last executing test programs: 9.996111541s ago: executing program 1 (id=536): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0644ae9ff467d855680000"], 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200004a8500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.114991243s ago: executing program 1 (id=542): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(r2, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.839119979s ago: executing program 2 (id=553): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x188c1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r1) r3 = dup2(r2, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) 6.763506911s ago: executing program 0 (id=554): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 6.727084562s ago: executing program 0 (id=555): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='pimreg0\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) syz_open_dev$dvb_demux(0x0, 0x1, 0x30640) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000019c0)=@ceph_nfs_confh={0x10, 0x2, {0xfffffffffffffffc, 0x8}}, 0x200100) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff79a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) 5.083442963s ago: executing program 1 (id=559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0xa, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa58fffe0000002f9078ac1414bbe0000001248088a800000003"], 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) unlinkat(r5, &(0x7f0000000700)='./file0\x00', 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x400, 0x70bd2d, 0x25dfdbff, {{'drbg_nopr_sha256\x00'}, '\x00', '\x00', 0x400, 0x400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) recvmsg(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 5.033755064s ago: executing program 3 (id=560): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 5.002769205s ago: executing program 2 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002228000000b350360009176f4044e6a3a02da4f0a37a2400000000"], 0x0}, 0x0) 4.886458828s ago: executing program 3 (id=562): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) read(r1, &(0x7f0000001000)=""/215, 0xd7) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.632347285s ago: executing program 3 (id=563): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r2, 0x4, 0xc00) read$char_usb(r2, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 4.491080988s ago: executing program 1 (id=565): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x200040a0) 4.436140399s ago: executing program 1 (id=567): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) read$char_usb(r1, 0x0, 0x0) 4.207169285s ago: executing program 2 (id=568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) 4.127538307s ago: executing program 2 (id=570): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.62519639s ago: executing program 0 (id=572): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x188c1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) syz_usb_disconnect(r0) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) 2.80014954s ago: executing program 3 (id=576): socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@private=0xa010101, 0x4908, 0x10000, 0x1}}, 0x44) r2 = socket$inet(0x2, 0x1, 0x6) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x4, @loopback, 0x200}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="7b8655c6b09a46fcd6e6ea7b2c8caff740cea82ce0fa692072d686062e92aa8e574a8f55cedfa4459be4ffb413db3a245909773b62014e366176542926d74ba5bd0ccdf41142f40dbda2573c5c5ac761d6ed04374e4128fb", 0x58}, {&(0x7f0000000300)="55d0c914ccbdc27b7be574c15b98a1c76709839250a7668f9ab44ecbb941a9b7f4eaa846c1a1b1940275d3e0531b79c42ed04a060236a641e179564cd2a1773aa5ed52d2f0e5e0b171d6fb2a919dc0c7ebe58828", 0x54}, {&(0x7f0000000380)="aae77e54e36236798e556003d2a241e205bce7aa4db9b5adedf667cc646224495de23f8a579579fba9a491255cb7c8967f8f33f0581402cdc4eb7804907211cad5f020e3e32241153a68d0ebed1d4308971083addd35f761f95e7e93dd3b500c7baf2914151e750a66038fd7a7f9f246f1a2e61b639032a24e81503a9b606e03666def2be5c9cdc125f3ce35a4506c954cc6b9", 0x93}, {&(0x7f0000000680)="55e3de85279ae278ac93c3544ea7dd8a885e7dc8874060a322e1681f1f343cff6f7b327ba10a615d5b5c71682090642f7a89ace843020fbaa6f0d18466842c85527bfc0fc52b4d4a3c7034a7c06e1c4cc5fb6c605e99b8aa5305b769717b16add3af36518c89e4253d8ef6715d8c7ab3c687fcf5465d8799900b99253ca2e90b175b51b344151ceb7664fbac8db1f5e48f81cb318dcd", 0x96}, {&(0x7f0000000500)="914155c4d68e9a0a38df0a645c664aeb0b29ae2c63829da9257f08d1e178", 0x1e}, {&(0x7f0000000540)='G0b', 0x3}], 0x6, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x53c}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa}}], 0x60}, 0x0) poll(&(0x7f0000000600)=[{r1, 0xf514}, {r2, 0x10420}, {0xffffffffffffffff, 0x310}, {r0, 0x2000}, {0xffffffffffffffff, 0xaa995775df62e7e8}, {r1, 0x8080}], 0x6, 0x9) connect(r2, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 1.924140432s ago: executing program 3 (id=580): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) 1.864861323s ago: executing program 0 (id=581): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005"], 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0xf5, 0x1, 0xfffffe0000000003, 0xea11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='%.,+\x00', r2) 1.824851574s ago: executing program 3 (id=582): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='pimreg0\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) syz_open_dev$dvb_demux(0x0, 0x1, 0x30640) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000019c0)=@ceph_nfs_confh={0x10, 0x2, {0xfffffffffffffffc, 0x8}}, 0x200100) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff79a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff460400007fffffff7b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) 1.486650823s ago: executing program 4 (id=586): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.476711383s ago: executing program 4 (id=587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0xa, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa58fffe0000002f9078ac1414bbe0000001248088a800000003"], 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) unlinkat(r5, &(0x7f0000000700)='./file0\x00', 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x400, 0x70bd2d, 0x25dfdbff, {{'drbg_nopr_sha256\x00'}, '\x00', '\x00', 0x400, 0x400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r6, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.295010777s ago: executing program 1 (id=588): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r2, 0x4, 0xc00) read$char_usb(r2, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 1.18289869s ago: executing program 4 (id=589): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x200040a0) 1.143120241s ago: executing program 4 (id=590): syz_emit_ethernet(0x102b, &(0x7f00000067c0)=ANY=[], 0x0) 1.106798632s ago: executing program 4 (id=591): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="460609000000000014003500326d616e3100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000000)=@ll={0x11, 0x16, 0x0, 0x1, 0x40, 0x6, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)="b611", 0x2}, {0x0, 0x2f}], 0x2}, 0x20000010) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000001c0)={0x2000000d}) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0xfffffdda) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x10200, 0x1, 0x70000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010027bd70010000d3a05ffa0000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004000180"], 0x34}}, 0x0) 443.843609ms ago: executing program 4 (id=592): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400202, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902480001010600000904"], 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00), 0x0, 0x40022001, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x4080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, r0, 0x200000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000002000)={0xa, 0x4e1e, 0x7579cf98, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x103}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 219.693604ms ago: executing program 2 (id=593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x200080c0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000200)) listen(r0, 0x80010040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x10000000, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 114.483906ms ago: executing program 0 (id=594): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x47b7, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000000d00000000000000000000cf28fb70fcbeeebc05ab00"], 0x0, 0x32, 0x0, 0x2}, 0x28) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) 62.744468ms ago: executing program 2 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2f) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r7, @ANYBLOB="28001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="004000001c5c40060000"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884) 0s ago: executing program 0 (id=596): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$nci(r0, 0x0, 0x6) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11}, 0x14) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f00000001c0)=""/45, 0x20000, 0x800, 0x8}, 0x20) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000200), 0x100) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x703, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x2, {0x1, 0x7, 0x0, 0x3}}, 0x7) getpid() socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x4000000) syz_emit_ethernet(0x2e, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0xf, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x1, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x8f, &(0x7f0000000300)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e1f, 0x6d, 0x0, @opaque="4c8cf50bfa61a54413f9205fee44b4676b72e953de01f9237aeb80540ce89f7a065bd911cfd077c1e2e8f20e01573da43b061118122b31a0ed44f21935d0de261cad5b5bec810baa766f586202be0af4d26d0d19222ce3615e02f9bc88bd3229fe647bd95e"}}}}}, 0x0) kernel console output (not intermixed with test programs): 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.521116][ T1339] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.554710][ T1339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.581484][ T1339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.611272][ T1339] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.631108][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 83.656469][ T1339] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.684372][ T1339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.766223][ T1339] usb 2-1: config 0 descriptor?? [ 84.069465][ T1339] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.452790][ T4235] usb 2-1: USB disconnect, device number 3 [ 84.472026][ T4235] usblp0: removed [ 84.955582][ T7] usb 4-1: USB disconnect, device number 3 [ 85.206854][ T4235] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.233802][ T4393] binder: 4392:4393 ioctl c0306201 0 returned -14 [ 85.496778][ T4235] usb 2-1: Using ep0 maxpacket: 16 [ 85.576990][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.637053][ T4235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.647695][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 85.661445][ T4235] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 85.670597][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.684438][ T4235] usb 2-1: config 0 descriptor?? [ 85.816780][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 85.846964][ T1339] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.941079][ T4233] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 85.959348][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.970800][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 85.982247][ T4233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 85.992468][ T4233] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.077042][ T4233] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 86.092293][ T4233] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 86.115047][ T4233] usb 5-1: Manufacturer: syz [ 86.116754][ T1339] usb 4-1: Using ep0 maxpacket: 16 [ 86.145250][ T4233] usb 5-1: config 0 descriptor?? [ 86.267156][ T1339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.292431][ T1339] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.383482][ T7] usb 2-1: USB disconnect, device number 4 [ 86.400577][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 86.410815][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 86.412529][ T1339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.419731][ T4395] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 86.446461][ T1339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.454909][ T1339] usb 4-1: SerialNumber: syz [ 86.526768][ T4233] rc_core: IR keymap rc-hauppauge not found [ 86.532940][ T4233] Registered IR keymap rc-empty [ 86.558037][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.606832][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.638195][ T4233] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 86.655299][ T4233] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 86.687053][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.736834][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.765188][ T1339] usb 4-1: USB disconnect, device number 4 [ 86.786824][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.839704][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.891701][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 86.956888][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 87.031889][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 87.039708][ T4431] binder: 4429:4431 ioctl c0306201 0 returned -14 [ 87.086902][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 87.154534][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 87.173707][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.212719][ T4233] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 87.262248][ T4233] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 87.285234][ T4233] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 87.332747][ T4233] usb 5-1: USB disconnect, device number 2 [ 87.466858][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 87.596963][ T7] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 87.610365][ T7] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 87.651941][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 87.678559][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.699681][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.738595][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.833197][ T7] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 87.911884][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.959335][ T7] usb 1-1: config 0 descriptor?? [ 88.110632][ T4233] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 88.218991][ T7] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 88.236889][ T4273] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.266835][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.476979][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 88.494275][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.505010][ T4273] usb 3-1: Using ep0 maxpacket: 16 [ 88.530616][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 88.598961][ T4236] usb 1-1: USB disconnect, device number 3 [ 88.609958][ T4236] usblp0: removed [ 88.632115][ T4273] usb 3-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 88.651877][ T4273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.664639][ T4273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 88.677024][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.681286][ T4233] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 88.693105][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.711709][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.720096][ T4273] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 88.730345][ T1107] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 88.730389][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.732280][ T1107] usb 4-1: config 0 descriptor?? [ 88.740798][ T4233] usb 2-1: Product: syz [ 88.770782][ T4233] usb 2-1: Manufacturer: syz [ 88.775424][ T4233] usb 2-1: SerialNumber: syz [ 88.780188][ T4273] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.809330][ T4233] usb 2-1: config 0 descriptor?? [ 88.847694][ T4233] hub 2-1:0.0: bad descriptor, ignoring hub [ 88.855538][ T4233] hub: probe of 2-1:0.0 failed with error -5 [ 88.876954][ T4273] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.893940][ T4233] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 88.907360][ T4273] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 88.918613][ T4273] usb 3-1: Manufacturer: syz [ 88.927023][ T4273] usb 3-1: config 0 descriptor?? [ 89.112401][ T4469] Zero length message leads to an empty skb [ 89.170317][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 89.199036][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 89.216839][ T1107] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.226582][ T4456] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 89.449625][ T4273] rc_core: IR keymap rc-hauppauge not found [ 89.455550][ T4273] Registered IR keymap rc-empty [ 89.496989][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.498439][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 89.558746][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.591407][ T4273] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 89.632295][ T4273] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 89.666839][ T1107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.692116][ T1107] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 89.716919][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.774324][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.814223][ T7] usb 4-1: USB disconnect, device number 5 [ 89.836854][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.837150][ T1107] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.885508][ T4490] binder: BINDER_SET_CONTEXT_MGR already set [ 89.886853][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 89.893836][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.926792][ T4490] binder: 4489:4490 ioctl 4018620d 200000004a80 returned -16 [ 89.944602][ T1107] usb 5-1: SerialNumber: syz [ 89.957494][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 90.016888][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 90.078885][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 90.116819][ T1339] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.136873][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 90.186815][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 90.222571][ T13] usb 2-1: USB disconnect, device number 5 [ 90.236817][ T4273] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 90.272422][ T4273] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 90.290894][ T4273] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 90.351434][ T1107] usb 5-1: USB disconnect, device number 3 [ 90.370072][ T4273] usb 3-1: USB disconnect, device number 4 [ 90.538421][ T1339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.597263][ T1339] usb 1-1: not running at top speed; connect to a high speed hub [ 90.709420][ T1339] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 90.742010][ T1339] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 90.802609][ T1339] usb 1-1: config 5 has no interface number 0 [ 90.859422][ T1339] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 90.920791][ T4499] netlink: 'syz.1.71': attribute type 13 has an invalid length. [ 91.097093][ T1339] usb 1-1: config 5 interface 246 has no altsetting 0 [ 91.301115][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.407162][ T1339] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 91.418245][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.467453][ T1339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.500030][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.567431][ T1339] usb 1-1: Product: syz [ 91.582205][ T1339] usb 1-1: Manufacturer: syz [ 91.600284][ T1339] usb 1-1: SerialNumber: syz [ 91.836106][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.951591][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.980543][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.448747][ T4527] fuse: Bad value for 'fd' [ 92.626916][ T1107] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.752141][ T21] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 92.887196][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 93.032554][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.048329][ T1339] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 93.068239][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.081772][ T154] usb 1-1: Failed to submit usb control message: -71 [ 93.102809][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 93.115515][ T1339] usb 1-1: USB disconnect, device number 4 [ 93.116927][ T21] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 93.125334][ T154] usb 1-1: unable to get target info from device [ 93.137863][ T1107] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 93.147268][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.162521][ T1107] usb 4-1: config 0 descriptor?? [ 93.168714][ T154] usb 1-1: could not get target info (-71) [ 93.175287][ T154] usb 1-1: could not probe fw (-71) [ 93.183463][ T21] usb 3-1: config 0 has no interface number 0 [ 93.357043][ T21] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 93.370767][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.382292][ T21] usb 3-1: Product: syz [ 93.391071][ T21] usb 3-1: Manufacturer: syz [ 93.396010][ T21] usb 3-1: SerialNumber: syz [ 93.414543][ T21] usb 3-1: config 0 descriptor?? [ 93.934562][ T1339] usb 4-1: USB disconnect, device number 6 [ 94.137130][ T21] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 94.156102][ T21] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 94.175653][ T21] asix: probe of 3-1:0.251 failed with error -71 [ 94.199699][ T21] usb 3-1: USB disconnect, device number 5 [ 94.214433][ T4560] netlink: 'syz.0.92': attribute type 13 has an invalid length. [ 94.337185][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.376575][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.411911][ T4560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.656776][ T1339] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 94.920186][ T3156] cfg80211: failed to load regulatory.db [ 95.107544][ T1339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.167014][ T1339] usb 2-1: not running at top speed; connect to a high speed hub [ 95.286990][ T1339] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 95.298065][ T1339] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 95.330581][ T1339] usb 2-1: config 5 has no interface number 0 [ 95.346983][ T1339] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 95.377125][ T1339] usb 2-1: config 5 interface 246 has no altsetting 0 [ 95.557347][ T1339] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 95.571747][ T1339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.590613][ T1339] usb 2-1: Product: syz [ 95.595689][ T1339] usb 2-1: Manufacturer: syz [ 95.600818][ T1339] usb 2-1: SerialNumber: syz [ 95.755818][ T4584] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.186816][ T3156] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.376873][ T4233] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 96.415535][ T4602] netlink: 'syz.0.109': attribute type 13 has an invalid length. [ 96.432767][ T3156] usb 5-1: Using ep0 maxpacket: 16 [ 96.441833][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.459333][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.473967][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.558127][ T3156] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.575154][ T3156] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 96.598986][ T3156] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 96.619007][ T3156] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.635679][ T3156] usb 5-1: config 0 descriptor?? [ 96.757110][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 96.778753][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 96.952573][ T4233] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 96.965256][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.982140][ T4233] usb 3-1: Product: syz [ 96.995807][ T4233] usb 3-1: Manufacturer: syz [ 97.002184][ T4233] usb 3-1: SerialNumber: syz [ 97.012093][ T4233] usb 3-1: config 0 descriptor?? [ 97.058534][ T4233] hub 3-1:0.0: bad descriptor, ignoring hub [ 97.081575][ T4233] hub: probe of 3-1:0.0 failed with error -5 [ 97.105506][ T4233] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 97.135569][ T7] usb 5-1: USB disconnect, device number 4 [ 97.470896][ T1339] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.497080][ T4326] usb 2-1: Failed to submit usb control message: -71 [ 97.512508][ T4326] usb 2-1: unable to send the bmi data to the device: -71 [ 97.522900][ T1339] usb 2-1: USB disconnect, device number 6 [ 97.565540][ T4326] usb 2-1: unable to get target info from device [ 97.603199][ T4326] usb 2-1: could not get target info (-71) [ 97.631935][ T4326] usb 2-1: could not probe fw (-71) [ 99.244132][ T4638] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.573185][ T4643] device syzkaller0 entered promiscuous mode [ 99.916746][ T21] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 100.142349][ T4618] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 100.327002][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.376993][ T21] usb 4-1: not running at top speed; connect to a high speed hub [ 100.406737][ T4618] usb 1-1: Using ep0 maxpacket: 16 [ 100.468039][ T21] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 100.486066][ T21] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 100.516096][ T21] usb 4-1: config 5 has no interface number 0 [ 100.542880][ T21] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.562067][ T4618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.572444][ T21] usb 4-1: config 5 interface 246 has no altsetting 0 [ 100.582397][ T4618] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.633535][ T4618] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 100.648335][ T4618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.673550][ T4618] usb 1-1: config 0 descriptor?? [ 100.736931][ T21] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 100.752485][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.771051][ T21] usb 4-1: Product: syz [ 100.775262][ T21] usb 4-1: Manufacturer: syz [ 100.806966][ T21] usb 4-1: SerialNumber: syz [ 100.825778][ T4665] syz.4.127[4665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.825940][ T4665] syz.4.127[4665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.210469][ T1339] usb 1-1: USB disconnect, device number 5 [ 101.706813][ T4618] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 101.819801][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.839016][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.857326][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.147144][ T4618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 102.163985][ T4618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 102.228504][ T1339] usb 3-1: USB disconnect, device number 6 [ 102.357109][ T4618] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 102.371515][ T4694] syz.2.137 uses obsolete (PF_INET,SOCK_PACKET) [ 102.375555][ T4618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.400147][ T4618] usb 5-1: Product: syz [ 102.404356][ T4618] usb 5-1: Manufacturer: syz [ 102.413656][ T4618] usb 5-1: SerialNumber: syz [ 102.437080][ T4618] usb 5-1: config 0 descriptor?? [ 102.479411][ T4618] hub 5-1:0.0: bad descriptor, ignoring hub [ 102.495557][ T4618] hub: probe of 5-1:0.0 failed with error -5 [ 102.504212][ T4618] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 102.672893][ T21] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 102.694641][ T21] usb 4-1: USB disconnect, device number 7 [ 102.700790][ T154] usb 4-1: Failed to submit usb control message: -71 [ 102.710123][ T154] usb 4-1: unable to send the bmi data to the device: -71 [ 102.717947][ T154] usb 4-1: unable to get target info from device [ 102.724384][ T154] usb 4-1: could not get target info (-71) [ 102.730354][ T154] usb 4-1: could not probe fw (-71) [ 102.946833][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.096901][ T21] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.228010][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 103.336830][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 103.366892][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.456998][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.468018][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 103.481656][ T21] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 103.487053][ T4232] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.490815][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.519200][ T21] usb 4-1: config 0 descriptor?? [ 103.519663][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.532443][ T4232] usb 3-1: SerialNumber: syz [ 103.902609][ T4232] usb 3-1: USB disconnect, device number 7 [ 104.058560][ T4233] usb 4-1: USB disconnect, device number 8 [ 104.472105][ T4273] usb 5-1: USB disconnect, device number 5 [ 104.681265][ T4273] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.716805][ T4232] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 104.737691][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 104.795240][ T4748] device syzkaller0 entered promiscuous mode [ 104.825550][ T4748] tipc: Started in network mode [ 104.836892][ T4748] tipc: Node identity ceb37487b4a5, cluster identity 4711 [ 104.865300][ T4748] tipc: Enabled bearer , priority 0 [ 104.902687][ T4748] tipc: Resetting bearer [ 104.926794][ T4273] usb 5-1: Using ep0 maxpacket: 16 [ 104.954167][ T4747] tipc: Resetting bearer [ 104.970766][ T4747] tipc: Disabling bearer [ 105.046959][ T4273] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.090776][ T4273] usb 5-1: config 0 has no interface number 0 [ 105.197126][ T4232] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.257059][ T4232] usb 1-1: not running at top speed; connect to a high speed hub [ 105.276929][ T4273] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 105.291880][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.304424][ T4273] usb 5-1: Product: syz [ 105.316360][ T4273] usb 5-1: Manufacturer: syz [ 105.321509][ T4273] usb 5-1: SerialNumber: syz [ 105.334480][ T4273] usb 5-1: config 0 descriptor?? [ 105.347229][ T4232] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 105.355667][ T4232] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 105.366293][ T4232] usb 1-1: config 5 has no interface number 0 [ 105.372786][ T4232] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.379060][ T4273] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 105.387248][ T4232] usb 1-1: config 5 interface 246 has no altsetting 0 [ 105.392493][ T21] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 105.557004][ T4232] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 105.573375][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.581897][ T4232] usb 1-1: Product: syz [ 105.586109][ T4232] usb 1-1: Manufacturer: syz [ 105.595611][ T4232] usb 1-1: SerialNumber: syz [ 105.767082][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 105.778978][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 105.892929][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.905824][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.914275][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.946972][ T21] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 105.963021][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.972453][ T21] usb 4-1: Product: syz [ 105.983280][ T21] usb 4-1: Manufacturer: syz [ 105.990308][ T21] usb 4-1: SerialNumber: syz [ 105.995849][ T4232] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 106.013105][ T4232] usb 1-1: USB disconnect, device number 6 [ 106.023466][ T21] usb 4-1: config 0 descriptor?? [ 106.037042][ T154] usb 1-1: Failed to submit usb control message: -71 [ 106.044102][ T154] usb 1-1: unable to send the bmi data to the device: -71 [ 106.052377][ T154] usb 1-1: unable to get target info from device [ 106.058789][ T154] usb 1-1: could not get target info (-71) [ 106.064615][ T154] usb 1-1: could not probe fw (-71) [ 106.070787][ T21] hub 4-1:0.0: bad descriptor, ignoring hub [ 106.085613][ T21] hub: probe of 4-1:0.0 failed with error -5 [ 106.094668][ T21] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 106.673614][ T4794] netlink: 'syz.0.175': attribute type 1 has an invalid length. [ 106.719687][ T4792] device syzkaller0 entered promiscuous mode [ 106.802355][ T4794] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.872980][ T4796] bond1: (slave veth0_to_bond): making interface the new active one [ 106.910916][ T4796] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 106.956893][ T4794] device macvlan2 entered promiscuous mode [ 106.970994][ T4794] device bond1 entered promiscuous mode [ 106.994651][ T4794] device veth0_to_bond entered promiscuous mode [ 107.014766][ T4794] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.029154][ T4794] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 107.099702][ T4794] device bond1 left promiscuous mode [ 107.124550][ T4794] device veth0_to_bond left promiscuous mode [ 107.527302][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 107.557806][ T4273] gspca_spca1528: reg_r err -71 [ 107.565762][ T4273] spca1528: probe of 5-1:0.1 failed with error -71 [ 107.582234][ T4819] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.591321][ T4819] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.600316][ T4819] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.609065][ T4819] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.611444][ T4273] usb 5-1: USB disconnect, device number 6 [ 107.696992][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 107.896926][ T1339] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 107.953538][ T4828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 108.392100][ T1339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.457052][ T1339] usb 2-1: not running at top speed; connect to a high speed hub [ 108.466947][ T3156] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 108.557355][ T1339] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 108.565563][ T1339] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 108.599478][ T1339] usb 2-1: config 5 has no interface number 0 [ 108.605827][ T1339] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.619716][ T1339] usb 2-1: config 5 interface 246 has no altsetting 0 [ 108.714285][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 108.807078][ T1339] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 108.819450][ T1339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.836824][ T1339] usb 2-1: Product: syz [ 108.841051][ T1339] usb 2-1: Manufacturer: syz [ 108.845646][ T1339] usb 2-1: SerialNumber: syz [ 108.848092][ T3156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.868953][ T3156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.963650][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 108.973984][ T4232] usb 4-1: USB disconnect, device number 9 [ 109.037056][ T3156] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 109.071364][ T3156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.096107][ T3156] usb 1-1: Product: syz [ 109.105703][ T3156] usb 1-1: Manufacturer: syz [ 109.113089][ T3156] usb 1-1: SerialNumber: syz [ 109.123277][ T3156] usb 1-1: config 0 descriptor?? [ 109.177674][ T3156] hub 1-1:0.0: bad descriptor, ignoring hub [ 109.183630][ T3156] hub: probe of 1-1:0.0 failed with error -5 [ 109.196923][ T4232] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 109.235258][ T3156] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 109.237794][ T1339] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 109.277019][ T1168] usb 2-1: Failed to submit usb control message: -71 [ 109.295710][ T1168] usb 2-1: unable to send the bmi data to the device: -71 [ 109.328866][ T1339] usb 2-1: USB disconnect, device number 7 [ 109.366057][ T1168] usb 2-1: unable to get target info from device [ 109.410196][ T1168] usb 2-1: could not get target info (-71) [ 109.416097][ T1168] usb 2-1: could not probe fw (-71) [ 109.478176][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 109.607331][ T4232] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.616028][ T4232] usb 4-1: config 0 has no interface number 0 [ 109.807099][ T4232] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 109.827816][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.835940][ T4232] usb 4-1: Product: syz [ 109.846515][ T4232] usb 4-1: Manufacturer: syz [ 109.851849][ T4232] usb 4-1: SerialNumber: syz [ 109.882683][ T4232] usb 4-1: config 0 descriptor?? [ 109.954602][ T4232] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 109.967834][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 110.182379][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'. [ 110.403050][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 110.416956][ T4919] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 110.459915][ T4904] syz.1.212 (4904) used greatest stack depth: 20672 bytes left [ 110.689349][ T4831] usb 1-1: USB disconnect, device number 7 [ 110.701417][ T4937] netlink: 308 bytes leftover after parsing attributes in process `syz.1.224'. [ 110.800028][ T4940] netlink: 'syz.2.222': attribute type 13 has an invalid length. [ 110.979082][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.122130][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.199247][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.486794][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.737013][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 111.857196][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.867790][ T4831] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 111.958086][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.969774][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.987873][ T13] usb 5-1: SerialNumber: syz [ 112.117784][ T4831] usb 2-1: Using ep0 maxpacket: 32 [ 112.136973][ T4232] gspca_spca1528: reg_r err -71 [ 112.141984][ T4232] spca1528: probe of 4-1:0.1 failed with error -71 [ 112.161085][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 112.177970][ T4232] usb 4-1: USB disconnect, device number 10 [ 112.215377][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 112.236908][ T4831] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.278696][ T4831] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.290148][ T4831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.299474][ T4831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.309273][ T4831] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.322419][ T4831] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.335940][ T4831] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.350286][ T4831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.388875][ T4831] usb 2-1: config 0 descriptor?? [ 112.422998][ T13] usb 5-1: USB disconnect, device number 7 [ 112.659758][ T4831] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 112.877961][ T4233] usb 2-1: USB disconnect, device number 8 [ 112.910761][ T4233] usblp0: removed [ 112.988901][ T4975] netlink: 68 bytes leftover after parsing attributes in process `syz.4.238'. [ 113.506796][ T4233] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 113.592906][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 113.675753][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 113.887165][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 113.916966][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 113.940602][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.963418][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.985505][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.116680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 114.136694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 114.146685][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 114.156683][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 114.166682][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 114.176680][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 114.187716][ T4233] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 114.196688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 114.206033][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.227935][ T4233] usb 5-1: Product: syz [ 114.240636][ T4233] usb 5-1: Manufacturer: syz [ 114.252225][ T4233] usb 5-1: SerialNumber: syz [ 114.361967][ T5006] loop2: detected capacity change from 0 to 8192 [ 115.195445][ T4233] usb 5-1: config 0 descriptor?? [ 115.269241][ T4233] hub 5-1:0.0: bad descriptor, ignoring hub [ 115.275285][ T4233] hub: probe of 5-1:0.0 failed with error -5 [ 115.299389][ T4233] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 115.856701][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 116.506671][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 117.016653][ C0] sched: RT throttling activated [ 117.667824][ T21] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 117.734406][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 117.882335][ T5034] netlink: 'syz.0.257': attribute type 13 has an invalid length. [ 117.934000][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.945784][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.953919][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.052795][ T21] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 118.069760][ T21] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 118.087502][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 118.103032][ T21] usb 3-1: config 4 has no interface number 0 [ 118.111562][ T21] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.134142][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 118.240615][ T5041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 118.256867][ T4832] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 118.287050][ T21] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 118.310859][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.349629][ T21] usb 3-1: Product: syz [ 118.354264][ T21] usb 3-1: Manufacturer: syz [ 118.362053][ T21] usb 3-1: SerialNumber: syz [ 118.510765][ T5049] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 118.585435][ T5049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.640331][ T5048] bond1: (slave geneve2): making interface the new active one [ 118.673795][ T5048] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 118.676928][ T21] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 118.716966][ T4832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.727226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.781747][ T4832] usb 2-1: not running at top speed; connect to a high speed hub [ 118.783449][ T21] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 118.800707][ T21] dib0700: firmware download failed at 7 with -22 [ 118.808448][ T4831] usb 5-1: USB disconnect, device number 8 [ 118.830636][ T21] usb 3-1: USB disconnect, device number 8 [ 118.861078][ T5048] syz.3.262 (5048) used greatest stack depth: 16240 bytes left [ 118.899865][ T4832] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 118.915337][ T4832] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 118.927429][ T4832] usb 2-1: config 5 has no interface number 0 [ 118.938452][ T4832] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.956467][ T4832] usb 2-1: config 5 interface 246 has no altsetting 0 [ 119.157189][ T4832] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 119.170269][ T4832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.211288][ T4832] usb 2-1: Product: syz [ 119.233403][ T4832] usb 2-1: Manufacturer: syz [ 119.253808][ T4832] usb 2-1: SerialNumber: syz [ 119.600076][ T5062] loop4: detected capacity change from 0 to 8192 [ 119.606912][ T4831] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 122.589753][ T4832] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 122.656968][ T1168] usb 2-1: Failed to submit usb control message: -71 [ 122.666837][ T1168] usb 2-1: unable to send the bmi data to the device: -71 [ 122.674128][ T1168] usb 2-1: unable to get target info from device [ 122.693541][ T1168] usb 2-1: could not get target info (-71) [ 122.699538][ T1168] usb 2-1: could not probe fw (-71) [ 122.736825][ T4831] usb 3-1: device descriptor read/all, error -71 [ 122.777081][ T4832] usb 2-1: USB disconnect, device number 9 [ 122.831451][ T5072] device syzkaller0 entered promiscuous mode [ 123.124575][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 123.139271][ T4831] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.147908][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 123.386799][ T3156] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 123.426768][ T4831] usb 3-1: Using ep0 maxpacket: 32 [ 123.566956][ T4831] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.580991][ T4831] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.590040][ T4831] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.599165][ T4831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.609152][ T4831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.618913][ T4831] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.633504][ T4831] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.643902][ T4831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.664347][ T4831] usb 3-1: config 0 descriptor?? [ 123.716819][ T4832] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 123.762145][ T3156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 123.921644][ T3156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.941650][ T4831] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.348824][ T5100] loop1: detected capacity change from 0 to 8192 [ 124.418118][ T3156] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 124.634811][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.643174][ T5100] FAT-fs (loop1): Filesystem has been set read-only [ 124.649939][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.657892][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.666405][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.674519][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.682521][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.691619][ T5100] attempt to access beyond end of device [ 124.691619][ T5100] loop1: rw=0, want=15584, limit=8192 [ 124.702972][ T5100] Buffer I/O error on dev loop1, logical block 15583, async page read [ 124.711604][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.720671][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.728585][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.736440][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.744361][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.752284][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.760198][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.768117][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.776001][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.784000][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.792888][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.800822][ T5100] FAT-fs (loop1): error, invalid access to FAT (entry 0x00003c09) [ 124.951446][ T26] audit: type=1800 audit(1788433139.483:2): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.277" name="file2" dev="loop1" ino=1048590 res=0 errno=0 [ 125.009947][ T3156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.078990][ T3156] usb 4-1: Product: syz [ 125.105292][ T3156] usb 4-1: Manufacturer: syz [ 125.138450][ T3156] usb 4-1: SerialNumber: syz [ 125.181427][ T3156] usb 4-1: config 0 descriptor?? [ 125.222081][ T21] usb 3-1: USB disconnect, device number 10 [ 125.254752][ T21] usblp0: removed [ 125.259615][ T3156] hub 4-1:0.0: bad descriptor, ignoring hub [ 125.265555][ T3156] hub: probe of 4-1:0.0 failed with error -5 [ 125.316079][ T3156] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 125.496819][ T4288] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.746991][ T4288] usb 5-1: Using ep0 maxpacket: 16 [ 125.867331][ T4288] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 125.887097][ T4832] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 125.887802][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.918838][ T4832] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 125.957557][ T4832] usb 1-1: config 4 has no interface number 0 [ 125.963719][ T4832] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.976763][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 125.976795][ T4288] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 125.976816][ T4288] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.057058][ T4288] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 126.066427][ T4288] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 126.080453][ T4288] usb 5-1: Manufacturer: syz [ 126.096028][ T4288] usb 5-1: config 0 descriptor?? [ 126.122501][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 126.165924][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 126.246878][ T4832] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 126.255956][ T4832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.277005][ T4832] usb 1-1: Product: syz [ 126.281213][ T4832] usb 1-1: Manufacturer: syz [ 126.285807][ T4832] usb 1-1: SerialNumber: syz [ 126.327747][ T13] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 126.376944][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 126.396797][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 126.430955][ T5104] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 126.492085][ T4832] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 126.513804][ T4832] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 126.550575][ T4832] dib0700: firmware download failed at 7 with -22 [ 126.588365][ T4832] usb 1-1: USB disconnect, device number 8 [ 126.637125][ T4288] rc_core: IR keymap rc-hauppauge not found [ 126.643731][ T4288] Registered IR keymap rc-empty [ 126.666953][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 126.684609][ T5132] netlink: 'syz.2.286': attribute type 13 has an invalid length. [ 126.706585][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.722680][ T13] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 126.727008][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 126.739075][ T13] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 126.756974][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.766137][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.773873][ T13] usb 2-1: config 4 has no interface number 0 [ 126.774933][ T4288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 126.780420][ T13] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.793961][ T4288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 126.856876][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 126.906836][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 126.959481][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 126.987112][ T13] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 126.996206][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.016820][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.054218][ T13] usb 2-1: Product: syz [ 127.066951][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.083831][ T13] usb 2-1: Manufacturer: syz [ 127.101790][ T13] usb 2-1: SerialNumber: syz [ 127.126915][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.176791][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.229038][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.276806][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.327519][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 127.370844][ T5117] sctp: [Deprecated]: syz.1.281 (pid 5117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.370844][ T5117] Use struct sctp_sack_info instead [ 127.371257][ T4288] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 127.416600][ T4288] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 127.466160][ T4288] usb 5-1: USB disconnect, device number 9 [ 127.546882][ T13] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 127.565671][ T13] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 127.600129][ T13] dib0700: firmware download failed at 7 with -22 [ 127.650017][ T13] usb 2-1: USB disconnect, device number 10 [ 127.919568][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 127.952280][ T5144] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 128.606831][ T13] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 129.037600][ T13] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 129.055526][ T13] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 129.117697][ T13] usb 2-1: config 4 has no interface number 0 [ 129.131006][ T13] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.397896][ T13] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 129.406692][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 129.429768][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.467486][ T13] usb 2-1: Product: syz [ 129.485741][ T13] usb 2-1: Manufacturer: syz [ 129.501322][ T13] usb 2-1: SerialNumber: syz [ 129.816918][ T13] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 129.838981][ T13] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 129.900827][ T13] dib0700: firmware download failed at 7 with -22 [ 129.970232][ T13] usb 2-1: USB disconnect, device number 11 [ 130.249670][ T4288] usb 4-1: reset full-speed USB device number 11 using dummy_hcd [ 130.717729][ T5210] netdevsim netdevsim4 netdevsim0: Caught tx_queue_len zero misconfig [ 130.759193][ T4272] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 131.071820][ T4288] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 131.127151][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.140025][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.151645][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.165555][ T4272] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 131.176519][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.188547][ T4272] usb 3-1: config 0 descriptor?? [ 131.227271][ T21] usb 4-1: USB disconnect, device number 11 [ 131.436977][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.448421][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.617006][ T4288] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 131.634331][ T4288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.643333][ T4288] usb 5-1: Product: syz [ 131.652171][ T4288] usb 5-1: Manufacturer: syz [ 131.658156][ T4288] usb 5-1: SerialNumber: syz [ 131.669762][ T5232] device syzkaller0 entered promiscuous mode [ 131.672344][ T4288] usb 5-1: config 0 descriptor?? [ 131.726888][ T4272] usbhid 3-1:0.0: can't add hid device: -71 [ 131.735293][ T4288] hub 5-1:0.0: bad descriptor, ignoring hub [ 131.749536][ T4272] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.762159][ T4288] hub: probe of 5-1:0.0 failed with error -5 [ 131.794875][ T4272] usb 3-1: USB disconnect, device number 11 [ 131.822811][ T4288] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 132.606780][ T4832] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.876776][ T4832] usb 3-1: Using ep0 maxpacket: 16 [ 132.999463][ T4832] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.010919][ T4832] usb 3-1: config 0 has no interface number 0 [ 133.201203][ T4832] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.206576][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805ee63000: rx timeout, send abort [ 133.216711][ T4832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.256721][ T4832] usb 3-1: Product: syz [ 133.260931][ T4832] usb 3-1: Manufacturer: syz [ 133.276802][ T4832] usb 3-1: SerialNumber: syz [ 133.297616][ T4832] usb 3-1: config 0 descriptor?? [ 133.364425][ T4832] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.450643][ T21] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 133.720324][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805ee63000: abort rx timeout. Force session deactivation [ 133.837020][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 133.856757][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.047020][ T21] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 134.056104][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.076732][ T21] usb 4-1: Product: syz [ 134.080944][ T21] usb 4-1: Manufacturer: syz [ 134.086385][ T21] usb 4-1: SerialNumber: syz [ 134.107565][ T21] usb 4-1: config 0 descriptor?? [ 134.147813][ T21] hub 4-1:0.0: bad descriptor, ignoring hub [ 134.153773][ T21] hub: probe of 4-1:0.0 failed with error -5 [ 134.179435][ T21] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 134.212536][ T21] input: failed to attach handler mousedev to device input24, error: -5 [ 134.306898][ T4831] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.599186][ T4831] usb 1-1: Using ep0 maxpacket: 16 [ 134.742612][ T4831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.852162][ T4831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.882281][ T4831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 134.899221][ T4831] usb 1-1: SerialNumber: syz [ 135.013489][ T21] usb 4-1: USB disconnect, device number 12 [ 135.232588][ T4831] usb 1-1: USB disconnect, device number 9 [ 135.450931][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 135.531947][ T5296] device team1 entered promiscuous mode [ 135.541682][ T5296] 8021q: adding VLAN 0 to HW filter on device team1 [ 135.747603][ T4832] gspca_spca1528: reg_r err -71 [ 135.752579][ T4832] spca1528: probe of 3-1:0.1 failed with error -71 [ 135.791162][ T4832] usb 3-1: USB disconnect, device number 12 [ 135.882641][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.889502][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.133579][ T5319] binder: 5318:5319 ioctl c0306201 0 returned -14 [ 136.178841][ T4832] usb 5-1: USB disconnect, device number 10 [ 136.740562][ T5340] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 136.749454][ T4832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.999513][ T4288] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.026983][ T4832] usb 5-1: Using ep0 maxpacket: 16 [ 137.146903][ T4832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.167043][ T4233] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.237096][ T4832] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.246288][ T4832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.254749][ T4832] usb 5-1: SerialNumber: syz [ 137.256868][ T4288] usb 1-1: Using ep0 maxpacket: 16 [ 137.306834][ T3156] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 137.336767][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.406825][ T4233] usb 2-1: Using ep0 maxpacket: 16 [ 137.527208][ T4233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.542499][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 137.556327][ T4288] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 137.575316][ T4832] usb 5-1: USB disconnect, device number 11 [ 137.577364][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.590291][ T4233] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 137.600339][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.609429][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 137.615027][ T4288] usb 1-1: Product: syz [ 137.619951][ T4288] usb 1-1: Manufacturer: syz [ 137.624660][ T4288] usb 1-1: SerialNumber: syz [ 137.632575][ T4233] usb 2-1: config 0 descriptor?? [ 137.641249][ T4288] usb 1-1: config 0 descriptor?? [ 137.683366][ T4288] usb 1-1: selecting invalid altsetting 1 [ 137.689858][ T4288] technisat-usb2: could not set alternate setting to 0 [ 137.717224][ T3156] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.727150][ T21] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.735830][ T21] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.745000][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.754633][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.765032][ T3156] usb 4-1: not running at top speed; connect to a high speed hub [ 137.773874][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.789867][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.825802][ T21] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.835865][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.861420][ T21] usb 3-1: config 0 descriptor?? [ 137.871422][ T3156] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 137.887577][ T3156] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 137.898363][ T4288] technisat-usb2: firmware version: 0.0 [ 137.903959][ T4288] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 137.915438][ T3156] usb 4-1: config 5 has no interface number 0 [ 137.925281][ T3156] usb 4-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.940068][ T3156] usb 4-1: config 5 interface 246 has no altsetting 0 [ 138.105360][ T4195] usb 2-1: USB disconnect, device number 12 [ 138.111681][ T3156] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 138.134167][ T3156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.145762][ T21] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.167896][ T3156] usb 4-1: Product: syz [ 138.172089][ T3156] usb 4-1: Manufacturer: syz [ 138.186855][ T3156] usb 4-1: SerialNumber: syz [ 138.343007][ T4288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.376334][ T5371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 138.393329][ T4288] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 138.402522][ T4288] usb 1-1: media controller created [ 138.412589][ T4288] technisat-usb2: i2c-error: out failed 53 = -22 [ 138.424369][ T4288] dvb-usb: MAC address reading failed. [ 138.462455][ T4288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.491309][ T5373] netlink: 7 bytes leftover after parsing attributes in process `syz.4.366'. [ 138.530951][ T4617] usb 3-1: USB disconnect, device number 13 [ 138.549280][ T4617] usblp0: removed [ 138.566124][ T4288] DVB: Unable to find symbol stv090x_attach() [ 138.600690][ T3156] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 138.618626][ T4288] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 138.622958][ T4254] usb 4-1: Failed to submit usb control message: -71 [ 138.646017][ T3156] usb 4-1: USB disconnect, device number 13 [ 138.693432][ T4254] usb 4-1: unable to send the bmi data to the device: -71 [ 138.700714][ T4254] usb 4-1: unable to get target info from device [ 138.708001][ T4254] usb 4-1: could not get target info (-71) [ 138.713852][ T4254] usb 4-1: could not probe fw (-71) [ 138.735723][ T4288] rc_core: IR keymap rc-technisat-usb2 not found [ 138.742737][ T4288] Registered IR keymap rc-empty [ 138.790601][ T4288] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 138.813885][ T4288] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input25 [ 138.868661][ T4288] dvb-usb: schedule remote query interval to 100 msecs. [ 138.906988][ T4288] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 138.942456][ T4288] usb 1-1: USB disconnect, device number 10 [ 139.049557][ T5389] binder: 5388:5389 ioctl c0306201 0 returned -14 [ 139.143076][ T4288] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 139.322147][ T4273] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 139.325644][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 139.516843][ T4617] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.566811][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 139.656918][ T4831] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 139.687053][ T4273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.706953][ T4618] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.776957][ T4273] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.777464][ T4617] usb 2-1: Using ep0 maxpacket: 16 [ 139.786053][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 139.786080][ T4273] usb 4-1: SerialNumber: syz [ 139.916951][ T4617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.927817][ T4617] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 139.941154][ T4617] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 139.950339][ T4617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.961971][ T4617] usb 2-1: config 0 descriptor?? [ 139.967227][ T4618] usb 5-1: Using ep0 maxpacket: 16 [ 140.047172][ T4831] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 140.056017][ T4831] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 140.066616][ T4831] usb 3-1: config 4 has no interface number 0 [ 140.072748][ T4831] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.127114][ T4832] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 140.137345][ T4273] usb 4-1: USB disconnect, device number 14 [ 140.274817][ T4288] usb 2-1: USB disconnect, device number 13 [ 140.287130][ T4618] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 140.296296][ T4831] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 140.305644][ T4831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.314092][ T4618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.322341][ T4831] usb 3-1: Product: syz [ 140.326506][ T4831] usb 3-1: Manufacturer: syz [ 140.331717][ T4618] usb 5-1: Product: syz [ 140.335909][ T4618] usb 5-1: Manufacturer: syz [ 140.340699][ T4618] usb 5-1: SerialNumber: syz [ 140.345771][ T4831] usb 3-1: SerialNumber: syz [ 140.353702][ T4618] usb 5-1: config 0 descriptor?? [ 140.386852][ T4832] usb 1-1: Using ep0 maxpacket: 32 [ 140.409795][ T4618] usb 5-1: selecting invalid altsetting 1 [ 140.415582][ T4618] technisat-usb2: could not set alternate setting to 0 [ 140.526984][ T4832] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 140.536142][ T4832] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 140.544839][ T4832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 140.553972][ T4832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.563657][ T4832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.573465][ T4832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.586491][ T4832] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.595634][ T4832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.607859][ T4832] usb 1-1: config 0 descriptor?? [ 140.618204][ T4618] technisat-usb2: firmware version: 0.0 [ 140.623795][ T4618] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 140.635635][ T5412] sctp: [Deprecated]: syz.2.380 (pid 5412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.635635][ T5412] Use struct sctp_sack_info instead [ 140.676242][ T5420] netlink: 68 bytes leftover after parsing attributes in process `syz.3.384'. [ 140.766993][ T4831] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 140.777075][ T4831] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 140.785649][ T4831] dib0700: firmware download failed at 7 with -22 [ 140.802358][ T4831] usb 3-1: USB disconnect, device number 14 [ 140.856399][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 140.911521][ T4832] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.038902][ T4618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.055846][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 141.065413][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 141.074707][ T5429] netlink: 'syz.1.388': attribute type 11 has an invalid length. [ 141.078027][ T4618] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 141.083747][ T5429] netlink: 'syz.1.388': attribute type 14 has an invalid length. [ 141.097174][ T4618] usb 5-1: media controller created [ 141.104470][ T4618] technisat-usb2: i2c-error: out failed 53 = -22 [ 141.111667][ T4618] dvb-usb: MAC address reading failed. [ 141.134521][ T4618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.231128][ T4618] DVB: Unable to find symbol stv090x_attach() [ 141.290685][ T4618] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 141.320858][ T4288] usb 1-1: USB disconnect, device number 11 [ 141.339107][ T5439] binder: 5437:5439 ioctl c0306201 0 returned -14 [ 141.346262][ T4288] usblp0: removed [ 141.476987][ T4618] rc_core: IR keymap rc-technisat-usb2 not found [ 141.483557][ T4618] Registered IR keymap rc-empty [ 141.490441][ T4618] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 141.510916][ T4618] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 141.514580][ T5450] fuse: Bad value for 'fd' [ 141.534591][ T4618] dvb-usb: schedule remote query interval to 100 msecs. [ 141.586926][ T4618] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 141.614140][ T4618] usb 5-1: USB disconnect, device number 12 [ 141.682690][ T4618] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 141.729453][ T4831] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.163109][ T5462] loop3: detected capacity change from 0 to 8192 [ 143.687796][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.695771][ T5462] FAT-fs (loop3): Filesystem has been set read-only [ 143.702585][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.711172][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.719235][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.727174][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.735064][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.743534][ T5462] attempt to access beyond end of device [ 143.743534][ T5462] loop3: rw=0, want=15584, limit=8192 [ 143.754513][ T5462] Buffer I/O error on dev loop3, logical block 15583, async page read [ 143.763122][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.771728][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.779660][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.787592][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.795507][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.803428][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.811352][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.819284][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.827206][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.835156][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.844073][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.852023][ T5462] FAT-fs (loop3): error, invalid access to FAT (entry 0x00003c09) [ 143.889752][ T26] audit: type=1800 audit(1788433158.423:3): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.397" name="file2" dev="loop3" ino=1048591 res=0 errno=0 [ 143.974605][ T5466] device syzkaller0 entered promiscuous mode [ 144.366893][ T4831] usb 2-1: Using ep0 maxpacket: 16 [ 144.547281][ T4831] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 144.562293][ T4831] usb 2-1: can't read configurations, error -71 [ 144.806992][ T4618] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 144.856744][ T4288] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.095165][ T5495] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 145.106794][ T4288] usb 1-1: Using ep0 maxpacket: 16 [ 145.226947][ T4618] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 145.242687][ T4618] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 145.276164][ T4618] usb 3-1: config 4 has no interface number 0 [ 145.282914][ T4618] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.387086][ T4288] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 145.396893][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.405191][ T4288] usb 1-1: Product: syz [ 145.412046][ T4288] usb 1-1: Manufacturer: syz [ 145.421086][ T4288] usb 1-1: SerialNumber: syz [ 145.437441][ T4288] usb 1-1: config 0 descriptor?? [ 145.458328][ T4618] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 145.472426][ T4618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.483758][ T4288] usb 1-1: selecting invalid altsetting 1 [ 145.506026][ T4288] technisat-usb2: could not set alternate setting to 0 [ 145.528084][ T4618] usb 3-1: Product: syz [ 145.557817][ T4618] usb 3-1: Manufacturer: syz [ 145.572936][ T4618] usb 3-1: SerialNumber: syz [ 145.699498][ T4288] technisat-usb2: firmware version: 0.0 [ 145.706984][ T4288] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 145.830387][ T5481] sctp: [Deprecated]: syz.2.404 (pid 5481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.830387][ T5481] Use struct sctp_sack_info instead [ 145.966946][ T4618] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 145.983647][ T4618] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 146.111973][ T4618] dib0700: firmware download failed at 7 with -22 [ 146.141143][ T4288] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.199157][ T4618] usb 3-1: USB disconnect, device number 15 [ 146.257996][ T5506] loop3: detected capacity change from 0 to 8192 [ 147.979827][ T4288] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 147.988772][ T4288] usb 1-1: media controller created [ 147.994045][ T4288] technisat-usb2: i2c-error: out failed 53 = -22 [ 148.000507][ T4288] dvb-usb: MAC address reading failed. [ 148.989238][ T4288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.447971][ T4288] DVB: Unable to find symbol stv090x_attach() [ 149.466938][ T4288] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 149.596742][ T4288] rc_core: IR keymap rc-technisat-usb2 not found [ 149.605334][ T4288] Registered IR keymap rc-empty [ 149.615781][ T4288] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 149.633063][ T4288] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input27 [ 149.702017][ T4288] dvb-usb: schedule remote query interval to 100 msecs. [ 149.726806][ T4273] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 149.758334][ T4288] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 149.782202][ T4288] usb 1-1: USB disconnect, device number 12 [ 149.865611][ T4288] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 150.106885][ T4273] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.119586][ T4273] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.141233][ T4273] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 150.155668][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.174688][ T4273] usb 5-1: config 0 descriptor?? [ 150.246937][ T4288] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 150.497266][ T4288] usb 1-1: Using ep0 maxpacket: 16 [ 150.616860][ T4288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.633488][ T4288] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.656461][ T4288] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 150.675653][ T4288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.718410][ T4288] usb 1-1: config 0 descriptor?? [ 151.006867][ T21] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.256742][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 151.319802][ T4617] usb 1-1: USB disconnect, device number 13 [ 151.377162][ T21] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.389077][ T21] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.399567][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.408676][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.418408][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.428130][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.441147][ T21] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.450307][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.467561][ T21] usb 4-1: config 0 descriptor?? [ 151.730678][ T21] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.100385][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 152.128038][ T21] usb 4-1: USB disconnect, device number 15 [ 152.165172][ T21] usblp0: removed [ 152.476088][ T4617] usb 5-1: USB disconnect, device number 13 [ 153.211373][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.236354][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.258889][ T5580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.312324][ T5580] device team1 left promiscuous mode [ 153.526940][ T4273] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.807025][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 153.950826][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.985045][ T4273] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 154.026938][ T21] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 154.068917][ T4273] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 154.106795][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.126727][ T4273] usb 4-1: config 0 descriptor?? [ 154.251734][ T4617] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.255519][ T5606] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 154.304725][ T5606] Illegal XDP return value 3954245657, expect packet loss! [ 154.336844][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 154.384797][ T5608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 154.486863][ T21] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.501946][ T21] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.510878][ T21] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.519973][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.525704][ T4617] usb 2-1: Using ep0 maxpacket: 16 [ 154.529912][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.544801][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.562303][ T21] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.572510][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.584462][ T21] usb 3-1: config 0 descriptor?? [ 154.646921][ T4617] usb 2-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 154.694848][ T4617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.711502][ T4617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 154.722803][ T4617] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 154.738416][ T4617] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.827193][ T4617] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.850183][ T4617] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.854091][ T21] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.861120][ T4617] usb 2-1: Manufacturer: syz [ 154.898470][ T4617] usb 2-1: config 0 descriptor?? [ 154.986336][ T21] usb 4-1: USB disconnect, device number 16 [ 155.148923][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 155.158298][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 155.167535][ T5603] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 155.227363][ T21] usb 3-1: USB disconnect, device number 16 [ 155.243383][ T21] usblp0: removed [ 155.316884][ T4617] rc_core: IR keymap rc-hauppauge not found [ 155.323121][ T4617] Registered IR keymap rc-empty [ 155.356862][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.416874][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.457519][ T4617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 155.472298][ T4617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input32 [ 155.536921][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.606937][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.666845][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.737803][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.796930][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.863660][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.917667][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 155.980500][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 156.038618][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 156.097039][ T4617] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 156.143919][ T4617] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 156.156793][ T4617] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.193871][ T4617] usb 2-1: USB disconnect, device number 16 [ 157.376748][ T4617] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 157.466833][ T4288] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 157.649444][ T4617] usb 4-1: Using ep0 maxpacket: 16 [ 157.774299][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 157.787323][ T4617] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 157.797985][ T4617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.809548][ T4617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 157.822470][ T4617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 157.843175][ T4617] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.856908][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 157.887301][ T4288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 157.912703][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.924769][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.932792][ T5674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.957097][ T4617] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.994507][ T4617] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 158.012526][ T4617] usb 4-1: Manufacturer: syz [ 158.029398][ T4617] usb 4-1: config 0 descriptor?? [ 158.067109][ T4288] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 158.076502][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.084644][ T4288] usb 2-1: Product: syz [ 158.088978][ T4288] usb 2-1: Manufacturer: syz [ 158.093619][ T4288] usb 2-1: SerialNumber: syz [ 158.100521][ T4288] usb 2-1: config 0 descriptor?? [ 158.137403][ T4288] hub 2-1:0.0: bad descriptor, ignoring hub [ 158.143389][ T4288] hub: probe of 2-1:0.0 failed with error -5 [ 158.154271][ T4288] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 158.257044][ T4273] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 158.271587][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 158.283636][ T5661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 158.292945][ T5661] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 158.406853][ T4617] rc_core: IR keymap rc-hauppauge not found [ 158.418101][ T4617] Registered IR keymap rc-empty [ 158.446993][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.451577][ T4273] usb 5-1: device descriptor read/64, error -71 [ 158.497519][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.527531][ T4617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 158.545992][ T4617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 158.586875][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.646949][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.720471][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.726848][ T4273] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.781237][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.847008][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.847369][ T4195] usb 2-1: USB disconnect, device number 17 [ 158.906934][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 158.916988][ T4273] usb 5-1: device descriptor read/64, error -71 [ 158.968381][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 159.036941][ T4273] usb usb5-port1: attempt power cycle [ 159.041912][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 159.112383][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 159.176945][ T4617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 159.220241][ T4617] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 159.232555][ T4617] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 159.263065][ T4617] usb 4-1: USB disconnect, device number 17 [ 159.446805][ T4273] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 159.536900][ T4273] usb 5-1: device descriptor read/8, error -71 [ 159.686749][ T4617] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 159.748165][ T5713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.482'. [ 159.806995][ T4273] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.897209][ T4273] usb 5-1: device descriptor read/8, error -71 [ 159.924505][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.953893][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.977257][ T4617] usb 4-1: Using ep0 maxpacket: 16 [ 159.985199][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 160.027182][ T4273] usb usb5-port1: unable to enumerate USB device [ 160.108976][ T4617] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.120570][ T4617] usb 4-1: config 0 has no interface number 0 [ 160.306933][ T4617] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 160.319798][ T4617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.337482][ T4617] usb 4-1: Product: syz [ 160.346311][ T4617] usb 4-1: Manufacturer: syz [ 160.355227][ T4617] usb 4-1: SerialNumber: syz [ 160.372019][ T4617] usb 4-1: config 0 descriptor?? [ 160.439303][ T4617] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 160.946797][ T4273] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 161.306843][ T4273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 161.324087][ T4273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.406824][ T4195] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 161.496992][ T4273] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 161.509926][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.526478][ T4273] usb 1-1: Product: syz [ 161.536506][ T4273] usb 1-1: Manufacturer: syz [ 161.541866][ T4273] usb 1-1: SerialNumber: syz [ 161.555588][ T4273] usb 1-1: config 0 descriptor?? [ 161.597771][ T4273] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.605876][ T4273] hub: probe of 1-1:0.0 failed with error -5 [ 161.623374][ T4273] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 161.816829][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.857166][ T4195] usb 3-1: not running at top speed; connect to a high speed hub [ 161.937407][ T4195] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 161.945633][ T4195] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 161.963453][ T4195] usb 3-1: config 5 has no interface number 0 [ 161.973245][ T4195] usb 3-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.987959][ T4195] usb 3-1: config 5 interface 246 has no altsetting 0 [ 162.146965][ T4195] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 162.186803][ T4195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.240827][ T4195] usb 3-1: Product: syz [ 162.245667][ T4195] usb 3-1: Manufacturer: syz [ 162.266741][ T4195] usb 3-1: SerialNumber: syz [ 162.331514][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 162.589936][ T4195] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 162.603737][ T4195] usb 3-1: USB disconnect, device number 17 [ 162.620639][ T1168] usb 3-1: Failed to submit usb control message: -71 [ 162.629799][ T1168] usb 3-1: unable to send the bmi data to the device: -71 [ 162.640649][ T1168] usb 3-1: unable to get target info from device [ 162.656205][ T1168] usb 3-1: could not get target info (-71) [ 162.683263][ T1168] usb 3-1: could not probe fw (-71) [ 162.746895][ T4831] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.856872][ T4617] gspca_spca1528: reg_r err -71 [ 162.862396][ T4617] spca1528: probe of 4-1:0.1 failed with error -71 [ 162.879527][ T4617] usb 4-1: USB disconnect, device number 18 [ 163.036838][ T4831] usb 2-1: Using ep0 maxpacket: 32 [ 163.206964][ T4831] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.221278][ T4831] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.230551][ T4831] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 163.245783][ T4831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.256203][ T4832] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.271659][ T4831] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 163.285611][ T4618] usb 1-1: USB disconnect, device number 14 [ 163.299280][ T4831] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.317154][ T4831] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.326527][ T4831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.350894][ T4831] usb 2-1: config 0 descriptor?? [ 163.546865][ T4618] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 163.586865][ T4832] usb 5-1: Using ep0 maxpacket: 32 [ 163.620283][ T4831] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.747043][ T4832] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 163.755442][ T4832] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 163.796727][ T4832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.816844][ T4618] usb 1-1: Using ep0 maxpacket: 16 [ 163.836917][ T4832] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 163.846019][ T4832] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 163.856278][ T4832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.874290][ T4832] usb 5-1: config 0 descriptor?? [ 163.958019][ T4618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.974348][ T4618] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 163.994333][ T4618] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 163.998026][ T21] usb 2-1: USB disconnect, device number 18 [ 164.011629][ T4618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.027309][ T21] usblp0: removed [ 164.053357][ T4618] usb 1-1: config 0 descriptor?? [ 164.285833][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 164.299494][ T5780] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.308529][ T5780] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.317400][ T5780] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.326240][ T5780] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.418845][ T5780] Cannot find add_set index 0 as target [ 164.678127][ T4618] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 164.741614][ T4832] usb 1-1: USB disconnect, device number 15 [ 164.836787][ T4831] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 164.926915][ T4618] usb 2-1: Using ep0 maxpacket: 16 [ 165.047078][ T4618] usb 2-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 165.060769][ T4618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.071904][ T4618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 165.087751][ T4618] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 165.097948][ T4618] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.186998][ T4618] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 165.196290][ T4618] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 165.204649][ T4831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 165.216472][ T4618] usb 2-1: Manufacturer: syz [ 165.222450][ T4831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 165.233359][ T4618] usb 2-1: config 0 descriptor?? [ 165.396925][ T4831] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 165.406501][ T4831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.414848][ T4831] usb 3-1: Product: syz [ 165.420939][ T4831] usb 3-1: Manufacturer: syz [ 165.425659][ T4831] usb 3-1: SerialNumber: syz [ 165.442881][ T4831] usb 3-1: config 0 descriptor?? [ 165.478655][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 165.479417][ T5794] batman_adv: batadv0: Adding interface: ipvlan2 [ 165.488757][ T4831] hub 3-1:0.0: bad descriptor, ignoring hub [ 165.495867][ T5794] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.529874][ T5794] batman_adv: batadv0: Interface activated: ipvlan2 [ 165.530942][ T5795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 165.556385][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 165.565429][ T4831] hub: probe of 3-1:0.0 failed with error -5 [ 165.573244][ T4831] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 165.582934][ T5783] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 165.706779][ T4618] rc_core: IR keymap rc-hauppauge not found [ 165.712772][ T4618] Registered IR keymap rc-empty [ 165.736814][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 165.787870][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 165.817988][ T4618] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 165.833791][ T4618] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 165.867059][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 165.916929][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 165.966897][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 165.985873][ T21] usb 5-1: USB disconnect, device number 18 [ 166.029196][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.086932][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.144710][ T5809] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input40 [ 166.156029][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.217775][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.253238][ T5812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'. [ 166.277275][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.327165][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.396825][ T4618] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 166.427907][ T4618] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 166.432430][ T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 166.435931][ T4618] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 166.440640][ T4618] usb 2-1: USB disconnect, device number 19 [ 166.460334][ T5818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.468937][ T4273] usb 3-1: USB disconnect, device number 18 [ 166.486747][ T5818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.510847][ T5818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.756906][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 166.886920][ T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.895008][ T21] usb 5-1: config 0 has no interface number 0 [ 167.127006][ T21] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 167.140594][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.170553][ T21] usb 5-1: Product: syz [ 167.183873][ T21] usb 5-1: Manufacturer: syz [ 167.216692][ T21] usb 5-1: SerialNumber: syz [ 167.221805][ T4831] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 167.229064][ T21] usb 5-1: config 0 descriptor?? [ 167.298930][ T21] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 167.486793][ T4831] usb 4-1: Using ep0 maxpacket: 16 [ 167.606807][ T4195] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.606944][ T4831] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.624776][ T4832] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 167.640089][ T4831] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 167.656101][ T4831] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 167.672438][ T4831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.689288][ T4831] usb 4-1: config 0 descriptor?? [ 167.866764][ T4832] usb 2-1: Using ep0 maxpacket: 32 [ 167.886914][ T4195] usb 3-1: Using ep0 maxpacket: 16 [ 167.988204][ T4832] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 168.003593][ T4832] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 168.016953][ T4195] usb 3-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 168.032230][ T4832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.032314][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.042397][ T4832] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 168.042448][ T4832] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 168.059189][ T4195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 168.062589][ T4832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.077282][ T4195] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 168.109619][ T4195] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.113026][ T4832] usb 2-1: config 0 descriptor?? [ 168.207036][ T4195] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 168.228854][ T4195] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 168.242449][ T4195] usb 3-1: Manufacturer: syz [ 168.279138][ T5837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.523'. [ 168.299600][ T4195] usb 3-1: config 0 descriptor?? [ 168.520392][ T4273] usb 4-1: USB disconnect, device number 19 [ 168.539592][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 168.572448][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 168.581968][ T5834] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 168.625813][ T5846] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 168.648003][ T5846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.673804][ T5844] bond2: (slave geneve2): making interface the new active one [ 168.687686][ T5844] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 168.697717][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 168.776783][ T4195] rc_core: IR keymap rc-hauppauge not found [ 168.782994][ T4195] Registered IR keymap rc-empty [ 168.816938][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 168.876839][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 168.907570][ T4195] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 168.929228][ T4195] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 168.966849][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.016904][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.066831][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.077030][ T4832] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 169.116812][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.201643][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.257688][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.319951][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.376827][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.426840][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.467025][ T4832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 169.485131][ T4832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 169.486836][ T4195] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 169.549843][ T4195] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 169.568085][ T4195] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.627414][ T4195] usb 3-1: USB disconnect, device number 19 [ 169.666866][ T21] gspca_spca1528: reg_r err -71 [ 169.671896][ T21] spca1528: probe of 5-1:0.1 failed with error -71 [ 169.687207][ T4832] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 169.692815][ T21] usb 5-1: USB disconnect, device number 19 [ 169.718631][ T4832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.764344][ T4832] usb 1-1: Product: syz [ 169.784102][ T4832] usb 1-1: Manufacturer: syz [ 169.794451][ T4832] usb 1-1: SerialNumber: syz [ 169.818833][ T4832] usb 1-1: config 0 descriptor?? [ 169.861384][ T4832] hub 1-1:0.0: bad descriptor, ignoring hub [ 169.867781][ T4832] hub: probe of 1-1:0.0 failed with error -5 [ 169.887110][ T4832] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 170.302613][ T4617] usb 2-1: USB disconnect, device number 20 [ 170.736787][ T5895] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 170.783912][ T5895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.059346][ T4832] usb 1-1: USB disconnect, device number 16 [ 171.232291][ T4617] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 171.276925][ T4832] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 171.456930][ T4195] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 171.526751][ T4832] usb 1-1: Using ep0 maxpacket: 16 [ 171.657137][ T4832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.670345][ T4832] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 171.684163][ T4832] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 171.693405][ T4832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.719820][ T4617] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 171.736797][ T21] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 171.741919][ T4832] usb 1-1: config 0 descriptor?? [ 171.827036][ T4195] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 171.835172][ T4195] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 171.845896][ T4195] usb 5-1: config 4 has no interface number 0 [ 171.852310][ T4195] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.986764][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 172.016726][ T4617] usb 2-1: Using ep0 maxpacket: 16 [ 172.016953][ T4195] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 172.051659][ T4195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.067051][ T4195] usb 5-1: Product: syz [ 172.072397][ T4195] usb 5-1: Manufacturer: syz [ 172.099491][ T4195] usb 5-1: SerialNumber: syz [ 172.107016][ T21] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 172.117610][ T21] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 172.126571][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.137669][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 172.146825][ T21] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 172.155862][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.166143][ T21] usb 4-1: config 0 descriptor?? [ 172.177721][ T4617] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.226491][ T4617] usb 2-1: config 0 has no interface number 0 [ 172.339816][ T5900] sctp: [Deprecated]: syz.4.540 (pid 5900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.339816][ T5900] Use struct sctp_sack_info instead [ 172.456954][ T4195] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 172.457132][ T4617] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 172.475342][ T4617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.485235][ T4617] usb 2-1: Product: syz [ 172.488141][ T4195] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 172.498344][ T4617] usb 2-1: Manufacturer: syz [ 172.498377][ T4195] dib0700: firmware download failed at 7 with -22 [ 172.503037][ T4617] usb 2-1: SerialNumber: syz [ 172.519917][ T4617] usb 2-1: config 0 descriptor?? [ 172.530096][ T4195] usb 5-1: USB disconnect, device number 20 [ 172.544458][ T21] usb 1-1: USB disconnect, device number 17 [ 172.559128][ T4617] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 173.548284][ T5932] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 173.582197][ T5932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.751226][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.057076][ T4831] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 174.456933][ T4831] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.476248][ T4831] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.487738][ T4831] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.497567][ T4831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.509189][ T4832] usb 4-1: USB disconnect, device number 20 [ 174.527104][ T5943] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 174.567265][ T4288] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 174.765734][ T4832] usb 3-1: USB disconnect, device number 20 [ 174.826891][ T4288] usb 5-1: Using ep0 maxpacket: 16 [ 174.936801][ T4617] gspca_spca1528: reg_r err -71 [ 174.942808][ T4617] spca1528: probe of 2-1:0.1 failed with error -71 [ 174.948938][ T4288] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 174.953705][ T4617] usb 2-1: USB disconnect, device number 21 [ 174.973120][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.984736][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12648, setting to 1024 [ 175.001075][ T4288] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 175.011562][ T4288] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.107040][ T4288] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.119695][ T4288] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.128499][ T4288] usb 5-1: Manufacturer: syz [ 175.135000][ T4288] usb 5-1: config 0 descriptor?? [ 175.378920][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 175.388098][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 175.399962][ T5951] netlink: 'syz.4.556': attribute type 1 has an invalid length. [ 175.566917][ T4288] rc_core: IR keymap rc-hauppauge not found [ 175.573403][ T4288] Registered IR keymap rc-empty [ 175.609574][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 175.686808][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 175.729097][ T4288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 175.760098][ T4288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 175.784981][ T5972] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 175.798377][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 175.843398][ T5972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.856864][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 175.918867][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 175.996977][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.026207][ T5980] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 2, id = 0 [ 176.050575][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.106776][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.141042][ T5984] tipc: Enabled bearer , priority 0 [ 176.166896][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.175461][ T5984] device syzkaller0 entered promiscuous mode [ 176.212118][ T5984] tipc: Resetting bearer [ 176.216805][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.224712][ T3156] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 176.232744][ T5983] tipc: Resetting bearer [ 176.253458][ T5983] tipc: Disabling bearer [ 176.277567][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.327030][ T4288] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 176.364002][ T4288] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 176.382824][ T4288] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.406156][ T5990] netlink: 48 bytes leftover after parsing attributes in process `syz.4.569'. [ 176.426752][ T4195] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 176.449099][ T4288] usb 5-1: USB disconnect, device number 21 [ 176.467116][ T3156] usb 4-1: Using ep0 maxpacket: 32 [ 176.587998][ T3156] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.596596][ T3156] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.615466][ T3156] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.645421][ T3156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.665972][ T3156] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.676032][ T4195] usb 2-1: Using ep0 maxpacket: 32 [ 176.686914][ T3156] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 176.701298][ T3156] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.712950][ T3156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.720607][ T4832] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 176.743374][ T3156] usb 4-1: config 0 descriptor?? [ 176.796943][ T4195] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 176.816793][ T4195] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 176.825432][ T4195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.838237][ T4195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 176.847599][ T4195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.857524][ T4195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 176.870739][ T4195] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.880170][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.914006][ T4195] usb 2-1: config 0 descriptor?? [ 176.986766][ T4832] usb 3-1: Using ep0 maxpacket: 16 [ 177.011246][ T3156] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.116924][ T4832] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.128392][ T4832] usb 3-1: config 0 has no interface number 0 [ 177.207620][ T3156] usb 4-1: USB disconnect, device number 21 [ 177.217241][ T4831] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 177.227358][ T3156] usblp0: removed [ 177.307322][ T4832] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 177.321282][ T4832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.331783][ T4832] usb 3-1: Product: syz [ 177.336093][ T4832] usb 3-1: Manufacturer: syz [ 177.345266][ T4832] usb 3-1: SerialNumber: syz [ 177.363499][ T4832] usb 3-1: config 0 descriptor?? [ 177.411341][ T4832] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 177.485948][ T6000] device veth0 entered promiscuous mode [ 177.496557][ T6000] device veth0 left promiscuous mode [ 177.532337][ T6003] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 177.549349][ T6003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.566465][ T6003] bond1: (slave geneve2): making interface the new active one [ 177.576442][ T6003] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 177.590100][ T5101] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 177.617405][ T4831] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.628755][ T4831] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.639432][ T4831] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.648837][ T4831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.687145][ T5998] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 177.914656][ T3156] usb 1-1: USB disconnect, device number 18 [ 178.835641][ T6028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.967937][ T4195] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 179.169831][ T3156] usb 2-1: USB disconnect, device number 22 [ 179.227044][ T4195] usb 1-1: Using ep0 maxpacket: 16 [ 179.356823][ T4195] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.367619][ T4195] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 179.387889][ T4195] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 179.400071][ T4195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.413586][ T4195] usb 1-1: config 0 descriptor?? [ 179.454848][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.481170][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.492061][ T6048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.616807][ T3156] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 179.807055][ T4832] gspca_spca1528: reg_r err -71 [ 179.812218][ T4832] spca1528: probe of 3-1:0.1 failed with error -71 [ 179.834353][ T4832] usb 3-1: USB disconnect, device number 21 [ 179.852998][ T4195] usb 1-1: USB disconnect, device number 19 [ 179.860960][ T3156] usb 2-1: Using ep0 maxpacket: 32 [ 179.976952][ T3156] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 179.985553][ T3156] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 179.994255][ T3156] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.003695][ T3156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.013491][ T3156] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.023692][ T3156] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.036973][ T3156] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.046055][ T3156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.065780][ T3156] usb 2-1: config 0 descriptor?? [ 180.328251][ T3156] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 180.357170][ T4195] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 180.493501][ T6059] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 180.553158][ T4832] usb 2-1: USB disconnect, device number 23 [ 180.575115][ T4832] usblp0: removed [ 180.577560][ T6059] bond1: (slave veth3): Enslaving as an active interface with a down link [ 180.606882][ T4195] usb 5-1: Using ep0 maxpacket: 16 [ 180.615138][ T6067] bond1: (slave veth0_to_bond): making interface the new active one [ 180.625158][ T6067] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 180.642913][ T6059] device macvlan2 entered promiscuous mode [ 180.649944][ T6059] device bond1 entered promiscuous mode [ 180.655487][ T6059] device veth0_to_bond entered promiscuous mode [ 180.662457][ T6059] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.671600][ T6059] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 180.688879][ T6068] [ 180.691201][ T6068] ====================================================== [ 180.698197][ T6068] WARNING: possible circular locking dependency detected [ 180.705202][ T6068] syzkaller #0 Not tainted [ 180.709594][ T6068] ------------------------------------------------------ [ 180.716707][ T6068] syz.0.596/6068 is trying to acquire lock: [ 180.722582][ T6068] ffff888026427350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x529/0xcc0 [ 180.731698][ T6068] [ 180.731698][ T6068] but task is already holding lock: [ 180.739056][ T6068] ffff888060ca45d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 180.749640][ T6068] [ 180.749640][ T6068] which lock already depends on the new lock. [ 180.749640][ T6068] [ 180.760020][ T6068] [ 180.760020][ T6068] the existing dependency chain (in reverse order) is: [ 180.769018][ T6068] [ 180.769018][ T6068] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 180.777700][ T6068] __mutex_lock_common+0x1e5/0x2400 [ 180.783413][ T6068] mutex_lock_nested+0x17/0x20 [ 180.788676][ T6068] nfc_urelease_event_work+0x120/0x310 [ 180.794635][ T6068] process_one_work+0x867/0xff0 [ 180.799988][ T6068] worker_thread+0xad7/0x12a0 [ 180.805163][ T6068] kthread+0x42e/0x520 [ 180.809725][ T6068] ret_from_fork+0x1f/0x30 [ 180.814641][ T6068] [ 180.814641][ T6068] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 180.822442][ T6068] __mutex_lock_common+0x1e5/0x2400 [ 180.828144][ T6068] mutex_lock_nested+0x17/0x20 [ 180.833411][ T6068] nfc_register_device+0x38/0x300 [ 180.838935][ T6068] nci_register_device+0x89f/0x9f0 [ 180.844547][ T6068] virtual_ncidev_open+0x55/0xc0 [ 180.849989][ T6068] misc_open+0x31f/0x390 [ 180.854735][ T6068] chrdev_open+0x585/0x5f0 [ 180.859654][ T6068] do_dentry_open+0x7f7/0xf90 [ 180.864842][ T6068] path_openat+0x2718/0x2fb0 [ 180.869936][ T6068] do_filp_open+0x1df/0x400 [ 180.874942][ T6068] do_sys_openat2+0x14b/0x500 [ 180.880113][ T6068] __x64_sys_openat+0x135/0x160 [ 180.885463][ T6068] do_syscall_64+0x4c/0xa0 [ 180.890384][ T6068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.896779][ T6068] [ 180.896779][ T6068] -> #1 (nci_mutex){+.+.}-{3:3}: [ 180.903874][ T6068] __mutex_lock_common+0x1e5/0x2400 [ 180.909581][ T6068] mutex_lock_nested+0x17/0x20 [ 180.914843][ T6068] virtual_nci_close+0x13/0x40 [ 180.920112][ T6068] nci_dev_up+0x976/0xd90 [ 180.924945][ T6068] nfc_dev_up+0x15d/0x310 [ 180.929770][ T6068] nfc_genl_dev_up+0x85/0xd0 [ 180.934854][ T6068] genl_rcv_msg+0xd0b/0xfa0 [ 180.939869][ T6068] netlink_rcv_skb+0x1e9/0x430 [ 180.945134][ T6068] genl_rcv+0x24/0x40 [ 180.949611][ T6068] netlink_unicast+0x78f/0x940 [ 180.954870][ T6068] netlink_sendmsg+0x8ba/0xbe0 [ 180.960128][ T6068] ____sys_sendmsg+0x5be/0x8f0 [ 180.965390][ T6068] ___sys_sendmsg+0x236/0x2e0 [ 180.970563][ T6068] __se_sys_sendmsg+0x1b7/0x2a0 [ 180.975906][ T6068] do_syscall_64+0x4c/0xa0 [ 180.980823][ T6068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.987217][ T6068] [ 180.987217][ T6068] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 180.994843][ T6068] __lock_acquire+0x2c66/0x7b50 [ 181.000195][ T6068] lock_acquire+0x19e/0x400 [ 181.005209][ T6068] __mutex_lock_common+0x1e5/0x2400 [ 181.010914][ T6068] mutex_lock_nested+0x17/0x20 [ 181.016175][ T6068] nci_start_poll+0x529/0xcc0 [ 181.021353][ T6068] nfc_start_poll+0x141/0x2c0 [ 181.026522][ T6068] nfc_genl_start_poll+0x1d7/0x340 [ 181.032144][ T6068] genl_rcv_msg+0xd0b/0xfa0 [ 181.037141][ T6068] netlink_rcv_skb+0x1e9/0x430 [ 181.042403][ T6068] genl_rcv+0x24/0x40 [ 181.046880][ T6068] netlink_unicast+0x78f/0x940 [ 181.052314][ T6068] netlink_sendmsg+0x8ba/0xbe0 [ 181.057587][ T6068] ____sys_sendmsg+0x5be/0x8f0 [ 181.062859][ T6068] ___sys_sendmsg+0x236/0x2e0 [ 181.068049][ T6068] __se_sys_sendmsg+0x1b7/0x2a0 [ 181.073413][ T6068] do_syscall_64+0x4c/0xa0 [ 181.078331][ T6068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.084718][ T6068] [ 181.084718][ T6068] other info that might help us debug this: [ 181.084718][ T6068] [ 181.094929][ T6068] Chain exists of: [ 181.094929][ T6068] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 181.094929][ T6068] [ 181.109333][ T6068] Possible unsafe locking scenario: [ 181.109333][ T6068] [ 181.116767][ T6068] CPU0 CPU1 [ 181.122114][ T6068] ---- ---- [ 181.127468][ T6068] lock(&genl_data->genl_data_mutex); [ 181.132903][ T6068] lock(nfc_devlist_mutex); [ 181.139997][ T6068] lock(&genl_data->genl_data_mutex); [ 181.147956][ T6068] lock(&ndev->req_lock); [ 181.152354][ T6068] [ 181.152354][ T6068] *** DEADLOCK *** [ 181.152354][ T6068] [ 181.160479][ T6068] 4 locks held by syz.0.596/6068: [ 181.165498][ T6068] #0: ffffffff8d4a9db0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 181.173654][ T6068] #1: ffffffff8d4a9c08 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 181.182588][ T6068] #2: ffff888060ca45d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 181.193604][ T6068] #3: ffff888060ca4190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 181.202708][ T6068] [ 181.202708][ T6068] stack backtrace: [ 181.208575][ T6068] CPU: 1 PID: 6068 Comm: syz.0.596 Not tainted syzkaller #0 [ 181.215838][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.225891][ T6068] Call Trace: [ 181.229160][ T6068] [ 181.232161][ T6068] dump_stack_lvl+0x188/0x250 [ 181.236833][ T6068] ? load_image+0x410/0x410 [ 181.241337][ T6068] ? show_regs_print_info+0x20/0x20 [ 181.246528][ T6068] ? print_circular_bug+0x12b/0x1a0 [ 181.251743][ T6068] check_noncircular+0x296/0x330 [ 181.256682][ T6068] ? add_chain_block+0x9b0/0x9b0 [ 181.261599][ T6068] ? lockdep_lock+0xf1/0x1f0 [ 181.266182][ T6068] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 181.272059][ T6068] ? mark_lock+0x94/0x320 [ 181.276372][ T6068] ? _find_first_zero_bit+0xd1/0xf0 [ 181.281550][ T6068] __lock_acquire+0x2c66/0x7b50 [ 181.286394][ T6068] ? kasan_set_track+0x62/0x70 [ 181.291160][ T6068] ? slab_free_freelist_hook+0xec/0x170 [ 181.296702][ T6068] ? kfree+0xef/0x2a0 [ 181.300681][ T6068] ? nfc_llcp_build_gb+0x36d/0x440 [ 181.305791][ T6068] ? nfc_llcp_general_bytes+0x39/0x160 [ 181.311309][ T6068] ? nfc_start_poll+0x141/0x2c0 [ 181.316141][ T6068] ? nfc_genl_start_poll+0x1d7/0x340 [ 181.321410][ T6068] ? verify_lock_unused+0x140/0x140 [ 181.326595][ T6068] ? netlink_unicast+0x78f/0x940 [ 181.331526][ T6068] ? netlink_sendmsg+0x8ba/0xbe0 [ 181.336445][ T6068] ? ____sys_sendmsg+0x5be/0x8f0 [ 181.341388][ T6068] ? ___sys_sendmsg+0x236/0x2e0 [ 181.346221][ T6068] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 181.351263][ T6068] ? do_syscall_64+0x4c/0xa0 [ 181.355842][ T6068] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.361917][ T6068] lock_acquire+0x19e/0x400 [ 181.366413][ T6068] ? nci_start_poll+0x529/0xcc0 [ 181.371256][ T6068] ? __might_sleep+0xf0/0xf0 [ 181.375843][ T6068] ? read_lock_is_recursive+0x10/0x10 [ 181.381201][ T6068] ? slab_free_freelist_hook+0xec/0x170 [ 181.386735][ T6068] __mutex_lock_common+0x1e5/0x2400 [ 181.391923][ T6068] ? nci_start_poll+0x529/0xcc0 [ 181.396775][ T6068] ? nfc_llcp_build_gb+0x36d/0x440 [ 181.401888][ T6068] ? nci_start_poll+0x529/0xcc0 [ 181.406726][ T6068] ? nfc_llcp_general_bytes+0x160/0x160 [ 181.412260][ T6068] ? mutex_lock_io_nested+0x60/0x60 [ 181.417463][ T6068] ? kobject_put+0x416/0x450 [ 181.422037][ T6068] ? _raw_spin_unlock+0x24/0x40 [ 181.426867][ T6068] mutex_lock_nested+0x17/0x20 [ 181.431613][ T6068] nci_start_poll+0x529/0xcc0 [ 181.436345][ T6068] ? nci_dev_down+0x40/0x40 [ 181.440837][ T6068] ? __mutex_lock_common+0x435/0x2400 [ 181.446235][ T6068] ? klist_iter_exit+0xbc/0xf0 [ 181.451012][ T6068] ? class_find_device+0x232/0x290 [ 181.456109][ T6068] ? nfc_start_poll+0x4f/0x2c0 [ 181.460856][ T6068] ? class_for_each_device+0x290/0x290 [ 181.466316][ T6068] ? nfc_genl_start_poll+0x1c9/0x340 [ 181.471583][ T6068] ? mutex_lock_io_nested+0x60/0x60 [ 181.476767][ T6068] ? nfc_get_device+0x82/0xd0 [ 181.481422][ T6068] ? nfc_release+0x2e0/0x2e0 [ 181.485994][ T6068] nfc_start_poll+0x141/0x2c0 [ 181.490657][ T6068] nfc_genl_start_poll+0x1d7/0x340 [ 181.495761][ T6068] genl_rcv_msg+0xd0b/0xfa0 [ 181.500271][ T6068] ? genl_bind+0x370/0x370 [ 181.504674][ T6068] ? verify_lock_unused+0x140/0x140 [ 181.509888][ T6068] ? verify_lock_unused+0x140/0x140 [ 181.515079][ T6068] ? nfc_genl_dev_down+0xd0/0xd0 [ 181.519999][ T6068] netlink_rcv_skb+0x1e9/0x430 [ 181.524750][ T6068] ? genl_bind+0x370/0x370 [ 181.529145][ T6068] ? netlink_ack+0xb10/0xb10 [ 181.533735][ T6068] ? down_read+0x1aa/0x2e0 [ 181.538136][ T6068] genl_rcv+0x24/0x40 [ 181.542097][ T6068] netlink_unicast+0x78f/0x940 [ 181.546850][ T6068] netlink_sendmsg+0x8ba/0xbe0 [ 181.551618][ T6068] ? netlink_getsockopt+0x570/0x570 [ 181.556797][ T6068] ? aa_sock_msg_perm+0x94/0x150 [ 181.562281][ T6068] ? apparmor_socket_sendmsg+0x88/0x230 [ 181.567812][ T6068] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 181.573078][ T6068] ? security_socket_sendmsg+0x7c/0xa0 [ 181.578519][ T6068] ? netlink_getsockopt+0x570/0x570 [ 181.583717][ T6068] ____sys_sendmsg+0x5be/0x8f0 [ 181.588549][ T6068] ? __sys_sendmsg_sock+0x30/0x30 [ 181.593566][ T6068] ? import_iovec+0x6f/0xa0 [ 181.598060][ T6068] ___sys_sendmsg+0x236/0x2e0 [ 181.602723][ T6068] ? __sys_sendmsg+0x290/0x290 [ 181.607496][ T6068] __se_sys_sendmsg+0x1b7/0x2a0 [ 181.612324][ T6068] ? __x64_sys_sendmsg+0x80/0x80 [ 181.617241][ T6068] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 181.623211][ T6068] ? lockdep_hardirqs_on+0x94/0x140 [ 181.628405][ T6068] do_syscall_64+0x4c/0xa0 [ 181.632805][ T6068] ? clear_bhb_loop+0x30/0x80 [ 181.637461][ T6068] ? clear_bhb_loop+0x30/0x80 [ 181.642123][ T6068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.647995][ T6068] RIP: 0033:0x7fdd7250f159 [ 181.652394][ T6068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.671991][ T6068] RSP: 002b:00007fdd70746028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.680476][ T6068] RAX: ffffffffffffffda RBX: 00007fdd72797090 RCX: 00007fdd7250f159 [ 181.688442][ T6068] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 181.696402][ T6068] RBP: 00007fdd725a6024 R08: 0000000000000000 R09: 0000000000000000 [ 181.704360][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.712338][ T6068] R13: 00007fdd72797128 R14: 00007fdd72797090 R15: 00007fff8a326208 [ 181.720296][ T6068] [ 181.743881][ T6059] device bond1 left promiscuous mode [ 181.752785][ T6059] device veth0_to_bond left promiscuous mode [ 181.759188][ T6068] nci: nci_start_poll: failed to set local general bytes [ 181.760731][ T4195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.857006][ T4195] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.866055][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.875001][ T4195] usb 5-1: SerialNumber: syz [ 182.161625][ T4195] usb 5-1: USB disconnect, device number 22 [ 183.536267][ T6062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512