last executing test programs: 4m8.980061127s ago: executing program 2 (id=950): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x3, 0x8, 0x6, 0xb942, 0x5, 0x1}, 0x20) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) epoll_create1(0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r4], 0x30}}], 0x1, 0xc0) 4m8.859762993s ago: executing program 2 (id=952): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0xfffffffffffffe2f, 0x0}, 0x40000004}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x21e4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) 4m7.872386726s ago: executing program 2 (id=964): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a0100000000000000937b7b22a1319130feaab952ac4703caae4be68907eb47fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e742937b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9eff0cbb4b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd131d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa466", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bba59b", 0x70}, {&(0x7f0000002300)="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", 0x21e}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m6.936340925s ago: executing program 2 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0) 4m6.830143731s ago: executing program 2 (id=975): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}]}]}}]}, 0x74}}, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m6.48530397s ago: executing program 2 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 4m6.184245546s ago: executing program 32 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 7.001733827s ago: executing program 0 (id=2311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x5, 0xfffff014}, {0x6, 0xe1, 0xc6, 0x7ffe}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r6 = accept4$netrom(r2, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @netrom, @netrom, @rose, @rose, @netrom]}, &(0x7f0000000440)=0x48, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x5, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x2, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x6, 0x0, 0x10000, 0x3f5, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 3.821536986s ago: executing program 1 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xcf, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x5, 0x1, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7800, 0x7f, 0x51}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0) 3.795057298s ago: executing program 0 (id=2318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.75186669s ago: executing program 3 (id=2319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000018c0)=""/81, 0x51}], 0x3}, 0x1003) 3.529594782s ago: executing program 1 (id=2322): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x880) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 3.392267689s ago: executing program 0 (id=2323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0xfffffffffffffdfb, &(0x7f00000006c0)={@fd, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.362154071s ago: executing program 4 (id=2324): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="c5819a27274164ec0f9eeb3cfd0fbd2a53", 0x11}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xfece5538a3894cc4}], 0x1, 0x20000040) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xb}], 0x1, 0x10, 0x0) 3.348357242s ago: executing program 0 (id=2325): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 3.240254848s ago: executing program 4 (id=2326): socket$kcm(0x10, 0x2, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x28300) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_setup(0x4166, &(0x7f0000000200)={0x0, 0x1c3c, 0x0, 0x3, 0x65, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3.152520032s ago: executing program 4 (id=2327): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x5, 0xfffff014}, {0x6, 0xe1, 0xc6, 0x7ffe}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r5 = accept4$netrom(r2, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @netrom, @netrom, @rose, @rose, @netrom]}, &(0x7f0000000440)=0x48, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x5, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x2, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x6, 0x0, 0x10000, 0x3f5, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2.82310677s ago: executing program 3 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setuid(0xee00) syz_fuse_handle_req(r0, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273ad030000000000000092b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e16450000000000007fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e5648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f721c5767f17f3feb35300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6dbf1390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219dffffffff280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x5, {0x7, 0x29, 0x2, 0x1122070, 0x9, 0xf5, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.660083998s ago: executing program 3 (id=2329): socket(0x1e, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2.607574701s ago: executing program 1 (id=2330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, 0x0) 2.229944561s ago: executing program 1 (id=2331): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) 444.898847ms ago: executing program 0 (id=2332): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x300}) 395.151789ms ago: executing program 4 (id=2333): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 387.330399ms ago: executing program 3 (id=2334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="c5819a27274164ec0f9eeb3cfd0fbd2a53", 0x11}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xfece5538a3894cc4}], 0x1, 0x20000040) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0xb}], 0x1, 0x10, 0x0) 367.362591ms ago: executing program 1 (id=2335): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0xfffffffffffffdfb, &(0x7f00000006c0)={@fd, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 232.338187ms ago: executing program 0 (id=2336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}, {&(0x7f00000018c0)=""/81, 0x51}], 0x3}, 0x1003) 199.2776ms ago: executing program 3 (id=2337): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x3, 0x8, 0x6, 0xb942, 0x5, 0x1}, 0x20) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) epoll_create1(0x80000) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b0001006970366772650000340002800800", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRES32=r5], 0x30}}], 0x1, 0xc0) 192.80578ms ago: executing program 1 (id=2338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x880) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 133.810883ms ago: executing program 4 (id=2339): socket$kcm(0x2, 0x3, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) socket(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x38}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 57.034057ms ago: executing program 3 (id=2340): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 0s ago: executing program 4 (id=2341): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x5, 0xfffff014}, {0x6, 0xe1, 0xc6, 0x7ffe}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r5 = accept4$netrom(r2, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @netrom, @netrom, @rose, @rose, @netrom]}, &(0x7f0000000440)=0x48, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x5, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x2, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x6, 0x0, 0x10000, 0x3f5, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x8, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) kernel console output (not intermixed with test programs): 9.0009: unknown main item tag 0x0 [ 287.124635][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.152141][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.162687][ T5811] usb 4-1: Product: syz [ 287.179764][ T5811] usb 4-1: Manufacturer: syz [ 287.184820][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.195247][ T5811] usb 4-1: SerialNumber: syz [ 287.206420][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.216750][ T5811] usb 4-1: config 0 descriptor?? [ 287.231593][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.248666][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.257460][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 287.273619][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.281792][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 287.292511][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.315861][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.351048][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 287.363224][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.380666][ T5833] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 287.393976][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 287.408835][ T5833] hid-generic 0006:0004:0009.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 287.418805][ T5811] usb 4-1: media controller created [ 287.426327][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.484685][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 287.504149][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 287.542799][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 287.573725][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 287.606614][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 287.650954][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 287.757895][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 287.808680][ T9608] fido_id[9608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 287.822851][ T5811] dvb-usb: error while querying for an remote control event. [ 288.017488][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 288.025942][ T5811] dvb-usb: error while querying for an remote control event. [ 288.187635][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 288.211224][ T5811] dvb-usb: error while querying for an remote control event. [ 288.418824][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 288.431157][ T5811] dvb-usb: error while querying for an remote control event. [ 288.597314][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 288.614648][ T5811] dvb-usb: error while querying for an remote control event. [ 288.645188][ T9637] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1195'. [ 288.797656][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 288.805993][ T5811] dvb-usb: error while querying for an remote control event. [ 288.979515][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 288.989703][ T5811] dvb-usb: error while querying for an remote control event. [ 289.158629][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 289.176173][ T5811] dvb-usb: error while querying for an remote control event. [ 289.214749][ T788] usb 4-1: USB disconnect, device number 32 [ 289.319897][ T788] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 289.439101][ T5811] IPVS: starting estimator thread 0... [ 289.527318][ T9661] IPVS: using max 26 ests per chain, 62400 per kthread [ 290.422399][ T9694] syzkaller0: entered promiscuous mode [ 290.428954][ T9694] syzkaller0: entered allmulticast mode [ 290.860080][ T9706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1209'. [ 290.947403][ T5811] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 291.142882][ T5811] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 291.151625][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.167776][ T5811] usb 1-1: config 0 has no interface number 0 [ 291.173978][ T5811] usb 1-1: config 0 interface 205 has no altsetting 0 [ 291.185112][ T5811] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 291.201966][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.212656][ T5811] usb 1-1: Product: syz [ 291.221843][ T5811] usb 1-1: Manufacturer: syz [ 291.226990][ T5811] usb 1-1: SerialNumber: syz [ 291.241504][ T5811] usb 1-1: config 0 descriptor?? [ 291.259724][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 291.271756][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 291.314846][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 291.325698][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 291.338574][ T5811] usb 1-1: media controller created [ 291.346004][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.362687][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 291.373167][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 291.394528][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 291.409624][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 291.417082][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 291.458273][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 291.522032][ T5811] usb 1-1: USB disconnect, device number 32 [ 291.578743][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 291.599675][ T5833] dvb-usb: error while querying for an remote control event. [ 291.648673][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 292.233109][ T9728] syzkaller0: entered promiscuous mode [ 292.239403][ T9728] syzkaller0: entered allmulticast mode [ 292.790860][ T5083] block nbd0: Receive control failed (result -32) [ 293.197442][ T23] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 293.317623][ T5833] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 293.391432][ T23] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 293.404851][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.415577][ T23] usb 4-1: config 0 has no interface number 0 [ 293.422099][ T23] usb 4-1: config 0 interface 205 has no altsetting 0 [ 293.432667][ T23] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 293.444453][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.454212][ T23] usb 4-1: Product: syz [ 293.459500][ T23] usb 4-1: Manufacturer: syz [ 293.464462][ T23] usb 4-1: SerialNumber: syz [ 293.486806][ T23] usb 4-1: config 0 descriptor?? [ 293.507345][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 293.514459][ T5833] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 293.528731][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 293.537353][ T5833] usb 2-1: config 0 has no interface number 0 [ 293.560451][ T5833] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.574896][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 293.598103][ T5833] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.608077][ T9759] binder: 9758:9759 unknown command 0 [ 293.615173][ T9759] binder: 9758:9759 ioctl c0306201 200000000080 returned -22 [ 293.626896][ T5833] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 293.628945][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 293.659887][ T5833] usb 2-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 293.684293][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 293.687671][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.719516][ T23] usb 4-1: media controller created [ 293.726702][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.738700][ T5833] usb 2-1: config 0 descriptor?? [ 293.771240][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 293.784827][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 293.827961][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 293.857961][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 293.866575][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 293.897270][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 293.941522][ T23] usb 4-1: USB disconnect, device number 33 [ 294.060253][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 294.155904][ T5833] usbhid 2-1:0.4: can't add hid device: -71 [ 294.187435][ T5833] usbhid: probe of 2-1:0.4 failed with error -71 [ 294.207571][ T5833] usb 2-1: USB disconnect, device number 34 [ 294.413403][ T9774] pim6reg99999999: entered allmulticast mode [ 295.164946][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.172830][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.181352][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.189130][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.407580][ T5846] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 295.503534][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 295.601165][ T5846] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 295.611706][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.630146][ T5846] usb 4-1: config 0 has no interface number 0 [ 295.636420][ T5846] usb 4-1: config 0 interface 205 has no altsetting 0 [ 295.656556][ T5846] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 295.666000][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.677583][ T5846] usb 4-1: Product: syz [ 295.681777][ T5846] usb 4-1: Manufacturer: syz [ 295.686428][ T5846] usb 4-1: SerialNumber: syz [ 295.693561][ T5846] usb 4-1: config 0 descriptor?? [ 295.706827][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 295.727250][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 295.780520][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 295.794740][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 295.809490][ T5846] usb 4-1: media controller created [ 295.816716][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.834376][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 295.847308][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 295.870597][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 295.887873][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 295.895101][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 295.927875][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 295.957059][ T5846] usb 4-1: USB disconnect, device number 34 [ 296.005465][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 296.518530][ T5811] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 296.680064][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 296.727279][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 296.749059][ T5811] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 296.771848][ T5811] usb 5-1: config 0 has no interface number 0 [ 296.781839][ T5811] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.793422][ T5811] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.803732][ T5811] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.817354][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 296.840100][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.857932][ T9829] syzkaller0: entered promiscuous mode [ 296.863493][ T9829] syzkaller0: entered allmulticast mode [ 296.871635][ T5811] usb 5-1: config 0 descriptor?? [ 297.081652][ T9835] syzkaller0: entered promiscuous mode [ 297.087380][ T9835] syzkaller0: entered allmulticast mode [ 297.282602][ T9841] fuse: Bad value for 'fd' [ 297.300775][ T9841] fuseblk: Bad value for 'fd' [ 297.307437][ T5811] usbhid 5-1:0.4: can't add hid device: -71 [ 297.313532][ T5811] usbhid: probe of 5-1:0.4 failed with error -71 [ 297.333750][ T5811] usb 5-1: USB disconnect, device number 4 [ 297.707239][ T5846] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 297.956011][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1270'. [ 298.155156][ T5846] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 298.177300][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.238548][ T5846] usb 1-1: config 0 has no interface number 0 [ 298.244728][ T5846] usb 1-1: config 0 interface 205 has no altsetting 0 [ 298.306070][ T5846] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 298.347355][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.540226][ T5846] usb 1-1: Product: syz [ 298.552968][ T9862] syzkaller0: entered promiscuous mode [ 298.560104][ T5846] usb 1-1: Manufacturer: syz [ 298.565358][ T9862] syzkaller0: entered allmulticast mode [ 298.637603][ T5846] usb 1-1: SerialNumber: syz [ 298.733657][ T5846] usb 1-1: config 0 descriptor?? [ 298.842609][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 298.885477][ T5811] IPVS: starting estimator thread 0... [ 298.976144][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 298.993706][ T9869] IPVS: using max 26 ests per chain, 62400 per kthread [ 299.019137][ T9865] serio: Serial port ptm0 [ 299.084308][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 299.121973][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 299.157013][ T5846] usb 1-1: media controller created [ 299.176247][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.230350][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 299.251256][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 299.282170][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 299.316365][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 299.337824][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 299.386597][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 299.497470][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 299.516325][ T5846] dvb-usb: error while querying for an remote control event. [ 299.707445][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 299.719612][ T9882] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1282'. [ 299.728787][ T23] dvb-usb: error while querying for an remote control event. [ 299.907056][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 299.925890][ T23] dvb-usb: error while querying for an remote control event. [ 299.984444][ T9884] syzkaller0: entered promiscuous mode [ 300.033879][ T9884] syzkaller0: entered allmulticast mode [ 300.097252][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 300.116979][ T5846] dvb-usb: error while querying for an remote control event. [ 300.327385][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 300.367337][ T5846] dvb-usb: error while querying for an remote control event. [ 300.527989][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 300.537675][ T5846] dvb-usb: error while querying for an remote control event. [ 300.696289][ T9898] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.715767][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 300.734646][ T5846] dvb-usb: error while querying for an remote control event. [ 300.819471][ T5846] usb 1-1: USB disconnect, device number 33 [ 300.874996][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 300.964349][ T9906] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1292'. [ 301.102373][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.113747][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.123258][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.134103][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.141836][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.153446][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.162360][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.170259][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.178907][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.186493][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.194147][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.201701][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.209391][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.216856][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.224550][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.232232][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.239975][ T5833] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0 [ 301.251298][ T5833] hid-generic 0006:0004:0009.000A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 301.336384][ T9917] fido_id[9917]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 301.394771][ T9919] syzkaller0: entered promiscuous mode [ 301.400629][ T9919] syzkaller0: entered allmulticast mode [ 301.566136][ T9923] binder: 9922:9923 unknown command 0 [ 301.571941][ T9923] binder: 9922:9923 ioctl c0306201 200000000080 returned -22 [ 301.901930][ T9935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.007582][ T9941] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1302'. [ 302.043391][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.073147][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.092695][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.100631][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.109865][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.117547][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.125316][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.133129][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.147533][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.155235][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.172384][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.187703][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.203030][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.211625][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.219573][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.247304][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.280786][ T28] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 302.319988][ T28] hid-generic 0006:0004:0009.000B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 302.347415][ T5811] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 302.438436][ T9948] fido_id[9948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 302.533076][ T9950] syzkaller0: entered promiscuous mode [ 302.540997][ T9950] syzkaller0: entered allmulticast mode [ 302.565833][ T5811] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 302.575770][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.596236][ T5811] usb 5-1: config 0 has no interface number 0 [ 302.613510][ T5811] usb 5-1: config 0 interface 205 has no altsetting 0 [ 302.639361][ T5811] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 302.648894][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.660890][ T5811] usb 5-1: Product: syz [ 302.670001][ T9952] binder: 9951:9952 unknown command 0 [ 302.675644][ T5811] usb 5-1: Manufacturer: syz [ 302.675789][ T9952] binder: 9951:9952 ioctl c0306201 200000000080 returned -22 [ 302.697310][ T5811] usb 5-1: SerialNumber: syz [ 302.738718][ T5811] usb 5-1: config 0 descriptor?? [ 302.837704][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 302.873376][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 302.913060][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 302.923642][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 302.938483][ T5811] usb 5-1: media controller created [ 302.945839][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.969481][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 302.979384][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 302.998728][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 303.014121][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 303.022223][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 303.057269][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 303.178860][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 303.207044][ T5811] dvb-usb: error while querying for an remote control event. [ 303.428441][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 303.436772][ T5811] dvb-usb: error while querying for an remote control event. [ 303.599772][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 303.647743][ T5811] dvb-usb: error while querying for an remote control event. [ 303.684155][ T9969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.774691][ T9973] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1313'. [ 303.789020][ T9973] syzkaller0: entered promiscuous mode [ 303.801885][ T9973] syzkaller0: entered allmulticast mode [ 303.808626][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 303.819254][ T5811] dvb-usb: error while querying for an remote control event. [ 304.007398][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 304.025391][ T5811] dvb-usb: error while querying for an remote control event. [ 304.225618][ T9979] syzkaller0: entered promiscuous mode [ 304.231612][ T9979] syzkaller0: entered allmulticast mode [ 304.237599][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 304.273382][ T5811] dvb-usb: error while querying for an remote control event. [ 304.447531][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 304.459964][ T5811] dvb-usb: error while querying for an remote control event. [ 304.637669][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 304.647099][ T5811] dvb-usb: error while querying for an remote control event. [ 304.808143][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 304.826878][ T5811] dvb-usb: error while querying for an remote control event. [ 305.027310][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 305.034595][ T5811] dvb-usb: error while querying for an remote control event. [ 305.085395][ T9997] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1323'. [ 305.116171][ T9997] syzkaller0: entered promiscuous mode [ 305.130956][ T28] usb 5-1: USB disconnect, device number 5 [ 305.146568][ T9997] syzkaller0: entered allmulticast mode [ 305.212876][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 305.726630][T10018] syzkaller0: entered promiscuous mode [ 305.734816][T10018] syzkaller0: entered allmulticast mode [ 305.827293][ T5833] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 306.007225][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 306.028538][ T28] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 306.240588][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 306.264323][ T28] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 306.285895][ T28] usb 4-1: config 0 has no interface number 0 [ 306.301594][ T28] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.325549][ T28] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.339762][ T28] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 306.362109][ T28] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 306.378805][ T28] usb 4-1: Product: syz [ 306.389016][ T5846] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 306.401856][ T28] usb 4-1: SerialNumber: syz [ 306.417855][ T28] usb 4-1: config 0 descriptor?? [ 306.442128][ T28] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 306.461733][ T28] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 306.613955][ T5846] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 306.647021][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.707234][ T5846] usb 1-1: config 0 has no interface number 0 [ 306.727070][ T5846] usb 1-1: config 0 interface 205 has no altsetting 0 [ 306.789083][ T5846] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 306.826336][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.854915][ T5846] usb 1-1: Product: syz [ 306.871884][ T5846] usb 1-1: Manufacturer: syz [ 306.879858][ T5846] usb 1-1: SerialNumber: syz [ 306.890891][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 306.891812][ T5811] usb 4-1: USB disconnect, device number 35 [ 306.898654][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 306.929341][ T5846] usb 1-1: config 0 descriptor?? [ 306.944623][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 306.981843][ T5811] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 307.046939][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 307.111578][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 307.135892][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 307.171564][ T5846] usb 1-1: media controller created [ 307.193349][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.221601][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 307.238173][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 307.304666][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 307.343199][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 307.356064][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 307.400137][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 307.507701][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 307.546416][ T5846] dvb-usb: error while querying for an remote control event. [ 307.737546][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 307.760068][ T5846] dvb-usb: error while querying for an remote control event. [ 307.947371][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 307.963177][ T5846] dvb-usb: error while querying for an remote control event. [ 308.137898][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 308.152354][ T5846] dvb-usb: error while querying for an remote control event. [ 308.180144][T10050] syzkaller0: entered promiscuous mode [ 308.186221][T10050] syzkaller0: entered allmulticast mode [ 308.337789][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 308.355855][ T5846] dvb-usb: error while querying for an remote control event. [ 308.517397][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 308.533519][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 308.551094][ T5833] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 308.568905][ T5846] dvb-usb: error while querying for an remote control event. [ 308.588683][ T5833] usb 2-1: can't read configurations, error -71 [ 308.757333][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 308.769778][ T5846] dvb-usb: error while querying for an remote control event. [ 308.947377][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 308.962560][ T5846] dvb-usb: error while querying for an remote control event. [ 309.163569][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 309.221480][ T5811] usb 1-1: USB disconnect, device number 34 [ 309.232230][ T5846] dvb-usb: error while querying for an remote control event. [ 309.301915][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 310.448122][ T5846] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 310.651017][ T5846] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 310.676437][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.701275][ T5846] usb 1-1: config 0 has no interface number 0 [ 310.719175][ T5846] usb 1-1: config 0 interface 205 has no altsetting 0 [ 310.828387][ T5846] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 310.924893][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.982197][ T5846] usb 1-1: Product: syz [ 310.986463][ T5846] usb 1-1: Manufacturer: syz [ 311.072664][ T5846] usb 1-1: SerialNumber: syz [ 311.132798][ T5846] usb 1-1: config 0 descriptor?? [ 311.203392][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 311.252984][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 311.340589][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 311.447869][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 311.497346][ T5846] usb 1-1: media controller created [ 311.521413][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.573449][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 311.604863][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 311.704806][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 311.760117][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 311.779118][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 311.827405][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 311.937389][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 311.943240][ T5846] dvb-usb: error while querying for an remote control event. [ 312.217542][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 312.261908][ T5846] dvb-usb: error while querying for an remote control event. [ 312.468321][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 312.484037][ T5846] dvb-usb: error while querying for an remote control event. [ 312.667427][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 312.692658][ T5846] dvb-usb: error while querying for an remote control event. [ 312.807481][ T5810] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 312.887739][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 312.893617][ T5846] dvb-usb: error while querying for an remote control event. [ 313.059686][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 313.073110][ T5810] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 313.087299][ T5810] usb 4-1: config 0 has no interface number 0 [ 313.093535][ T5810] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.127228][ T5810] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.132549][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 313.153419][ T5810] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.177403][ T5846] dvb-usb: error while querying for an remote control event. [ 313.216872][ T5810] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 313.246660][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.288528][ T5810] usb 4-1: config 0 descriptor?? [ 313.345969][ T5833] usb 1-1: USB disconnect, device number 35 [ 313.347714][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 313.377503][ T5846] dvb-usb: error while querying for an remote control event. [ 313.449980][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 313.525346][T10171] binder: 10170:10171 unknown command 0 [ 313.532337][T10171] binder: 10170:10171 ioctl c0306201 200000000080 returned -22 [ 313.553295][T10171] binder_alloc: 10170: binder_alloc_buf, no vma [ 313.924588][ T5810] usbhid 4-1:0.4: can't add hid device: -71 [ 313.934659][ T5810] usbhid: probe of 4-1:0.4 failed with error -71 [ 314.013324][ T5810] usb 4-1: USB disconnect, device number 36 [ 314.837355][ T5833] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 315.030305][ T5833] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 315.067525][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.087950][ T5833] usb 5-1: config 0 has no interface number 0 [ 315.120418][ T5833] usb 5-1: config 0 interface 205 has no altsetting 0 [ 315.181631][ T5833] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 315.208635][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.243317][ T5833] usb 5-1: Product: syz [ 315.293791][ T5833] usb 5-1: Manufacturer: syz [ 315.338048][ T5833] usb 5-1: SerialNumber: syz [ 315.355709][ T5833] usb 5-1: config 0 descriptor?? [ 315.480550][ T5833] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 315.574825][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 315.681709][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 315.730289][ T5833] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 315.781927][ T5833] usb 5-1: media controller created [ 315.812338][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 315.890955][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 315.900959][ T5833] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 315.921519][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 315.941241][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 315.967050][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 315.998283][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 316.157349][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 316.174799][ T5811] dvb-usb: error while querying for an remote control event. [ 316.359010][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 316.368371][ T5811] dvb-usb: error while querying for an remote control event. [ 316.539031][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 316.558566][ T5811] dvb-usb: error while querying for an remote control event. [ 316.737344][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 316.755710][ T5811] dvb-usb: error while querying for an remote control event. [ 316.943530][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 316.951507][ T5811] dvb-usb: error while querying for an remote control event. [ 317.130231][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 317.142075][ T5833] dvb-usb: error while querying for an remote control event. [ 317.357814][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 317.388089][ T5833] dvb-usb: error while querying for an remote control event. [ 317.578025][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 317.583882][ T5833] dvb-usb: error while querying for an remote control event. [ 317.762414][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.778793][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.817350][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 317.827080][ T5833] dvb-usb: error while querying for an remote control event. [ 317.859996][ T5833] usb 5-1: USB disconnect, device number 6 [ 317.934819][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 318.478767][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.504959][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.515744][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.524106][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.533237][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.542158][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.552302][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.579543][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.599466][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.607092][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.615153][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.643870][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.669814][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.684167][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.697372][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.711092][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.721503][ T5833] hid-generic 0006:0004:0009.000C: unknown main item tag 0x0 [ 318.740531][ T5833] hid-generic 0006:0004:0009.000C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 319.687240][ T5846] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 319.811129][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.825927][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.845623][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.864512][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.877965][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.885561][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.894694][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.904234][ T5846] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 319.913944][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.923551][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.934751][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.944058][ T5846] usb 2-1: config 0 has no interface number 0 [ 319.950743][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.959462][ T5846] usb 2-1: config 0 interface 205 has no altsetting 0 [ 319.966379][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.975050][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.985468][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 319.995625][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 320.003373][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 320.011357][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 320.021670][ T28] hid-generic 0006:0004:0009.000D: unknown main item tag 0x0 [ 320.030535][ T5846] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 320.042566][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.051353][ T28] hid-generic 0006:0004:0009.000D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 320.066228][ T5846] usb 2-1: Product: syz [ 320.090628][ T5846] usb 2-1: Manufacturer: syz [ 320.120351][ T5846] usb 2-1: SerialNumber: syz [ 320.136346][ T5846] usb 2-1: config 0 descriptor?? [ 320.163978][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 320.207950][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 320.288599][T10331] fido_id[10331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 320.303827][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.363089][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 320.416080][ T5846] usb 2-1: media controller created [ 320.439118][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.482586][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 320.521950][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 320.555135][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 320.639417][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 320.684182][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 320.745623][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 320.837396][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 320.856327][ T23] dvb-usb: error while querying for an remote control event. [ 321.087446][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 321.102349][ T23] dvb-usb: error while querying for an remote control event. [ 321.267371][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 321.281225][ T23] dvb-usb: error while querying for an remote control event. [ 321.448229][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 321.462823][ T23] dvb-usb: error while querying for an remote control event. [ 321.667699][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 321.699569][ T28] dvb-usb: error while querying for an remote control event. [ 321.887275][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 321.942009][ T28] dvb-usb: error while querying for an remote control event. [ 322.137531][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 322.161035][ T28] dvb-usb: error while querying for an remote control event. [ 322.347395][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 322.353231][ T28] dvb-usb: error while querying for an remote control event. [ 322.409897][ T5810] usb 2-1: USB disconnect, device number 37 [ 322.541069][ T5810] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 323.029448][T10391] syzkaller0: entered promiscuous mode [ 323.035213][T10391] syzkaller0: entered allmulticast mode [ 324.841457][T10463] binder: BINDER_SET_CONTEXT_MGR already set [ 324.856122][T10463] binder: 10461:10463 ioctl 4018620d 200000000040 returned -16 [ 325.355931][T10471] tipc: Enabled bearer , priority 0 [ 325.364727][T10471] syzkaller0: entered promiscuous mode [ 325.371232][T10471] syzkaller0: entered allmulticast mode [ 325.446570][T10470] tipc: Resetting bearer [ 325.559418][T10470] tipc: Disabling bearer [ 325.653677][T10473] syzkaller0: entered promiscuous mode [ 325.660546][T10473] syzkaller0: entered allmulticast mode [ 328.053152][T10484] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1487'. [ 328.392459][T10510] tipc: Enabled bearer , priority 0 [ 328.410021][T10510] syzkaller0: entered promiscuous mode [ 328.436277][T10510] syzkaller0: entered allmulticast mode [ 328.473273][T10509] tipc: Resetting bearer [ 328.561973][T10509] tipc: Disabling bearer [ 328.947081][T10523] syzkaller0: entered promiscuous mode [ 328.952846][T10523] syzkaller0: entered allmulticast mode [ 331.681391][T10544] tipc: Enabling of bearer rejected, failed to enable media [ 331.993636][T10560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.385984][T10573] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1514'. [ 332.511087][T10573] syzkaller0: entered promiscuous mode [ 332.529616][T10573] syzkaller0: entered allmulticast mode [ 335.440329][T10595] tipc: Enabled bearer , priority 0 [ 335.471993][T10595] tipc: Resetting bearer [ 335.515477][T10594] tipc: Disabling bearer [ 336.609471][T10637] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1529'. [ 336.703466][T10637] syzkaller0: entered promiscuous mode [ 336.714608][T10637] syzkaller0: entered allmulticast mode [ 339.640622][T10673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.913029][T10680] syzkaller0: entered promiscuous mode [ 339.920068][T10680] syzkaller0: entered allmulticast mode [ 340.169448][T10684] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1546'. [ 340.213055][T10684] syzkaller0: entered promiscuous mode [ 340.222815][T10684] syzkaller0: entered allmulticast mode [ 342.881328][T10700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.941853][T10707] fuse: Bad value for 'user_id' [ 343.464381][T10721] syzkaller0: entered promiscuous mode [ 343.470161][T10721] syzkaller0: entered allmulticast mode [ 343.801426][T10730] syzkaller0: entered promiscuous mode [ 343.807003][T10730] syzkaller0: entered allmulticast mode [ 346.806002][T10758] syzkaller0: entered promiscuous mode [ 346.831531][T10758] syzkaller0: entered allmulticast mode [ 346.944634][T10764] fuse: Bad value for 'user_id' [ 347.386067][T10775] syzkaller0: entered promiscuous mode [ 347.392822][T10775] syzkaller0: entered allmulticast mode [ 348.483298][T10791] fuse: Bad value for 'user_id' [ 350.771435][T10832] syzkaller0: entered promiscuous mode [ 350.777004][T10832] syzkaller0: entered allmulticast mode [ 350.961660][T10837] fuse: Bad value for 'user_id' [ 353.374308][T10858] binder: 10857:10858 ioctl c0306201 0 returned -14 [ 353.505102][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 353.552764][T10867] binder: BINDER_SET_CONTEXT_MGR already set [ 353.559244][T10867] binder: 10866:10867 ioctl 4018620d 200000000040 returned -16 [ 353.902077][T10885] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1610'. [ 354.117569][ T5833] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 354.452553][ T5833] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 354.469571][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.495337][ T5833] usb 1-1: config 0 has no interface number 0 [ 354.511460][ T5833] usb 1-1: config 0 interface 205 has no altsetting 0 [ 354.525055][ T5833] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 354.535044][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.543524][ T5833] usb 1-1: Product: syz [ 354.548501][ T5833] usb 1-1: Manufacturer: syz [ 354.553263][ T5833] usb 1-1: SerialNumber: syz [ 354.562597][ T5833] usb 1-1: config 0 descriptor?? [ 354.578520][ T5833] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 354.599344][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 354.645531][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 354.678855][ T5833] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 354.700647][ T5833] usb 1-1: media controller created [ 354.720638][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.757905][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 354.770559][ T5833] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 354.791020][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 354.815859][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 354.841947][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 354.851862][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 354.892328][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 355.008271][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 355.023177][ T5833] dvb-usb: error while querying for an remote control event. [ 355.197710][T10913] binder: BINDER_SET_CONTEXT_MGR already set [ 355.204135][T10913] binder: 10912:10913 ioctl 4018620d 200000000040 returned -16 [ 355.212563][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 355.223905][ T5811] dvb-usb: error while querying for an remote control event. [ 355.407485][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 355.413310][ T5811] dvb-usb: error while querying for an remote control event. [ 355.573823][T10925] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1621'. [ 355.637412][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 355.654072][ T5811] dvb-usb: error while querying for an remote control event. [ 355.847676][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 355.861296][ T5811] dvb-usb: error while querying for an remote control event. [ 355.941752][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 356.038793][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 356.052840][ T5811] dvb-usb: error while querying for an remote control event. [ 356.146160][T10943] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 356.234888][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 356.244023][ T5811] dvb-usb: error while querying for an remote control event. [ 356.423366][T10949] fuse: Unknown parameter 'grou0x0000000000000003' [ 356.430540][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 356.452813][ T5811] dvb-usb: error while querying for an remote control event. [ 356.617407][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 356.632618][ T5810] dvb-usb: error while querying for an remote control event. [ 356.777968][T10960] binder: 10959:10960 unknown command 0 [ 356.785740][T10960] binder: 10959:10960 ioctl c0306201 200000000080 returned -22 [ 356.846617][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 356.876461][ T5810] dvb-usb: error while querying for an remote control event. [ 357.030883][ T5810] usb 1-1: USB disconnect, device number 36 [ 357.113048][ T5810] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 357.225682][T10971] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1635'. [ 357.747651][T10994] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.768784][T10997] fuse: Unknown parameter 'grou0x0000000000000003' [ 358.117601][T11011] binder: 11010:11011 unknown command 0 [ 358.123332][T11011] binder: 11010:11011 ioctl c0306201 200000000080 returned -22 [ 358.277502][ T23] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 358.509946][ T23] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 358.531906][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.553865][ T23] usb 5-1: config 0 has no interface number 0 [ 358.568474][ T23] usb 5-1: config 0 interface 205 has no altsetting 0 [ 358.587873][ T23] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 358.610544][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.630608][ T23] usb 5-1: Product: syz [ 358.644543][ T23] usb 5-1: Manufacturer: syz [ 358.655136][ T23] usb 5-1: SerialNumber: syz [ 358.671824][ T23] usb 5-1: config 0 descriptor?? [ 358.686504][ T23] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 358.715421][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 358.763952][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 358.783251][ T23] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 358.799098][ T23] usb 5-1: media controller created [ 358.810135][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.823847][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 358.834803][ T23] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 358.870105][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 358.895446][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 358.946826][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 358.998790][ T23] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 359.097377][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 359.103257][ T5846] dvb-usb: error while querying for an remote control event. [ 359.296010][T11037] fuse: Unknown parameter 'group_i0x0000000000000003' [ 359.347377][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 359.372120][ T5846] dvb-usb: error while querying for an remote control event. [ 359.577260][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 359.584630][ T5846] dvb-usb: error while querying for an remote control event. [ 359.747609][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 359.756461][ T5846] dvb-usb: error while querying for an remote control event. [ 359.917338][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 359.929197][ T5846] dvb-usb: error while querying for an remote control event. [ 360.119659][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 360.152423][ T5846] dvb-usb: error while querying for an remote control event. [ 360.347288][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 360.371397][ T5846] dvb-usb: error while querying for an remote control event. [ 360.431434][T11058] serio: Serial port ptm0 [ 360.547460][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 360.576366][ T5846] dvb-usb: error while querying for an remote control event. [ 360.777346][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 360.783202][ T5846] dvb-usb: error while querying for an remote control event. [ 360.967401][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 360.977521][ T5846] dvb-usb: error while querying for an remote control event. [ 361.147285][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 361.153135][ T5846] dvb-usb: error while querying for an remote control event. [ 361.278562][ T5846] usb 5-1: USB disconnect, device number 7 [ 361.328835][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 361.450658][T11084] fuse: Unknown parameter 'group_i0x0000000000000003' [ 361.606402][T11090] binder: 11089:11090 unknown command 0 [ 361.614111][T11090] binder: 11089:11090 ioctl c0306201 200000000080 returned -22 [ 362.245939][T11117] fuse: Unknown parameter 'group_i0x0000000000000003' [ 362.353774][T11119] binder: 11118:11119 unknown command 0 [ 362.359638][T11119] binder: 11118:11119 ioctl c0306201 200000000080 returned -22 [ 362.393143][ T5846] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 362.590637][ T5846] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 362.606234][ T5846] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.628594][ T5846] usb 5-1: config 0 has no interface number 0 [ 362.634875][ T5846] usb 5-1: config 0 interface 205 has no altsetting 0 [ 362.646404][ T5846] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 362.655886][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.673262][ T5846] usb 5-1: Product: syz [ 362.680309][ T5846] usb 5-1: Manufacturer: syz [ 362.689699][ T5846] usb 5-1: SerialNumber: syz [ 362.721317][ T5846] usb 5-1: config 0 descriptor?? [ 362.747960][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 362.767447][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 362.799782][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 362.812842][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 362.825501][ T5846] usb 5-1: media controller created [ 362.835498][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.854756][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 362.861083][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 362.880534][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 362.905946][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 362.926247][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 362.959373][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 363.077706][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 363.083960][ T5846] dvb-usb: error while querying for an remote control event. [ 363.209584][T11130] binder: 11129:11130 ioctl c0306201 0 returned -14 [ 363.247434][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 363.268016][ T5846] dvb-usb: error while querying for an remote control event. [ 363.468578][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 363.498531][ T5846] dvb-usb: error while querying for an remote control event. [ 363.565596][T11138] serio: Serial port ptm0 [ 363.629045][T11143] binder: 11142:11143 unknown command 0 [ 363.634869][T11143] binder: 11142:11143 ioctl c0306201 200000000080 returned -22 [ 363.697507][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 363.703323][ T5846] dvb-usb: error while querying for an remote control event. [ 363.772832][T11146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1696'. [ 363.903622][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 363.917347][ T5846] dvb-usb: error while querying for an remote control event. [ 364.051164][T11156] binder: 11155:11156 ioctl c0306201 0 returned -14 [ 364.097333][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 364.111744][ T5846] dvb-usb: error while querying for an remote control event. [ 364.297249][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 364.303104][ T5846] dvb-usb: error while querying for an remote control event. [ 364.487306][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 364.500174][T11170] binder: 11169:11170 unknown command 0 [ 364.505902][ T5846] dvb-usb: error while querying for an remote control event. [ 364.514151][T11170] binder: 11169:11170 ioctl c0306201 200000000080 returned -22 [ 364.687938][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1706'. [ 364.700532][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 364.714623][ T5846] dvb-usb: error while querying for an remote control event. [ 364.829109][T11178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 364.887313][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 364.895634][ T5846] dvb-usb: error while querying for an remote control event. [ 364.911184][T11181] binder: 11180:11181 ioctl c0306201 0 returned -14 [ 365.077362][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 365.118082][ T5846] dvb-usb: error while querying for an remote control event. [ 365.277389][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 365.288317][ T5846] dvb-usb: error while querying for an remote control event. [ 365.362377][ T5811] usb 5-1: USB disconnect, device number 8 [ 365.492563][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 365.722264][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1717'. [ 365.738856][T11201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.098322][T11220] syzkaller0: entered promiscuous mode [ 366.111244][T11220] syzkaller0: entered allmulticast mode [ 366.457308][ T5846] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 366.700409][ T5846] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 366.719470][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.730331][ T5846] usb 2-1: config 0 has no interface number 0 [ 366.736616][ T5846] usb 2-1: config 0 interface 205 has no altsetting 0 [ 366.759007][ T5846] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 366.779165][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.788799][ T5846] usb 2-1: Product: syz [ 366.796999][ T5846] usb 2-1: Manufacturer: syz [ 366.813010][ T5846] usb 2-1: SerialNumber: syz [ 366.834310][ T5846] usb 2-1: config 0 descriptor?? [ 366.845171][ T5846] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 366.867964][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 366.934020][ T5846] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 366.969324][ T5846] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 366.994790][ T5846] usb 2-1: media controller created [ 367.002573][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.043815][ T5846] dvb-usb: bulk message failed: -22 (6/0) [ 367.063360][ T5846] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 367.088197][ T5846] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 367.104057][ T5846] dvb-usb: schedule remote query interval to 150 msecs. [ 367.112028][ T5846] dvb-usb: bulk message failed: -22 (3/0) [ 367.157239][ T5846] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 367.269461][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 367.275623][ T5846] dvb-usb: error while querying for an remote control event. [ 367.463252][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 367.470498][ T28] dvb-usb: error while querying for an remote control event. [ 367.648502][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 367.654630][ T28] dvb-usb: error while querying for an remote control event. [ 367.840926][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 367.846742][ T28] dvb-usb: error while querying for an remote control event. [ 368.022282][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 368.028485][ T28] dvb-usb: error while querying for an remote control event. [ 368.187567][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 368.193779][ T28] dvb-usb: error while querying for an remote control event. [ 368.358719][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 368.364826][ T28] dvb-usb: error while querying for an remote control event. [ 368.531836][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 368.542175][ T5846] dvb-usb: error while querying for an remote control event. [ 368.724250][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 368.730230][ T5846] dvb-usb: error while querying for an remote control event. [ 368.911662][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 368.917633][ T5846] dvb-usb: error while querying for an remote control event. [ 369.081694][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 369.087702][ T5846] dvb-usb: error while querying for an remote control event. [ 369.248494][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 369.254316][ T5846] dvb-usb: error while querying for an remote control event. [ 369.421217][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 369.427248][ T5846] dvb-usb: error while querying for an remote control event. [ 369.588771][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 369.594626][ T28] dvb-usb: error while querying for an remote control event. [ 369.708788][ T5811] usb 2-1: USB disconnect, device number 38 [ 369.763435][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 369.838256][T11244] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 369.862485][T11240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1729'. [ 370.211869][T11253] syzkaller0: entered promiscuous mode [ 370.253420][T11253] syzkaller0: entered allmulticast mode [ 370.732408][ T28] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 370.934775][ T28] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 370.943304][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.954089][ T28] usb 4-1: config 0 has no interface number 0 [ 370.960402][ T28] usb 4-1: config 0 interface 205 has no altsetting 0 [ 370.987608][ T28] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 371.007548][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.026394][ T28] usb 4-1: Product: syz [ 371.031672][ T28] usb 4-1: Manufacturer: syz [ 371.036567][ T28] usb 4-1: SerialNumber: syz [ 371.054992][ T28] usb 4-1: config 0 descriptor?? [ 371.064933][ T28] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 371.092607][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 371.152511][ T28] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 371.181684][ T28] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 371.196174][ T28] usb 4-1: media controller created [ 371.221403][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.257984][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 371.268037][ T28] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 371.302345][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 371.316932][ T28] dvb-usb: schedule remote query interval to 150 msecs. [ 371.328617][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 371.365375][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 371.393360][ T28] usb 4-1: USB disconnect, device number 37 [ 371.479708][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 373.358355][T11304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1742'. [ 373.860423][T11332] binder: BINDER_SET_CONTEXT_MGR already set [ 373.866681][T11332] binder: 11331:11332 ioctl 4018620d 200000000040 returned -16 [ 373.938300][ T5833] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 373.984729][T11333] syzkaller0: entered promiscuous mode [ 373.990642][T11333] syzkaller0: entered allmulticast mode [ 374.003899][T11338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1754'. [ 374.151972][ T5833] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 374.164664][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.182317][ T5833] usb 4-1: config 0 has no interface number 0 [ 374.195020][ T5833] usb 4-1: config 0 interface 205 has no altsetting 0 [ 374.208726][ T5833] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 374.218727][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.226799][ T5833] usb 4-1: Product: syz [ 374.231291][ T5833] usb 4-1: Manufacturer: syz [ 374.235950][ T5833] usb 4-1: SerialNumber: syz [ 374.248003][ T5833] usb 4-1: config 0 descriptor?? [ 374.269281][ T5833] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 374.284934][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 374.337055][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 374.346880][ T5833] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 374.359117][ T5833] usb 4-1: media controller created [ 374.367906][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.370022][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.388209][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 374.394415][ T5833] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 374.403132][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.427855][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 374.442134][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 374.449957][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 374.480004][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 374.545288][ T5833] usb 4-1: USB disconnect, device number 38 [ 374.653104][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 376.168864][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 376.636676][T11343] syzkaller0: entered promiscuous mode [ 376.646051][T11343] syzkaller0: entered allmulticast mode [ 376.821458][T11362] overlayfs: failed to resolve './file0': -2 [ 377.012362][T11367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1763'. [ 377.265353][T11380] syzkaller0: entered promiscuous mode [ 377.274805][T11380] syzkaller0: entered allmulticast mode [ 377.367416][ T5833] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 377.614617][ T5833] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 377.629477][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.645722][ T5833] usb 4-1: config 0 has no interface number 0 [ 377.652344][ T5833] usb 4-1: config 0 interface 205 has no altsetting 0 [ 377.664326][ T5833] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 377.680771][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.690174][ T5833] usb 4-1: Product: syz [ 377.694557][ T5833] usb 4-1: Manufacturer: syz [ 377.705481][ T5833] usb 4-1: SerialNumber: syz [ 377.720417][ T5833] usb 4-1: config 0 descriptor?? [ 377.744219][ T5833] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 377.769697][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 377.822857][ T5833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 377.835745][ T5833] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 377.852629][ T5833] usb 4-1: media controller created [ 377.869083][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.897809][ T5833] dvb-usb: bulk message failed: -22 (6/0) [ 377.906981][ T5833] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 377.924810][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 377.954843][ T5833] dvb-usb: schedule remote query interval to 150 msecs. [ 377.964038][ T5833] dvb-usb: bulk message failed: -22 (3/0) [ 377.981518][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 377.998489][ T5833] usb 4-1: USB disconnect, device number 39 [ 378.083517][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 378.621605][T11406] overlayfs: failed to resolve './file0': -2 [ 379.207669][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.222581][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.927937][T11391] syzkaller0: entered promiscuous mode [ 379.933478][T11391] syzkaller0: entered allmulticast mode [ 380.399171][T11428] fuse: Unknown parameter 'group_i00000000000000000000' [ 380.448220][T11430] fuse: Bad value for 'fd' [ 380.690961][T11435] syzkaller0: entered promiscuous mode [ 380.697291][T11435] syzkaller0: entered allmulticast mode [ 380.966238][ T5810] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 381.224447][ T5810] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 381.235451][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.249891][ T5810] usb 5-1: config 0 has no interface number 0 [ 381.256186][ T5810] usb 5-1: config 0 interface 205 has no altsetting 0 [ 381.288527][ T5810] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 381.301776][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.323490][ T5810] usb 5-1: Product: syz [ 381.332872][ T5810] usb 5-1: Manufacturer: syz [ 381.353799][ T5810] usb 5-1: SerialNumber: syz [ 381.363797][ T5810] usb 5-1: config 0 descriptor?? [ 381.388556][ T5810] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 381.409089][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 381.463774][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 381.472895][ T5810] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 381.496975][ T5810] usb 5-1: media controller created [ 381.504716][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.535909][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 381.542007][ T5810] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 381.552036][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.563136][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 381.605791][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 381.628378][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 381.667255][ T5810] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 381.684067][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.787259][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 381.793097][ T5810] dvb-usb: error while querying for an remote control event. [ 381.973982][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 381.986303][ T5810] dvb-usb: error while querying for an remote control event. [ 382.159160][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 382.168715][ T5810] dvb-usb: error while querying for an remote control event. [ 382.337268][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 382.343518][ T5810] dvb-usb: error while querying for an remote control event. [ 382.512292][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 382.520361][ T5810] dvb-usb: error while querying for an remote control event. [ 382.691690][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 382.697649][ T5811] dvb-usb: error while querying for an remote control event. [ 382.860662][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 382.867695][ T5811] dvb-usb: error while querying for an remote control event. [ 383.034412][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 383.040531][ T5811] dvb-usb: error while querying for an remote control event. [ 383.221339][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 383.227240][ T5811] dvb-usb: error while querying for an remote control event. [ 383.392235][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 383.398285][ T5811] dvb-usb: error while querying for an remote control event. [ 383.549475][ T5811] usb 5-1: USB disconnect, device number 9 [ 383.602786][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 384.089722][T11460] fuse: Unknown parameter 'group_i00000000000000000000' [ 384.194776][T11462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1791'. [ 384.908501][T11485] syzkaller0: entered promiscuous mode [ 384.954993][T11485] syzkaller0: entered allmulticast mode [ 385.017464][ T28] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 385.028752][T11488] fuse: Unknown parameter 'group_i00000000000000000000' [ 385.259603][ T28] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 385.296171][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.347386][ T28] usb 1-1: config 0 has no interface number 0 [ 385.379624][ T28] usb 1-1: config 0 interface 205 has no altsetting 0 [ 385.411114][ T28] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 385.437647][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.457400][ T28] usb 1-1: Product: syz [ 385.461638][ T28] usb 1-1: Manufacturer: syz [ 385.497347][ T28] usb 1-1: SerialNumber: syz [ 385.542257][ T28] usb 1-1: config 0 descriptor?? [ 385.590669][ T28] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 385.646392][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 385.737051][ T28] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 385.747790][ T28] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 385.760574][ T28] usb 1-1: media controller created [ 385.776558][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.803008][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 385.811715][ T28] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 385.900216][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 385.934088][ T28] dvb-usb: schedule remote query interval to 150 msecs. [ 385.962546][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 386.002630][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 386.117658][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 386.123566][ T28] dvb-usb: error while querying for an remote control event. [ 386.297344][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 386.304560][ T28] dvb-usb: error while querying for an remote control event. [ 386.483141][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 386.492636][ T28] dvb-usb: error while querying for an remote control event. [ 386.659179][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 386.665051][ T28] dvb-usb: error while querying for an remote control event. [ 386.851219][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 386.857506][ T28] dvb-usb: error while querying for an remote control event. [ 387.028238][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 387.034105][ T28] dvb-usb: error while querying for an remote control event. [ 387.208960][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 387.232956][ T23] dvb-usb: error while querying for an remote control event. [ 387.397288][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 387.406619][ T23] dvb-usb: error while querying for an remote control event. [ 387.570582][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 387.582431][ T23] dvb-usb: error while querying for an remote control event. [ 387.614068][ T5811] usb 1-1: USB disconnect, device number 37 [ 387.680161][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 387.954438][T11507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 388.310418][T11502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1802'. [ 388.539993][T11519] tipc: Started in network mode [ 388.551392][T11519] tipc: Node identity 8e4aad7555ab, cluster identity 4711 [ 388.577415][T11519] tipc: Enabled bearer , priority 0 [ 388.602407][T11523] fuse: Unknown parameter 'group_id00000000000000000000' [ 388.629254][T11524] syzkaller0: entered promiscuous mode [ 388.640535][T11524] syzkaller0: entered allmulticast mode [ 388.693251][T11519] tipc: Resetting bearer [ 388.718302][T11518] tipc: Resetting bearer [ 388.760202][T11518] tipc: Disabling bearer [ 389.003526][T11533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 389.047756][T11538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1814'. [ 389.357488][ T28] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 389.563122][ T28] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 389.605524][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.622581][ T28] usb 1-1: config 0 has no interface number 0 [ 389.634767][ T28] usb 1-1: config 0 interface 205 has no altsetting 0 [ 389.644821][T11551] fuse: Unknown parameter 'group_id00000000000000000000' [ 389.653700][ T28] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 389.666547][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.683036][T11544] syzkaller0: entered promiscuous mode [ 389.694810][ T28] usb 1-1: Product: syz [ 389.706622][ T28] usb 1-1: Manufacturer: syz [ 389.714935][T11544] syzkaller0: entered allmulticast mode [ 389.723015][ T28] usb 1-1: SerialNumber: syz [ 389.735258][ T28] usb 1-1: config 0 descriptor?? [ 389.771398][ T28] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 389.809135][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 389.850627][ T28] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 389.883317][ T28] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 389.912743][ T28] usb 1-1: media controller created [ 389.933850][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.955155][ T28] dvb-usb: bulk message failed: -22 (6/0) [ 389.965342][ T28] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 390.017499][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 390.088995][ T28] dvb-usb: schedule remote query interval to 150 msecs. [ 390.128685][ T28] dvb-usb: bulk message failed: -22 (3/0) [ 390.177369][ T28] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 390.287408][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 390.319722][ T28] dvb-usb: error while querying for an remote control event. [ 390.517322][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 390.524316][ T28] dvb-usb: error while querying for an remote control event. [ 390.699323][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 390.705164][ T28] dvb-usb: error while querying for an remote control event. [ 390.869967][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 390.875863][ T23] dvb-usb: error while querying for an remote control event. [ 391.048644][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 391.054661][ T23] dvb-usb: error while querying for an remote control event. [ 391.240597][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 391.246727][ T23] dvb-usb: error while querying for an remote control event. [ 391.424917][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 391.431107][ T23] dvb-usb: error while querying for an remote control event. [ 391.599725][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 391.605647][ T28] dvb-usb: error while querying for an remote control event. [ 391.768728][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 391.775285][ T23] dvb-usb: error while querying for an remote control event. [ 391.864169][ T5833] usb 1-1: USB disconnect, device number 38 [ 391.948565][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 392.790550][T11568] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1821'. [ 392.896923][T11571] tipc: Enabled bearer , priority 0 [ 392.932913][T11571] syzkaller0: entered promiscuous mode [ 392.957458][T11571] syzkaller0: entered allmulticast mode [ 393.034998][T11571] tipc: Resetting bearer [ 393.063791][T11570] tipc: Resetting bearer [ 393.098427][T11575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 393.129538][T11570] tipc: Disabling bearer [ 393.141682][T11576] syzkaller0: entered promiscuous mode [ 393.158568][T11576] syzkaller0: entered allmulticast mode [ 393.767445][ T5811] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 393.972499][ T5811] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 393.997379][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.027234][ T5811] usb 4-1: config 0 has no interface number 0 [ 394.043843][ T5811] usb 4-1: config 0 interface 205 has no altsetting 0 [ 394.065558][ T5811] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 394.085683][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.093963][ T5811] usb 4-1: Product: syz [ 394.098500][ T5811] usb 4-1: Manufacturer: syz [ 394.114800][ T5811] usb 4-1: SerialNumber: syz [ 394.122531][ T5811] usb 4-1: config 0 descriptor?? [ 394.138731][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 394.175074][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 394.242707][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 394.255566][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 394.288986][ T5811] usb 4-1: media controller created [ 394.306480][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.359602][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 394.395154][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 394.429177][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 394.454948][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 394.466978][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 394.508300][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 394.627292][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 394.639773][ T5833] dvb-usb: error while querying for an remote control event. [ 394.823091][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 394.830408][ T5833] dvb-usb: error while querying for an remote control event. [ 395.008191][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 395.014045][ T5811] dvb-usb: error while querying for an remote control event. [ 395.184033][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 395.190185][ T5833] dvb-usb: error while querying for an remote control event. [ 395.362408][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 395.368534][ T5833] dvb-usb: error while querying for an remote control event. [ 395.533828][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 395.540025][ T5811] dvb-usb: error while querying for an remote control event. [ 395.719567][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 395.725412][ T5811] dvb-usb: error while querying for an remote control event. [ 395.911939][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 395.918333][ T5811] dvb-usb: error while querying for an remote control event. [ 396.100035][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 396.105941][ T5833] dvb-usb: error while querying for an remote control event. [ 396.283261][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 396.289441][ T5833] dvb-usb: error while querying for an remote control event. [ 396.435645][ T5833] usb 4-1: USB disconnect, device number 40 [ 396.480867][ T5833] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 396.536590][T11622] fuse: Bad value for 'user_id' [ 397.159042][T11632] binder: 11631:11632 unknown command 0 [ 397.164702][T11632] binder: 11631:11632 ioctl c0306201 200000000080 returned -22 [ 397.596259][T11644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.633271][T11644] batadv_slave_0: entered promiscuous mode [ 397.749505][T11643] tipc: Enabled bearer , priority 0 [ 397.803500][T11643] syzkaller0: entered promiscuous mode [ 397.868479][T11643] syzkaller0: entered allmulticast mode [ 397.894873][T11650] fuse: Bad value for 'user_id' [ 397.932801][T11643] tipc: Resetting bearer [ 397.952651][T11642] tipc: Resetting bearer [ 398.028448][T11642] tipc: Disabling bearer [ 398.612199][T11665] syzkaller0: entered promiscuous mode [ 398.617922][T11665] syzkaller0: entered allmulticast mode [ 400.701808][T11679] syzkaller0: entered promiscuous mode [ 400.712482][T11679] syzkaller0: entered allmulticast mode [ 400.803727][T11684] fuse: Bad value for 'user_id' [ 401.997869][T11701] binder: 11700:11701 unknown command 0 [ 402.012461][T11701] binder: 11700:11701 ioctl c0306201 200000000080 returned -22 [ 402.041281][T11701] binder: 11700:11701 ioctl 4018620d 0 returned -22 [ 403.979462][T11722] syzkaller0: entered promiscuous mode [ 403.985401][T11722] syzkaller0: entered allmulticast mode [ 406.449586][T11743] binder: 11742:11743 unknown command 0 [ 406.473089][T11743] binder: 11742:11743 ioctl c0306201 200000000080 returned -22 [ 406.504368][T11749] binder: 11742:11749 ioctl 4018620d 0 returned -22 [ 406.847346][T11752] syzkaller0: entered promiscuous mode [ 406.877846][T11752] syzkaller0: entered allmulticast mode [ 407.244513][T11745] mmap: syz.3.1869 (11745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 407.937346][ T23] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 408.139589][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.149794][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.164388][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.173927][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.179463][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.414185][ T23] usb 4-1: usb_control_msg returned -32 [ 408.430883][ T23] usbtmc 4-1:16.0: can't read capabilities [ 410.656366][ T5810] usb 4-1: USB disconnect, device number 41 [ 412.657559][T11828] binder: 11825:11828 unknown command 0 [ 412.666772][T11828] binder: 11825:11828 ioctl c0306201 200000000080 returned -22 [ 412.688901][T11828] binder: 11825:11828 ioctl c0306201 0 returned -14 [ 412.699951][T11820] syzkaller0: entered promiscuous mode [ 412.705510][T11820] syzkaller0: entered allmulticast mode [ 415.344364][T11858] syzkaller0: entered promiscuous mode [ 415.353831][T11858] syzkaller0: entered allmulticast mode [ 415.419524][T11859] syzkaller0: entered promiscuous mode [ 415.429527][T11859] syzkaller0: entered allmulticast mode [ 420.423242][T11905] syzkaller0: entered promiscuous mode [ 420.442519][T11905] syzkaller0: entered allmulticast mode [ 423.168178][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1898'. [ 423.307000][T11942] syzkaller0: entered promiscuous mode [ 423.316220][T11942] syzkaller0: entered allmulticast mode [ 425.896417][T11966] syzkaller0: entered promiscuous mode [ 425.902160][T11966] syzkaller0: entered allmulticast mode [ 425.922048][T11968] syzkaller0: entered promiscuous mode [ 425.937460][T11968] syzkaller0: entered allmulticast mode [ 426.504152][T11987] fuse: Unknown parameter '0x0000000000000003' [ 428.587403][T11993] syzkaller0: entered promiscuous mode [ 428.592933][T11993] syzkaller0: entered allmulticast mode [ 431.438838][T12026] syzkaller0: entered promiscuous mode [ 431.444658][T12026] syzkaller0: entered allmulticast mode [ 434.209416][T12076] fuse: Unknown parameter 'user_id00000000000000000000' [ 434.289221][T12078] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1930'. [ 434.873617][T12107] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 434.883443][T12107] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 434.901852][T12109] fuse: Bad value for 'fd' [ 434.978329][T12111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1941'. [ 435.023184][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1942'. [ 435.488907][T12130] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 435.544591][T12130] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 435.567954][T12138] fuse: Bad value for 'fd' [ 435.735937][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 436.276416][T12166] fuse: Bad value for 'fd' [ 436.379650][T12170] syzkaller0: entered promiscuous mode [ 436.385192][T12170] syzkaller0: entered allmulticast mode [ 437.001792][T12191] binder: 12190:12191 unknown command 0 [ 437.016294][T12191] binder: 12190:12191 ioctl c0306201 200000000080 returned -22 [ 437.031849][T12195] fuse: Unknown parameter '0x0000000000000003' [ 437.139432][T12197] syzkaller0: entered promiscuous mode [ 437.145181][T12197] syzkaller0: entered allmulticast mode [ 437.463577][T12209] block device autoloading is deprecated and will be removed. [ 437.480175][T12208] md: md2 stopped. [ 437.792466][T12222] fuse: Unknown parameter '0x0000000000000003' [ 437.959620][T12228] syzkaller0: entered promiscuous mode [ 437.970111][T12228] syzkaller0: entered allmulticast mode [ 438.331294][T12244] fuse: Unknown parameter '0x0000000000000003' [ 438.732123][T12262] syzkaller0: entered promiscuous mode [ 438.737915][T12262] syzkaller0: entered allmulticast mode [ 439.043232][T12269] fuse: Unknown parameter '0x0000000000000003' [ 439.189855][T12274] binder: 12273:12274 unknown command 0 [ 439.195685][T12274] binder: 12273:12274 ioctl c0306201 200000000080 returned -22 [ 440.153053][T12317] fuse: Unknown parameter '0x0000000000000003' [ 440.612230][T12333] syzkaller0: entered promiscuous mode [ 440.619071][T12333] syzkaller0: entered allmulticast mode [ 440.652196][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.659503][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.084412][T12351] fuse: Unknown parameter '0x0000000000000003' [ 441.732557][T12376] syzkaller0: entered promiscuous mode [ 441.743917][T12376] syzkaller0: entered allmulticast mode [ 444.396979][T12472] binder: 12471:12472 unknown command 0 [ 444.404188][T12472] binder: 12471:12472 ioctl c0306201 200000000080 returned -22 [ 444.802386][T12484] ip6gre2: entered promiscuous mode [ 444.807974][T12484] ip6gre2: entered allmulticast mode [ 444.907206][ T5846] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 445.090096][ T5846] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.107430][ T5846] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.149943][ T5846] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 445.178779][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.420025][ T5846] usb 4-1: usb_control_msg returned -32 [ 445.432322][ T5846] usbtmc 4-1:16.0: can't read capabilities [ 445.671318][T12520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.730925][ T5846] wlan1: authenticate with 08:02:11:00:00:00 [ 445.746565][ T5846] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 445.794114][T12519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.825720][T12523] ip6gre2: entered promiscuous mode [ 445.831973][T12523] ip6gre2: entered allmulticast mode [ 445.879318][ T3515] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 445.913080][T12526] block device autoloading is deprecated and will be removed. [ 445.923714][T12525] md: md2 stopped. [ 445.960210][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 446.008173][ T3515] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 446.127286][ T3515] wlan1: authentication with 08:02:11:00:00:00 timed out [ 446.404378][ T5777] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 446.775332][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000030cc [ 446.791518][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9e6 [ 446.804648][T12545] kvm_intel: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7983 [ 446.816540][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7983 [ 446.826083][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 446.836773][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xf10b [ 446.850406][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xf20a [ 446.862019][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x708c [ 446.871836][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 446.882414][T12545] kvm: kvm [12544]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xf10b [ 447.671412][ T5810] usb 4-1: USB disconnect, device number 42 [ 448.078193][T12580] block device autoloading is deprecated and will be removed. [ 448.103131][T12576] md: md2 stopped. [ 448.173153][T12584] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2097'. [ 448.186366][T12584] syzkaller0: entered promiscuous mode [ 448.200632][T12584] syzkaller0: entered allmulticast mode [ 448.432457][T12587] kvm: kvm [12586]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x600000d9 [ 448.468514][T12587] kvm_intel: kvm [12586]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0x6000009d [ 448.552885][T12593] kvm_intel: kvm [12592]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7983 [ 449.417360][ T5846] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 449.629003][ T5846] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 449.648622][ T5846] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 449.666199][ T5846] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 449.684690][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 449.701470][ T5846] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 449.724774][ T5846] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.749497][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.774767][ T5846] usb 1-1: Product: syz [ 449.784696][ T5846] usb 1-1: Manufacturer: syz [ 449.810646][ T5846] cdc_wdm 1-1:1.0: skipping garbage [ 449.829441][ T5846] cdc_wdm 1-1:1.0: skipping garbage [ 449.847808][ T5846] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 449.859173][ T5846] cdc_wdm 1-1:1.0: Unknown control protocol [ 450.091762][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 450.098699][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 450.105064][ T5811] usb 1-1: USB disconnect, device number 39 [ 450.105737][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 450.117675][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 450.123808][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 450.513427][T12638] kvm_intel: kvm [12637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7983 [ 451.492867][T12652] netlink: 'syz.1.2125': attribute type 1 has an invalid length. [ 451.540998][T12652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.611989][T12652] bond1: (slave geneve2): making interface the new active one [ 451.635916][T12652] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 451.795567][T12664] syzkaller0: entered promiscuous mode [ 451.803085][T12664] syzkaller0: entered allmulticast mode [ 455.062171][T12668] ip6gre2: entered promiscuous mode [ 455.067878][T12668] ip6gre2: entered allmulticast mode [ 456.375324][T12729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.422147][T12730] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2143'. [ 456.590315][T12726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.604875][T12722] syzkaller0: entered promiscuous mode [ 456.611138][T12722] syzkaller0: entered allmulticast mode [ 456.669351][T12732] syzkaller0: entered promiscuous mode [ 456.674941][T12732] syzkaller0: entered allmulticast mode [ 460.483531][T12783] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2157'. [ 460.510348][T12783] syzkaller0: entered promiscuous mode [ 460.515912][T12783] syzkaller0: entered allmulticast mode [ 460.644411][T12788] syzkaller0: entered promiscuous mode [ 460.658218][T12788] syzkaller0: entered allmulticast mode [ 460.717181][ T28] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 460.917255][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 460.926418][ T28] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 460.940055][ T28] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 460.953219][ T28] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 460.963486][ T28] usb 4-1: config 250 has no interface number 0 [ 460.980432][ T28] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 460.993158][ T28] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 461.017784][ T28] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 461.047261][ T5811] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 461.055117][ T28] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 461.083868][ T28] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 461.099766][ T28] usb 4-1: config 250 interface 228 has no altsetting 0 [ 461.109180][ T28] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 461.127217][ T28] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 461.144711][ T28] usb 4-1: Product: syz [ 461.163480][ T28] usb 4-1: SerialNumber: syz [ 461.183490][ T28] hub 4-1:250.228: bad descriptor, ignoring hub [ 461.194686][ T28] hub: probe of 4-1:250.228 failed with error -5 [ 461.336806][ T5811] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 461.360350][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.378434][ T5811] usb 5-1: config 0 has no interface number 0 [ 461.408572][ T5811] usb 5-1: config 0 interface 205 has no altsetting 0 [ 461.424270][ T5811] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 461.450774][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.468574][ T5811] usb 5-1: Product: syz [ 461.481977][ T28] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 43 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 461.483853][ T5811] usb 5-1: Manufacturer: syz [ 461.516476][ T5811] usb 5-1: SerialNumber: syz [ 461.526424][ T5811] usb 5-1: config 0 descriptor?? [ 461.539192][ T5811] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 461.552713][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 461.590464][ T5811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.622544][ T5811] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 461.635848][ T5811] usb 5-1: media controller created [ 461.646727][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.662674][ T5811] dvb-usb: bulk message failed: -22 (6/0) [ 461.669032][ T5811] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 461.704918][ T5811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 461.723022][ T5811] dvb-usb: schedule remote query interval to 150 msecs. [ 461.731424][ T5811] dvb-usb: bulk message failed: -22 (3/0) [ 461.780868][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 461.890275][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 461.905598][ T5811] dvb-usb: error while querying for an remote control event. [ 462.067240][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 462.074018][ T5811] dvb-usb: error while querying for an remote control event. [ 462.177656][T12784] usb 4-1: reset high-speed USB device number 43 using dummy_hcd [ 462.242200][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 462.251941][ T5811] dvb-usb: error while querying for an remote control event. [ 462.467524][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 462.473383][ T5811] dvb-usb: error while querying for an remote control event. [ 462.637606][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 462.647219][ T5811] dvb-usb: error while querying for an remote control event. [ 462.811226][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 462.819329][ T5811] dvb-usb: error while querying for an remote control event. [ 462.978105][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 462.984161][ T5811] dvb-usb: error while querying for an remote control event. [ 463.060863][ T28] usb 4-1: USB disconnect, device number 43 [ 463.095040][ T28] usblp0: removed [ 463.147845][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 463.202487][ T5811] dvb-usb: error while querying for an remote control event. [ 463.373671][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 463.379746][ T5811] dvb-usb: error while querying for an remote control event. [ 463.582433][ T5811] dvb-usb: bulk message failed: -22 (1/0) [ 463.588342][ T5811] dvb-usb: error while querying for an remote control event. [ 463.745513][ T5811] usb 5-1: USB disconnect, device number 10 [ 463.806910][ T5811] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 464.934392][T12828] syzkaller0: entered promiscuous mode [ 464.946994][T12828] syzkaller0: entered allmulticast mode [ 465.361838][ T5777] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 467.912482][T12881] binder: 12880:12881 ioctl c0306201 200000000080 returned -14 [ 467.926571][T12881] binder: 12880:12881 ioctl c0306201 2000000003c0 returned -14 [ 467.987184][T12883] capability: warning: `syz.0.2179' uses deprecated v2 capabilities in a way that may be insecure [ 468.377863][T12896] kvm_pr_unimpl_wrmsr: 22 callbacks suppressed [ 468.377886][T12896] kvm: kvm [12895]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x21f9 [ 469.057223][ T788] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 469.257203][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 469.279103][ T788] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 469.292936][ T788] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 469.308146][T12924] syzkaller0: entered promiscuous mode [ 469.312611][ T788] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 469.314528][T12924] syzkaller0: entered allmulticast mode [ 469.344936][ T788] usb 1-1: config 250 has no interface number 0 [ 469.355142][ T788] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 469.375294][ T788] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 469.386412][ T788] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 469.403392][ T788] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 469.414335][ T788] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 469.434242][ T788] usb 1-1: config 250 interface 228 has no altsetting 0 [ 469.466682][ T788] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 469.477341][ T788] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 469.485865][ T788] usb 1-1: Product: syz [ 469.490824][ T788] usb 1-1: SerialNumber: syz [ 469.521913][ T788] hub 1-1:250.228: bad descriptor, ignoring hub [ 469.537895][ T788] hub: probe of 1-1:250.228 failed with error -5 [ 469.722902][ T788] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 470.077620][ T788] usb 1-1: USB disconnect, device number 40 [ 470.086720][ T788] usblp0: removed [ 470.765804][T12949] kvm: kvm [12948]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x21f9 [ 471.087211][ T5810] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 471.107642][ T5811] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 471.284207][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.296419][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.320408][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.335143][ T5810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.335312][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.365593][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.373965][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.387275][ T788] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 471.395597][ T5810] usb 1-1: config 0 descriptor?? [ 471.401250][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.414844][ T5811] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.439392][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.461725][ T5811] usb 4-1: config 0 descriptor?? [ 471.607250][ T788] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.622129][ T788] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.650448][ T788] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.663278][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.826143][T12975] tipc: Enabling of bearer rejected, failed to enable media [ 471.838304][T12975] syzkaller0: entered promiscuous mode [ 471.843881][T12975] syzkaller0: entered allmulticast mode [ 471.858464][ T5810] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 471.883695][ T5810] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 471.899749][ T788] usb 5-1: usb_control_msg returned -32 [ 471.906487][ T788] usbtmc 5-1:16.0: can't read capabilities [ 471.915910][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 471.937975][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 471.945645][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 471.956986][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 471.966264][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 471.976093][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.002386][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.016498][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.024756][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.034652][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.050385][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.059196][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.066812][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.092462][ T5811] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 472.118322][ T5811] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 472.177588][ T5811] plantronics 0003:047F:FFFF.000F: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 472.226783][ T5811] usb 4-1: USB disconnect, device number 44 [ 472.255511][ T788] usb 1-1: USB disconnect, device number 41 [ 472.322984][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 472.607410][ T28] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 472.818683][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 472.832560][ T28] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 472.846022][ T28] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 472.864895][ T28] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 472.887234][ T28] usb 2-1: config 250 has no interface number 0 [ 472.896825][ T28] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 472.909550][ T28] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 472.920583][ T28] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 472.932726][ T28] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 472.943680][ T28] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 472.962913][ T28] usb 2-1: config 250 interface 228 has no altsetting 0 [ 472.974111][ T28] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 472.989155][ T28] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 472.999179][ T28] usb 2-1: Product: syz [ 473.003500][ T28] usb 2-1: SerialNumber: syz [ 473.020763][ T28] hub 2-1:250.228: bad descriptor, ignoring hub [ 473.029714][ T28] hub: probe of 2-1:250.228 failed with error -5 [ 473.176480][T12992] syzkaller0: entered promiscuous mode [ 473.182395][T12992] syzkaller0: entered allmulticast mode [ 473.227626][ T28] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 473.596578][ T5811] usb 2-1: USB disconnect, device number 40 [ 473.640292][ T5811] usblp0: removed [ 474.145811][ T9] usb 5-1: USB disconnect, device number 11 [ 474.406717][T13002] kvm: kvm [13001]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x600000d9 [ 474.419869][T13002] kvm: kvm [13001]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc2) = 0x6000009b [ 474.432534][T13002] kvm: kvm [13001]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x60000009 [ 474.451922][T13002] kvm: kvm [13001]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x6000008d [ 474.464882][T13002] kvm: kvm [13001]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x60000014 [ 474.481636][T13002] kvm_intel: kvm [13001]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0x6000009d [ 476.343534][T13021] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 476.350459][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.363974][T13021] vhci_hcd vhci_hcd.0: Device attached [ 476.547263][ T5811] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 476.627224][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 476.647202][ T5810] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 476.739113][ T5811] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.751534][ T5811] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.764996][ T5811] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.774578][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.840529][ T5810] usb 4-1: config 0 has no interfaces? [ 476.846395][ T5810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.855701][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.871512][ T5810] usb 4-1: config 0 descriptor?? [ 476.993851][ T5811] usb 5-1: usb_control_msg returned -32 [ 476.999754][ T5811] usbtmc 5-1:16.0: can't read capabilities [ 477.091167][T13022] usb 39-1: recv xbuf, 0 [ 477.097547][ T5811] usb 4-1: USB disconnect, device number 45 [ 477.127138][ T1142] vhci_hcd: stop threads [ 477.132545][ T1142] vhci_hcd: release socket [ 477.148497][ T1142] vhci_hcd: disconnect device [ 477.197416][ T9] vhci_hcd: vhci_device speed not set [ 477.313681][T13030] syzkaller0: entered promiscuous mode [ 477.319861][T13030] syzkaller0: entered allmulticast mode [ 478.756184][T13055] syzkaller0: entered promiscuous mode [ 478.767218][T13055] syzkaller0: entered allmulticast mode [ 479.321698][ T5811] usb 5-1: USB disconnect, device number 12 [ 479.652551][T13080] binder: BINDER_SET_CONTEXT_MGR already set [ 479.660716][T13080] binder: 13079:13080 ioctl 4018620d 200000001000 returned -16 [ 480.420888][T13100] tipc: Enabling of bearer rejected, failed to enable media [ 480.433331][T13100] syzkaller0: entered promiscuous mode [ 480.441577][T13100] syzkaller0: entered allmulticast mode [ 481.294463][T13128] tipc: Enabling of bearer rejected, failed to enable media [ 481.304775][T13128] syzkaller0: entered promiscuous mode [ 481.310762][T13128] syzkaller0: entered allmulticast mode [ 481.732870][T13141] syzkaller0: entered promiscuous mode [ 481.738738][T13141] syzkaller0: entered allmulticast mode [ 484.402317][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 484.573509][T13165] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 485.260871][T13187] syzkaller0: entered promiscuous mode [ 485.266732][T13187] syzkaller0: entered allmulticast mode [ 485.541076][ T28] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 485.749932][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.761902][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.772330][ T28] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.781840][ C0] vkms_vblank_simulate: vblank timer overrun [ 485.791301][ T28] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.825577][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.848576][ T28] usb 5-1: config 0 descriptor?? [ 486.278817][ T28] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 486.307144][ T28] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 486.407408][ T5777] Bluetooth: hci3: unexpected cc 0x2006 length: 2 > 1 [ 486.414727][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 486.652383][ T28] usb 5-1: USB disconnect, device number 13 [ 487.354476][T13217] 9pnet_virtio: no channels available for device syz [ 488.691271][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 488.691295][ T27] audit: type=1326 audit(1777025831.159:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa6f9cdd9 code=0x7ffc0000 [ 488.723569][ T27] audit: type=1326 audit(1777025831.169:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa6f9cdd9 code=0x7ffc0000 [ 488.767866][ T27] audit: type=1326 audit(1777025831.169:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa6f9cdd9 code=0x7ffc0000 [ 488.790271][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.807665][ T27] audit: type=1326 audit(1777025831.169:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdaa6f9cdd9 code=0x7ffc0000 [ 488.871032][ T27] audit: type=1326 audit(1777025831.169:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaa6f9cdd9 code=0x7ffc0000 [ 488.893479][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.944034][ T27] audit: type=1326 audit(1777025831.299:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa6f5d60e code=0x7ffc0000 [ 489.045681][ T27] audit: type=1326 audit(1777025831.299:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa6f5d60e code=0x7ffc0000 [ 489.077258][ T27] audit: type=1326 audit(1777025831.309:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa6f5d60e code=0x7ffc0000 [ 489.101961][ T27] audit: type=1326 audit(1777025831.309:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa6f5d60e code=0x7ffc0000 [ 489.124517][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.138959][ T27] audit: type=1326 audit(1777025831.309:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaa6f5d60e code=0x7ffc0000 [ 489.326128][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'. [ 489.519010][T13239] syzkaller0: entered promiscuous mode [ 489.524712][T13239] syzkaller0: entered allmulticast mode [ 489.749257][T13245] syzkaller0: entered promiscuous mode [ 489.754975][T13245] syzkaller0: entered allmulticast mode [ 493.231770][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 493.656943][T13299] syzkaller0: entered promiscuous mode [ 493.663013][T13299] syzkaller0: entered allmulticast mode [ 496.402344][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 496.558892][T13331] 9pnet_virtio: no channels available for device syz [ 496.601413][T13333] syzkaller0: entered promiscuous mode [ 496.621158][T13333] syzkaller0: entered allmulticast mode [ 496.784809][T13343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2337'. [ 496.957944][ C1] ================================================================== [ 496.966281][ C1] BUG: KASAN: slab-use-after-free in lock_timer_base+0x234/0x270 [ 496.974098][ C1] Read of size 4 at addr ffff888028097cb0 by task syz.3.2340/13349 [ 496.982054][ C1] [ 496.984536][ C1] CPU: 1 PID: 13349 Comm: syz.3.2340 Not tainted syzkaller #0 [ 496.992052][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.002187][ C1] Call Trace: [ 497.005543][ C1] [ 497.008444][ C1] dump_stack_lvl+0x18c/0x250 [ 497.013287][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 497.018387][ C1] ? show_regs_print_info+0x20/0x20 [ 497.023663][ C1] ? load_image+0x420/0x420 [ 497.028246][ C1] ? __virt_addr_valid+0x469/0x540 [ 497.033435][ C1] print_report+0xa8/0x210 [ 497.037930][ C1] ? lock_timer_base+0x234/0x270 [ 497.042920][ C1] kasan_report+0x117/0x150 [ 497.047506][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 497.053034][ C1] ? lock_timer_base+0x234/0x270 [ 497.058024][ C1] lock_timer_base+0x234/0x270 [ 497.062826][ C1] __mod_timer+0xf9/0xdb0 [ 497.067209][ C1] ? kmem_cache_free+0xf8/0x270 [ 497.072150][ C1] call_timer_fn+0x189/0x540 [ 497.076797][ C1] ? rose_transmit_link+0x740/0x740 [ 497.082051][ C1] ? call_timer_fn+0xd2/0x540 [ 497.086766][ C1] ? __run_timers+0x800/0x800 [ 497.091478][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.096733][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 497.101991][ C1] ? rose_transmit_link+0x740/0x740 [ 497.107337][ C1] __run_timers+0x542/0x800 [ 497.111880][ C1] ? detach_timer+0x2b0/0x2b0 [ 497.116594][ C1] ? lock_chain_count+0x20/0x20 [ 497.121504][ C1] run_timer_softirq+0x67/0xf0 [ 497.126317][ C1] handle_softirqs+0x280/0x820 [ 497.131139][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 497.135938][ C1] ? do_softirq+0x1a0/0x1a0 [ 497.140472][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 497.145713][ C1] __irq_exit_rcu+0xd3/0x190 [ 497.150343][ C1] ? irq_exit_rcu+0x20/0x20 [ 497.154885][ C1] irq_exit_rcu+0x9/0x20 [ 497.159174][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 497.164839][ C1] [ 497.167799][ C1] [ 497.170752][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.176765][ C1] RIP: 0010:unwind_next_frame+0x1606/0x2970 [ 497.182690][ C1] Code: 0f 84 7f 08 00 00 e8 59 d4 4b 00 48 8b 6c 24 10 4c 8b 7c 24 38 4c 89 f7 e8 57 20 00 00 49 89 c6 48 8b 44 24 40 42 80 3c 28 00 <48> 8b 5c 24 20 74 08 48 89 df e8 5b 0c a4 00 4c 89 33 48 8b 44 24 [ 497.202341][ C1] RSP: 0018:ffffc900195af478 EFLAGS: 00000246 [ 497.208608][ C1] RAX: 1ffff920032b5eb2 RBX: ffffc900195a8000 RCX: 0000000000080000 [ 497.216698][ C1] RDX: ffffc9000d68b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 497.224703][ C1] RBP: ffffc900195af598 R08: ffff88801d2e5a00 R09: 0000000000000003 [ 497.232708][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc900195af548 [ 497.240731][ C1] R13: dffffc0000000000 R14: ffffffff81f363cd R15: ffffffff8f89eef0 [ 497.248821][ C1] ? __se_sys_ioctl+0xfd/0x170 [ 497.253631][ C1] ? unwind_next_frame+0x15f9/0x2970 [ 497.258953][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 497.263495][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 497.268117][ C1] ? stack_trace_save+0x100/0x100 [ 497.273177][ C1] arch_stack_walk+0x144/0x190 [ 497.277972][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 497.282507][ C1] stack_trace_save+0xaa/0x100 [ 497.287305][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 497.292449][ C1] ref_tracker_alloc+0x1b7/0x4c0 [ 497.297420][ C1] ? ref_tracker_dir_exit+0x500/0x500 [ 497.302869][ C1] ? __asan_memset+0x22/0x40 [ 497.307503][ C1] ? qdisc_alloc+0x75f/0xa50 [ 497.312130][ C1] ? qdisc_create_dflt+0x63/0x430 [ 497.317192][ C1] ? mq_init+0x2e2/0x680 [ 497.321470][ C1] ? qdisc_create_dflt+0x11e/0x430 [ 497.326626][ C1] ? dev_activate+0x1d0/0x11a0 [ 497.331448][ C1] ? __dev_open+0x347/0x430 [ 497.335994][ C1] ? __dev_change_flags+0x211/0x6a0 [ 497.341261][ C1] ? dev_change_flags+0x88/0x1a0 [ 497.346240][ C1] ? dev_ioctl+0x7b4/0x1140 [ 497.350778][ C1] ? sock_do_ioctl+0x239/0x310 [ 497.355576][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 497.360123][ C1] qdisc_alloc+0x75f/0xa50 [ 497.364569][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 497.369892][ C1] qdisc_create_dflt+0x63/0x430 [ 497.374776][ C1] mq_init+0x2e2/0x680 [ 497.378888][ C1] ? trace_net_dev_xmit_timeout+0x1c0/0x1c0 [ 497.384839][ C1] ? qdisc_alloc+0x777/0xa50 [ 497.389483][ C1] qdisc_create_dflt+0x11e/0x430 [ 497.394457][ C1] ? dev_activate+0x1ab/0x11a0 [ 497.399266][ C1] dev_activate+0x1d0/0x11a0 [ 497.403893][ C1] __dev_open+0x347/0x430 [ 497.408260][ C1] ? dev_open+0x190/0x190 [ 497.412621][ C1] __dev_change_flags+0x211/0x6a0 [ 497.417683][ C1] ? dev_get_flags+0x1c0/0x1c0 [ 497.422498][ C1] ? mutex_lock_nested+0x20/0x20 [ 497.427478][ C1] dev_change_flags+0x88/0x1a0 [ 497.432287][ C1] dev_ioctl+0x7b4/0x1140 [ 497.436685][ C1] sock_do_ioctl+0x239/0x310 [ 497.441310][ C1] ? sock_show_fdinfo+0xb0/0xb0 [ 497.446197][ C1] sock_ioctl+0x5ba/0x7e0 [ 497.450571][ C1] ? sock_poll+0x3e0/0x3e0 [ 497.455046][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 497.460040][ C1] ? security_file_ioctl+0x80/0xa0 [ 497.465190][ C1] ? sock_poll+0x3e0/0x3e0 [ 497.469656][ C1] __se_sys_ioctl+0xfd/0x170 [ 497.474282][ C1] do_syscall_64+0x55/0xa0 [ 497.478726][ C1] ? clear_bhb_loop+0x40/0x90 [ 497.483446][ C1] ? clear_bhb_loop+0x40/0x90 [ 497.488189][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.494156][ C1] RIP: 0033:0x7fd9a359cdd9 [ 497.498620][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.518268][ C1] RSP: 002b:00007fd9a4390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.526713][ C1] RAX: ffffffffffffffda RBX: 00007fd9a3815fa0 RCX: 00007fd9a359cdd9 [ 497.534725][ C1] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 497.542724][ C1] RBP: 00007fd9a3632d69 R08: 0000000000000000 R09: 0000000000000000 [ 497.550722][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.558813][ C1] R13: 00007fd9a3816038 R14: 00007fd9a3815fa0 R15: 00007ffc6e3bd1d8 [ 497.566826][ C1] [ 497.569872][ C1] [ 497.572216][ C1] Allocated by task 9913: [ 497.576572][ C1] kasan_set_track+0x4e/0x70 [ 497.581194][ C1] __kasan_kmalloc+0x8f/0xa0 [ 497.585831][ C1] rose_add_node+0x23c/0xf00 [ 497.590456][ C1] rose_rt_ioctl+0xd2c/0x1290 [ 497.595167][ C1] rose_ioctl+0x3fc/0x8f0 [ 497.599530][ C1] sock_do_ioctl+0xfc/0x310 [ 497.604061][ C1] sock_ioctl+0x5ba/0x7e0 [ 497.608416][ C1] __se_sys_ioctl+0xfd/0x170 [ 497.613033][ C1] do_syscall_64+0x55/0xa0 [ 497.617516][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.623532][ C1] [ 497.625886][ C1] Freed by task 13352: [ 497.629967][ C1] kasan_set_track+0x4e/0x70 [ 497.634584][ C1] kasan_save_free_info+0x2e/0x50 [ 497.639644][ C1] ____kasan_slab_free+0x126/0x1e0 [ 497.644787][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 497.650267][ C1] __kmem_cache_free+0xba/0x1e0 [ 497.655164][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 497.660125][ C1] call_timer_fn+0x189/0x540 [ 497.664741][ C1] __run_timers+0x542/0x800 [ 497.669265][ C1] run_timer_softirq+0x67/0xf0 [ 497.674052][ C1] handle_softirqs+0x280/0x820 [ 497.678843][ C1] __irq_exit_rcu+0xd3/0x190 [ 497.683492][ C1] irq_exit_rcu+0x9/0x20 [ 497.687757][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 497.693412][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.699447][ C1] [ 497.701790][ C1] Last potentially related work creation: [ 497.707519][ C1] kasan_save_stack+0x3e/0x60 [ 497.712223][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 497.717631][ C1] kvfree_call_rcu+0xee/0x790 [ 497.722431][ C1] __ipv6_dev_mc_dec+0x2cc/0x330 [ 497.727415][ C1] ipv6_mc_destroy_dev+0x338/0x590 [ 497.732624][ C1] addrconf_ifdown+0x13cf/0x18c0 [ 497.737605][ C1] addrconf_notify+0x6c6/0x1010 [ 497.742491][ C1] notifier_call_chain+0x197/0x380 [ 497.747634][ C1] unregister_netdevice_many_notify+0x100d/0x1900 [ 497.754077][ C1] unregister_netdevice_queue+0x32c/0x370 [ 497.759836][ C1] __tun_detach+0xd45/0x1500 [ 497.764458][ C1] tun_chr_close+0x10d/0x1c0 [ 497.769108][ C1] __fput+0x234/0x970 [ 497.773115][ C1] __se_sys_close+0x15f/0x220 [ 497.777816][ C1] do_syscall_64+0x55/0xa0 [ 497.782277][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.788318][ C1] [ 497.790674][ C1] The buggy address belongs to the object at ffff888028097c00 [ 497.790674][ C1] which belongs to the cache kmalloc-512 of size 512 [ 497.804848][ C1] The buggy address is located 176 bytes inside of [ 497.804848][ C1] freed 512-byte region [ffff888028097c00, ffff888028097e00) [ 497.818680][ C1] [ 497.821056][ C1] The buggy address belongs to the physical page: [ 497.827628][ C1] page:ffffea0000a02500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28094 [ 497.838038][ C1] head:ffffea0000a02500 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.846999][ C1] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 497.855454][ C1] page_type: 0xffffffff() [ 497.859822][ C1] raw: 00fff00000000840 ffff888017c41c80 0000000000000000 dead000000000001 [ 497.868442][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 497.877056][ C1] page dumped because: kasan: bad access detected [ 497.883507][ C1] page_owner tracks the page as allocated [ 497.889243][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20751295872, free_ts 0 [ 497.908985][ C1] post_alloc_hook+0x1c1/0x200 [ 497.913784][ C1] get_page_from_freelist+0x1951/0x19e0 [ 497.919382][ C1] __alloc_pages+0x1f0/0x460 [ 497.923996][ C1] alloc_page_interleave+0x24/0x1e0 [ 497.929219][ C1] alloc_slab_page+0x5d/0x160 [ 497.933921][ C1] new_slab+0x87/0x2d0 [ 497.938006][ C1] ___slab_alloc+0xc5d/0x12f0 [ 497.942716][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 497.948210][ C1] kmalloc_trace+0x2a/0xe0 [ 497.952744][ C1] device_add+0xbe/0xc20 [ 497.957017][ C1] __video_register_device+0x3987/0x4890 [ 497.962691][ C1] vivid_create_devnodes+0x1453/0x2cd0 [ 497.968323][ C1] vivid_probe+0x47e8/0x5c80 [ 497.972964][ C1] platform_probe+0x13b/0x1c0 [ 497.977680][ C1] really_probe+0x25b/0xb20 [ 497.982213][ C1] __driver_probe_device+0x18c/0x330 [ 497.987523][ C1] page_owner free stack trace missing [ 497.992909][ C1] [ 497.995257][ C1] Memory state around the buggy address: [ 498.000906][ C1] ffff888028097b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 498.008996][ C1] ffff888028097c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.017084][ C1] >ffff888028097c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.025164][ C1] ^ [ 498.030814][ C1] ffff888028097d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.038899][ C1] ffff888028097d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 498.047075][ C1] ================================================================== [ 498.055175][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 498.062398][ C1] CPU: 1 PID: 13349 Comm: syz.3.2340 Not tainted syzkaller #0 [ 498.069896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.079979][ C1] Call Trace: [ 498.083279][ C1] [ 498.086145][ C1] dump_stack_lvl+0x18c/0x250 [ 498.090868][ C1] ? show_regs_print_info+0x20/0x20 [ 498.096130][ C1] ? load_image+0x420/0x420 [ 498.100687][ C1] panic+0x2dc/0x730 [ 498.104624][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 498.109167][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 498.115097][ C1] ? _raw_spin_unlock+0x40/0x40 [ 498.119977][ C1] ? print_memory_metadata+0x314/0x400 [ 498.125488][ C1] ? lock_timer_base+0x234/0x270 [ 498.130462][ C1] check_panic_on_warn+0x84/0xa0 [ 498.135442][ C1] ? lock_timer_base+0x234/0x270 [ 498.140404][ C1] end_report+0x6f/0x130 [ 498.144769][ C1] kasan_report+0x128/0x150 [ 498.149301][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 498.154793][ C1] ? lock_timer_base+0x234/0x270 [ 498.159781][ C1] lock_timer_base+0x234/0x270 [ 498.164575][ C1] __mod_timer+0xf9/0xdb0 [ 498.168951][ C1] ? kmem_cache_free+0xf8/0x270 [ 498.173846][ C1] call_timer_fn+0x189/0x540 [ 498.178466][ C1] ? rose_transmit_link+0x740/0x740 [ 498.183705][ C1] ? call_timer_fn+0xd2/0x540 [ 498.188415][ C1] ? __run_timers+0x800/0x800 [ 498.193127][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.198351][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 498.203592][ C1] ? rose_transmit_link+0x740/0x740 [ 498.208832][ C1] __run_timers+0x542/0x800 [ 498.213371][ C1] ? detach_timer+0x2b0/0x2b0 [ 498.218080][ C1] ? lock_chain_count+0x20/0x20 [ 498.222967][ C1] run_timer_softirq+0x67/0xf0 [ 498.227762][ C1] handle_softirqs+0x280/0x820 [ 498.232580][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 498.237393][ C1] ? do_softirq+0x1a0/0x1a0 [ 498.241929][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 498.247161][ C1] __irq_exit_rcu+0xd3/0x190 [ 498.251776][ C1] ? irq_exit_rcu+0x20/0x20 [ 498.256318][ C1] irq_exit_rcu+0x9/0x20 [ 498.260596][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 498.266277][ C1] [ 498.269249][ C1] [ 498.272211][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.278229][ C1] RIP: 0010:unwind_next_frame+0x1606/0x2970 [ 498.284169][ C1] Code: 0f 84 7f 08 00 00 e8 59 d4 4b 00 48 8b 6c 24 10 4c 8b 7c 24 38 4c 89 f7 e8 57 20 00 00 49 89 c6 48 8b 44 24 40 42 80 3c 28 00 <48> 8b 5c 24 20 74 08 48 89 df e8 5b 0c a4 00 4c 89 33 48 8b 44 24 [ 498.303830][ C1] RSP: 0018:ffffc900195af478 EFLAGS: 00000246 [ 498.309932][ C1] RAX: 1ffff920032b5eb2 RBX: ffffc900195a8000 RCX: 0000000000080000 [ 498.317948][ C1] RDX: ffffc9000d68b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 498.325967][ C1] RBP: ffffc900195af598 R08: ffff88801d2e5a00 R09: 0000000000000003 [ 498.334015][ C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffc900195af548 [ 498.342052][ C1] R13: dffffc0000000000 R14: ffffffff81f363cd R15: ffffffff8f89eef0 [ 498.350062][ C1] ? __se_sys_ioctl+0xfd/0x170 [ 498.354875][ C1] ? unwind_next_frame+0x15f9/0x2970 [ 498.360192][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 498.364723][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 498.369250][ C1] ? stack_trace_save+0x100/0x100 [ 498.374310][ C1] arch_stack_walk+0x144/0x190 [ 498.379107][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 498.383634][ C1] stack_trace_save+0xaa/0x100 [ 498.388424][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 498.393565][ C1] ref_tracker_alloc+0x1b7/0x4c0 [ 498.398537][ C1] ? ref_tracker_dir_exit+0x500/0x500 [ 498.403951][ C1] ? __asan_memset+0x22/0x40 [ 498.408577][ C1] ? qdisc_alloc+0x75f/0xa50 [ 498.413201][ C1] ? qdisc_create_dflt+0x63/0x430 [ 498.418255][ C1] ? mq_init+0x2e2/0x680 [ 498.422524][ C1] ? qdisc_create_dflt+0x11e/0x430 [ 498.427673][ C1] ? dev_activate+0x1d0/0x11a0 [ 498.432471][ C1] ? __dev_open+0x347/0x430 [ 498.437003][ C1] ? __dev_change_flags+0x211/0x6a0 [ 498.442237][ C1] ? dev_change_flags+0x88/0x1a0 [ 498.447209][ C1] ? dev_ioctl+0x7b4/0x1140 [ 498.451737][ C1] ? sock_do_ioctl+0x239/0x310 [ 498.456581][ C1] ? sock_ioctl+0x5ba/0x7e0 [ 498.461147][ C1] qdisc_alloc+0x75f/0xa50 [ 498.465601][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 498.470920][ C1] qdisc_create_dflt+0x63/0x430 [ 498.475802][ C1] mq_init+0x2e2/0x680 [ 498.479905][ C1] ? trace_net_dev_xmit_timeout+0x1c0/0x1c0 [ 498.485834][ C1] ? qdisc_alloc+0x777/0xa50 [ 498.490465][ C1] qdisc_create_dflt+0x11e/0x430 [ 498.495438][ C1] ? dev_activate+0x1ab/0x11a0 [ 498.500235][ C1] dev_activate+0x1d0/0x11a0 [ 498.504868][ C1] __dev_open+0x347/0x430 [ 498.509237][ C1] ? dev_open+0x190/0x190 [ 498.513600][ C1] __dev_change_flags+0x211/0x6a0 [ 498.518674][ C1] ? dev_get_flags+0x1c0/0x1c0 [ 498.523474][ C1] ? mutex_lock_nested+0x20/0x20 [ 498.528452][ C1] dev_change_flags+0x88/0x1a0 [ 498.533255][ C1] dev_ioctl+0x7b4/0x1140 [ 498.537619][ C1] sock_do_ioctl+0x239/0x310 [ 498.542258][ C1] ? sock_show_fdinfo+0xb0/0xb0 [ 498.547151][ C1] sock_ioctl+0x5ba/0x7e0 [ 498.551512][ C1] ? sock_poll+0x3e0/0x3e0 [ 498.555968][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 498.560935][ C1] ? security_file_ioctl+0x80/0xa0 [ 498.566075][ C1] ? sock_poll+0x3e0/0x3e0 [ 498.570615][ C1] __se_sys_ioctl+0xfd/0x170 [ 498.575326][ C1] do_syscall_64+0x55/0xa0 [ 498.579776][ C1] ? clear_bhb_loop+0x40/0x90 [ 498.584572][ C1] ? clear_bhb_loop+0x40/0x90 [ 498.589332][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.595269][ C1] RIP: 0033:0x7fd9a359cdd9 [ 498.599719][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.619447][ C1] RSP: 002b:00007fd9a4390028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.627976][ C1] RAX: ffffffffffffffda RBX: 00007fd9a3815fa0 RCX: 00007fd9a359cdd9 [ 498.635979][ C1] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 498.643981][ C1] RBP: 00007fd9a3632d69 R08: 0000000000000000 R09: 0000000000000000 [ 498.651980][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.659984][ C1] R13: 00007fd9a3816038 R14: 00007fd9a3815fa0 R15: 00007ffc6e3bd1d8 [ 498.667994][ C1] [ 498.671641][ C1] Kernel Offset: disabled [ 498.676018][ C1] Rebooting in 86400 seconds..