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 190.416082][ T4229] usb 4-1: config 0 has no interface number 0 [ 190.431103][ T4229] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 190.462145][ T4229] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.491690][ T4229] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.519997][ T4229] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 190.555396][ T4229] usb 4-1: config 0 interface 16 has no altsetting 0 [ 190.573894][ T4229] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 190.598390][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.620728][ T4229] usb 4-1: config 0 descriptor?? [ 190.632656][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 190.639621][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 190.811734][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 190.821695][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 190.970932][ T6704] device syzkaller0 entered promiscuous mode [ 190.979607][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 190.986383][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 191.111683][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.117736][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.248154][ T6712] tipc: Enabled bearer , priority 0 [ 191.282939][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.291494][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.362648][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 191.405181][ T6712] tipc: Resetting bearer [ 191.422082][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.429248][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.489322][ T6710] tipc: Disabling bearer [ 191.551792][ T4238] usbhid 2-1:0.0: can't add hid device: -71 [ 191.557982][ T4238] usbhid: probe of 2-1:0.0 failed with error -71 [ 191.573841][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.589847][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.655866][ T4238] usb 2-1: USB disconnect, device number 26 [ 191.751659][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.762484][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.836952][ T6719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input47 [ 191.843216][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 191.867306][ T6396] usb 3-1: USB disconnect, device number 18 [ 191.883631][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 191.930196][ T6723] device geneve2 entered promiscuous mode [ 192.019062][ T6396] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 192.401342][ T6738] device syzkaller0 entered promiscuous mode [ 192.531683][ T6396] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 192.765614][ T6744] tipc: Enabled bearer , priority 0 [ 192.772586][ T6396] usb 3-1: Using ep0 maxpacket: 32 [ 192.775523][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 192.790157][ T6744] tipc: Resetting bearer [ 192.801833][ T4238] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 192.802353][ T6743] tipc: Disabling bearer [ 192.931787][ T6396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.931808][ T4229] usbhid 4-1:0.16: can't add hid device: -71 [ 192.945397][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.803'. [ 192.959309][ T4229] usbhid: probe of 4-1:0.16 failed with error -71 [ 192.979996][ T4229] usb 4-1: USB disconnect, device number 20 [ 193.031846][ T6396] usb 3-1: config 102 has an invalid interface number: 225 but max is 0 [ 193.044592][ T6753] netlink: 64 bytes leftover after parsing attributes in process `syz.0.805'. [ 193.061716][ T4238] usb 2-1: Using ep0 maxpacket: 16 [ 193.079432][ T6396] usb 3-1: config 102 has no interface number 0 [ 193.095106][ T6396] usb 3-1: config 102 interface 225 has no altsetting 0 [ 193.183894][ T4238] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.203981][ T4238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.221208][ T4238] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 193.239671][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.265168][ T4238] usb 2-1: config 0 descriptor?? [ 193.297656][ T6396] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 193.307672][ T6396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.330687][ T6396] usb 3-1: Product: syz [ 193.344052][ T6396] usb 3-1: Manufacturer: syz [ 193.349817][ T6396] usb 3-1: SerialNumber: syz [ 193.388271][ T6762] device syzkaller0 entered promiscuous mode [ 193.551765][ T4229] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.683681][ T6396] (null): radio-mr800 - initialization failed [ 193.692329][ T6396] radio-mr800: probe of 3-1:102.225 failed with error -22 [ 193.699891][ T6396] usbhid 3-1:102.225: couldn't find an input interrupt endpoint [ 193.727538][ T6396] usb 3-1: USB disconnect, device number 19 [ 193.827194][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 194.171748][ T4229] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 194.200859][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.233634][ T4229] usb 4-1: Product: syz [ 194.248545][ T4229] usb 4-1: Manufacturer: syz [ 194.274421][ T4229] usb 4-1: SerialNumber: syz [ 194.288632][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307652][ T4229] usb 4-1: config 0 descriptor?? [ 194.394268][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 194.409120][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 194.409120][ T4229] [ 194.469163][ T4229] usb 4-1: selecting invalid altsetting 3 [ 194.490559][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 194.490559][ T4229] [ 194.546322][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 194.576726][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.662306][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 194.685943][ T4229] usb 4-1: media controller created [ 194.711703][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 194.732410][ T4229] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 194.741633][ T1108] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 194.787763][ T4229] dvb-usb: MAC address reading failed. [ 194.879425][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.041644][ T4229] DVB: Unable to find symbol stb0899_attach() [ 195.050465][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 195.171762][ T1108] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 195.189216][ T1108] usb 5-1: config 0 has no interface number 0 [ 195.231142][ T1108] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 195.286211][ T1108] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.321762][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 195.336566][ T4229] Registered IR keymap rc-empty [ 195.350198][ T1108] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.372454][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 195.401619][ T1108] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 195.432339][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input48 [ 195.466895][ T1108] usb 5-1: config 0 interface 16 has no altsetting 0 [ 195.480009][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 195.491350][ T1108] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 195.503752][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 195.503752][ T4229] [ 195.517085][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 195.527992][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.566580][ T1108] usb 5-1: config 0 descriptor?? [ 195.620091][ T4232] dvb-usb: bulk message failed: -22 (4/0) [ 195.627251][ T4232] dvb-usb: error -22 while querying for an remote control event. [ 195.750239][ T6793] tipc: Enabled bearer , priority 0 [ 195.790750][ T6793] tipc: Resetting bearer [ 195.796953][ T4232] dvb-usb: bulk message failed: -22 (4/0) [ 195.802893][ T4232] dvb-usb: error -22 while querying for an remote control event. [ 195.849971][ T6792] tipc: Disabling bearer [ 195.921643][ T4232] dvb-usb: bulk message failed: -22 (4/0) [ 195.931269][ T4232] dvb-usb: error -22 while querying for an remote control event. [ 196.095027][ T6795] device syzkaller0 entered promiscuous mode [ 196.102789][ T4232] dvb-usb: bulk message failed: -22 (4/0) [ 196.114177][ T4232] dvb-usb: error -22 while querying for an remote control event. [ 196.261655][ T4191] dvb-usb: bulk message failed: -22 (4/0) [ 196.267638][ T4191] dvb-usb: error -22 while querying for an remote control event. [ 196.376304][ T4232] usb 4-1: USB disconnect, device number 21 [ 196.469403][ T6798] netlink: 64 bytes leftover after parsing attributes in process `syz.2.821'. [ 196.489852][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 196.882030][ T4238] usbhid 2-1:0.0: can't add hid device: -71 [ 196.890735][ T4238] usbhid: probe of 2-1:0.0 failed with error -71 [ 196.915796][ T4238] usb 2-1: USB disconnect, device number 27 [ 197.291713][ T4238] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 197.561672][ T4238] usb 2-1: Using ep0 maxpacket: 32 [ 197.722680][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.821974][ T4238] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 197.860530][ T4238] usb 2-1: config 102 has no interface number 0 [ 197.871748][ T1108] usbhid 5-1:0.16: can't add hid device: -71 [ 197.875721][ T6824] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 197.877854][ T1108] usbhid: probe of 5-1:0.16 failed with error -71 [ 197.888584][ T4238] usb 2-1: config 102 interface 225 has no altsetting 0 [ 197.993504][ T6824] device bond2 entered promiscuous mode [ 197.998980][ T1108] usb 5-1: USB disconnect, device number 21 [ 198.000697][ T6824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.014779][ T6825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'. [ 198.075334][ T6824] bond2: (slave bridge2): making interface the new active one [ 198.085452][ T6824] device bridge2 entered promiscuous mode [ 198.091760][ T4238] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 198.096363][ T6824] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 198.102849][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.171455][ T4238] usb 2-1: Product: syz [ 198.179283][ T6828] device syzkaller0 entered promiscuous mode [ 198.185627][ T4238] usb 2-1: Manufacturer: syz [ 198.218358][ T4238] usb 2-1: SerialNumber: syz [ 198.239192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 198.268066][ T6833] device pim6reg1 entered promiscuous mode [ 198.424354][ T6841] netlink: 64 bytes leftover after parsing attributes in process `syz.3.836'. [ 198.585679][ T4238] (null): radio-mr800 - initialization failed [ 198.599667][ T4238] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 198.609987][ T4238] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 198.633764][ T4238] usb 2-1: USB disconnect, device number 28 [ 198.671668][ T6396] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.814988][ T6852] ip6tnl0: Caught tx_queue_len zero misconfig [ 198.824187][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.839'. [ 198.951805][ T6396] usb 3-1: Using ep0 maxpacket: 16 [ 199.091760][ T6396] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.131846][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.140305][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.151749][ T6396] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.158693][ T6396] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 199.183147][ T6396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.233025][ T6396] usb 3-1: config 0 descriptor?? [ 199.251676][ T4191] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 199.352606][ T6865] device bridge_slave_1 left promiscuous mode [ 199.375876][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.438560][ T6865] device bridge_slave_0 left promiscuous mode [ 199.491940][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.622529][ T4191] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 199.643229][ T4191] usb 1-1: config 0 has no interface number 0 [ 199.658771][ T4191] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 199.695634][ T4191] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.708730][ T4191] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.719856][ T4191] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 199.784625][ T4191] usb 1-1: config 0 interface 16 has no altsetting 0 [ 199.818593][ T4191] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 199.858807][ T4191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.931401][ T4191] usb 1-1: config 0 descriptor?? [ 200.196663][ T6886] tipc: Enabling of bearer rejected, failed to enable media [ 200.375186][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 201.925740][ T6906] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 202.079996][ T6909] netlink: 64 bytes leftover after parsing attributes in process `syz.4.855'. [ 202.161638][ T4232] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 202.221805][ T6396] usbhid 3-1:0.0: can't add hid device: -71 [ 202.228180][ T6396] usbhid: probe of 3-1:0.0 failed with error -71 [ 202.298367][ T6396] usb 3-1: USB disconnect, device number 20 [ 202.367484][ T6916] device syzkaller0 entered promiscuous mode [ 202.384700][ T6920] tipc: Enabling of bearer rejected, failed to enable media [ 202.431745][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 202.492568][ T4191] usbhid 1-1:0.16: can't add hid device: -71 [ 202.501707][ T4191] usbhid: probe of 1-1:0.16 failed with error -71 [ 202.508151][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 202.521694][ T4198] Bluetooth: hci4: link tx timeout [ 202.527340][ T4198] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.537794][ T4198] Bluetooth: hci4: link tx timeout [ 202.544388][ T4198] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.554962][ T4191] usb 1-1: USB disconnect, device number 27 [ 202.591771][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.691945][ T4232] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 202.701452][ T4232] usb 4-1: config 102 has no interface number 0 [ 202.708256][ T4232] usb 4-1: config 102 interface 225 has no altsetting 0 [ 202.797817][ T6940] tipc: Enabled bearer , priority 0 [ 202.806084][ T6940] device syzkaller0 entered promiscuous mode [ 202.871840][ T4232] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 202.885854][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.904039][ T4232] usb 4-1: Product: syz [ 202.913257][ T4232] usb 4-1: Manufacturer: syz [ 202.924341][ T4232] usb 4-1: SerialNumber: syz [ 202.962727][ T6940] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 202.974609][ T6939] tipc: Resetting bearer [ 202.999389][ T6939] tipc: Disabling bearer [ 203.263634][ T4232] (null): radio-mr800 - initialization failed [ 203.269948][ T4232] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 203.293697][ T4232] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 203.316363][ T4232] usb 4-1: USB disconnect, device number 22 [ 203.361676][ T4191] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 203.396694][ T6957] device syzkaller0 entered promiscuous mode [ 203.621608][ T4191] usb 2-1: Using ep0 maxpacket: 16 [ 203.751859][ T4191] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.777458][ T4191] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.797767][ T4191] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 203.831701][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.866193][ T6967] tipc: Enabling of bearer rejected, failed to enable media [ 203.890483][ T4191] usb 2-1: config 0 descriptor?? [ 203.999907][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 204.197575][ T6980] netlink: 64 bytes leftover after parsing attributes in process `syz.0.877'. [ 204.466708][ T6987] tipc: Enabled bearer , priority 0 [ 204.482922][ T6987] device syzkaller0 entered promiscuous mode [ 204.570910][ T6991] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 204.611748][ T4185] Bluetooth: hci4: command 0x0406 tx timeout [ 204.781888][ T6986] tipc: Resetting bearer [ 204.809029][ T6986] tipc: Disabling bearer [ 204.992256][ T6997] device syzkaller0 entered promiscuous mode [ 205.024600][ T4185] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 205.300056][ T7007] tipc: Enabled bearer , priority 0 [ 205.311630][ T4232] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.332579][ T7007] device syzkaller0 entered promiscuous mode [ 205.363925][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.888'. [ 205.389276][ T7007] tipc: Resetting bearer [ 205.409641][ T7006] tipc: Resetting bearer [ 205.438684][ T7006] tipc: Disabling bearer [ 205.461953][ T4185] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.481041][ T4185] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.571928][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 205.611970][ T4185] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.634813][ T4185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.661146][ T4185] usb 3-1: SerialNumber: syz [ 205.721664][ T1108] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 205.751900][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.851738][ T4232] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 205.892233][ T4232] usb 5-1: config 102 has no interface number 0 [ 205.912374][ T4232] usb 5-1: config 102 interface 225 has no altsetting 0 [ 205.946027][ T6995] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 205.998267][ T6995] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.055030][ T4185] usb 3-1: skipping empty audio interface (v1) [ 206.101847][ T4232] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 206.112643][ T1108] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 206.129481][ T4185] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 206.136821][ T1108] usb 1-1: config 0 has no interface number 0 [ 206.143095][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.160942][ T1108] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 206.179735][ T4185] usb 3-1: USB disconnect, device number 21 [ 206.186118][ T4232] usb 5-1: Product: syz [ 206.197532][ T4232] usb 5-1: Manufacturer: syz [ 206.216524][ T1108] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.231180][ T4232] usb 5-1: SerialNumber: syz [ 206.271590][ T1108] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.321623][ T1108] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 206.335502][ T1108] usb 1-1: config 0 interface 16 has no altsetting 0 [ 206.355128][ T1108] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 206.377050][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.394540][ T1108] usb 1-1: config 0 descriptor?? [ 206.412145][ T5327] udevd[5327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.532627][ T4191] usbhid 2-1:0.0: can't add hid device: -71 [ 206.551148][ T4191] usbhid: probe of 2-1:0.0 failed with error -71 [ 206.572904][ T4232] (null): radio-mr800 - initialization failed [ 206.595587][ T4232] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 206.625296][ T4191] usb 2-1: USB disconnect, device number 29 [ 206.640240][ T4232] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 206.716099][ T4232] usb 5-1: USB disconnect, device number 22 [ 206.755484][ T7021] device syzkaller0 entered promiscuous mode [ 206.933872][ T7027] netlink: 64 bytes leftover after parsing attributes in process `syz.2.895'. [ 207.109806][ T7029] device syzkaller0 entered promiscuous mode [ 207.347881][ T7031] tipc: Enabled bearer , priority 0 [ 207.382310][ T7031] device syzkaller0 entered promiscuous mode [ 207.529231][ T7030] tipc: Resetting bearer [ 207.581328][ T7030] tipc: Disabling bearer [ 207.616766][ T7039] netlink: 64 bytes leftover after parsing attributes in process `syz.1.900'. [ 207.785439][ T7042] tipc: Enabled bearer , priority 0 [ 207.819474][ T7027] ================================================================== [ 207.827935][ T7027] BUG: KASAN: use-after-free in rose_transmit_link+0x5b0/0x730 [ 207.835526][ T7027] Read of size 1 at addr ffff888061624432 by task syz.2.895/7027 [ 207.837550][ T7042] device syzkaller0 entered promiscuous mode [ 207.843305][ T7027] [ 207.843342][ T7027] CPU: 0 PID: 7027 Comm: syz.2.895 Not tainted syzkaller #0 [ 207.843366][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.843377][ T7027] Call Trace: [ 207.873690][ T7027] [ 207.876634][ T7027] dump_stack_lvl+0x188/0x250 [ 207.881329][ T7027] ? show_regs_print_info+0x20/0x20 [ 207.886867][ T7027] ? _printk+0xda/0x130 [ 207.891089][ T7027] ? rose_transmit_link+0x5b0/0x730 [ 207.896298][ T7027] ? load_image+0x400/0x400 [ 207.900808][ T7027] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 207.906380][ T7027] print_address_description+0x60/0x2d0 [ 207.912251][ T7027] ? rose_transmit_link+0x5b0/0x730 [ 207.917661][ T7027] kasan_report+0xdf/0x130 [ 207.922207][ T7027] ? rose_transmit_link+0x5b0/0x730 [ 207.927461][ T7027] rose_transmit_link+0x5b0/0x730 [ 207.932761][ T7027] ? skb_put+0x117/0x210 [ 207.937036][ T7027] rose_write_internal+0x680/0x1e90 [ 207.942254][ T7027] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 207.948151][ T7027] ? rose_validate_nr+0x120/0x120 [ 207.953176][ T7027] ? __timer_delete+0x6c/0x220 [ 207.957969][ T7027] ? skb_queue_purge+0x62/0x290 [ 207.962997][ T7027] rose_release+0x22a/0x4e0 [ 207.967728][ T7027] sock_close+0xd5/0x240 [ 207.972082][ T7027] ? sock_mmap+0x90/0x90 [ 207.976426][ T7027] __fput+0x234/0x930 [ 207.980557][ T7027] task_work_run+0x125/0x1a0 [ 207.985177][ T7027] get_signal+0x1222/0x12c0 [ 207.989935][ T7027] arch_do_signal_or_restart+0xe7/0x12c0 [ 207.995987][ T7027] ? kick_process+0xd4/0x140 [ 208.000703][ T7027] ? task_work_add+0x1a7/0x1d0 [ 208.005798][ T7027] ? get_sigframe_size+0x10/0x10 [ 208.010919][ T7027] ? __sys_connect+0x278/0x450 [ 208.015952][ T7027] ? exit_to_user_mode_loop+0x3b/0x130 [ 208.021691][ T7027] exit_to_user_mode_loop+0x9e/0x130 [ 208.027462][ T7027] exit_to_user_mode_prepare+0xee/0x180 [ 208.033136][ T7027] syscall_exit_to_user_mode+0x16/0x40 [ 208.038895][ T7027] do_syscall_64+0x58/0xa0 [ 208.043415][ T7027] ? clear_bhb_loop+0x30/0x80 [ 208.048302][ T7027] ? clear_bhb_loop+0x30/0x80 [ 208.052982][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.058965][ T7027] RIP: 0033:0x7fbbce9b5799 [ 208.063676][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.083747][ T7027] RSP: 002b:00007fbbccc0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 208.092251][ T7027] RAX: fffffffffffffe00 RBX: 00007fbbcec2efa0 RCX: 00007fbbce9b5799 [ 208.100405][ T7027] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000d [ 208.108400][ T7027] RBP: 00007fbbcea4bbd9 R08: 0000000000000000 R09: 0000000000000000 [ 208.116479][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.124473][ T7027] R13: 00007fbbcec2f038 R14: 00007fbbcec2efa0 R15: 00007ffe40f74348 [ 208.132456][ T7027] [ 208.135598][ T7027] [ 208.138142][ T7027] Allocated by task 5222: [ 208.142854][ T7027] __kasan_kmalloc+0xb5/0xf0 [ 208.147456][ T7027] rose_add_node+0x227/0xdb0 [ 208.152071][ T7027] rose_rt_ioctl+0xa2b/0xe70 [ 208.156853][ T7027] rose_ioctl+0x2a7/0x7d0 [ 208.161288][ T7027] sock_do_ioctl+0xfb/0x320 [ 208.165861][ T7027] sock_ioctl+0x4d2/0x710 [ 208.170597][ T7027] __se_sys_ioctl+0xfa/0x170 [ 208.175344][ T7027] do_syscall_64+0x4c/0xa0 [ 208.179993][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.185999][ T7027] [ 208.188321][ T7027] Freed by task 7039: [ 208.192502][ T7027] kasan_set_track+0x4b/0x70 [ 208.197298][ T7027] kasan_set_free_info+0x1f/0x40 [ 208.202261][ T7027] ____kasan_slab_free+0xd5/0x110 [ 208.207403][ T7027] slab_free_freelist_hook+0xea/0x170 [ 208.213225][ T7027] kfree+0xef/0x2a0 [ 208.217176][ T7027] rose_rt_device_down+0x4e2/0x530 [ 208.222397][ T7027] rose_device_event+0x606/0x6c0 [ 208.227364][ T7027] raw_notifier_call_chain+0xcb/0x160 [ 208.233260][ T7027] __dev_notify_flags+0x158/0x300 [ 208.238885][ T7027] dev_change_flags+0xe3/0x1a0 [ 208.243650][ T7027] dev_ifsioc+0x130/0xd50 [ 208.247997][ T7027] dev_ioctl+0x545/0xe30 [ 208.252230][ T7027] sock_do_ioctl+0x245/0x320 [ 208.256902][ T7027] sock_ioctl+0x4d2/0x710 [ 208.261327][ T7027] __se_sys_ioctl+0xfa/0x170 [ 208.266099][ T7027] do_syscall_64+0x4c/0xa0 [ 208.270538][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.276549][ T7027] [ 208.278869][ T7027] The buggy address belongs to the object at ffff888061624400 [ 208.278869][ T7027] which belongs to the cache kmalloc-512 of size 512 [ 208.293589][ T7027] The buggy address is located 50 bytes inside of [ 208.293589][ T7027] 512-byte region [ffff888061624400, ffff888061624600) [ 208.307340][ T7027] The buggy address belongs to the page: [ 208.313442][ T7027] page:ffffea0001858900 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888061625000 pfn:0x61624 [ 208.325421][ T7027] head:ffffea0001858900 order:2 compound_mapcount:0 compound_pincount:0 [ 208.334888][ T7027] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 208.343162][ T7027] raw: 00fff00000010200 ffffea0001f5cf08 ffffea0001858708 ffff888016c41c80 [ 208.352074][ T7027] raw: ffff888061625000 0000000000100006 00000001ffffffff 0000000000000000 [ 208.360932][ T7027] page dumped because: kasan: bad access detected [ 208.367713][ T7027] page_owner tracks the page as allocated [ 208.373581][ T7027] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4184, ts 55469849173, free_ts 15880539943 [ 208.393289][ T7027] get_page_from_freelist+0x1bbd/0x1ca0 [ 208.398875][ T7027] __alloc_pages+0x1ee/0x480 [ 208.403780][ T7027] new_slab+0xc0/0x4b0 [ 208.408168][ T7027] ___slab_alloc+0x80a/0xdd0 [ 208.412785][ T7027] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 208.418712][ T7027] __alloc_skb+0x22c/0x750 [ 208.423130][ T7027] alloc_uevent_skb+0x7d/0x230 [ 208.427993][ T7027] kobject_uevent_net_broadcast+0x17e/0x530 [ 208.433899][ T7027] kobject_uevent_env+0x556/0x890 [ 208.438930][ T7027] net_rx_queue_update_kobjects+0x221/0x490 [ 208.444922][ T7027] netdev_register_kobject+0x231/0x320 [ 208.450405][ T7027] register_netdevice+0x1042/0x1710 [ 208.455751][ T7027] veth_newlink+0x6bc/0xe30 [ 208.460242][ T7027] rtnl_newlink+0x1359/0x1a50 [ 208.465002][ T7027] rtnetlink_rcv_msg+0x844/0xf30 [ 208.469959][ T7027] netlink_rcv_skb+0x1f5/0x440 [ 208.474722][ T7027] page last free stack trace: [ 208.479480][ T7027] free_unref_page_prepare+0x637/0x6c0 [ 208.485026][ T7027] free_unref_page+0x8f/0x2a0 [ 208.490387][ T7027] free_contig_range+0x96/0xf0 [ 208.495309][ T7027] destroy_args+0xf0/0xa00 [ 208.499742][ T7027] debug_vm_pgtable+0x321/0x380 [ 208.504591][ T7027] do_one_initcall+0x272/0x730 [ 208.509384][ T7027] do_initcall_level+0x137/0x1f0 [ 208.514319][ T7027] do_initcalls+0x4b/0x90 [ 208.518654][ T7027] kernel_init_freeable+0x3e9/0x570 [ 208.523859][ T7027] kernel_init+0x19/0x1b0 [ 208.528323][ T7027] ret_from_fork+0x1f/0x30 [ 208.532735][ T7027] [ 208.535138][ T7027] Memory state around the buggy address: [ 208.540766][ T7027] ffff888061624300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.549018][ T7027] ffff888061624380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 208.557191][ T7027] >ffff888061624400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.565489][ T7027] ^ [ 208.571310][ T7027] ffff888061624480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.579391][ T7027] ffff888061624500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.587636][ T7027] ================================================================== [ 208.595687][ T7027] Disabling lock debugging due to kernel taint [ 208.608570][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 208.626616][ T7027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.633851][ T7027] CPU: 0 PID: 7027 Comm: syz.2.895 Tainted: G B syzkaller #0 [ 208.643011][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.653491][ T7027] Call Trace: [ 208.656893][ T7027] [ 208.660023][ T7027] dump_stack_lvl+0x188/0x250 [ 208.664921][ T7027] ? show_regs_print_info+0x20/0x20 [ 208.670596][ T7027] ? load_image+0x400/0x400 [ 208.675242][ T7027] panic+0x2e5/0x810 [ 208.679407][ T7027] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 208.685838][ T7027] ? bpf_jit_dump+0xd0/0xd0 [ 208.690341][ T7027] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 208.697190][ T7027] ? _raw_spin_unlock+0x40/0x40 [ 208.702133][ T7027] ? rose_transmit_link+0x5b0/0x730 [ 208.707382][ T7027] check_panic_on_warn+0x80/0xa0 [ 208.712422][ T7027] ? rose_transmit_link+0x5b0/0x730 [ 208.718016][ T7027] end_report+0x6d/0xf0 [ 208.722289][ T7027] kasan_report+0x102/0x130 [ 208.727313][ T7027] ? rose_transmit_link+0x5b0/0x730 [ 208.732508][ T7027] rose_transmit_link+0x5b0/0x730 [ 208.737647][ T7027] ? skb_put+0x117/0x210 [ 208.742078][ T7027] rose_write_internal+0x680/0x1e90 [ 208.747377][ T7027] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 208.753311][ T7027] ? rose_validate_nr+0x120/0x120 [ 208.758413][ T7027] ? __timer_delete+0x6c/0x220 [ 208.763178][ T7027] ? skb_queue_purge+0x62/0x290 [ 208.768235][ T7027] rose_release+0x22a/0x4e0 [ 208.772798][ T7027] sock_close+0xd5/0x240 [ 208.777034][ T7027] ? sock_mmap+0x90/0x90 [ 208.781366][ T7027] __fput+0x234/0x930 [ 208.785433][ T7027] task_work_run+0x125/0x1a0 [ 208.790015][ T7027] get_signal+0x1222/0x12c0 [ 208.794521][ T7027] arch_do_signal_or_restart+0xe7/0x12c0 [ 208.800270][ T7027] ? kick_process+0xd4/0x140 [ 208.804877][ T7027] ? task_work_add+0x1a7/0x1d0 [ 208.809729][ T7027] ? get_sigframe_size+0x10/0x10 [ 208.814788][ T7027] ? __sys_connect+0x278/0x450 [ 208.819559][ T7027] ? exit_to_user_mode_loop+0x3b/0x130 [ 208.825188][ T7027] exit_to_user_mode_loop+0x9e/0x130 [ 208.830504][ T7027] exit_to_user_mode_prepare+0xee/0x180 [ 208.836131][ T7027] syscall_exit_to_user_mode+0x16/0x40 [ 208.841623][ T7027] do_syscall_64+0x58/0xa0 [ 208.846151][ T7027] ? clear_bhb_loop+0x30/0x80 [ 208.850824][ T7027] ? clear_bhb_loop+0x30/0x80 [ 208.855526][ T7027] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.861542][ T7027] RIP: 0033:0x7fbbce9b5799 [ 208.865964][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.886033][ T7027] RSP: 002b:00007fbbccc0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 208.894683][ T7027] RAX: fffffffffffffe00 RBX: 00007fbbcec2efa0 RCX: 00007fbbce9b5799 [ 208.902831][ T7027] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000d [ 208.911084][ T7027] RBP: 00007fbbcea4bbd9 R08: 0000000000000000 R09: 0000000000000000 [ 208.919062][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.927432][ T7027] R13: 00007fbbcec2f038 R14: 00007fbbcec2efa0 R15: 00007ffe40f74348 [ 208.935735][ T7027] [ 208.939213][ T7027] Kernel Offset: disabled [ 208.943755][ T7027] Rebooting in 86400 seconds..