last executing test programs: 12.766750687s ago: executing program 1 (id=2691): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000040)="10") 9.534461766s ago: executing program 1 (id=2699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "31031840"}, @local=@item_012={0x2, 0x2, 0xa, "a31e"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @local=@item_012={0x2, 0x2, 0x7, "e88d"}]}}, 0x0}, 0x0) 8.02832064s ago: executing program 0 (id=2702): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 7.48509525s ago: executing program 1 (id=2704): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.995485668s ago: executing program 0 (id=2705): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 5.963364522s ago: executing program 1 (id=2707): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090402000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="10") 5.823107156s ago: executing program 0 (id=2708): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x14) 5.799750892s ago: executing program 0 (id=2709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) socket$packet(0x11, 0x7, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x50040, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103}, 0x20) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x5}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000003d40)={0x2020}, 0x2020) r7 = dup2(r4, r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, 0x0, 0x0) 3.940222092s ago: executing program 1 (id=2711): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0xc, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x361, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0xbd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x40000000, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x4, 0x0, 0x0, 0x800009, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f2, 0x1, 0x0, 0x2, 0xd817, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x4, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x7ff, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x2, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200030030615ca4079f"], 0xe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) 3.520568725s ago: executing program 3 (id=2712): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_procfs$userns(r3, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) syz_emit_ethernet(0xb6, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xa15cb}, {0x2}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xe7}, {0x2, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x100, 0x0, 0x1}], @generic="0e489ef9fceb1f24f1b777e21fad84a10a8207800819ac742d5d8d69dd44effb5ba93fadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f973c6a1d40fd51d6ddd93ed419f961047ef297b694a0556015"}}}}, &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 2.834854339s ago: executing program 2 (id=2713): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500c0}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 2.602694337s ago: executing program 0 (id=2714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0xffffffff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) 2.441121227s ago: executing program 0 (id=2715): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xc0, 0x40, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0xe3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x3, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.259019024s ago: executing program 2 (id=2716): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 2.1849191s ago: executing program 2 (id=2717): r0 = gettid() timer_create(0x7, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) recvmmsg(r2, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1}, 0x2}], 0x1, 0x40004023, 0x0) 2.066741569s ago: executing program 1 (id=2718): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b10009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 1.835954656s ago: executing program 2 (id=2719): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {&(0x7f0000000400)="c44755ef", 0x4}], 0x2) 1.833016476s ago: executing program 3 (id=2720): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400c051}, 0xc0) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r8, &(0x7f0000000080)=""/220, 0xdc, 0xb5) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f00000000c0)={0x2, 0x102, 0x1, {0x8, 0x3, 0x7, 0x91}}) 1.726409076s ago: executing program 2 (id=2721): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x5c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000140), &(0x7f0000000200)) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 664.827282ms ago: executing program 2 (id=2722): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) socket$packet(0x11, 0x7, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x50040, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103}, 0x20) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x5}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000003d40)={0x2020}, 0x2020) r7 = dup2(r4, r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/185) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, 0x0, 0x0) 539.084759ms ago: executing program 3 (id=2723): bind$inet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 396.751262ms ago: executing program 3 (id=2724): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 107.8353ms ago: executing program 3 (id=2725): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000700000000040014001a80100005800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 0s ago: executing program 3 (id=2726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) dup(r0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000006800010006000000fcffff7f00000000000000000c000200010000000400000086d60bc3ff455488b62d15a02cc7b88ec9f7f63bf10ac0bb1c1f6c39860496734193479bb03494765a801d590968a8d6e189e5b0b7d0ff5f1c75b874a279ac671795da196b5eb7e6db0edde113b06afa7374673d"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0xffffffff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x4000000) kernel console output (not intermixed with test programs): 03 length: 249 > 9 [ 649.172307][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.193039][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.203782][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 649.220426][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 649.305289][ T1127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.473341][ T1127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.578606][ T1127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.732029][ T1127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.780202][T11806] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 649.960674][T11806] usb 3-1: device descriptor read/64, error -71 [ 650.121988][T14113] chnl_net:caif_netlink_parms(): no params data found [ 650.156729][ T1127] tipc: Left network mode [ 650.243899][T11806] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 650.420153][T11806] usb 3-1: device descriptor read/64, error -71 [ 650.535392][T14113] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.560287][T11806] usb usb3-port1: attempt power cycle [ 650.570378][ T42] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 650.575998][T14113] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.596978][T14113] bridge_slave_0: entered allmulticast mode [ 650.653882][T14113] bridge_slave_0: entered promiscuous mode [ 650.735585][T14113] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.765497][T14113] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.781743][ T42] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 650.783126][T14113] bridge_slave_1: entered allmulticast mode [ 650.813381][ T42] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 650.833081][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.837648][T14113] bridge_slave_1: entered promiscuous mode [ 650.850368][ T42] usb 2-1: Product: syz [ 650.867931][ T42] usb 2-1: Manufacturer: syz [ 650.894461][ T42] usb 2-1: SerialNumber: syz [ 650.918464][ T42] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 650.957203][ T787] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 651.010748][T11806] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 651.059525][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'. [ 651.076263][T11806] usb 3-1: device descriptor read/8, error -71 [ 651.134863][T14113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.158764][T14113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.262148][ T5776] Bluetooth: hci1: command tx timeout [ 651.281331][T14113] team0: Port device team_slave_0 added [ 651.352018][T14113] team0: Port device team_slave_1 added [ 651.360163][T11806] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 651.401360][T11806] usb 3-1: device descriptor read/8, error -71 [ 651.445197][T14113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.453545][T14113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.454940][T14130] random: crng reseeded on system resumption [ 651.479637][T14113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.481942][T14113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.530785][T11806] usb usb3-port1: unable to enumerate USB device [ 651.537301][T14113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.587700][T14113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.769932][T14113] hsr_slave_0: entered promiscuous mode [ 651.795220][T14113] hsr_slave_1: entered promiscuous mode [ 652.058741][T11806] usb 2-1: USB disconnect, device number 69 [ 652.081441][ T787] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 652.094208][ T787] ath9k_htc: Failed to initialize the device [ 652.104359][T11806] usb 2-1: ath9k_htc: USB layer deinitialized [ 652.163044][ T27] kauditd_printk_skb: 246 callbacks suppressed [ 652.163061][ T27] audit: type=1326 audit(1772576116.346:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.197431][ T27] audit: type=1326 audit(1772576116.346:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.221354][ T27] audit: type=1326 audit(1772576116.346:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.253210][ T27] audit: type=1326 audit(1772576116.346:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.278085][ T27] audit: type=1326 audit(1772576116.346:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f521435cfce code=0x7ffc0000 [ 652.304552][ T1127] veth3: left allmulticast mode [ 652.311002][ T1127] veth3: left promiscuous mode [ 652.321977][ T1127] bridge1: port 1(veth3) entered disabled state [ 652.327572][ T27] audit: type=1326 audit(1772576116.346:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.364898][ T27] audit: type=1326 audit(1772576116.346:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.406666][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.408252][ T27] audit: type=1326 audit(1772576116.346:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.437052][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.450968][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.458520][ T27] audit: type=1326 audit(1772576116.346:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.470278][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.504635][ T27] audit: type=1326 audit(1772576116.346:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.0.2372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 652.541315][ T1127] bridge_slave_1: left allmulticast mode [ 652.576154][ T1127] bridge_slave_1: left promiscuous mode [ 652.582054][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.614368][ T1127] bridge_slave_0: left allmulticast mode [ 652.643304][ T1127] bridge_slave_0: left promiscuous mode [ 652.652804][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.726174][ T1127] veth1_macvtap: left promiscuous mode [ 652.742196][ T1127] veth0_macvtap: left promiscuous mode [ 652.760369][ T1127] veth1_vlan: left promiscuous mode [ 652.771971][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 652.776989][ T1127] veth0_vlan: left promiscuous mode [ 652.850227][ T23] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 653.010189][ T23] usb 1-1: device descriptor read/64, error -71 [ 653.288096][ T23] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 653.354673][ T5776] Bluetooth: hci1: command tx timeout [ 653.447263][ T23] usb 1-1: device descriptor read/64, error -71 [ 653.580707][ T23] usb usb1-port1: attempt power cycle [ 653.913204][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 653.964845][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 653.992703][ T23] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 654.022341][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.032018][ T23] usb 1-1: device descriptor read/8, error -71 [ 654.075312][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.310784][ T23] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 654.342532][ T23] usb 1-1: device descriptor read/8, error -71 [ 654.388374][ T1127] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 654.452105][ T1127] bond0 (unregistering): Released all slaves [ 654.470555][ T23] usb usb1-port1: unable to enumerate USB device [ 655.430354][ T5776] Bluetooth: hci1: command tx timeout [ 655.594607][T14113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 655.617637][T14113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 655.631615][T14113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 655.643784][T14113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 655.975109][T14113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.047781][T14113] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.062425][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 656.098981][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.106328][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.168958][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.176122][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.757582][T14253] tipc: Enabled bearer , priority 0 [ 656.782224][T14253] syzkaller0: entered promiscuous mode [ 656.787809][T14253] syzkaller0: entered allmulticast mode [ 656.818788][T14253] tipc: Resetting bearer [ 656.829378][T14250] tipc: Resetting bearer [ 656.877031][T14250] tipc: Disabling bearer [ 656.929973][T14113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.055318][T14113] veth0_vlan: entered promiscuous mode [ 657.088292][T14113] veth1_vlan: entered promiscuous mode [ 657.181751][T14113] veth0_macvtap: entered promiscuous mode [ 657.195251][T14113] veth1_macvtap: entered promiscuous mode [ 657.222620][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.238969][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.250354][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.275823][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.300215][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.318651][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.332170][T14113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.358613][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.370470][T11806] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 657.380373][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.393802][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.404418][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.419498][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.430749][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.442212][T14113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.464675][T14113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.492285][T14113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.501692][ T5776] Bluetooth: hci1: command tx timeout [ 657.511809][T14113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.530172][T11806] usb 2-1: device descriptor read/64, error -71 [ 657.536727][T14113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.695101][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.723302][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.747931][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.774216][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.810268][T11806] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 657.853351][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'. [ 657.990472][T11806] usb 2-1: device descriptor read/64, error -71 [ 658.120862][T11806] usb usb2-port1: attempt power cycle [ 658.304481][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2398'. [ 658.560206][T11806] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 658.628856][T11806] usb 2-1: device descriptor read/8, error -71 [ 658.737186][T13842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 658.749693][T13842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 658.759828][T13842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 658.769902][T13842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 658.779118][T13842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 658.789061][T13842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.798796][ T6548] bond0: (slave syz_tun): Releasing backup interface [ 658.932021][T11806] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 658.993304][T11806] usb 2-1: device descriptor read/8, error -71 [ 659.017642][ T6563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.136030][T11806] usb usb2-port1: unable to enumerate USB device [ 659.164849][ T6563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.288763][ T6563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.464703][ T6563] bond0: (slave netdevsim0): Releasing backup interface [ 659.485908][ T6563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.616687][T14304] chnl_net:caif_netlink_parms(): no params data found [ 659.814858][T14304] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.828590][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.842940][T14304] bridge_slave_0: entered allmulticast mode [ 659.849685][T14304] bridge_slave_0: entered promiscuous mode [ 659.872798][T14304] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.879931][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.901369][T14304] bridge_slave_1: entered allmulticast mode [ 659.923877][T14304] bridge_slave_1: entered promiscuous mode [ 660.001813][ T6563] tipc: Left network mode [ 660.020477][T14304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.067916][T14304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.189477][T14304] team0: Port device team_slave_0 added [ 660.478629][ T6563] ip6gretap0 (unregistering): left promiscuous mode [ 660.570427][ T8] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 660.578949][T14355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2404'. [ 660.591683][T14304] team0: Port device team_slave_1 added [ 660.749829][T14304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.759819][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.830128][T14304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.850751][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 660.870472][ T5776] Bluetooth: hci2: command tx timeout [ 660.879712][ T8] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 660.896662][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.918534][ T8] usb 2-1: Product: syz [ 660.919511][T14304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.923028][ T8] usb 2-1: Manufacturer: syz [ 660.934564][ T8] usb 2-1: SerialNumber: syz [ 660.956747][ T8] usb 2-1: config 0 descriptor?? [ 660.992730][T14304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.018976][T14304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.385243][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 661.403852][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 661.408269][T14304] hsr_slave_0: entered promiscuous mode [ 661.436954][T14304] hsr_slave_1: entered promiscuous mode [ 661.437358][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 661.456124][T14304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.456167][ T8] usb 2-1: media controller created [ 661.485185][T14304] Cannot create hsr debugfs directory [ 661.494545][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.587629][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 661.612582][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 661.630115][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 661.843160][ T6563] dvmrp0 (unregistering): left allmulticast mode [ 662.325007][ T6563] bridge0: left promiscuous mode [ 662.340668][ T42] usb 2-1: USB disconnect, device number 74 [ 662.358963][ T6563] hsr_slave_0: left promiscuous mode [ 662.398623][ T6563] hsr_slave_1: left promiscuous mode [ 662.405897][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.423902][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.435711][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 662.447627][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.467353][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.487982][ T6563] bridge_slave_1: left promiscuous mode [ 662.500722][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.523391][ T6563] bridge_slave_0: left allmulticast mode [ 662.539964][ T6563] bridge_slave_0: left promiscuous mode [ 662.560367][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.613953][ T6563] veth1_macvtap: left promiscuous mode [ 662.619537][ T6563] veth0_macvtap: left promiscuous mode [ 662.625866][ T6563] veth1_vlan: left promiscuous mode [ 662.633489][ T6563] veth0_vlan: left promiscuous mode [ 662.940819][ T5776] Bluetooth: hci2: command tx timeout [ 662.992249][ T42] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 663.160440][ T42] usb 4-1: device descriptor read/64, error -71 [ 663.248563][ T786] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 663.432626][ T786] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 663.442431][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.450106][ T42] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 663.462842][ T786] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 663.463063][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.472234][ T786] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 663.489985][ T786] usb 2-1: Manufacturer: syz [ 663.508048][ T786] usb 2-1: config 0 descriptor?? [ 663.558531][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.590529][ T786] rc_core: IR keymap rc-hauppauge not found [ 663.603313][ T786] Registered IR keymap rc-empty [ 663.610599][ T786] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 663.633081][ T786] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 663.635569][ T42] usb 4-1: device descriptor read/64, error -71 [ 663.744963][ T787] usb 2-1: USB disconnect, device number 75 [ 663.777308][ T42] usb usb4-port1: attempt power cycle [ 664.000940][ T6563] bond0 (unregistering): Released all slaves [ 664.192590][ T42] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 664.255098][ T42] usb 4-1: device descriptor read/8, error -71 [ 664.414103][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 664.532287][ T42] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 664.590799][ T42] usb 4-1: device descriptor read/8, error -71 [ 664.607083][T14409] syzkaller0: entered promiscuous mode [ 664.615056][T14409] syzkaller0: entered allmulticast mode [ 664.712601][ T42] usb usb4-port1: unable to enumerate USB device [ 664.839520][T14304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.869177][T14304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.895166][T14304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.929967][T14304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 665.020608][ T5776] Bluetooth: hci2: command tx timeout [ 665.097005][T14304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.137303][T14304] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.157354][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.164577][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.212475][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.219614][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.317474][T14428] tipc: Enabled bearer , priority 0 [ 665.326380][T14428] syzkaller0: entered promiscuous mode [ 665.335796][T14428] syzkaller0: entered allmulticast mode [ 665.392218][T14428] tipc: Resetting bearer [ 665.428705][T14427] tipc: Resetting bearer [ 665.477929][T14427] tipc: Disabling bearer [ 665.583908][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.734511][T14304] veth0_vlan: entered promiscuous mode [ 665.767635][T14304] veth1_vlan: entered promiscuous mode [ 665.866115][T14304] veth0_macvtap: entered promiscuous mode [ 665.879298][T14304] veth1_macvtap: entered promiscuous mode [ 665.927469][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.950229][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.960153][ T786] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 665.978816][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.994624][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.005569][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.016540][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.017182][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 666.029558][T14304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.069068][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.082763][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.094165][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.105048][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.115581][T14304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.130483][T14304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.157279][T14304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.174023][T14304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.184586][T14304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.193724][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.210869][T14304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.219778][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.231290][T14304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.240558][ T786] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 666.266187][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.289217][ T786] usb 2-1: config 0 descriptor?? [ 666.335626][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2421'. [ 666.350198][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2421'. [ 666.366405][T14461] gretap0: entered promiscuous mode [ 666.384800][T14461] gretap0: left promiscuous mode [ 666.459739][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.490947][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.532417][ T786] usbhid 2-1:0.0: can't add hid device: -71 [ 666.549110][ T786] usbhid: probe of 2-1:0.0 failed with error -71 [ 666.573988][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.577194][ T786] usb 2-1: USB disconnect, device number 76 [ 666.608521][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.890455][ T787] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 667.090537][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.110321][ T5776] Bluetooth: hci2: command tx timeout [ 667.117286][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.128893][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.200740][ T787] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.270505][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.385906][ T787] usb 1-1: config 0 descriptor?? [ 667.568531][T14499] syzkaller0: entered promiscuous mode [ 667.578670][T14499] syzkaller0: entered allmulticast mode [ 667.750526][ T969] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 667.823674][ T787] usbhid 1-1:0.0: can't add hid device: -71 [ 667.847141][ T787] usbhid: probe of 1-1:0.0 failed with error -71 [ 667.885378][ T787] usb 1-1: USB disconnect, device number 74 [ 667.981958][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.016497][ T969] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 668.053002][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.072637][ T969] usb 3-1: config 0 descriptor?? [ 668.092441][ T969] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 668.188552][T14506] tipc: Started in network mode [ 668.193707][T14506] tipc: Node identity 7e7d1b6af64, cluster identity 4711 [ 668.201425][T14506] tipc: Enabled bearer , priority 0 [ 668.284212][ T42] usb 3-1: USB disconnect, device number 67 [ 668.678935][T14503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 668.688289][T14503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 668.694878][T14503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 668.704470][T14503] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 668.711978][T14503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 668.717982][T14503] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 668.727002][T14503] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 668.733974][T14503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 668.739957][T14503] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 668.748294][T14503] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 668.788079][T14504] tipc: Disabling bearer [ 668.908780][T14523] syzkaller0: entered promiscuous mode [ 668.914676][T14523] syzkaller0: entered allmulticast mode [ 669.032187][ T5830] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 669.123264][T14526] netlink: 'syz.1.2435': attribute type 10 has an invalid length. [ 669.234554][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.263901][T14534] tipc: Started in network mode [ 669.268911][T14534] tipc: Node identity 3a17ebc07d4, cluster identity 4711 [ 669.281808][T14534] tipc: Enabled bearer , priority 0 [ 669.297114][ T5830] usb 3-1: New USB device found, idVendor=047f, idProduct=3333, bcdDevice= 0.40 [ 669.300304][T14534] tipc: Resetting bearer [ 669.338124][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.352014][T14533] tipc: Disabling bearer [ 669.391027][ T5830] usb 3-1: config 0 descriptor?? [ 669.459843][ T5830] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 670.220674][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 670.632617][T14553] tipc: Enabled bearer , priority 0 [ 670.663626][T14553] syzkaller0: entered promiscuous mode [ 670.687989][T14553] syzkaller0: entered allmulticast mode [ 670.705240][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 670.713497][T14553] tipc: Resetting bearer [ 670.720911][T14552] tipc: Resetting bearer [ 670.779133][T14552] tipc: Disabling bearer [ 670.788173][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.794428][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 670.822947][ T23] IPVS: starting estimator thread 0... [ 670.941045][T14557] IPVS: using max 35 ests per chain, 84000 per kthread [ 671.280215][ T23] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 671.433353][ T42] usb 3-1: USB disconnect, device number 68 [ 671.480271][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 671.508466][ T23] usb 2-1: config 0 has no interfaces? [ 671.526131][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 671.535938][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.546125][ T23] usb 2-1: Product: syz [ 671.551651][ T23] usb 2-1: Manufacturer: syz [ 671.556373][ T23] usb 2-1: SerialNumber: syz [ 671.569148][ T23] usb 2-1: config 0 descriptor?? [ 671.754114][T14561] syzkaller0: entered promiscuous mode [ 671.759672][T14561] syzkaller0: entered allmulticast mode [ 672.148259][T14571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.182137][T14573] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 672.207447][T14573] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.222796][T14573] bond0: (slave team0): Enslaving as an active interface with an up link [ 672.233501][T14571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.780158][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 672.860211][T13842] Bluetooth: hci2: command 0x0c1a tx timeout [ 672.866461][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 673.590644][ T969] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 673.622536][T14594] syzkaller0: entered promiscuous mode [ 673.628259][T14594] syzkaller0: entered allmulticast mode [ 673.801165][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 673.827805][ T969] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 673.858024][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.871360][ T969] usb 4-1: Product: syz [ 673.880629][ T969] usb 4-1: Manufacturer: syz [ 673.885301][ T969] usb 4-1: SerialNumber: syz [ 673.905588][ T969] usb 4-1: config 0 descriptor?? [ 674.040898][ T8] usb 2-1: USB disconnect, device number 77 [ 674.355214][ T969] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 674.383777][ T969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 674.399280][ T969] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 674.408188][ T969] usb 4-1: media controller created [ 674.456412][ T969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.555692][ T969] zl10353_read_register: readreg error (reg=127, ret==0) [ 674.584009][ T969] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 674.606416][ T969] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 674.860599][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.940458][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 674.946555][T13842] Bluetooth: hci2: command 0x0c1a tx timeout [ 676.061024][T14619] tipc: Enabling of bearer rejected, failed to enable media [ 676.200649][T14633] syz_tun: entered promiscuous mode [ 676.206357][T14633] macsec1: entered allmulticast mode [ 676.212343][T14633] syz_tun: entered allmulticast mode [ 676.222214][T14633] syz_tun: left allmulticast mode [ 676.227437][T14633] syz_tun: left promiscuous mode [ 676.266794][T14637] tipc: Enabled bearer , priority 0 [ 676.296179][T14634] tipc: Resetting bearer [ 676.352667][T14632] tipc: Disabling bearer [ 676.364232][ T787] usb 4-1: USB disconnect, device number 70 [ 676.417050][ T787] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 676.560800][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2464'. [ 676.571605][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2464'. [ 676.588213][T14639] bridge0: entered promiscuous mode [ 676.594999][T14639] ip6gretap0: entered promiscuous mode [ 676.602187][T14639] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 676.717469][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 676.717486][ T27] audit: type=1326 audit(1772576140.896:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 676.756160][T14652] syzkaller0: entered promiscuous mode [ 676.765751][T14652] syzkaller0: entered allmulticast mode [ 676.772096][ T27] audit: type=1326 audit(1772576140.896:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 676.794831][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.850601][ T787] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 676.862866][ T27] audit: type=1326 audit(1772576140.896:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 676.899933][ T27] audit: type=1326 audit(1772576140.896:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 676.967920][ T27] audit: type=1326 audit(1772576140.936:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 676.997896][ T27] audit: type=1326 audit(1772576140.936:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 677.040255][ T787] usb 4-1: device descriptor read/64, error -71 [ 677.047583][ T27] audit: type=1326 audit(1772576140.936:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 677.076016][ T27] audit: type=1326 audit(1772576140.936:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 677.098438][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.112114][ T27] audit: type=1326 audit(1772576140.936:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 677.136099][ T27] audit: type=1326 audit(1772576140.936:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.2.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 677.230347][ T969] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 677.326349][ T787] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 677.440265][ T969] usb 3-1: Using ep0 maxpacket: 32 [ 677.460582][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.480155][ T787] usb 4-1: device descriptor read/64, error -71 [ 677.490565][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.520147][ T969] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 677.544454][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.575162][ T969] usb 3-1: config 0 descriptor?? [ 677.600983][ T787] usb usb4-port1: attempt power cycle [ 678.028647][ T787] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 678.077577][ T787] usb 4-1: device descriptor read/8, error -71 [ 678.119764][ T969] ft260 0003:0403:6030.001C: item fetching failed at offset 0/2 [ 678.165908][ T969] ft260 0003:0403:6030.001C: failed to parse HID [ 678.199522][ T969] ft260: probe of 0003:0403:6030.001C failed with error -22 [ 678.360226][ T787] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 678.401226][ T787] usb 4-1: device descriptor read/8, error -71 [ 678.527654][ T787] usb usb4-port1: unable to enumerate USB device [ 679.682893][T14671] tipc: Enabled bearer , priority 0 [ 679.695898][T14671] syzkaller0: entered promiscuous mode [ 679.704113][T14671] syzkaller0: entered allmulticast mode [ 679.738045][T14671] tipc: Resetting bearer [ 679.782494][T14670] tipc: Resetting bearer [ 679.834626][T14670] tipc: Disabling bearer [ 680.078906][ T42] usb 3-1: USB disconnect, device number 69 [ 680.209701][T14694] syzkaller0: entered promiscuous mode [ 680.221580][T14694] syzkaller0: entered allmulticast mode [ 680.484170][T14699] syzkaller0: entered promiscuous mode [ 680.504819][T14699] syzkaller0: entered allmulticast mode [ 683.763876][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 683.763891][ T27] audit: type=1326 audit(1772576147.946:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 683.820238][ T27] audit: type=1326 audit(1772576147.946:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 683.866085][ T27] audit: type=1326 audit(1772576147.946:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 683.970258][ T27] audit: type=1326 audit(1772576147.946:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.033819][ T27] audit: type=1326 audit(1772576147.946:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.131183][ T27] audit: type=1326 audit(1772576147.946:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.220146][ T8] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 684.240391][ T27] audit: type=1326 audit(1772576147.946:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.262930][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.269657][ T27] audit: type=1326 audit(1772576147.956:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.320109][ T27] audit: type=1326 audit(1772576147.956:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.388311][ T27] audit: type=1326 audit(1772576147.956:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14733 comm="syz.3.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 684.410869][ C0] vkms_vblank_simulate: vblank timer overrun [ 684.458934][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 684.472881][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.499587][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 684.509452][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 684.529723][ T8] usb 2-1: Manufacturer: syz [ 684.562302][ T8] usb 2-1: config 0 descriptor?? [ 684.594327][T14757] syzkaller0: entered promiscuous mode [ 684.605214][T14757] syzkaller0: entered allmulticast mode [ 684.780277][ T8] rc_core: IR keymap rc-hauppauge not found [ 684.786273][ T8] Registered IR keymap rc-empty [ 684.795641][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 684.844069][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.886831][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.899061][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 686.078749][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.085439][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.775648][ T8] usb 2-1: USB disconnect, device number 78 [ 689.030233][ T5821] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 689.045090][T14789] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2502'. [ 689.108661][T14789] loop6: detected capacity change from 0 to 524288000 [ 689.275680][ T5821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 689.330284][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.345041][ T5821] usb 1-1: Product: syz [ 689.349313][ T5821] usb 1-1: Manufacturer: syz [ 689.355461][ T5821] usb 1-1: SerialNumber: syz [ 689.381704][ T5821] usb 1-1: config 0 descriptor?? [ 689.635800][ T5821] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 690.810266][T14808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 690.850165][T14808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 691.064857][ T5821] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 691.084552][ T5821] usb 1-1: USB disconnect, device number 75 [ 691.251815][ T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 691.452593][ T8] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 691.466461][ T8] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 691.512668][ T8] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.585329][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 691.664235][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.700871][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 691.745411][ T8] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 691.793941][T14782] udevd[14782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.863618][T14823] syzkaller0: entered promiscuous mode [ 691.912616][T14823] syzkaller0: entered allmulticast mode [ 691.919571][ T23] usb 3-1: USB disconnect, device number 70 [ 693.004417][ T8] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 693.196274][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 693.223491][ T8] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 693.236388][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.270425][ T8] usb 3-1: Product: syz [ 693.284911][ T8] usb 3-1: Manufacturer: syz [ 693.289570][ T8] usb 3-1: SerialNumber: syz [ 693.334826][ T8] usb 3-1: config 0 descriptor?? [ 693.767921][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 693.799310][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 693.851094][ T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 693.859088][ T8] usb 3-1: media controller created [ 693.901320][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.975176][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 693.985820][ T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 693.996587][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 694.569468][ T8] usb 3-1: USB disconnect, device number 71 [ 694.629688][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 695.207421][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 695.847353][T14854] tipc: Enabled bearer , priority 0 [ 695.903521][T14854] tipc: Resetting bearer [ 695.935394][T14853] tipc: Disabling bearer [ 696.340259][T11806] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 696.540709][T11806] usb 2-1: Using ep0 maxpacket: 16 [ 696.569763][T11806] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 696.603585][T11806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.620139][T11806] usb 2-1: Product: syz [ 696.624359][T11806] usb 2-1: Manufacturer: syz [ 696.628978][T11806] usb 2-1: SerialNumber: syz [ 696.654930][T11806] usb 2-1: config 0 descriptor?? [ 696.704799][T14859] syzkaller0: entered promiscuous mode [ 696.713025][T14859] syzkaller0: entered allmulticast mode [ 696.941130][ T969] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 697.106090][T11806] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 697.121750][T11806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 697.148845][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.174901][T11806] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 697.185564][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.196250][T11806] usb 2-1: media controller created [ 697.222586][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 697.257343][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.273459][T11806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.284536][ T969] usb 4-1: config 0 descriptor?? [ 697.387029][T11806] zl10353_read_register: readreg error (reg=127, ret==0) [ 697.394977][T11806] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 697.404421][T11806] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 697.504586][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 697.511385][ T969] usbhid: probe of 4-1:0.0 failed with error -71 [ 697.546620][ T969] usb 4-1: USB disconnect, device number 75 [ 697.953335][ T5830] usb 2-1: USB disconnect, device number 79 [ 698.038902][ T5830] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 698.090171][ T969] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 698.283358][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.300079][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.316156][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 698.326073][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.338453][ T969] usb 4-1: config 0 descriptor?? [ 698.771585][ T969] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 698.789077][ T969] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001D/input/input22 [ 698.941173][ T969] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 699.035722][ T5830] usb 4-1: USB disconnect, device number 76 [ 699.176600][T14875] fido_id[14875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 700.445589][T14893] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 700.580151][ T23] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 700.730143][ T5830] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 700.851691][ T23] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 700.870131][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.882239][ T23] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 700.891564][ T23] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 700.899580][ T23] usb 1-1: Manufacturer: syz [ 700.910329][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 700.910876][ T23] usb 1-1: config 0 descriptor?? [ 700.958324][ T5830] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 700.984643][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.000380][ T23] rc_core: IR keymap rc-hauppauge not found [ 701.006741][ T23] Registered IR keymap rc-empty [ 701.011178][ T5830] usb 4-1: Product: syz [ 701.017070][ T5830] usb 4-1: Manufacturer: syz [ 701.026979][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 701.046121][ T5830] usb 4-1: SerialNumber: syz [ 701.053135][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 701.085828][ T5830] usb 4-1: config 0 descriptor?? [ 701.453281][T14901] rc rc0: two consecutive events of type space [ 701.525644][ T5830] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 701.551448][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 701.602496][ T5830] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 701.620226][ T5830] usb 4-1: media controller created [ 701.669705][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.781449][ T5830] zl10353_read_register: readreg error (reg=127, ret==0) [ 701.788577][ T5830] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 701.841636][ T5830] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 701.854795][T14886] ip6_tunnel: non-ECT from fc01:0010:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 701.888743][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.924343][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.954637][ T5830] usb 1-1: USB disconnect, device number 76 [ 702.372582][ T8] usb 4-1: USB disconnect, device number 77 [ 702.458681][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 702.808638][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 702.824514][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 702.833156][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 702.841430][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 702.854740][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 702.864099][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 703.243187][T14913] chnl_net:caif_netlink_parms(): no params data found [ 703.280873][ T23] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 703.398753][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.428947][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.449500][T14913] bridge_slave_0: entered allmulticast mode [ 703.491983][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.511061][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.520201][T14913] bridge_slave_0: entered promiscuous mode [ 703.531189][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 703.550081][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.551160][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.579547][ T23] usb 4-1: config 0 descriptor?? [ 703.611682][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.683535][T14913] bridge_slave_1: entered allmulticast mode [ 703.691061][T14913] bridge_slave_1: entered promiscuous mode [ 703.789192][T14913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.811717][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 703.817724][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 703.836199][T14913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.860270][ T23] usb 4-1: USB disconnect, device number 78 [ 704.031170][T14913] team0: Port device team_slave_0 added [ 704.054182][T14913] team0: Port device team_slave_1 added [ 704.124031][T14913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.131670][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.175321][T14913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.193408][T14913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.201052][T14913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.231827][T14913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.312861][T14913] hsr_slave_0: entered promiscuous mode [ 704.329633][T14913] hsr_slave_1: entered promiscuous mode [ 704.336423][T14913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.351858][T14913] Cannot create hsr debugfs directory [ 704.370300][ T23] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 704.572835][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.590370][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.630933][ T23] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.640420][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.654358][T14913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.676864][ T23] usb 4-1: config 0 descriptor?? [ 704.918690][T14913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.950498][ T5776] Bluetooth: hci3: command tx timeout [ 705.133848][ T23] keytouch 0003:0926:3333.001E: fixing up Keytouch IEC report descriptor [ 705.156459][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001E/input/input24 [ 705.249875][T14936] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.269968][T14936] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.283858][T14936] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.293000][T14936] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 705.330741][ T23] keytouch 0003:0926:3333.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 705.493535][ T23] usb 4-1: USB disconnect, device number 79 [ 705.676047][T14936] geneve2: entered promiscuous mode [ 705.684251][T14936] geneve2: entered allmulticast mode [ 705.696096][T14936] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.711408][T14936] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.722836][T14936] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.733513][T14936] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 705.847103][T14913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.981832][T14913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.372570][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 706.402016][T14913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 706.421396][T14913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 706.432777][T14913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 706.452272][T14913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 706.576858][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 706.683571][T14913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.704608][T14913] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.718869][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.726011][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.761624][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.768790][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.770519][ T23] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 707.019752][ T23] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 707.030505][ T5776] Bluetooth: hci3: command tx timeout [ 707.085470][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.119533][ T23] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 707.159895][ T23] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 707.198335][ T23] usb 1-1: Manufacturer: syz [ 707.214245][ T23] usb 1-1: config 0 descriptor?? [ 707.330993][ T23] rc_core: IR keymap rc-hauppauge not found [ 707.339948][ T23] Registered IR keymap rc-empty [ 707.359581][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 707.385715][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 707.472277][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.582225][T14946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.621958][T14946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.646997][T14913] veth0_vlan: entered promiscuous mode [ 707.678555][T14913] veth1_vlan: entered promiscuous mode [ 707.732225][T14913] veth0_macvtap: entered promiscuous mode [ 707.748826][T14913] veth1_macvtap: entered promiscuous mode [ 707.792603][T14961] tipc: Started in network mode [ 707.800560][T14961] tipc: Node identity 6a9d56121ac1, cluster identity 4711 [ 707.809219][T14961] tipc: Enabled bearer , priority 0 [ 707.836483][T14961] syzkaller0: entered promiscuous mode [ 707.846322][T14961] syzkaller0: entered allmulticast mode [ 707.861240][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.873273][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.885438][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.902917][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.924872][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.936245][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.948764][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.964223][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.980620][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.005149][T14962] tipc: Resetting bearer [ 708.028476][T14960] tipc: Resetting bearer [ 708.062672][T14960] tipc: Disabling bearer [ 708.077606][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.090394][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.101603][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.112718][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.127463][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.139334][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.155099][T14913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.167676][T14913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.185333][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.219010][T14913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.238390][T14913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.304977][T14913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.324952][T14913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.456920][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.530522][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.615389][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.657581][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.835912][T14969] syzkaller0: entered promiscuous mode [ 708.859090][T14969] syzkaller0: entered allmulticast mode [ 709.090255][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 709.090268][ T27] audit: type=1326 audit(1772576173.256:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.141461][ T5776] Bluetooth: hci3: command tx timeout [ 709.197561][ T27] audit: type=1326 audit(1772576173.266:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.302400][ T27] audit: type=1326 audit(1772576173.276:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.347910][ T27] audit: type=1326 audit(1772576173.276:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.441316][ T27] audit: type=1326 audit(1772576173.276:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.544819][ T27] audit: type=1326 audit(1772576173.296:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.642676][ T27] audit: type=1326 audit(1772576173.296:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.710192][ T27] audit: type=1326 audit(1772576173.296:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.770292][ T27] audit: type=1326 audit(1772576173.306:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 709.875485][ T27] audit: type=1326 audit(1772576173.306:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14971 comm="syz.2.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04659c799 code=0x7ffc0000 [ 710.091226][ T9] usb 1-1: USB disconnect, device number 77 [ 711.183584][ T5776] Bluetooth: hci3: command tx timeout [ 712.549146][T14983] syzkaller0: entered promiscuous mode [ 712.555022][T14983] syzkaller0: entered allmulticast mode [ 712.905343][ T8] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 713.108556][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.136379][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.146940][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 713.158889][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.173198][T15014] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2560'. [ 713.181380][ T8] usb 3-1: config 0 descriptor?? [ 713.446420][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 713.455334][ T969] IPVS: starting estimator thread 0... [ 713.461374][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 713.476531][ T8] usb 3-1: USB disconnect, device number 72 [ 713.560435][T15018] IPVS: using max 35 ests per chain, 84000 per kthread [ 714.040256][ T8] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 714.242207][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.258390][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.277619][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 714.290278][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.309336][ T8] usb 3-1: config 0 descriptor?? [ 714.751021][ T8] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 714.785134][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001F/input/input26 [ 714.893693][ T8] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 715.052984][ T9] usb 3-1: USB disconnect, device number 73 [ 715.932056][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2563'. [ 716.026935][T15038] syzkaller0: entered promiscuous mode [ 716.034155][T15038] syzkaller0: entered allmulticast mode [ 716.169139][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 716.169153][ T27] audit: type=1326 audit(1772576180.346:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.253848][ T27] audit: type=1326 audit(1772576180.346:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.309182][ T27] audit: type=1326 audit(1772576180.346:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.341886][T15042] syzkaller0: entered promiscuous mode [ 716.347731][T15042] syzkaller0: entered allmulticast mode [ 716.355478][ T27] audit: type=1326 audit(1772576180.346:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.437698][ T27] audit: type=1326 audit(1772576180.406:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.554873][ T27] audit: type=1326 audit(1772576180.406:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.629062][ T27] audit: type=1326 audit(1772576180.406:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.663047][ T27] audit: type=1326 audit(1772576180.456:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.719670][ T27] audit: type=1326 audit(1772576180.456:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.767860][ T27] audit: type=1326 audit(1772576180.576:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.0.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 716.790136][ T969] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 717.100144][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 717.189459][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.333856][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.358962][ T969] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 717.403106][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.436161][ T969] usb 1-1: config 0 descriptor?? [ 719.393724][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 719.403443][ T969] usbhid: probe of 1-1:0.0 failed with error -71 [ 719.413105][ T969] usb 1-1: USB disconnect, device number 78 [ 720.447687][T15075] syzkaller0: entered promiscuous mode [ 720.460164][T15075] syzkaller0: entered allmulticast mode [ 720.548105][T15081] syzkaller0: entered promiscuous mode [ 720.553681][T15081] syzkaller0: entered allmulticast mode [ 720.568744][T15081] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 720.676009][ T969] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 720.852337][T15092] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 720.866475][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.883677][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.894297][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 720.907627][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.918733][ T969] usb 4-1: config 0 descriptor?? [ 721.142130][ T969] usbhid 4-1:0.0: can't add hid device: -71 [ 721.148915][ T969] usbhid: probe of 4-1:0.0 failed with error -71 [ 721.192986][ T969] usb 4-1: USB disconnect, device number 80 [ 721.430273][ T5821] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 721.679688][T15101] syzkaller0: entered promiscuous mode [ 721.686307][T15101] syzkaller0: entered allmulticast mode [ 721.700168][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 721.707774][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.769012][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.770298][ T969] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 721.859424][ T5821] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 721.920089][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.962459][ T5821] usb 2-1: config 0 descriptor?? [ 722.002952][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.033211][ T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.070164][ T969] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 722.098822][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.132320][ T969] usb 4-1: config 0 descriptor?? [ 722.185881][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 722.185896][ T27] audit: type=1326 audit(1772576186.366:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5d959c42b code=0x7ffc0000 [ 722.270282][ T27] audit: type=1326 audit(1772576186.416:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5d959c42b code=0x7ffc0000 [ 722.297968][ T27] audit: type=1326 audit(1772576186.416:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5d955cfce code=0x7ffc0000 [ 722.435409][ T27] audit: type=1326 audit(1772576186.626:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d959c799 code=0x7ffc0000 [ 722.509444][ T27] audit: type=1326 audit(1772576186.646:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d959c799 code=0x7ffc0000 [ 722.556559][ T969] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 722.606121][ T969] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0020/input/input27 [ 722.725919][ T969] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 722.833874][ T23] usb 4-1: USB disconnect, device number 81 [ 722.989834][T15104] fido_id[15104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 723.890749][ T5821] usbhid 2-1:0.0: can't add hid device: -71 [ 723.912364][ T5821] usbhid: probe of 2-1:0.0 failed with error -71 [ 723.926356][ T5821] usb 2-1: USB disconnect, device number 80 [ 724.586958][ T969] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 724.795931][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 724.805847][ T969] usb 4-1: config 16 has an invalid descriptor of length 142, skipping remainder of the config [ 724.817744][ T969] usb 4-1: config 16 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 724.834286][ T969] usb 4-1: config 16 interface 0 has no altsetting 0 [ 724.845456][ T969] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 724.857999][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.748580][T15113] syzkaller0: entered promiscuous mode [ 725.756603][T15113] syzkaller0: entered allmulticast mode [ 725.992770][T15121] fuse: Unknown parameter '0x0000000000000003' [ 727.233058][ T969] usb 4-1: string descriptor 0 read error: -71 [ 727.289981][ T969] usb 4-1: USB disconnect, device number 82 [ 727.290122][ T5821] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 727.502977][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.525929][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.607884][ T5821] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 727.626036][ T27] audit: type=1326 audit(1772576191.806:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 727.651231][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.672742][ T5821] usb 2-1: config 0 descriptor?? [ 727.698178][ T27] audit: type=1326 audit(1772576191.836:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 727.785941][ T27] audit: type=1326 audit(1772576191.836:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 727.835403][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 727.857676][ T27] audit: type=1326 audit(1772576191.836:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 727.936393][ T27] audit: type=1326 audit(1772576191.846:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 727.950156][ T5821] usbhid 2-1:0.0: can't add hid device: -71 [ 727.990234][ T5821] usbhid: probe of 2-1:0.0 failed with error -71 [ 728.018735][ T5821] usb 2-1: USB disconnect, device number 81 [ 728.025246][ T27] audit: type=1326 audit(1772576191.846:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 728.065912][ T27] audit: type=1326 audit(1772576191.846:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 728.088593][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 728.129678][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 728.142603][ T9] usb 3-1: config 0 has no interface number 0 [ 728.148939][ T27] audit: type=1326 audit(1772576191.846:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 728.176450][ T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.209840][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 728.235779][ T27] audit: type=1326 audit(1772576191.856:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 728.258708][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.296574][ T9] usb 3-1: config 0 descriptor?? [ 728.325355][ T27] audit: type=1326 audit(1772576192.096:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15136 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 728.350387][ T23] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 728.570143][ T5821] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 728.620235][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 728.639225][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.652963][T15147] syzkaller0: entered promiscuous mode [ 728.659052][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.669242][T15147] syzkaller0: entered allmulticast mode [ 728.678358][ T23] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 728.698236][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.756286][ T9] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input2 [ 728.775218][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.797560][ T23] usb 4-1: config 0 descriptor?? [ 728.803133][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.819072][ T5821] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 728.851627][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.921114][ T5821] usb 2-1: config 0 descriptor?? [ 729.447102][ T5821] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 729.479867][ T5821] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input28 [ 729.613520][ T5821] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 729.765040][ T9] usb 2-1: USB disconnect, device number 82 [ 730.199885][T15150] fido_id[15150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 731.253317][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 731.259341][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 731.279092][ T23] usb 4-1: USB disconnect, device number 83 [ 732.879997][ T23] usb 3-1: USB disconnect, device number 74 [ 732.886073][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 732.886087][ T27] audit: type=1326 audit(1772576197.066:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 732.994834][ T27] audit: type=1326 audit(1772576197.066:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.037431][ T27] audit: type=1326 audit(1772576197.066:4524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.062500][T15169] fuse: Unknown parameter '0x0000000000000003' [ 733.096847][ T27] audit: type=1326 audit(1772576197.066:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.134080][ T27] audit: type=1326 audit(1772576197.066:4526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc4f5cfce code=0x7ffc0000 [ 733.163107][ T27] audit: type=1326 audit(1772576197.066:4527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.198329][ T27] audit: type=1326 audit(1772576197.066:4528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.235722][ T27] audit: type=1326 audit(1772576197.076:4529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.325855][ T27] audit: type=1326 audit(1772576197.076:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.368928][ T27] audit: type=1326 audit(1772576197.076:4531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15165 comm="syz.3.2599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 733.712142][T15189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2605'. [ 735.225808][T15201] syzkaller0: entered promiscuous mode [ 735.235830][T15201] syzkaller0: entered allmulticast mode [ 735.433561][T15206] syzkaller0: entered promiscuous mode [ 735.439469][T15206] syzkaller0: entered allmulticast mode [ 735.460209][ T23] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 735.630144][ T969] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 735.725958][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.758584][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.780394][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 735.804982][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.832256][ T23] usb 3-1: config 0 descriptor?? [ 735.896717][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 735.953441][T15213] fuse: Unknown parameter '0x0000000000000003' [ 736.034373][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.061167][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.081366][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 736.088796][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 736.091563][ T969] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 736.122419][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.130686][ T23] usb 3-1: USB disconnect, device number 75 [ 736.141515][ T969] usb 1-1: config 0 descriptor?? [ 736.692703][ T23] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 736.895432][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.906786][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.928679][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 736.938360][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.977581][ T23] usb 3-1: config 0 descriptor?? [ 737.406761][ T23] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 737.433476][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input29 [ 737.609178][ T23] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 737.701148][ T23] usb 3-1: USB disconnect, device number 76 [ 737.816709][T15216] fido_id[15216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 738.383697][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 738.397966][ T969] usbhid: probe of 1-1:0.0 failed with error -71 [ 738.437531][ T969] usb 1-1: USB disconnect, device number 79 [ 740.113450][T15240] syzkaller0: entered promiscuous mode [ 740.118978][T15240] syzkaller0: entered allmulticast mode [ 740.314403][T15248] fuse: Unknown parameter 'fd0x0000000000000003' [ 740.690333][ T23] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 740.893870][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.905527][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.916832][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.936306][ T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.946632][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.974702][ T23] usb 4-1: config 0 descriptor?? [ 741.082419][ T5821] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 741.099230][ T27] kauditd_printk_skb: 154 callbacks suppressed [ 741.099244][ T27] audit: type=1326 audit(1772576205.276:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.133760][ T27] audit: type=1326 audit(1772576205.306:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.164180][ T27] audit: type=1326 audit(1772576205.306:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.200876][ T27] audit: type=1326 audit(1772576205.316:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.235947][ T27] audit: type=1326 audit(1772576205.316:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.268416][ T27] audit: type=1326 audit(1772576205.316:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.296278][ T27] audit: type=1326 audit(1772576205.316:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.298069][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.328398][ T27] audit: type=1326 audit(1772576205.316:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.359841][ T27] audit: type=1326 audit(1772576205.316:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.395632][ T27] audit: type=1326 audit(1772576205.316:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15257 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 741.451351][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.487229][ T5821] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 741.507162][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.529750][ T5821] usb 3-1: config 0 descriptor?? [ 741.626218][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 741.635501][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 741.667078][ T23] usb 4-1: USB disconnect, device number 84 [ 741.767812][ T5821] usbhid 3-1:0.0: can't add hid device: -71 [ 741.789799][ T5821] usbhid: probe of 3-1:0.0 failed with error -71 [ 741.829037][T15265] syzkaller0: entered promiscuous mode [ 741.838560][T15265] syzkaller0: entered allmulticast mode [ 741.850259][ T969] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 741.885833][ T5821] usb 3-1: USB disconnect, device number 77 [ 742.040671][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 742.164457][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.210572][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.340771][ T5821] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 742.363574][ T969] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 742.422866][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.497000][ T969] usb 1-1: config 0 descriptor?? [ 742.548299][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.573227][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.635764][ T5821] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 742.679128][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.704238][ T5821] usb 3-1: config 0 descriptor?? [ 743.208718][ T5821] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 743.243546][ T5821] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input30 [ 743.481370][ T5821] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 743.569097][ T5821] usb 3-1: USB disconnect, device number 78 [ 743.739401][T15278] fido_id[15278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 744.547931][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 744.569614][ T969] usbhid: probe of 1-1:0.0 failed with error -71 [ 744.635013][ T969] usb 1-1: USB disconnect, device number 80 [ 746.037690][T15300] fuse: Unknown parameter 'fd0x0000000000000003' [ 746.196745][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2633'. [ 746.310178][ T5821] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 746.510858][ T5821] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 746.538782][ T5821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.553046][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.565954][ T5821] usb 2-1: Product: syz [ 746.571096][ T5821] usb 2-1: Manufacturer: syz [ 746.576246][ T5821] usb 2-1: SerialNumber: syz [ 746.580279][ T969] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 746.598453][ T5821] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.616278][ T23] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 746.790171][ T969] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 746.799921][ T969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.821503][ T969] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 746.839636][ T969] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 746.848822][ T969] usb 4-1: Manufacturer: syz [ 746.863165][T15295] random: crng reseeded on system resumption [ 746.867349][ T969] usb 4-1: config 0 descriptor?? [ 746.899950][ T969] igorplugusb 4-1:0.0: incorrect number of endpoints [ 747.505614][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.512221][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.552795][T15314] tipc: Enabled bearer , priority 0 [ 747.572866][T15314] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 747.573880][ T969] usb 2-1: USB disconnect, device number 83 [ 747.596210][T15314] tipc: Resetting bearer [ 747.617320][T15313] tipc: Disabling bearer [ 747.660252][ T23] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 747.667493][ T23] ath9k_htc: Failed to initialize the device [ 747.675596][ T969] usb 2-1: ath9k_htc: USB layer deinitialized [ 747.855047][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 747.855061][ T27] audit: type=1326 audit(1772576212.036:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 747.884321][ T42] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 747.896687][ T27] audit: type=1326 audit(1772576212.076:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 747.922948][ T27] audit: type=1326 audit(1772576212.076:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 747.949871][ T27] audit: type=1326 audit(1772576212.076:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 747.976778][ T27] audit: type=1326 audit(1772576212.076:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 748.038077][ T27] audit: type=1326 audit(1772576212.076:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 748.063076][ T27] audit: type=1326 audit(1772576212.076:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 748.091731][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.104895][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.104921][ T27] audit: type=1326 audit(1772576212.076:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 748.138897][ T27] audit: type=1326 audit(1772576212.076:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 748.178096][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 748.210842][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.211858][ T27] audit: type=1326 audit(1772576212.076:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.0.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f521439c799 code=0x7ffc0000 [ 748.266194][ T42] usb 3-1: config 0 descriptor?? [ 748.498020][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 748.507617][ T42] usbhid: probe of 3-1:0.0 failed with error -71 [ 748.520765][ T42] usb 3-1: USB disconnect, device number 79 [ 749.080220][ T42] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 749.281669][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.303512][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.355164][ T42] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 749.368913][ T5821] usb 4-1: USB disconnect, device number 85 [ 749.422307][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.483726][ T42] usb 3-1: config 0 descriptor?? [ 749.553719][T15330] syzkaller0: entered promiscuous mode [ 749.559233][T15330] syzkaller0: entered allmulticast mode [ 749.737457][T15337] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2644'. [ 749.813230][T15337] loop6: detected capacity change from 0 to 524288000 [ 749.903681][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2646'. [ 749.933591][ T42] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 749.969189][ T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0025/input/input31 [ 750.124837][ T42] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 750.247662][ T42] usb 3-1: USB disconnect, device number 80 [ 750.258373][T15349] fuse: Unknown parameter 'fd0x0000000000000003' [ 750.496830][T15348] fido_id[15348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 751.390114][ T787] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 751.612358][ T787] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 751.634187][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.663537][ T787] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.716256][ T787] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 751.728421][ T787] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 751.757618][ T787] usb 1-1: Manufacturer: syz [ 751.778806][ T787] usb 1-1: config 0 descriptor?? [ 751.785665][T15373] syzkaller0: entered promiscuous mode [ 751.794438][ T787] igorplugusb 1-1:0.0: incorrect number of endpoints [ 751.806220][T15373] syzkaller0: entered allmulticast mode [ 752.480192][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 752.691132][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 752.738886][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 752.754688][ T9] usb 4-1: config 0 has no interface number 0 [ 752.763481][ T9] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.779608][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 752.797451][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.810930][ T9] usb 4-1: config 0 descriptor?? [ 753.287813][ T9] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input2 [ 753.946158][ T5821] usb 4-1: USB disconnect, device number 86 [ 754.137729][ T787] usb 1-1: USB disconnect, device number 81 [ 754.218474][T15396] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2660'. [ 754.266393][T15396] loop6: detected capacity change from 0 to 524288000 [ 754.610197][ T787] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 754.826501][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.849923][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.877841][ T787] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 754.887436][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.906807][ T787] usb 1-1: config 0 descriptor?? [ 755.141721][ T787] usbhid 1-1:0.0: can't add hid device: -71 [ 755.148283][ T787] usbhid: probe of 1-1:0.0 failed with error -71 [ 755.225168][ T787] usb 1-1: USB disconnect, device number 82 [ 755.444203][T15404] syzkaller0: entered promiscuous mode [ 755.449854][T15404] syzkaller0: entered allmulticast mode [ 755.669743][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 755.740482][ T787] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 755.862110][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 755.862124][ T27] audit: type=1326 audit(1772576220.046:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 755.896105][ T27] audit: type=1326 audit(1772576220.076:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 755.936249][ T27] audit: type=1326 audit(1772576220.076:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 755.967302][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.983330][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.006405][ T787] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 756.015962][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.015981][ T27] audit: type=1326 audit(1772576220.076:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.054147][ T27] audit: type=1326 audit(1772576220.076:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.084458][ T787] usb 1-1: config 0 descriptor?? [ 756.094807][ T27] audit: type=1326 audit(1772576220.076:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.131189][ T27] audit: type=1326 audit(1772576220.076:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.168267][ T27] audit: type=1326 audit(1772576220.076:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.216578][ T27] audit: type=1326 audit(1772576220.076:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.255467][ T27] audit: type=1326 audit(1772576220.076:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15412 comm="syz.3.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f0cc4f9c799 code=0x7ffc0000 [ 756.530603][ T787] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 756.558184][ T787] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0027/input/input32 [ 756.675164][ T787] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 756.877758][ T787] usb 1-1: USB disconnect, device number 83 [ 758.073502][T15439] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2670'. [ 758.098710][T15439] loop6: detected capacity change from 0 to 524288000 [ 758.190354][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 758.382557][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 758.391186][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.491943][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 758.631707][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 758.659527][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2673'. [ 758.720121][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 758.758054][ T9] usb 2-1: Manufacturer: syz [ 758.771608][ T9] usb 2-1: config 0 descriptor?? [ 758.783282][ T9] igorplugusb 2-1:0.0: incorrect number of endpoints [ 759.640200][ T5821] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 759.830164][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 759.867272][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.890329][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.914814][ T5821] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 759.928266][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.943997][ T5821] usb 3-1: config 0 descriptor?? [ 760.396395][ T5821] ft260 0003:0403:6030.0028: item fetching failed at offset 0/2 [ 760.411844][ T5821] ft260 0003:0403:6030.0028: failed to parse HID [ 760.418538][ T5821] ft260: probe of 0003:0403:6030.0028 failed with error -22 [ 760.711274][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 760.903374][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.922565][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.932756][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 760.942263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.947634][ T5821] usb 2-1: USB disconnect, device number 84 [ 760.953070][ T9] usb 1-1: config 0 descriptor?? [ 761.177634][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 761.193301][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 761.226172][ T9] usb 1-1: USB disconnect, device number 84 [ 761.760107][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 761.983665][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.995816][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.005979][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 762.015772][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.025698][ T9] usb 1-1: config 0 descriptor?? [ 762.035579][ T42] usb 3-1: USB disconnect, device number 81 [ 762.319886][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 762.454602][ T9] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 762.493089][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0029/input/input33 [ 762.608509][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'. [ 762.686209][ T9] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 762.884907][ T9] usb 1-1: USB disconnect, device number 85 [ 763.059115][T15507] fido_id[15507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 763.359702][T15524] tipc: Enabled bearer , priority 0 [ 763.391466][T15524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 763.412845][T15524] tipc: Resetting bearer [ 763.446033][T15523] tipc: Disabling bearer [ 763.950113][ T42] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 764.182734][ T42] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 764.250252][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.293027][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.315046][ T42] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 764.326504][ T42] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 764.336158][ T42] usb 3-1: Manufacturer: syz [ 764.353369][ T42] usb 3-1: config 0 descriptor?? [ 764.363536][ T42] igorplugusb 3-1:0.0: incorrect number of endpoints [ 764.520850][T15537] syzkaller0: entered promiscuous mode [ 764.531503][T15537] syzkaller0: entered allmulticast mode [ 765.101259][ T8] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 765.300092][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 765.308250][ T8] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 765.317412][ T8] usb 2-1: config 0 has no interface number 0 [ 765.323920][ T8] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.335259][ T8] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 765.349044][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.363558][ T8] usb 2-1: config 0 descriptor?? [ 765.790358][ T8] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input2 [ 766.707540][ T9] usb 3-1: USB disconnect, device number 82 [ 766.814658][T15565] tipc: Enabling of bearer rejected, failed to enable media [ 767.369354][ T6009] tipc: Left network mode [ 767.508136][ T6009] ip6gretap0 (unregistering): left promiscuous mode [ 767.747271][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2697'. [ 767.770710][T15579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2697'. [ 767.802114][T15579] syz_tun: entered promiscuous mode [ 767.818244][T15579] syz_tun: left promiscuous mode [ 767.902074][ T42] usb 2-1: USB disconnect, device number 85 [ 768.438892][ T42] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 768.669732][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.682196][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.701754][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 768.720250][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 768.729666][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.739919][ T42] usb 2-1: config 0 descriptor?? [ 768.781001][ T6009] bridge0: left promiscuous mode [ 768.815274][ T6009] hsr_slave_0: left promiscuous mode [ 768.826356][ T6009] hsr_slave_1: left promiscuous mode [ 768.834021][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.845796][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.866630][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.881954][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.898489][ T6009] bridge_slave_1: left allmulticast mode [ 768.934785][ T6009] bridge_slave_1: left promiscuous mode [ 768.949335][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.972694][ T6009] bridge_slave_0: left allmulticast mode [ 768.978583][ T6009] bridge_slave_0: left promiscuous mode [ 768.993226][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.071349][ T6009] veth1_macvtap: left promiscuous mode [ 769.084872][ T6009] veth0_macvtap: left promiscuous mode [ 769.101163][ T6009] veth1_vlan: left promiscuous mode [ 769.116778][ T6009] veth0_vlan: left promiscuous mode [ 769.366556][ T42] usbhid 2-1:0.0: can't add hid device: -71 [ 769.409785][ T42] usbhid: probe of 2-1:0.0 failed with error -71 [ 769.472610][ T42] usb 2-1: USB disconnect, device number 86 [ 769.990746][ T9] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 770.192104][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 770.201900][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.285532][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 770.358927][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 770.383416][ T9] usb 4-1: Manufacturer: syz [ 770.398485][ T9] usb 4-1: config 0 descriptor?? [ 770.413484][ T9] igorplugusb 4-1:0.0: incorrect number of endpoints [ 770.822531][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 770.869254][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 770.923008][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.972437][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.330248][ T6009] bond0 (unregistering): Released all slaves [ 771.400118][T15610] tipc: Enabling of bearer rejected, failed to enable media [ 771.821118][ T23] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 772.020128][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 772.027383][ T23] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 772.057228][ T23] usb 2-1: config 0 has no interface number 0 [ 772.064071][ T23] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.075886][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 772.085384][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.096177][ T23] usb 2-1: config 0 descriptor?? [ 772.120337][ T5821] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 772.315703][ T5821] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 772.325807][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.339854][ T5821] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 772.354737][ T5821] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 772.363623][ T5821] usb 1-1: Manufacturer: syz [ 772.372259][ T5821] usb 1-1: config 0 descriptor?? [ 772.480248][ T5821] rc_core: IR keymap rc-hauppauge not found [ 772.489230][ T5821] Registered IR keymap rc-empty [ 772.504179][ T5821] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 772.516882][ T5821] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 772.544623][ T23] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input2 [ 772.627039][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.637174][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.786973][ T8] usb 4-1: USB disconnect, device number 87 [ 772.978258][ T9] usb 2-1: USB disconnect, device number 87 [ 773.704210][T15649] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2711'. [ 774.736311][ T969] usb 1-1: USB disconnect, device number 86 [ 775.470214][ T969] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 775.662454][ T23] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 775.676965][ T23] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 775.680205][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 775.701398][ T969] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 775.725021][ T969] usb 1-1: config 0 has no interface number 0 [ 775.752342][ T969] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 775.770154][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 775.786722][ T969] usb 1-1: config 0 interface 89 has no altsetting 0 [ 775.808556][ T969] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 775.849542][T15685] fido_id[15685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 775.872996][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.899407][ T969] usb 1-1: Product: syz [ 775.910488][ T969] usb 1-1: Manufacturer: syz [ 775.920133][ T969] usb 1-1: SerialNumber: syz [ 775.935981][ T969] usb 1-1: config 0 descriptor?? [ 775.951624][ T969] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 775.980994][ T969] em28xx 1-1:0.89: Video interface 89 found: [ 775.992343][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 776.005245][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.036733][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 776.046339][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 776.055438][ T9] usb 2-1: Manufacturer: syz [ 776.084949][ T9] usb 2-1: config 0 descriptor?? [ 776.104439][ T9] igorplugusb 2-1:0.0: incorrect number of endpoints [ 776.366923][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.377661][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.595773][ T969] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 776.987211][T15699] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2723'. [ 777.008741][ T969] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 777.026500][ T969] em28xx 1-1:0.89: board has no eeprom [ 777.104451][T15701] tipc: Enabling of bearer rejected, failed to enable media [ 777.240290][ T23] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 777.340292][ T969] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 777.348086][ T969] em28xx 1-1:0.89: analog set to bulk mode. [ 777.369469][ T9] em28xx 1-1:0.89: Registering V4L2 extension [ 777.413195][ T969] usb 1-1: USB disconnect, device number 87 [ 777.459725][ T9] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 777.490578][ T969] em28xx 1-1:0.89: Disconnecting em28xx [ 777.498802][ T23] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 777.508872][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.532760][ T23] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 777.542652][ T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 777.549645][ T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 777.554787][ T23] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 777.578766][ T9] em28xx 1-1:0.89: No AC97 audio processor [ 777.604345][ T23] usb 3-1: Manufacturer: syz [ 777.618906][ T23] usb 3-1: config 0 descriptor?? [ 777.628302][ T9] usb 1-1: Decoder not found [ 777.654811][ T9] em28xx 1-1:0.89: failed to create media graph [ 777.705236][ T9] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 777.753797][ T9] em28xx 1-1:0.89: Registering snapshot button... [ 777.754197][T15715] ================================================================== [ 777.768337][T15715] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 777.775750][T15715] Read of size 8 at addr ffff8880693b0738 by task v4l_id/15715 [ 777.781240][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input36 [ 777.783371][T15715] [ 777.783395][T15715] CPU: 1 PID: 15715 Comm: v4l_id Not tainted syzkaller #0 [ 777.803302][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.813387][T15715] Call Trace: [ 777.816689][T15715] [ 777.819629][T15715] dump_stack_lvl+0x18c/0x250 [ 777.824327][T15715] ? __lock_acquire+0x7d40/0x7d40 [ 777.829366][T15715] ? show_regs_print_info+0x20/0x20 [ 777.834583][T15715] ? load_image+0x400/0x400 [ 777.839094][T15715] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 777.844657][T15715] ? __virt_addr_valid+0x18c/0x540 [ 777.849799][T15715] ? __virt_addr_valid+0x469/0x540 [ 777.854936][T15715] print_report+0xa8/0x210 [ 777.859375][T15715] ? v4l2_fh_open+0xca/0x430 [ 777.863980][T15715] kasan_report+0x117/0x150 [ 777.868517][T15715] ? v4l2_fh_open+0xca/0x430 [ 777.873225][T15715] v4l2_fh_open+0xca/0x430 [ 777.877662][T15715] em28xx_v4l2_open+0x157/0x980 [ 777.882539][T15715] v4l2_open+0x212/0x360 [ 777.886808][T15715] chrdev_open+0x5cc/0x6a0 [ 777.891252][T15715] ? cd_forget+0x160/0x160 [ 777.895692][T15715] ? fsnotify_perm+0x3ed/0x5e0 [ 777.900484][T15715] ? cd_forget+0x160/0x160 [ 777.903646][ T9] em28xx 1-1:0.89: Remote control support is not available for this card. [ 777.904900][T15715] do_dentry_open+0x8c6/0x1500 [ 777.904930][T15715] path_openat+0x27f1/0x3230 [ 777.922873][T15715] ? do_sys_openat2+0xda/0x1d0 [ 777.927661][T15715] ? verify_lock_unused+0x140/0x140 [ 777.927971][ T969] em28xx 1-1:0.89: Closing input extension [ 777.932866][T15715] ? do_filp_open+0x430/0x430 [ 777.932892][T15715] ? __virt_addr_valid+0x18c/0x540 [ 777.932914][T15715] do_filp_open+0x1f5/0x430 [ 777.932931][T15715] ? vfs_tmpfile+0x490/0x490 [ 777.932953][T15715] ? _raw_spin_unlock+0x28/0x40 [ 777.932968][T15715] ? alloc_fd+0x58f/0x630 [ 777.932987][T15715] do_sys_openat2+0x134/0x1d0 [ 777.933005][T15715] ? do_sys_open+0xe0/0xe0 [ 777.933022][T15715] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 777.933042][T15715] ? lock_chain_count+0x20/0x20 [ 777.933056][T15715] ? lock_chain_count+0x20/0x20 [ 777.933070][T15715] __x64_sys_openat+0x139/0x160 [ 777.933088][T15715] do_syscall_64+0x55/0xa0 [ 777.933107][T15715] ? clear_bhb_loop+0x40/0x90 [ 777.933122][T15715] ? clear_bhb_loop+0x40/0x90 [ 777.933136][T15715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.933150][T15715] RIP: 0033:0x7eff177c8407 [ 777.933176][T15715] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 777.933189][T15715] RSP: 002b:00007ffde08f6de0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 777.933206][T15715] RAX: ffffffffffffffda RBX: 00007eff1719b880 RCX: 00007eff177c8407 [ 777.933218][T15715] RDX: 0000000000000000 RSI: 00007ffde08f7f1c RDI: ffffffffffffff9c [ 777.933230][T15715] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 777.933238][T15715] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 777.933247][T15715] R13: 00007ffde08f7030 R14: 00007eff17a19000 R15: 0000555bf52934d8 [ 777.933261][T15715] [ 777.933266][T15715] [ 777.933269][T15715] Allocated by task 9: [ 777.933275][T15715] kasan_set_track+0x4e/0x70 [ 777.933289][T15715] __kasan_kmalloc+0x8f/0xa0 [ 777.933304][T15715] em28xx_v4l2_init+0x10b/0x2e70 [ 777.933321][T15715] em28xx_init_extension+0x11c/0x1b0 [ 777.933337][T15715] process_scheduled_works+0xa5d/0x15d0 [ 777.933354][T15715] worker_thread+0xa55/0xfc0 [ 777.933366][T15715] kthread+0x2fa/0x390 [ 777.933377][T15715] ret_from_fork+0x48/0x80 [ 777.933394][T15715] ret_from_fork_asm+0x11/0x20 [ 777.933412][T15715] [ 777.933415][T15715] Freed by task 9: [ 777.933421][T15715] kasan_set_track+0x4e/0x70 [ 777.933434][T15715] kasan_save_free_info+0x2e/0x50 [ 777.933450][T15715] ____kasan_slab_free+0x126/0x1e0 [ 777.933471][T15715] slab_free_freelist_hook+0x130/0x1a0 [ 777.933485][T15715] __kmem_cache_free+0xba/0x1e0 [ 777.933502][T15715] em28xx_v4l2_init+0x1670/0x2e70 [ 777.933527][T15715] em28xx_init_extension+0x11c/0x1b0 [ 778.182341][T15715] process_scheduled_works+0xa5d/0x15d0 [ 778.188232][T15715] worker_thread+0xa55/0xfc0 [ 778.193257][T15715] kthread+0x2fa/0x390 [ 778.197328][T15715] ret_from_fork+0x48/0x80 [ 778.201738][T15715] ret_from_fork_asm+0x11/0x20 [ 778.206490][T15715] [ 778.208801][T15715] The buggy address belongs to the object at ffff8880693b0000 [ 778.208801][T15715] which belongs to the cache kmalloc-8k of size 8192 [ 778.222953][T15715] The buggy address is located 1848 bytes inside of [ 778.222953][T15715] freed 8192-byte region [ffff8880693b0000, ffff8880693b2000) [ 778.236946][T15715] [ 778.239262][T15715] The buggy address belongs to the physical page: [ 778.245680][T15715] page:ffffea0001a4ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x693b0 [ 778.255811][T15715] head:ffffea0001a4ec00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 778.264726][T15715] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 778.273045][T15715] page_type: 0xffffffff() [ 778.277358][T15715] raw: 00fff00000000840 ffff888017c42280 ffffea000171f200 0000000000000003 [ 778.285922][T15715] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 778.294491][T15715] page dumped because: kasan: bad access detected [ 778.300890][T15715] page_owner tracks the page as allocated [ 778.306586][T15715] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15261, tgid 15257 (syz.0.2627), ts 742750449201, free_ts 742744255306 [ 778.329610][T15715] post_alloc_hook+0x1c1/0x200 [ 778.334488][T15715] get_page_from_freelist+0x1951/0x19e0 [ 778.340028][T15715] __alloc_pages+0x1f0/0x460 [ 778.344613][T15715] alloc_slab_page+0x5d/0x160 [ 778.349271][T15715] new_slab+0x87/0x2d0 [ 778.353331][T15715] ___slab_alloc+0xc5d/0x12f0 [ 778.358000][T15715] __kmem_cache_alloc_node+0x19e/0x250 [ 778.363446][T15715] kmalloc_trace+0x2a/0xe0 [ 778.367858][T15715] audit_log_d_path+0xb5/0x190 [ 778.372606][T15715] audit_log_d_path_exe+0x45/0x70 [ 778.377618][T15715] audit_log_task+0x21d/0x2f0 [ 778.382281][T15715] audit_seccomp+0x85/0x180 [ 778.386792][T15715] __seccomp_filter+0xad0/0x1c90 [ 778.391745][T15715] syscall_trace_enter+0xa7/0x150 [ 778.396785][T15715] do_syscall_64+0x28/0xa0 [ 778.401191][T15715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.407071][T15715] page last free stack trace: [ 778.411726][T15715] free_unref_page_prepare+0x7b2/0x8c0 [ 778.417176][T15715] free_unref_page+0x32/0x2e0 [ 778.421841][T15715] __unfreeze_partials+0x1cf/0x210 [ 778.426933][T15715] put_cpu_partial+0x17c/0x250 [ 778.431672][T15715] __slab_free+0x319/0x400 [ 778.436067][T15715] qlist_free_all+0x75/0xd0 [ 778.440561][T15715] kasan_quarantine_reduce+0x143/0x160 [ 778.446177][T15715] __kasan_slab_alloc+0x22/0x80 [ 778.451025][T15715] slab_post_alloc_hook+0x6e/0x4b0 [ 778.456134][T15715] __kmem_cache_alloc_node+0x13a/0x250 [ 778.461606][T15715] __kmalloc+0xa4/0x230 [ 778.465759][T15715] usb_set_configuration+0x351/0x20c0 [ 778.471124][T15715] usb_generic_driver_probe+0x8d/0x150 [ 778.476614][T15715] usb_probe_device+0x13d/0x270 [ 778.481455][T15715] really_probe+0x25b/0xb20 [ 778.486465][T15715] __driver_probe_device+0x18c/0x330 [ 778.491738][T15715] [ 778.494060][T15715] Memory state around the buggy address: [ 778.499691][T15715] ffff8880693b0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.507741][T15715] ffff8880693b0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.515791][T15715] >ffff8880693b0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.523842][T15715] ^ [ 778.529736][T15715] ffff8880693b0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.537784][T15715] ffff8880693b0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.545830][T15715] ================================================================== [ 778.553994][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.581969][ T969] em28xx 1-1:0.89: Deregistering snapshot button [ 778.584523][ T23] rc_core: IR keymap rc-hauppauge not found [ 778.598488][ T23] Registered IR keymap rc-empty [ 778.617032][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 778.638909][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 778.702591][T15715] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 778.709837][T15715] CPU: 0 PID: 15715 Comm: v4l_id Not tainted syzkaller #0 [ 778.716960][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.727034][T15715] Call Trace: [ 778.730320][T15715] [ 778.733262][T15715] dump_stack_lvl+0x18c/0x250 [ 778.737954][T15715] ? show_regs_print_info+0x20/0x20 [ 778.743165][T15715] ? load_image+0x400/0x400 [ 778.747776][T15715] panic+0x2dc/0x730 [ 778.751693][T15715] ? bpf_jit_dump+0xd0/0xd0 [ 778.756227][T15715] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 778.762208][T15715] ? _raw_spin_unlock+0x40/0x40 [ 778.767070][T15715] ? print_memory_metadata+0x314/0x400 [ 778.772540][T15715] ? v4l2_fh_open+0xca/0x430 [ 778.777140][T15715] check_panic_on_warn+0x84/0xa0 [ 778.782074][T15715] ? v4l2_fh_open+0xca/0x430 [ 778.786672][T15715] end_report+0x6f/0x130 [ 778.790922][T15715] kasan_report+0x128/0x150 [ 778.795441][T15715] ? v4l2_fh_open+0xca/0x430 [ 778.800052][T15715] v4l2_fh_open+0xca/0x430 [ 778.804476][T15715] em28xx_v4l2_open+0x157/0x980 [ 778.809343][T15715] v4l2_open+0x212/0x360 [ 778.813598][T15715] chrdev_open+0x5cc/0x6a0 [ 778.818041][T15715] ? cd_forget+0x160/0x160 [ 778.822463][T15715] ? fsnotify_perm+0x3ed/0x5e0 [ 778.827275][T15715] ? cd_forget+0x160/0x160 [ 778.831703][T15715] do_dentry_open+0x8c6/0x1500 [ 778.836486][T15715] path_openat+0x27f1/0x3230 [ 778.841174][T15715] ? do_sys_openat2+0xda/0x1d0 [ 778.845921][T15715] ? verify_lock_unused+0x140/0x140 [ 778.851126][T15715] ? do_filp_open+0x430/0x430 [ 778.855812][T15715] ? __virt_addr_valid+0x18c/0x540 [ 778.860937][T15715] do_filp_open+0x1f5/0x430 [ 778.865432][T15715] ? vfs_tmpfile+0x490/0x490 [ 778.870029][T15715] ? _raw_spin_unlock+0x28/0x40 [ 778.874882][T15715] ? alloc_fd+0x58f/0x630 [ 778.879203][T15715] do_sys_openat2+0x134/0x1d0 [ 778.883896][T15715] ? do_sys_open+0xe0/0xe0 [ 778.888312][T15715] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 778.894302][T15715] ? lock_chain_count+0x20/0x20 [ 778.899160][T15715] ? lock_chain_count+0x20/0x20 [ 778.904006][T15715] __x64_sys_openat+0x139/0x160 [ 778.908851][T15715] do_syscall_64+0x55/0xa0 [ 778.913259][T15715] ? clear_bhb_loop+0x40/0x90 [ 778.917936][T15715] ? clear_bhb_loop+0x40/0x90 [ 778.922610][T15715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.928503][T15715] RIP: 0033:0x7eff177c8407 [ 778.933015][T15715] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 778.952622][T15715] RSP: 002b:00007ffde08f6de0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 778.961048][T15715] RAX: ffffffffffffffda RBX: 00007eff1719b880 RCX: 00007eff177c8407 [ 778.969108][T15715] RDX: 0000000000000000 RSI: 00007ffde08f7f1c RDI: ffffffffffffff9c [ 778.977075][T15715] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 778.985131][T15715] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 778.993116][T15715] R13: 00007ffde08f7030 R14: 00007eff17a19000 R15: 0000555bf52934d8 [ 779.001152][T15715] [ 779.004639][T15715] Kernel Offset: disabled [ 779.009000][T15715] Rebooting in 86400 seconds..