last executing test programs: 9.357182913s ago: executing program 1 (id=1128): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 9.279897958s ago: executing program 1 (id=1131): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7780) syz_usb_disconnect(r0) 7.449238088s ago: executing program 2 (id=1138): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, 0xffffffffffffffff, 0x15b4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, &(0x7f00000003c0), 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x1a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 6.887140677s ago: executing program 2 (id=1141): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000980)=[@wrmsr={0x65, 0x20, {0xa0f, 0xf80000000}}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @code={0xa, 0x82, {"c443d148b6224600000bc4e3791daf5b000000f5c74424000c000000c7442402bd000000c7442406000000000f011424f3410f09656467360f79d4420fc77600410fe118c744240013f71158c744240200300000c7442406000000000f01142466bad004b800200000ef66bad104b0a0ee"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6816, 0x5, 0xd, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x4e, 0x1000000000000000, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x7b, {"c744240044000000c7442402c6eb0000c7442406000000000f011424b9d40b0000b846000000ba000000000f306545aa0f01f8c4e27d789a74000000c4c1085916b9800000c00f3235000800000f300f01fab9800000c00f3235008000000f3066450f3881b0074315f4"}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x9, 0x4, 0x614}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x77}}], 0x2ad}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 6.759802821s ago: executing program 2 (id=1145): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000040900010073797a30000000000900020073797a3200000000400004803c0001800a00010072656469720000002c000280080001"], 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61e5, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 6.208637713s ago: executing program 1 (id=1148): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x4, @empty}}}, 0x84) r2 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9002) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7fff, 0xfffffffffffffffc, 0x9, 0xf79d, 0x9, 0x0, 0x0, 0x8, 0x6, 0xffffffffffff10ab, 0x4, 0x3, 0x4, 0x5, 0x8000000000000001], 0x2, 0xa0283}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) 5.993095331s ago: executing program 2 (id=1149): socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYBLOB, @ANYRES8], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0xda96) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.440244715s ago: executing program 3 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24040884) 4.285253944s ago: executing program 3 (id=1158): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7780) syz_usb_disconnect(r0) 4.226434453s ago: executing program 2 (id=1160): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1038, 0x12c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x4005) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000280)={0x0, 0x211d, 0x400, 0x40205, 0x11e}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20000004) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x13, r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x20004000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 4.089222926s ago: executing program 4 (id=1162): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xf0}], 0x1}, 0x24004000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r3, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) 4.072520532s ago: executing program 0 (id=1163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe0100000200000002000000800000", @ANYRES32, @ANYBLOB="060000000000000000d862010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000739d0000000000000004000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000004f033000fcffffff0192090000000000186100000b0000000000000001000000180100002020692500000000002020207b1af81801000000bfa100000000000007010000f8ffffffb702000008000000b7030000056b29228debc0cadec00d8ce4a611c90000008500000006000000185200000c0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000bd6adba9c9253cbc4eebc217fd11bace9e41f29015b20af2a5fd1a7d0abf734912f966a54cadb88784260f488b6b8fe1523a427732f4113e6030eee69a402bb0af826243c2bc4b3ffaa445057d508ab5c937e4ffd1452aad1fde17f58e000bcec7b3d2e57f5055f3a548f14af06de652d44cbe0fd82418a11f134b0a297d34497e57dafc5071fc682efd8957105f6c5f66ea221abdde"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000440)=""/165, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x7, 0xf81}, 0x10, 0x28035, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1, 0xffffffffffffffff, r1], &(0x7f0000000640)}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) 3.673030244s ago: executing program 1 (id=1164): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xfb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x9f, 0x76, 0x31, 0x20, 0x7ca, 0xb800, 0xd927, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x2, 0x90, 0x40, [{{0x9, 0x4, 0xe1, 0xc, 0x0, 0x3, 0x0, 0x0, 0x10}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x8000d, 0xfffffffc) syz_open_dev$vim2m(&(0x7f0000000040), 0xd11, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0xc1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000780), 0x12) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000c0000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0f00b685ae220a933be563bcb400"], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fe000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003c040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201"], &(0x7f0000000980)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.457380911s ago: executing program 4 (id=1165): unshare(0x22020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 3.346116919s ago: executing program 4 (id=1166): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000980)=[@wrmsr={0x65, 0x20, {0xa0f, 0xf80000000}}, @wr_drn={0x68, 0x20, {0x1, 0x9}}, @code={0xa, 0x82, {"c443d148b6224600000bc4e3791daf5b000000f5c74424000c000000c7442402bd000000c7442406000000000f011424f3410f09656467360f79d4420fc77600410fe118c744240013f71158c744240200300000c7442406000000000f01142466bad004b800200000ef66bad104b0a0ee"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6816, 0x5, 0xd, 0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x4e, 0x1000000000000000, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @code={0xa, 0x7b, {"c744240044000000c7442402c6eb0000c7442406000000000f011424b9d40b0000b846000000ba000000000f306545aa0f01f8c4e27d789a74000000c4c1085916b9800000c00f3235000800000f300f01fab9800000c00f3235008000000f3066450f3881b0074315f4"}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xbb}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0x9, 0x4, 0x614}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x5, 0x77}}], 0x2ad}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.212538003s ago: executing program 4 (id=1167): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0xa9f3, 0x400, 0x3, 0x287}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_setup(0x7dc9, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1868, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000640)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) poll(&(0x7f00000000c0)=[{r5, 0x400}], 0x1, 0xfffffffa) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 2.541098491s ago: executing program 0 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.196790833s ago: executing program 0 (id=1169): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) 2.192857392s ago: executing program 4 (id=1170): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYBLOB, @ANYRES8], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0xda96) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.029106859s ago: executing program 0 (id=1171): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a0300000000000000000000000000000000000c3b030000000000000000000a0000080900010073797a3100000000140000001100010000000000000000000a00000a75e78a31b70ef176ff07a95be978cba52ac1c246a609f7233b008e35a77eeb132a7f907bc570f0b264fb0caa5e00d114df89d5e7e1a3cd9e5aa3461790ce0d127dff81f55603dfcd7f0ec86a331d788978643ddbda73407c"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket(0x1e, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedb9f257befffff07000300", @ANYRES32=r5, @ANYBLOB="0c009900ff0f00000e00000014000201ef47ae481bbb3e531df26cdfe06566f01400fe000949b281b9a8c6d08b116ebbaedc6d510a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff0000140002014162788eeb6289916d90d09542ea978e"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$inet(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000002c0)="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", 0xfffffd15}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x89e4) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x3, @dev}, 0x2}}, 0x2e) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 1.513244788s ago: executing program 1 (id=1172): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) 1.250276946s ago: executing program 3 (id=1173): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 961.148719ms ago: executing program 1 (id=1174): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x103, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x40800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 852.330457ms ago: executing program 3 (id=1175): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) 533.407135ms ago: executing program 0 (id=1176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 499.559708ms ago: executing program 3 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) syz_init_net_socket$ax25(0x3, 0x2, 0xc5) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000019c0)={0x1358, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xfc, 0x0, 0x0, @uid=r4}, @nested={0x4}, @nested={0x133c, 0x1, 0x0, 0x1, [@nested={0xa8, 0xf6, 0x0, 0x1, [@nested={0xa4, 0x146, 0x0, 0x1, [@generic="7bdbce7bbe2814f2ccce2ea9508c010f23589e9adda99cb7699df481a8c0d51ca6ea9e0081988b451ecf9b6fdc71b811fe79081dc3823658b05832c844ed31d5d9961657694fd2d96d9bc76ea05251847b52a45bd1a278253e20940020d7f7b9ecdc684ada5cdc347f1b83aae06e7583035383f8c30807f9f860c60e7c4f312990d8930afa8a3d64bd821b49881e1ff55dd7108897df7c8220e28995", @nested={0x4, 0x4d}]}]}, @typed={0x8, 0xcb, 0x0, 0x0, @uid=r4}, @nested={0x10fd, 0x5d, 0x0, 0x1, [@generic="df4a3a16fd269a6acf97180f498fec51e63f083887942e353f0f752c7f624b5e57ebd977590e3c128a5c7078cddb78413c933a5d8340091e614fbeafc9d362a0e67b41c4e8f5e40b9ab4dce574255b8f2a7764e68219ff0bc30ca9cbb83e9e109920a5a852e1b16fe9258ddc0d2e74d4393923358981738fd1b8c3979591", @generic="1ddcfe0d94923982e9ec771c8c23d1821d3ad17d42d06330b632dbf543f172d6f36bb5231355ebb0afd9ad31b256b0c34f38dc352b7e1434594204", @nested={0x1040, 0x139, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x1038, 0x21, 0x0, 0x1, [@generic, @typed={0x8, 0xf3, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x51, 0x0, 0x0, @uid=r4}, @generic="1fec600c97cb7485ca5c364634d5c58bcb9eedd472305c7a4e8831e576f61e94e5807616ccc157370349bb2930d6b4f9315b9111b3f565a8a35a0b9ac68be7c482cef82d6102d0e10a22287bb2930e150de776107b6eb73b42801999f32519be8a5e590ca190625f06de8c809f691bd2debe7f21433c25f299b0cdd73e46fdc91de3de7b83e69d069123adee9d0da50131d2b85a15b31d894b62e1d7601ae8e2092a5cfbc9a448e7cb76e06b8b837ebe58bdc0d415f4c1178f7c537356aa57a6028f212e6097de47cccec37a76e821ff49d621e50a1c2f6c279bc42f39e7b3218905409ed999f1d73eb01e5bcb4b203fee9fb60bcc9017a3eaf8b633c905bcb522da8a649eff140e35dd3a4bceee41ebfbd437745f8b6d6bd78ee6cbeae9d18f59bded75c45712372a6cf5e156707367431c01d93c12d945ae66d2eea10f75926620a7108f8edc121c547cfd2b9f0489a235472f03fd24ac0c155e87544babb7d6ab53af7e1c66f66352081bc5457d410347c2cdd696b968b82ae1ebb470bf44a997a122b22242ca4aadc5ae454aa01928f0848deaf70e97c2ff0a57fd4308224ef704ce6c068fb35821a2a24b82a8b8e3f4c06258511fb05a36158fcd631a13ace79dff7272fc935ba806721d04e1cbaae934f628130aed2418619d12cca613250c4e9ec89734cab2cafbe6493add3f301423d1ca2754a63ec87e8ff17c83734527aa26f3641010d2ab01ef25e870d82be760433d030a8e5bd58180c32f94be855b294c911def25900da86088c81ab375b236ed2a14568efba62c58fc150ac0abb6a64fbdbff118a1cf039f6e0d43bde1849f1bb5b9515452aa843f3a472124750242defa7883ef08425b925d1ad67756c480c6e0db96b47e95387e11e4d963c17a5e8f8f2dcebdb2745311c1686af09f3aa8541718cbe52455478b392c0e22e7211ee590bad918b9eb7bbdeb0c581609c5077f3d2441d13471ba95c7644032163c0161f3bab1268ee7b7b4f9e836f8d22b09e13c97649643287f45b81bcdffae8864b7dcc5199c10d206feabb8ced8e5de666452e521802c93a25b01321de76a8c10ec75120e1f1d1f330913703adb3106fbc01ab57b9f8d261f57997c8e73684c16c0db1c4ad65d1f4ff768e42edd94a7413469c08a17c0553de1483beaa4b9b5500f861ceb953e1a02f8a31c55f96061c173dfd462dc115803cca52bc266986ce93d1bcac887318df5532e7b331cf8ad76a16967e35a7def0e467c2fa930354439451ef213c02074768eee854b1d7fc2539aa169737d248562f52037fbd011464b38e3f42ae739a153732a3eb5b0582f5021e3b566e52d1873cf0996c32fc15c75869ca31aa5243c8c80db45a5437ad90ad7f8ad23695170d26b25b82cdf8f734dbc037e62af4308d6c58f5935f6f033164eafeb5ddc9c1b2a0441b4da1dcfeaadd36ae19979a2ce35eddda9ea01db2aef683e95c3695632af006d2d83e6c3ce056e321748d64894983c5c7b48395d9d423fd3e5096fefbfbd62c40ff754eae24609cc9e8b3ce1bb3b871c257b1ab8dc861a37dbc22a5ebda9f37427909a210a87b5d7f0e53588124828b41604ee4ef8af27402559235db20db982c239b97822fa08be598d74682650960e96e21ee26b31645a75810e674ccc73a4f945f6d32612115a9381154c2725d10264f4dd55b06200f135487d92bee08dbb4c632bb39a0d4b9a67a46f2789aad0eadf0d1af3422355613257993b5cbb9e64b4a867bdd9689a05c66bd6dda58194d490a9cb1938c865d4ce6487058b9410f19d7b1d170e19a608880317c717d915109acae3e3d76aeaf7acb3ceea5c64fd521ddb013edd8be323efbc51510ee6a8e8a3255512ccaf410697ae8bfec8d951582a7af6c1c1541f05ec821a41f6bd681b93e7dd33514798efed1fb7d084173db93a0de5a7c9c9fb2d46fbdf4991c7bd64af03c2a01dcba26b5290725ba76ae1a543896c3a64b98a438bfcb643adaa759db1a0ce61b95764c948704dcaa60898d2f83b9bd4337ab880450bc02869457090faf2a5589599f1e6bc6f936d50f4cafdc5ca8c493eed7dcab9bc7a0a87110f08ee685bd92a3b76b27dc1225f36d026ff9410435e2c88414875f2780eb1ebaa23b0d1282a1174090378438f5b409aa2cbcf61bb126470ab5affb69e2858febf4fa74dd44c6830fc5b6f6e312f3be7e2acd4c98c40585e068e1251d70a77dc3f42f86156da49b4839047590dc123790c611582b5c95f88b3c06847f194d58d68ab8d206a2ad710040a63c81e366cfafe1df6b0b7c7e025b17a8866c1860671f5e6a43be90f96310891f0af5211f89234eae795c690a68bfdbab329d807f4e4c65ded7ce7097da48d704dfaeb75000f6e8595058ab1a7c2230254855209062d24be4d13f4785a4db2944370697dd25db997219413b0e04b70e2cbf1f8a5b579a9e001b41985f9652ea223dd192d174093d142a8e17ed432fad03ff22a48afccdfbde2b3f2ae8f90e2b7c9835ac5db258fa369a7a54e3c22ce9d858d90b780129d06c0acb66b746461e0a37c485c09e6b90bb2d3016e59b3ca6400de96bada0bd1c2baeebccf64aebf38e6ac8c33c61641f4eb5f1e2f42e3b94afb1e37b243b84d9c0be09ced91c55d8124f04c7d29e67f0526aa3879437e188d0e7a90350f810b98e7da948e32cb1d5e2d56511deb03c312c2a679c69b7a55f74d420060f8a07bd8103da79340e89195683f28a1e0463cf0d7e43ea85e9da979f2673ce233692b026c7238dcf83fb210210c55d62043e75ecc32bbbd41567bf88f22b9fb4590c1699ae335317b82b6c3723e4d9f0f971eec6a6eee7d3f84a8b99eda20c6d78dde447111099bd538fb43408dbcd050489ed8f87e872528481128c289acc30a4bb589960f003ae72e098b0d18fbe0ab4a0f62d14df6f559f12f1b9d1d87d06d18efa8740eac2baad0664826223dcc8a010b65d2fd4ce957a6f6342b5eba3e1e703af2c5138a30a44ce7328d8b79784de5841dfdc6f3015e3d205c38c318a57be8352653fbf7a0a940da88fb3faacb1cf12ee062731aedec38592faf0461c9fa2b45bc731881c27b1f0a9c515b0424da0502905ac606071cf4a8fadc5ad4fe2e49f1ca10420e16b963a70c42109ea8dc328621b3233a1801aab93a77e3935b4815298b9ab64252ef49e76ba7e234b18e7a7aa9fe6174dbbc793d6aed4b454183d6f40c6951776c22ccf4f5b48a5021d64612734afcc2b05ef83b50c99396c2fd7507ecebedf6e173dadc54982c077f21c4e3d71ea9bfe0865810d47d05beb159542b1117ead3f05a879452f8b74b9f1001ea3250558d815da4a0a63b506aed9869beed19c5abdc7a3a5dbfb885239563ae13a3996a61c65372ea6dbf1e42fa8aeaec44cab4316766c01ec3d9801f218c35f3e8fa5469505373a4da6692f984d7eeb3e8ce1f427f9bac713fdc3c3827df3c20311c9248c3a6356906bb880e47dc27a10d71f7b498cd7976cdea29d7fee4ae4e187548bb5294d2f0b687d346ad2ae8ca6efb47b26de41e08e691c8017e5f0c28eb32137cddcc444135aea8422d5209528be6a6f4b4c34e0fa6aa15ec2588c0c6ccf0a7fad609cb46e75df06c838b01487fe682d8baef10095d5c1e6ab706e4d4d31fa6aa3837eed36c7752274c0fe32d7eba53da3b633d1b8212caa5ce487841957f066812740341332c197e222cef465c4359f162b959e8e133f720bb363741b76ca0ead4258b63204865492de11937a9b299a549f45cfef785bafeed459a4dbd92c1a98a5995dbbbe160508d3a7bde68f7a7801321babccafca45e8485e35486e51b089a2591e19d9d967b5697192ee544a6c2ec108d67f79234015b2d60459fd364f812d6edd6ae9003cf53e61ad5a2136ce964936e5aecf5329f639f58c82de116349ea63d4eb8ebf391fbaaa5c89c03b3d6f8fcd7e19390b2cc1c32559aad51edae10a86c49ec007f131b6e798bd70effbdb33ab1d888f8fb9849b51123fba3219bda64a94b8040ef7ab2cd2f706e8961f89a821f5a7a4eac03b6c68a8d2cdf2e2e97b5a0a808cd580c28a43d84aae6f7728ade69f9f5bd7d3a55693f639058050a4f5bf5aab175caba1e313d242da462825eaf01e0fc4c50e46bf1c4f05653727a2ca105307bfc446c584270ab64a865b10412ede8d4732cff618e25ad2fbe8428ddb8c160f71b6792f7ed44d06d4b91f883d583509a23c02bde05abbdc850a66c165ffafa2615d42f8b4519a5105405cc5fd2f4b0af2eb0255b89da03cff77cbd3dd83849c17fefb676515340974c2495cf4b177d2af4241a7137cad6e42f4c777c2d65dd9c1c9efaa944d4620ca405857b891f393415d87df8c9bd910120c95252852a67605c3ea9c332807f1e43558e80f96d90dc49416ed9bef51aa282063ec5dfc454082391d956bf191573d2d4e3f2e5c446521eba7d94e96b097552e0ce7c56245157e52a00c657b2bf491331c0f95f645206d0df82c003051143d34f9bba4d826d574e749df44f1f43aba92eaedd69bc874345a113b4d083062b6a11772608532015edf14f2c51d581f089afe6e237a1a294ef3c23c92f2ffc3d0d36651d0e38a399ff6dee0cf83c546f62f6ef61725ef280e113c2752693d737d1fe8f25f4aeb092107f3d5fd66742fa767790def794034566dd733c59a5d926b254bfba612cb51ac16f7ab28a66b01a8af239870a945c70d11df9270a8a7436719d185b685fcdca37e52b64139e60a56e092ee5c1df175d92fba1491bfaad613477f434bd47257cd0db3d197e87921e5559fe3b9cc057e5bbf0ae0cab5ac6676080e48c5e2fb047d132d5ec0d754317751094082d2fad49537e73b6d77aae626baf0b25a3aae593f64b924ff074739ba4cce91dd9a7fdbc04522a647edc4b23d9d7c5647d11c5559b51cab7f1542eec23dd9b55900249de922846b86cb466daf693fe42d7e153175ea95a5406535ca19f9094141fef34efeae4d9dfd1e993a8e2dc229067a3d9efc54d6b05e5d2f7809c8302a113dd8324be10e1cc848496017f9f5549a0578c1eadf8d461812a1224b7abd7943db2c6d9dbec4e7f5d482e01c0f708988205bb714401a93f41b09bc83b3dfceb50190ffc7b5c40b43e166e57212b46061d0aa1964c4972f39d5b91fa86c9473f4c3a721aa0ea4c74e3546bc16bcdd62ca17a5d7383b599f3e10e676b6de6fc6eab9863c61f4f2a9faa9f7663e1c7621933958f0988fd41a5365798f1b7f92f049233872ed4652451440b16f6a2e392c8e12eb0204ddea9ea7d944f1df7bcc9ab28c464e30f19e6b423fbca80cdf159f27ae1592e0893ee9e6a2bfd790bb68d5da62ae823f7e16a5e59189630f13b4ae1978d47836487d828ff14943cd691b98c4deee61f90d8023c89ecfe619114aa0bf533f270150d3c32a206741fb066818cea43eb7b5ad0c103907e67205b1cc8e6cde14bc646c9f947bcb2b790f7b0597af674869c850776cfd219e86cc7ca63f19a01ab207cb9bc171c8111e5cfb20a3e9b20500774c086cc987682444f4584a86b025533891a9dd7da946ff6b3a454e0c0feea2f917ddda47d5544d808854264ce78629aab4bb33d3d0b44e46d0fad23f94bf321052a465ca0e4b9cd69ab2eed4cb8af570a117ea3d8d6296c4fa01e2e8939136b10fcea544543fbb09edc4828dbd90c3615e406f32a66123f9162fa8722272bacad7c49c618188d682916dc30088cbddf6e89305ad2cdb33bfddb58248994494bd58feb56054a386e149cf5", @nested={0x4, 0x11c}, @typed={0x8, 0x119, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xd4, 0x0, 0x0, @uid}, @nested={0x4, 0xd3}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xd8}]}]}]}, @nested={0x188, 0x4, 0x0, 0x1, [@generic="f375fc42efd63f06b100b41cbd30a067e318a2efbd861592ca78719a09d87d38e69dd0bf613fad4656d3a53baefbf5dcd0c6b19547a556aba54f92bc5d0f73b1007d7fa480146f7c0d6087dbfcba716c340a8080d6235cce57f8220ed9054c12e3852022844cdcaa04e8ca80b8af2b2b523b88a598d788999330e7573c42e16ca13262583fc2dee61841d6509497ee047a51c860f6e9556c8f7e87d5cbcf02bdf71092d44afb88f8f6d429f8c18f78213b3d677b688d374b14d119fa232c", @typed={0x8, 0xc6, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @generic="787e41dd25223e0355", @generic="fe8908833db1dc36abed489b9823fd3368d11b37b55086872ad3bc16fcfd92869662947e91e863709d414b0dae9557eddc29e1bc9e143d084353cc6f13ca7cce0bdc3d3ebbdbe90d28259b731268f49833b38176d4ee75b2c27290eb69f4f2ef5698ebca938f634b378bd567a21f8aba44d00eff91f9d50c57671c098a68bc84dcdd3f595ab9deeaedd6c624a59c0a89566ca82731cbddca5f358844cf73b1275c43131ac4250b94d8a9136c3f"]}]}]}, 0x1358}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) unshare(0x62040200) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0x300d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x21}}}, &(0x7f0000000040)=0x84) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x82, &(0x7f0000000740)={0x0, 0x1006}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000160000000004000400"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x5, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000001500)={r10, @in={{0x2, 0x4e22, @empty}}, 0xfffe}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 437.657416ms ago: executing program 2 (id=1178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe0100000200000002000000800000", @ANYRES32, @ANYBLOB="060000000000000000d862010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000739d0000000000000004000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000440)=""/165, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x7, 0xf81}, 0x10, 0x28035, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r1, 0xffffffffffffffff, r1], &(0x7f0000000640)}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) 356.55515ms ago: executing program 4 (id=1179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x300, 0x8, 0x4, 0x2}, 0x1, 0x0, 0xc1, 0x8, 0xc, 0x12, 0x1a, 0x15, 0x3, 0x7, {0x87, 0x1, 0xdda, 0x3, 0x9, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000000c0)="80", 0x1, 0x48d4, &(0x7f00000001c0)={0x11, 0x8, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 281.190885ms ago: executing program 0 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=1181): unshare(0x26020480) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fe, 0xffffffffffffffff}, 0x3d) kernel console output (not intermixed with test programs): media_entity: media entity 'dvb-demux' registered. [ 190.348446][ T1111] dvb-usb: bulk message failed: -22 (4/0) [ 190.354969][ T4227] usb usb1-port1: unable to enumerate USB device [ 190.355781][ T1111] dvb-usb: error -22 while querying for an remote control event. [ 190.549160][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 190.558916][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 190.562669][ T1108] DVB: Unable to find symbol stb0899_attach() [ 190.595882][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 190.599316][ T6752] tipc: Enabled bearer , priority 0 [ 190.656878][ T6755] device syzkaller0 entered promiscuous mode [ 190.749015][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 190.755568][ T6751] tipc: Resetting bearer [ 190.765090][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 190.819573][ T6751] tipc: Disabling bearer [ 190.878842][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 190.884739][ T1108] Registered IR keymap rc-empty [ 190.908418][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 190.914332][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 190.951518][ T1108] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 190.962219][ T4227] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.017082][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input34 [ 191.079388][ T1111] dvb-usb: bulk message failed: -22 (4/0) [ 191.086864][ T1111] dvb-usb: error -22 while querying for an remote control event. [ 191.140627][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 191.156169][ T1111] usb 2-1: USB disconnect, device number 20 [ 191.223536][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 191.223536][ T1108] [ 191.244454][ T1111] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 191.270560][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 191.328864][ T4227] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 191.337356][ T4227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.397786][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.404159][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.468986][ T4227] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 191.486478][ T6769] netlink: 64 bytes leftover after parsing attributes in process `syz.0.863'. [ 191.527921][ T4227] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 191.558660][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 191.615124][ T4227] usb 5-1: Manufacturer: syz [ 191.661412][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.667827][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.687292][ T4227] usb 5-1: config 0 descriptor?? [ 191.819159][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 191.826717][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 191.848425][ T1111] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 191.939254][ T4227] rc_core: IR keymap rc-hauppauge not found [ 191.946822][ T4227] Registered IR keymap rc-empty [ 191.991397][ T4227] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 192.053520][ T4227] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 192.068445][ T1111] usb 4-1: device descriptor read/64, error -71 [ 192.100059][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 192.113662][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 192.164119][ T1108] usb 3-1: USB disconnect, device number 21 [ 192.276826][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 192.359183][ T1111] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 192.367520][ T6783] tipc: Enabled bearer , priority 0 [ 192.405130][ T6783] device syzkaller0 entered promiscuous mode [ 192.463514][ T6783] tipc: Resetting bearer [ 192.476465][ T6782] tipc: Resetting bearer [ 192.504391][ T6782] tipc: Disabling bearer [ 192.598636][ T1111] usb 4-1: device descriptor read/64, error -71 [ 192.665303][ T6787] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 192.697004][ T21] usb 5-1: USB disconnect, device number 22 [ 192.718655][ T1111] usb usb4-port1: attempt power cycle [ 193.149979][ T1108] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 193.154968][ T1111] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 193.288740][ T1111] usb 4-1: device descriptor read/8, error -71 [ 193.338866][ T1108] usb 3-1: device descriptor read/64, error -71 [ 193.579109][ T1111] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 193.609120][ T1108] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 193.698415][ T6807] device syzkaller0 entered promiscuous mode [ 193.708588][ T1111] usb 4-1: device descriptor read/8, error -71 [ 193.762431][ T6808] lo speed is unknown, defaulting to 1000 [ 193.799794][ T1108] usb 3-1: device descriptor read/64, error -71 [ 193.839930][ T1111] usb usb4-port1: unable to enumerate USB device [ 193.878692][ T6809] xt_CT: No such helper "syz1" [ 193.916259][ T6814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.879'. [ 193.919500][ T1108] usb usb3-port1: attempt power cycle [ 194.273787][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290869][ T4262] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 194.349120][ T1108] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 194.435785][ T6823] tipc: Enabled bearer , priority 0 [ 194.449149][ T1108] usb 3-1: device descriptor read/8, error -71 [ 194.479356][ T6823] device syzkaller0 entered promiscuous mode [ 194.514031][ T6823] tipc: Resetting bearer [ 194.543906][ T6822] tipc: Resetting bearer [ 194.568892][ T4262] usb 2-1: Using ep0 maxpacket: 8 [ 194.609272][ T6822] tipc: Disabling bearer [ 194.728801][ T1108] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 194.850793][ T1108] usb 3-1: device descriptor read/8, error -71 [ 194.938529][ T4262] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 194.957351][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.979174][ T4262] usb 2-1: Product: syz [ 194.988291][ T4262] usb 2-1: Manufacturer: syz [ 194.998813][ T1108] usb usb3-port1: unable to enumerate USB device [ 195.007558][ T4262] usb 2-1: SerialNumber: syz [ 195.050950][ T4262] usb 2-1: config 0 descriptor?? [ 195.130468][ T4262] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 195.153966][ T4262] pctv452e: pctv452e_power_ctrl: 1 [ 195.153966][ T4262] [ 195.186845][ T4262] usb 2-1: selecting invalid altsetting 3 [ 195.221671][ T4262] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 195.221671][ T4262] [ 195.232609][ T1111] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 195.275893][ T4262] dvb-usb: bulk message failed: -22 (5/0) [ 195.323429][ T4262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.390355][ T4262] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 195.422316][ T4262] usb 2-1: media controller created [ 195.449839][ T4262] dvb-usb: bulk message failed: -22 (8/0) [ 195.484794][ T4262] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 195.523762][ T4262] dvb-usb: MAC address reading failed. [ 195.617536][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.648575][ T1111] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 195.677496][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.808634][ T1111] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 195.838967][ T1111] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 195.855834][ T4262] DVB: Unable to find symbol stb0899_attach() [ 195.864859][ T4262] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 195.924127][ T1111] usb 1-1: Manufacturer: syz [ 195.963825][ T1111] usb 1-1: config 0 descriptor?? [ 196.158421][ T1111] rc_core: IR keymap rc-hauppauge not found [ 196.195214][ T1111] Registered IR keymap rc-empty [ 196.219121][ T1111] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 196.238434][ T4262] rc_core: IR keymap rc-tt-1500 not found [ 196.254988][ T4262] Registered IR keymap rc-empty [ 196.278571][ T4262] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 196.300427][ T1111] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input37 [ 196.343911][ T4262] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input36 [ 196.416119][ T4262] dvb-usb: schedule remote query interval to 100 msecs. [ 196.461722][ T4262] pctv452e: pctv452e_power_ctrl: 0 [ 196.461722][ T4262] [ 196.497719][ T4262] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 196.578710][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 196.600178][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 196.748569][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 196.755959][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 196.898481][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 196.904576][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 197.049142][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 197.058423][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 197.130530][ T4262] usb 1-1: USB disconnect, device number 28 [ 197.219148][ T1111] dvb-usb: bulk message failed: -22 (4/0) [ 197.225884][ T1111] dvb-usb: error -22 while querying for an remote control event. [ 197.398907][ T1111] dvb-usb: bulk message failed: -22 (4/0) [ 197.408424][ T1111] dvb-usb: error -22 while querying for an remote control event. [ 197.529135][ T4262] dvb-usb: bulk message failed: -22 (4/0) [ 197.538800][ T4260] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 197.545383][ T4262] dvb-usb: error -22 while querying for an remote control event. [ 197.650965][ T4227] usb 2-1: USB disconnect, device number 21 [ 197.673584][ T6865] tipc: Enabled bearer , priority 0 [ 197.721648][ T6865] device syzkaller0 entered promiscuous mode [ 197.749005][ T4260] usb 5-1: device descriptor read/64, error -71 [ 197.756261][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 197.782432][ T6865] tipc: Resetting bearer [ 197.837674][ T6864] tipc: Resetting bearer [ 197.879803][ T6864] tipc: Disabling bearer [ 198.020358][ T4260] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 198.128408][ T1111] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 198.229921][ T4260] usb 5-1: device descriptor read/64, error -71 [ 198.350170][ T4260] usb usb5-port1: attempt power cycle [ 198.428471][ T21] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 198.538627][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.564189][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.683453][ T6886] device syzkaller0 entered promiscuous mode [ 198.689993][ T1111] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 198.699780][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.716249][ T1111] usb 4-1: SerialNumber: syz [ 198.768855][ T4260] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 198.848676][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.858905][ T4260] usb 5-1: device descriptor read/8, error -71 [ 198.867696][ T21] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.877561][ T21] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 198.889101][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.911405][ T21] usb 1-1: config 0 descriptor?? [ 198.985343][ T6869] netlink: 'syz.3.897': attribute type 10 has an invalid length. [ 199.048902][ T4227] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 199.060541][ T1111] usb 4-1: skipping empty audio interface (v1) [ 199.085930][ T1111] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 199.121354][ T1111] usb 4-1: USB disconnect, device number 22 [ 199.122049][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.161408][ T4260] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 199.183815][ T1108] usb 1-1: USB disconnect, device number 29 [ 199.268997][ T4260] usb 5-1: device descriptor read/8, error -71 [ 199.308949][ T4227] usb 3-1: Using ep0 maxpacket: 8 [ 199.392584][ T4260] usb usb5-port1: unable to enumerate USB device [ 199.593707][ T4227] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 199.611944][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.633500][ T4227] usb 3-1: Product: syz [ 199.649348][ T4227] usb 3-1: Manufacturer: syz [ 199.654446][ T4227] usb 3-1: SerialNumber: syz [ 199.693742][ T4227] usb 3-1: config 0 descriptor?? [ 199.790242][ T4227] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 199.803784][ T4227] pctv452e: pctv452e_power_ctrl: 1 [ 199.803784][ T4227] [ 199.831255][ T4227] usb 3-1: selecting invalid altsetting 3 [ 199.851344][ T4227] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 199.851344][ T4227] [ 199.899498][ T4227] dvb-usb: bulk message failed: -22 (5/0) [ 199.935250][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.979324][ T4227] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 199.997647][ T4227] usb 3-1: media controller created [ 200.025656][ T4227] dvb-usb: bulk message failed: -22 (8/0) [ 200.046447][ T4227] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 200.089662][ T4227] dvb-usb: MAC address reading failed. [ 200.153598][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.346812][ T4227] DVB: Unable to find symbol stb0899_attach() [ 200.367071][ T4227] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 200.598677][ T4227] rc_core: IR keymap rc-tt-1500 not found [ 200.605097][ T4227] Registered IR keymap rc-empty [ 200.645042][ T4227] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 200.710195][ T4227] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input38 [ 200.799383][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 200.837592][ T6918] tipc: Enabled bearer , priority 0 [ 200.848798][ T4227] pctv452e: pctv452e_power_ctrl: 0 [ 200.848798][ T4227] [ 200.868981][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 200.886097][ T6918] device syzkaller0 entered promiscuous mode [ 200.925713][ T6918] tipc: Resetting bearer [ 200.949900][ T4227] usb 3-1: USB disconnect, device number 26 [ 201.007432][ T6915] tipc: Resetting bearer [ 201.036433][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 201.120013][ T6915] tipc: Disabling bearer [ 201.332636][ T6931] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 201.382364][ T6931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.446997][ T6937] bond1: (slave geneve2): making interface the new active one [ 201.537604][ T6937] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 201.632960][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 201.828941][ T4260] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.008450][ T4229] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 202.118767][ T4227] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 202.208773][ T4260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.225660][ T4260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.308861][ T4227] usb 5-1: device descriptor read/64, error -71 [ 202.315356][ T4260] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.332281][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.343423][ T4260] usb 4-1: SerialNumber: syz [ 202.428779][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.448386][ T4229] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.457570][ T4229] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 202.467253][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.486729][ T4229] usb 1-1: config 0 descriptor?? [ 202.578856][ T4227] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 202.593097][ T6940] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 202.651232][ T4260] usb 4-1: skipping empty audio interface (v1) [ 202.687393][ T4260] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 202.696717][ T4260] usb 4-1: USB disconnect, device number 23 [ 202.778835][ T4227] usb 5-1: device descriptor read/64, error -71 [ 202.898994][ T4227] usb usb5-port1: attempt power cycle [ 202.909517][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.308838][ T4227] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 203.400276][ T4227] usb 5-1: device descriptor read/8, error -71 [ 203.508516][ T21] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.639720][ T1111] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 203.678873][ T4227] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 203.789073][ T4227] usb 5-1: device descriptor read/8, error -71 [ 203.825433][ T6974] tipc: Enabled bearer , priority 0 [ 203.858882][ T6974] device syzkaller0 entered promiscuous mode [ 203.892009][ T6974] tipc: Resetting bearer [ 203.908950][ T4227] usb usb5-port1: unable to enumerate USB device [ 203.925306][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.935844][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 203.952908][ T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.983064][ T6973] tipc: Resetting bearer [ 204.009419][ T6973] tipc: Disabling bearer [ 204.069007][ T21] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.108078][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.142670][ T21] usb 2-1: SerialNumber: syz [ 204.228582][ T1111] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 204.244148][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.259390][ T1111] usb 3-1: Product: syz [ 204.273512][ T1111] usb 3-1: Manufacturer: syz [ 204.287580][ T1111] usb 3-1: SerialNumber: syz [ 204.320055][ T1111] usb 3-1: config 0 descriptor?? [ 204.380404][ T1111] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 204.401240][ T6955] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 204.416236][ T1111] pctv452e: pctv452e_power_ctrl: 1 [ 204.416236][ T1111] [ 204.428509][ T1111] usb 3-1: selecting invalid altsetting 3 [ 204.441156][ T1111] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 204.441156][ T1111] [ 204.460630][ T21] usb 2-1: skipping empty audio interface (v1) [ 204.477650][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 204.504094][ T21] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 204.516801][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.548670][ T21] usb 2-1: USB disconnect, device number 22 [ 204.560769][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.590657][ T1111] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 204.634769][ T1111] usb 3-1: media controller created [ 204.645357][ T1111] dvb-usb: bulk message failed: -22 (8/0) [ 204.651515][ T4229] usb 1-1: string descriptor 0 read error: -71 [ 204.679367][ T4229] usb 1-1: USB disconnect, device number 30 [ 204.705619][ T1111] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 204.728564][ T2358] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.746896][ T1111] dvb-usb: MAC address reading failed. [ 204.789365][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.963699][ T6983] tipc: Enabled bearer , priority 0 [ 204.984234][ T1111] DVB: Unable to find symbol stb0899_attach() [ 204.993292][ T1111] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 205.038586][ T2358] usb 4-1: Using ep0 maxpacket: 8 [ 205.047277][ T6986] device syzkaller0 entered promiscuous mode [ 205.258478][ T1111] rc_core: IR keymap rc-tt-1500 not found [ 205.264537][ T1111] Registered IR keymap rc-empty [ 205.314301][ T1111] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 205.369346][ T2358] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 205.381510][ T1111] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input39 [ 205.396160][ T2358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.426896][ T2358] usb 4-1: Product: syz [ 205.436655][ T1111] dvb-usb: schedule remote query interval to 100 msecs. [ 205.449582][ T2358] usb 4-1: Manufacturer: syz [ 205.460701][ T2358] usb 4-1: SerialNumber: syz [ 205.467567][ T1111] pctv452e: pctv452e_power_ctrl: 0 [ 205.467567][ T1111] [ 205.503655][ T2358] usb 4-1: config 0 descriptor?? [ 205.510853][ T1111] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 205.578428][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 205.584413][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 205.596207][ T6981] tipc: Resetting bearer [ 205.620309][ T2358] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 205.640582][ T2358] pctv452e: pctv452e_power_ctrl: 1 [ 205.640582][ T2358] [ 205.669951][ T2358] usb 4-1: selecting invalid altsetting 3 [ 205.697695][ T2358] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 205.697695][ T2358] [ 205.713211][ T2358] dvb-usb: bulk message failed: -22 (5/0) [ 205.740446][ T2358] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.786155][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 205.793018][ T2358] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 205.802009][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 205.811419][ T6981] tipc: Disabling bearer [ 205.825739][ T2358] usb 4-1: media controller created [ 205.835800][ T2358] dvb-usb: bulk message failed: -22 (8/0) [ 205.863878][ T2358] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 205.888803][ T2358] dvb-usb: MAC address reading failed. [ 205.938428][ T2358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.980347][ T1111] dvb-usb: bulk message failed: -22 (4/0) [ 205.997777][ T1111] dvb-usb: error -22 while querying for an remote control event. [ 206.123711][ T2358] DVB: Unable to find symbol stb0899_attach() [ 206.130376][ T2358] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 206.167804][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 206.175087][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 206.298506][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 206.305779][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 206.354643][ T6999] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 206.378474][ T2358] rc_core: IR keymap rc-tt-1500 not found [ 206.384512][ T2358] Registered IR keymap rc-empty [ 206.418093][ T2358] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 206.434738][ T2358] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input40 [ 206.459328][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 206.472243][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 206.483036][ T2358] dvb-usb: schedule remote query interval to 100 msecs. [ 206.497781][ T2358] pctv452e: pctv452e_power_ctrl: 0 [ 206.497781][ T2358] [ 206.518962][ T2358] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 206.527773][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.608603][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 206.615402][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 206.667239][ T7003] bond1: (slave geneve2): making interface the new active one [ 206.707956][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 206.739014][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 206.767613][ T7003] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 206.779976][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 206.808576][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 206.824623][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 206.909746][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 206.915896][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 206.976007][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 206.988270][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 207.022902][ T7009] device syzkaller0 entered promiscuous mode [ 207.058619][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 207.068396][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 207.085619][ T7011] device team_slave_0 entered promiscuous mode [ 207.092347][ T7011] device team_slave_1 entered promiscuous mode [ 207.127333][ T1111] usb 3-1: USB disconnect, device number 27 [ 207.139711][ T2358] dvb-usb: bulk message failed: -22 (4/0) [ 207.155562][ T7011] device vlan2 entered promiscuous mode [ 207.157078][ T2358] dvb-usb: error -22 while querying for an remote control event. [ 207.206429][ T7011] device team0 entered promiscuous mode [ 207.222449][ T1111] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 207.309959][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 207.316023][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 207.324389][ T7018] tipc: Enabled bearer , priority 0 [ 207.335002][ T7018] device syzkaller0 entered promiscuous mode [ 207.406520][ T7018] tipc: Resetting bearer [ 207.438888][ T4229] dvb-usb: bulk message failed: -22 (4/0) [ 207.444850][ T4229] dvb-usb: error -22 while querying for an remote control event. [ 207.498908][ T7017] tipc: Resetting bearer [ 207.531131][ T7017] tipc: Disabling bearer [ 207.538931][ T4227] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 207.566990][ T4232] usb 4-1: USB disconnect, device number 24 [ 207.643969][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 207.728918][ T4174] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 207.791238][ T7031] tipc: Enabled bearer , priority 0 [ 207.801956][ T7031] device syzkaller0 entered promiscuous mode [ 207.831158][ T1108] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 207.909112][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.929215][ T4227] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.944474][ T4227] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 207.957475][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.976534][ T7030] tipc: Resetting bearer [ 207.983972][ T4227] usb 2-1: config 0 descriptor?? [ 208.012622][ T7030] tipc: Disabling bearer [ 208.039037][ T1108] usb 5-1: device descriptor read/64, error -71 [ 208.099118][ T4174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.117593][ T4174] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.199228][ T4174] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.214084][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.228483][ T4174] usb 1-1: SerialNumber: syz [ 208.266857][ T4227] usb 2-1: USB disconnect, device number 23 [ 208.320341][ T1108] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 208.518860][ T1108] usb 5-1: device descriptor read/64, error -71 [ 208.527345][ T7021] netlink: 'syz.0.942': attribute type 10 has an invalid length. [ 208.544658][ T7021] wlan1: mtu greater than device maximum [ 208.553751][ T7021] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 208.611628][ T4174] usb 1-1: skipping empty audio interface (v1) [ 208.638214][ T4174] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 208.657474][ T4174] usb 1-1: USB disconnect, device number 31 [ 208.664169][ T1108] usb usb5-port1: attempt power cycle [ 208.695994][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.088991][ T1108] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 209.118676][ T1111] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 209.199162][ T1108] usb 5-1: device descriptor read/8, error -71 [ 209.323771][ T7057] device syzkaller0 entered promiscuous mode [ 209.398645][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 209.468869][ T1108] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 209.548804][ T1111] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.558865][ T1108] usb 5-1: device descriptor read/8, error -71 [ 209.568383][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.575334][ T1111] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 209.598373][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.626177][ T1111] usb 2-1: config 0 descriptor?? [ 209.676590][ T7062] netlink: 64 bytes leftover after parsing attributes in process `syz.3.958'. [ 209.689071][ T1108] usb usb5-port1: unable to enumerate USB device [ 209.753945][ T7066] tipc: Enabled bearer , priority 0 [ 209.762250][ T7066] device syzkaller0 entered promiscuous mode [ 209.776585][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 209.806537][ T7066] tipc: Resetting bearer [ 209.852658][ T7065] tipc: Resetting bearer [ 209.876640][ T7065] tipc: Disabling bearer [ 210.178508][ T2358] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 210.371945][ T4229] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 210.438470][ T2358] usb 4-1: Using ep0 maxpacket: 32 [ 210.598636][ T2358] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.686647][ T7079] netlink: 64 bytes leftover after parsing attributes in process `syz.4.964'. [ 210.688681][ T2358] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 210.719082][ T2358] usb 4-1: config 102 has no interface number 0 [ 210.732618][ T2358] usb 4-1: config 102 interface 225 has no altsetting 0 [ 210.741712][ T4229] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 210.756249][ T4229] usb 3-1: config 0 has no interface number 0 [ 210.768422][ T4229] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 210.791738][ T4229] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.829533][ T4229] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.866699][ T4229] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 210.910743][ T4229] usb 3-1: config 0 interface 16 has no altsetting 0 [ 210.933816][ T4229] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 210.943763][ T2358] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 210.963644][ T2358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.984583][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.000384][ T2358] usb 4-1: Product: syz [ 211.007888][ T2358] usb 4-1: Manufacturer: syz [ 211.018943][ T4229] usb 3-1: config 0 descriptor?? [ 211.024058][ T2358] usb 4-1: SerialNumber: syz [ 211.034438][ T4262] Bluetooth: hci4: command 0x0405 tx timeout [ 211.199036][ T7085] device syzkaller0 entered promiscuous mode [ 211.463515][ T2358] (null): radio-mr800 - initialization failed [ 211.477665][ T2358] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 211.506585][ T2358] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 211.541987][ T2358] usb 4-1: USB disconnect, device number 25 [ 211.775603][ T7094] tipc: Enabled bearer , priority 0 [ 211.801271][ T7094] device syzkaller0 entered promiscuous mode [ 211.854379][ T7094] tipc: Resetting bearer [ 211.866361][ T7092] tipc: Resetting bearer [ 211.893061][ T7092] tipc: Disabling bearer [ 212.088456][ T2358] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 212.358518][ T4262] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 212.499030][ T2358] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.515935][ T2358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.555358][ T2358] usb 5-1: config 0 has no interface number 0 [ 212.562126][ T1111] usbhid 2-1:0.0: can't add hid device: -71 [ 212.568120][ T1111] usbhid: probe of 2-1:0.0 failed with error -71 [ 212.575248][ T2358] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.589966][ T4262] usb 1-1: device descriptor read/64, error -71 [ 212.608600][ T1111] usb 2-1: USB disconnect, device number 24 [ 212.646550][ T2358] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 212.670800][ T2358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.694861][ T2358] usb 5-1: config 0 descriptor?? [ 212.868944][ T4262] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 212.978759][ T4227] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 213.095081][ T4262] usb 1-1: device descriptor read/64, error -71 [ 213.224706][ T4262] usb usb1-port1: attempt power cycle [ 213.278177][ T7107] device syzkaller0 entered promiscuous mode [ 213.288684][ T4229] usbhid 3-1:0.16: can't add hid device: -71 [ 213.294874][ T4229] usbhid: probe of 3-1:0.16 failed with error -71 [ 213.313288][ T4229] usb 3-1: USB disconnect, device number 28 [ 213.339087][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.352253][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.439030][ T4227] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.459018][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.467069][ T4227] usb 4-1: SerialNumber: syz [ 213.648468][ T4262] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 213.739295][ T7103] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 213.762526][ T4262] usb 1-1: device descriptor read/8, error -71 [ 213.791157][ T4227] usb 4-1: skipping empty audio interface (v1) [ 213.823260][ T4227] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 213.861421][ T4227] usb 4-1: USB disconnect, device number 26 [ 213.868610][ T4229] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 213.872569][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.892643][ T1108] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 214.048603][ T4262] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 214.150710][ T4262] usb 1-1: device descriptor read/8, error -71 [ 214.158861][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 214.269384][ T4262] usb usb1-port1: unable to enumerate USB device [ 214.308634][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.343923][ T4229] usb 3-1: config 0 has no interfaces? [ 214.365785][ T4229] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.388999][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.414371][ T4229] usb 3-1: config 0 descriptor?? [ 214.438525][ T1108] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 214.457152][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.505376][ T1108] usb 2-1: Product: syz [ 214.515235][ T1108] usb 2-1: Manufacturer: syz [ 214.541308][ T1108] usb 2-1: SerialNumber: syz [ 214.568087][ T1108] usb 2-1: config 0 descriptor?? [ 214.630488][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 214.642959][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 214.642959][ T1108] [ 214.663269][ T1108] usb 2-1: selecting invalid altsetting 3 [ 214.683354][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 214.683354][ T1108] [ 214.712639][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 214.726488][ T4229] usb 3-1: USB disconnect, device number 29 [ 214.799465][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.818660][ T2358] usb 5-1: string descriptor 0 read error: -71 [ 214.840596][ T2358] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 214.850320][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 214.879132][ T2358] usb 5-1: USB disconnect, device number 35 [ 214.903522][ T1108] usb 2-1: media controller created [ 214.909638][ T4227] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 214.931393][ T1108] dvb-usb: bulk message failed: -22 (8/0) [ 214.941951][ T1108] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 214.950965][ T1108] dvb-usb: MAC address reading failed. [ 214.979904][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.082280][ T1108] DVB: Unable to find symbol stb0899_attach() [ 215.093348][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 215.169744][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 215.302550][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 215.312522][ T1108] Registered IR keymap rc-empty [ 215.335574][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 215.384512][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input41 [ 215.427313][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 215.448950][ T4227] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 215.467794][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 215.467794][ T1108] [ 215.475913][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.493305][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 215.505874][ T4227] usb 4-1: Product: syz [ 215.516143][ T4227] usb 4-1: Manufacturer: syz [ 215.545419][ T4227] usb 4-1: SerialNumber: syz [ 215.581176][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 215.601394][ T4227] usb 4-1: config 0 descriptor?? [ 215.606747][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 215.618552][ T4229] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 215.650574][ T4227] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 215.661932][ T4227] pctv452e: pctv452e_power_ctrl: 1 [ 215.661932][ T4227] [ 215.670408][ T4227] usb 4-1: selecting invalid altsetting 3 [ 215.677010][ T4227] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 215.677010][ T4227] [ 215.689189][ T4227] dvb-usb: bulk message failed: -22 (5/0) [ 215.702589][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 215.718873][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 215.725157][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 215.734153][ T4227] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 215.743680][ T4227] usb 4-1: media controller created [ 215.754127][ T4227] dvb-usb: bulk message failed: -22 (8/0) [ 215.771325][ T4227] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 215.810300][ T4227] dvb-usb: MAC address reading failed. [ 215.878446][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 215.895213][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.936373][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 215.968024][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.029892][ T4227] DVB: Unable to find symbol stb0899_attach() [ 216.037072][ T4227] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 216.069234][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.099805][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.111869][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.178656][ T4229] usb 1-1: config 102 has an invalid interface number: 225 but max is 0 [ 216.204261][ T4229] usb 1-1: config 102 has no interface number 0 [ 216.219767][ T4227] rc_core: IR keymap rc-tt-1500 not found [ 216.226881][ T4227] Registered IR keymap rc-empty [ 216.247923][ T4227] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 216.260669][ T4229] usb 1-1: config 102 interface 225 has no altsetting 0 [ 216.306884][ T4227] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input42 [ 216.371056][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.381123][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 216.390775][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.412332][ T4227] pctv452e: pctv452e_power_ctrl: 0 [ 216.412332][ T4227] [ 216.436192][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 216.478593][ T4229] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 216.506972][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.522700][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.530440][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.537356][ T4229] usb 1-1: Product: syz [ 216.571493][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 216.576885][ T4229] usb 1-1: Manufacturer: syz [ 216.577463][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 216.602751][ T4229] usb 1-1: SerialNumber: syz [ 216.683286][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.690832][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.769014][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.777576][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.841669][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.847789][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.918959][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 216.927289][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 216.991172][ T4229] (null): radio-mr800 - initialization failed [ 216.998502][ T4229] radio-mr800: probe of 1-1:102.225 failed with error -22 [ 217.008905][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 217.022387][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 217.050824][ T4229] usbhid 1-1:102.225: couldn't find an input interrupt endpoint [ 217.051118][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 217.102426][ T2358] usb 2-1: USB disconnect, device number 25 [ 217.113804][ T4229] usb 1-1: USB disconnect, device number 36 [ 217.171563][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 217.208192][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 217.239852][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 217.273812][ T2358] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 217.398836][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 217.404810][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 217.526216][ T7136] tipc: Enabled bearer , priority 0 [ 217.550910][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 217.556956][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 217.560386][ T7136] device syzkaller0 entered promiscuous mode [ 217.617478][ T7136] tipc: Resetting bearer [ 217.637895][ T7135] tipc: Resetting bearer [ 217.668161][ T7135] tipc: Disabling bearer [ 217.698834][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 217.704669][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 217.719400][ T2358] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 217.766432][ T4229] usb 4-1: USB disconnect, device number 27 [ 217.842002][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 217.957915][ T7145] device syzkaller0 entered promiscuous mode [ 218.008560][ T2358] usb 2-1: Using ep0 maxpacket: 16 [ 218.159014][ T2358] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.204168][ T2358] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.223890][ T2358] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 218.239822][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.263531][ T2358] usb 2-1: config 0 descriptor?? [ 218.288815][ T1108] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 218.398589][ T4229] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 218.458752][ T4227] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 218.478869][ T4174] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 218.648635][ T4227] usb 3-1: device descriptor read/64, error -71 [ 218.658502][ T1108] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 218.669161][ T1108] usb 1-1: config 0 has no interface number 0 [ 218.676105][ T1108] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 218.688030][ T1108] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.700223][ T1108] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.711192][ T1108] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 218.726210][ T1108] usb 1-1: config 0 interface 16 has no altsetting 0 [ 218.734015][ T1108] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 218.744159][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.757156][ T1108] usb 1-1: config 0 descriptor?? [ 218.818960][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.844364][ T4229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.848914][ T4174] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.879357][ T4174] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.910747][ T4174] usb 5-1: config 0 has no interface number 0 [ 218.928756][ T4227] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 218.937723][ T4174] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.958795][ T4229] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.992120][ T4174] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 219.003280][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.003782][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.042064][ T4174] usb 5-1: config 0 descriptor?? [ 219.060853][ T4229] usb 4-1: SerialNumber: syz [ 219.138834][ T4227] usb 3-1: device descriptor read/64, error -71 [ 219.268579][ T4227] usb usb3-port1: attempt power cycle [ 219.326354][ T7148] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 219.387669][ T4229] usb 4-1: skipping empty audio interface (v1) [ 219.443683][ T4229] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 219.465951][ T4229] usb 4-1: USB disconnect, device number 28 [ 219.678811][ T4227] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 219.721951][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.779025][ T4227] usb 3-1: device descriptor read/8, error -71 [ 220.048829][ T4227] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 220.148993][ T4227] usb 3-1: device descriptor read/8, error -71 [ 220.208772][ T4232] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 220.269025][ T4227] usb usb3-port1: unable to enumerate USB device [ 220.579177][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.613452][ T4232] usb 4-1: config 0 has no interfaces? [ 220.647700][ T4232] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.665588][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.678209][ T4232] usb 4-1: config 0 descriptor?? [ 220.948552][ T2358] usbhid 2-1:0.0: can't add hid device: -71 [ 220.956597][ T2358] usbhid: probe of 2-1:0.0 failed with error -71 [ 220.993220][ T2358] usb 2-1: USB disconnect, device number 26 [ 221.036687][ T4229] usb 4-1: USB disconnect, device number 29 [ 221.158981][ T4174] usb 5-1: string descriptor 0 read error: -71 [ 221.167427][ T4174] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 221.175573][ T1108] usbhid 1-1:0.16: can't add hid device: -71 [ 221.183038][ T1108] usbhid: probe of 1-1:0.16 failed with error -71 [ 221.203652][ T1108] usb 1-1: USB disconnect, device number 37 [ 221.221092][ T4174] usb 5-1: USB disconnect, device number 36 [ 221.498454][ T2358] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 221.778386][ T2358] usb 2-1: Using ep0 maxpacket: 32 [ 221.968796][ T2358] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.098895][ T2358] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 222.119935][ T2358] usb 2-1: config 102 has no interface number 0 [ 222.129688][ T2358] usb 2-1: config 102 interface 225 has no altsetting 0 [ 222.329048][ T2358] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 222.343390][ T2358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.362912][ T2358] usb 2-1: Product: syz [ 222.372155][ T2358] usb 2-1: Manufacturer: syz [ 222.383552][ T2358] usb 2-1: SerialNumber: syz [ 222.496930][ T7180] tipc: Enabled bearer , priority 0 [ 222.520143][ T7180] device syzkaller0 entered promiscuous mode [ 222.564146][ T7180] tipc: Resetting bearer [ 222.616359][ T7179] tipc: Resetting bearer [ 222.650025][ T7179] tipc: Disabling bearer [ 222.762837][ T7187] device syzkaller0 entered promiscuous mode [ 222.780652][ T2358] (null): radio-mr800 - initialization failed [ 222.806171][ T2358] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 222.815101][ T2358] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 222.854645][ T2358] usb 2-1: USB disconnect, device number 27 [ 223.048835][ T1108] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 223.188447][ T4174] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 223.409038][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.425439][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.435211][ T4174] usb 1-1: Using ep0 maxpacket: 16 [ 223.529024][ T1108] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 223.548075][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 223.559042][ T4174] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.582021][ T4174] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.594090][ T1108] usb 5-1: SerialNumber: syz [ 223.605348][ T4174] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 223.635371][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.658746][ T4232] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 223.674030][ T4174] usb 1-1: config 0 descriptor?? [ 223.874723][ T7189] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 223.933550][ T1108] usb 5-1: skipping empty audio interface (v1) [ 224.006531][ T1108] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 224.055253][ T4232] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.074685][ T1108] usb 5-1: USB disconnect, device number 37 [ 224.087308][ T4232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.123584][ T4232] usb 2-1: config 0 has no interface number 0 [ 224.141278][ T4232] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.164323][ T4232] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 224.184887][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.227757][ T4232] usb 2-1: config 0 descriptor?? [ 224.278562][ T4229] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 224.329716][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.518471][ T4229] usb 3-1: device descriptor read/64, error -71 [ 224.788458][ T4229] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 224.908991][ T1108] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 224.998406][ T4229] usb 3-1: device descriptor read/64, error -71 [ 225.119091][ T4229] usb usb3-port1: attempt power cycle [ 225.288719][ T1108] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 225.298528][ T4227] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 225.317693][ T1108] usb 5-1: config 0 has no interface number 0 [ 225.352201][ T1108] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 225.422581][ T1108] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.474122][ T1108] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.513330][ T1108] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 225.538746][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 225.548608][ T4229] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 225.587161][ T1108] usb 5-1: config 0 interface 16 has no altsetting 0 [ 225.614213][ T1108] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 225.643570][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.658786][ T4229] usb 3-1: device descriptor read/8, error -71 [ 225.679834][ T1108] usb 5-1: config 0 descriptor?? [ 225.822070][ T4227] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 225.847743][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.886079][ T4227] usb 4-1: Product: syz [ 225.903639][ T4227] usb 4-1: Manufacturer: syz [ 225.926897][ T4227] usb 4-1: SerialNumber: syz [ 225.962292][ T4227] usb 4-1: config 0 descriptor?? [ 225.978451][ T4229] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 226.011871][ T4227] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 226.035019][ T4227] pctv452e: pctv452e_power_ctrl: 1 [ 226.035019][ T4227] [ 226.066132][ T4227] usb 4-1: selecting invalid altsetting 3 [ 226.086919][ T4227] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 226.086919][ T4227] [ 226.108717][ T4229] usb 3-1: device descriptor read/8, error -71 [ 226.123526][ T4227] dvb-usb: bulk message failed: -22 (5/0) [ 226.148026][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.198740][ T4227] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 226.222724][ T4227] usb 4-1: media controller created [ 226.253543][ T4227] dvb-usb: bulk message failed: -22 (8/0) [ 226.270544][ T4229] usb usb3-port1: unable to enumerate USB device [ 226.275808][ T4227] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 226.307620][ T4227] dvb-usb: MAC address reading failed. [ 226.355359][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.449102][ T4174] usbhid 1-1:0.0: can't add hid device: -71 [ 226.457214][ T4174] usbhid: probe of 1-1:0.0 failed with error -71 [ 226.478711][ T4232] usb 2-1: string descriptor 0 read error: -71 [ 226.494586][ T4232] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 226.523832][ T4174] usb 1-1: USB disconnect, device number 38 [ 226.554205][ T4232] usb 2-1: USB disconnect, device number 28 [ 226.717296][ T4227] DVB: Unable to find symbol stb0899_attach() [ 226.731324][ T4227] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 226.929047][ T4227] rc_core: IR keymap rc-tt-1500 not found [ 226.935316][ T4227] Registered IR keymap rc-empty [ 226.967634][ T4227] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 227.050545][ T4227] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input43 [ 227.124705][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 227.163446][ T4227] pctv452e: pctv452e_power_ctrl: 0 [ 227.163446][ T4227] [ 227.196841][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 227.208823][ T7226] tipc: Enabled bearer , priority 0 [ 227.261524][ T7229] device syzkaller0 entered promiscuous mode [ 227.273976][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 227.288008][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 227.344719][ T7230] device syzkaller0 entered promiscuous mode [ 227.369575][ T7226] tipc: Resetting bearer [ 227.408877][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 227.415027][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 227.492704][ T7225] tipc: Resetting bearer [ 227.513288][ T7225] tipc: Disabling bearer [ 227.568877][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 227.575208][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 227.729365][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 227.735629][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 227.828446][ T4262] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 227.860082][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 227.870292][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 227.939089][ T4174] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 228.046286][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 228.052685][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 228.118416][ T4262] usb 1-1: Using ep0 maxpacket: 32 [ 228.192786][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 228.222674][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 228.308568][ T4262] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.319620][ T4174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.369013][ T1108] usbhid 5-1:0.16: can't add hid device: -71 [ 228.376293][ T1108] usbhid: probe of 5-1:0.16 failed with error -71 [ 228.396522][ T4174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.418630][ T4262] usb 1-1: config 102 has an invalid interface number: 225 but max is 0 [ 228.448850][ T4262] usb 1-1: config 102 has no interface number 0 [ 228.448852][ T1108] usb 5-1: USB disconnect, device number 38 [ 228.448884][ T4262] usb 1-1: config 102 interface 225 has no altsetting 0 [ 228.461824][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 228.485240][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 228.529070][ T4174] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.558794][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.577413][ T4174] usb 3-1: SerialNumber: syz [ 228.589184][ T4227] usb 4-1: USB disconnect, device number 30 [ 228.668711][ T4262] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 228.693355][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 228.695621][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.728408][ T4262] usb 1-1: Product: syz [ 228.732774][ T4262] usb 1-1: Manufacturer: syz [ 228.737391][ T4262] usb 1-1: SerialNumber: syz [ 228.838845][ T1108] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 228.851454][ T7237] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 228.901224][ T4174] usb 3-1: skipping empty audio interface (v1) [ 228.943112][ T4174] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 228.962356][ T4174] usb 3-1: USB disconnect, device number 38 [ 228.984137][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.069007][ T4227] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 229.080293][ T4262] (null): radio-mr800 - initialization failed [ 229.086625][ T4262] radio-mr800: probe of 1-1:102.225 failed with error -22 [ 229.098820][ T4262] usbhid 1-1:102.225: couldn't find an input interrupt endpoint [ 229.127727][ T4262] usb 1-1: USB disconnect, device number 39 [ 229.208469][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.228788][ T1108] usb 5-1: config 0 has no interfaces? [ 229.234559][ T1108] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.244967][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.263600][ T1108] usb 5-1: config 0 descriptor?? [ 229.318946][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 229.441184][ T4227] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.461354][ T4227] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.468553][ T4229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 229.502653][ T4227] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 229.542939][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.579359][ T4227] usb 4-1: config 0 descriptor?? [ 229.589070][ T1111] usb 5-1: USB disconnect, device number 39 [ 229.888375][ T4262] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 229.909349][ T4229] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.925550][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.962072][ T4229] usb 2-1: config 0 has no interface number 0 [ 229.988970][ T4229] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.008759][ T4229] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 230.018055][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.045484][ T4229] usb 2-1: config 0 descriptor?? [ 230.120418][ T4262] usb 3-1: device descriptor read/64, error -71 [ 230.420137][ T4262] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 230.629292][ T4262] usb 3-1: device descriptor read/64, error -71 [ 230.761412][ T4262] usb usb3-port1: attempt power cycle [ 231.198583][ T4262] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 231.318724][ T4262] usb 3-1: device descriptor read/8, error -71 [ 231.608464][ T4262] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 231.670323][ T7269] device syzkaller0 entered promiscuous mode [ 231.728816][ T4262] usb 3-1: device descriptor read/8, error -71 [ 231.859936][ T4262] usb usb3-port1: unable to enumerate USB device [ 232.017078][ T7274] tipc: Enabled bearer , priority 0 [ 232.033774][ T7274] device syzkaller0 entered promiscuous mode [ 232.064737][ T7274] tipc: Resetting bearer [ 232.077628][ T7273] tipc: Resetting bearer [ 232.132939][ T7273] tipc: Disabling bearer [ 232.231318][ T4229] usb 2-1: string descriptor 0 read error: -71 [ 232.254833][ T4229] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 232.327802][ T4229] usb 2-1: USB disconnect, device number 29 [ 232.748452][ T1111] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 232.753761][ T4227] usbhid 4-1:0.0: can't add hid device: -71 [ 232.779748][ T4227] usbhid: probe of 4-1:0.0 failed with error -71 [ 232.807963][ T4227] usb 4-1: USB disconnect, device number 31 [ 232.969020][ T1108] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 233.078602][ T2358] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 233.229211][ T1108] usb 1-1: Using ep0 maxpacket: 8 [ 233.237749][ T1111] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 233.252165][ T1111] usb 5-1: config 0 has no interface number 0 [ 233.263224][ T1111] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 233.284935][ T1111] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.304766][ T1111] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.325416][ T1111] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 233.345766][ T1111] usb 5-1: config 0 interface 16 has no altsetting 0 [ 233.355867][ T1111] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 233.376121][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.417604][ T1111] usb 5-1: config 0 descriptor?? [ 233.428906][ T4227] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 233.489650][ T2358] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.512958][ T2358] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.529443][ T1108] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 233.541825][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.572814][ T1108] usb 1-1: Product: syz [ 233.593665][ T1108] usb 1-1: Manufacturer: syz [ 233.613425][ T1108] usb 1-1: SerialNumber: syz [ 233.639098][ T2358] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.659339][ T1108] usb 1-1: config 0 descriptor?? [ 233.664580][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.678872][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 233.715496][ T2358] usb 3-1: SerialNumber: syz [ 233.755101][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 233.774064][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 233.774064][ T1108] [ 233.804726][ T1108] usb 1-1: selecting invalid altsetting 3 [ 233.833531][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 233.833531][ T1108] [ 233.859030][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.876137][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 233.949045][ T4227] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 233.959404][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.969288][ T4227] usb 4-1: config 102 has no interface number 0 [ 233.975876][ T4227] usb 4-1: config 102 interface 225 has no altsetting 0 [ 233.999900][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 234.010558][ T7286] netlink: 'syz.2.1031': attribute type 10 has an invalid length. [ 234.020683][ T1108] usb 1-1: media controller created [ 234.026044][ T1108] dvb-usb: bulk message failed: -22 (8/0) [ 234.044007][ T1108] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 234.052784][ T1108] dvb-usb: MAC address reading failed. [ 234.061295][ T2358] usb 3-1: skipping empty audio interface (v1) [ 234.107432][ T2358] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 234.120867][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.133143][ T2358] usb 3-1: USB disconnect, device number 43 [ 234.161797][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.189017][ T4227] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 234.219488][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.241038][ T4227] usb 4-1: Product: syz [ 234.257857][ T4227] usb 4-1: Manufacturer: syz [ 234.281509][ T4227] usb 4-1: SerialNumber: syz [ 234.343246][ T1108] DVB: Unable to find symbol stb0899_attach() [ 234.363888][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 234.540790][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 234.546879][ T1108] Registered IR keymap rc-empty [ 234.585208][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 234.626061][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input44 [ 234.676755][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 234.705367][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 234.705367][ T1108] [ 234.741745][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 234.755742][ T4227] (null): radio-mr800 - initialization failed [ 234.771093][ T4227] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 234.802948][ T4227] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 234.859898][ T4227] usb 4-1: USB disconnect, device number 32 [ 234.887121][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 234.897194][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 234.908450][ T2358] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 234.972050][ T7300] device syzkaller0 entered promiscuous mode [ 235.038871][ T4232] dvb-usb: bulk message failed: -22 (4/0) [ 235.044968][ T4232] dvb-usb: error -22 while querying for an remote control event. [ 235.179067][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 235.185877][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 235.279071][ T2358] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 235.301075][ T2358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.328842][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 235.336200][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 235.344452][ T2358] usb 3-1: config 0 has no interface number 0 [ 235.344500][ T2358] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.344525][ T2358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.380417][ T2358] usb 3-1: config 0 descriptor?? [ 235.439748][ T2358] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 235.611046][ T4232] dvb-usb: bulk message failed: -22 (4/0) [ 235.638451][ T4232] dvb-usb: error -22 while querying for an remote control event. [ 235.695791][ T4262] usb 3-1: USB disconnect, device number 44 [ 235.748725][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 235.764965][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 235.908939][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 235.914820][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 235.918484][ T1111] usbhid 5-1:0.16: can't add hid device: -71 [ 235.943608][ T7314] tipc: Enabled bearer , priority 0 [ 235.946589][ T1111] usbhid: probe of 5-1:0.16 failed with error -71 [ 235.968502][ T4232] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 235.984669][ T1111] usb 5-1: USB disconnect, device number 40 [ 236.001640][ T7315] device syzkaller0 entered promiscuous mode [ 236.030257][ T4229] usb 1-1: USB disconnect, device number 40 [ 236.099456][ T7314] tipc: Resetting bearer [ 236.125027][ T7313] tipc: Resetting bearer [ 236.145116][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 236.164412][ T7313] tipc: Disabling bearer [ 236.388806][ T4232] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.407760][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.442902][ T4232] usb 4-1: config 0 has no interface number 0 [ 236.463030][ T4232] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.497303][ T4232] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 236.508861][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.529462][ T4232] usb 4-1: config 0 descriptor?? [ 236.588937][ T4229] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 236.678994][ T4227] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 236.818550][ T4229] usb 1-1: device descriptor read/64, error -71 [ 236.938848][ T4227] usb 5-1: Using ep0 maxpacket: 16 [ 237.048375][ T1111] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 237.059094][ T4227] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.076489][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.085800][ T4227] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 237.100032][ T4229] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 237.102981][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.133344][ T4227] usb 5-1: config 0 descriptor?? [ 237.308556][ T4229] usb 1-1: device descriptor read/64, error -71 [ 237.428587][ T4229] usb usb1-port1: attempt power cycle [ 237.448549][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.459010][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.548674][ T1111] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.557914][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.578371][ T1111] usb 2-1: SerialNumber: syz [ 237.853809][ T7325] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 237.861787][ T4229] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 237.911832][ T1111] usb 2-1: skipping empty audio interface (v1) [ 237.952356][ T1111] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 237.959698][ T4229] usb 1-1: device descriptor read/8, error -71 [ 237.986061][ T1111] usb 2-1: USB disconnect, device number 30 [ 238.209302][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.228365][ T4229] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 238.368451][ T4229] usb 1-1: device descriptor read/8, error -71 [ 238.488542][ T4229] usb usb1-port1: unable to enumerate USB device [ 238.532753][ T7333] device syzkaller0 entered promiscuous mode [ 238.568909][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 238.594215][ T4232] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 238.626460][ T4232] usb 4-1: USB disconnect, device number 33 [ 239.068988][ T4232] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 239.318841][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 239.478909][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.569708][ T4232] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 239.597100][ T4232] usb 4-1: config 102 has no interface number 0 [ 239.638011][ T4232] usb 4-1: config 102 interface 225 has no altsetting 0 [ 239.668864][ T4174] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 239.849079][ T4232] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 239.858260][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.881745][ T4232] usb 4-1: Product: syz [ 239.900199][ T4232] usb 4-1: Manufacturer: syz [ 239.904939][ T4232] usb 4-1: SerialNumber: syz [ 239.956944][ T7348] tipc: Enabled bearer , priority 0 [ 239.964507][ T4227] usbhid 5-1:0.0: can't add hid device: -71 [ 239.971245][ T4227] usbhid: probe of 5-1:0.0 failed with error -71 [ 239.979572][ T7348] device syzkaller0 entered promiscuous mode [ 239.995543][ T4227] usb 5-1: USB disconnect, device number 41 [ 240.020543][ T7348] tipc: Resetting bearer [ 240.036270][ T7347] tipc: Resetting bearer [ 240.048903][ T4174] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 240.058269][ T4174] usb 1-1: config 0 has no interface number 0 [ 240.065591][ T4174] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 240.081846][ T4174] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.094154][ T4174] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.107525][ T4174] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 240.122893][ T4174] usb 1-1: config 0 interface 16 has no altsetting 0 [ 240.130782][ T4174] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 240.141056][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.156294][ T4174] usb 1-1: config 0 descriptor?? [ 240.169356][ T7347] tipc: Disabling bearer [ 240.260202][ T4232] (null): radio-mr800 - initialization failed [ 240.266551][ T4232] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 240.316255][ T4232] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 240.360347][ T4232] usb 4-1: USB disconnect, device number 34 [ 240.548828][ T1108] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 240.638402][ T2358] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 240.748861][ T4227] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 240.802459][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 241.068595][ T2358] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.085257][ T2358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.119247][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.137755][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.147128][ T2358] usb 2-1: config 0 has no interface number 0 [ 241.147522][ T1108] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 241.168802][ T2358] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.182174][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.188340][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.198665][ T5509] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 241.221415][ T1108] usb 3-1: Product: syz [ 241.235062][ T2358] usb 2-1: config 0 descriptor?? [ 241.240158][ T1108] usb 3-1: Manufacturer: syz [ 241.247833][ T1108] usb 3-1: SerialNumber: syz [ 241.270932][ T4227] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 241.289556][ T2358] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 241.299845][ T1108] usb 3-1: config 0 descriptor?? [ 241.323750][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 241.352701][ T4227] usb 5-1: SerialNumber: syz [ 241.361232][ T1108] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 241.384640][ T1108] pctv452e: pctv452e_power_ctrl: 1 [ 241.384640][ T1108] [ 241.413036][ T1108] usb 3-1: selecting invalid altsetting 3 [ 241.437325][ T1108] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 241.437325][ T1108] [ 241.467662][ T1108] dvb-usb: bulk message failed: -22 (5/0) [ 241.500803][ T1108] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.545980][ T4260] usb 2-1: USB disconnect, device number 31 [ 241.552627][ T1108] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 241.569019][ T5509] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.581269][ T1108] usb 3-1: media controller created [ 241.593505][ T5509] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.607292][ T1108] dvb-usb: bulk message failed: -22 (8/0) [ 241.625774][ T1108] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 241.638134][ T7360] netlink: 'syz.4.1057': attribute type 10 has an invalid length. [ 241.647492][ T5509] usb 4-1: config 0 has no interface number 0 [ 241.667759][ T5509] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.683940][ T1108] dvb-usb: MAC address reading failed. [ 241.701145][ T4227] usb 5-1: skipping empty audio interface (v1) [ 241.722566][ T5509] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 241.762184][ T4227] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 241.772974][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.782251][ T5509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.794891][ T4227] usb 5-1: USB disconnect, device number 42 [ 241.817038][ T5509] usb 4-1: config 0 descriptor?? [ 241.947030][ T1108] DVB: Unable to find symbol stb0899_attach() [ 241.966910][ T1108] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 242.039788][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.198828][ T1108] rc_core: IR keymap rc-tt-1500 not found [ 242.221156][ T1108] Registered IR keymap rc-empty [ 242.242812][ T1108] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 242.277141][ T1108] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input45 [ 242.310725][ T1108] dvb-usb: schedule remote query interval to 100 msecs. [ 242.334466][ T1108] pctv452e: pctv452e_power_ctrl: 0 [ 242.334466][ T1108] [ 242.336466][ T7369] device syzkaller0 entered promiscuous mode [ 242.370137][ T1108] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 242.461560][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 242.470181][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 242.648852][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 242.654623][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 242.789879][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 242.797138][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 242.878413][ T1111] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 242.928904][ T4174] usbhid 1-1:0.16: can't add hid device: -71 [ 242.935071][ T4174] usbhid: probe of 1-1:0.16 failed with error -71 [ 242.981688][ T4174] usb 1-1: USB disconnect, device number 45 [ 243.042293][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 243.048101][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 243.088429][ T1111] usb 5-1: device descriptor read/64, error -71 [ 243.209426][ T1108] dvb-usb: bulk message failed: -22 (4/0) [ 243.215240][ T1108] dvb-usb: error -22 while querying for an remote control event. [ 243.250518][ T4229] usb 3-1: USB disconnect, device number 45 [ 243.337435][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 243.359722][ T1111] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 243.389004][ T4174] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 243.588592][ T1111] usb 5-1: device descriptor read/64, error -71 [ 243.628907][ T4174] usb 1-1: Using ep0 maxpacket: 8 [ 243.729132][ T1111] usb usb5-port1: attempt power cycle [ 243.908967][ T5509] usb 4-1: string descriptor 0 read error: -71 [ 243.915341][ T4174] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 243.954588][ T5509] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 243.971563][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.006455][ T5509] usb 4-1: USB disconnect, device number 35 [ 244.014227][ T4174] usb 1-1: Product: syz [ 244.037198][ T4174] usb 1-1: Manufacturer: syz [ 244.060765][ T4174] usb 1-1: SerialNumber: syz [ 244.090606][ T4174] usb 1-1: config 0 descriptor?? [ 244.140261][ T4174] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 244.158845][ T1111] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 244.172512][ T4174] pctv452e: pctv452e_power_ctrl: 1 [ 244.172512][ T4174] [ 244.218623][ T4174] usb 1-1: selecting invalid altsetting 3 [ 244.244841][ T4174] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 244.244841][ T4174] [ 244.265803][ T4174] dvb-usb: bulk message failed: -22 (5/0) [ 244.301607][ T4174] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.311883][ T1111] usb 5-1: device descriptor read/8, error -71 [ 244.339126][ T4174] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 244.359514][ T4174] usb 1-1: media controller created [ 244.365143][ T4174] dvb-usb: bulk message failed: -22 (8/0) [ 244.375745][ T4174] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 244.412094][ T4174] dvb-usb: MAC address reading failed. [ 244.462708][ T4174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.531824][ T7389] tipc: Enabled bearer , priority 0 [ 244.551409][ T7389] device syzkaller0 entered promiscuous mode [ 244.556296][ T4174] DVB: Unable to find symbol stb0899_attach() [ 244.564779][ T5509] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 244.584296][ T4174] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 244.584717][ T7389] tipc: Resetting bearer [ 244.599632][ T1111] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 244.643585][ T7388] tipc: Resetting bearer [ 244.685463][ T7388] tipc: Disabling bearer [ 244.728563][ T1111] usb 5-1: device descriptor read/8, error -71 [ 244.783826][ T4174] rc_core: IR keymap rc-tt-1500 not found [ 244.795034][ T4174] Registered IR keymap rc-empty [ 244.817654][ T4174] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 244.834849][ T4174] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input46 [ 244.846271][ T5509] usb 4-1: Using ep0 maxpacket: 16 [ 244.857405][ T4174] dvb-usb: schedule remote query interval to 100 msecs. [ 244.865098][ T4174] pctv452e: pctv452e_power_ctrl: 0 [ 244.865098][ T4174] [ 244.868536][ T1111] usb usb5-port1: unable to enumerate USB device [ 244.880026][ T4174] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 244.969799][ T5509] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.003221][ T5509] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.016807][ T5509] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 245.040900][ T5509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.073243][ T5509] usb 4-1: config 0 descriptor?? [ 245.083518][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 245.093691][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 245.220793][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 245.227358][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 245.350149][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 245.357007][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 245.492390][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 245.501374][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 245.618931][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 245.624949][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 245.738404][ T4262] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 245.748943][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 245.754710][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 245.828467][ T1111] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 245.889921][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 245.896992][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 245.998467][ T4262] usb 2-1: Using ep0 maxpacket: 32 [ 246.028423][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 246.034254][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 246.088816][ T4174] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 246.178693][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 246.184580][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 246.200188][ T4262] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.239305][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.275756][ T4227] usb 1-1: USB disconnect, device number 46 [ 246.290329][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.308512][ T4262] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 246.334394][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 246.381125][ T4262] usb 2-1: config 102 has no interface number 0 [ 246.415077][ T7408] device syzkaller0 entered promiscuous mode [ 246.436704][ T4262] usb 2-1: config 102 interface 225 has no altsetting 0 [ 246.468824][ T4174] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 246.484975][ T4174] usb 5-1: config 0 has no interface number 0 [ 246.509175][ T4174] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 246.549569][ T4174] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.558680][ T1111] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.580677][ T4174] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.591250][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.591290][ T1111] usb 3-1: SerialNumber: syz [ 246.631455][ T4174] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 246.673468][ T4174] usb 5-1: config 0 interface 16 has no altsetting 0 [ 246.678625][ T4262] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 246.689323][ T4174] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 246.725296][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.726247][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.777646][ T4174] usb 5-1: config 0 descriptor?? [ 246.782973][ T4262] usb 2-1: Product: syz [ 246.782996][ T4262] usb 2-1: Manufacturer: syz [ 246.783012][ T4262] usb 2-1: SerialNumber: syz [ 246.852824][ T7398] netlink: 'syz.2.1069': attribute type 10 has an invalid length. [ 246.961636][ T1111] usb 3-1: skipping empty audio interface (v1) [ 247.047460][ T1111] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 247.086105][ T1111] usb 3-1: USB disconnect, device number 46 [ 247.127573][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.171508][ T4262] (null): radio-mr800 - initialization failed [ 247.182365][ T4262] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 247.204219][ T4262] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 247.244289][ T4262] usb 2-1: USB disconnect, device number 32 [ 247.314304][ T2358] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 247.711280][ T2358] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.723905][ T2358] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.771137][ T2358] usb 1-1: config 0 has no interface number 0 [ 247.795858][ T2358] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.836588][ T2358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.880792][ T2358] usb 1-1: config 0 descriptor?? [ 247.950904][ T2358] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 248.036286][ T4262] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 248.088836][ T4227] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 248.198935][ T5509] usbhid 4-1:0.0: can't add hid device: -71 [ 248.206546][ T5509] usbhid: probe of 4-1:0.0 failed with error -71 [ 248.256148][ T5509] usb 4-1: USB disconnect, device number 36 [ 248.328700][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 248.334273][ T4232] usb 1-1: USB disconnect, device number 47 [ 248.478962][ T4262] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.498862][ T4262] usb 3-1: config 0 has no interface number 0 [ 248.524252][ T4262] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.592845][ T4262] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 248.633726][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.679734][ T4262] usb 3-1: config 0 descriptor?? [ 248.708991][ T4227] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 248.738190][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.795655][ T4227] usb 2-1: Product: syz [ 248.817341][ T4227] usb 2-1: Manufacturer: syz [ 248.842620][ T4227] usb 2-1: SerialNumber: syz [ 248.869568][ T4227] usb 2-1: config 0 descriptor?? [ 248.920443][ T4227] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 248.938151][ T4227] pctv452e: pctv452e_power_ctrl: 1 [ 248.938151][ T4227] [ 248.996121][ T4227] usb 2-1: selecting invalid altsetting 3 [ 249.023752][ T4227] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 249.023752][ T4227] [ 249.060949][ T4227] dvb-usb: bulk message failed: -22 (5/0) [ 249.087999][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.142461][ T4227] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 249.218849][ T4227] usb 2-1: media controller created [ 249.246068][ T4227] dvb-usb: bulk message failed: -22 (8/0) [ 249.276613][ T4227] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 249.325253][ T4227] dvb-usb: MAC address reading failed. [ 249.393968][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.597854][ T4227] DVB: Unable to find symbol stb0899_attach() [ 249.613244][ T4227] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 249.841193][ T4227] rc_core: IR keymap rc-tt-1500 not found [ 249.856337][ T4227] Registered IR keymap rc-empty [ 249.869291][ T4174] usbhid 5-1:0.16: can't add hid device: -71 [ 249.880070][ T4174] usbhid: probe of 5-1:0.16 failed with error -71 [ 249.893386][ T7432] tipc: Enabled bearer , priority 0 [ 249.906684][ T4227] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 249.918235][ T7432] device syzkaller0 entered promiscuous mode [ 249.949269][ T4174] usb 5-1: USB disconnect, device number 47 [ 249.982432][ T4227] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input47 [ 250.026171][ T7432] tipc: Resetting bearer [ 250.057409][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 250.067191][ T7431] tipc: Resetting bearer [ 250.088777][ T4227] pctv452e: pctv452e_power_ctrl: 0 [ 250.088777][ T4227] [ 250.101645][ T7431] tipc: Disabling bearer [ 250.122291][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 250.198875][ T4227] dvb-usb: bulk message failed: -22 (4/0) [ 250.211312][ T4227] dvb-usb: error -22 while querying for an remote control event. [ 250.372433][ T4174] dvb-usb: bulk message failed: -22 (4/0) [ 250.383666][ T4174] dvb-usb: error -22 while querying for an remote control event. [ 250.426609][ T4227] usb 2-1: USB disconnect, device number 33 [ 250.485015][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 250.568972][ T4174] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 250.578436][ T4262] usb 3-1: string descriptor 0 read error: -71 [ 250.587717][ T4262] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 250.600684][ T4262] usb 3-1: USB disconnect, device number 47 [ 250.726686][ T7444] device syzkaller0 entered promiscuous mode [ 250.939083][ T4174] usb 5-1: config 0 has no interfaces? [ 251.019072][ T4174] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 251.029114][ T4227] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 251.045345][ T4174] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 251.054117][ T4174] usb 5-1: Manufacturer: syz [ 251.064207][ T13] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 251.089477][ T4174] usb 5-1: config 0 descriptor?? [ 251.148528][ T4262] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 251.328784][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 251.388958][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.407017][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.422038][ T4262] usb 3-1: Using ep0 maxpacket: 16 [ 251.488930][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 251.518745][ T4227] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.533555][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.548538][ T4262] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.549052][ T4227] usb 2-1: SerialNumber: syz [ 251.568802][ T13] usb 1-1: config 102 has an invalid interface number: 225 but max is 0 [ 251.577329][ T13] usb 1-1: config 102 has no interface number 0 [ 251.589374][ T4262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.609242][ T4262] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 251.618795][ T13] usb 1-1: config 102 interface 225 has no altsetting 0 [ 251.626136][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.642698][ T4262] usb 3-1: config 0 descriptor?? [ 251.746195][ T2358] usb 5-1: USB disconnect, device number 48 [ 251.802724][ T13] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 251.815467][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.835254][ T13] usb 1-1: Product: syz [ 251.842683][ T13] usb 1-1: Manufacturer: syz [ 251.857187][ T13] usb 1-1: SerialNumber: syz [ 251.875143][ T7442] netlink: 'syz.1.1084': attribute type 10 has an invalid length. [ 251.910218][ T4227] usb 2-1: skipping empty audio interface (v1) [ 251.933451][ T4227] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 251.965721][ T4227] usb 2-1: USB disconnect, device number 34 [ 251.969651][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.200612][ T13] (null): radio-mr800 - initialization failed [ 252.207091][ T13] radio-mr800: probe of 1-1:102.225 failed with error -22 [ 252.224115][ T13] usbhid 1-1:102.225: couldn't find an input interrupt endpoint [ 252.237060][ T13] usb 1-1: USB disconnect, device number 48 [ 252.558762][ T4227] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 252.708467][ T2358] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 252.840677][ T7468] device syzkaller0 entered promiscuous mode [ 252.928586][ T4227] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 252.942765][ T4227] usb 4-1: config 0 has no interface number 0 [ 252.964552][ T4227] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 252.992535][ T4227] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.025475][ T4227] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.057583][ T4227] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 253.097367][ T4227] usb 4-1: config 0 interface 16 has no altsetting 0 [ 253.117175][ T4227] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 253.144560][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.158567][ T2358] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.178767][ T4227] usb 4-1: config 0 descriptor?? [ 253.208382][ T2358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.311431][ T2358] usb 2-1: config 0 has no interface number 0 [ 253.339948][ T2358] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.425955][ T7475] tipc: Enabled bearer , priority 0 [ 253.438899][ T4232] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 253.444672][ T2358] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.477912][ T2358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.520766][ T2358] usb 2-1: config 0 descriptor?? [ 253.527909][ T7475] device syzkaller0 entered promiscuous mode [ 253.577015][ T7474] tipc: Resetting bearer [ 253.584470][ T2358] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 253.665562][ T7474] tipc: Disabling bearer [ 253.828748][ T4232] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.846188][ T4232] usb 1-1: config 0 has no interface number 0 [ 253.865944][ T2358] usb 2-1: USB disconnect, device number 35 [ 253.893629][ T4232] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.945794][ T4232] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 253.983689][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.013517][ T4232] usb 1-1: config 0 descriptor?? [ 254.018734][ T7481] device syzkaller0 entered promiscuous mode [ 254.568555][ T4262] usbhid 3-1:0.0: can't add hid device: -71 [ 254.574664][ T4262] usbhid: probe of 3-1:0.0 failed with error -71 [ 254.627712][ T4262] usb 3-1: USB disconnect, device number 48 [ 255.711845][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.869804][ T4174] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 255.900022][ T4232] usb 1-1: string descriptor 0 read error: -71 [ 255.923605][ T4232] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 255.938412][ T13] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 256.010085][ T4227] usbhid 4-1:0.16: can't add hid device: -71 [ 256.016297][ T4227] usbhid: probe of 4-1:0.16 failed with error -71 [ 256.022989][ T7501] tipc: Enabling of bearer rejected, failed to enable media [ 256.034086][ T4232] usb 1-1: USB disconnect, device number 49 [ 256.083614][ T4227] usb 4-1: USB disconnect, device number 37 [ 256.129555][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 256.178928][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 256.238635][ T4174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.249296][ T4174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.338955][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.347021][ T4174] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.351620][ T7511] tipc: Enabled bearer , priority 0 [ 256.359855][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.386190][ T7511] device syzkaller0 entered promiscuous mode [ 256.394147][ T4174] usb 2-1: SerialNumber: syz [ 256.416871][ T7511] tipc: Resetting bearer [ 256.423423][ T13] usb 3-1: config 102 has an invalid interface number: 225 but max is 0 [ 256.438781][ T13] usb 3-1: config 102 has no interface number 0 [ 256.445219][ T13] usb 3-1: config 102 interface 225 has no altsetting 0 [ 256.453531][ T7510] tipc: Resetting bearer [ 256.484145][ T4227] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 256.494689][ T7510] tipc: Disabling bearer [ 256.516453][ T7515] device syzkaller0 entered promiscuous mode [ 256.619246][ T13] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 256.628855][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.637039][ T13] usb 3-1: Product: syz [ 256.641721][ T13] usb 3-1: Manufacturer: syz [ 256.646326][ T13] usb 3-1: SerialNumber: syz [ 256.657988][ T7493] netlink: 'syz.1.1100': attribute type 10 has an invalid length. [ 256.692214][ T4174] usb 2-1: skipping empty audio interface (v1) [ 256.706375][ T4174] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 256.719233][ T4174] usb 2-1: USB disconnect, device number 36 [ 256.848610][ T4227] usb 4-1: config 0 has no interfaces? [ 256.854276][ T5509] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 256.898539][ T4229] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 256.929145][ T4227] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 256.940147][ T4227] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 256.940708][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.948180][ T4227] usb 4-1: Manufacturer: syz [ 256.957626][ T4227] usb 4-1: config 0 descriptor?? [ 256.977995][ T13] (null): radio-mr800 - initialization failed [ 256.984975][ T13] radio-mr800: probe of 3-1:102.225 failed with error -22 [ 256.993098][ T13] usbhid 3-1:102.225: couldn't find an input interrupt endpoint [ 257.003722][ T13] usb 3-1: USB disconnect, device number 49 [ 257.098670][ T5509] usb 1-1: Using ep0 maxpacket: 16 [ 257.219022][ T5509] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.230757][ T5509] usb 1-1: config 0 interface 0 has no altsetting 0 [ 257.237749][ T5509] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 257.282497][ T5509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.317501][ T5509] usb 1-1: config 0 descriptor?? [ 257.368899][ T4229] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.388478][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.433717][ T4229] usb 5-1: config 0 has no interface number 0 [ 257.457333][ T4229] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.490706][ T4229] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.513673][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.534801][ T4229] usb 5-1: config 0 descriptor?? [ 257.599915][ T4229] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 257.661196][ T2358] usb 4-1: USB disconnect, device number 38 [ 257.855033][ T4262] usb 5-1: USB disconnect, device number 49 [ 257.938491][ T4229] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 258.214624][ T7535] tipc: Enabled bearer , priority 0 [ 258.246605][ T7535] device syzkaller0 entered promiscuous mode [ 258.368466][ T4229] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 258.391655][ T4229] usb 3-1: config 0 has no interface number 0 [ 258.406667][ T7534] tipc: Resetting bearer [ 258.420697][ T4229] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 258.457039][ T7534] tipc: Disabling bearer [ 258.485189][ T4229] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.531363][ T4229] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.567607][ T4229] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 258.618822][ T4229] usb 3-1: config 0 interface 16 has no altsetting 0 [ 258.655001][ T4229] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 258.676587][ T7539] tipc: Enabling of bearer rejected, failed to enable media [ 258.691628][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.738274][ T4229] usb 3-1: config 0 descriptor?? [ 258.826777][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 259.387112][ T7556] device syzkaller0 entered promiscuous mode [ 259.859521][ T13] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 260.128361][ T21] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 260.229032][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.243019][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.338929][ T5509] usbhid 1-1:0.0: can't add hid device: -71 [ 260.345165][ T13] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.369853][ T5509] usbhid: probe of 1-1:0.0 failed with error -71 [ 260.376475][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.388393][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 260.395825][ T5509] usb 1-1: USB disconnect, device number 50 [ 260.405777][ T13] usb 2-1: SerialNumber: syz [ 260.588428][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 260.682971][ T7559] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 260.698493][ T21] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 260.706878][ T21] usb 5-1: config 102 has no interface number 0 [ 260.742100][ T21] usb 5-1: config 102 interface 225 has no altsetting 0 [ 260.761910][ T13] usb 2-1: skipping empty audio interface (v1) [ 260.812652][ T13] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 260.867703][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.891558][ T13] usb 2-1: USB disconnect, device number 37 [ 260.958762][ T21] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 260.995494][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.016180][ T21] usb 5-1: Product: syz [ 261.022242][ T21] usb 5-1: Manufacturer: syz [ 261.040750][ T4229] usbhid 3-1:0.16: can't add hid device: -71 [ 261.057325][ T4229] usbhid: probe of 3-1:0.16 failed with error -71 [ 261.067346][ T21] usb 5-1: SerialNumber: syz [ 261.088130][ T4229] usb 3-1: USB disconnect, device number 50 [ 261.132982][ T7571] tipc: Enabled bearer , priority 0 [ 261.178161][ T7571] device syzkaller0 entered promiscuous mode [ 261.335299][ T7574] tipc: Enabling of bearer rejected, failed to enable media [ 261.399490][ T7570] tipc: Resetting bearer [ 261.444266][ T7570] tipc: Disabling bearer [ 261.452472][ T21] (null): radio-mr800 - initialization failed [ 261.462980][ T21] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 261.470746][ T4229] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 261.486479][ T21] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 261.508738][ T21] usb 5-1: USB disconnect, device number 50 [ 261.763366][ T7593] device syzkaller0 entered promiscuous mode [ 261.888646][ T4229] usb 3-1: config 0 has no interfaces? [ 261.958600][ T7601] netlink: 'syz.4.1134': attribute type 3 has an invalid length. [ 261.966660][ T7601] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1134'. [ 261.978574][ T4229] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 261.998676][ T4229] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 262.006846][ T4229] usb 3-1: Manufacturer: syz [ 262.019058][ T5509] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 262.040007][ T4229] usb 3-1: config 0 descriptor?? [ 262.218370][ T4262] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 262.358540][ T4229] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 262.378914][ T5509] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.387082][ T5509] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.408094][ T5509] usb 2-1: config 0 has no interface number 0 [ 262.414687][ T5509] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.448812][ T5509] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.458792][ T5509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.495161][ T5509] usb 2-1: config 0 descriptor?? [ 262.510112][ T4262] usb 1-1: Using ep0 maxpacket: 16 [ 262.550067][ T5509] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 262.648654][ T4262] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.667345][ T4262] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.681818][ T4262] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 262.691526][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.709276][ T4262] usb 1-1: config 0 descriptor?? [ 262.733264][ T21] usb 3-1: USB disconnect, device number 51 [ 262.758541][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.772436][ T4229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.814099][ T4227] usb 2-1: USB disconnect, device number 38 [ 262.873120][ T4229] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 262.885910][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.908866][ T4229] usb 4-1: SerialNumber: syz [ 263.164506][ T7603] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 263.238365][ T4229] usb 4-1: skipping empty audio interface (v1) [ 263.291892][ T4229] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 263.314823][ T4229] usb 4-1: USB disconnect, device number 39 [ 263.566148][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.599541][ T7617] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 263.755094][ T7617] team0: Port device dummy0 added [ 263.790920][ T7618] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 263.872471][ T7618] team0: Port device dummy0 removed [ 263.932147][ T7618] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.065920][ T7624] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1140'. [ 264.568863][ T4227] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 264.818770][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 264.979756][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.088988][ T4227] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 265.091485][ T2358] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 265.107884][ T4227] usb 4-1: config 102 has no interface number 0 [ 265.115137][ T4227] usb 4-1: config 102 interface 225 has no altsetting 0 [ 265.280876][ T13] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 265.318426][ T4262] usbhid 1-1:0.0: can't add hid device: -71 [ 265.319783][ T4227] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 265.324740][ T4262] usbhid: probe of 1-1:0.0 failed with error -71 [ 265.343695][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.353036][ T4227] usb 4-1: Product: syz [ 265.357225][ T4227] usb 4-1: Manufacturer: syz [ 265.363790][ T4262] usb 1-1: USB disconnect, device number 51 [ 265.371790][ T4227] usb 4-1: SerialNumber: syz [ 265.490868][ T2358] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 265.509752][ T2358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.618475][ T2358] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 265.638788][ T2358] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 265.667928][ T2358] usb 2-1: Manufacturer: syz [ 265.704467][ T2358] usb 2-1: config 0 descriptor?? [ 265.709927][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.730340][ T4227] (null): radio-mr800 - initialization failed [ 265.744400][ T4227] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 265.755977][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.782445][ T4227] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 265.800524][ T2358] igorplugusb 2-1:0.0: incorrect number of endpoints [ 265.813184][ T4227] usb 4-1: USB disconnect, device number 40 [ 265.878962][ T13] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.899481][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.932498][ T13] usb 3-1: SerialNumber: syz [ 266.181165][ T7645] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 266.281522][ T13] usb 3-1: skipping empty audio interface (v1) [ 266.367465][ T13] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 266.411888][ T13] usb 3-1: USB disconnect, device number 52 [ 266.584452][ T2358] usb 2-1: USB disconnect, device number 39 [ 266.654719][ T5644] udevd[5644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.762926][ T7672] device syzkaller0 entered promiscuous mode [ 266.810810][ T7679] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1161'. [ 266.953486][ T7687] lo speed is unknown, defaulting to 1000 [ 266.998530][ T4262] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 267.078406][ T4229] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 267.127766][ T7687] netlink: 'syz.4.1162': attribute type 5 has an invalid length. [ 267.338539][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 267.382747][ T4262] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.396093][ T4262] usb 4-1: config 0 has no interface number 0 [ 267.406985][ T4262] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.422096][ T4262] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.436268][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.473506][ T4262] usb 4-1: config 0 descriptor?? [ 267.479293][ T4229] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.498519][ T4229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.506268][ T4229] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 267.516493][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.542496][ T4262] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 267.551527][ T4229] usb 3-1: config 0 descriptor?? [ 267.699198][ T2358] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 267.799864][ T4227] usb 4-1: USB disconnect, device number 41 [ 267.978436][ T2358] usb 2-1: Using ep0 maxpacket: 32 [ 268.148500][ T2358] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.268994][ T2358] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 268.287111][ T2358] usb 2-1: config 102 has no interface number 0 [ 268.316848][ T2358] usb 2-1: config 102 interface 225 has no altsetting 0 [ 268.508668][ T2358] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 268.536974][ T7707] tipc: Enabled bearer , priority 0 [ 268.548944][ T2358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.579014][ T2358] usb 2-1: Product: syz [ 268.586229][ T7707] device syzkaller0 entered promiscuous mode [ 268.599440][ T2358] usb 2-1: Manufacturer: syz [ 268.617547][ T2358] usb 2-1: SerialNumber: syz [ 268.671850][ T7707] tipc: Resetting bearer [ 268.692467][ T7706] tipc: Resetting bearer [ 268.714485][ T7706] tipc: Disabling bearer [ 269.040549][ T2358] (null): radio-mr800 - initialization failed [ 269.046872][ T2358] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 269.069079][ T2358] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 269.097639][ T2358] usb 2-1: USB disconnect, device number 40 [ 269.152240][ T5509] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 269.532658][ T5509] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.585232][ T5509] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.709138][ T5509] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 269.725589][ T5509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.775159][ T5509] usb 5-1: SerialNumber: syz [ 269.868629][ T7720] device syzkaller0 entered promiscuous mode [ 270.073419][ T7711] netlink: 'syz.4.1170': attribute type 10 has an invalid length. [ 270.121718][ T5509] usb 5-1: skipping empty audio interface (v1) [ 270.193490][ T5509] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 270.222752][ T5509] usb 5-1: USB disconnect, device number 51 [ 270.459475][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.595836][ T7731] lo speed is unknown, defaulting to 1000 [ 270.634379][ T4229] usbhid 3-1:0.0: can't add hid device: -71 [ 270.648437][ T4229] usbhid: probe of 3-1:0.0 failed with error -71 [ 270.697515][ T4229] usb 3-1: USB disconnect, device number 53 [ 270.793059][ T7736] device syzkaller0 entered promiscuous mode [ 270.834561][ T7739] tipc: Enabled bearer , priority 0 [ 270.861321][ T7739] device syzkaller0 entered promiscuous mode [ 270.927444][ T7739] tipc: Resetting bearer [ 271.010485][ T7738] tipc: Resetting bearer [ 271.033674][ T7738] tipc: Disabling bearer [ 271.069080][ C0] ================================================================== [ 271.077579][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 271.085366][ C0] Read of size 2 at addr ffff8880611d6c2a by task syz.4.1179/7735 [ 271.093324][ C0] [ 271.095714][ C0] CPU: 0 PID: 7735 Comm: syz.4.1179 Not tainted syzkaller #0 [ 271.103115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.113377][ C0] Call Trace: [ 271.116681][ C0] [ 271.119551][ C0] dump_stack_lvl+0x188/0x250 [ 271.124266][ C0] ? show_regs_print_info+0x20/0x20 [ 271.129494][ C0] ? _printk+0xda/0x130 [ 271.133668][ C0] ? rose_timer_expiry+0x470/0x490 [ 271.138808][ C0] ? load_image+0x400/0x400 [ 271.143342][ C0] print_address_description+0x60/0x2d0 [ 271.148917][ C0] ? rose_timer_expiry+0x470/0x490 [ 271.154121][ C0] kasan_report+0xdf/0x130 [ 271.158745][ C0] ? rose_timer_expiry+0x470/0x490 [ 271.164588][ C0] rose_timer_expiry+0x470/0x490 [ 271.169680][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 271.174824][ C0] call_timer_fn+0x17b/0x540 [ 271.179531][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 271.184939][ C0] ? __run_timers+0x800/0x800 [ 271.189690][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 271.195076][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 271.200294][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 271.205342][ C0] __run_timers+0x53e/0x800 [ 271.209923][ C0] ? detach_timer+0x2b0/0x2b0 [ 271.214722][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.220750][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 271.225725][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 271.231514][ C0] run_timer_softirq+0x63/0xf0 [ 271.236306][ C0] handle_softirqs+0x339/0x830 [ 271.241194][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 271.246171][ C0] ? do_softirq+0x210/0x210 [ 271.250710][ C0] __irq_exit_rcu+0x13b/0x230 [ 271.255421][ C0] ? irq_exit_rcu+0x20/0x20 [ 271.260166][ C0] irq_exit_rcu+0x5/0x20 [ 271.264779][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 271.270442][ C0] [ 271.273382][ C0] [ 271.276323][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 271.282498][ C0] RIP: 0010:free_pages_and_swap_cache+0x4c/0x90 [ 271.288767][ C0] Code: db 7e 4e 89 d8 4c 8d 3c c5 f8 ff ff ff 45 31 e4 49 bd 00 00 00 00 00 fc ff df 4b 8d 3c 26 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 05 e8 8d 96 07 00 4b 8b 3c 26 e8 84 fa ff ff 4d 39 e7 74 0b e8 [ 271.308726][ C0] RSP: 0018:ffffc9000337f830 EFLAGS: 00000246 [ 271.314820][ C0] RAX: 1ffff1100f4ecb55 RBX: 00000000000001fe RCX: ffff88801ee59dc0 [ 271.322990][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a765aa8 [ 271.330999][ C0] RBP: 00000000000001fe R08: ffffea0001933c47 R09: 1ffffd4000326788 [ 271.339321][ C0] R10: dffffc0000000000 R11: fffff94000326789 R12: 0000000000000a98 [ 271.347335][ C0] R13: dffffc0000000000 R14: ffff88807a765010 R15: 0000000000000fe8 [ 271.356202][ C0] tlb_flush_mmu+0xce/0x180 [ 271.360841][ C0] unmap_page_range+0x207a/0x2500 [ 271.365984][ C0] unmap_vmas+0x131/0x250 [ 271.370444][ C0] ? unmap_page_range+0x2500/0x2500 [ 271.375768][ C0] ? __mutex_lock_common+0x465/0x2400 [ 271.381256][ C0] ? exit_mm_release+0x16/0x30 [ 271.386193][ C0] exit_mmap+0x3b9/0x640 [ 271.390556][ C0] ? vm_brk+0x20/0x20 [ 271.394574][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 271.399797][ C0] ? mm_update_next_owner+0x522/0x640 [ 271.405227][ C0] __mmput+0x115/0x3b0 [ 271.409318][ C0] exit_mm+0x588/0x6e0 [ 271.413434][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 271.418222][ C0] ? do_exit+0x20c0/0x20c0 [ 271.422661][ C0] ? taskstats_exit+0x439/0xab0 [ 271.427712][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 271.432590][ C0] do_exit+0x5a9/0x20c0 [ 271.436775][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 271.442794][ C0] ? put_task_struct+0x80/0x80 [ 271.447577][ C0] ? lock_chain_count+0x20/0x20 [ 271.452454][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 271.457860][ C0] do_group_exit+0x12e/0x300 [ 271.462476][ C0] __x64_sys_exit_group+0x3b/0x40 [ 271.467743][ C0] do_syscall_64+0x4c/0xa0 [ 271.472196][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.476888][ C0] ? clear_bhb_loop+0x30/0x80 [ 271.482033][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.488036][ C0] RIP: 0033:0x7f1bb7e25799 [ 271.492692][ C0] Code: Unable to access opcode bytes at RIP 0x7f1bb7e2576f. [ 271.500070][ C0] RSP: 002b:00007ffe6868e128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 271.508644][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bb7e25799 [ 271.516634][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.524631][ C0] RBP: 00007ffe6868e18c R08: 0000000000000000 R09: 00000000000927c0 [ 271.532795][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000d7 [ 271.540791][ C0] R13: 00000000000927c0 R14: 000000000004207a R15: 00007ffe6868e1e0 [ 271.549226][ C0] [ 271.552287][ C0] [ 271.554711][ C0] Allocated by task 21: [ 271.558967][ C0] __kasan_kmalloc+0xb5/0xf0 [ 271.563582][ C0] __alloc_skb+0x22c/0x750 [ 271.568114][ C0] __neigh_notify+0x142/0x2e0 [ 271.573078][ C0] neigh_cleanup_and_release+0x9d/0x250 [ 271.578747][ C0] neigh_periodic_work+0x407/0xc70 [ 271.583882][ C0] process_one_work+0x85f/0x1010 [ 271.588850][ C0] worker_thread+0xaa6/0x1290 [ 271.593543][ C0] kthread+0x436/0x520 [ 271.597784][ C0] ret_from_fork+0x1f/0x30 [ 271.602219][ C0] [ 271.604825][ C0] The buggy address belongs to the object at ffff8880611d6c00 [ 271.604825][ C0] which belongs to the cache kmalloc-512 of size 512 [ 271.619069][ C0] The buggy address is located 42 bytes inside of [ 271.619069][ C0] 512-byte region [ffff8880611d6c00, ffff8880611d6e00) [ 271.632367][ C0] The buggy address belongs to the page: [ 271.638101][ C0] page:ffffea0001847500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880611d5400 pfn:0x611d4 [ 271.649970][ C0] head:ffffea0001847500 order:2 compound_mapcount:0 compound_pincount:0 [ 271.658494][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 271.666508][ C0] raw: 00fff00000010200 ffffea000188e908 ffffea0001821808 ffff888016c41c80 [ 271.675737][ C0] raw: ffff8880611d5400 0000000000100005 00000001ffffffff 0000000000000000 [ 271.684344][ C0] page dumped because: kasan: bad access detected [ 271.690860][ C0] page_owner tracks the page as allocated [ 271.696590][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4198, ts 57471710507, free_ts 16521001497 [ 271.715881][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 271.721633][ C0] __alloc_pages+0x1ee/0x480 [ 271.726326][ C0] new_slab+0xc0/0x4b0 [ 271.730412][ C0] ___slab_alloc+0x80a/0xdd0 [ 271.735204][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 271.741043][ C0] __alloc_skb+0x22c/0x750 [ 271.745574][ C0] mpls_netconf_notify_devconf+0x46/0xf0 [ 271.751263][ C0] mpls_dev_sysctl_register+0x249/0x2f0 [ 271.756832][ C0] mpls_dev_notify+0x67a/0x780 [ 271.761611][ C0] raw_notifier_call_chain+0xcb/0x160 [ 271.767096][ C0] dev_change_name+0x695/0xbf0 [ 271.771894][ C0] do_setlink+0xa4e/0x3d60 [ 271.776531][ C0] rtnl_newlink+0x1658/0x1a50 [ 271.781416][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 271.786390][ C0] netlink_rcv_skb+0x1f5/0x440 [ 271.791169][ C0] netlink_unicast+0x774/0x920 [ 271.795951][ C0] page last free stack trace: [ 271.800643][ C0] free_unref_page_prepare+0x637/0x6c0 [ 271.806206][ C0] free_unref_page+0x8f/0x2a0 [ 271.811082][ C0] free_contig_range+0x96/0xf0 [ 271.815959][ C0] destroy_args+0xf0/0xa00 [ 271.820527][ C0] debug_vm_pgtable+0x321/0x380 [ 271.825416][ C0] do_one_initcall+0x272/0x730 [ 271.830206][ C0] do_initcall_level+0x137/0x1f0 [ 271.835195][ C0] do_initcalls+0x4b/0x90 [ 271.839575][ C0] kernel_init_freeable+0x3e9/0x570 [ 271.844794][ C0] kernel_init+0x19/0x1b0 [ 271.849148][ C0] ret_from_fork+0x1f/0x30 [ 271.853651][ C0] [ 271.855992][ C0] Memory state around the buggy address: [ 271.861633][ C0] ffff8880611d6b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.869806][ C0] ffff8880611d6b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.877886][ C0] >ffff8880611d6c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.886142][ C0] ^ [ 271.891712][ C0] ffff8880611d6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.899785][ C0] ffff8880611d6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.907863][ C0] ================================================================== [ 271.915935][ C0] Disabling lock debugging due to kernel taint [ 271.922245][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.929543][ C0] CPU: 0 PID: 7735 Comm: syz.4.1179 Tainted: G B syzkaller #0 [ 271.938551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.948630][ C0] Call Trace: [ 271.951952][ C0] [ 271.954818][ C0] dump_stack_lvl+0x188/0x250 [ 271.959519][ C0] ? show_regs_print_info+0x20/0x20 [ 271.964906][ C0] ? load_image+0x400/0x400 [ 271.969517][ C0] panic+0x2e5/0x810 [ 271.973432][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 271.977950][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 271.983954][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.989868][ C0] ? _raw_spin_unlock+0x40/0x40 [ 271.994727][ C0] ? print_memory_metadata+0x314/0x400 [ 272.000198][ C0] ? rose_timer_expiry+0x470/0x490 [ 272.005326][ C0] check_panic_on_warn+0x80/0xa0 [ 272.010287][ C0] ? rose_timer_expiry+0x470/0x490 [ 272.015586][ C0] end_report+0x6d/0xf0 [ 272.019857][ C0] kasan_report+0x102/0x130 [ 272.024563][ C0] ? rose_timer_expiry+0x470/0x490 [ 272.029694][ C0] rose_timer_expiry+0x470/0x490 [ 272.034763][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 272.039800][ C0] call_timer_fn+0x17b/0x540 [ 272.044406][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 272.049534][ C0] ? __run_timers+0x800/0x800 [ 272.054228][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 272.059435][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 272.064749][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 272.069775][ C0] __run_timers+0x53e/0x800 [ 272.074298][ C0] ? detach_timer+0x2b0/0x2b0 [ 272.078995][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 272.084999][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 272.089863][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 272.095178][ C0] run_timer_softirq+0x63/0xf0 [ 272.099963][ C0] handle_softirqs+0x339/0x830 [ 272.104839][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 272.109705][ C0] ? do_softirq+0x210/0x210 [ 272.114221][ C0] __irq_exit_rcu+0x13b/0x230 [ 272.119050][ C0] ? irq_exit_rcu+0x20/0x20 [ 272.123668][ C0] irq_exit_rcu+0x5/0x20 [ 272.128123][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 272.133776][ C0] [ 272.136961][ C0] [ 272.140002][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 272.145996][ C0] RIP: 0010:free_pages_and_swap_cache+0x4c/0x90 [ 272.152253][ C0] Code: db 7e 4e 89 d8 4c 8d 3c c5 f8 ff ff ff 45 31 e4 49 bd 00 00 00 00 00 fc ff df 4b 8d 3c 26 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 05 e8 8d 96 07 00 4b 8b 3c 26 e8 84 fa ff ff 4d 39 e7 74 0b e8 [ 272.172176][ C0] RSP: 0018:ffffc9000337f830 EFLAGS: 00000246 [ 272.178265][ C0] RAX: 1ffff1100f4ecb55 RBX: 00000000000001fe RCX: ffff88801ee59dc0 [ 272.186249][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807a765aa8 [ 272.194238][ C0] RBP: 00000000000001fe R08: ffffea0001933c47 R09: 1ffffd4000326788 [ 272.202231][ C0] R10: dffffc0000000000 R11: fffff94000326789 R12: 0000000000000a98 [ 272.210416][ C0] R13: dffffc0000000000 R14: ffff88807a765010 R15: 0000000000000fe8 [ 272.218504][ C0] tlb_flush_mmu+0xce/0x180 [ 272.223035][ C0] unmap_page_range+0x207a/0x2500 [ 272.228087][ C0] unmap_vmas+0x131/0x250 [ 272.232430][ C0] ? unmap_page_range+0x2500/0x2500 [ 272.237640][ C0] ? __mutex_lock_common+0x465/0x2400 [ 272.243027][ C0] ? exit_mm_release+0x16/0x30 [ 272.247817][ C0] exit_mmap+0x3b9/0x640 [ 272.252077][ C0] ? vm_brk+0x20/0x20 [ 272.256171][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 272.261383][ C0] ? mm_update_next_owner+0x522/0x640 [ 272.266767][ C0] __mmput+0x115/0x3b0 [ 272.270961][ C0] exit_mm+0x588/0x6e0 [ 272.275046][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 272.279830][ C0] ? do_exit+0x20c0/0x20c0 [ 272.284258][ C0] ? taskstats_exit+0x439/0xab0 [ 272.289128][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 272.293994][ C0] do_exit+0x5a9/0x20c0 [ 272.298163][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 272.304182][ C0] ? put_task_struct+0x80/0x80 [ 272.308986][ C0] ? lock_chain_count+0x20/0x20 [ 272.313860][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 272.319277][ C0] do_group_exit+0x12e/0x300 [ 272.323901][ C0] __x64_sys_exit_group+0x3b/0x40 [ 272.328945][ C0] do_syscall_64+0x4c/0xa0 [ 272.333404][ C0] ? clear_bhb_loop+0x30/0x80 [ 272.338195][ C0] ? clear_bhb_loop+0x30/0x80 [ 272.343159][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.349073][ C0] RIP: 0033:0x7f1bb7e25799 [ 272.353697][ C0] Code: Unable to access opcode bytes at RIP 0x7f1bb7e2576f. [ 272.361069][ C0] RSP: 002b:00007ffe6868e128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 272.369499][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1bb7e25799 [ 272.377568][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.385724][ C0] RBP: 00007ffe6868e18c R08: 0000000000000000 R09: 00000000000927c0 [ 272.393713][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000d7 [ 272.401789][ C0] R13: 00000000000927c0 R14: 000000000004207a R15: 00007ffe6868e1e0 [ 272.409780][ C0] [ 272.413313][ C0] Kernel Offset: disabled [ 272.417631][ C0] Rebooting in 86400 seconds..