last executing test programs: 4.443134605s ago: executing program 4 (id=1238): syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a003000002001000000000000000000"], 0x0) 4.326638043s ago: executing program 4 (id=1241): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 4.139529516s ago: executing program 4 (id=1243): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={0x0}}, 0x880) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) 3.675786154s ago: executing program 3 (id=1250): setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000010000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 3.559020911s ago: executing program 3 (id=1252): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r1, 0x0, 0x0, 0x26c) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'wg0\x00', {0x2, 0x0, @broadcast}}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) memfd_create(&(0x7f0000000080), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000640)}, {&(0x7f0000000a00)="145a977ce90bcec36cee68138cdb7c53108f9e6776eb08ce8c386ceb3ef2feba0afdcd6e04c99847b690d5148d8313f48a14b041", 0x34}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc", 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 3.535679787s ago: executing program 4 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xfb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x9f, 0x76, 0x31, 0x20, 0x7ca, 0xb800, 0xd927, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x2, 0x90, 0x40, [{{0x9, 0x4, 0xe1, 0xc, 0x0, 0x3, 0x0, 0x0, 0x10}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x8000d, 0xfffffffc) syz_open_dev$vim2m(&(0x7f0000000040), 0xd11, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0xc1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000780), 0x12) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000c0000000700000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0f00b685ae220a933be563bcb400"], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fe000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003c040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201"], &(0x7f0000000980)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.816007055s ago: executing program 2 (id=1263): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={0x0}}, 0x880) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) 2.785917119s ago: executing program 0 (id=1264): syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a003000002001000000000000000000"], 0x0) 2.719422366s ago: executing program 0 (id=1265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x34}}, 0x84000) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20040064}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 2.554865323s ago: executing program 0 (id=1267): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r3) sendmsg$NFC_CMD_GET_DEVICE(r3, 0x0, 0x20040014) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) socket$netlink(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="6ba8e05d8c010094dc561a9147c9dab469739307f7f36341a8ba5b77921635a85534f741b4d61aee494953596eb9a41ea629ad4ac934bf659f8201fce3986fc7d20cee7a385ce14b102fcf8120c1dec3c66b094fb2823aa001c356cdf0499ddcb14476b40490665de56b172ec6ce7fe1f1bf83f0c447dd34cae31395c32b17acd2c597b7ea326a855fe5b53ff8f779", @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xe8f0603e89bb3ac3) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}}, 0x20) 2.431772699s ago: executing program 0 (id=1268): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.271279617s ago: executing program 0 (id=1269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000fe0100000200000002000000800000", @ANYRES32, @ANYBLOB="060000000000000000d862010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000739d000000000000000400001811", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xa5, &(0x7f0000000440)=""/165, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xe, 0x7, 0xf81}, 0x10, 0x28035, 0xffffffffffffffff, 0x8, &(0x7f0000000600)=[r1, 0xffffffffffffffff, r1], &(0x7f0000000640)=[{0x2, 0x1, 0x7, 0x6}, {0x0, 0x2, 0x10, 0x8}, {0x2, 0x5, 0x9, 0x1}, {0x0, 0x3, 0xa, 0x1}, {0x4, 0x4, 0x0, 0x9}, {0x4, 0x5, 0x10}, {0x2, 0x5, 0x8b0, 0x6}, {0x5, 0x5, 0x10, 0x4}]}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xfffd}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) getsockopt$packet_buf(r7, 0x107, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) 2.270918737s ago: executing program 2 (id=1270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x54, 0x0, &(0x7f00000002c0)="0e08000000000000b89e08dc88a8", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.094999903s ago: executing program 2 (id=1272): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480), 0x0, 0x400c404) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/43, 0x2b) getdents64(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 1.998042154s ago: executing program 2 (id=1273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.648788285s ago: executing program 2 (id=1274): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0xf0, 0x5802, 0x294, 0x0, 0x294, 0x1d8, 0x378, 0x378, 0x1d8, 0x378, 0x3, 0x0, {[{{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 'sit0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x73, 0x86, 0xa, 0xa}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', {0x3}}}}, {{@ipv6={@private2, @local, [0x0, 0xff000000, 0xff, 0xff000000], [0xf6c08c0ecc8de055, 0xffffff00, 0xff, 0xff000000], 'gretap0\x00', 'wlan0\x00', {}, {}, 0x29, 0x7, 0x0, 0x8}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x9, 0x3, {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) pipe(&(0x7f00000001c0)) pipe(0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/246}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x20, r4, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x84) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r6) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r10 = getpid() r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r12 = socket(0xa, 0x3, 0x3a) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x59, r11, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x0, 0x8a, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) getsockopt$sock_cred(r12, 0x1, 0x11, 0x0, &(0x7f0000000240)) syz_open_procfs$namespace(r10, &(0x7f0000000180)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) 1.639103113s ago: executing program 3 (id=1275): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005140), 0x0, 0x4004000) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 1.482629312s ago: executing program 4 (id=1276): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.442759464s ago: executing program 3 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in={{0x2, 0x4e21, @empty}}, 0x4, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000400)=0x4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0000000"], &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}, {0x0, 0xfffa}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x4000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000380)="d00ac4b006426bdd619709d7c9f6ef39fb40d6a5942f86622b8ed3adfd47265ed8c86041ac4067f854b7e5b5276e288bda041ee31f8454b732ace20f133f067f866c207033ca64c167a0331e3427678150e200000000000000", &(0x7f0000000240)=@udp6=r9, 0x2}, 0x20) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$inet(r12, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 982.149264ms ago: executing program 2 (id=1279): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {0x0}, {0x0}], 0x3}], 0x1, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) syz_init_net_socket$rose(0xb, 0x5, 0x0) 781.966064ms ago: executing program 1 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 656.129469ms ago: executing program 4 (id=1281): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 591.589916ms ago: executing program 1 (id=1282): unshare(0x20000400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pwrite64(r0, 0x0, 0x0, 0x8) 555.87023ms ago: executing program 1 (id=1283): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001480), 0x0, 0x400c404) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/43, 0x2b) getdents64(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 489.830896ms ago: executing program 3 (id=1284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 247.368259ms ago: executing program 1 (id=1285): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$kcm(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 120.903734ms ago: executing program 0 (id=1286): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xfb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x9f, 0x76, 0x31, 0x20, 0x7ca, 0xb800, 0xd927, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x2, 0x90, 0x40, [{{0x9, 0x4, 0xe1, 0xc, 0x0, 0x3, 0x0, 0x0, 0x10}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x8000d, 0xfffffffc) syz_open_dev$vim2m(&(0x7f0000000040), 0xd11, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0xc1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) getsockopt$sock_buf(r4, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000780), 0x12) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000000000000c0000000700000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0f00b685ae220a933be563bcb400"], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000fe000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000003c040100000000002d400200000000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201"], &(0x7f0000000980)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 119.984844ms ago: executing program 1 (id=1287): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x10) 76.563495ms ago: executing program 3 (id=1288): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "292596f4a9d6082036915ef702c33c2b58ab454ea4e22a73593e6fa5d21ecc597126a67d7104eed9551647356bc651fda233485c69c78e0a189c686321a32cfdb4942376cf1df0936ef4b7dd8720"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b0001007470726f787900001400028008000340000b000008000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x7c}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000940)={0x0, 0x8, 0x7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070b9b8aa11ceb6edba4bdabaa275d266bb992377f0263e7f858fd3c7b2a958f564270051c99b268be4cce04adf4a1caa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0dd00"/14, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) accept4(r9, 0x0, 0x0, 0x80000) 0s ago: executing program 1 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200640000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000380003803400008008"], 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 176.200022][ T4229] dvb-usb: MAC address reading failed. [ 176.207578][ T4231] dvb-usb: bulk message failed: -22 (5/0) [ 176.234817][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.258716][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.287224][ T4231] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 176.304394][ T4231] usb 3-1: media controller created [ 176.319446][ T4231] dvb-usb: bulk message failed: -22 (8/0) [ 176.348876][ T4231] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 176.361577][ T4229] DVB: Unable to find symbol stb0899_attach() [ 176.367857][ T4231] dvb-usb: MAC address reading failed. [ 176.373399][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 176.398962][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.417111][ T4232] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.494753][ T4231] DVB: Unable to find symbol stb0899_attach() [ 176.501347][ T4231] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 176.547129][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 176.553391][ T4229] Registered IR keymap rc-empty [ 176.567964][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 176.580881][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 176.600386][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 176.610559][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 176.610559][ T4229] [ 176.619871][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 176.637600][ T4229] usb 1-1: USB disconnect, device number 13 [ 176.667145][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 176.703336][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 176.716977][ T4231] rc_core: IR keymap rc-tt-1500 not found [ 176.726787][ T4231] Registered IR keymap rc-empty [ 176.770421][ T4231] rc rc1: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1 [ 176.800015][ T4231] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc1/input17 [ 176.827180][ T4232] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.835359][ T4231] dvb-usb: schedule remote query interval to 100 msecs. [ 176.910902][ T4231] pctv452e: pctv452e_power_ctrl: 0 [ 176.910902][ T4231] [ 176.932907][ T5849] netlink: 76 bytes leftover after parsing attributes in process `syz.1.512'. [ 176.937752][ T4232] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 176.955982][ T4231] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 176.958428][ T4227] usbhid 2-1:0.0: can't add hid device: -71 [ 176.990023][ T4232] usb 4-1: config 102 has no interface number 0 [ 176.999041][ T4232] usb 4-1: config 102 interface 225 has no altsetting 0 [ 177.007247][ T4227] usbhid: probe of 2-1:0.0 failed with error -71 [ 177.025667][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 177.033420][ T7] dvb-usb: error -22 while querying for an remote control event. [ 177.054696][ T4227] usb 2-1: USB disconnect, device number 16 [ 177.100578][ T5852] fuse: Bad value for 'fd' [ 178.073630][ T7] dvb-usb: bulk message failed: -22 (4/0) [ 178.087110][ T4232] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 178.096327][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.117034][ T7] dvb-usb: error -22 while querying for an remote control event. [ 178.124879][ T4232] usb 4-1: Product: syz [ 178.180640][ T4232] usb 4-1: Manufacturer: syz [ 178.202390][ T4232] usb 4-1: SerialNumber: syz [ 178.253267][ T4231] dvb-usb: bulk message failed: -22 (4/0) [ 178.273396][ T4231] dvb-usb: error -22 while querying for an remote control event. [ 178.341621][ T4231] usb 3-1: USB disconnect, device number 11 [ 178.458990][ T4231] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 178.543241][ T5869] tipc: Enabled bearer , priority 0 [ 178.579353][ T4232] (null): radio-mr800 - initialization failed [ 178.584871][ T5869] device syzkaller0 entered promiscuous mode [ 178.596122][ T4232] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 178.632562][ T5868] tipc: Resetting bearer [ 178.641285][ T4232] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 178.674024][ T4232] usb 4-1: USB disconnect, device number 12 [ 178.701473][ T5868] tipc: Disabling bearer [ 179.071510][ T5881] 9pnet_virtio: no channels available for device 127.0.0.1 [ 179.309330][ T5887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.523'. [ 179.357069][ T4233] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 179.387190][ T4227] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 179.396524][ T5889] fuse: Bad value for 'fd' [ 179.637122][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 179.657276][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 179.779614][ T4227] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.906467][ T4227] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.937222][ T4233] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 179.957066][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.965140][ T4233] usb 2-1: Product: syz [ 179.976974][ T4227] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 180.021527][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.030237][ T4233] usb 2-1: Manufacturer: syz [ 180.034977][ T4233] usb 2-1: SerialNumber: syz [ 180.100964][ T4227] usb 4-1: config 0 descriptor?? [ 180.117452][ T4233] usb 2-1: config 0 descriptor?? [ 180.177907][ T4233] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 180.207153][ T4233] pctv452e: pctv452e_power_ctrl: 1 [ 180.207153][ T4233] [ 180.222988][ T4233] usb 2-1: selecting invalid altsetting 3 [ 180.251425][ T4233] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 180.251425][ T4233] [ 180.276404][ T4233] dvb-usb: bulk message failed: -22 (5/0) [ 180.307601][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 180.357417][ T4233] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 180.378263][ T5881] dvb-usb: bulk message failed: -22 (7/0) [ 180.386253][ T4233] usb 2-1: media controller created [ 180.410870][ T5881] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 180.440971][ T4233] dvb-usb: bulk message failed: -22 (8/0) [ 180.453710][ T4233] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 180.488532][ T4233] dvb-usb: MAC address reading failed. [ 180.544983][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.969455][ T5901] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 181.048947][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 181.062393][ T4233] DVB: Unable to find symbol stb0899_attach() [ 181.078820][ T4233] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 181.223238][ T5915] tipc: Enabled bearer , priority 0 [ 181.246190][ T5915] device syzkaller0 entered promiscuous mode [ 181.257071][ T4233] rc_core: IR keymap rc-tt-1500 not found [ 181.263089][ T4233] Registered IR keymap rc-empty [ 181.280167][ T4233] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 181.310657][ T5914] tipc: Resetting bearer [ 181.320869][ T4233] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 181.349246][ T4233] dvb-usb: schedule remote query interval to 100 msecs. [ 181.365261][ T4233] pctv452e: pctv452e_power_ctrl: 0 [ 181.365261][ T4233] [ 181.380743][ T4233] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 181.407104][ T5914] tipc: Disabling bearer [ 181.420866][ T4233] usb 2-1: USB disconnect, device number 17 [ 181.533380][ T4233] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 181.649829][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 181.716719][ T4896] Bluetooth: hci5: Frame reassembly failed (-90) [ 181.730449][ T5933] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.741887][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.750030][ T5933] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.758299][ T5933] Bluetooth: hci5: Frame reassembly failed (-84) [ 181.857127][ T4173] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 182.097256][ T4173] usb 1-1: Using ep0 maxpacket: 32 [ 182.149536][ T5936] fuse: Bad value for 'fd' [ 182.179082][ T4227] usbhid 4-1:0.0: can't add hid device: -71 [ 182.189942][ T4227] usbhid: probe of 4-1:0.0 failed with error -71 [ 182.267163][ T4173] usb 1-1: unable to get BOS descriptor or descriptor too short [ 182.438983][ T4173] usb 1-1: config 102 has an invalid interface number: 225 but max is 0 [ 182.467218][ T4227] usb 4-1: USB disconnect, device number 13 [ 182.642791][ T4173] usb 1-1: config 102 has no interface number 0 [ 182.717063][ T4173] usb 1-1: config 102 interface 225 has no altsetting 0 [ 182.802766][ T5942] 9pnet_virtio: no channels available for device 127.0.0.1 [ 182.937145][ T4173] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 182.951037][ T4173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.961667][ T4173] usb 1-1: Product: syz [ 182.971128][ T4173] usb 1-1: Manufacturer: syz [ 182.975959][ T4173] usb 1-1: SerialNumber: syz [ 183.147052][ T4235] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 183.329251][ T4173] (null): radio-mr800 - initialization failed [ 183.335576][ T4173] radio-mr800: probe of 1-1:102.225 failed with error -22 [ 183.350982][ T4173] usbhid 1-1:102.225: couldn't find an input interrupt endpoint [ 183.379310][ T4173] usb 1-1: USB disconnect, device number 14 [ 183.397115][ T4235] usb 5-1: Using ep0 maxpacket: 8 [ 183.677066][ T4235] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 183.696835][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.714648][ T4235] usb 5-1: Product: syz [ 183.731064][ T4235] usb 5-1: Manufacturer: syz [ 183.736224][ T4235] usb 5-1: SerialNumber: syz [ 183.747038][ T4229] Bluetooth: hci5: command 0x1003 tx timeout [ 183.758873][ T4235] usb 5-1: config 0 descriptor?? [ 183.767297][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 183.823083][ T4235] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 183.871832][ T4235] pctv452e: pctv452e_power_ctrl: 1 [ 183.871832][ T4235] [ 183.904725][ T4235] usb 5-1: selecting invalid altsetting 3 [ 183.930859][ T5960] tipc: Enabled bearer , priority 0 [ 183.946959][ T4235] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 183.946959][ T4235] [ 183.961598][ T5960] tipc: Resetting bearer [ 183.973329][ T4235] dvb-usb: bulk message failed: -22 (5/0) [ 183.990780][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.019449][ T5942] dvb-usb: bulk message failed: -22 (7/0) [ 184.027447][ T5958] tipc: Disabling bearer [ 184.033478][ T5942] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 184.042355][ T4235] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 184.054758][ T4235] usb 5-1: media controller created [ 184.073063][ T4235] dvb-usb: bulk message failed: -22 (8/0) [ 184.090272][ T4235] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 184.145242][ T4235] dvb-usb: MAC address reading failed. [ 184.166189][ T5965] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 184.180462][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 184.211750][ T5967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.546'. [ 184.235784][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.322169][ T4235] DVB: Unable to find symbol stb0899_attach() [ 184.336962][ T4235] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 184.447106][ T4235] rc_core: IR keymap rc-tt-1500 not found [ 184.457229][ T4235] Registered IR keymap rc-empty [ 184.466843][ T4235] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 184.493432][ T4235] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input19 [ 184.508559][ T4235] dvb-usb: schedule remote query interval to 100 msecs. [ 184.515783][ T4235] pctv452e: pctv452e_power_ctrl: 0 [ 184.515783][ T4235] [ 184.523302][ T4235] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 184.537752][ T4235] usb 5-1: USB disconnect, device number 10 [ 184.570699][ T4235] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 184.574740][ T4231] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.877574][ T4231] usb 3-1: Using ep0 maxpacket: 16 [ 185.010299][ T4231] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.030826][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0 [ 185.042091][ T5981] fuse: Bad value for 'fd' [ 185.045746][ T4231] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 185.056256][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.966968][ T4233] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.264752][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 186.274842][ T4231] usb 3-1: config 0 descriptor?? [ 186.280002][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 186.531716][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 186.727338][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.837270][ T4233] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 186.866239][ T4233] usb 5-1: config 102 has no interface number 0 [ 186.901418][ T4233] usb 5-1: config 102 interface 225 has no altsetting 0 [ 186.932465][ T6012] tipc: Enabled bearer , priority 0 [ 186.948235][ T6012] tipc: Resetting bearer [ 186.964260][ T6011] tipc: Disabling bearer [ 187.080429][ T4233] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 187.098398][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.137387][ T4233] usb 5-1: Product: syz [ 187.142157][ T4233] usb 5-1: Manufacturer: syz [ 187.149602][ T6017] 9pnet_virtio: no channels available for device 127.0.0.1 [ 187.159842][ T4233] usb 5-1: SerialNumber: syz [ 187.184118][ T6018] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 187.196415][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 187.467314][ T4173] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.489245][ T4233] (null): radio-mr800 - initialization failed [ 187.495558][ T4233] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 187.504794][ T4233] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 187.521127][ T4233] usb 5-1: USB disconnect, device number 11 [ 187.737007][ T4173] usb 4-1: Using ep0 maxpacket: 8 [ 188.067227][ T4173] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 188.081488][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.096921][ T4173] usb 4-1: Product: syz [ 188.101238][ T4173] usb 4-1: Manufacturer: syz [ 188.105967][ T4173] usb 4-1: SerialNumber: syz [ 188.114454][ T4173] usb 4-1: config 0 descriptor?? [ 188.179055][ T4173] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 188.187259][ T4173] pctv452e: pctv452e_power_ctrl: 1 [ 188.187259][ T4173] [ 188.195226][ T4173] usb 4-1: selecting invalid altsetting 3 [ 188.201609][ T4173] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 188.201609][ T4173] [ 188.212389][ T4173] dvb-usb: bulk message failed: -22 (5/0) [ 188.223311][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.247850][ T4173] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 188.256577][ T4173] usb 4-1: media controller created [ 188.262363][ T4173] dvb-usb: bulk message failed: -22 (8/0) [ 188.267256][ T4232] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 188.269408][ T4173] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 188.284255][ T4173] dvb-usb: MAC address reading failed. [ 188.307102][ T4229] Bluetooth: hci5: command 0x1009 tx timeout [ 188.314515][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.370048][ T4173] DVB: Unable to find symbol stb0899_attach() [ 188.376603][ T4173] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 188.383009][ T6017] dvb-usb: bulk message failed: -22 (7/0) [ 188.407749][ T6017] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 188.492475][ T4173] rc_core: IR keymap rc-tt-1500 not found [ 188.501005][ T4173] Registered IR keymap rc-empty [ 188.513352][ T4173] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 188.553043][ T4173] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input20 [ 188.566129][ T4173] dvb-usb: schedule remote query interval to 100 msecs. [ 188.574188][ T4173] pctv452e: pctv452e_power_ctrl: 0 [ 188.574188][ T4173] [ 188.582150][ T4173] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 188.588072][ T4231] usbhid 3-1:0.0: can't add hid device: -71 [ 188.608142][ T4231] usbhid: probe of 3-1:0.0 failed with error -71 [ 188.617403][ T4231] usb 3-1: USB disconnect, device number 12 [ 188.632398][ T4173] usb 4-1: USB disconnect, device number 14 [ 188.647216][ T4232] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.660148][ T4232] usb 5-1: config 0 has no interface number 0 [ 188.683554][ T4232] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.715334][ T4232] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.729319][ T4232] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 188.740100][ T4173] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 188.750443][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.774657][ T4232] usb 5-1: config 0 descriptor?? [ 189.089531][ T6034] fuse: Bad value for 'fd' [ 189.729839][ T6042] loop3: detected capacity change from 0 to 7 [ 189.754076][ T4176] Dev loop3: unable to read RDB block 7 [ 189.770167][ T4176] loop3: unable to read partition table [ 189.776082][ T4176] loop3: partition table beyond EOD, truncated [ 190.107112][ T4227] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.139247][ T6046] tipc: Enabled bearer , priority 0 [ 190.156565][ T6046] tipc: Resetting bearer [ 190.177832][ T6045] tipc: Disabling bearer [ 190.413113][ T4232] usbhid 5-1:0.1: can't add hid device: -71 [ 190.420914][ T4232] usbhid: probe of 5-1:0.1 failed with error -71 [ 190.424454][ T6042] Dev loop3: unable to read RDB block 7 [ 190.433291][ T4232] usb 5-1: USB disconnect, device number 12 [ 190.470568][ T6042] loop3: unable to read partition table [ 190.476580][ T6042] loop3: partition table beyond EOD, truncated [ 190.485382][ T6042] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 190.537044][ T4227] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.551125][ T4227] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 190.579639][ T6048] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 190.589509][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.609092][ T4227] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 190.635390][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 190.757085][ T4227] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.775800][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.795201][ T4227] usb 3-1: Product: syz [ 190.803279][ T4227] usb 3-1: Manufacturer: syz [ 190.868122][ T4227] cdc_wdm 3-1:1.0: skipping garbage [ 190.873981][ T4227] cdc_wdm 3-1:1.0: skipping garbage [ 190.885247][ T4227] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 190.917099][ T4231] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 190.956966][ T4232] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 191.054108][ T6048] Set syz1 is full, maxelem 65536 reached [ 191.086180][ T4227] usb 3-1: USB disconnect, device number 13 [ 191.197042][ T4231] usb 1-1: Using ep0 maxpacket: 16 [ 191.217127][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 191.337257][ T4231] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.348572][ T4231] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.355417][ T4231] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 191.365650][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.376235][ T4231] usb 1-1: config 0 descriptor?? [ 191.407229][ T4232] usb 5-1: unable to get BOS descriptor or descriptor too short [ 191.427870][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 191.434227][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 191.440774][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 191.447048][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 191.453876][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 191.497247][ T4232] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 191.505764][ T4232] usb 5-1: config 102 has no interface number 0 [ 191.512917][ T4232] usb 5-1: config 102 interface 225 has no altsetting 0 [ 191.605132][ T6054] 9pnet_virtio: no channels available for device 127.0.0.1 [ 191.687181][ T4232] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 191.696486][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.704590][ T4232] usb 5-1: Product: syz [ 191.709149][ T4232] usb 5-1: Manufacturer: syz [ 191.713979][ T4232] usb 5-1: SerialNumber: syz [ 191.877060][ T4277] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 192.043923][ T6060] binder: 6059:6060 ioctl c0306201 2000000001c0 returned -14 [ 192.064049][ T4232] (null): radio-mr800 - initialization failed [ 192.082198][ T4232] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 192.102553][ T4232] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 192.127061][ T4277] usb 4-1: Using ep0 maxpacket: 8 [ 192.145928][ T4232] usb 5-1: USB disconnect, device number 13 [ 192.408233][ T4277] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 192.425513][ T4277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.435356][ T4277] usb 4-1: Product: syz [ 192.444489][ T4277] usb 4-1: Manufacturer: syz [ 192.450757][ T4277] usb 4-1: SerialNumber: syz [ 192.462969][ T4277] usb 4-1: config 0 descriptor?? [ 192.509096][ T4277] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 192.519891][ T4277] pctv452e: pctv452e_power_ctrl: 1 [ 192.519891][ T4277] [ 192.532968][ T4277] usb 4-1: selecting invalid altsetting 3 [ 192.542190][ T4277] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 192.542190][ T4277] [ 192.570347][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 192.596087][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.627555][ T4277] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 192.642832][ T4277] usb 4-1: media controller created [ 192.653931][ T4277] dvb-usb: bulk message failed: -22 (8/0) [ 192.664463][ T4277] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 192.678266][ T4277] dvb-usb: MAC address reading failed. [ 192.708789][ T6054] dvb-usb: bulk message failed: -22 (7/0) [ 192.724869][ T6054] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 192.729809][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.839125][ T4277] DVB: Unable to find symbol stb0899_attach() [ 192.847078][ T4277] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 192.890765][ T6073] fuse: Bad value for 'fd' [ 193.529758][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 194.244535][ T6084] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 194.267158][ T4277] rc_core: IR keymap rc-tt-1500 not found [ 194.273145][ T4277] Registered IR keymap rc-empty [ 194.286501][ T4277] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 194.305943][ T4277] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21 [ 194.331227][ T4277] dvb-usb: schedule remote query interval to 100 msecs. [ 194.355404][ T4277] pctv452e: pctv452e_power_ctrl: 0 [ 194.355404][ T4277] [ 194.388248][ T4277] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 194.423528][ T4277] usb 4-1: USB disconnect, device number 15 [ 194.470742][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487325][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.511590][ T6095] binder: 6094:6095 ioctl c0306201 2000000001c0 returned -14 [ 194.537613][ T4231] usbhid 1-1:0.0: can't add hid device: -71 [ 194.543974][ T4231] usbhid: probe of 1-1:0.0 failed with error -71 [ 194.591197][ T4231] usb 1-1: USB disconnect, device number 15 [ 194.634560][ T4277] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 194.956249][ T6108] 9pnet_virtio: no channels available for device 127.0.0.1 [ 194.986112][ T6110] device syzkaller0 entered promiscuous mode [ 195.146972][ T4231] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 195.184107][ T6114] fuse: Bad value for 'fd' [ 196.132630][ T4277] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 196.224008][ T6121] binder: 6120:6121 ioctl c0306201 2000000001c0 returned -14 [ 196.257032][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 196.377251][ T4277] usb 3-1: Using ep0 maxpacket: 8 [ 196.417185][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.466977][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 196.474007][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 196.497435][ T4231] usb 1-1: config 102 has an invalid interface number: 225 but max is 0 [ 196.518190][ T4231] usb 1-1: config 102 has no interface number 0 [ 196.524693][ T4231] usb 1-1: config 102 interface 225 has no altsetting 0 [ 196.657120][ T4277] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 196.666418][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.675068][ T4277] usb 3-1: Product: syz [ 196.679584][ T4277] usb 3-1: Manufacturer: syz [ 196.684202][ T4277] usb 3-1: SerialNumber: syz [ 196.690243][ T4231] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 196.701480][ T4277] usb 3-1: config 0 descriptor?? [ 196.706637][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.714992][ T4231] usb 1-1: Product: syz [ 196.719642][ T4231] usb 1-1: Manufacturer: syz [ 196.724288][ T4231] usb 1-1: SerialNumber: syz [ 196.739784][ T4277] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 196.748170][ T4277] pctv452e: pctv452e_power_ctrl: 1 [ 196.748170][ T4277] [ 196.755512][ T4277] usb 3-1: selecting invalid altsetting 3 [ 196.761417][ T4277] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 196.761417][ T4277] [ 196.772073][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 196.779838][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.797197][ T4233] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 196.807295][ T4277] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 196.815825][ T4277] usb 3-1: media controller created [ 196.821214][ T4277] dvb-usb: bulk message failed: -22 (8/0) [ 196.827077][ T4277] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 196.835042][ T4277] dvb-usb: MAC address reading failed. [ 196.850397][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.885467][ T4277] DVB: Unable to find symbol stb0899_attach() [ 196.892328][ T4277] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 196.939789][ T6108] dvb-usb: bulk message failed: -22 (7/0) [ 196.945732][ T6108] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 197.007421][ T4277] rc_core: IR keymap rc-tt-1500 not found [ 197.013172][ T4277] Registered IR keymap rc-empty [ 197.019791][ T4277] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 197.031921][ T4277] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input22 [ 197.043881][ T4277] dvb-usb: schedule remote query interval to 100 msecs. [ 197.053101][ T4231] (null): radio-mr800 - initialization failed [ 197.057271][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 197.060724][ T4277] pctv452e: pctv452e_power_ctrl: 0 [ 197.060724][ T4277] [ 197.072028][ T4231] radio-mr800: probe of 1-1:102.225 failed with error -22 [ 197.079614][ T4231] usbhid 1-1:102.225: couldn't find an input interrupt endpoint [ 197.087566][ T4277] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 197.099878][ T4231] usb 1-1: USB disconnect, device number 16 [ 197.109678][ T4277] usb 3-1: USB disconnect, device number 14 [ 197.174364][ T4277] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 197.192419][ T4233] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.217488][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.227259][ T4233] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 197.236568][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.255725][ T4233] usb 2-1: config 0 descriptor?? [ 197.618789][ T6136] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 198.547122][ T4173] Bluetooth: hci5: command 0x1001 tx timeout [ 198.553317][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 199.120870][ T6152] fuse: Bad value for 'fd' [ 200.138697][ T6158] binder: 6157:6158 ioctl c0306201 2000000001c0 returned -14 [ 200.216708][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 200.232529][ T4233] usbhid 2-1:0.0: can't add hid device: -71 [ 200.239244][ T4233] usbhid: probe of 2-1:0.0 failed with error -71 [ 200.259790][ T4233] usb 2-1: USB disconnect, device number 18 [ 200.288894][ T6164] 9pnet_virtio: no channels available for device 127.0.0.1 [ 200.360938][ T6166] pit: kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 200.370809][ T6166] pit: kvm: requested 93866 ns i8254 timer period limited to 200000 ns [ 200.487010][ T1111] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 200.535751][ T6172] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 200.576967][ T4232] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 200.637165][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 200.726956][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 200.816965][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 200.897294][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 200.963436][ T6176] device syzkaller0 entered promiscuous mode [ 200.997355][ T1111] usb 3-1: config 102 has an invalid interface number: 225 but max is 0 [ 201.005993][ T1111] usb 3-1: config 102 has no interface number 0 [ 201.012701][ T1111] usb 3-1: config 102 interface 225 has no altsetting 0 [ 201.097272][ T4232] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 201.106594][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.130221][ T4232] usb 1-1: Product: syz [ 201.134549][ T4232] usb 1-1: Manufacturer: syz [ 201.140529][ T4232] usb 1-1: SerialNumber: syz [ 201.151404][ T4232] usb 1-1: config 0 descriptor?? [ 201.209024][ T4232] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 201.217293][ T4232] pctv452e: pctv452e_power_ctrl: 1 [ 201.217293][ T4232] [ 201.224783][ T4232] usb 1-1: selecting invalid altsetting 3 [ 201.227852][ T1111] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 201.232389][ T4232] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 201.232389][ T4232] [ 201.250651][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.250713][ T1111] usb 3-1: Product: syz [ 201.250729][ T1111] usb 3-1: Manufacturer: syz [ 201.250744][ T1111] usb 3-1: SerialNumber: syz [ 201.273180][ T4232] dvb-usb: bulk message failed: -22 (5/0) [ 201.281795][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.307441][ T4232] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 201.316189][ T4232] usb 1-1: media controller created [ 201.327835][ T4232] dvb-usb: bulk message failed: -22 (8/0) [ 201.333787][ T4232] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 201.348153][ T4232] dvb-usb: MAC address reading failed. [ 201.372522][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.389258][ T6164] dvb-usb: bulk message failed: -22 (7/0) [ 201.404420][ T6164] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 201.458067][ T4232] DVB: Unable to find symbol stb0899_attach() [ 201.464448][ T4232] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 201.609926][ T1111] (null): radio-mr800 - initialization failed [ 201.616280][ T1111] radio-mr800: probe of 3-1:102.225 failed with error -22 [ 201.625448][ T1111] usbhid 3-1:102.225: couldn't find an input interrupt endpoint [ 201.642591][ T4232] rc_core: IR keymap rc-tt-1500 not found [ 201.648950][ T4232] Registered IR keymap rc-empty [ 201.652934][ T1111] usb 3-1: USB disconnect, device number 15 [ 201.674486][ T4232] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 201.698755][ T4232] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input23 [ 201.719000][ T4232] dvb-usb: schedule remote query interval to 100 msecs. [ 201.726018][ T4232] pctv452e: pctv452e_power_ctrl: 0 [ 201.726018][ T4232] [ 201.746951][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 201.768306][ T4232] usb 1-1: USB disconnect, device number 17 [ 201.828736][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 202.159629][ T6192] binder: 6190:6192 ioctl c0306201 2000000001c0 returned -14 [ 202.417045][ T4232] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 202.697226][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 202.751009][ T6209] fuse: Bad value for 'fd' [ 203.760777][ T4232] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.786638][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.797286][ T4232] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 203.806523][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.828169][ T4232] usb 1-1: config 0 descriptor?? [ 203.904946][ T6219] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 204.388446][ T4232] usbhid 1-1:0.0: can't add hid device: -71 [ 204.394863][ T4232] usbhid: probe of 1-1:0.0 failed with error -71 [ 204.422045][ T4232] usb 1-1: USB disconnect, device number 18 [ 204.475114][ T6222] 9pnet_virtio: no channels available for device 127.0.0.1 [ 204.535429][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 204.774249][ T4227] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 204.817880][ T6229] binder: 6228:6229 ioctl c0306201 2000000001c0 returned -14 [ 204.867981][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.027020][ T4227] usb 2-1: Using ep0 maxpacket: 8 [ 205.076192][ T6242] device syzkaller0 entered promiscuous mode [ 205.137005][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 205.263627][ T6245] fuse: Bad value for 'fd' [ 206.216712][ T4227] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 206.247206][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.267215][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.275267][ T4227] usb 2-1: Product: syz [ 206.290906][ T4227] usb 2-1: Manufacturer: syz [ 206.295598][ T4227] usb 2-1: SerialNumber: syz [ 206.315450][ T4227] usb 2-1: config 0 descriptor?? [ 206.327137][ T7] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 206.335906][ T7] usb 4-1: config 102 has no interface number 0 [ 206.346142][ T7] usb 4-1: config 102 interface 225 has no altsetting 0 [ 206.359175][ T4227] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 206.377003][ T4227] pctv452e: pctv452e_power_ctrl: 1 [ 206.377003][ T4227] [ 206.397069][ T4227] usb 2-1: selecting invalid altsetting 3 [ 206.403005][ T4227] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 206.403005][ T4227] [ 206.425973][ T4227] dvb-usb: bulk message failed: -22 (5/0) [ 206.439077][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.467247][ T4227] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 206.475904][ T4227] usb 2-1: media controller created [ 206.481412][ T4227] dvb-usb: bulk message failed: -22 (8/0) [ 206.487410][ T4227] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 206.495467][ T4227] dvb-usb: MAC address reading failed. [ 206.507188][ T7] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 206.521660][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.535325][ T7] usb 4-1: Product: syz [ 206.547398][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.559169][ T6222] dvb-usb: bulk message failed: -22 (7/0) [ 206.561939][ T7] usb 4-1: Manufacturer: syz [ 206.564974][ T6222] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 206.587107][ T7] usb 4-1: SerialNumber: syz [ 206.704297][ T4227] DVB: Unable to find symbol stb0899_attach() [ 206.713893][ T4227] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 206.917080][ T4227] rc_core: IR keymap rc-tt-1500 not found [ 206.923152][ T4227] Registered IR keymap rc-empty [ 206.930598][ T7] (null): radio-mr800 - initialization failed [ 206.947320][ T7] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 206.954191][ T4227] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 206.964990][ T7] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 207.013772][ T7] usb 4-1: USB disconnect, device number 16 [ 207.018081][ T4227] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input24 [ 207.056048][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 207.082159][ T4227] pctv452e: pctv452e_power_ctrl: 0 [ 207.082159][ T4227] [ 207.102422][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 207.180700][ T4227] usb 2-1: USB disconnect, device number 19 [ 207.207342][ T1111] dvb-usb: bulk message failed: -22 (4/0) [ 207.215748][ T1111] dvb-usb: error -22 while querying for an remote control event. [ 207.302151][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 207.327527][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'. [ 207.488647][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 207.517469][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 207.525421][ T6260] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 207.867762][ T6269] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 207.947009][ T4229] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 207.978923][ T6273] fuse: Bad value for 'fd' [ 208.965091][ T6282] 9pnet_virtio: no channels available for device 127.0.0.1 [ 209.117011][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 209.247163][ T4229] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.258560][ T4277] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 209.266230][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.273892][ T4229] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 209.284383][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.301825][ T4229] usb 2-1: config 0 descriptor?? [ 209.500552][ T4277] usb 1-1: Using ep0 maxpacket: 8 [ 209.587986][ T4233] Bluetooth: hci5: command 0x1003 tx timeout [ 209.594533][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 209.688441][ T4232] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 209.780406][ T4277] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 209.799464][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.807890][ T4277] usb 1-1: Product: syz [ 209.812195][ T4277] usb 1-1: Manufacturer: syz [ 209.817733][ T4277] usb 1-1: SerialNumber: syz [ 209.837988][ T4277] usb 1-1: config 0 descriptor?? [ 209.857071][ T4229] usbhid 2-1:0.0: can't add hid device: -71 [ 209.863121][ T4229] usbhid: probe of 2-1:0.0 failed with error -71 [ 209.895562][ T4229] usb 2-1: USB disconnect, device number 20 [ 209.909923][ T4277] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 209.926570][ T4277] pctv452e: pctv452e_power_ctrl: 1 [ 209.926570][ T4277] [ 209.937175][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 209.957212][ T4277] usb 1-1: selecting invalid altsetting 3 [ 209.970090][ T4277] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 209.970090][ T4277] [ 210.022555][ T4277] dvb-usb: bulk message failed: -22 (5/0) [ 210.055716][ T4277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.097322][ T4277] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 210.106710][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.117162][ T6282] dvb-usb: bulk message failed: -22 (7/0) [ 210.122948][ T6282] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 210.137287][ T4277] usb 1-1: media controller created [ 210.154245][ T4277] dvb-usb: bulk message failed: -22 (8/0) [ 210.167365][ T4277] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 210.203985][ T4277] dvb-usb: MAC address reading failed. [ 210.217177][ T4232] usb 3-1: config 102 has an invalid interface number: 225 but max is 0 [ 210.235995][ T4232] usb 3-1: config 102 has no interface number 0 [ 210.246197][ T4232] usb 3-1: config 102 interface 225 has no altsetting 0 [ 210.265056][ T4277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.386272][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 210.437137][ T4232] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 210.448034][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.457564][ T4277] DVB: Unable to find symbol stb0899_attach() [ 210.471766][ T4277] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 210.488209][ T4232] usb 3-1: Product: syz [ 210.498417][ T4232] usb 3-1: Manufacturer: syz [ 210.509898][ T4232] usb 3-1: SerialNumber: syz [ 210.607713][ T4277] rc_core: IR keymap rc-tt-1500 not found [ 210.617765][ T4277] Registered IR keymap rc-empty [ 210.641364][ T4277] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 210.664963][ T6296] device syzkaller0 entered promiscuous mode [ 210.707412][ T4277] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input25 [ 210.783310][ T4277] dvb-usb: schedule remote query interval to 100 msecs. [ 210.794091][ T4277] pctv452e: pctv452e_power_ctrl: 0 [ 210.794091][ T4277] [ 210.802408][ T4277] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 210.843956][ T4277] usb 1-1: USB disconnect, device number 19 [ 210.991190][ T4277] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 211.121673][ T4232] (null): radio-mr800 - initialization failed [ 211.149381][ T4232] radio-mr800: probe of 3-1:102.225 failed with error -22 [ 211.166231][ T4232] usbhid 3-1:102.225: couldn't find an input interrupt endpoint [ 211.229555][ T6312] fuse: Bad value for 'fd' [ 211.252239][ T4232] usb 3-1: USB disconnect, device number 16 [ 211.667150][ T4173] Bluetooth: hci5: command 0x1001 tx timeout [ 211.676991][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 212.294893][ T6320] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 212.330670][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 212.392134][ T6326] 9pnet_virtio: no channels available for device 127.0.0.1 [ 212.786986][ T4232] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 212.987074][ T4173] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 213.047041][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 213.227038][ T4173] usb 2-1: Using ep0 maxpacket: 16 [ 213.285761][ T6339] device syzkaller0 entered promiscuous mode [ 213.348040][ T4173] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.374005][ T4173] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.388967][ T4173] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 213.398522][ T4232] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 213.414721][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.423220][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.424605][ T4232] usb 3-1: Product: syz [ 213.437700][ T4173] usb 2-1: config 0 descriptor?? [ 213.454347][ T4232] usb 3-1: Manufacturer: syz [ 213.465564][ T4232] usb 3-1: SerialNumber: syz [ 213.494348][ T4232] usb 3-1: config 0 descriptor?? [ 213.549279][ T4232] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 213.562181][ T4232] pctv452e: pctv452e_power_ctrl: 1 [ 213.562181][ T4232] [ 213.580119][ T4232] usb 3-1: selecting invalid altsetting 3 [ 213.594517][ T4232] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 213.594517][ T4232] [ 213.634254][ T4232] dvb-usb: bulk message failed: -22 (5/0) [ 213.658206][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.711200][ T4232] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 213.727425][ T4232] usb 3-1: media controller created [ 213.736020][ T4232] dvb-usb: bulk message failed: -22 (8/0) [ 213.746996][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 213.756251][ T4232] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 213.781382][ T6326] dvb-usb: bulk message failed: -22 (7/0) [ 213.790848][ T6326] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 213.801264][ T4232] dvb-usb: MAC address reading failed. [ 213.843690][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.977047][ T4173] usbhid 2-1:0.0: can't add hid device: -71 [ 213.983213][ T4173] usbhid: probe of 2-1:0.0 failed with error -71 [ 214.012704][ T4173] usb 2-1: USB disconnect, device number 21 [ 214.047134][ T4232] DVB: Unable to find symbol stb0899_attach() [ 214.058310][ T4232] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 214.176982][ T4232] rc_core: IR keymap rc-tt-1500 not found [ 214.183013][ T4232] Registered IR keymap rc-empty [ 214.189499][ T4232] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 214.208303][ T4232] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input26 [ 214.220796][ T4232] dvb-usb: schedule remote query interval to 100 msecs. [ 214.229169][ T4232] pctv452e: pctv452e_power_ctrl: 0 [ 214.229169][ T4232] [ 214.236718][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 214.270901][ T4232] usb 3-1: USB disconnect, device number 17 [ 214.314965][ T4232] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 214.471610][ T6354] netlink: 'syz.4.675': attribute type 3 has an invalid length. [ 214.494849][ T6354] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.675'. [ 214.601702][ T6359] fuse: Bad value for 'fd' [ 214.767089][ T4173] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 215.776960][ T4173] usb 2-1: Using ep0 maxpacket: 32 [ 215.937252][ T4173] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.017109][ T4173] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 216.041142][ T4173] usb 2-1: config 102 has no interface number 0 [ 216.066990][ T4173] usb 2-1: config 102 interface 225 has no altsetting 0 [ 216.247228][ T4173] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 216.263742][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.272443][ T4173] usb 2-1: Product: syz [ 216.306937][ T4173] usb 2-1: Manufacturer: syz [ 216.311615][ T4173] usb 2-1: SerialNumber: syz [ 216.525502][ T6373] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 216.679231][ T4173] (null): radio-mr800 - initialization failed [ 216.690249][ T4173] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 216.701331][ T4173] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 216.723992][ T4173] usb 2-1: USB disconnect, device number 22 [ 216.955998][ T6379] 9pnet_virtio: no channels available for device 127.0.0.1 [ 217.226994][ T4173] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.407048][ T4277] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 217.466947][ T4173] usb 5-1: Using ep0 maxpacket: 8 [ 217.656940][ T4277] usb 2-1: Using ep0 maxpacket: 16 [ 217.767048][ T4173] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 217.776135][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.778061][ T4277] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.804001][ T4277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 217.811985][ T4173] usb 5-1: Product: syz [ 217.817467][ T4277] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 217.827794][ T4173] usb 5-1: Manufacturer: syz [ 217.833587][ T4173] usb 5-1: SerialNumber: syz [ 217.833648][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.854173][ T4277] usb 2-1: config 0 descriptor?? [ 217.862666][ T4173] usb 5-1: config 0 descriptor?? [ 217.918490][ T4173] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 217.940853][ T4173] pctv452e: pctv452e_power_ctrl: 1 [ 217.940853][ T4173] [ 217.954537][ T4173] usb 5-1: selecting invalid altsetting 3 [ 217.960713][ T4173] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 217.960713][ T4173] [ 217.976557][ T4173] dvb-usb: bulk message failed: -22 (5/0) [ 217.992922][ T4173] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.017765][ T4173] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 218.026369][ T4173] usb 5-1: media controller created [ 218.036515][ T4173] dvb-usb: bulk message failed: -22 (8/0) [ 218.043511][ T4173] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 218.057753][ T4173] dvb-usb: MAC address reading failed. [ 218.120562][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.129632][ T6379] dvb-usb: bulk message failed: -22 (7/0) [ 218.169624][ T6379] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 218.292566][ T4173] DVB: Unable to find symbol stb0899_attach() [ 218.304710][ T4173] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 218.387251][ T6401] fuse: Bad value for 'fd' [ 219.456943][ T4173] rc_core: IR keymap rc-tt-1500 not found [ 219.462781][ T4173] Registered IR keymap rc-empty [ 219.533138][ T4173] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 219.572394][ T4173] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input27 [ 219.600861][ T4173] dvb-usb: schedule remote query interval to 100 msecs. [ 219.624156][ T4173] pctv452e: pctv452e_power_ctrl: 0 [ 219.624156][ T4173] [ 219.629420][ T6411] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 219.663906][ T4173] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 219.711725][ T4173] usb 5-1: USB disconnect, device number 14 [ 219.777697][ T4173] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 220.177086][ T4173] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 220.426919][ T4173] usb 5-1: Using ep0 maxpacket: 32 [ 220.602510][ T4173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.711587][ T4173] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 220.727637][ T4173] usb 5-1: config 102 has no interface number 0 [ 220.734120][ T4173] usb 5-1: config 102 interface 225 has no altsetting 0 [ 220.737421][ T4277] usbhid 2-1:0.0: can't add hid device: -71 [ 220.756386][ T4277] usbhid: probe of 2-1:0.0 failed with error -71 [ 220.786547][ T4277] usb 2-1: USB disconnect, device number 23 [ 220.947225][ T4173] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 220.962385][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.972547][ T4173] usb 5-1: Product: syz [ 220.976832][ T4173] usb 5-1: Manufacturer: syz [ 220.981806][ T4173] usb 5-1: SerialNumber: syz [ 221.273360][ T6436] netlink: 'syz.2.702': attribute type 29 has an invalid length. [ 221.297243][ T6436] netlink: 'syz.2.702': attribute type 29 has an invalid length. [ 221.318729][ T4173] (null): radio-mr800 - initialization failed [ 221.325105][ T4173] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 221.345409][ T4173] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 221.392895][ T4173] usb 5-1: USB disconnect, device number 15 [ 221.473086][ T6439] fuse: Bad value for 'fd' [ 223.010009][ T1111] Bluetooth: hci5: command 0x1003 tx timeout [ 223.016770][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 223.288724][ T6456] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 223.547090][ T4277] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.962528][ T4277] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.982904][ T4277] usb 4-1: config 0 has no interface number 0 [ 223.996940][ T4277] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.021900][ T4277] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.041778][ T4277] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 224.054999][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.086228][ T4277] usb 4-1: config 0 descriptor?? [ 224.166022][ T6465] tipc: Enabled bearer , priority 0 [ 224.177530][ T6465] tipc: Resetting bearer [ 224.203125][ T6464] tipc: Disabling bearer [ 225.027562][ T4227] Bluetooth: hci5: command 0x1001 tx timeout [ 225.036097][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 225.907027][ T1111] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 225.942758][ T4231] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 226.152502][ T4277] usb 4-1: string descriptor 0 read error: -71 [ 226.177000][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 226.268296][ T4277] usbhid 4-1:0.1: can't add hid device: -71 [ 226.274337][ T4277] usbhid: probe of 4-1:0.1 failed with error -71 [ 226.309337][ T6484] fuse: Bad value for 'fd' [ 226.312204][ T4277] usb 4-1: USB disconnect, device number 17 [ 226.327144][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.348692][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.358637][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short [ 226.451032][ T1111] usb 3-1: config 102 has an invalid interface number: 225 but max is 0 [ 226.553815][ T1111] usb 3-1: config 102 has no interface number 0 [ 226.632204][ T1111] usb 3-1: config 102 interface 225 has no altsetting 0 [ 226.900559][ T1111] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 226.920244][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.938770][ T1111] usb 3-1: Product: syz [ 226.943090][ T1111] usb 3-1: Manufacturer: syz [ 226.963984][ T1111] usb 3-1: SerialNumber: syz [ 227.107596][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 227.667062][ T4231] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.676261][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.704831][ T6494] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 227.714394][ T4231] usb 1-1: SerialNumber: syz [ 227.749842][ T1111] (null): radio-mr800 - initialization failed [ 227.757269][ T1111] radio-mr800: probe of 3-1:102.225 failed with error -22 [ 227.765108][ T1111] usbhid 3-1:102.225: couldn't find an input interrupt endpoint [ 227.775266][ T1111] usb 3-1: USB disconnect, device number 18 [ 227.962042][ T6478] netlink: 'syz.0.717': attribute type 10 has an invalid length. [ 228.016109][ T6478] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.119838][ T4231] usb 1-1: skipping empty audio interface (v1) [ 228.153274][ T4231] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 228.175548][ T4231] usb 1-1: USB disconnect, device number 20 [ 228.216490][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.761801][ T6529] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 229.827187][ T4227] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 229.947041][ T4277] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 230.186993][ T4277] usb 5-1: Using ep0 maxpacket: 32 [ 230.237203][ T4227] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.245653][ T4227] usb 4-1: config 0 has no interface number 0 [ 230.252300][ T4227] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.263668][ T4227] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.274829][ T4227] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 230.293087][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.318418][ T4227] usb 4-1: config 0 descriptor?? [ 230.347270][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 230.427053][ T4277] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 230.441550][ T4277] usb 5-1: config 102 has no interface number 0 [ 230.448134][ T4277] usb 5-1: config 102 interface 225 has no altsetting 0 [ 230.657155][ T4277] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 230.672094][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.677660][ T4227] usbhid 4-1:0.1: can't add hid device: -71 [ 230.691255][ T4277] usb 5-1: Product: syz [ 230.700298][ T4227] usbhid: probe of 4-1:0.1 failed with error -71 [ 230.706779][ T4277] usb 5-1: Manufacturer: syz [ 230.711500][ T4277] usb 5-1: SerialNumber: syz [ 230.734697][ T4227] usb 4-1: USB disconnect, device number 18 [ 230.787968][ T6541] netlink: 'syz.0.737': attribute type 28 has an invalid length. [ 230.810915][ T6541] netlink: 'syz.0.737': attribute type 29 has an invalid length. [ 230.824647][ T6541] netlink: 4023 bytes leftover after parsing attributes in process `syz.0.737'. [ 230.842833][ T6541] netlink: 'syz.0.737': attribute type 28 has an invalid length. [ 230.856964][ T6541] netlink: 'syz.0.737': attribute type 29 has an invalid length. [ 230.874632][ T6541] netlink: 4023 bytes leftover after parsing attributes in process `syz.0.737'. [ 230.971377][ T6543] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 231.159212][ T4277] (null): radio-mr800 - initialization failed [ 231.182770][ T4277] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 231.217216][ T4277] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 231.279474][ T4277] usb 5-1: USB disconnect, device number 16 [ 232.280245][ T6564] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 232.398267][ T6568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.746'. [ 232.529315][ T6574] tipc: Enabling of bearer rejected, failed to enable media [ 232.537780][ T6573] fuse: Bad value for 'fd' [ 233.589225][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 233.874701][ T6595] device syzkaller0 entered promiscuous mode [ 234.157129][ T4173] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 234.397012][ T4277] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 234.568025][ T4173] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.586970][ T4173] usb 4-1: config 0 has no interface number 0 [ 234.594819][ T4173] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.614162][ T4173] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.626126][ T4173] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 234.635613][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.646999][ T4277] usb 5-1: Using ep0 maxpacket: 32 [ 234.656185][ T4173] usb 4-1: config 0 descriptor?? [ 235.597081][ T4277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.677210][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 235.687073][ T4277] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 235.688565][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 235.695470][ T4277] usb 5-1: config 102 has no interface number 0 [ 235.695507][ T4277] usb 5-1: config 102 interface 225 has no altsetting 0 [ 235.847124][ T4277] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 235.856432][ T4277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.876951][ T4277] usb 5-1: Product: syz [ 235.881197][ T4277] usb 5-1: Manufacturer: syz [ 235.885836][ T4277] usb 5-1: SerialNumber: syz [ 236.063804][ T6623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.760'. [ 236.229089][ T4277] (null): radio-mr800 - initialization failed [ 236.235423][ T4277] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 236.244854][ T4277] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 236.275517][ T4277] usb 5-1: USB disconnect, device number 17 [ 236.307373][ T6627] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 236.523608][ T6629] fuse: Bad value for 'fd' [ 237.514797][ T4173] usb 4-1: string descriptor 0 read error: -71 [ 237.526741][ T6633] device syzkaller0 entered promiscuous mode [ 237.647226][ T4173] usbhid 4-1:0.1: can't add hid device: -71 [ 237.654858][ T4173] usbhid: probe of 4-1:0.1 failed with error -71 [ 237.707638][ T4173] usb 4-1: USB disconnect, device number 19 [ 237.746992][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 237.757985][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 238.805264][ T6657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.771'. [ 239.037284][ T6671] fuse: Bad value for 'fd' [ 239.988136][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 240.137197][ T4232] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 240.396997][ T4232] usb 2-1: Using ep0 maxpacket: 32 [ 240.580743][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.680085][ T4232] usb 2-1: config 102 has an invalid interface number: 225 but max is 0 [ 240.706172][ T4232] usb 2-1: config 102 has no interface number 0 [ 240.728633][ T4232] usb 2-1: config 102 interface 225 has no altsetting 0 [ 240.902047][ T6682] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 240.907842][ T4232] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 240.934463][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.949138][ T4232] usb 2-1: Product: syz [ 240.953623][ T4232] usb 2-1: Manufacturer: syz [ 240.961842][ T4232] usb 2-1: SerialNumber: syz [ 242.139143][ T4232] (null): radio-mr800 - initialization failed [ 242.176353][ T4232] radio-mr800: probe of 2-1:102.225 failed with error -22 [ 242.185781][ T4232] usbhid 2-1:102.225: couldn't find an input interrupt endpoint [ 242.197927][ T4232] usb 2-1: USB disconnect, device number 24 [ 242.359506][ T6701] netlink: 52 bytes leftover after parsing attributes in process `syz.4.783'. [ 242.454155][ T6708] netlink: 'syz.4.785': attribute type 3 has an invalid length. [ 242.468537][ T6708] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.785'. [ 243.530516][ T6725] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 243.743208][ T6738] netlink: 52 bytes leftover after parsing attributes in process `syz.2.796'. [ 244.086943][ T21] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 244.186969][ T4173] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 244.209342][ T6746] device syzkaller0 entered promiscuous mode [ 244.227338][ T4277] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 244.457138][ T21] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 244.486093][ T21] usb 2-1: config 0 has no interface number 0 [ 244.497173][ T4277] usb 3-1: Using ep0 maxpacket: 32 [ 244.506344][ T21] usb 2-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 244.523820][ T21] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.557112][ T4173] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.576140][ T4173] usb 1-1: config 0 has no interface number 0 [ 244.582821][ T21] usb 2-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.607116][ T4173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.633562][ T21] usb 2-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 244.673822][ T4173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.677694][ T4277] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.698710][ T6755] binder: BINDER_SET_CONTEXT_MGR already set [ 244.713110][ T21] usb 2-1: config 0 interface 16 has no altsetting 0 [ 244.725706][ T4173] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 244.736562][ T6755] binder: 6749:6755 ioctl 4018620d 200000004a80 returned -16 [ 244.745061][ T21] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 244.762491][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.780397][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.787975][ T4277] usb 3-1: config 102 has an invalid interface number: 225 but max is 0 [ 244.813151][ T4277] usb 3-1: config 102 has no interface number 0 [ 244.826086][ T4173] usb 1-1: config 0 descriptor?? [ 244.836233][ T21] usb 2-1: config 0 descriptor?? [ 244.851695][ T4277] usb 3-1: config 102 interface 225 has no altsetting 0 [ 245.027167][ T4277] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 245.046779][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.082334][ T4277] usb 3-1: Product: syz [ 245.135282][ T4277] usb 3-1: Manufacturer: syz [ 245.151385][ T4277] usb 3-1: SerialNumber: syz [ 246.189048][ T4277] (null): radio-mr800 - initialization failed [ 246.205432][ T4277] radio-mr800: probe of 3-1:102.225 failed with error -22 [ 246.229471][ T4277] usbhid 3-1:102.225: couldn't find an input interrupt endpoint [ 246.256734][ T4277] usb 3-1: USB disconnect, device number 19 [ 246.300031][ T9] Bluetooth: hci5: Frame reassembly failed (-90) [ 246.316438][ T6769] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.340473][ T6769] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.371141][ T6769] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.383302][ T6771] netlink: 52 bytes leftover after parsing attributes in process `syz.4.808'. [ 246.796952][ T4227] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.887656][ T4173] usb 1-1: string descriptor 0 read error: -71 [ 246.931752][ T21] usbhid 2-1:0.16: can't add hid device: -71 [ 246.941584][ T21] usbhid: probe of 2-1:0.16 failed with error -71 [ 246.955975][ T21] usb 2-1: USB disconnect, device number 25 [ 247.018124][ T4173] usbhid 1-1:0.1: can't add hid device: -71 [ 247.033086][ T4173] usbhid: probe of 1-1:0.1 failed with error -71 [ 247.054005][ T4173] usb 1-1: USB disconnect, device number 21 [ 247.060109][ T4227] usb 5-1: Using ep0 maxpacket: 8 [ 247.138193][ T6787] input: syz0 as /devices/virtual/input/input28 [ 247.187219][ T4227] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 247.208450][ T4227] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 247.226957][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.607027][ T4173] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 248.247006][ T4173] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.247038][ T4173] usb 1-1: config 0 has no interface number 0 [ 248.247074][ T4173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.247105][ T4173] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.247144][ T4173] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 248.247179][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.249461][ T4173] usb 1-1: config 0 descriptor?? [ 248.307091][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 248.308005][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 249.676171][ T6806] tipc: Enabling of bearer rejected, failed to enable media [ 249.765817][ T6809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.819'. [ 249.795949][ T21] usb 5-1: USB disconnect, device number 18 [ 250.052808][ T4173] usb 1-1: string descriptor 0 read error: -71 [ 250.079366][ T6827] fuse: Bad value for 'fd' [ 250.198041][ T4173] usbhid 1-1:0.1: can't add hid device: -71 [ 250.209421][ T4173] usbhid: probe of 1-1:0.1 failed with error -71 [ 250.267329][ T1111] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 250.339807][ T4173] usb 1-1: USB disconnect, device number 22 [ 250.377172][ T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 250.585373][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 250.596987][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 250.711596][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.732737][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.778408][ T21] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.798531][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.838287][ T1111] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.858373][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.882296][ T1111] usb 3-1: SerialNumber: syz [ 250.907258][ T21] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.926750][ T21] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.955541][ T21] usb 5-1: Manufacturer: syz [ 250.983190][ T21] usb 5-1: config 0 descriptor?? [ 251.458536][ T6823] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 251.517143][ T21] rc_core: IR keymap rc-hauppauge not found [ 251.523126][ T21] Registered IR keymap rc-empty [ 251.624738][ T21] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 251.731158][ T21] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 252.447321][ T6823] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.500392][ T1111] usb 3-1: skipping empty audio interface (v1) [ 252.565695][ T1111] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 252.584522][ T6841] device syzkaller0 entered promiscuous mode [ 252.608270][ T1111] usb 3-1: USB disconnect, device number 20 [ 252.649005][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.667347][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 252.820391][ T4229] usb 5-1: USB disconnect, device number 19 [ 253.154547][ T6855] netlink: 52 bytes leftover after parsing attributes in process `syz.2.832'. [ 253.579034][ T6865] tipc: Enabling of bearer rejected, failed to enable media [ 253.636973][ T1111] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 253.934788][ T6875] fuse: Bad value for 'fd' [ 254.033168][ T1111] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.107842][ T1111] usb 3-1: config 0 has no interface number 0 [ 254.230903][ T1111] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.453267][ T1111] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.499473][ T1111] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 254.535722][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.405734][ T1111] usb 3-1: config 0 descriptor?? [ 255.634532][ T6883] device syzkaller0 entered promiscuous mode [ 255.919199][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925730][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.526959][ T4229] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 256.727023][ T1111] usb 3-1: string descriptor 0 read error: -71 [ 256.815014][ T6896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.843'. [ 256.867134][ T1111] usbhid 3-1:0.1: can't add hid device: -71 [ 256.873197][ T1111] usbhid: probe of 3-1:0.1 failed with error -71 [ 256.957130][ T4229] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 256.966801][ T1111] usb 3-1: USB disconnect, device number 21 [ 256.975755][ T4229] usb 5-1: config 0 has no interface number 0 [ 256.984033][ T4229] usb 5-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 256.997029][ T4277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 257.016108][ T4229] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.046462][ T6907] tipc: Enabling of bearer rejected, failed to enable media [ 257.061649][ T4229] usb 5-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.088975][ T4229] usb 5-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 257.119407][ T4229] usb 5-1: config 0 interface 16 has no altsetting 0 [ 257.132451][ T4229] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 257.151853][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.213785][ T4229] usb 5-1: config 0 descriptor?? [ 257.367237][ T4277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.385856][ T4277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.467180][ T4277] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.481280][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.490256][ T4277] usb 4-1: SerialNumber: syz [ 257.506404][ T6922] fuse: Bad value for 'fd' [ 259.897047][ T4277] usb 4-1: can't set config #1, error -71 [ 259.911616][ T4277] usb 4-1: USB disconnect, device number 20 [ 260.024400][ T4239] Bluetooth: hci5: Frame reassembly failed (-84) [ 260.351474][ T6941] netlink: 52 bytes leftover after parsing attributes in process `syz.0.856'. [ 260.737038][ T4277] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 260.967165][ T4229] usbhid 5-1:0.16: can't add hid device: -71 [ 260.979032][ T4229] usbhid: probe of 5-1:0.16 failed with error -71 [ 261.009895][ T4229] usb 5-1: USB disconnect, device number 20 [ 261.133355][ T6949] tipc: Enabled bearer , priority 0 [ 261.150107][ T4277] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.163484][ T4277] usb 4-1: config 0 has no interface number 0 [ 261.166676][ T6949] tipc: Resetting bearer [ 261.177060][ T4277] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.204537][ T4277] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.235135][ T4277] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 261.274318][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.302266][ T6948] tipc: Disabling bearer [ 261.309854][ T4277] usb 4-1: config 0 descriptor?? [ 262.066995][ T1111] Bluetooth: hci5: command 0x1003 tx timeout [ 262.077726][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 262.723125][ T4229] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 263.063584][ T6973] fuse: Bad value for 'fd' [ 264.104888][ T6985] netlink: 76 bytes leftover after parsing attributes in process `syz.0.871'. [ 264.147001][ T1111] Bluetooth: hci5: command 0x1001 tx timeout [ 264.153192][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 264.446840][ C0] sched: RT throttling activated [ 265.171958][ T4277] usb 4-1: string descriptor 0 read error: -71 [ 265.222568][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.239766][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.297153][ T4277] usbhid 4-1:0.1: can't add hid device: -71 [ 265.316069][ T4277] usbhid: probe of 4-1:0.1 failed with error -71 [ 265.333769][ T4277] usb 4-1: USB disconnect, device number 21 [ 265.343867][ T4229] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.358442][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.375114][ T4229] usb 3-1: SerialNumber: syz [ 265.454227][ T7001] binder: 6999:7001 ioctl 4018620d 0 returned -22 [ 265.471064][ T4229] usb 3-1: can't set config #1, error -71 [ 265.479322][ T4229] usb 3-1: USB disconnect, device number 22 [ 265.696529][ T7011] device syzkaller0 entered promiscuous mode [ 265.777008][ T4277] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 265.859550][ T7016] fuse: Bad value for 'fd' [ 266.237197][ T1111] Bluetooth: hci5: command 0x1009 tx timeout [ 266.727224][ T7020] netlink: 76 bytes leftover after parsing attributes in process `syz.3.884'. [ 267.426927][ T4229] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 267.458436][ T7038] binder: 7033:7038 ioctl 4018620d 0 returned -22 [ 267.569178][ T7045] netlink: 76 bytes leftover after parsing attributes in process `syz.4.895'. [ 267.622381][ T1111] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 267.787196][ T4229] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.795992][ T4229] usb 3-1: config 0 has no interface number 0 [ 267.802723][ T4229] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.813791][ T4229] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.823800][ T4229] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 267.837062][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.865832][ T4229] usb 3-1: config 0 descriptor?? [ 268.017185][ T1111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.037101][ T1111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.037394][ T4277] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 268.069875][ T4277] usb 4-1: config 0 has no interface number 0 [ 268.081446][ T4277] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 268.102661][ T4277] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.133389][ T4277] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.154397][ T4277] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 268.168138][ T4229] usb 3-1: string descriptor 0 read error: -71 [ 268.177148][ T1111] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.199103][ T4277] usb 4-1: config 0 interface 16 has no altsetting 0 [ 268.211834][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.211868][ T4277] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 268.244378][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.269980][ T1111] usb 1-1: SerialNumber: syz [ 268.276232][ T4277] usb 4-1: config 0 descriptor?? [ 268.287115][ T4229] usbhid 3-1:0.1: can't add hid device: -71 [ 268.293138][ T4229] usbhid: probe of 3-1:0.1 failed with error -71 [ 268.320489][ T4229] usb 3-1: USB disconnect, device number 23 [ 268.554608][ T7030] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 268.609768][ T1111] usb 1-1: skipping empty audio interface (v1) [ 268.647128][ T4277] usbhid 4-1:0.16: can't add hid device: -71 [ 268.653237][ T4277] usbhid: probe of 4-1:0.16 failed with error -71 [ 268.672655][ T4277] usb 4-1: USB disconnect, device number 22 [ 268.688364][ T1111] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 268.726389][ T1111] usb 1-1: USB disconnect, device number 23 [ 268.753324][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.730258][ T7076] binder: 7074:7076 ioctl 4018620d 0 returned -22 [ 270.345769][ T7089] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 271.137170][ T4173] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 271.523803][ T7128] device syzkaller0 entered promiscuous mode [ 271.537104][ T4173] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.553384][ T4173] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.647135][ T4173] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.656919][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.664954][ T4173] usb 2-1: SerialNumber: syz [ 271.697000][ T4231] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 271.933282][ T7102] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 271.937253][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 272.036735][ T7102] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 272.098273][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.109931][ T4173] usb 2-1: skipping empty audio interface (v1) [ 272.156286][ T4173] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 272.165895][ T4173] usb 2-1: USB disconnect, device number 26 [ 272.177142][ T4231] usb 4-1: config 102 has an invalid interface number: 225 but max is 0 [ 272.193981][ T4231] usb 4-1: config 102 has no interface number 0 [ 272.218670][ T4231] usb 4-1: config 102 interface 225 has no altsetting 0 [ 272.397134][ T4231] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 272.399143][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.429392][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.442040][ T4231] usb 4-1: Product: syz [ 272.446449][ T4231] usb 4-1: Manufacturer: syz [ 272.454545][ T4231] usb 4-1: SerialNumber: syz [ 272.831571][ T4231] (null): radio-mr800 - initialization failed [ 272.852949][ T4231] radio-mr800: probe of 4-1:102.225 failed with error -22 [ 272.861516][ T4231] usbhid 4-1:102.225: couldn't find an input interrupt endpoint [ 272.888171][ T4231] usb 4-1: USB disconnect, device number 23 [ 273.836975][ T4173] Bluetooth: hci5: command 0x1003 tx timeout [ 273.843320][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 273.882569][ T7182] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 274.463199][ T7196] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 274.596959][ T4173] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 274.897541][ T4173] usb 5-1: Using ep0 maxpacket: 32 [ 274.921392][ T7221] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 275.097273][ T4173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.187134][ T4173] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 275.195636][ T4173] usb 5-1: config 102 has no interface number 0 [ 275.212343][ T4173] usb 5-1: config 102 interface 225 has no altsetting 0 [ 275.270806][ T7230] netlink: 'syz.3.960': attribute type 6 has an invalid length. [ 275.421800][ T4173] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 275.433506][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.441943][ T4173] usb 5-1: Product: syz [ 275.460231][ T4173] usb 5-1: Manufacturer: syz [ 275.485443][ T4173] usb 5-1: SerialNumber: syz [ 275.546968][ T4231] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 275.879162][ T4173] (null): radio-mr800 - initialization failed [ 275.889311][ T4173] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 275.901392][ T4173] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 275.917215][ T4231] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.925381][ T4231] usb 4-1: config 0 has no interface number 0 [ 275.925606][ T4173] usb 5-1: USB disconnect, device number 21 [ 275.946732][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 275.953639][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 275.963559][ T4231] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 275.976047][ T4231] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.005881][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.031731][ T4231] usb 4-1: config 0 descriptor?? [ 276.057293][ T7230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 276.083235][ T4231] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 276.187008][ T4232] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 276.345991][ T4229] usb 4-1: USB disconnect, device number 24 [ 276.547065][ T4232] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.559199][ T4232] usb 2-1: config 0 has no interface number 0 [ 276.579981][ T4232] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.604179][ T4232] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.624636][ T4232] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 276.651985][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.665972][ T4232] usb 2-1: config 0 descriptor?? [ 276.921249][ T7267] netlink: 'syz.3.975': attribute type 4 has an invalid length. [ 276.969123][ T4232] usb 2-1: string descriptor 0 read error: -71 [ 277.079470][ T4232] usbhid 2-1:0.1: can't add hid device: -71 [ 277.086102][ T4232] usbhid: probe of 2-1:0.1 failed with error -71 [ 277.134466][ T4232] usb 2-1: USB disconnect, device number 27 [ 277.834589][ T7285] device syzkaller0 entered promiscuous mode [ 277.997248][ T4173] Bluetooth: hci5: command 0x1009 tx timeout [ 278.065424][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 278.112453][ T7290] device bridge0 entered promiscuous mode [ 278.134593][ T7290] bridge0: port 3(macvtap1) entered blocking state [ 278.161253][ T7290] bridge0: port 3(macvtap1) entered disabled state [ 278.195095][ T7290] device bridge0 left promiscuous mode [ 278.528192][ T7296] device syzkaller0 entered promiscuous mode [ 278.547961][ T7297] device syzkaller0 entered promiscuous mode [ 278.654318][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 278.670129][ T7301] device veth1_macvtap left promiscuous mode [ 278.967743][ T7312] device syzkaller0 entered promiscuous mode [ 279.004017][ T7312] 0: reclassify loop, rule prio 0, protocol 700 [ 279.147028][ T4173] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 279.299417][ T7322] 9pnet_virtio: no channels available for device 127.0.0.1 [ 279.557053][ T4173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.570679][ T4173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.597198][ T4227] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 279.667167][ T4173] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.676800][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.685692][ T4173] usb 5-1: SerialNumber: syz [ 279.722612][ T7327] device syzkaller0 entered promiscuous mode [ 279.866938][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 279.953710][ T7307] netlink: 'syz.4.992': attribute type 10 has an invalid length. [ 280.006364][ T7307] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.063939][ T7339] netlink: 'syz.3.1006': attribute type 6 has an invalid length. [ 280.064551][ T4173] usb 5-1: skipping empty audio interface (v1) [ 280.093531][ T4173] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 280.109309][ T4173] usb 5-1: USB disconnect, device number 22 [ 280.174582][ T7341] device syzkaller0 entered promiscuous mode [ 280.197216][ T4227] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 280.218211][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.226359][ T4227] usb 1-1: Product: syz [ 280.240965][ T4227] usb 1-1: Manufacturer: syz [ 280.245749][ T4227] usb 1-1: SerialNumber: syz [ 280.262671][ T4227] usb 1-1: config 0 descriptor?? [ 280.329300][ T4227] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 280.338553][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.343472][ T4227] pctv452e: pctv452e_power_ctrl: 1 [ 280.343472][ T4227] [ 280.364685][ T4227] usb 1-1: selecting invalid altsetting 3 [ 280.371080][ T4227] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 280.371080][ T4227] [ 280.396264][ T4227] dvb-usb: bulk message failed: -22 (5/0) [ 280.422820][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.447525][ T4227] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 280.456353][ T4227] usb 1-1: media controller created [ 280.461914][ T4227] dvb-usb: bulk message failed: -22 (8/0) [ 280.468186][ T4227] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 280.476272][ T4227] dvb-usb: MAC address reading failed. [ 280.498909][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.529343][ T7322] dvb-usb: bulk message failed: -22 (7/0) [ 280.535628][ T7322] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 280.612789][ T4227] DVB: Unable to find symbol stb0899_attach() [ 280.619766][ T4227] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 280.745646][ T7351] netlink: 'syz.4.1010': attribute type 6 has an invalid length. [ 280.797104][ T4227] rc_core: IR keymap rc-tt-1500 not found [ 280.812628][ T4227] Registered IR keymap rc-empty [ 280.827364][ T4227] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 280.853252][ T4227] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input30 [ 280.873945][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 280.886519][ T4227] pctv452e: pctv452e_power_ctrl: 0 [ 280.886519][ T4227] [ 280.895487][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 280.908660][ T7353] device syzkaller0 entered promiscuous mode [ 280.916809][ T4227] usb 1-1: USB disconnect, device number 24 [ 281.033706][ T4227] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 281.072854][ T4173] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 281.235481][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 281.487106][ T4173] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.495309][ T4173] usb 5-1: config 0 has no interface number 0 [ 281.502042][ T4173] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 5279, setting to 8 [ 281.535573][ T4173] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.545481][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.556419][ T4173] usb 5-1: config 0 descriptor?? [ 281.587380][ T7351] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 281.625803][ T4173] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 281.672252][ T7373] device syzkaller0 entered promiscuous mode [ 281.834488][ T7351] udc-core: couldn't find an available UDC or it's busy [ 281.863076][ T7351] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.104749][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1021'. [ 282.267124][ T7388] 9pnet_virtio: no channels available for device 127.0.0.1 [ 282.493003][ T7393] device xfrm0 entered promiscuous mode [ 282.577049][ T1111] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 282.612213][ T7400] tipc: Enabled bearer , priority 0 [ 282.646452][ T7400] device syzkaller0 entered promiscuous mode [ 282.696439][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 282.743208][ T7400] tipc: Resetting bearer [ 282.757972][ T7399] tipc: Resetting bearer [ 282.787129][ T7399] tipc: Disabling bearer [ 282.856996][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 283.131399][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 283.148485][ T7429] device bridge0 entered promiscuous mode [ 283.155484][ T7429] bridge0: port 3(macvtap1) entered blocking state [ 283.162456][ T7429] bridge0: port 3(macvtap1) entered disabled state [ 283.171121][ T7429] device bridge0 left promiscuous mode [ 283.197145][ T1111] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 283.206899][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.228704][ T1111] usb 2-1: Product: syz [ 283.253945][ T1111] usb 2-1: Manufacturer: syz [ 283.259899][ T1111] usb 2-1: SerialNumber: syz [ 283.275609][ T1111] usb 2-1: config 0 descriptor?? [ 283.319333][ T1111] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 283.342323][ T1111] pctv452e: pctv452e_power_ctrl: 1 [ 283.342323][ T1111] [ 283.371062][ T1111] usb 2-1: selecting invalid altsetting 3 [ 283.383266][ T1111] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 283.383266][ T1111] [ 283.416504][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 283.453282][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.497326][ T1111] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 283.516312][ T1111] usb 2-1: media controller created [ 283.523998][ T7388] dvb-usb: bulk message failed: -22 (7/0) [ 283.539906][ T7388] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 283.562514][ T1111] dvb-usb: bulk message failed: -22 (8/0) [ 283.574284][ T1111] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 283.602536][ T1111] dvb-usb: MAC address reading failed. [ 283.640745][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.779334][ T7451] device syzkaller0 entered promiscuous mode [ 283.811729][ T1111] DVB: Unable to find symbol stb0899_attach() [ 283.822518][ T1111] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 283.883097][ T4229] usb 5-1: USB disconnect, device number 23 [ 284.017087][ T1111] rc_core: IR keymap rc-tt-1500 not found [ 284.022906][ T1111] Registered IR keymap rc-empty [ 284.041934][ T1111] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 284.079496][ T1111] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input31 [ 284.140769][ T1111] dvb-usb: schedule remote query interval to 100 msecs. [ 284.171481][ T1111] pctv452e: pctv452e_power_ctrl: 0 [ 284.171481][ T1111] [ 284.193762][ T1111] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 284.253644][ T1111] usb 2-1: USB disconnect, device number 28 [ 284.374595][ T1111] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 285.107020][ T4229] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 285.139412][ T7494] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.212966][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 285.312660][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 285.467180][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.503380][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.617055][ T4229] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 285.663689][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.707029][ T4229] usb 1-1: SerialNumber: syz [ 285.981853][ T7490] netlink: 'syz.0.1053': attribute type 10 has an invalid length. [ 286.059739][ T4229] usb 1-1: skipping empty audio interface (v1) [ 286.140672][ T4229] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 286.154500][ T7520] device syzkaller0 entered promiscuous mode [ 286.178356][ T4229] usb 1-1: USB disconnect, device number 25 [ 286.447559][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.177068][ T1111] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 287.413221][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 287.441892][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1075'. [ 287.567196][ T1111] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 287.593458][ T1111] usb 1-1: config 0 has no interface number 0 [ 287.605917][ T7565] binder: BINDER_SET_CONTEXT_MGR already set [ 287.628222][ T1111] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 287.665058][ T7565] binder: 7563:7565 ioctl 4018620d 200000004a80 returned -16 [ 287.673904][ T1111] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.691211][ T7568] binder: 7563:7568 ioctl c0306201 0 returned -14 [ 287.701334][ T1111] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.734529][ T1111] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 287.790628][ T1111] usb 1-1: config 0 interface 16 has no altsetting 0 [ 287.820022][ T1111] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 287.837926][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.865368][ T1111] usb 1-1: config 0 descriptor?? [ 287.964924][ T7572] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 288.147377][ T4173] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 288.522051][ T7581] 9pnet_virtio: no channels available for device 127.0.0.1 [ 288.527891][ T4173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.560868][ T4173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.657098][ T4173] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 288.674863][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 288.724122][ T4173] usb 4-1: SerialNumber: syz [ 288.806963][ T4229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 289.003226][ T7567] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 289.057110][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 289.089694][ T4173] usb 4-1: skipping empty audio interface (v1) [ 289.134078][ T4173] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 289.180751][ T4173] usb 4-1: USB disconnect, device number 25 [ 289.337738][ T4229] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 289.360473][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.391651][ T4229] usb 2-1: Product: syz [ 289.406674][ T4229] usb 2-1: Manufacturer: syz [ 289.422322][ T4229] usb 2-1: SerialNumber: syz [ 289.455300][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.478623][ T4229] usb 2-1: config 0 descriptor?? [ 289.532690][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 289.549441][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 289.549441][ T4229] [ 289.583198][ T4229] usb 2-1: selecting invalid altsetting 3 [ 289.654889][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 289.654889][ T4229] [ 289.706084][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 289.732158][ T7581] dvb-usb: bulk message failed: -22 (7/0) [ 289.744862][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.756981][ T7581] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 289.807195][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 289.823926][ T4229] usb 2-1: media controller created [ 289.842053][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 289.863885][ T4229] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 289.910966][ T4229] dvb-usb: MAC address reading failed. [ 289.953065][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.132779][ T4229] DVB: Unable to find symbol stb0899_attach() [ 290.144023][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 290.427113][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 290.432915][ T4229] Registered IR keymap rc-empty [ 290.467783][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 290.558200][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input32 [ 290.600493][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 290.655034][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 290.697752][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 290.697752][ T4229] [ 290.705219][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 290.818969][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 290.852398][ T4229] usb 2-1: USB disconnect, device number 29 [ 290.888505][ T7616] netlink: 'syz.3.1093': attribute type 21 has an invalid length. [ 290.958474][ T7616] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.967956][ T7616] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.976760][ T7616] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.985510][ T7616] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.008354][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 291.085903][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 291.105209][ T7616] netlink: 'syz.3.1093': attribute type 21 has an invalid length. [ 291.108130][ T1111] usbhid 1-1:0.16: can't add hid device: -71 [ 291.143391][ T1111] usbhid: probe of 1-1:0.16 failed with error -71 [ 291.190087][ T1111] usb 1-1: USB disconnect, device number 26 [ 291.299218][ T7621] device syzkaller0 entered promiscuous mode [ 291.336472][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 291.391257][ T7630] device vlan3 entered promiscuous mode [ 291.413712][ T7630] device bridge0 entered promiscuous mode [ 291.586956][ T1111] Bluetooth: hci4: command 0x0405 tx timeout [ 292.309440][ T7660] lo speed is unknown, defaulting to 1000 [ 292.338562][ T7660] lo speed is unknown, defaulting to 1000 [ 292.386188][ T7660] lo speed is unknown, defaulting to 1000 [ 292.400684][ T7664] device syzkaller0 entered promiscuous mode [ 292.413116][ T7660] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 292.457777][ T7660] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 292.550304][ T7660] lo speed is unknown, defaulting to 1000 [ 292.567935][ T7660] lo speed is unknown, defaulting to 1000 [ 292.599732][ T7660] lo speed is unknown, defaulting to 1000 [ 292.621474][ T7660] lo speed is unknown, defaulting to 1000 [ 292.656361][ T7660] lo speed is unknown, defaulting to 1000 [ 292.842165][ T7680] device syzkaller1 entered promiscuous mode [ 292.934835][ T7686] wlan1: mtu greater than device maximum [ 292.952416][ T7686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 293.187444][ T7700] device syzkaller0 entered promiscuous mode [ 293.303114][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 293.317472][ T7708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1124'. [ 293.340511][ T7708] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 293.434768][ T7717] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 293.483354][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 293.820525][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1140'. [ 293.962518][ T7753] device syzkaller0 entered promiscuous mode [ 294.533426][ T7789] lo speed is unknown, defaulting to 1000 [ 294.616086][ T7794] device syzkaller0 entered promiscuous mode [ 294.718293][ T7791] xt_CT: No such helper "syz1" [ 294.858236][ T1111] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 295.096959][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 295.457127][ T1111] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 295.482658][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.566051][ T1111] usb 1-1: Product: syz [ 295.588304][ T1111] usb 1-1: Manufacturer: syz [ 295.609700][ T1111] usb 1-1: SerialNumber: syz [ 295.638822][ T1111] usb 1-1: config 0 descriptor?? [ 295.709626][ T1111] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 295.747149][ T1111] pctv452e: pctv452e_power_ctrl: 1 [ 295.747149][ T1111] [ 295.778237][ T1111] usb 1-1: selecting invalid altsetting 3 [ 295.823511][ T1111] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 295.823511][ T1111] [ 295.872857][ T1111] dvb-usb: bulk message failed: -22 (5/0) [ 295.915129][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.037294][ T1111] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 296.056360][ T1111] usb 1-1: media controller created [ 296.081044][ T1111] dvb-usb: bulk message failed: -22 (8/0) [ 296.151143][ T1111] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 296.183084][ T1111] dvb-usb: MAC address reading failed. [ 296.264090][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.482736][ T1111] DVB: Unable to find symbol stb0899_attach() [ 296.497063][ T1111] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 296.569861][ T7854] tipc: Enabled bearer , priority 0 [ 296.602080][ T7854] device syzkaller0 entered promiscuous mode [ 296.635854][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 296.697803][ T7854] tipc: Resetting bearer [ 296.750358][ T7852] tipc: Resetting bearer [ 296.756965][ T1111] rc_core: IR keymap rc-tt-1500 not found [ 296.764144][ T1111] Registered IR keymap rc-empty [ 296.785070][ T1111] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 296.832053][ T1111] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input33 [ 296.847026][ T4173] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 296.894455][ T1111] dvb-usb: schedule remote query interval to 100 msecs. [ 296.917825][ T1111] pctv452e: pctv452e_power_ctrl: 0 [ 296.917825][ T1111] [ 296.937163][ T1111] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 297.028583][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 297.040032][ T21] dvb-usb: error -22 while querying for an remote control event. [ 297.090966][ T7852] tipc: Disabling bearer [ 297.198324][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 297.204248][ T21] dvb-usb: error -22 while querying for an remote control event. [ 297.227257][ T4173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.245886][ T7845] Dead loop on virtual device ip6_vti0, fix it urgently! [ 297.255221][ T4173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.357211][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 297.366733][ T21] dvb-usb: error -22 while querying for an remote control event. [ 297.377260][ T4173] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.398801][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.437510][ T4173] usb 4-1: SerialNumber: syz [ 297.530358][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 297.536720][ T21] dvb-usb: error -22 while querying for an remote control event. [ 297.596466][ T7880] 9pnet_virtio: no channels available for device 127.0.0.1 [ 297.717124][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 297.726236][ T7855] netlink: 'syz.3.1177': attribute type 10 has an invalid length. [ 297.733301][ T21] dvb-usb: error -22 while querying for an remote control event. [ 297.765322][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1184'. [ 297.797560][ T4173] usb 4-1: skipping empty audio interface (v1) [ 297.813103][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 297.827107][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 297.853314][ T4173] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 297.897040][ T4173] usb 4-1: USB disconnect, device number 26 [ 297.920086][ T4229] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 297.923341][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.968990][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 297.974848][ T21] dvb-usb: error -22 while querying for an remote control event. [ 298.117178][ T21] dvb-usb: bulk message failed: -22 (4/0) [ 298.124114][ T21] dvb-usb: error -22 while querying for an remote control event. [ 298.151009][ T7885] binder: BINDER_SET_CONTEXT_MGR already set [ 298.185141][ T7885] binder: 7883:7885 ioctl 4018620d 200000004a80 returned -16 [ 298.197005][ T4229] usb 2-1: Using ep0 maxpacket: 8 [ 298.229913][ T21] usb 1-1: USB disconnect, device number 27 [ 298.319758][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 298.477271][ T4229] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 298.486470][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.545562][ T4229] usb 2-1: Product: syz [ 298.554536][ T4229] usb 2-1: Manufacturer: syz [ 298.567857][ T4229] usb 2-1: SerialNumber: syz [ 298.607254][ T4229] usb 2-1: config 0 descriptor?? [ 298.622894][ T7902] tipc: Enabled bearer , priority 0 [ 298.649098][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 298.670455][ T7902] device syzkaller0 entered promiscuous mode [ 298.677012][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 298.677012][ T4229] [ 298.697698][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 298.705549][ T4229] usb 2-1: selecting invalid altsetting 3 [ 298.728882][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 298.728882][ T4229] [ 298.754039][ T7902] tipc: Resetting bearer [ 298.773742][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 298.788191][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.802325][ T7900] tipc: Resetting bearer [ 298.849055][ T7880] dvb-usb: bulk message failed: -22 (7/0) [ 298.854961][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 298.866936][ T7880] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 298.887000][ T4229] usb 2-1: media controller created [ 298.892402][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 298.907288][ T4229] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 298.925497][ T4229] dvb-usb: MAC address reading failed. [ 298.961753][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.985852][ T7900] tipc: Disabling bearer [ 299.086288][ T4229] DVB: Unable to find symbol stb0899_attach() [ 299.107092][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 299.172747][ T7911] lo speed is unknown, defaulting to 1000 [ 299.266963][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 299.274499][ T4229] Registered IR keymap rc-empty [ 299.294796][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 299.331907][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input34 [ 299.375176][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 299.396787][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 299.396787][ T4229] [ 299.413229][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 299.443646][ T4229] usb 2-1: USB disconnect, device number 30 [ 299.557653][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 299.584416][ T7919] device syzkaller0 entered promiscuous mode [ 299.636188][ T7923] netlink: 'syz.0.1199': attribute type 25 has an invalid length. [ 299.670414][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1199'. [ 299.800081][ T7927] device syzkaller0 entered promiscuous mode [ 299.856166][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 299.897492][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 300.010938][ T7938] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 300.110975][ T7946] 9pnet_virtio: no channels available for device 127.0.0.1 [ 300.145152][ T7940] lo speed is unknown, defaulting to 1000 [ 300.271891][ T7952] tipc: Enabled bearer , priority 0 [ 300.318554][ T7952] device syzkaller0 entered promiscuous mode [ 300.364917][ T7950] tipc: Resetting bearer [ 300.406902][ T4229] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 300.438814][ T7950] tipc: Disabling bearer [ 300.453034][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 300.677104][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 300.735620][ T7973] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 301.033003][ T4229] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 301.052877][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.087169][ T4229] usb 1-1: Product: syz [ 301.096614][ T7993] lo speed is unknown, defaulting to 1000 [ 301.104061][ T4229] usb 1-1: Manufacturer: syz [ 301.113118][ T4229] usb 1-1: SerialNumber: syz [ 301.135046][ T7998] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 301.145692][ T4229] usb 1-1: config 0 descriptor?? [ 301.200761][ T4229] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 301.214453][ T4229] pctv452e: pctv452e_power_ctrl: 1 [ 301.214453][ T4229] [ 301.229071][ T4229] usb 1-1: selecting invalid altsetting 3 [ 301.240663][ T4229] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 301.240663][ T4229] [ 301.273693][ T4229] dvb-usb: bulk message failed: -22 (5/0) [ 301.301384][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.337194][ T4229] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 301.352058][ T4229] usb 1-1: media controller created [ 301.364662][ T4229] dvb-usb: bulk message failed: -22 (8/0) [ 301.377890][ T4229] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 301.396885][ T4229] dvb-usb: MAC address reading failed. [ 301.404798][ T7946] dvb-usb: bulk message failed: -22 (7/0) [ 301.414439][ T7946] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 301.472974][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.554330][ T4229] DVB: Unable to find symbol stb0899_attach() [ 301.564327][ T4229] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 301.684727][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 301.837017][ T4229] rc_core: IR keymap rc-tt-1500 not found [ 301.842964][ T4229] Registered IR keymap rc-empty [ 301.873955][ T4229] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 301.944323][ T4229] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input35 [ 301.983813][ T4229] dvb-usb: schedule remote query interval to 100 msecs. [ 302.032643][ T4229] pctv452e: pctv452e_power_ctrl: 0 [ 302.032643][ T4229] [ 302.076616][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 302.121919][ T4229] usb 1-1: USB disconnect, device number 28 [ 302.244204][ T4229] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 302.338284][ T8043] lo speed is unknown, defaulting to 1000 [ 302.381361][ T8019] syz.3.1234 (8019) used greatest stack depth: 18512 bytes left [ 302.779168][ T8068] 9pnet_virtio: no channels available for device 127.0.0.1 [ 303.077050][ T4173] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 303.084973][ T21] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 303.326967][ T4173] usb 5-1: Using ep0 maxpacket: 32 [ 303.332344][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 303.517317][ T4173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.601199][ T8096] lo speed is unknown, defaulting to 1000 [ 303.617457][ T4173] usb 5-1: config 102 has an invalid interface number: 225 but max is 0 [ 303.628757][ T4173] usb 5-1: config 102 has no interface number 0 [ 303.635084][ T4173] usb 5-1: config 102 interface 225 has no altsetting 0 [ 303.642861][ T21] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 303.664808][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.693573][ T21] usb 4-1: Product: syz [ 303.707441][ T21] usb 4-1: Manufacturer: syz [ 303.712467][ T21] usb 4-1: SerialNumber: syz [ 303.773890][ T21] usb 4-1: config 0 descriptor?? [ 303.829315][ T21] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 303.863277][ T21] pctv452e: pctv452e_power_ctrl: 1 [ 303.863277][ T21] [ 303.871316][ T4173] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27 [ 303.886148][ T4173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.900156][ T21] usb 4-1: selecting invalid altsetting 3 [ 303.918739][ T21] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 303.918739][ T21] [ 303.931520][ T4173] usb 5-1: Product: syz [ 303.944988][ T4173] usb 5-1: Manufacturer: syz [ 303.959739][ T4173] usb 5-1: SerialNumber: syz [ 303.966726][ T21] dvb-usb: bulk message failed: -22 (5/0) [ 303.999398][ T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 304.029335][ T8068] dvb-usb: bulk message failed: -22 (7/0) [ 304.035130][ T8068] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 304.074191][ T21] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 304.090472][ T21] usb 4-1: media controller created [ 304.106950][ T21] dvb-usb: bulk message failed: -22 (8/0) [ 304.112735][ T21] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 304.139359][ T21] dvb-usb: MAC address reading failed. [ 304.199674][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.270605][ T8118] xt_recent: Unsupported userspace flags (000000b1) [ 304.319125][ T4173] (null): radio-mr800 - initialization failed [ 304.325439][ T4173] radio-mr800: probe of 5-1:102.225 failed with error -22 [ 304.367302][ T4173] usbhid 5-1:102.225: couldn't find an input interrupt endpoint [ 304.381689][ T21] DVB: Unable to find symbol stb0899_attach() [ 304.396922][ T21] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 304.411289][ T4173] usb 5-1: USB disconnect, device number 24 [ 304.443433][ T8122] device syzkaller0 entered promiscuous mode [ 304.586933][ T21] rc_core: IR keymap rc-tt-1500 not found [ 304.592976][ T21] Registered IR keymap rc-empty [ 304.623575][ T21] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 304.674164][ T21] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input36 [ 304.708893][ T21] dvb-usb: schedule remote query interval to 100 msecs. [ 304.737529][ T21] pctv452e: pctv452e_power_ctrl: 0 [ 304.737529][ T21] [ 304.744876][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 304.834317][ T21] usb 4-1: USB disconnect, device number 27 [ 304.944086][ T21] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 305.063646][ T8135] lo speed is unknown, defaulting to 1000 [ 305.092582][ T8137] netlink: 'syz.4.1276': attribute type 13 has an invalid length. [ 305.145724][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.173671][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.206166][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.886077][ T8156] device syzkaller0 entered promiscuous mode [ 306.342978][ T8172] ================================================================== [ 306.351607][ T8172] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 306.359399][ T8172] Write of size 4 at addr ffff888023e187b8 by task syz.3.1288/8172 [ 306.367325][ T8172] [ 306.369698][ T8172] CPU: 1 PID: 8172 Comm: syz.3.1288 Not tainted syzkaller #0 [ 306.377104][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.387219][ T8172] Call Trace: [ 306.390533][ T8172] [ 306.393495][ T8172] dump_stack_lvl+0x188/0x250 [ 306.398297][ T8172] ? show_regs_print_info+0x20/0x20 [ 306.403560][ T8172] ? _printk+0xda/0x130 [ 306.407754][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 306.413172][ T8172] ? load_image+0x400/0x400 [ 306.417713][ T8172] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 306.423309][ T8172] ? lockdep_hardirqs_on+0x94/0x140 [ 306.428569][ T8172] print_address_description+0x60/0x2d0 [ 306.434155][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 306.439578][ T8172] kasan_report+0xdf/0x130 [ 306.444037][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 306.449457][ T8172] kasan_check_range+0x235/0x290 [ 306.454435][ T8172] ax25_dev_device_down+0x35e/0x520 [ 306.459684][ T8172] ax25_device_event+0x4b4/0x4f0 [ 306.464664][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 306.470088][ T8172] __dev_notify_flags+0x158/0x300 [ 306.475167][ T8172] ? __dev_change_flags+0x6a0/0x6a0 [ 306.480521][ T8172] ? __dev_change_flags+0x4d0/0x6a0 [ 306.485767][ T8172] ? dev_get_flags+0x1c0/0x1c0 [ 306.490684][ T8172] ? __mutex_lock_common+0x465/0x2400 [ 306.496107][ T8172] dev_change_flags+0xe3/0x1a0 [ 306.500931][ T8172] dev_ifsioc+0x130/0xd50 [ 306.505304][ T8172] ? dev_ioctl+0xe30/0xe30 [ 306.509776][ T8172] ? apparmor_capable+0x12c/0x190 [ 306.514848][ T8172] ? full_name_hash+0x8e/0xe0 [ 306.519573][ T8172] dev_ioctl+0x545/0xe30 [ 306.523970][ T8172] ? _copy_from_user+0x111/0x170 [ 306.528950][ T8172] sock_do_ioctl+0x245/0x320 [ 306.533601][ T8172] ? sock_show_fdinfo+0xb0/0xb0 [ 306.538510][ T8172] sock_ioctl+0x4d2/0x710 [ 306.542889][ T8172] ? sock_poll+0x410/0x410 [ 306.547363][ T8172] ? bpf_lsm_file_ioctl+0x5/0x10 [ 306.552343][ T8172] ? security_file_ioctl+0x7c/0xa0 [ 306.557501][ T8172] ? sock_poll+0x410/0x410 [ 306.561958][ T8172] __se_sys_ioctl+0xfa/0x170 [ 306.566590][ T8172] do_syscall_64+0x4c/0xa0 [ 306.571042][ T8172] ? clear_bhb_loop+0x30/0x80 [ 306.575758][ T8172] ? clear_bhb_loop+0x30/0x80 [ 306.580475][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.586423][ T8172] RIP: 0033:0x7f599cfeb799 [ 306.591007][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.610658][ T8172] RSP: 002b:00007f599b224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.619124][ T8172] RAX: ffffffffffffffda RBX: 00007f599d265090 RCX: 00007f599cfeb799 [ 306.627136][ T8172] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 306.635147][ T8172] RBP: 00007f599d081bd9 R08: 0000000000000000 R09: 0000000000000000 [ 306.643164][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.651180][ T8172] R13: 00007f599d265128 R14: 00007f599d265090 R15: 00007ffc9d79d418 [ 306.659215][ T8172] [ 306.662268][ T8172] [ 306.664623][ T8172] Allocated by task 7708: [ 306.668975][ T8172] __kasan_kmalloc+0xb5/0xf0 [ 306.673599][ T8172] ax25_dev_device_up+0x50/0x580 [ 306.678570][ T8172] ax25_device_event+0x483/0x4f0 [ 306.683544][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 306.688950][ T8172] __dev_notify_flags+0x194/0x300 [ 306.694007][ T8172] dev_change_flags+0xe3/0x1a0 [ 306.698796][ T8172] dev_ifsioc+0x130/0xd50 [ 306.703154][ T8172] dev_ioctl+0x545/0xe30 [ 306.707429][ T8172] sock_do_ioctl+0x245/0x320 [ 306.712052][ T8172] sock_ioctl+0x4d2/0x710 [ 306.716426][ T8172] __se_sys_ioctl+0xfa/0x170 [ 306.721190][ T8172] do_syscall_64+0x4c/0xa0 [ 306.725648][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.731581][ T8172] [ 306.733936][ T8172] Freed by task 8172: [ 306.737966][ T8172] kasan_set_track+0x4b/0x70 [ 306.742598][ T8172] kasan_set_free_info+0x1f/0x40 [ 306.747715][ T8172] ____kasan_slab_free+0xd5/0x110 [ 306.752841][ T8172] slab_free_freelist_hook+0xea/0x170 [ 306.758263][ T8172] kfree+0xef/0x2a0 [ 306.762128][ T8172] ax25_dev_device_down+0x1c0/0x520 [ 306.767480][ T8172] ax25_device_event+0x4b4/0x4f0 [ 306.772464][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 306.777871][ T8172] __dev_notify_flags+0x158/0x300 [ 306.782941][ T8172] dev_change_flags+0xe3/0x1a0 [ 306.787747][ T8172] dev_ifsioc+0x130/0xd50 [ 306.792120][ T8172] dev_ioctl+0x545/0xe30 [ 306.796404][ T8172] sock_do_ioctl+0x245/0x320 [ 306.801119][ T8172] sock_ioctl+0x4d2/0x710 [ 306.805507][ T8172] __se_sys_ioctl+0xfa/0x170 [ 306.810213][ T8172] do_syscall_64+0x4c/0xa0 [ 306.814651][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.820547][ T8172] [ 306.822880][ T8172] Last potentially related work creation: [ 306.828587][ T8172] kasan_save_stack+0x35/0x60 [ 306.833270][ T8172] kasan_record_aux_stack+0xb8/0x100 [ 306.838566][ T8172] insert_work+0x54/0x3d0 [ 306.842912][ T8172] __queue_work+0x9c5/0xd50 [ 306.847495][ T8172] queue_work_on+0x124/0x1f0 [ 306.852118][ T8172] call_usermodehelper_exec+0x2e3/0x520 [ 306.857704][ T8172] __request_module+0x40b/0x980 [ 306.862583][ T8172] dev_ioctl+0x3c0/0xe30 [ 306.866863][ T8172] sock_do_ioctl+0x245/0x320 [ 306.871650][ T8172] sock_ioctl+0x4d2/0x710 [ 306.876001][ T8172] __se_sys_ioctl+0xfa/0x170 [ 306.880598][ T8172] do_syscall_64+0x4c/0xa0 [ 306.885025][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.890954][ T8172] [ 306.893292][ T8172] Second to last potentially related work creation: [ 306.899891][ T8172] kasan_save_stack+0x35/0x60 [ 306.904607][ T8172] kasan_record_aux_stack+0xb8/0x100 [ 306.909934][ T8172] insert_work+0x54/0x3d0 [ 306.914293][ T8172] __queue_work+0x9c5/0xd50 [ 306.918823][ T8172] queue_work_on+0x124/0x1f0 [ 306.923442][ T8172] netdevice_event+0x803/0x900 [ 306.928236][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 306.933673][ T8172] register_netdevice+0x12a6/0x1710 [ 306.938968][ T8172] nsim_create+0x32d/0x3e0 [ 306.943390][ T8172] __nsim_dev_port_add+0x698/0xab0 [ 306.948507][ T8172] nsim_dev_port_add_all+0x37/0x100 [ 306.953735][ T8172] nsim_dev_probe+0x763/0x9c0 [ 306.958444][ T8172] really_probe+0x284/0xc80 [ 306.962975][ T8172] __driver_probe_device+0x18c/0x330 [ 306.968283][ T8172] driver_probe_device+0x4f/0x420 [ 306.973408][ T8172] __device_attach_driver+0x2b0/0x500 [ 306.978887][ T8172] bus_for_each_drv+0x184/0x210 [ 306.983762][ T8172] __device_attach+0x2a8/0x480 [ 306.988542][ T8172] bus_probe_device+0xbc/0x1e0 [ 306.993334][ T8172] device_add+0xa00/0xfb0 [ 306.997682][ T8172] new_device_store+0x3e8/0x760 [ 307.002597][ T8172] kernfs_fop_write_iter+0x379/0x4c0 [ 307.007919][ T8172] vfs_write+0x745/0xd60 [ 307.012199][ T8172] ksys_write+0x152/0x260 [ 307.016557][ T8172] do_syscall_64+0x4c/0xa0 [ 307.020978][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.026884][ T8172] [ 307.029316][ T8172] The buggy address belongs to the object at ffff888023e18700 [ 307.029316][ T8172] which belongs to the cache kmalloc-192 of size 192 [ 307.043565][ T8172] The buggy address is located 184 bytes inside of [ 307.043565][ T8172] 192-byte region [ffff888023e18700, ffff888023e187c0) [ 307.056960][ T8172] The buggy address belongs to the page: [ 307.062642][ T8172] page:ffffea00008f8600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23e18 [ 307.072830][ T8172] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 307.080457][ T8172] raw: 00fff00000000200 ffffea0000943280 0000000200000002 ffff888016c41a00 [ 307.089095][ T8172] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 307.097687][ T8172] page dumped because: kasan: bad access detected [ 307.104222][ T8172] page_owner tracks the page as allocated [ 307.109980][ T8172] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 12000434143, free_ts 11030092702 [ 307.125735][ T8172] get_page_from_freelist+0x1bbd/0x1ca0 [ 307.131308][ T8172] __alloc_pages+0x1ee/0x480 [ 307.135903][ T8172] alloc_page_interleave+0x24/0x1e0 [ 307.141110][ T8172] new_slab+0xc0/0x4b0 [ 307.145191][ T8172] ___slab_alloc+0x80a/0xdd0 [ 307.149789][ T8172] __kmalloc+0x1cd/0x330 [ 307.154057][ T8172] usb_alloc_urb+0x3f/0x140 [ 307.158612][ T8172] usb_control_msg+0x115/0x3e0 [ 307.163402][ T8172] usb_get_descriptor+0xad/0x3d0 [ 307.168372][ T8172] usb_get_configuration+0x38d/0x4d30 [ 307.173773][ T8172] usb_new_device+0x138/0x1660 [ 307.178567][ T8172] register_root_hub+0x278/0x580 [ 307.183612][ T8172] usb_add_hcd+0xa88/0xef0 [ 307.188050][ T8172] dummy_hcd_probe+0x130/0x260 [ 307.192837][ T8172] platform_probe+0x137/0x1c0 [ 307.197527][ T8172] really_probe+0x284/0xc80 [ 307.202063][ T8172] page last free stack trace: [ 307.206761][ T8172] free_unref_page_prepare+0x637/0x6c0 [ 307.212359][ T8172] free_unref_page+0x8f/0x2a0 [ 307.217071][ T8172] __vunmap+0x8b9/0xa50 [ 307.221263][ T8172] free_work+0x56/0x80 [ 307.225353][ T8172] process_one_work+0x85f/0x1010 [ 307.230295][ T8172] worker_thread+0xaa6/0x1290 [ 307.234981][ T8172] kthread+0x436/0x520 [ 307.239047][ T8172] ret_from_fork+0x1f/0x30 [ 307.243482][ T8172] [ 307.245806][ T8172] Memory state around the buggy address: [ 307.251527][ T8172] ffff888023e18680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 307.259617][ T8172] ffff888023e18700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.267696][ T8172] >ffff888023e18780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 307.275755][ T8172] ^ [ 307.281655][ T8172] ffff888023e18800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 307.289733][ T8172] ffff888023e18880: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 307.297817][ T8172] ================================================================== [ 307.305900][ T8172] Disabling lock debugging due to kernel taint [ 307.327436][ T8172] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 307.334695][ T8172] CPU: 0 PID: 8172 Comm: syz.3.1288 Tainted: G B syzkaller #0 [ 307.343460][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.353537][ T8172] Call Trace: [ 307.356843][ T8172] [ 307.359797][ T8172] dump_stack_lvl+0x188/0x250 [ 307.364507][ T8172] ? show_regs_print_info+0x20/0x20 [ 307.369735][ T8172] ? load_image+0x400/0x400 [ 307.374847][ T8172] panic+0x2e5/0x810 [ 307.378793][ T8172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.384997][ T8172] ? bpf_jit_dump+0xd0/0xd0 [ 307.389545][ T8172] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 307.395559][ T8172] ? _raw_spin_unlock+0x40/0x40 [ 307.400442][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 307.405855][ T8172] check_panic_on_warn+0x80/0xa0 [ 307.410829][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 307.416232][ T8172] end_report+0x6d/0xf0 [ 307.420404][ T8172] kasan_report+0x102/0x130 [ 307.424940][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 307.430366][ T8172] kasan_check_range+0x235/0x290 [ 307.435356][ T8172] ax25_dev_device_down+0x35e/0x520 [ 307.440596][ T8172] ax25_device_event+0x4b4/0x4f0 [ 307.445582][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 307.450991][ T8172] __dev_notify_flags+0x158/0x300 [ 307.456096][ T8172] ? __dev_change_flags+0x6a0/0x6a0 [ 307.461346][ T8172] ? __dev_change_flags+0x4d0/0x6a0 [ 307.466582][ T8172] ? dev_get_flags+0x1c0/0x1c0 [ 307.471457][ T8172] ? __mutex_lock_common+0x465/0x2400 [ 307.476947][ T8172] dev_change_flags+0xe3/0x1a0 [ 307.477047][ T4228] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 307.481746][ T8172] dev_ifsioc+0x130/0xd50 [ 307.481770][ T8172] ? dev_ioctl+0xe30/0xe30 [ 307.498076][ T8172] ? apparmor_capable+0x12c/0x190 [ 307.503125][ T8172] ? full_name_hash+0x8e/0xe0 [ 307.507818][ T8172] dev_ioctl+0x545/0xe30 [ 307.512086][ T8172] ? _copy_from_user+0x111/0x170 [ 307.517062][ T8172] sock_do_ioctl+0x245/0x320 [ 307.521792][ T8172] ? sock_show_fdinfo+0xb0/0xb0 [ 307.526691][ T8172] sock_ioctl+0x4d2/0x710 [ 307.531056][ T8172] ? sock_poll+0x410/0x410 [ 307.535548][ T8172] ? bpf_lsm_file_ioctl+0x5/0x10 [ 307.540542][ T8172] ? security_file_ioctl+0x7c/0xa0 [ 307.545684][ T8172] ? sock_poll+0x410/0x410 [ 307.550129][ T8172] __se_sys_ioctl+0xfa/0x170 [ 307.554758][ T8172] do_syscall_64+0x4c/0xa0 [ 307.559205][ T8172] ? clear_bhb_loop+0x30/0x80 [ 307.563905][ T8172] ? clear_bhb_loop+0x30/0x80 [ 307.568609][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.574616][ T8172] RIP: 0033:0x7f599cfeb799 [ 307.579038][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.598668][ T8172] RSP: 002b:00007f599b224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.607093][ T8172] RAX: ffffffffffffffda RBX: 00007f599d265090 RCX: 00007f599cfeb799 [ 307.615089][ T8172] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 307.623069][ T8172] RBP: 00007f599d081bd9 R08: 0000000000000000 R09: 0000000000000000 [ 307.631083][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.639078][ T8172] R13: 00007f599d265128 R14: 00007f599d265090 R15: 00007ffc9d79d418 [ 307.647084][ T8172] [ 307.650491][ T8172] Kernel Offset: disabled [ 307.654833][ T8172] Rebooting in 86400 seconds..