last executing test programs: 1m29.780479598s ago: executing program 3 (id=4011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x2009}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22000004}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m27.833517648s ago: executing program 3 (id=4021): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 1m27.289037129s ago: executing program 3 (id=4023): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x600, 0x1, &(0x7f00000002c0)="e542757eeebef5ee5386273d99a76506e0c1393fc9fa4950e6f676c8b7f88b9903da797df33247c0dbd8f90fd27271b0bc1e086ffbeb68c3fe55ae6ebc53d1386f09aa760e01ebb82e49f8ce096201898ab4bea277b224ec057eca2e97dff0fc3d7d7893a3b5c40a206754fc50d40bd73dcd1c5848758f9bd3f9daf2f6aa68b1034c52daae8c2985dafcfc60fc125c40b456288e60d66956d766290c39e351761a467a292275c7618e068cf1ddb293ad3a5cb5bdaf31ac196e70902d2395f9c1"}, {0x2, 0x1c8, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f"}, {0x2, 0x350, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b70"}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x7800, 0x16e80, &(0x7f0000000680)="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"}, {0x0, 0xe0, 0xffd, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x430, 0xb, &(0x7f0000001e00)="8124b1627d2b85cf12b34e6c2fbdacd44ceee1d519387e1acca6a8c62a016c59e5274fc707df8963689a9f208c3dcba9522ab5c8f77962295da2f5b46a819e143b6dd4e36da6fef199e3502b30c56c1b90269b34cb2349f6924dbdb0187205f207a4b6d730a74054c83684359bb4d70411a1c660550e878f33f179ca2ce83d46a0f718740b76"}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0x1f0, 0x2, &(0x7f0000001a00)="502b1ab9893f40540961060f0eae7c66e5bd67b98ebe114d0d20a7ff5dd6e1f907f8d956237865d5ac4bf304209d6b0f3e5bbd2fdddad270d4a65b1fd509"}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7c0, 0x1ff, &(0x7f0000001a80)="6d09665571e41c7d0fa4324e5466f951622b07e6ec23267ba7e62ce344f192029add53cfc692a8d71e7a78b5a07fcb39484320ab713caae823bf8aaa926d81c0eb45d13646bed44d7129dbd3599c98791509e2e8e1f9d7f772b3b1ae333045b76646d0dcdd973a829d75be6767d5fb6f0acc586ba4a549af870ebc542b4f92d27d0e4268d22581c18de86c492580eaa1e6d0dd4191963f5407c28d4bdf24a92e4576bbfc83c408b1d627a99fc59f769dd1b73af8086e096f9cf60a4e5067397e2dc2d61fcf2fd216fbbac51687cd0acae32fd73a771b2916391236f307ce1a8608ae3b9b452814f6ec4e0f97aa4b960efd75a72f7e1ab948"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}], 0x2, &(0x7f0000000380), 0x0, 0x40004}], 0x1, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') 1m24.08142312s ago: executing program 4 (id=4039): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES32=r0], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x22, 0xa, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @llc={0x1a, 0x103, 0x10, 0x1, 0x10, 0x5, @local}, @isdn={0x22, 0x65, 0x2, 0x9, 0x1}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x4, 0x1}) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x10015c0, &(0x7f0000000300)={0x0, 0xe3da, 0x1, 0x3, 0x145}, 0x0, 0x0) rename(0x0, &(0x7f0000000040)='./file0\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 1m23.005635022s ago: executing program 3 (id=4042): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="200ca700000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m21.250131328s ago: executing program 0 (id=4049): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbff253b00000008000300", @ANYRES32=r1, @ANYBLOB="2e003300d0000009ffffffffffff080211000000505050505050"], 0x4c}, 0x1, 0x0, 0x0, 0x68804}, 0x24000846) 1m21.170099338s ago: executing program 4 (id=4050): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m20.93807228s ago: executing program 0 (id=4051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x0, 0x1, &(0x7f00000002c0)}, {0x2, 0x1c8, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f"}, {0x2, 0x350, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b70"}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x7800, 0x16e80, &(0x7f0000000680)="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"}, {0x0, 0xe0, 0xffd, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x430, 0xb, &(0x7f0000001e00)="8124b1627d2b85cf12b34e6c2fbdacd44ceee1d519387e1acca6a8c62a016c59e5274fc707df8963689a9f208c3dcba9522ab5c8f77962295da2f5b46a819e143b6dd4e36da6fef199e3502b30c56c1b90269b34cb2349f6924dbdb0187205f207a4b6d730a74054c83684359bb4d70411a1c660550e878f33f179ca2ce83d46a0f718740b76"}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0x1f0, 0x2, &(0x7f0000001a00)="502b1ab9893f40540961060f0eae7c66e5bd67b98ebe114d0d20a7ff5dd6e1f907f8d956237865d5ac4bf304209d6b0f3e5bbd2fdddad270d4a65b1fd509"}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7c0, 0x1ff, &(0x7f0000001a80)="6d09665571e41c7d0fa4324e5466f951622b07e6ec23267ba7e62ce344f192029add53cfc692a8d71e7a78b5a07fcb39484320ab713caae823bf8aaa926d81c0eb45d13646bed44d7129dbd3599c98791509e2e8e1f9d7f772b3b1ae333045b76646d0dcdd973a829d75be6767d5fb6f0acc586ba4a549af870ebc542b4f92d27d0e4268d22581c18de86c492580eaa1e6d0dd4191963f5407c28d4bdf24a92e4576bbfc83c408b1d627a99fc59f769dd1b73af8086e096f9cf60a4e5067397e2dc2d61fcf2fd216fbbac51687cd0acae32fd73a771b2916391236f307ce1a8608ae3b9b452814f6ec4e0f97aa4b960efd75a72f7e1ab948"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001d80)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aae1efd7e01461b95597054a863f3d5cfe6cb55b5bb9fa6935849e6098ed00f8ffff1726b360fbcf", 0x48}, {0x0}], 0x3, &(0x7f0000000380), 0x0, 0x40004}], 0x1, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') 1m18.956362526s ago: executing program 3 (id=4054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x2009}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22000004}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m17.494897429s ago: executing program 4 (id=4061): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x100005, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffece}, 0x8a}], 0x1, 0x10022, 0x0) 1m17.201393193s ago: executing program 0 (id=4062): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x406) 1m16.119211448s ago: executing program 0 (id=4063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0xffff, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1m15.551701885s ago: executing program 4 (id=4064): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r0, 0x20) poll(&(0x7f0000000100)=[{r0, 0x804f}, {r0, 0x3123}], 0x2, 0x11ff) shutdown(r0, 0x0) 1m15.549575178s ago: executing program 0 (id=4065): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) brk(0x55555ede6001) 1m15.454127106s ago: executing program 2 (id=4066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0000002}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) 1m15.419617767s ago: executing program 1 (id=4067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xfffffff7}, 0x8) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m15.311737407s ago: executing program 1 (id=4068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1m15.169039651s ago: executing program 2 (id=4069): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2d1e, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12020, 0x0) 1m14.917651738s ago: executing program 1 (id=4070): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x60, 0x1, 0x0, 0x300}, 'syz1\x00', 0x9}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x0, 0xea60}, 0x11, 0x2, 0x7fdffffe}, 0x10) 1m14.75226724s ago: executing program 2 (id=4071): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4901}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 1m14.637073677s ago: executing program 4 (id=4072): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x2000000, 0x0, &(0x7f0000000000), 0x5000000) setreuid(0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$nvram(0xffffff9c, &(0x7f00000016c0), 0x210003, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4104aec6, &(0x7f0000001c40)={0x1, [{0x0, 0x300, 0x1, &(0x7f00000002c0)="e542757eeebef5ee5386273d99a76506e0c1393fc9fa4950e6f676c8b7f88b9903da797df33247c0dbd8f90fd27271b0bc1e086ffbeb68c3fe55ae6ebc53d1386f09aa760e01ebb82e49f8ce096201898ab4bea277b224ec057eca2e97dff0fc"}, {0x2, 0x1c8, 0x3, &(0x7f0000000440)="b98622891efd79a63fc9ca6bb1b3ac61bea600618bbc8dce92bc68b6b7a0f58cfe638cfc08dad53aba4219e68f907b9409ad0c50a4621fc46f"}, {0x2, 0x350, 0x401, &(0x7f0000000540)="82ccf5130f5f39ba1c5a98a5549fcd13421c7f85ad5699160d5f9c8a599bbd393f3c7dd9cf3ff08e757f12121622144934a3c1badfca9cc2efd548921271c6334de999aa96b653f2485a4aa2401e9d92a7325f670bbcdecdb00ab3b2a86395e7e7c228baad9ba7120b70"}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x7800, 0x16e80, &(0x7f0000000680)="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"}, {0x0, 0xe0, 0xffd, &(0x7f0000001680)="b5fc652530c522efb5b57b3b0d6c8690f28e53bb1696d06e8b34a9ca"}, {0x0, 0x430, 0xb, &(0x7f0000001e00)="8124b1627d2b85cf12b34e6c2fbdacd44ceee1d519387e1acca6a8c62a016c59e5274fc707df8963689a9f208c3dcba9522ab5c8f77962295da2f5b46a819e143b6dd4e36da6fef199e3502b30c56c1b90269b34cb2349f6924dbdb0187205f207a4b6d730a74054c83684359bb4d70411a1c660550e878f33f179ca2ce83d46a0f718740b76"}, {0x3, 0x8, 0x4, &(0x7f0000001700)="80"}, {0x2, 0x5e8, 0x3, &(0x7f0000001740)="1bcb457e11cba2c58e18ad7ca846eecb0f2c17f1a099be99f30a2738cd7030ed4d9510947cbf5334ddeae366898796d2b689cb8edb397042976a0fe4a316558f2bf4168e4c1bea46e511097a152cad4d9031d35f2f53bfc6e3dfc78ba2bf6a1442e8da6a4f7c6639ae1ad4ed2159330255ab7f268b9b50fb1597c9613db7a731204c52cddbf88f7bf5d0df71da00eaaf9235b52dc062a01c00c882bffeb6679fd6310a57ae7df49d40c2cc624f959384c7dc3d2541efaa39d202003ab1"}, {0x2, 0x4b0, 0x8, &(0x7f0000001800)="e40420e56f88a659edd336544840f0c00ea0f1e77a03778513872bdd8e2b96138f16e3c7ad59c0aa0dc3e7be045922aa65a1231533e82c24ac80926e7286fc8ee53b5f3549c75533e8fabf8d09b738a294c1a9273020a12f207258f11cf4c2ecc06455a4f436e4e335567dbe07fab678c32af447163308e07c6f1e726655ef72866a82a3eb44c82f6a9b42f8d9a0e14168061e5498d3"}, {0x1, 0x0, 0xc, &(0x7f00000018c0)}, {0x2, 0x628, 0x64, &(0x7f0000001900)="57261c05a730e44e0c631c4bd0cb497453545891a0fbaadc2f5727896f0a18b6dfc4ca28fdfbc34dc39458c77e7b0794a017d5f6187a67449f1d5fd65c67c5988b2bacd1951ae2b3da5a68bd077cf9b6af48a384a7d52ea5ca4f98b1eaf6437b484706bec228d36fca584b6f9f2bef105658d3e91806f74d02e5904106aabbb8e74d38e1afadf97f200102e92e01aed4f2b11a8b288362b416008225fe7dd16ff566461efb468b5dab587a96bc544af9a433615258ba0e9d22f48d0f3333ceae814fada0e2"}, {0x1, 0x1f0, 0x2, &(0x7f0000001a00)="502b1ab9893f40540961060f0eae7c66e5bd67b98ebe114d0d20a7ff5dd6e1f907f8d956237865d5ac4bf304209d6b0f3e5bbd2fdddad270d4a65b1fd509"}, {0x2, 0x20, 0xc, &(0x7f0000001a40)="751aa1dd"}, {0xd52788e50d8c0692, 0x7c0, 0x1ff, &(0x7f0000001a80)="6d09665571e41c7d0fa4324e5466f951622b07e6ec23267ba7e62ce344f192029add53cfc692a8d71e7a78b5a07fcb39484320ab713caae823bf8aaa926d81c0eb45d13646bed44d7129dbd3599c98791509e2e8e1f9d7f772b3b1ae333045b76646d0dcdd973a829d75be6767d5fb6f0acc586ba4a549af870ebc542b4f92d27d0e4268d22581c18de86c492580eaa1e6d0dd4191963f5407c28d4bdf24a92e4576bbfc83c408b1d627a99fc59f769dd1b73af8086e096f9cf60a4e5067397e2dc2d61fcf2fd216fbbac51687cd0acae32fd73a771b2916391236f307ce1a8608ae3b9b452814f6ec4e0f97aa4b960efd75a72f7e1ab948"}, {0x2, 0x498, 0x1, &(0x7f0000001b80)="3a9ee66ca6cd3d13402c22d8cb7bf0a80dded26527c8221bea39781a2555e5f8a754a9525bd68b3606d3e51e82d86d27c5483f664c66d75e94cb65ec911f7276fb6ed57cce7a730ca5a88d8c9665898e9902bee33f878c263bbf2a72a46432b66dac5a0110d3b4ecab0871afe22b1e849b0171a8fd52be2af86bd993dfba4c0a112ca7918c9529dfcf2103b5bc0c6ce026925c"}]}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001d80)="ebe3a0e9796cfd1647e2990800000000000000b372219d205e81f4a7f71c1926aae1efd7e01461b95597054a863f3d5cfe6cb55b5bb9fa6935849e6098ed00f8ffff1726b360fbcf", 0x48}, {0x0}], 0x3, &(0x7f0000000380), 0x0, 0x40004}], 0x1, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') 1m14.478178161s ago: executing program 1 (id=4073): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000240)=0x10000, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 1m14.322711417s ago: executing program 2 (id=4074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0) 1m14.302722741s ago: executing program 1 (id=4075): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000040001400048010000180070001006374000004000280090002"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m14.175581751s ago: executing program 2 (id=4076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x4048015, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000240)) 1m14.156300324s ago: executing program 0 (id=4077): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000020000", @ANYRES32=r0], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x22, 0xa, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @llc={0x1a, 0x103, 0x10, 0x1, 0x10, 0x5, @local}, @isdn={0x22, 0x65, 0x2, 0x9, 0x1}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x4, 0x1}) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x10015c0, &(0x7f0000000300)={0x0, 0xe3da, 0x1, 0x3, 0x145}, 0x0, 0x0) rename(0x0, &(0x7f0000000040)='./file0\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 1m12.591722482s ago: executing program 1 (id=4078): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 1m9.66751826s ago: executing program 2 (id=4079): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) 1m7.744773897s ago: executing program 3 (id=4080): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 1m1.185916959s ago: executing program 4 (id=4081): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000140)="17e89526a4730e15f15d7004baab12", 0x0, 0x0, 0x0, 0xc6}, 0x38) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xfa7e}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 55.386730045s ago: executing program 32 (id=4077): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000008000000020000", @ANYRES32=r0], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x22, 0xa, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={0x0, @llc={0x1a, 0x103, 0x10, 0x1, 0x10, 0x5, @local}, @isdn={0x22, 0x65, 0x2, 0x9, 0x1}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x4, 0x1}) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x10015c0, &(0x7f0000000300)={0x0, 0xe3da, 0x1, 0x3, 0x145}, 0x0, 0x0) rename(0x0, &(0x7f0000000040)='./file0\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 46.125437667s ago: executing program 33 (id=4078): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 42.239540506s ago: executing program 34 (id=4079): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) 6.493692291s ago: executing program 35 (id=4080): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x0, 0x0) 0s ago: executing program 36 (id=4081): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000140)="17e89526a4730e15f15d7004baab12", 0x0, 0x0, 0x0, 0xc6}, 0x38) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0xfa7e}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): 5:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1045.378937][ T30] audit: type=1326 audit(1766848912.045:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1045.426751][ T30] audit: type=1326 audit(1766848912.045:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1045.469247][ T30] audit: type=1326 audit(1766848912.045:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1045.493289][ T30] audit: type=1326 audit(1766848912.045:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1045.573326][ T30] audit: type=1326 audit(1766848912.045:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.0.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 1045.602180][ T5914] mcp2221 0003:04D8:00DD.0082: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1045.842299][T27160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.875765][T27160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.904121][T27160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.917797][T27160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.976156][ T890] usb 3-1: USB disconnect, device number 10 [ 1046.128750][ T890] usb 2-1: USB disconnect, device number 17 [ 1046.975317][T27198] binder: 27194:27198 ioctl c018620c 800002c0 returned -1 [ 1048.495481][ T5914] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1048.645598][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 1048.657256][ T5914] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1048.673352][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1048.715695][ T5914] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1048.742923][T27217] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3616'. [ 1048.752968][ T5914] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1048.799173][ T5914] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1048.818391][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.874382][T27196] Cannot find set identified by id 0 to match [ 1049.061219][ T5914] usb 2-1: GET_CAPABILITIES returned 0 [ 1049.075500][ T5914] usbtmc 2-1:16.0: can't read capabilities [ 1049.305420][ T5914] usb 2-1: USB disconnect, device number 18 [ 1049.858994][T27231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1050.235446][T12851] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1050.385736][T12851] usb 2-1: Using ep0 maxpacket: 8 [ 1050.393188][T12851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1050.405052][T12851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1050.428700][T12851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1050.464745][T12851] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1050.483605][T12851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.506730][T12851] usb 2-1: Product: syz [ 1050.518045][T12851] usb 2-1: Manufacturer: syz [ 1050.528779][T12851] usb 2-1: SerialNumber: syz [ 1050.549012][T12851] usb 2-1: config 0 descriptor?? [ 1050.860927][T27213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.883550][T27213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.913510][T12851] usb 2-1: USB disconnect, device number 19 [ 1051.557354][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1051.557373][ T30] audit: type=1400 audit(1766848918.425:850): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=27238 comm="syz.4.3622" [ 1051.743688][T27263] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3624'. [ 1054.307750][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.314146][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.735470][ T890] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1054.932633][ T890] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 1054.942848][ T890] usb 5-1: config 160 has no interface number 0 [ 1054.972133][ T890] usb 5-1: config 160 interface 200 has no altsetting 0 [ 1054.991755][ T890] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1055.006031][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.018128][ T890] usb 5-1: Product: syz [ 1055.023488][ T890] usb 5-1: Manufacturer: syz [ 1055.030775][ T890] usb 5-1: SerialNumber: syz [ 1056.069981][T27297] xt_TCPMSS: Only works on TCP SYN packets [ 1056.089182][ T30] audit: type=1804 audit(1766848922.955:851): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3630" name="file1" dev="ramfs" ino=65914 res=1 errno=0 [ 1056.326927][ T30] audit: type=1804 audit(1766848923.185:852): pid=27303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3630" name="file1" dev="ramfs" ino=65914 res=1 errno=0 [ 1057.151251][T27308] input: syz0 as /devices/virtual/input/input148 [ 1057.445347][ T5914] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1057.626048][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 1057.688597][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1057.755416][ T5914] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1057.788780][ T5914] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1057.825532][ T5914] usb 4-1: Product: syz [ 1057.829854][ T5914] usb 4-1: Manufacturer: syz [ 1057.855409][ T5914] usb 4-1: SerialNumber: syz [ 1057.880309][ T5914] usb 4-1: config 0 descriptor?? [ 1058.199774][ T890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1058.216296][ T890] usb 5-1: MIDIStreaming interface descriptor not found [ 1058.356784][ T890] usb 5-1: USB disconnect, device number 29 [ 1058.472603][T27324] udevd[27324]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1058.478431][ T5914] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1058.531316][ T5914] gspca_sunplus: reg_w_riv err -71 [ 1058.539393][ T5914] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1058.561976][ T5914] usb 4-1: USB disconnect, device number 107 [ 1058.627701][T27331] ksmbd: Daemon and kernel module version mismatch. ksmbd: 176, kernel module: 1. User-space ksmbd should terminate. [ 1059.803693][ T30] audit: type=1326 audit(1766848926.635:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1059.893954][ T30] audit: type=1326 audit(1766848926.635:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1059.962576][ T30] audit: type=1326 audit(1766848926.635:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.033636][ T30] audit: type=1326 audit(1766848926.635:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.110521][ T30] audit: type=1326 audit(1766848926.635:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.187909][ T30] audit: type=1326 audit(1766848926.635:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.275613][ T30] audit: type=1326 audit(1766848926.635:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.305436][ T30] audit: type=1326 audit(1766848926.635:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.328550][ T30] audit: type=1326 audit(1766848926.635:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1060.351604][ T30] audit: type=1326 audit(1766848926.635:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27339 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000 [ 1061.745666][T27367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'. [ 1062.102314][T27370] bridge2: port 1(veth3) entered blocking state [ 1062.110021][T27370] bridge2: port 1(veth3) entered disabled state [ 1062.134491][T27370] veth3: entered allmulticast mode [ 1062.150425][T27370] veth3: entered promiscuous mode [ 1062.177786][T27371] bridge2: port 2(veth0_to_bond) entered blocking state [ 1062.188226][T27371] bridge2: port 2(veth0_to_bond) entered disabled state [ 1062.202730][T27371] veth0_to_bond: entered allmulticast mode [ 1062.217812][T27371] veth0_to_bond: entered promiscuous mode [ 1062.270036][T27372] netlink: 'syz.4.3640': attribute type 1 has an invalid length. [ 1062.306570][T27373] bridge2: port 3(veth5) entered blocking state [ 1062.316558][T27372] netlink: 'syz.4.3640': attribute type 1 has an invalid length. [ 1062.333442][T27373] bridge2: port 3(veth5) entered disabled state [ 1062.342813][T27373] veth5: entered allmulticast mode [ 1062.381729][T27373] veth5: entered promiscuous mode [ 1062.411384][T27372] netlink: 'syz.4.3640': attribute type 1 has an invalid length. [ 1063.176464][T27385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1063.185951][T12851] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1063.221702][T27385] : entered promiscuous mode [ 1063.357415][T12851] usb 4-1: Using ep0 maxpacket: 8 [ 1063.448761][T12851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1063.461985][T12851] usb 4-1: config 1 has an invalid interface number: 65 but max is 0 [ 1063.549273][T12851] usb 4-1: config 1 has no interface number 0 [ 1063.587935][T12851] usb 4-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30 [ 1063.610210][T27393] syzkaller0: entered promiscuous mode [ 1063.622035][T27393] syzkaller0: entered allmulticast mode [ 1063.622065][T12851] usb 4-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 1063.648682][T12851] usb 4-1: config 1 interface 65 has no altsetting 0 [ 1063.666239][T27393] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1063.729973][T12851] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 1063.739900][T12851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.765507][T12851] usb 4-1: Product: syz [ 1063.769939][T12851] usb 4-1: Manufacturer: syz [ 1063.846872][T27395] netlink: 'syz.4.3645': attribute type 10 has an invalid length. [ 1063.875636][T12851] usb 4-1: SerialNumber: syz [ 1063.897264][T27395] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3645'. [ 1064.685688][T27413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.707182][T27413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.759495][T27413] tipc: New replicast peer: 255.255.255.255 [ 1064.907401][T27413] tipc: Enabled bearer , priority 10 [ 1065.669944][T27422] vivid-004: disconnect [ 1066.105461][ T5988] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1066.313721][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 1066.325925][ T5988] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.359503][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1066.385404][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1066.402906][ T5988] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.416513][ T5988] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1066.427805][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.489449][T27422] vivid-004: reconnect [ 1066.654888][ T5988] usb 5-1: GET_CAPABILITIES returned 0 [ 1066.660486][ T5988] usbtmc 5-1:16.0: can't read capabilities [ 1066.745936][T27403] delete_channel: no stack [ 1066.756036][T12851] kalmia 4-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 1066.805691][T12851] kalmia 4-1:1.65: probe with driver kalmia failed with error -22 [ 1066.840703][T12851] usb 4-1: USB disconnect, device number 108 [ 1066.898522][T27425] raw_sendmsg: syz.4.3650 forgot to set AF_INET. Fix it! [ 1066.963453][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1066.972575][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1066.981631][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1066.990685][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1066.999729][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.045784][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.054932][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.064007][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.080577][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.089672][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.098728][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.108669][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.117748][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.126797][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.135852][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.153276][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1067.201605][ T5879] usb 5-1: USB disconnect, device number 30 [ 1067.340468][T27439] fuse: Bad value for 'group_id' [ 1067.355437][T12851] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1067.363191][T27439] fuse: Bad value for 'group_id' [ 1067.426060][T27437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3653'. [ 1067.517741][T12851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.528261][T12851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1067.553006][T12851] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1067.583343][T12851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1067.594153][T12851] usb 4-1: SerialNumber: syz [ 1067.787811][T27446] kAFS: unable to lookup cell 'Þ({^ú@' [ 1067.933336][T27448] IPVS: stopping backup sync thread 26101 ... [ 1068.270804][T12851] usb 4-1: 0:2 : does not exist [ 1068.318074][T12851] usb 4-1: USB disconnect, device number 109 [ 1068.402096][T21371] udevd[21371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.843678][T27461] syzkaller0: entered promiscuous mode [ 1068.860958][T27461] syzkaller0: entered allmulticast mode [ 1068.895376][T27461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1069.735464][ T5988] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1069.905405][ T5988] usb 4-1: Using ep0 maxpacket: 8 [ 1069.920165][ T5988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.932513][ T5988] usb 4-1: config 0 has no interfaces? [ 1069.941439][ T5988] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1069.955689][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1069.969146][ T5988] usb 4-1: Product: syz [ 1069.973450][ T5988] usb 4-1: Manufacturer: syz [ 1069.980801][ T5988] usb 4-1: SerialNumber: syz [ 1069.995825][ T5988] usb 4-1: config 0 descriptor?? [ 1070.495284][T27478] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3656'. [ 1071.146772][T12851] usb 4-1: USB disconnect, device number 110 [ 1071.235473][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1071.425473][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 1071.515694][ T5879] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1071.525428][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1071.533605][ T5879] usb 2-1: Product: syz [ 1071.538403][ T5879] usb 2-1: Manufacturer: syz [ 1071.542986][ T5879] usb 2-1: SerialNumber: syz [ 1071.551021][ T5879] usb 2-1: config 0 descriptor?? [ 1071.919810][ T5879] usb 2-1: USB disconnect, device number 20 [ 1071.953027][T21371] udevd[21371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.606611][T27507] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1072.826767][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 1072.840883][T27511] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1072.860256][T27507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1074.035527][ T5912] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1074.206000][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 1074.212781][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.224324][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.245164][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1074.260489][ T5912] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1074.270305][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.292092][ T5912] usb 4-1: config 0 descriptor?? [ 1074.649530][T27529] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3670'. [ 1074.835460][T12851] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1075.074000][ T5912] microsoft 0003:045E:07DA.0083: ignoring exceeding usage max [ 1075.191536][ T5912] microsoft 0003:045E:07DA.0083: unsupported Resolution Multiplier 0 [ 1075.212518][T12851] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1075.238692][ T5912] microsoft 0003:045E:07DA.0083: implement() called with n (152) > 32! (kworker/0:5) [ 1075.266996][T12851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.267026][T12851] usb 5-1: Product: syz [ 1075.267041][T12851] usb 5-1: Manufacturer: syz [ 1075.267056][T12851] usb 5-1: SerialNumber: syz [ 1075.272115][T12851] usb 5-1: config 0 descriptor?? [ 1075.356188][ T5912] microsoft 0003:045E:07DA.0083: unsupported Resolution Multiplier 0 [ 1075.365932][ T5912] microsoft 0003:045E:07DA.0083: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1075.365954][ T5912] microsoft 0003:045E:07DA.0083: no inputs found [ 1075.365962][ T5912] microsoft 0003:045E:07DA.0083: could not initialize ff, continuing anyway [ 1076.376388][T27513] netlink: 'syz.3.3668': attribute type 10 has an invalid length. [ 1076.393384][T27513] team0: left promiscuous mode [ 1076.401250][T27513] team_slave_0: left promiscuous mode [ 1076.407793][T27513] team_slave_1: left promiscuous mode [ 1076.571156][T27513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.820019][T27548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3675'. [ 1076.972326][T12851] usb 4-1: USB disconnect, device number 111 [ 1077.140184][T27552] tipc: Enabling of bearer rejected, already enabled [ 1077.217271][T27552] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1077.239924][T27552] tipc: Enabling of bearer rejected, failed to enable media [ 1077.607335][T26314] Bluetooth: hci4: unexpected event for opcode 0x0c1c [ 1078.029698][ T5879] usb 5-1: USB disconnect, device number 31 [ 1078.395084][T27571] syzkaller0: entered promiscuous mode [ 1078.405722][T27571] syzkaller0: entered allmulticast mode [ 1078.421226][T27571] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1078.547382][T26314] Bluetooth: hci3: command 0x0406 tx timeout [ 1079.006616][ T5988] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1079.135592][ T5879] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1079.195577][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 1079.197770][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.197802][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1079.197819][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1079.197830][ T5988] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1079.197842][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.198815][ T5988] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1079.198832][ T5988] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1079.198842][ T5988] usb 3-1: Manufacturer: syz [ 1079.200441][ T5988] usb 3-1: config 0 descriptor?? [ 1079.309986][ T5879] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1079.310017][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.330826][ T5879] usb 5-1: config 0 descriptor?? [ 1079.396955][ T5879] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1079.615407][ T5988] rc_core: IR keymap rc-hauppauge not found [ 1079.615426][ T5988] Registered IR keymap rc-empty [ 1079.615560][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.635554][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.656508][ T5988] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1079.658839][ T5988] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input149 [ 1079.661856][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.675048][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.696533][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.716641][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.746919][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.768717][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.777861][ T5879] gspca_sunplus: reg_w_riv err -71 [ 1079.785549][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1079.788176][ T5879] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1079.805680][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.048917][ T5879] usb 5-1: USB disconnect, device number 32 [ 1080.109619][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.137890][ T5988] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1080.176916][ T5988] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1080.186672][ T5988] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1080.200288][ T5988] usb 3-1: USB disconnect, device number 11 [ 1080.326550][T12851] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1080.505194][T12851] usb 1-1: Using ep0 maxpacket: 8 [ 1080.512003][T12851] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1080.560510][T12851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1080.610246][T12851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1080.662436][T12851] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.710261][T12851] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1080.742783][T12851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.901531][T27624] tipc: Resetting bearer [ 1081.012922][T12851] usb 1-1: GET_CAPABILITIES returned 0 [ 1081.026534][T12851] usbtmc 1-1:16.0: can't read capabilities [ 1081.166803][T27631] syzkaller0: entered promiscuous mode [ 1081.182685][T27631] syzkaller0: entered allmulticast mode [ 1081.212638][T27631] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1081.240759][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.249862][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.258924][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.267983][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.277038][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.286092][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.295159][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.412517][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.421660][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.430750][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.456294][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.465415][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.474472][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.562190][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.573183][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.582267][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.593416][ T5988] usb 1-1: USB disconnect, device number 7 [ 1081.990932][T27644] tipc: Enabled bearer , priority 10 [ 1082.003333][T27644] tipc: Enabled bearer , priority 0 [ 1082.724846][T12851] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1082.939750][T12851] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1082.977995][T12851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.036839][T12851] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.091277][T12851] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1083.132535][T12851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.156807][T12851] usb 4-1: Product: syz [ 1083.167038][T12851] usb 4-1: Manufacturer: syz [ 1083.194662][T12851] usb 4-1: SerialNumber: syz [ 1083.225423][T12851] usb 4-1: config 0 descriptor?? [ 1083.518410][ T5988] usb 4-1: USB disconnect, device number 112 [ 1083.912742][T27677] tipc: Enabling of bearer rejected, failed to enable media [ 1083.951607][T27677] syzkaller0: entered promiscuous mode [ 1083.984400][T27677] syzkaller0: entered allmulticast mode [ 1084.005501][T12851] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1084.019730][T27678] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1084.155745][T12851] usb 5-1: device descriptor read/64, error -71 [ 1084.415327][T12851] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1084.565466][T12851] usb 5-1: device descriptor read/64, error -71 [ 1084.578856][T26314] Bluetooth: hci0: unexpected subevent 0x01 length: 1 < 18 [ 1084.706214][T12851] usb usb5-port1: attempt power cycle [ 1084.882843][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1084.883029][ T30] audit: type=1804 audit(1766848951.745:873): pid=27701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3721" name="file1" dev="ramfs" ino=68655 res=1 errno=0 [ 1085.035430][ T5988] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1085.035425][ T5912] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1085.054986][T12851] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1085.066713][ T30] audit: type=1804 audit(1766848951.925:874): pid=27705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3721" name="file1" dev="ramfs" ino=68655 res=1 errno=0 [ 1085.106464][T12851] usb 5-1: device descriptor read/8, error -71 [ 1085.195383][ T5988] usb 4-1: Using ep0 maxpacket: 8 [ 1085.195408][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 1085.209624][ T5988] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1085.230286][ T5912] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1085.240055][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.248896][ T5988] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1085.259415][ T5912] usb 1-1: Product: syz [ 1085.263834][ T5912] usb 1-1: Manufacturer: syz [ 1085.263850][ T5988] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1085.294379][ T5912] usb 1-1: SerialNumber: syz [ 1085.294445][ T5988] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.329582][ T5912] usb 1-1: config 0 descriptor?? [ 1085.342286][ T5988] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1085.359229][T12851] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1085.370997][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 1085.379231][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.398460][T12851] usb 5-1: device descriptor read/8, error -71 [ 1085.516907][T12851] usb usb5-port1: unable to enumerate USB device [ 1085.628688][ T5988] usb 4-1: GET_CAPABILITIES returned 0 [ 1085.634552][ T5988] usbtmc 4-1:16.0: can't read capabilities [ 1085.756442][ T5912] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1085.775859][ T5912] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 1085.798308][ T5912] usb 1-1: USB disconnect, device number 8 [ 1085.947335][T27711] tipc: Enabling of bearer rejected, already enabled [ 1085.978176][T27711] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1085.998541][T27711] tipc: Bearer : already 2 bearers with priority 10 [ 1086.009120][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.018222][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.027320][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.036410][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.045511][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.054602][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.063693][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.072883][T27711] tipc: Bearer : trying with adjusted priority [ 1086.081650][T27711] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1086.113175][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.122266][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.131318][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.140386][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.149474][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.158558][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.167645][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.188582][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.197687][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1086.211015][T25137] usb 4-1: USB disconnect, device number 113 [ 1086.345443][ T5988] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1086.504009][T27719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1086.523477][ T5988] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1086.547296][ T5988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.573595][ T5988] usb 2-1: Product: syz [ 1086.593758][ T5988] usb 2-1: Manufacturer: syz [ 1086.606834][ T5988] usb 2-1: SerialNumber: syz [ 1086.641954][ T5988] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1086.701012][T25137] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1087.126239][ T5988] usb 2-1: USB disconnect, device number 21 [ 1087.749057][T25137] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1087.785820][T25137] ath9k_htc: Failed to initialize the device [ 1087.801530][ T5988] usb 2-1: ath9k_htc: USB layer deinitialized [ 1087.809325][T27741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1087.831476][T26314] Bluetooth: hci0: unexpected event for opcode 0x203d [ 1087.956271][T27748] tipc: Enabling of bearer rejected, failed to enable media [ 1087.971580][T27748] syzkaller0: entered promiscuous mode [ 1087.979196][T27748] syzkaller0: entered allmulticast mode [ 1087.992707][T27748] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1088.164932][ T5912] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1088.185522][T12851] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1088.296731][ T5912] usb 3-1: device descriptor read/64, error -71 [ 1088.329355][ T30] audit: type=1326 audit(1766848955.195:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.352234][ T30] audit: type=1326 audit(1766848955.195:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.386634][ T30] audit: type=1326 audit(1766848955.195:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.386699][T12851] usb 1-1: Using ep0 maxpacket: 16 [ 1088.417526][ T30] audit: type=1326 audit(1766848955.205:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.444850][ T30] audit: type=1326 audit(1766848955.205:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.479143][T12851] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1088.487771][T12851] usb 1-1: config 254 has no interface number 0 [ 1088.495645][ T30] audit: type=1326 audit(1766848955.205:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.524836][ T30] audit: type=1326 audit(1766848955.205:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.525685][T12851] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1088.575486][ T5912] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1088.593374][T12851] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1088.616240][ T30] audit: type=1326 audit(1766848955.205:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27753 comm="syz.1.3740" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f86539 code=0x7ffc0000 [ 1088.658975][T12851] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1088.689334][T12851] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1088.705420][ T5912] usb 3-1: device descriptor read/64, error -71 [ 1088.725660][T12851] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1088.745745][T12851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1088.762599][T12851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.782881][T12851] usb 1-1: Product: syz [ 1088.793043][T12851] usb 1-1: Manufacturer: syz [ 1088.798381][T12851] usb 1-1: SerialNumber: syz [ 1088.815120][ T5912] usb usb3-port1: attempt power cycle [ 1088.864288][T27750] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1089.106624][T27750] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1089.116894][T12851] usbtest 1-1:254.235: Linux gadget zero [ 1089.127354][T12851] usbtest 1-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1089.155403][ T5912] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1089.176670][ T5912] usb 3-1: device descriptor read/8, error -71 [ 1089.348534][ T5988] usb 1-1: USB disconnect, device number 9 [ 1089.415197][ T5912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1089.438173][ T5912] usb 3-1: device descriptor read/8, error -71 [ 1089.575880][ T5912] usb usb3-port1: unable to enumerate USB device [ 1089.842013][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3743'. [ 1090.494927][T27783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'. [ 1090.802442][T27791] netlink: 'syz.0.3750': attribute type 10 has an invalid length. [ 1090.835419][T27791] hsr0: entered promiscuous mode [ 1090.852601][T27791] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1090.868689][T27791] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1090.889987][T27791] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1091.630766][T27816] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1091.745691][T12851] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1091.793296][T27818] netlink: 'syz.0.3762': attribute type 4 has an invalid length. [ 1091.933417][T12851] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1091.973236][T12851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.006029][T12851] usb 3-1: Product: syz [ 1092.018551][T12851] usb 3-1: Manufacturer: syz [ 1092.038771][T12851] usb 3-1: SerialNumber: syz [ 1092.101412][T12851] usb 3-1: config 0 descriptor?? [ 1092.844958][T12851] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1093.007221][T12851] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1093.030203][T12851] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.055437][T12851] usb 2-1: config 220 has no interface number 2 [ 1093.075500][T12851] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1093.114551][T12851] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1093.129975][T12851] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1093.154968][T12851] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1093.172130][T12851] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1093.185751][T12851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.206205][T12851] usb 2-1: Product: syz [ 1093.218773][T12851] usb 2-1: Manufacturer: syz [ 1093.230330][T12851] usb 2-1: SerialNumber: syz [ 1093.475420][T25137] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1093.490816][T12851] usb 2-1: selecting invalid altsetting 0 [ 1093.511497][T12851] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1093.513936][T26314] Bluetooth: hci0: connection err: -111 [ 1093.531708][T12851] uvcvideo 2-1:220.0: No valid video chain found. [ 1093.570325][T12851] usb 2-1: selecting invalid altsetting 0 [ 1093.585756][T12851] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1093.616133][T12851] usb 2-1: USB disconnect, device number 22 [ 1093.679654][T25137] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1093.693726][T25137] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 1093.707871][T25137] usb 4-1: config 14 has no interface number 0 [ 1093.718402][T25137] usb 4-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 1093.730311][T25137] usb 4-1: config 14 interface 21 has no altsetting 0 [ 1093.745875][T25137] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 1093.756692][T25137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.765687][T25137] usb 4-1: Product: syz [ 1093.769990][T25137] usb 4-1: Manufacturer: syz [ 1093.776407][T25137] usb 4-1: SerialNumber: syz [ 1093.802401][T27833] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1094.052892][T25137] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1094.072241][T25137] usb 4-1: MIDIStreaming interface descriptor not found [ 1094.105885][T12851] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1094.122042][T25137] usb 4-1: USB disconnect, device number 114 [ 1094.187797][T21435] udevd[21435]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1094.285462][T12851] usb 1-1: Using ep0 maxpacket: 32 [ 1094.297732][T12851] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1094.331366][T12851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1094.357103][T12851] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1094.368645][T12851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.377551][T12851] usb 1-1: Product: syz [ 1094.391910][T12851] usb 1-1: Manufacturer: syz [ 1094.403199][T12851] usb 1-1: SerialNumber: syz [ 1094.418993][T12851] usb 1-1: config 0 descriptor?? [ 1094.431447][T12851] usb 1-1: no audio or video endpoints found [ 1094.567032][T27866] tipc: Enabling of bearer rejected, failed to enable media [ 1094.578452][T27866] syzkaller0: entered promiscuous mode [ 1094.584232][T27866] syzkaller0: entered allmulticast mode [ 1094.593881][T27866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1094.657243][T25137] usb 3-1: USB disconnect, device number 16 [ 1094.734319][ T5988] usb 1-1: USB disconnect, device number 10 [ 1095.113409][T27874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.195376][T12851] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1095.357289][T12851] usb 3-1: Using ep0 maxpacket: 16 [ 1095.371953][T12851] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1095.396290][T12851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.420019][T12851] usb 3-1: Product: syz [ 1095.430755][T12851] usb 3-1: Manufacturer: syz [ 1095.448295][T12851] usb 3-1: SerialNumber: syz [ 1095.468297][T12851] usb 3-1: config 0 descriptor?? [ 1095.489287][T12851] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1095.504598][T12851] usb 3-1: Detected FT-X [ 1095.690310][T12851] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1095.722970][T12851] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1095.752063][T27893] tipc: Enabling of bearer rejected, failed to enable media [ 1095.756450][T12851] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1095.780174][T27893] syzkaller0: entered promiscuous mode [ 1095.795036][T27893] syzkaller0: entered allmulticast mode [ 1095.795834][T12851] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1095.825925][T12851] usb 3-1: USB disconnect, device number 17 [ 1095.842600][T12851] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1095.862007][T12851] ftdi_sio 3-1:0.0: device disconnected [ 1095.872442][T27893] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1095.985407][ T5912] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1096.145666][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 1096.160350][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.182916][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1096.199066][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1096.213316][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1096.229510][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1096.252084][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1096.270060][ T5912] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1096.285410][ T5912] usb 5-1: Manufacturer: syz [ 1096.297036][ T5912] usb 5-1: config 0 descriptor?? [ 1096.617129][ T5912] rc_core: IR keymap rc-hauppauge not found [ 1096.638076][ T5912] Registered IR keymap rc-empty [ 1096.666158][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1096.708180][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1096.766695][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1096.823404][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input150 [ 1096.862099][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1096.905547][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1096.936437][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.005558][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.045519][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.095758][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.145492][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.185784][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.226707][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.267297][ T5912] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1097.275639][T25137] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1097.307172][ T5912] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1097.326392][ T5912] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1097.362870][ T5912] usb 5-1: USB disconnect, device number 37 [ 1097.456433][T25137] usb 3-1: Using ep0 maxpacket: 32 [ 1097.468774][T25137] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 1097.511919][T25137] usb 3-1: config 0 has no interface number 0 [ 1097.522056][T25137] usb 3-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1097.557838][T25137] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1097.593051][T25137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.603153][T25137] usb 3-1: Product: syz [ 1097.615245][T25137] usb 3-1: Manufacturer: syz [ 1097.623437][T25137] usb 3-1: SerialNumber: syz [ 1097.637239][T25137] usb 3-1: config 0 descriptor?? [ 1097.649436][T27920] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1097.916239][T27920] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1098.144638][T25137] asix 3-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1098.167790][T25137] asix 3-1:0.191: probe with driver asix failed with error -71 [ 1098.178958][T25137] usb 3-1: USB disconnect, device number 18 [ 1098.278738][T27942] netlink: 'syz.0.3812': attribute type 7 has an invalid length. [ 1098.304653][T27945] usb usb8: usbfs: process 27945 (syz.1.3813) did not claim interface 0 before use [ 1098.413320][T27948] geneve2: entered promiscuous mode [ 1098.422041][ T1323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.438293][ T1323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.480500][ T1323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.490124][ T1323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.755443][T25137] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1098.907352][T25137] usb 1-1: too many configurations: 241, using maximum allowed: 8 [ 1098.946637][T25137] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1098.957843][T25137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.968924][T25137] usb 1-1: Product: syz [ 1098.976850][T25137] usb 1-1: Manufacturer: syz [ 1098.987872][T25137] usb 1-1: SerialNumber: syz [ 1098.994130][T27974] syzkaller0: entered promiscuous mode [ 1099.001146][T27974] syzkaller0: entered allmulticast mode [ 1099.013472][T27974] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1099.014575][T25137] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1099.053250][ T5988] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1099.380486][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 1099.596450][T25137] usb 1-1: USB disconnect, device number 11 [ 1099.995605][T12837] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1100.146595][ T5988] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1100.158056][T12837] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1100.169466][ T5988] ath9k_htc: Failed to initialize the device [ 1100.187612][T12837] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1100.205715][ T5879] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1100.205899][T25137] usb 1-1: ath9k_htc: USB layer deinitialized [ 1100.219560][T12837] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.235932][T12837] usb 2-1: config 220 has no interface number 2 [ 1100.242253][T12837] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1100.268528][T12837] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1100.287820][T12837] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1100.305790][T12837] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1100.317315][T12837] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1100.327167][T12837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.343332][T12837] usb 2-1: Product: syz [ 1100.355395][T12837] usb 2-1: Manufacturer: syz [ 1100.357441][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.360060][T12837] usb 2-1: SerialNumber: syz [ 1100.375644][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1100.375698][ T5879] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1100.375722][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.421746][ T5879] usb 3-1: config 0 descriptor?? [ 1100.638421][T12837] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1100.655286][T12837] uvcvideo 2-1:220.0: No valid video chain found. [ 1100.669085][T12837] usb 2-1: selecting invalid altsetting 0 [ 1100.684151][T12837] usb 2-1: selecting invalid altsetting 0 [ 1100.694027][T12837] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1100.709727][T12837] usb 2-1: USB disconnect, device number 23 [ 1100.765751][T12851] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1100.870803][ T5879] stadia 0003:18D1:9400.0084: item fetching failed at offset 5/7 [ 1100.896341][ T5879] stadia 0003:18D1:9400.0084: parse failed [ 1100.902253][ T5879] stadia 0003:18D1:9400.0084: probe with driver stadia failed with error -22 [ 1100.916489][T12851] usb 4-1: Using ep0 maxpacket: 32 [ 1100.928569][T12851] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.965725][T12851] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.988310][T12851] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1101.000901][T12851] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1101.016378][T12851] usb 4-1: Product: syz [ 1101.022545][T12851] usb 4-1: Manufacturer: syz [ 1101.048524][T12851] hub 4-1:4.0: USB hub found [ 1101.078918][ T5879] usb 3-1: USB disconnect, device number 19 [ 1101.272687][T12851] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1101.567943][T28065] syzkaller0: entered promiscuous mode [ 1101.576861][T28065] syzkaller0: entered allmulticast mode [ 1101.587455][T28065] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1101.595953][T25137] usb 4-1: USB disconnect, device number 115 [ 1101.615574][ T5912] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1101.763123][T28071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1101.775377][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 1101.815950][ T5912] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1101.839768][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1101.861631][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1101.873943][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1101.897939][ T5912] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1101.913346][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.926392][ T5912] usb 1-1: Product: syz [ 1101.930588][ T5912] usb 1-1: Manufacturer: syz [ 1101.939132][ T5912] usb 1-1: SerialNumber: syz [ 1101.969777][ T5912] usb 1-1: config 0 descriptor?? [ 1101.979874][T28060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1102.201772][ T5912] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1102.218454][ T5912] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input151 [ 1102.657606][ C0] powermate: config urb returned -71 [ 1102.663139][ C0] powermate: config urb returned -71 [ 1102.669365][ C0] powermate: config urb returned -71 [ 1102.688230][ T5912] usb 1-1: USB disconnect, device number 12 [ 1102.694230][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1103.145423][ T5912] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1103.315744][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 1103.334528][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.381470][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.433961][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.473517][ T5912] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1103.524144][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.568816][ T5912] usb 2-1: config 0 descriptor?? [ 1104.231284][ T5912] aquacomputer_d5next 0003:0C70:F014.0085: unknown main item tag 0x0 [ 1104.307838][ T5912] aquacomputer_d5next 0003:0C70:F014.0085: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 1104.480862][ T5912] usb 2-1: USB disconnect, device number 24 [ 1104.670786][T28104] fido_id[28104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1105.365542][T12851] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1105.588634][T12851] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1105.716007][T12851] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1105.745982][T12851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.754039][T12851] usb 4-1: Product: syz [ 1105.805377][T12851] usb 4-1: Manufacturer: syz [ 1105.818468][T12851] usb 4-1: SerialNumber: syz [ 1105.836437][ T5879] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1105.850716][T12851] usb 4-1: config 0 descriptor?? [ 1105.888524][T12851] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1105.906754][T12851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1105.918134][T12851] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1105.929877][T12851] usb 4-1: media controller created [ 1105.948822][T12851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1106.005400][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 1106.018355][ T5879] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.062023][ T5879] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.128551][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1106.166441][ T5879] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1106.177909][T12851] DVB: Unable to find symbol mt352_attach() [ 1106.199167][ T5879] usb 2-1: Product: syz [ 1106.204590][ T5879] usb 2-1: Manufacturer: syz [ 1106.263852][ T5879] hub 2-1:4.0: USB hub found [ 1106.301738][T12851] DVB: Unable to find symbol nxt6000_attach() [ 1106.310198][T28108] dvb-usb: bulk message failed: -22 (7/0) [ 1106.317639][T12851] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1106.333280][T12851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input152 [ 1106.359456][T12851] dvb-usb: schedule remote query interval to 1000 msecs. [ 1106.371408][T12851] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1106.382819][T12851] dvb-usb: bulk message failed: -22 (7/0) [ 1106.426392][T12851] dvb-usb: bulk message failed: -22 (7/0) [ 1106.462541][T12851] usb 4-1: USB disconnect, device number 116 [ 1106.522604][ T5879] hub 2-1:4.0: 2 ports detected [ 1106.724463][ T5879] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1106.749146][ T5879] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1106.786599][ T5912] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1106.809872][T12851] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1106.822585][ T5879] usb 2-1: USB disconnect, device number 25 [ 1106.955630][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 1106.963295][ T5912] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1106.981917][ T5912] usb 1-1: config 0 has no interface number 0 [ 1107.000038][T28132] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1107.022147][ T5912] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1107.044274][T28132] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1107.062949][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.084708][ T5912] usb 1-1: Product: syz [ 1107.098375][ T5912] usb 1-1: Manufacturer: syz [ 1107.103221][ T5912] usb 1-1: SerialNumber: syz [ 1107.113967][ T5912] usb 1-1: config 0 descriptor?? [ 1107.128170][ T5912] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1107.140192][ T5912] usb 1-1: selecting invalid altsetting 1 [ 1107.146548][ T5912] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1107.176370][ T5912] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1107.206172][ T5912] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1107.226180][ T5912] usb 1-1: media controller created [ 1107.259147][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1107.327402][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1107.327419][ T30] audit: type=1804 audit(1766848974.195:892): pid=28135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3899" name="file1" dev="ramfs" ino=69298 res=1 errno=0 [ 1107.331699][ T5912] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1107.414475][ T5912] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1107.426615][ T5912] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1107.540280][ T5912] usb 1-1: USB disconnect, device number 13 [ 1107.547019][ T5914] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1107.661228][ T30] audit: type=1804 audit(1766848974.495:893): pid=28140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3899" name="file1" dev="ramfs" ino=69298 res=1 errno=0 [ 1107.725532][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 1107.781873][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.799426][ T5914] usb 5-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1107.819253][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.063982][ T5914] usb 5-1: config 0 descriptor?? [ 1108.202869][ T5914] dvb-usb: found a 'TeVii S662' in warm state. [ 1108.222278][ T5914] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1108.240055][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 1108.298770][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1108.352769][ T5914] dvbdev: DVB: registering new adapter (TeVii S662) [ 1108.373762][ T5914] usb 5-1: media controller created [ 1108.392774][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 1108.402857][ T5914] dw2102: i2c transfer failed. [ 1108.418433][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 1108.444628][ T5914] dw2102: i2c transfer failed. [ 1108.460189][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 1108.475870][ T5914] dw2102: i2c transfer failed. [ 1108.494315][T28136] dvb-usb: bulk message failed: -22 (4/0) [ 1108.502070][T28136] dw2102: i2c transfer failed. [ 1108.563355][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 1108.577841][ T5914] dw2102: i2c transfer failed. [ 1108.584077][T28136] dw2102: i2c wr: len=99 is too big! [ 1108.584077][T28136] [ 1108.638220][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 1108.647309][ T5914] dw2102: i2c transfer failed. [ 1108.652211][ T5914] dvb-usb: bulk message failed: -22 (6/0) [ 1108.671142][ T5914] dw2102: i2c transfer failed. [ 1108.695765][ T5914] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1108.728625][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.783340][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 1108.799973][ T5914] dw2102: command 0x0e transfer failed. [ 1108.806608][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 1108.812420][ T5914] dw2102: command 0x0e transfer failed. [ 1109.031074][T28162] netlink: 'syz.0.3910': attribute type 6 has an invalid length. [ 1109.047113][T28159] syzkaller0: entered promiscuous mode [ 1109.052880][T28159] syzkaller0: entered allmulticast mode [ 1109.066960][T28159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1109.125778][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 1109.132576][ T5914] dw2102: command 0x0e transfer failed. [ 1109.140530][ T5912] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1109.158887][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 1109.173278][ T5914] dw2102: command 0x0e transfer failed. [ 1109.190049][ T5914] dvb-usb: bulk message failed: -22 (1/0) [ 1109.196881][ T5914] dw2102: command 0x51 transfer failed. [ 1109.202475][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 1109.214350][ T5914] dw2102: i2c probe for address 0x68 failed. [ 1109.221765][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 1109.228942][ T5914] dw2102: i2c probe for address 0x69 failed. [ 1109.238681][ T5914] dvb-usb: bulk message failed: -22 (5/0) [ 1109.247889][ T5914] dw2102: i2c probe for address 0x6a failed. [ 1109.260107][ T5914] dw2102: probing for demodulator failed. Is the external power switched on? [ 1109.277927][ T5914] dvb-usb: no frontend was attached by 'TeVii S662' [ 1109.317277][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1109.333550][ T5912] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 1109.353065][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.371642][ T5912] usb 2-1: config 0 descriptor?? [ 1109.377522][ T5914] rc_core: IR keymap rc-tt-1500 not found [ 1109.383282][ T5914] Registered IR keymap rc-empty [ 1109.399476][ T5914] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1109.412619][T28157] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1109.423731][ T5914] input: TeVii S662 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input153 [ 1109.473531][ T5914] dvb-usb: schedule remote query interval to 250 msecs. [ 1109.491808][ T5914] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1109.512062][ T5914] dvb-usb: TeVii S662 successfully initialized and connected. [ 1109.535789][ T5914] usb 5-1: USB disconnect, device number 38 [ 1109.704348][ T5914] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1109.864016][ T5912] belkin 0003:050D:3201.0086: unknown main item tag 0x0 [ 1109.875855][ T5912] belkin 0003:050D:3201.0086: unknown main item tag 0x0 [ 1109.882986][ T5912] belkin 0003:050D:3201.0086: unknown main item tag 0x0 [ 1109.911066][ T5912] belkin 0003:050D:3201.0086: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.1-1/input0 [ 1110.025429][ T5914] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1110.104591][T12851] usb 2-1: USB disconnect, device number 26 [ 1110.179816][ T5914] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1110.190197][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.199764][ T5914] usb 5-1: Product: syz [ 1110.204198][ T5914] usb 5-1: Manufacturer: syz [ 1110.210091][ T5914] usb 5-1: SerialNumber: syz [ 1110.220253][ T5914] usb 5-1: config 0 descriptor?? [ 1110.239905][ T5914] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1110.890358][T12851] usb 5-1: USB disconnect, device number 39 [ 1111.035537][ T5912] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1111.197634][ T5912] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.208988][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1111.216407][ T5912] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00 [ 1111.227153][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.239872][ T5912] usb 2-1: config 0 descriptor?? [ 1111.678860][ T5912] smartjoyplus 0003:6666:8801.0087: invalid report_size 7791 [ 1111.689435][ T5912] smartjoyplus 0003:6666:8801.0087: item 0 4 1 7 parsing failed [ 1111.699132][ T5912] smartjoyplus 0003:6666:8801.0087: parse failed [ 1111.707403][ T5912] smartjoyplus 0003:6666:8801.0087: probe with driver smartjoyplus failed with error -22 [ 1111.884268][T12851] usb 2-1: USB disconnect, device number 27 [ 1113.186919][ T5914] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1113.285453][T12851] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1113.345521][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 1113.354334][ T5914] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1113.366463][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.374478][ T5914] usb 5-1: Product: syz [ 1113.382454][ T5914] usb 5-1: Manufacturer: syz [ 1113.387552][ T5914] usb 5-1: SerialNumber: syz [ 1113.400769][ T5914] usb 5-1: config 0 descriptor?? [ 1113.410820][ T5914] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1113.449071][T12851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.460608][T12851] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=b3.49 [ 1113.474606][T12851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.488985][T12851] usb 1-1: config 0 descriptor?? [ 1113.818684][ T5914] gspca_sq930x: ucbus_write failed -71 [ 1114.035380][ T5914] gspca_sq930x: Sensor ov9630 not yet treated [ 1114.041735][ T5914] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 1114.055687][ T5914] usb 5-1: USB disconnect, device number 40 [ 1115.581577][T12851] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1115.618232][T12851] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1115.648359][T12851] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1115.662727][T12851] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1115.749279][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.758820][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.836215][T12851] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 1115.857333][T12851] usb 1-1: USB disconnect, device number 14 [ 1115.925401][ T5914] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1116.086301][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 1116.097434][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.109869][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.131391][ T5914] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1116.146076][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.169475][ T5914] usb 2-1: config 0 descriptor?? [ 1116.640741][ T5914] greenasia 0003:0E8F:0012.0088: item fetching failed at offset 0/3 [ 1116.656451][ T5914] greenasia 0003:0E8F:0012.0088: parse failed [ 1116.662623][ T5914] greenasia 0003:0E8F:0012.0088: probe with driver greenasia failed with error -22 [ 1116.804959][T26935] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1116.859503][ T5914] usb 2-1: USB disconnect, device number 28 [ 1116.955383][T26935] usb 1-1: Using ep0 maxpacket: 32 [ 1116.968248][T26935] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1116.990122][T26935] usb 1-1: config 2 has no interface number 0 [ 1116.998686][T26935] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1117.009975][T26935] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1117.026200][T26935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.034486][T26935] usb 1-1: Product: syz [ 1117.041731][T26935] usb 1-1: Manufacturer: syz [ 1117.048503][T26935] usb 1-1: SerialNumber: syz [ 1117.055530][T12851] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1117.210050][T12851] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1117.220471][T12851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.241333][T12851] usb 5-1: Product: syz [ 1117.249313][T12851] usb 5-1: Manufacturer: syz [ 1117.254205][T12851] usb 5-1: SerialNumber: syz [ 1117.276390][T12851] usb 5-1: config 0 descriptor?? [ 1117.496208][T12851] hso 5-1:0.0: Can't find BULK IN endpoint [ 1117.506694][T12851] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1117.752734][T26935] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1117.801543][T26935] asix 1-1:2.88: probe with driver asix failed with error -71 [ 1117.830154][T12851] usb 5-1: USB disconnect, device number 41 [ 1117.875697][ T5914] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1117.883898][T26935] usb 1-1: USB disconnect, device number 15 [ 1118.026145][ T5914] usb 2-1: device descriptor read/64, error -71 [ 1118.275427][ T5914] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1118.416185][ T5914] usb 2-1: device descriptor read/64, error -71 [ 1118.432769][T12837] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1118.525792][ T5914] usb usb2-port1: attempt power cycle [ 1118.531280][ T5879] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1118.687058][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1118.689452][T12837] usb 3-1: Using ep0 maxpacket: 16 [ 1118.705477][T12851] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1118.725405][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1118.740181][ T5879] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1118.751246][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.771607][ T5879] usb 4-1: config 0 descriptor?? [ 1118.782142][T28223] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1118.868726][T12837] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1118.875567][ T5914] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1118.897372][T12837] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1118.905497][T12851] usb 1-1: Using ep0 maxpacket: 8 [ 1118.916719][ T5914] usb 2-1: device descriptor read/8, error -71 [ 1118.925473][T12851] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.948108][T12851] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.952537][T12837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1118.959508][T12851] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1118.959548][T12851] usb 1-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1118.959571][T12851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.962547][T12851] usb 1-1: config 0 descriptor?? [ 1119.155481][ T5914] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1119.178431][ T5914] usb 2-1: device descriptor read/8, error -71 [ 1119.212607][T12837] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.240826][T12837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.295963][ T5914] usb usb2-port1: unable to enumerate USB device [ 1119.337085][T12837] usb 3-1: Product: syz [ 1119.341285][T12837] usb 3-1: Manufacturer: syz [ 1119.390059][T12837] usb 3-1: SerialNumber: syz [ 1119.469313][T12851] logitech 0003:046D:C50C.0089: unknown main item tag 0x1 [ 1119.496606][ T5879] hkems 0003:2006:0118.008A: item fetching failed at offset 5/7 [ 1119.518500][T12851] logitech 0003:046D:C50C.0089: hidraw0: USB HID v8.15 Device [HID 046d:c50c] on usb-dummy_hcd.0-1/input0 [ 1119.540143][ T5879] hkems 0003:2006:0118.008A: parse failed [ 1119.553197][ T5879] hkems 0003:2006:0118.008A: probe with driver hkems failed with error -22 [ 1119.769574][ T5879] usb 1-1: USB disconnect, device number 16 [ 1119.800175][T28230] fido_id[28230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1119.865651][T12851] usb 4-1: USB disconnect, device number 117 [ 1120.051513][T12837] usb 3-1: 0:2 : does not exist [ 1120.392921][T12851] usb 3-1: USB disconnect, device number 20 [ 1120.725736][ T5879] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1120.767410][T28235] syzkaller0: entered promiscuous mode [ 1120.773008][T28235] syzkaller0: entered allmulticast mode [ 1120.784047][T28235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1120.818450][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1120.887555][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.906117][ T5879] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.970167][ T5879] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1121.005805][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.067712][ T5879] usb 1-1: config 0 descriptor?? [ 1121.143201][ T5879] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1121.166531][ T5879] dvb-usb: bulk message failed: -22 (3/0) [ 1121.223030][ T5879] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1121.243289][ T5879] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1121.278841][ T5879] usb 1-1: media controller created [ 1121.300818][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1121.325963][ T5879] dvb-usb: bulk message failed: -22 (6/0) [ 1121.340656][ T5879] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1121.365484][T12851] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1121.403996][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input154 [ 1121.433652][ T5879] dvb-usb: schedule remote query interval to 150 msecs. [ 1121.452077][ T5879] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1121.494051][ T5879] usb 1-1: USB disconnect, device number 17 [ 1121.537643][T12851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1121.549333][T26935] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1121.558394][T12851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1121.583473][T12851] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1121.648205][ T5879] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1121.665557][T12851] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1121.709332][T12851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.721920][T12851] usb 3-1: config 0 descriptor?? [ 1121.740014][T26935] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1121.751622][T28242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1121.759699][T26935] usb 2-1: config 0 has no interface number 0 [ 1121.793389][T26935] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1121.804235][T26935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.822944][T26935] usb 2-1: Product: syz [ 1121.833041][T26935] usb 2-1: Manufacturer: syz [ 1121.838652][T26935] usb 2-1: SerialNumber: syz [ 1121.854372][T26935] usb 2-1: config 0 descriptor?? [ 1122.094718][T26935] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1122.115718][T26935] uvcvideo 2-1:0.64: No valid video chain found. [ 1122.135486][ T5879] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1122.154054][T26935] usb 2-1: USB disconnect, device number 33 [ 1122.309385][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.342015][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.377101][T12851] shield 0003:0955:7214.008B: item fetching failed at offset 3/5 [ 1122.385632][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1122.410039][T12851] shield 0003:0955:7214.008B: Parse failed [ 1122.419499][ T5879] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1122.432734][T12851] shield 0003:0955:7214.008B: probe with driver shield failed with error -22 [ 1122.448723][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.507569][ T5879] usb 5-1: config 0 descriptor?? [ 1122.597494][T26935] usb 3-1: USB disconnect, device number 21 [ 1122.695581][T12851] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1122.785734][ T5914] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1122.857421][T12851] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1122.868583][T12851] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1122.886062][T12851] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.906900][T12851] usb 1-1: config 220 has no interface number 2 [ 1122.921792][T12851] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1122.937605][T12851] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1122.950867][ T5879] hid-udraw 0003:20D6:CB17.008C: item fetching failed at offset 6/7 [ 1122.959954][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 1122.970205][T12851] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1122.988732][ T5879] hid-udraw 0003:20D6:CB17.008C: parse failed [ 1122.997477][T12851] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1123.007703][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.021633][ T5879] hid-udraw 0003:20D6:CB17.008C: probe with driver hid-udraw failed with error -22 [ 1123.036330][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.047360][T12851] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1123.065838][T12851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.084410][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1123.091911][T12851] usb 1-1: Product: syz [ 1123.097483][ T5914] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1123.108666][T12851] usb 1-1: Manufacturer: syz [ 1123.113277][T12851] usb 1-1: SerialNumber: syz [ 1123.126388][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.187919][ T5914] usb 4-1: config 0 descriptor?? [ 1123.328793][ T5879] usb 5-1: USB disconnect, device number 42 [ 1123.380808][T12851] usb 1-1: selecting invalid altsetting 0 [ 1123.428022][T12851] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1123.436571][T12851] uvcvideo 1-1:220.0: No valid video chain found. [ 1123.452575][T12851] usb 1-1: selecting invalid altsetting 0 [ 1123.467831][T12851] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1123.494673][T12851] usb 1-1: USB disconnect, device number 18 [ 1123.557828][T26935] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1123.715629][T26935] usb 3-1: Using ep0 maxpacket: 8 [ 1123.730331][T26935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1123.762334][T26935] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1123.799302][T26935] usb 3-1: string descriptor 0 read error: -22 [ 1123.808193][ T5914] cougar 0003:060B:500A.008D: unexpected long global item [ 1123.821103][T26935] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1123.832669][ T5914] cougar 0003:060B:500A.008D: parse failed [ 1123.839905][T26935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.854188][ T5914] cougar 0003:060B:500A.008D: probe with driver cougar failed with error -22 [ 1123.879770][T26935] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1123.928872][T26935] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1123.962129][T26935] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1123.989468][T26935] usb 3-1: media controller created [ 1123.997128][ T5879] usb 4-1: USB disconnect, device number 118 [ 1124.049432][T26935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1124.085447][ T5914] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1124.249408][ T5914] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.294064][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1124.309012][ T5914] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1124.321940][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.359813][ T5914] usb 2-1: config 0 descriptor?? [ 1124.966337][ T5914] hid-u2fzero 0003:20A0:4287.008E: hidraw0: USB HID v0.00 Device [HID 20a0:4287] on usb-dummy_hcd.1-1/input0 [ 1125.059219][ T5914] hid-u2fzero 0003:20A0:4287.008E: NitroKey U2F LED initialised [ 1125.087327][ T5914] hid-u2fzero 0003:20A0:4287.008E: NitroKey U2F RNG initialised [ 1125.108601][T26935] zl10353_read_register: readreg error (reg=127, ret==0) [ 1125.182934][ T5914] usb 2-1: USB disconnect, device number 34 [ 1125.274619][T28269] fido_id[28269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1125.308246][T26935] usb 3-1: USB disconnect, device number 22 [ 1125.835397][T26935] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1126.215420][T26935] usb 4-1: Using ep0 maxpacket: 8 [ 1126.237119][T26935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1126.286411][T26935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1126.376509][T26935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1126.415434][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1126.425440][T26935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1126.472832][T26935] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1126.505420][T26935] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1126.526224][T26935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.553750][T26935] usb 4-1: config 0 descriptor?? [ 1126.581230][T28272] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1126.606038][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 1126.626037][ T5879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1126.652258][ T5879] usb 3-1: config 0 has no interface number 0 [ 1126.693858][ T5879] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1126.745808][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.761028][ T5879] usb 3-1: Product: syz [ 1126.785308][ T5914] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1126.835432][ T5879] usb 3-1: Manufacturer: syz [ 1126.840105][ T5879] usb 3-1: SerialNumber: syz [ 1126.872199][ T5879] usb 3-1: config 0 descriptor?? [ 1126.914329][ T5879] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1126.927843][ T5879] usb 3-1: selecting invalid altsetting 1 [ 1126.940249][ T5879] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1126.967143][ T5879] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1127.026138][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1127.034581][ T5914] usb 2-1: config 0 has no interface number 0 [ 1127.045802][ T5879] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1127.056677][ T5879] usb 3-1: media controller created [ 1127.102339][ T5914] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1127.123176][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.140078][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.160756][ T5914] usb 2-1: Product: syz [ 1127.211503][ T5914] usb 2-1: Manufacturer: syz [ 1127.236927][ T5914] usb 2-1: SerialNumber: syz [ 1127.294254][ T5914] usb 2-1: config 0 descriptor?? [ 1127.343607][ T5914] usb 2-1: selecting invalid altsetting 1 [ 1127.377686][ T5879] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1127.392129][ T5914] dvb_ttusb_budget: ttusb_init_controller: error [ 1127.409418][ T5879] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1127.436697][ T5914] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1127.451007][ T5879] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1127.635766][ T5879] usb 3-1: USB disconnect, device number 23 [ 1127.723067][ T5914] DVB: Unable to find symbol stv0299_attach() [ 1127.910530][ T5914] DVB: Unable to find symbol tda8083_attach() [ 1127.943267][ T5914] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1128.039450][ T5914] usb 2-1: USB disconnect, device number 35 [ 1128.075728][ T5879] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1128.245618][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 1128.263031][T26314] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1128.283452][T26935] usb 4-1: USB disconnect, device number 119 [ 1128.296858][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1128.336392][ T5879] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1128.354603][ T5879] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1128.374740][ T5879] usb 1-1: Product: syz [ 1128.379882][ T5879] usb 1-1: Manufacturer: syz [ 1128.384619][ T5879] usb 1-1: SerialNumber: syz [ 1128.618524][ T5879] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1128.628884][ T5879] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1128.645030][ T5879] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1128.663297][ T5879] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1128.819554][ T5879] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1128.849522][ T5879] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1128.870246][ T5879] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1128.925701][T26935] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1129.063202][ T5879] usb 1-1: USB disconnect, device number 19 [ 1129.083596][ T5879] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1129.105520][T26935] usb 2-1: Using ep0 maxpacket: 32 [ 1129.119678][T26935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.131633][ T5879] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1129.163491][T26935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.177504][ T5879] visor 1-1:1.0: device disconnected [ 1129.197610][T26935] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1129.208768][T26935] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1129.218240][T26935] usb 2-1: Product: syz [ 1129.222520][T26935] usb 2-1: Manufacturer: syz [ 1129.233766][T26935] hub 2-1:4.0: USB hub found [ 1129.452123][T26935] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1129.815982][T26935] usb 2-1: USB disconnect, device number 36 [ 1130.690032][T26935] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1130.869532][T26935] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.896709][T26935] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1130.921205][T26935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1130.951007][T26935] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1130.970921][T26935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.998988][T26935] usb 1-1: config 0 descriptor?? [ 1131.116912][ T30] audit: type=1804 audit(1766848997.975:894): pid=28328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3973" name="file1" dev="ramfs" ino=70139 res=1 errno=0 [ 1131.499653][T26935] a4tech 0003:09DA:000A.008F: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0 [ 1131.575526][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1131.685312][ T30] audit: type=1804 audit(1766848998.555:895): pid=28329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3973" name="file1" dev="ramfs" ino=70139 res=1 errno=0 [ 1131.747756][ T5879] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1131.772800][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1131.799600][T26935] usb 1-1: USB disconnect, device number 20 [ 1131.841206][ T5879] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1131.885493][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.912266][ T5879] usb 3-1: config 0 descriptor?? [ 1132.388006][ T5879] wacom 0003:056A:0315.0090: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 1132.427598][ T5879] wacom 0003:056A:0315.0090: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.2-1/input0 [ 1132.471937][ T5879] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0315.0090/input/input155 [ 1132.639055][ T5879] usb 3-1: USB disconnect, device number 24 [ 1132.708882][T28351] fido_id[28351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1132.735844][ T5914] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1132.907567][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 1132.934703][ T5914] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1132.961922][ T5914] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1132.980521][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.996621][ T5914] usb 1-1: Product: syz [ 1133.001022][ T5914] usb 1-1: Manufacturer: syz [ 1133.007606][ T5914] usb 1-1: SerialNumber: syz [ 1133.023287][ T5914] usb 1-1: config 0 descriptor?? [ 1133.033572][ T5914] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1133.046127][ T5914] usb 1-1: setting power ON [ 1133.050665][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 1133.070837][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1133.082480][ T5914] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1133.102378][ T5914] usb 1-1: media controller created [ 1133.137852][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1133.166125][ T5914] usb 1-1: selecting invalid altsetting 6 [ 1133.172551][ T5914] usb 1-1: digital interface selection failed (-22) [ 1133.205726][ T5914] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1133.236011][ T5914] usb 1-1: setting power OFF [ 1133.240647][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 1133.290064][T28350] dvb-usb: bulk message failed: -22 (3/0) [ 1133.313184][ T5914] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1133.374133][ T5914] (NULL device *): no alternate interface [ 1133.654999][ T5914] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1133.747415][ T5914] usb 1-1: USB disconnect, device number 21 [ 1134.865646][ T5914] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1134.873329][ T5879] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1135.065897][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 1135.072836][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 1135.082104][ T5879] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1135.092271][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.102200][ T5914] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1135.113044][ T5914] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 42, changing to 9 [ 1135.166748][ T5879] usb 1-1: config 0 descriptor?? [ 1135.190675][ T5914] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 50169, setting to 1024 [ 1135.213716][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1135.226659][ T5914] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1135.242664][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.265608][ T5914] usb 3-1: Product: syz [ 1135.279150][ T5914] usb 3-1: Manufacturer: syz [ 1135.298414][ T5914] usb 3-1: SerialNumber: syz [ 1135.336519][ T5914] usb 3-1: config 0 descriptor?? [ 1135.415990][ T5879] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1135.434408][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1135.456539][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1135.463777][ T5879] usb 1-1: media controller created [ 1135.575956][ T5914] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input158 [ 1135.660296][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.865471][T26935] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1136.035483][T26935] usb 5-1: Using ep0 maxpacket: 32 [ 1136.064590][ T5879] DVB: Unable to find symbol dib7000p_attach() [ 1136.082665][ T5914] usb 3-1: USB disconnect, device number 25 [ 1136.089257][ C0] synaptics_usb 3-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 1136.101746][T26935] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1136.131095][ T5183] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1136.147298][ T5879] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1136.186972][T26935] usb 5-1: config 0 has no interface number 0 [ 1136.193114][T26935] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1136.273923][T26935] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1136.320086][T26935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.379862][T26935] usb 5-1: Product: syz [ 1136.384069][T26935] usb 5-1: Manufacturer: syz [ 1136.411821][T26935] usb 5-1: SerialNumber: syz [ 1136.417337][ T5879] rc_core: IR keymap rc-dib0700-rc5 not found [ 1136.436348][T28379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1136.445821][ T5879] Registered IR keymap rc-empty [ 1136.450987][ T5879] dvb-usb: could not initialize remote control. [ 1136.464209][T26935] usb 5-1: config 0 descriptor?? [ 1136.477648][ T5879] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1136.507083][ T5879] usb 1-1: USB disconnect, device number 22 [ 1136.566351][ T5879] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1137.483757][T26935] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1137.501942][T26935] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1137.553817][T26935] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1137.569896][T26935] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1137.601641][T26935] usb 5-1: USB disconnect, device number 43 [ 1137.776233][ T5914] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1137.805473][ T5879] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1137.940127][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 1137.948028][ T5914] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 1137.959151][ T5879] usb 3-1: config 0 has no interfaces? [ 1137.964657][ T5879] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1137.974620][ T5914] usb 2-1: config 0 has no interface number 0 [ 1137.984312][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.992975][ T5914] usb 2-1: config 0 interface 230 has no altsetting 0 [ 1138.003432][ T5914] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1138.016701][ T5879] usb 3-1: config 0 descriptor?? [ 1138.023589][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.048243][ T5914] usb 2-1: Product: syz [ 1138.052461][ T5914] usb 2-1: Manufacturer: syz [ 1138.068167][ T5914] usb 2-1: SerialNumber: syz [ 1138.085581][ T5914] usb 2-1: config 0 descriptor?? [ 1138.098387][ T5914] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 1138.127696][ T5914] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1138.229069][T28413] syzkaller0: entered promiscuous mode [ 1138.261765][ T5879] usb 3-1: USB disconnect, device number 26 [ 1138.396450][T28413] syzkaller0: entered allmulticast mode [ 1138.910805][T28412] tipc: Enabled bearer , priority 0 [ 1138.928198][T28415] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1138.965503][T26935] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1139.088263][T28411] tipc: Resetting bearer [ 1139.115742][T26935] usb 1-1: Using ep0 maxpacket: 16 [ 1139.140296][T26935] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1139.155905][T26935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.165621][T26935] usb 1-1: Product: syz [ 1139.184527][T26935] usb 1-1: Manufacturer: syz [ 1139.195654][T26935] usb 1-1: SerialNumber: syz [ 1139.221779][T26935] usb 1-1: config 0 descriptor?? [ 1139.242200][T26935] as10x_usb: device has been detected [ 1139.266403][T26935] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1139.300088][T26935] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1139.321405][T28411] tipc: Disabling bearer [ 1139.358061][T26935] as10x_usb: error during firmware upload part1 [ 1139.373469][T26935] Registered device Sky IT Digital Key (green led) [ 1139.508812][T28423] random: crng reseeded on system resumption [ 1139.561481][ T30] audit: type=1804 audit(1766849006.425:896): pid=28438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4020" name="file1" dev="ramfs" ino=70497 res=1 errno=0 [ 1139.590669][T26935] usb 1-1: USB disconnect, device number 23 [ 1139.627489][T26935] Unregistered device Sky IT Digital Key (green led) [ 1139.631164][T26935] as10x_usb: device has been disconnected [ 1139.849234][ T30] audit: type=1804 audit(1766849006.675:897): pid=28439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4020" name="file1" dev="ramfs" ino=70497 res=1 errno=0 [ 1140.743155][ T5914] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 1140.825542][ T5914] usb 2-1: USB disconnect, device number 37 [ 1141.205857][ T5914] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1141.365385][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 1141.372735][ T5914] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 1141.392305][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.409418][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.422521][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.447155][T28463] tipc: Enabling of bearer rejected, already enabled [ 1141.457049][ T5914] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1141.468412][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.480542][ T5914] usb 3-1: config 0 descriptor?? [ 1141.513561][ T5914] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input160 [ 1141.538039][T28464] tipc: Resetting bearer [ 1141.597240][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1141.669124][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1141.693702][T28463] sch_tbf: burst 127 is lower than device syzkaller0 mtu (299) ! [ 1141.745825][T27324] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1141.779656][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1141.838689][T28459] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1141.861067][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1141.883099][T26935] usb 3-1: USB disconnect, device number 27 [ 1141.945582][ T5914] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1142.117954][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.130507][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.157220][ T5914] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1142.200351][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1142.213025][ T5914] usb 2-1: SerialNumber: syz [ 1142.474014][ T5914] usb 2-1: 0:2 : does not exist [ 1142.496817][ T5914] usb 2-1: USB disconnect, device number 38 [ 1142.543082][T21371] udevd[21371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1142.616441][ T5879] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1142.776963][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 1142.784155][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.816859][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.828985][ T5879] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.848649][ T5879] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1142.859897][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1142.877356][ T5879] usb 1-1: Product: syz [ 1142.881624][ T5879] usb 1-1: Manufacturer: syz [ 1142.900299][ T5879] usb 1-1: SerialNumber: syz [ 1142.947514][ T5879] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input161 [ 1142.989555][ T30] audit: type=1804 audit(1766849009.855:898): pid=28479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4036" name="file1" dev="ramfs" ino=69563 res=1 errno=0 [ 1143.409970][T26935] usb 1-1: USB disconnect, device number 24 [ 1143.483833][T26935] appletouch 1-1:1.0: input: appletouch disconnected [ 1143.505554][ T5879] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1143.665525][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 1143.677470][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1143.691592][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1143.734346][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1143.747787][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.774674][ T5879] usb 2-1: Product: syz [ 1143.780005][ T5879] usb 2-1: Manufacturer: syz [ 1143.784610][ T5879] usb 2-1: SerialNumber: syz [ 1143.796043][ T5879] usb 2-1: config 0 descriptor?? [ 1143.809188][ T5879] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1143.933739][ T5879] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1143.947998][ T30] audit: type=1804 audit(1766849010.815:899): pid=28488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4036" name="file1" dev="ramfs" ino=69563 res=1 errno=0 [ 1144.452666][ T5879] em28xx 2-1:0.0: chip ID is em28178 [ 1144.688531][ T5914] usb 2-1: USB disconnect, device number 39 [ 1144.696564][ T5914] em28xx 2-1:0.0: Disconnecting em28xx [ 1144.704545][ T5914] em28xx 2-1:0.0: Freeing device [ 1144.735408][ T5879] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1144.901186][ T5879] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1144.910764][ T5879] usb 1-1: config 0 has no interface number 0 [ 1144.918301][ T5879] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1144.946667][ T5879] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 1145.014661][ T5879] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1145.055716][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.101527][ T5879] usb 1-1: config 0 descriptor?? [ 1145.126869][T28492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1145.135425][ T5914] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1145.158508][ T5879] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1145.295509][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 1145.333396][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1145.405820][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1145.437237][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1145.458302][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.486324][ T5914] usb 4-1: Product: syz [ 1145.494936][ T5914] usb 4-1: Manufacturer: syz [ 1145.499597][ T5914] usb 4-1: SerialNumber: syz [ 1145.538012][ T5914] usb 4-1: config 0 descriptor?? [ 1145.611061][ T5914] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1145.656022][ T5914] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1146.136990][ T5879] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1146.284089][ T5914] em28xx 4-1:0.0: chip ID is em2800 [ 1146.319163][ T5879] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 1146.352915][ T5912] usb 1-1: USB disconnect, device number 25 [ 1146.391652][ T5879] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1146.452966][ T5879] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 1146.484469][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1146.492255][ T5914] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1146.510095][ T5914] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1146.520154][ T5879] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1146.536168][ T5914] em28xx 4-1:0.0: No AC97 audio processor [ 1146.550514][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1146.635452][ T5879] usb 2-1: Product: syz [ 1146.640173][ T5879] usb 2-1: Manufacturer: syz [ 1146.664484][ T5879] usb 2-1: SerialNumber: syz [ 1146.976133][ T5879] usb 2-1: config 0 descriptor?? [ 1146.981843][T28507] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1146.991661][ T5914] usb 4-1: USB disconnect, device number 120 [ 1147.054880][ T5912] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1147.085386][ T5914] em28xx 4-1:0.0: Disconnecting em28xx [ 1147.093233][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1147.225430][ T5912] usb 5-1: device descriptor read/64, error -32 [ 1147.263516][ T5914] em28xx 4-1:0.0: Freeing device [ 1147.272199][ T5879] usb 2-1: selecting invalid altsetting 0 [ 1147.485445][ T5912] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1147.526010][ T5879] usb 2-1: USB disconnect, device number 40 [ 1147.651361][T21435] udevd[21435]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.712988][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1147.803568][ T5912] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1147.837717][ T5912] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.936747][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1147.977625][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1148.068658][ T5912] usb 5-1: Product: syz [ 1148.072876][ T5912] usb 5-1: Manufacturer: syz [ 1148.148302][ T5912] usb 5-1: SerialNumber: syz [ 1148.524212][ T5912] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1149.077996][T25137] usb 5-1: USB disconnect, device number 45 [ 1149.238840][T25137] usblp0: removed [ 1150.017358][ T5912] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1150.255485][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 1150.337750][ T5912] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1150.361198][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1150.392061][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1150.524734][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1150.542044][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1150.585864][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1150.620784][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.932556][ T5912] usb 3-1: usb_control_msg returned -32 [ 1150.978282][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 1151.122326][T28542] tipc: Enabled bearer , priority 0 [ 1151.309456][T28548] syzkaller0: entered promiscuous mode [ 1151.409785][T28548] syzkaller0: entered allmulticast mode [ 1151.547496][ T5912] usb 3-1: USB disconnect, device number 28 [ 1152.029346][T28549] tipc: Resetting bearer [ 1152.199197][T28536] tipc: Resetting bearer [ 1152.836038][T28536] tipc: Disabling bearer [ 1152.947886][T28569] input: syz1 as /devices/virtual/input/input162 [ 1152.988479][T28569] input: failed to attach handler leds to device input162, error: -6 [ 1153.510099][T28577] netlink: 'syz.1.4075': attribute type 12 has an invalid length. [ 1153.525691][T28577] netlink: 'syz.1.4075': attribute type 29 has an invalid length. [ 1153.543874][T28577] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1171.074333][ C0] sched: DL replenish lagged too much [ 1177.566186][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.580833][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.052232][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1232.633405][T26314] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1234.081456][T26314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1234.804590][T28591] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1239.085187][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.099443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.083731][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1244.141342][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1244.183427][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1244.355148][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1244.426217][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1249.113840][ T5835] Bluetooth: hci3: command tx timeout [ 1251.142001][T26314] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1251.441454][T26314] Bluetooth: hci3: command tx timeout [ 1251.457277][T26314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1252.032999][T28614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1252.240856][T28614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1252.349384][T28614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1253.082608][T28621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1253.547631][T28614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1253.679259][T28621] Bluetooth: hci3: command tx timeout [ 1253.973650][T28621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1254.400633][T28621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1255.684118][T28621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1255.755123][T28621] Bluetooth: hci3: command tx timeout [ 1257.173928][T28621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1257.392446][T28614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1257.449642][T28614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1257.855625][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1258.010907][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1258.987624][ T5835] Bluetooth: hci5: command tx timeout [ 1259.992701][ T5835] Bluetooth: hci4: command tx timeout [ 1260.646015][ T5835] Bluetooth: hci0: command tx timeout [ 1261.037002][ T5835] Bluetooth: hci5: command tx timeout [ 1262.356653][ T5835] Bluetooth: hci4: command tx timeout [ 1262.718413][ T5835] Bluetooth: hci0: command tx timeout [ 1263.524267][ T5835] Bluetooth: hci5: command tx timeout [ 1264.509336][ T5835] Bluetooth: hci4: command tx timeout [ 1264.798099][ T5835] Bluetooth: hci0: command tx timeout [ 1265.654234][ T5835] Bluetooth: hci5: command tx timeout [ 1266.632101][ T5835] Bluetooth: hci4: command tx timeout [ 1267.032101][ T5835] Bluetooth: hci0: command tx timeout [ 1281.237942][T26314] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1281.831373][T26314] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1282.246377][T28614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1282.520818][T28621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1282.611027][T28621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1282.675795][T28614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1282.830332][T28614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1282.877431][T28614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1283.692057][T28621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1284.443796][T28621] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1285.590499][T26314] Bluetooth: hci7: command tx timeout [ 1287.915560][T26314] Bluetooth: hci7: command tx timeout [ 1288.191340][T28621] Bluetooth: hci6: command tx timeout [ 1290.074723][T28621] Bluetooth: hci7: command tx timeout [ 1290.235112][T28621] Bluetooth: hci6: command tx timeout [ 1292.154957][T28621] Bluetooth: hci7: command tx timeout [ 1292.316228][T28621] Bluetooth: hci6: command tx timeout [ 1294.676948][T28621] Bluetooth: hci6: command tx timeout [ 1300.169072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.183221][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.896254][T26314] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1307.523641][T26314] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1307.743230][T26314] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1310.822380][T26314] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1313.128398][T28621] Bluetooth: hci8: Opcode 0x0c38 failed: -110 [ 1313.152760][T26314] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1314.323268][T26314] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1314.672957][T26314] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1314.786033][T26314] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1315.003958][T28621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1315.073421][T28621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1315.309691][T28614] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1316.131878][T28614] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1316.453158][T28621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1316.499116][T28621] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1316.618347][T28621] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1316.669489][T28621] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1318.147209][ T5835] Bluetooth: hci8: command tx timeout [ 1318.587924][ T5835] Bluetooth: hci9: command 0x1009 tx timeout [ 1319.168582][T28614] Bluetooth: hci10: Opcode 0x1009 failed: -110 [ 1319.264013][T26314] Bluetooth: hci9: Opcode 0x1009 failed: -110 [ 1319.539196][ T5835] Bluetooth: hci10: command 0x1009 tx timeout [ 1321.753328][T28642] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1321.792044][ T5835] Bluetooth: hci9: unexpected event for opcode 0x1009 [ 1322.074331][T26314] Bluetooth: hci8: command tx timeout [ 1322.241332][T28640] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1322.359241][T26314] Bluetooth: hci10: unexpected event for opcode 0x1009 [ 1324.536338][T28649] Bluetooth: hci8: command tx timeout [ 1327.133974][T28649] Bluetooth: hci8: command tx timeout [ 1339.153550][T18369] tipc: Resetting bearer [ 1356.428198][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1356.851716][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1357.362384][T26314] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1357.383007][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1357.649086][T26314] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1357.781454][T26314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1357.823197][T26314] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1357.860059][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1358.439665][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1358.571875][T26314] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1360.981190][ T5839] Bluetooth: hci1: command tx timeout [ 1361.665721][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.694337][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.005428][ T5839] Bluetooth: hci1: command tx timeout [ 1364.079871][ T5835] Bluetooth: hci9: command tx timeout [ 1366.225015][ T5835] Bluetooth: hci1: command tx timeout [ 1366.228631][ T5839] Bluetooth: hci9: command tx timeout [ 1368.308436][ T5839] Bluetooth: hci1: command tx timeout [ 1368.716945][ T5839] Bluetooth: hci9: command tx timeout [ 1370.210870][T26314] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1370.299907][T26314] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1370.448013][T26314] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1370.662356][T28649] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1370.873016][T26314] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1370.889430][T28649] Bluetooth: hci9: command tx timeout [ 1371.002143][T28649] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1371.347562][T26314] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1371.350714][T28649] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1371.429155][T26314] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1371.677702][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1374.046703][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 1374.647366][ T5839] Bluetooth: hci10: command tx timeout [ 1377.079333][T28649] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1377.224435][ T5835] Bluetooth: hci10: command tx timeout [ 1377.263499][T28649] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1377.354326][T28621] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1378.928664][T28649] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1379.276752][T28677] Bluetooth: hci10: command tx timeout [ 1379.277596][T28621] Bluetooth: hci5: command 0x0406 tx timeout [ 1379.522372][T28649] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1381.375825][T28621] Bluetooth: hci10: command tx timeout [ 1382.004735][ T5916] kworker/1:5 (5916) used greatest stack depth: 15808 bytes left [ 1384.083569][T28649] Bluetooth: hci4: command 0x0406 tx timeout [ 1384.797416][T28649] Bluetooth: hci0: command 0x0406 tx timeout [ 1392.400264][T28614] Bluetooth: hci11: command tx timeout [ 1394.957769][T28614] Bluetooth: hci11: command tx timeout [ 1397.033212][T28614] Bluetooth: hci11: command tx timeout [ 1399.268908][T28614] Bluetooth: hci11: command tx timeout [ 1411.632397][T28686] Bluetooth: hci6: command 0x0406 tx timeout [ 1413.706896][ T5835] Bluetooth: hci7: command tx timeout [ 1413.996704][ T31] INFO: task syz-executor:28627 blocked for more than 143 seconds. [ 1414.004669][ T31] Tainted: G L syzkaller #0 [ 1414.080103][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1414.503070][ T31] task:syz-executor state:D stack:27128 pid:28627 tgid:28627 ppid:1 task_flags:0x400140 flags:0x10080002 [ 1416.459255][ T31] Call Trace: [ 1416.462966][ T31] [ 1416.483123][ T31] __schedule+0x149b/0x4fd0 [ 1416.891548][ T31] ? stack_depot_save_flags+0x33/0x810 [ 1416.906008][ T31] ? __pfx___schedule+0x10/0x10 [ 1416.910911][ T31] ? schedule+0x91/0x360 [ 1417.604616][ T31] schedule+0x165/0x360 [ 1417.626416][ T31] schedule_preempt_disabled+0x13/0x30 [ 1417.631928][ T31] __mutex_lock+0x7e6/0x1350 [ 1418.345305][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1418.350140][ T31] ? register_netdevice_notifier_net+0x1a/0xa0 [ 1420.204887][ T5835] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1420.215224][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1420.220308][ T31] ? net_generic+0x1e/0x240 [ 1420.360281][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1420.424426][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1420.451399][ T31] ? net_generic+0x1e/0x240 [ 1420.534225][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1420.749459][T28692] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1420.808844][T28692] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1421.102725][T28692] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1421.408312][ T31] register_netdevice_notifier_net+0x1a/0xa0 [ 1421.414363][ T31] ops_init+0x35c/0x5c0 [ 1422.244574][ T31] setup_net+0x110/0x330 [ 1422.520893][ T31] ? __pfx_setup_net+0x10/0x10 [ 1422.591300][ T31] ? preinit_net+0x47d/0x780 [ 1422.793218][T28685] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1423.536668][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.847542][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.878106][ T31] copy_net_ns+0x3e3/0x570 [ 1423.882591][ T31] create_new_namespaces+0x3e7/0x6a0