last executing test programs: 7.321757861s ago: executing program 3 (id=4279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="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", 0x13d}, {&(0x7f0000001000)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb89780f947153fd1f3c787a347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4d5888807b3a16b16b50cd878189d8c936bb20b0f5ccdb919ff0c0cc3fc6d35bde10aba5a7053e9f2eb1bdf13ce7f2c821896470226da0653890ece2f79f8d16e6591341f8969920c431c11e8a0d2ce6e2", 0xe5}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b89", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)="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", 0x146}, {&(0x7f0000000b80)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c52e17658832b8a5a6ea2934fe1c0fe868869f393b0f0370c3f0dfc3e25b390c5127c8952ea5501e967c1d10383fc5d037f3daf6cfc3e7a8595a3bc1116fa8f80a88894860903df4f385620a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd2314974286a10fa85c32176ab08782fd35a775df6697061c8b9143fec0996b0622e8a4d524", 0xf5}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) 6.989505461s ago: executing program 2 (id=4284): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x81, 0x0, 0x0, 0x0}, {0x6, 0x2000, 0x0, 0x0}], 0x2}) 6.872185419s ago: executing program 2 (id=4286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="06001200000000000600b50085010200040013000a0006000802"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 6.834472541s ago: executing program 2 (id=4287): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x138) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe78, 0x0}, 0x4000014) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30300300303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000100)='./file0\x00', 0x0, r6, 0x400) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87ac3ae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) recvmmsg(r7, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 6.351580508s ago: executing program 3 (id=4289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$kvm(0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x3, 0xab}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0}) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000b40)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x4) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x48000046, r7, 0x0) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x0, 0x70bd29, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80a0}, 0x40) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r8, 0x80047437, 0x10004000000006) 4.889607661s ago: executing program 2 (id=4299): unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 4.864048974s ago: executing program 4 (id=4300): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x68}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "d7d97086db4af500", "c5a87055178fc2cf5c8bf8f9d0e9bb18", "2ac3948f", '\a\x00'}, 0x28) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000005c0)="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", 0x800}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x4) getpid() 4.823713923s ago: executing program 2 (id=4301): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40), 0x0, 0x4000004) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r6 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write(r6, &(0x7f00000002c0), 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) 3.869880711s ago: executing program 1 (id=4304): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000300)={0x1, 0x638, 0x8, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="14000210766c616e3000"/19], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1) fcntl$notify(0xffffffffffffffff, 0x402, 0x4000002d) fcntl$notify(r2, 0x402, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x25f, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x1a) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/139, 0x8b) 3.704088948s ago: executing program 1 (id=4306): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x138) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe78, 0x0}, 0x4000014) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c726f6f746d6f64653d30300300303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) fchownat(r0, &(0x7f0000000100)='./file0\x00', 0x0, r7, 0x400) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87ac3ae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) recvmmsg(r8, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 3.20838906s ago: executing program 3 (id=4310): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}, {&(0x7f0000000dc0)="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", 0x157}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f0000001000)="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", 0x11c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b89", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)="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", 0x146}, {&(0x7f0000000b80)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c52e17658832b8a5a6ea2934fe1c0fe868869f393b0f0370c3f0dfc3e25b390c5127c8952ea5501e967c1d10383fc5d037f3daf6cfc3e7a8595a3bc1116fa8f80a88894860903df4f385620a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd2314974286a10fa85c32176ab08782fd35a775df6697061c8b9143fec0996b0622e8a4d524", 0xf5}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) 3.084529871s ago: executing program 3 (id=4311): unshare(0x20000400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 2.963313451s ago: executing program 4 (id=4313): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x2, 0x6, 0x0, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x80000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980909, 0x8000, '\x00', @p_u16=0x0}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7b, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = dup3(r5, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) 2.94313478s ago: executing program 3 (id=4314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.704690075s ago: executing program 3 (id=4315): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) 2.692970386s ago: executing program 2 (id=4316): syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x66, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x408, 0xb319, 0x3}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x6}}) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000540), 0x2, 0x80000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002500010329bd7000fddbdf251500000004002f803969fb600a61a544b0cfd1f409f77f5af580062e3b808f6375f146098f148c23bfc988c4"], 0x18}, 0x1, 0x0, 0x0, 0xc804}, 0x3e59cdaa2f3e420c) r7 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6) fcntl$addseals(r7, 0x409, 0x3f) syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2000) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.168391805s ago: executing program 1 (id=4317): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x7, 0xffffffffffffffff, &(0x7f00000001c0)=0x4, 0x6, 0x6) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x83) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) 1.919990809s ago: executing program 0 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000060000000800", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) 1.748654146s ago: executing program 0 (id=4319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 1.737040578s ago: executing program 1 (id=4320): keyctl$get_persistent(0x16, 0xee00, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0x32}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r3, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.556260988s ago: executing program 0 (id=4321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.538048624s ago: executing program 4 (id=4322): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}, {&(0x7f0000000dc0)="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", 0x157}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f0000001000)="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", 0x11c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b89", 0x63}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)="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", 0x146}, {&(0x7f0000000b80)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c52e17658832b8a5a6ea2934fe1c0fe868869f393b0f0370c3f0dfc3e25b390c5127c8952ea5501e967c1d10383fc5d037f3daf6cfc3e7a8595a3bc1116fa8f80a88894860903df4f385620a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d377a747038116bc137153515fd9a91ad0042640dd2314974286a10fa85c32176ab08782fd35a775df6697061c8b9143fec0996b0622e8a4d524", 0xf5}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0) 1.472136532s ago: executing program 0 (id=4323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) 1.421522547s ago: executing program 4 (id=4324): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0xff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) gettid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x68}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@gcm_128={{0x303}, "d7d97086db4af500", "c5a87055178fc2cf5c8bf8f9d0e9bb18", "2ac3948f", '\a\x00'}, 0x28) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000005c0)="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", 0xc00}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x4) getpid() 1.42022457s ago: executing program 0 (id=4325): close(0x3) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(0x0, 0x0, 0x0) close(0x3) 771.840711ms ago: executing program 1 (id=4326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 575.90042ms ago: executing program 1 (id=4327): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40), 0x0, 0x4000004) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r6 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02", 0x15) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) 402.267862ms ago: executing program 0 (id=4328): socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2ec45e59a05ff81c70060fa8c8696a", 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40), 0x0, 0x4000004) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) r6 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write(r6, &(0x7f00000002c0), 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) 41.986805ms ago: executing program 4 (id=4329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000006000000080003", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) 0s ago: executing program 4 (id=4330): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000cf3000000c3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001700)={0x1c, &(0x7f0000001740)=ANY=[@ANYBLOB="20174f000000464a683edc26d8db9b999ae9715fd64e28f759e76a3709e6ebc4b97fed908d7354231157203765dbc226c28649a434357ab23ed6c73cba2b3f5d85d9d8603988dc63bc992b595228fa59cb74ed20ac2a5bfda0c18bd73ed897fe3f10f175f1bab8f106d1ae936dea6ee0111e2ecce248ecd6657b3af5addc1d3e9a5e8ebfd74eb8a152ea4be8cbe2a992d520dad381c74f68a14f7938cf16d53e8baccca1241dcecbfdeb19b7166ba0aa6ef3d5da9a70c92b89cf1898c5ff59718a0c5ad7ecfe8f3ab45f8db5cacbcbf39fcbf5812e47eb0d876b68512040bc5ef6eb131b678038b183d6b5fff0821fde2ed3a1f8a198d5954dca311a2f0d64b12540f73da2785ac88d5d9d3e609ccd2c03bfe32beb781866a13848a70cdb341da7a929c3d2b6ccb02fe4430130b43a46d4f8"], &(0x7f0000001680)={0x0, 0xa, 0x1, 0x3e}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x4}}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x7}, 0x8) syz_usb_control_io$lan78xx(r0, &(0x7f0000001180)={0x14, &(0x7f0000001080)={0x20, 0xc, 0x5, {0x5, 0xf, "95c12e"}}, &(0x7f00000010c0)={0x0, 0x3, 0x97, @string={0x97, 0x3, "6a856f3164b18c951473d062a0283059056f78e9554fb0a7514514bc0aaa63bb2d4daffe249f92271ff516b89158217e4ab6031bc348b7b8be11a233e5a90c647edf93b579221f853bdcf376f638de2362df17d24eca60e34342e3300791b03c0a020ed2eaeb0befe24d0f4101ff305edf2c0d46b962d24d5d93a37e10948c72413512d6cca70142c357427e94325f9ccc9ffecd71"}}}, &(0x7f00000013c0)={0x34, &(0x7f00000011c0)={0x20, 0xf, 0x94, "f7cf74abc54fd02eba118f9eb174bba6ea3aa11fb04e771b6bc51650c4614cb260cfd4a7c3504deadbbab3b4e59969d157cdebfb59dc10cac7a39ea63a9fdc9ec5ce889b616f0f5a45deb24db43174216f8c579063bcaebd722e977f459c04dbd61700e3ba0d23bea672d885e0ae3c9e8f6abf199458e020c57621e485918fe8712e769eea56d8a50df9c820b2b47d8484fbee8f"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0xd}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001300)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000001340)={0x40, 0xa0, 0x4, 0x82}, &(0x7f0000001400)={0xc0, 0xa2, 0x2f, "93a13067f2c4215e194b2fc602c8e987169569e52ba07a2e74a50c3a2d6597fa98323333e4a13a1ccca261fd3275ca"}}) kernel console output (not intermixed with test programs): erfaces? [ 563.624340][ T5941] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 563.644330][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.656899][ T5941] usb 5-1: Product: syz [ 563.662524][ T5941] usb 5-1: Manufacturer: syz [ 563.668060][ T5941] usb 5-1: SerialNumber: syz [ 563.672967][ T5936] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 563.681595][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.694576][ T5941] usb 5-1: config 0 descriptor?? [ 563.703746][ T5936] usb 2-1: config 0 has no interface number 0 [ 563.728858][ T5936] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 563.747070][ T5936] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 563.758334][ T5936] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 563.769170][ T5936] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 563.782566][ T5936] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 563.791844][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.816300][ T5936] usb 2-1: config 0 descriptor?? [ 563.844210][ T5936] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 564.605556][ T5885] usb 2-1: USB disconnect, device number 127 [ 564.611762][ T141] usb 2-1: Failed to submit usb control message: -71 [ 564.624724][ T141] usb 2-1: unable to send the bmi data to the device: -71 [ 564.632064][ T141] usb 2-1: unable to get target info from device [ 564.645452][ T141] usb 2-1: could not get target info (-71) [ 564.651394][ T141] usb 2-1: could not probe fw (-71) [ 565.498761][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 565.656057][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 565.663454][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.674319][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.685708][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 565.695776][ T5885] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 565.705813][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.721779][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.732141][ T5885] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.742667][ T5885] usb 2-1: Manufacturer: syz [ 565.751214][ T5885] usb 2-1: config 0 descriptor?? [ 566.362942][ T5936] usb 5-1: USB disconnect, device number 118 [ 566.504102][ T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 566.524123][ T5941] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 566.684056][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 566.684114][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 566.697354][ T5941] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 566.708616][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.708636][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.708664][ T9] usb 1-1: config 0 has no interfaces? [ 566.735841][ T5941] usb 4-1: config 0 descriptor?? [ 566.753227][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 566.759840][ T5941] as10x_usb: device has been detected [ 566.774333][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.777369][ T5941] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 566.782361][ T9] usb 1-1: Product: syz [ 566.782381][ T9] usb 1-1: Manufacturer: syz [ 566.782397][ T9] usb 1-1: SerialNumber: syz [ 566.812637][ T5941] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 566.829068][ T9] usb 1-1: config 0 descriptor?? [ 566.830838][ T5941] as10x_usb: error during firmware upload part1 [ 566.845504][ T5941] Registered device nBox DVB-T Dongle [ 566.985692][ T9] usb 4-1: USB disconnect, device number 121 [ 567.034358][ T9] Unregistered device nBox DVB-T Dongle [ 567.036254][ T9] as10x_usb: device has been disconnected [ 567.181770][T15986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3950'. [ 567.234177][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3950'. [ 567.568295][T15987] input: syz0 as /devices/virtual/input/input49 [ 567.990806][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 567.990843][ T30] audit: type=1326 audit(1775764011.476:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.068017][ T30] audit: type=1326 audit(1775764011.476:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.099924][ T30] audit: type=1326 audit(1775764011.476:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.132065][ T30] audit: type=1326 audit(1775764011.476:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.220172][ T30] audit: type=1326 audit(1775764011.476:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.284816][ T30] audit: type=1326 audit(1775764011.476:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.369192][ T30] audit: type=1326 audit(1775764011.506:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.400218][ T5885] rc_core: IR keymap rc-hauppauge not found [ 568.422641][ T5885] Registered IR keymap rc-empty [ 568.442967][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.452531][ T30] audit: type=1326 audit(1775764011.516:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.493996][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.507186][ T30] audit: type=1326 audit(1775764011.516:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.533515][ T30] audit: type=1326 audit(1775764011.516:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15992 comm="syz.3.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6dd959c819 code=0x7ffc0000 [ 568.535390][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 568.697523][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 568.755627][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.804249][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.854430][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.894085][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.941049][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 568.985094][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.014194][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.043997][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.064091][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.108226][ T5885] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 569.157340][ T5885] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 569.186292][ T5885] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 569.221736][ T5885] usb 2-1: USB disconnect, device number 2 [ 569.603997][ T5885] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 569.657013][ T5936] usb 1-1: USB disconnect, device number 110 [ 569.766055][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.783979][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 569.792885][ T5885] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 569.825928][ T5885] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 569.843969][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.865925][T16000] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 569.884569][ T5885] hub 2-1:1.0: bad descriptor, ignoring hub [ 569.890515][ T5885] hub 2-1:1.0: probe with driver hub failed with error -5 [ 569.914276][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 569.919493][ T5885] cdc_wdm 2-1:1.0: skipping garbage [ 569.931894][ T5885] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 569.943965][ T5885] cdc_wdm 2-1:1.0: Unknown control protocol [ 570.010768][T15931] Set syz1 is full, maxelem 65536 reached [ 570.074218][ T5936] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 570.175514][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 570.182174][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 570.234124][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 570.241304][ T5936] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 570.253581][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.256302][T16020] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 570.264360][ T5936] usb 1-1: config 0 has no interfaces? [ 570.272269][T16020] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 570.279887][ T5936] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 570.293844][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.302228][ T5936] usb 1-1: Product: syz [ 570.306819][ T5936] usb 1-1: Manufacturer: syz [ 570.311455][ T5936] usb 1-1: SerialNumber: syz [ 570.324519][ T5936] usb 1-1: config 0 descriptor?? [ 570.343965][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 570.443980][ T1215] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 570.493953][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 570.500632][ T5885] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 570.508752][ T5885] usb 3-1: config 0 has no interface number 0 [ 570.516599][ T5885] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 570.525727][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.533722][ T5885] usb 3-1: Product: syz [ 570.538264][ T5885] usb 3-1: Manufacturer: syz [ 570.542882][ T5885] usb 3-1: SerialNumber: syz [ 570.549433][ T5885] usb 3-1: config 0 descriptor?? [ 570.557911][ T5885] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 570.595782][ T1215] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.606092][ T1215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.615058][ T1215] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 570.626094][ T5936] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 570.634002][ T1215] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 570.643439][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.654784][T16018] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 570.664394][ T1215] hub 5-1:1.0: bad descriptor, ignoring hub [ 570.670327][ T1215] hub 5-1:1.0: probe with driver hub failed with error -5 [ 570.678303][ T1215] cdc_wdm 5-1:1.0: skipping garbage [ 570.683685][ T1215] cdc_wdm 5-1:1.0: skipping garbage [ 570.690402][ T1215] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 570.696660][ T1215] cdc_wdm 5-1:1.0: Unknown control protocol [ 570.755569][ T9] usb 2-1: USB disconnect, device number 3 [ 570.768027][ T5885] gspca_spca1528: reg_w err -71 [ 570.784333][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 570.785664][ T5885] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 570.794396][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.800547][ T5885] usb 3-1: USB disconnect, device number 9 [ 570.813232][ T5936] usb 4-1: config 0 has no interfaces? [ 570.823046][ T5936] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 570.832599][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.840807][ T5936] usb 4-1: Product: syz [ 570.846253][ T5936] usb 4-1: Manufacturer: syz [ 570.850837][ T5936] usb 4-1: SerialNumber: syz [ 570.857845][ T5936] usb 4-1: config 0 descriptor?? [ 570.924002][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 571.086046][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 571.092698][ T9] usb 2-1: config 0 has no interfaces? [ 571.098470][ T9] usb 2-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 571.107758][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.118517][ T9] usb 2-1: config 0 descriptor?? [ 571.182536][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3971'. [ 571.192111][ T5936] usb 5-1: USB disconnect, device number 119 [ 571.209950][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3971'. [ 571.228035][T16027] input: syz0 as /devices/virtual/input/input51 [ 571.346147][T16000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3960'. [ 571.370464][ T5936] usb 2-1: USB disconnect, device number 4 [ 571.584116][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 571.744868][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 571.756748][ T9] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 571.768248][ T9] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 571.779114][ T9] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 571.793979][ T9] usb 3-1: config 166 has no interface number 0 [ 571.802971][ T9] usb 3-1: config 166 has no interface number 1 [ 571.814947][ T9] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 571.836256][ T9] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 571.851682][ T9] usb 3-1: config 166 interface 34 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 571.865345][ T9] usb 3-1: config 166 interface 177 has no altsetting 0 [ 571.872386][ T9] usb 3-1: config 166 interface 34 has no altsetting 0 [ 571.881875][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 571.891828][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.900631][ T9] usb 3-1: Product: syz [ 571.915256][ T9] usb 3-1: Manufacturer: syz [ 571.923289][ T9] usb 3-1: SerialNumber: syz [ 571.984018][ T5885] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 572.154050][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 572.160701][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 572.172451][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 572.183601][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 572.195157][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 572.206604][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 572.214149][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 572.229507][ T5885] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 572.239140][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.247435][ T5885] usb 5-1: Product: syz [ 572.251689][ T5885] usb 5-1: Manufacturer: syz [ 572.256590][ T5885] usb 5-1: SerialNumber: syz [ 572.266314][ T5885] usb 5-1: config 0 descriptor?? [ 572.342412][ T9] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 572.376688][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 572.385810][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 572.396841][ T5936] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 572.408296][ T5936] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 572.419894][ T5936] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 572.429763][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.438708][ T5936] usb 2-1: Product: syz [ 572.442917][ T5936] usb 2-1: Manufacturer: syz [ 572.447911][ T5936] usb 2-1: SerialNumber: syz [ 572.477851][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 572.486409][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.493070][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.499898][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.506537][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.513038][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.519804][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.526317][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.532621][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.539160][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.545895][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.552920][ T9] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 572.560502][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.567289][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.576782][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.583355][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.589880][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.596421][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.602737][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.609123][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.615765][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 572.621782][ T5885] input input52: Timeout waiting for response from device. [ 572.641532][ T5885] usb 5-1: USB disconnect, device number 120 [ 572.667676][ T5936] usb 2-1: USB disconnect, device number 5 [ 572.753379][ T9] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 572.765249][ T9] uvcvideo 3-1:166.34: No valid video chain found. [ 572.774764][ T9] usb 3-1: USB disconnect, device number 10 [ 573.001230][ T9] usb 1-1: USB disconnect, device number 111 [ 573.323960][ T5885] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 573.504163][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 573.515556][ T5885] usb 5-1: unable to get BOS descriptor or descriptor too short [ 573.531223][ T5885] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 573.553310][ T5885] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 573.574547][ T5885] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 573.631484][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.656666][ T5885] usb 5-1: Product: syz [ 573.667039][ T5885] usb 5-1: Manufacturer: syz [ 573.675906][ T5885] usb 5-1: SerialNumber: syz [ 573.872332][T16067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.907550][ T1215] usb 5-1: USB disconnect, device number 121 [ 573.958687][ T5885] usb 4-1: USB disconnect, device number 122 [ 574.164099][ T5936] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 574.209064][T16081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3989'. [ 574.318316][T16081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3989'. [ 574.334398][ T5885] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 574.348803][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.369409][ T5936] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 574.379871][ T5936] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 574.391281][ T5936] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 574.406818][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.420348][T16069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 574.436658][ T5936] hub 3-1:1.0: bad descriptor, ignoring hub [ 574.442997][ T5936] hub 3-1:1.0: probe with driver hub failed with error -5 [ 574.465283][ T5936] cdc_wdm 3-1:1.0: skipping garbage [ 574.473358][ T5936] cdc_wdm 3-1:1.0: skipping garbage [ 574.528962][ T5936] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 574.534076][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 574.547182][ T5936] cdc_wdm 3-1:1.0: Unknown control protocol [ 574.603276][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.655015][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.714282][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 574.753987][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 574.791863][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.794051][ T5916] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 574.869160][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 574.895446][ T5885] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 574.945940][ T5885] usb 4-1: Manufacturer: syz [ 575.014665][ T5885] usb 4-1: config 0 descriptor?? [ 575.036832][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 575.075825][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.107026][ T5916] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 575.137770][ T5916] usb 5-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 575.162544][ T5916] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 575.182001][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.200670][ T5916] usb 5-1: Product: syz [ 575.215197][ T5916] usb 5-1: Manufacturer: syz [ 575.219834][ T5916] usb 5-1: SerialNumber: syz [ 575.485862][ T5892] usb 5-1: USB disconnect, device number 122 [ 575.505330][ T5936] usb 3-1: USB disconnect, device number 11 [ 575.665342][ T5936] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 575.844273][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 575.851406][ T5936] usb 3-1: config 0 has no interfaces? [ 575.857435][ T5936] usb 3-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 575.866755][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.877214][ T5936] usb 3-1: config 0 descriptor?? [ 576.054118][ T1215] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 576.112425][T16069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3986'. [ 576.123934][ T9] usb 3-1: USB disconnect, device number 12 [ 576.203969][ T1215] usb 2-1: Using ep0 maxpacket: 32 [ 576.210801][ T1215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.221413][ T1215] usb 2-1: config 0 has no interfaces? [ 576.229354][ T1215] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 576.238653][ T1215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.246723][ T1215] usb 2-1: Product: syz [ 576.251077][ T1215] usb 2-1: Manufacturer: syz [ 576.255808][ T1215] usb 2-1: SerialNumber: syz [ 576.262850][ T1215] usb 2-1: config 0 descriptor?? [ 576.589299][T16104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3997'. [ 576.618059][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 576.635955][T16104] input: syz0 as /devices/virtual/input/input53 [ 576.983970][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 577.053961][ T5892] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 577.104085][ T5885] rc_core: IR keymap rc-hauppauge not found [ 577.117097][ T5885] Registered IR keymap rc-empty [ 577.128979][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.154028][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.176096][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 577.188040][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 577.200212][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 577.209973][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 577.221119][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 577.233660][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 577.239184][ T9] usb 3-1: can't read configurations, error -71 [ 577.248103][ T5892] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 577.265371][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.274400][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.296067][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.303842][ T5892] usb 1-1: config 0 descriptor?? [ 577.327768][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.336338][ T5892] as10x_usb: device has been detected [ 577.347168][ T5892] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 577.365134][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.374549][ T5892] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 577.402645][ T5892] as10x_usb: error during firmware upload part1 [ 577.409643][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.421247][ T5892] Registered device nBox DVB-T Dongle [ 577.433993][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.464147][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.493453][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.524867][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.543984][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 577.558093][ T1215] usb 1-1: USB disconnect, device number 112 [ 577.595562][ T5885] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 577.604271][ T5885] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 577.619254][ T1215] Unregistered device nBox DVB-T Dongle [ 577.621335][ T5885] usb 4-1: USB disconnect, device number 123 [ 577.622181][ T1215] as10x_usb: device has been disconnected [ 577.815132][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4005'. [ 577.957546][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4006'. [ 578.378113][T16134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.440649][T16134] netlink: 'syz.0.4008': attribute type 10 has an invalid length. [ 578.456919][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 578.475936][T16134] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 578.504047][T16134] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 578.633933][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 578.642115][ T9] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 578.665581][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.696329][ T9] usb 3-1: config 0 descriptor?? [ 578.729198][ T9] as10x_usb: device has been detected [ 578.752909][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 578.799830][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 578.838723][ T9] as10x_usb: error during firmware upload part1 [ 578.860328][ T9] Registered device nBox DVB-T Dongle [ 578.884045][ T5936] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 578.940992][ T1215] usb 3-1: USB disconnect, device number 15 [ 578.963393][ T1215] Unregistered device nBox DVB-T Dongle [ 578.970940][ T1215] as10x_usb: device has been disconnected [ 579.044048][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 579.051669][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.062265][ T5936] usb 4-1: config 0 has no interfaces? [ 579.085898][ T5936] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 579.097883][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.106268][ T5936] usb 4-1: Product: syz [ 579.117635][ T5936] usb 4-1: Manufacturer: syz [ 579.122261][ T5936] usb 4-1: SerialNumber: syz [ 579.129771][ T5936] usb 4-1: config 0 descriptor?? [ 579.339122][ T9] usb 4-1: USB disconnect, device number 124 [ 579.354029][ T5916] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 579.489487][T16144] syzkaller0: entered promiscuous mode [ 579.495311][T16144] syzkaller0: entered allmulticast mode [ 579.517062][ T5916] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.527414][ T5916] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 579.537755][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 579.550660][ T5916] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 579.560190][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.574298][T16142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 579.596457][ T5916] hub 1-1:1.0: bad descriptor, ignoring hub [ 579.608024][ T5916] hub 1-1:1.0: probe with driver hub failed with error -5 [ 579.616347][ T5916] cdc_wdm 1-1:1.0: skipping garbage [ 579.621734][ T5916] cdc_wdm 1-1:1.0: skipping garbage [ 579.647793][ T5916] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 579.660570][ T5916] cdc_wdm 1-1:1.0: Unknown control protocol [ 579.727273][ T9] usb 2-1: USB disconnect, device number 6 [ 579.913940][ T5885] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 580.065184][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 580.071753][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.081978][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.093107][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 580.104964][ T5885] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 580.114804][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.127782][ T5892] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 580.137089][ T5885] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 580.146729][ T5885] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 580.155211][ T5885] usb 5-1: Manufacturer: syz [ 580.161516][ T5885] usb 5-1: config 0 descriptor?? [ 580.324398][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 580.350367][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 580.360522][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 580.370682][ T5892] usb 4-1: can't read configurations, error -71 [ 580.426998][ T5916] usb 1-1: USB disconnect, device number 113 [ 580.583998][ T5916] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 580.584011][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 580.745780][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.756031][ T9] usb 3-1: config 0 has no interfaces? [ 580.756906][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 580.761566][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 580.776531][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.787818][ T5916] usb 1-1: config 0 has no interfaces? [ 580.789095][ T9] usb 3-1: config 0 descriptor?? [ 580.793474][ T5916] usb 1-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 580.827256][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.851160][ T5916] usb 1-1: config 0 descriptor?? [ 581.047109][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4020'. [ 581.079217][T16142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4012'. [ 581.114437][ T5916] usb 1-1: USB disconnect, device number 114 [ 581.205845][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4020'. [ 581.944082][ T5892] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 582.054546][T16179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4022'. [ 582.124063][ T5892] usb 1-1: Using ep0 maxpacket: 32 [ 582.143614][ T5892] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 582.156181][ T5892] usb 1-1: config 0 has no interface number 0 [ 582.164851][ T5892] usb 1-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 582.192270][ T5892] usb 1-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 582.207134][ T5892] usb 1-1: config 0 interface 49 has no altsetting 0 [ 582.219789][ T5892] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 582.231227][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.247547][ T5892] usb 1-1: Product: syz [ 582.253006][ T5892] usb 1-1: Manufacturer: syz [ 582.260507][ T5892] usb 1-1: SerialNumber: syz [ 582.268902][ T5892] usb 1-1: config 0 descriptor?? [ 582.490115][ T5892] RobotFuzz Open Source InterFace, OSIF 1-1:0.49: failure sending bit rate [ 582.510908][ T5892] RobotFuzz Open Source InterFace, OSIF 1-1:0.49: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 582.543004][ T5892] usb 1-1: USB disconnect, device number 115 [ 582.819327][T16183] vlan3: entered promiscuous mode [ 582.824826][ T5885] rc_core: IR keymap rc-hauppauge not found [ 582.837683][ T5885] Registered IR keymap rc-empty [ 582.855888][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 582.905210][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 582.960067][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 583.016402][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input55 [ 583.053815][T16185] syzkaller0: entered promiscuous mode [ 583.072967][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.089173][T16185] syzkaller0: entered allmulticast mode [ 583.116244][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.154236][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.203993][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.244137][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.279923][T16191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.295895][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.329634][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.353646][ T5916] usb 3-1: USB disconnect, device number 16 [ 583.362355][T16191] netlink: 'syz.0.4026': attribute type 10 has an invalid length. [ 583.374376][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.430633][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4026'. [ 583.434378][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.484742][ T5885] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 583.517984][ T5885] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 583.538196][ T5885] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 583.585469][ T5885] usb 5-1: USB disconnect, device number 123 [ 583.719024][T16206] random: crng reseeded on system resumption [ 583.764019][ T5936] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 583.934095][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 583.957837][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 583.994295][ T5936] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 584.033061][ T5936] usb 4-1: can't read configurations, error -71 [ 584.040609][T16210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4032'. [ 584.219032][T16210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4032'. [ 584.895499][ T5936] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 585.063969][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 585.082922][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.112012][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.142378][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 585.223354][ T5936] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 585.253680][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.295499][ T5936] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 585.323942][ T5936] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 585.366202][ T5936] usb 4-1: Manufacturer: syz [ 585.408202][ T5936] usb 4-1: config 0 descriptor?? [ 585.684298][ T1215] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 585.784920][ T5936] rc_core: IR keymap rc-hauppauge not found [ 585.799293][ T5936] Registered IR keymap rc-empty [ 585.821342][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.854005][ T1215] usb 5-1: Using ep0 maxpacket: 32 [ 585.859364][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.872681][ T1215] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 585.890232][ T1215] usb 5-1: config 0 has no interface number 0 [ 585.898128][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 585.912254][ T1215] usb 5-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 585.925362][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 585.943675][ T1215] usb 5-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 585.964263][ T5885] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 585.978866][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 585.991592][ T1215] usb 5-1: config 0 interface 49 has no altsetting 0 [ 586.012254][ T1215] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 586.024104][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.031839][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.043976][ T1215] usb 5-1: Product: syz [ 586.054122][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.073974][ T1215] usb 5-1: Manufacturer: syz [ 586.084188][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.092649][ T1215] usb 5-1: SerialNumber: syz [ 586.117117][ T1215] usb 5-1: config 0 descriptor?? [ 586.124035][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.163998][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.165872][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.214441][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.223775][ T5885] usb 1-1: config 0 has no interfaces? [ 586.237018][ T5885] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 586.254516][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.264356][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.289290][ T5885] usb 1-1: config 0 descriptor?? [ 586.324091][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.353532][ T1215] RobotFuzz Open Source InterFace, OSIF 5-1:0.49: failure sending bit rate [ 586.364086][ T5936] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 586.403717][ T1215] RobotFuzz Open Source InterFace, OSIF 5-1:0.49: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 586.422035][ T5936] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 586.440254][ T5936] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 586.459581][ T1215] usb 5-1: USB disconnect, device number 124 [ 586.519911][ T5936] usb 4-1: USB disconnect, device number 2 [ 587.183962][ T5885] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 587.364055][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 587.376636][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.388363][ T5885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.426306][ T5885] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 587.461951][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.485332][ T5885] usb 5-1: Product: syz [ 587.501776][ T5885] usb 5-1: Manufacturer: syz [ 587.519526][ T5885] usb 5-1: SerialNumber: syz [ 587.543760][ T5885] usb 5-1: config 0 descriptor?? [ 587.793320][ T5936] usb 5-1: USB disconnect, device number 125 [ 588.185921][T16265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4047'. [ 588.385455][T16265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4047'. [ 588.554000][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 588.655757][ T5941] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 588.713989][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 588.731535][ T10] usb 1-1: USB disconnect, device number 116 [ 588.744365][ T5885] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 588.762847][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.777084][ T5885] usb 2-1: Product: syz [ 588.790556][ T5885] usb 2-1: Manufacturer: syz [ 588.797020][ T5885] usb 2-1: SerialNumber: syz [ 588.816394][ T5885] usb 2-1: config 0 descriptor?? [ 588.834116][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 588.850115][ T5941] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 588.885392][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.917115][ T5941] usb 5-1: config 0 has no interface number 0 [ 588.944076][ T5941] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 588.978032][ T5941] usb 5-1: config 0 interface 1 has no altsetting 0 [ 589.007484][ T5941] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 589.036545][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.057138][ T5941] usb 5-1: Product: syz [ 589.067268][ T5941] usb 5-1: Manufacturer: syz [ 589.082156][ T5941] usb 5-1: SerialNumber: syz [ 589.097846][T16275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4051'. [ 589.113259][ T5941] usb 5-1: config 0 descriptor?? [ 589.255641][T16277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4048'. [ 589.359875][ T5941] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 589.385171][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 589.406105][T16280] vlan3: entered promiscuous mode [ 589.412165][ T5941] cx231xx 5-1:0.1: Not found matching IAD interface [ 589.428655][ T5941] usb 5-1: USB disconnect, device number 126 [ 589.547264][T16281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.596757][T16281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.658845][T16277] input: syz0 as /devices/virtual/input/input57 [ 589.749907][T16289] random: crng reseeded on system resumption [ 589.954016][ T5941] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 590.134768][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 590.142905][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 590.166981][ T5941] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.190085][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.225062][ T5941] usb 5-1: config 0 has no interface number 0 [ 590.247791][ T5941] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 590.324744][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 590.336242][ T10] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 590.347907][ T5941] usb 5-1: config 0 interface 1 has no altsetting 0 [ 590.354689][ T10] usb 3-1: config 0 has no interface number 0 [ 590.373688][ T10] usb 3-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 590.385378][ T10] usb 3-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 590.408742][ T10] usb 3-1: config 0 interface 49 has no altsetting 0 [ 590.416463][ T5941] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 590.436597][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.457524][ T10] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 590.476996][ T5941] usb 5-1: Product: syz [ 590.489786][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.502143][ T5941] usb 5-1: Manufacturer: syz [ 590.518880][ T5941] usb 5-1: SerialNumber: syz [ 590.524010][ T10] usb 3-1: Product: syz [ 590.549411][ T10] usb 3-1: Manufacturer: syz [ 590.550696][ T5941] usb 5-1: config 0 descriptor?? [ 590.585869][ T10] usb 3-1: SerialNumber: syz [ 590.634493][ T10] usb 3-1: config 0 descriptor?? [ 590.875810][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:0.49: failure sending bit rate [ 590.897301][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:0.49: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 590.934472][ T5885] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 590.952399][ T10] usb 3-1: USB disconnect, device number 17 [ 590.963397][ T5885] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 591.004227][T16271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.043810][T16271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.087612][ T5941] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 591.120379][ T5941] cx231xx 5-1:0.1: Not found matching IAD interface [ 591.158341][ T5941] usb 5-1: USB disconnect, device number 127 [ 591.424644][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4058'. [ 591.606933][T16304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.619883][T16304] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 591.629578][T16304] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 591.649018][ T1215] usb 2-1: USB disconnect, device number 7 [ 591.817853][T16314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 591.827259][ T5885] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 591.834202][ T5941] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 591.916259][T16314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4064'. [ 591.943959][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 592.003960][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 592.011155][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.023633][ T5941] usb 3-1: config 0 has no interfaces? [ 592.030449][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.031745][ T5941] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 592.050807][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 592.061405][ T5941] usb 3-1: Product: syz [ 592.061495][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 592.083172][ T5941] usb 3-1: config 0 descriptor?? [ 592.102718][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.103978][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 592.136725][ T5936] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 592.146458][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.146478][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 592.146512][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.224386][ T5936] usb 5-1: config 0 descriptor?? [ 592.251820][ T5936] as10x_usb: device has been detected [ 592.262269][ T5936] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 592.278560][ T5885] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.307028][ T5885] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.327695][ T5936] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 592.346994][ T5885] usb 1-1: Manufacturer: syz [ 592.372620][ T5936] as10x_usb: error during firmware upload part1 [ 592.382808][ T5936] Registered device nBox DVB-T Dongle [ 592.406335][ T5885] usb 1-1: config 0 descriptor?? [ 592.528328][ T10] usb 5-1: USB disconnect, device number 2 [ 592.560882][ T10] Unregistered device nBox DVB-T Dongle [ 592.563678][ T10] as10x_usb: device has been disconnected [ 592.734846][ T5885] rc_core: IR keymap rc-hauppauge not found [ 592.750984][ T5885] Registered IR keymap rc-empty [ 592.760702][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.794392][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.824610][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 592.851143][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input58 [ 592.902969][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.924601][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.954086][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 592.985259][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.004498][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.044043][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.064033][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.107901][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.134000][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.163997][ T5885] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 593.185581][ T5885] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 593.203896][ T5885] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 593.214130][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 593.230558][ T5885] usb 1-1: USB disconnect, device number 117 [ 593.331618][T16337] random: crng reseeded on system resumption [ 593.424654][ T5899] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 593.442714][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.461444][ T5899] usb 4-1: Product: syz [ 593.478311][ T5899] usb 4-1: Manufacturer: syz [ 593.497746][ T5899] usb 4-1: SerialNumber: syz [ 593.522651][ T5899] usb 4-1: config 0 descriptor?? [ 594.064045][ T5885] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 594.230121][T16346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.243926][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 594.256399][T16346] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 594.264537][T16346] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 594.275384][ T5885] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 594.284847][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.293611][ T5885] usb 1-1: Product: syz [ 594.299635][ T5885] usb 1-1: Manufacturer: syz [ 594.307802][ T5885] usb 1-1: SerialNumber: syz [ 594.328211][ T5885] usb 1-1: config 0 descriptor?? [ 594.659032][ T10] usb 3-1: USB disconnect, device number 18 [ 594.678760][T16352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4074'. [ 594.719096][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4074'. [ 594.774895][ T5899] usb 4-1: Firmware version (0.0) predates our first public release. [ 594.810754][ T5899] usb 4-1: Please update to version 0.2 or newer [ 594.824910][T16352] input: syz0 as /devices/virtual/input/input59 [ 594.958978][T16357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4078'. [ 595.404068][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 595.574054][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 595.580294][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 595.592363][ T5899] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 595.621198][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 595.664843][ T5899] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 595.682929][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.694196][ T5899] usb 5-1: Product: syz [ 595.707833][ T5899] usb 5-1: Manufacturer: syz [ 595.713972][ T5899] usb 5-1: SerialNumber: syz [ 595.735545][ T5899] usb 5-1: config 0 descriptor?? [ 595.870414][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4081'. [ 596.011658][ T5899] usb 4-1: USB disconnect, device number 3 [ 596.039707][T16370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.207216][ T141] bridge0: port 3(batadv0) entered disabled state [ 596.260027][ T141] bridge_slave_1: left allmulticast mode [ 596.285601][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.374583][ T5885] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 596.383513][ T5885] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 596.804079][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.821590][ T141] bond_slave_0: left promiscuous mode [ 596.833432][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.858411][ T141] bond_slave_1: left promiscuous mode [ 596.874871][ T141] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 596.886154][ T141] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 596.901738][ T141] bond0 (unregistering): Released all slaves [ 596.927742][ T141] bond1 (unregistering): Released all slaves [ 596.960223][ T141] bond2 (unregistering): Released all slaves [ 596.984109][ T5936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 597.069201][ T5916] usb 1-1: USB disconnect, device number 118 [ 597.083188][ T141] tipc: Left network mode [ 597.148079][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.192368][ T5936] usb 2-1: config 0 has no interfaces? [ 597.207963][T16389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.233412][ T5936] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 597.256979][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 597.275140][ T5936] usb 2-1: Product: syz [ 597.308294][ T5936] usb 2-1: config 0 descriptor?? [ 597.511049][ T141] team0: left promiscuous mode [ 597.522354][ T141] team_slave_0: left promiscuous mode [ 597.541835][ T141] team_slave_1: left promiscuous mode [ 597.569293][ T141] hsr_slave_0: left promiscuous mode [ 597.588727][ T141] hsr_slave_1: left promiscuous mode [ 597.598577][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.609909][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.634105][ T141] veth1_macvtap: left promiscuous mode [ 597.641469][ T141] veth0_macvtap: left promiscuous mode [ 597.648232][ T141] veth1_vlan: left promiscuous mode [ 597.685650][ T141] veth0_vlan: left promiscuous mode [ 597.837330][ T141] pim6reg (unregistering): left allmulticast mode [ 598.158144][T16408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.178015][ T141] team0 (unregistering): Port device team_slave_1 removed [ 598.190185][ T5916] usb 5-1: USB disconnect, device number 3 [ 598.217441][T16408] netlink: 'syz.2.4093': attribute type 10 has an invalid length. [ 598.263315][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4094'. [ 598.283550][ T141] team0 (unregistering): Port device team_slave_0 removed [ 598.299153][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4093'. [ 598.310251][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4096'. [ 598.503481][T16413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4096'. [ 598.577715][T16414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4097'. [ 598.929809][ T141] IPVS: stop unused estimator thread 0... [ 599.757296][T16438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.778621][ T5936] usb 2-1: USB disconnect, device number 8 [ 600.168742][T16447] random: crng reseeded on system resumption [ 600.218469][ T5936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 600.399106][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 600.422631][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 600.459506][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 600.500904][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 600.528824][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 600.554001][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 600.583204][ T5936] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 600.598567][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.613433][T16453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4108'. [ 600.629182][ T5936] usb 2-1: Product: syz [ 600.637876][ T5936] usb 2-1: Manufacturer: syz [ 600.642486][ T5936] usb 2-1: SerialNumber: syz [ 600.661149][ T5936] usb 2-1: config 0 descriptor?? [ 600.921297][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 600.948757][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 600.983559][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.034328][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.121146][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.162101][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.182364][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.202505][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.223121][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.243420][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.263638][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.324094][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.359441][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.389761][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.424803][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.478630][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.509611][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.547260][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.580947][T16472] random: crng reseeded on system resumption [ 601.590929][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.710897][T16477] binder: 16470:16477 ioctl c0306201 0 returned -14 [ 601.742799][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 601.778790][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4114'. [ 601.854267][ T5936] input input60: Timeout waiting for response from device. [ 601.937732][ T5936] usb 2-1: USB disconnect, device number 9 [ 602.254916][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4114'. [ 603.038675][T16487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.324025][ T5899] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 603.494012][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 603.511945][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 603.532067][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.562898][ T5899] usb 1-1: config 0 has no interface number 0 [ 603.599203][ T5899] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 603.653969][ T5936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 603.667392][ T5899] usb 1-1: config 0 interface 1 has no altsetting 0 [ 603.699077][ T5899] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 603.725815][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.759341][T16496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4121'. [ 603.782888][ T5899] usb 1-1: Product: syz [ 603.801802][ T5899] usb 1-1: Manufacturer: syz [ 603.820124][ T5899] usb 1-1: SerialNumber: syz [ 603.824794][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 603.828810][ T5936] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 603.872523][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.901456][ T5899] usb 1-1: config 0 descriptor?? [ 603.905339][ T5936] usb 5-1: Product: syz [ 603.926209][ T5936] usb 5-1: Manufacturer: syz [ 603.939474][ T5936] usb 5-1: SerialNumber: syz [ 603.964934][ T5936] usb 5-1: config 0 descriptor?? [ 604.142344][ T5899] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 604.170816][ T5899] cx231xx 1-1:0.1: Not found matching IAD interface [ 604.194063][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 604.212494][ T5899] usb 1-1: USB disconnect, device number 119 [ 604.329119][T16505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4119'. [ 604.375404][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 604.388335][T16506] random: crng reseeded on system resumption [ 604.402245][ T5916] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 604.424993][ T5916] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 604.457324][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4119'. [ 604.486027][ T5916] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.556009][T16505] input: syz0 as /devices/virtual/input/input61 [ 604.594043][ T5916] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 604.642571][ T5916] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 604.678592][ T5916] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.720332][ T5916] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 604.745181][ T5916] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 604.774238][ T5899] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 604.813460][ T5916] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.899678][ T5916] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 604.936652][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.966271][ T5916] usb 4-1: Product: syz [ 604.976026][ T5916] usb 4-1: Manufacturer: syz [ 604.986301][ T5916] usb 4-1: SerialNumber: syz [ 605.027550][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 605.065437][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.111014][ T5899] usb 1-1: config 0 has no interface number 0 [ 605.153023][ T5899] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 605.209192][ T5899] usb 1-1: config 0 interface 1 has no altsetting 0 [ 605.230922][ T5916] adutux 4-1:168.0: interrupt endpoints not found [ 605.256310][ T5916] usb 4-1: USB disconnect, device number 4 [ 606.057078][ T5936] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 606.081759][ T5899] usb 1-1: string descriptor 0 read error: -71 [ 606.097312][ T5936] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 606.142162][ T5899] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 606.173809][T16516] ip6gretap0: entered promiscuous mode [ 606.184038][ T1215] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 606.196681][T16516] vlan3: entered promiscuous mode [ 606.208209][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.255270][ T5899] usb 1-1: config 0 descriptor?? [ 606.286114][ T5899] usb 1-1: can't set config #0, error -71 [ 606.326135][ T5899] usb 1-1: USB disconnect, device number 120 [ 606.358215][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.388833][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.414610][T16520] random: crng reseeded on system resumption [ 606.426846][ T1215] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 606.560343][ T1215] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 606.702407][ T5885] usb 5-1: USB disconnect, device number 4 [ 606.735676][ T1215] usb 4-1: Manufacturer: syz [ 606.765173][ T1215] usb 4-1: config 0 descriptor?? [ 606.846573][T16528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.856791][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 606.988707][T16529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4130'. [ 607.047068][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 607.062726][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 607.109839][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 607.150289][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 607.187404][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 607.209303][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.224885][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 607.243976][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.262280][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.283021][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.292608][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 607.314049][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.330633][ T10] usb 2-1: Product: syz [ 607.334954][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.357365][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.366072][ T10] usb 2-1: Manufacturer: syz [ 607.389197][ T1215] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 607.410557][ T10] usb 2-1: SerialNumber: syz [ 607.433510][ T10] usb 2-1: config 0 descriptor?? [ 607.460102][ T1215] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 607.883750][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 607.899896][ T1215] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 607.917581][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 607.937859][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 607.956808][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 607.977084][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 607.984416][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.000894][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.029164][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.063124][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.088408][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.112214][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.114007][ T1215] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 608.148427][ T1215] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -32 [ 608.166906][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.217595][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.245719][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.270025][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.294545][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.313311][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.335161][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.354634][ T10] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 608.369029][ T10] input input62: Timeout waiting for response from device. [ 608.436573][ T10] usb 2-1: USB disconnect, device number 10 [ 608.744010][ T1215] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 608.893955][ T1215] usb 3-1: device descriptor read/64, error -71 [ 608.963939][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 609.134286][ T1215] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 609.146352][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 609.172578][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 609.194697][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 609.194703][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.194715][ T30] audit: type=1326 audit(1775764052.676:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.194756][ T30] audit: type=1326 audit(1775764052.686:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.291071][ T30] audit: type=1326 audit(1775764052.686:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.315991][ T30] audit: type=1326 audit(1775764052.766:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.338728][ T1215] usb 3-1: device descriptor read/64, error -71 [ 609.346790][ T30] audit: type=1326 audit(1775764052.766:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.370946][ T10] usb 2-1: config 0 has no interface number 0 [ 609.370980][ T30] audit: type=1326 audit(1775764052.766:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.419697][ T30] audit: type=1326 audit(1775764052.776:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.455196][ T1215] usb usb3-port1: attempt power cycle [ 609.506418][ T10] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.534466][ T30] audit: type=1326 audit(1775764053.016:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.585362][ T30] audit: type=1326 audit(1775764053.016:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.632895][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 609.639703][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 609.642739][ T30] audit: type=1326 audit(1775764053.066:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16549 comm="syz.0.4137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff03f99c819 code=0x7ffc0000 [ 609.700070][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 609.711405][ T5899] usb 4-1: USB disconnect, device number 5 [ 609.739842][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.748801][ T10] usb 2-1: Product: syz [ 609.756807][ T10] usb 2-1: Manufacturer: syz [ 609.761507][ T10] usb 2-1: SerialNumber: syz [ 609.768052][ T10] usb 2-1: config 0 descriptor?? [ 609.780364][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 609.790455][ T10] cx231xx 2-1:0.1: Not found matching IAD interface [ 609.824087][ T1215] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 609.844567][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 609.844609][ T1215] usb 3-1: device descriptor read/8, error -71 [ 609.851354][ T5892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 609.864241][ T5892] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 609.876193][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 609.924417][ T5892] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.939744][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 609.981495][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 610.001716][ T5892] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 610.015630][ T5892] usb 5-1: config 168 interface 0 has no altsetting 0 [ 610.032375][ T5892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 610.044005][ T5892] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 610.102103][ T10] usb 2-1: USB disconnect, device number 11 [ 610.104079][ T1215] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 610.136156][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 610.172869][T16559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4139'. [ 610.182362][ T5892] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.194668][ T1215] usb 3-1: device descriptor read/8, error -71 [ 610.213822][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 610.241520][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 610.271876][ T5892] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 610.310283][ T5892] usb 5-1: config 168 interface 0 has no altsetting 0 [ 610.325115][ T1215] usb usb3-port1: unable to enumerate USB device [ 610.346871][ T5892] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 610.366398][ T5892] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 610.426435][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 610.450457][T16563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.464882][ T5892] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.487277][T16563] netlink: 'syz.0.4140': attribute type 10 has an invalid length. [ 610.502031][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 610.539813][ T5892] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 610.554105][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 610.572705][ T5892] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 610.600893][ T5892] usb 5-1: config 168 interface 0 has no altsetting 0 [ 610.619885][ T5892] usb 5-1: string descriptor 0 read error: -22 [ 610.630442][ T5892] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 610.649989][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.681694][ T5892] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 610.713960][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 610.722656][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.757629][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.810911][ T10] usb 2-1: config 0 has no interface number 0 [ 610.823953][ T10] usb 2-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.844102][ T10] usb 2-1: config 0 interface 1 has no altsetting 0 [ 610.855014][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 610.869359][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.897695][ T10] usb 2-1: Product: syz [ 610.917934][ T10] usb 2-1: Manufacturer: syz [ 610.939701][ T10] usb 2-1: SerialNumber: syz [ 610.968570][ T10] usb 2-1: config 0 descriptor?? [ 610.988083][ T1215] usb 5-1: USB disconnect, device number 5 [ 611.006926][ T10] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 611.033886][ T10] cx231xx 2-1:0.1: Not found matching IAD interface [ 611.240689][T16568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.454714][T16572] random: crng reseeded on system resumption [ 612.303998][ T1215] usb 2-1: USB disconnect, device number 12 [ 612.407985][T16584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4144'. [ 612.473173][T16590] vlan3: entered promiscuous mode [ 612.555963][T16587] binder: BINDER_SET_CONTEXT_MGR already set [ 612.586346][T16587] binder: 16582:16587 ioctl 4018620d 200000000040 returned -16 [ 613.064477][ T1215] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 613.256203][ T1215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.287627][ T1215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.328412][ T1215] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 613.344583][ T1215] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 613.444491][ T1215] usb 2-1: Manufacturer: syz [ 613.662436][T16605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4151'. [ 613.684582][ T1215] usb 2-1: config 0 descriptor?? [ 613.721181][T16604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.753146][T16604] netlink: 'syz.4.4152': attribute type 10 has an invalid length. [ 613.984610][T16608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.028797][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4153'. [ 614.099633][ T1215] usbhid 2-1:0.0: can't add hid device: -71 [ 614.115371][ T1215] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 614.154580][ T1215] usb 2-1: USB disconnect, device number 13 [ 614.563956][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 614.743983][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 614.749829][T16615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.766948][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 614.784320][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.802572][ T5916] usb 5-1: config 0 has no interface number 0 [ 614.809632][ T5916] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 614.824060][ T5916] usb 5-1: config 0 interface 1 has no altsetting 0 [ 614.836147][ T5916] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 614.855028][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.873260][ T5916] usb 5-1: Product: syz [ 614.877546][ T5916] usb 5-1: Manufacturer: syz [ 614.884637][ T5916] usb 5-1: SerialNumber: syz [ 614.894922][ T5916] usb 5-1: config 0 descriptor?? [ 614.912453][ T5916] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 614.925329][ T5916] cx231xx 5-1:0.1: Not found matching IAD interface [ 615.142652][ T5916] usb 5-1: USB disconnect, device number 6 [ 615.154081][ T5892] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 615.343966][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 615.354157][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.373900][ T5892] usb 2-1: config 0 has no interfaces? [ 615.385499][T16622] random: crng reseeded on system resumption [ 615.404099][ T5892] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 615.432316][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.450596][ T5892] usb 2-1: Product: syz [ 615.459057][ T5892] usb 2-1: Manufacturer: syz [ 615.467220][ T5892] usb 2-1: SerialNumber: syz [ 615.478712][ T5892] usb 2-1: config 0 descriptor?? [ 615.707348][T16624] ip6gretap0: entered promiscuous mode [ 615.718513][T16624] vlan3: entered promiscuous mode [ 615.784137][ T5916] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 616.005766][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 616.016563][T16625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4157'. [ 616.034318][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 616.071580][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4157'. [ 616.102161][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.174239][ T5916] usb 5-1: config 0 has no interface number 0 [ 616.188411][T16625] input: syz0 as /devices/virtual/input/input63 [ 616.194787][ T5916] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.256250][ T5916] usb 5-1: config 0 interface 1 has no altsetting 0 [ 616.283726][ T5916] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 616.315737][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.355949][ T5916] usb 5-1: Product: syz [ 616.364107][ T5916] usb 5-1: Manufacturer: syz [ 616.402276][ T5916] usb 5-1: SerialNumber: syz [ 616.429055][ T5916] usb 5-1: config 0 descriptor?? [ 616.449368][ T5916] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 616.463345][ T5916] cx231xx 5-1:0.1: Not found matching IAD interface [ 617.711293][ T1215] usb 5-1: USB disconnect, device number 7 [ 617.953772][ T1215] usb 2-1: USB disconnect, device number 14 [ 618.080692][T16646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.095306][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4163'. [ 618.131108][T16646] netlink: 'syz.0.4164': attribute type 10 has an invalid length. [ 619.163927][ T1215] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 619.338634][ T1215] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.361345][ T1215] usb 2-1: config 0 has no interface number 0 [ 619.382034][ T1215] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 619.412470][ T1215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.442789][ T1215] usb 2-1: config 0 descriptor?? [ 619.463287][ T1215] usb 2-1: selecting invalid altsetting 1 [ 619.479160][ T1215] dvb_ttusb_budget: ttusb_init_controller: error [ 619.492320][ T1215] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 619.628595][ T1215] DVB: Unable to find symbol cx22700_attach() [ 619.706279][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4171'. [ 619.775482][ T1215] DVB: Unable to find symbol tda10046_attach() [ 619.793927][ T1215] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 619.844199][ T1215] usb 2-1: USB disconnect, device number 15 [ 619.944423][T16671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4171'. [ 620.086500][T16678] vlan3: entered promiscuous mode [ 620.676786][T16689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.699110][T16689] netlink: 'syz.1.4178': attribute type 10 has an invalid length. [ 621.340252][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4180'. [ 621.783933][ T5892] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 621.974236][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 622.000451][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 622.052030][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 622.107856][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 622.185429][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 622.253663][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 622.319871][ T5892] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 622.347919][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.382597][ T5892] usb 2-1: Product: syz [ 622.406962][ T5892] usb 2-1: Manufacturer: syz [ 622.420714][ T5892] usb 2-1: SerialNumber: syz [ 622.444513][ T5892] usb 2-1: config 0 descriptor?? [ 622.665814][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.689964][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.737553][T16717] vlan3: entered promiscuous mode [ 622.776499][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.822826][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.870966][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.911413][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.960008][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 622.982234][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.016300][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.165973][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.181724][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.207721][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.249298][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.297947][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.329453][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.347167][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.413945][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.454303][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.499837][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.558728][ T5892] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 623.603113][ T5892] input input64: Timeout waiting for response from device. [ 623.882924][ T5892] usb 2-1: USB disconnect, device number 16 [ 624.018130][ T1215] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 624.194942][ T1215] usb 4-1: Using ep0 maxpacket: 32 [ 624.213810][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 624.217342][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.240683][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.246958][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 624.283960][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 624.337603][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 624.395911][ T1215] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 624.476995][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.505084][ T1215] usb 4-1: Product: syz [ 624.531928][ T1215] usb 4-1: Manufacturer: syz [ 624.541715][ T1215] usb 4-1: SerialNumber: syz [ 624.569003][ T1215] usb 4-1: config 0 descriptor?? [ 624.778760][T16739] binder: 16738:16739 ioctl c0306201 0 returned -14 [ 626.146971][T16750] random: crng reseeded on system resumption [ 626.790116][ T5936] usb 4-1: USB disconnect, device number 6 [ 626.996099][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4197'. [ 627.181194][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4197'. [ 627.529024][T16758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4198'. [ 627.902803][T16760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4199'. [ 628.326050][ T5936] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 628.473932][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 628.525745][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 628.537143][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 628.560301][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 628.586793][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 1024 [ 628.611278][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 628.643971][ T5899] usb 5-1: device descriptor read/64, error -71 [ 628.656310][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 628.685639][ T5936] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 628.696480][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.712623][ T5936] usb 2-1: Product: syz [ 628.721389][ T5936] usb 2-1: Manufacturer: syz [ 628.731655][ T5936] usb 2-1: SerialNumber: syz [ 628.753676][ T5936] usb 2-1: config 0 descriptor?? [ 628.915001][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 628.975235][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 628.998971][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.032896][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.053623][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.053926][ T5899] usb 5-1: device descriptor read/64, error -71 [ 629.086446][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.109947][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.134307][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.153977][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.170873][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.214468][ T5899] usb usb5-port1: attempt power cycle [ 629.252276][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.259229][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.272611][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.279317][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.286054][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.303375][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.310284][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.317394][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.323807][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.333696][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.341746][ T5936] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 629.353571][ T5936] input input65: Timeout waiting for response from device. [ 629.385884][ T5936] usb 2-1: USB disconnect, device number 17 [ 629.563933][ T5899] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 629.612575][ T5899] usb 5-1: device descriptor read/8, error -71 [ 629.787133][T16776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4203'. [ 629.863988][ T5899] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 629.904572][ T5899] usb 5-1: device descriptor read/8, error -71 [ 629.911076][T16778] binder: 16774:16778 ioctl 4018620d 0 returned -22 [ 630.064356][ T5899] usb usb5-port1: unable to enumerate USB device [ 631.244346][T16787] vlan3: entered promiscuous mode [ 631.966015][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4210'. [ 632.023949][ T5916] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 632.236970][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 632.260319][ T5916] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 632.289210][T16800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4211'. [ 632.310442][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.340816][ T5916] usb 1-1: Product: syz [ 632.369534][ T5916] usb 1-1: Manufacturer: syz [ 632.399932][ T5916] usb 1-1: SerialNumber: syz [ 632.454770][ T5916] usb 1-1: config 0 descriptor?? [ 632.498027][T16800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4211'. [ 632.712427][ T5916] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 121 [ 633.326555][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 633.507000][ T5892] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.525500][ T5892] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 633.546052][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 633.564192][ T5892] usb 5-1: Product: syz [ 633.576704][ T5892] usb 5-1: config 0 descriptor?? [ 633.684040][ T5899] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 633.860066][ T5899] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 633.877415][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.903928][ T5899] usb 2-1: Product: syz [ 633.908911][T16707] Set syz1 is full, maxelem 65536 reached [ 633.914749][ T5899] usb 2-1: Manufacturer: syz [ 633.920016][ T5899] usb 2-1: SerialNumber: syz [ 633.936113][ T5899] usb 2-1: config 0 descriptor?? [ 634.121569][T16812] binder: 16809:16812 ioctl 4018620d 0 returned -22 [ 634.387028][ T5899] usb 2-1: Firmware version (0.0) predates our first public release. [ 634.416520][ T5899] usb 2-1: Please update to version 0.2 or newer [ 634.451189][ T5899] usb 2-1: Firmware: build FJh>&ۛq_N(Yj7 Ĺ퐍sT#W 7e&†I45z><+?]`9c+YR(Yt [ 634.773089][ T5916] usb 1-1: USB disconnect, device number 121 [ 634.864121][ T5899] usb 2-1: USB disconnect, device number 18 [ 635.031191][T16827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4219'. [ 635.083093][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4221'. [ 635.215301][T16827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4219'. [ 635.398511][T16834] random: crng reseeded on system resumption [ 636.117711][ T5916] usb 5-1: USB disconnect, device number 12 [ 636.673943][ T5936] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 636.675014][ T5899] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 636.754146][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 636.819345][T16849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4229'. [ 636.832520][T16851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.842278][ T5936] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 636.842308][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.842326][ T5936] usb 3-1: Product: syz [ 636.842342][ T5936] usb 3-1: Manufacturer: syz [ 636.842357][ T5936] usb 3-1: SerialNumber: syz [ 636.858024][ T5936] usb 3-1: config 0 descriptor?? [ 636.878583][T16851] netlink: 'syz.3.4230': attribute type 10 has an invalid length. [ 636.888543][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 636.902294][ T5899] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 636.911837][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.921279][ T5899] usb 2-1: Product: syz [ 636.923957][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 636.926555][ T5899] usb 2-1: Manufacturer: syz [ 636.936563][ T5899] usb 2-1: SerialNumber: syz [ 636.947543][ T5899] usb 2-1: config 0 descriptor?? [ 636.963804][ T5916] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 636.983363][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.995903][ T5916] usb 5-1: Product: syz [ 637.000106][ T5916] usb 5-1: Manufacturer: syz [ 637.005679][ T5916] usb 5-1: SerialNumber: syz [ 637.021836][ T5916] usb 5-1: config 0 descriptor?? [ 637.032960][T16853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.126951][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4232'. [ 637.199470][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4233'. [ 637.291182][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4223'. [ 637.358617][ T5936] usb 3-1: Firmware version (0.0) predates our first public release. [ 637.385552][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 637.403958][ T5936] usb 3-1: Please update to version 0.2 or newer [ 637.412293][T16865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4224'. [ 637.450336][T16865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4224'. [ 637.470105][T16861] input: syz0 as /devices/virtual/input/input66 [ 637.480030][ T5936] usb 3-1: Firmware: build FJh>&ۛq_N(Yj7 Ĺ퐍sT#W 7e&†I45z><+?]`9c+YR(Yt [ 637.494058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 637.644763][T16867] input: syz0 as /devices/virtual/input/input67 [ 638.085233][ T5936] usb 3-1: USB disconnect, device number 23 [ 638.094369][ T5892] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 638.289882][ T5892] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 638.352837][ T5892] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 638.404804][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 638.468282][ T5892] usb 4-1: Product: syz [ 638.528764][ T5892] usb 4-1: config 0 descriptor?? [ 639.019695][ T5899] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 639.081934][ T5899] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 639.120667][ T5916] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 639.162042][ T5916] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 639.493014][T16878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4237'. [ 639.702056][ T5916] usb 2-1: USB disconnect, device number 19 [ 639.822316][T16885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.982997][ T5899] usb 5-1: USB disconnect, device number 13 [ 640.424026][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 640.579957][T16893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4243'. [ 640.591910][T16891] binder: BINDER_SET_CONTEXT_MGR already set [ 640.598982][T16891] binder: 16888:16891 ioctl 4018620d 200000000040 returned -16 [ 640.628251][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4243'. [ 640.675625][T16894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4243'. [ 640.795195][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 640.815632][ T5899] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 640.850557][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.877797][ T10] usb 4-1: USB disconnect, device number 7 [ 640.898836][T16899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4244'. [ 640.914065][ T5899] usb 5-1: config 0 has no interface number 0 [ 640.926970][ T5899] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 641.003122][ T5899] usb 5-1: config 0 interface 1 has no altsetting 0 [ 641.080615][ T5899] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 641.117692][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.139809][ T5899] usb 5-1: Product: syz [ 641.179745][ T5899] usb 5-1: Manufacturer: syz [ 641.194498][ T5916] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 641.194584][ T5899] usb 5-1: SerialNumber: syz [ 641.232838][ T5899] usb 5-1: config 0 descriptor?? [ 641.254048][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 641.366983][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.384804][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 641.412210][ T5916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 641.431757][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 641.453556][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.453564][ T5916] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 641.453588][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.477192][ T5899] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 641.503412][ T10] usb 4-1: Product: syz [ 641.517396][ T10] usb 4-1: Manufacturer: syz [ 641.527725][ T5899] cx231xx 5-1:0.1: Not found matching IAD interface [ 641.538335][ T10] usb 4-1: SerialNumber: syz [ 641.557460][ T10] usb 4-1: config 0 descriptor?? [ 641.564614][ T5899] usb 5-1: USB disconnect, device number 14 [ 641.591870][T16898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 641.622805][ T5916] hub 2-1:1.0: bad descriptor, ignoring hub [ 641.646324][ T5916] hub 2-1:1.0: probe with driver hub failed with error -5 [ 641.671844][ T5916] cdc_wdm 2-1:1.0: skipping garbage [ 641.686325][ T5916] cdc_wdm 2-1:1.0: skipping garbage [ 641.718158][ T5916] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 641.736655][ T5916] cdc_wdm 2-1:1.0: Unknown control protocol [ 641.985903][ T10] usb 4-1: Firmware version (0.0) predates our first public release. [ 641.994245][ T10] usb 4-1: Please update to version 0.2 or newer [ 642.024029][ T5899] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 642.183914][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 642.195052][ T10] usb 4-1: Firmware: build FJh>&ۛq_N(Yj7 Ĺ퐍sT#W 7e&†I45z><+?]`9c+YR(Yt [ 642.218341][ T5899] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 642.240822][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.283524][T16916] random: crng reseeded on system resumption [ 642.300118][ T5899] usb 5-1: config 0 has no interface number 0 [ 642.313187][ T5899] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 642.327795][ T5899] usb 5-1: config 0 interface 1 has no altsetting 0 [ 642.339589][ T5899] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 642.348739][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.356938][ T5899] usb 5-1: Product: syz [ 642.361626][T16912] binder: BINDER_SET_CONTEXT_MGR already set [ 642.368724][ T5899] usb 5-1: Manufacturer: syz [ 642.380042][T16912] binder: 16905:16912 ioctl 4018620d 200000000040 returned -16 [ 642.396918][ T5899] usb 5-1: SerialNumber: syz [ 642.412543][ T5899] usb 5-1: config 0 descriptor?? [ 642.600577][ T10] usb 4-1: USB disconnect, device number 8 [ 642.719733][ T5916] usb 2-1: USB disconnect, device number 20 [ 642.884307][ T5916] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 643.045551][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 643.064728][ T5916] usb 2-1: config 0 has no interfaces? [ 643.070840][ T5916] usb 2-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 643.104878][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.146778][ T5916] usb 2-1: config 0 descriptor?? [ 643.203582][T16887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.218683][T16887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.264804][ T5899] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 643.278528][ T5899] cx231xx 5-1:0.1: Not found matching IAD interface [ 643.314152][ T5899] usb 5-1: USB disconnect, device number 15 [ 643.391629][ T5936] usb 2-1: USB disconnect, device number 21 [ 643.543950][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 643.696713][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 643.725656][ T5916] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 643.735477][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.743483][ T5916] usb 4-1: Product: syz [ 643.767836][ T5916] usb 4-1: Manufacturer: syz [ 643.779340][ T5916] usb 4-1: SerialNumber: syz [ 643.821299][ T5916] usb 4-1: config 0 descriptor?? [ 644.017043][T16926] random: crng reseeded on system resumption [ 644.023987][ T5936] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 644.185860][ T5936] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.216449][ T5936] usb 1-1: config 0 has no interface number 0 [ 644.222728][ T5936] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 644.269639][T16938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4251'. [ 644.297331][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.325269][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4251'. [ 644.358125][ T5936] usb 1-1: config 0 descriptor?? [ 644.364144][T16938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.390769][ T5936] usb 1-1: selecting invalid altsetting 1 [ 644.441815][ T5936] dvb_ttusb_budget: ttusb_init_controller: error [ 644.468507][T16938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.484059][ T5936] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 644.774906][ T5936] DVB: Unable to find symbol cx22700_attach() [ 644.933727][ T5936] DVB: Unable to find symbol tda10046_attach() [ 644.971056][ T5936] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 645.016801][ T5936] usb 1-1: USB disconnect, device number 122 [ 645.601082][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4257'. [ 645.707220][T16953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4259'. [ 645.894544][ T5916] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: failure sending bit rate [ 645.903355][ T5916] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 646.734275][ T5899] usb 4-1: USB disconnect, device number 9 [ 646.744952][ T5916] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 646.931126][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4264'. [ 646.947565][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 646.968893][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 647.010181][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.062690][ T5916] usb 2-1: config 0 has no interface number 0 [ 647.081047][ T5916] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 647.122026][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 647.123983][ T5899] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 647.160034][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 647.181943][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.217696][ T5916] usb 2-1: Product: syz [ 647.244197][ T5916] usb 2-1: Manufacturer: syz [ 647.262833][ T5916] usb 2-1: SerialNumber: syz [ 647.293041][ T5916] usb 2-1: config 0 descriptor?? [ 647.305303][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.340685][ T5899] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 647.383554][ T5899] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 647.453635][ T5899] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 647.482279][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.534664][T16966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 647.556901][ T5916] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 647.597912][ T5916] cx231xx 2-1:0.1: Not found matching IAD interface [ 647.615038][ T5899] hub 4-1:1.0: bad descriptor, ignoring hub [ 647.624326][ T5899] hub 4-1:1.0: probe with driver hub failed with error -5 [ 647.632036][ T5899] cdc_wdm 4-1:1.0: skipping garbage [ 647.664768][ T5916] usb 2-1: USB disconnect, device number 22 [ 647.678545][ T5899] cdc_wdm 4-1:1.0: skipping garbage [ 647.737965][ T5899] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 647.763911][ T5899] cdc_wdm 4-1:1.0: Unknown control protocol [ 647.805544][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 647.812157][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 647.818422][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 647.825035][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 647.831309][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 647.837901][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 647.844544][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 647.851136][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 647.857584][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 647.864190][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 647.873894][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 647.880507][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 648.063936][ T5916] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 648.223897][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 648.254726][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 648.273968][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.303133][ T5916] usb 2-1: config 0 has no interface number 0 [ 648.322485][ T5916] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 648.350689][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 648.368427][T16976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.385755][ T5916] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 648.403552][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.421962][ T5916] usb 2-1: Product: syz [ 648.433805][T16976] netlink: 'syz.4.4266': attribute type 10 has an invalid length. [ 648.448695][ T5916] usb 2-1: Manufacturer: syz [ 648.457831][ T5916] usb 2-1: SerialNumber: syz [ 648.472999][ T5916] usb 2-1: config 0 descriptor?? [ 648.677384][ T5936] usb 4-1: USB disconnect, device number 10 [ 648.894524][T16960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.905968][ T5936] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 649.022254][T16960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.054330][ T5899] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 649.070502][ T5916] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 649.147578][ T5916] cx231xx 2-1:0.1: Not found matching IAD interface [ 649.155962][T16991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.174804][ T5916] usb 2-1: USB disconnect, device number 23 [ 649.234003][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 649.237796][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 649.250587][ T5936] usb 4-1: config 0 has no interfaces? [ 649.256972][ T5936] usb 4-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 649.267035][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.282532][ T5899] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 649.286327][ T5936] usb 4-1: config 0 descriptor?? [ 649.308249][ T5899] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 649.340501][ T5899] usb 3-1: config 63 has no interface number 0 [ 649.362979][ T5899] usb 3-1: config 63 interface 66 has no altsetting 0 [ 649.389120][ T5899] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 649.412481][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.439029][ T5899] usb 3-1: Product: syz [ 649.449152][ T5899] usb 3-1: Manufacturer: syz [ 649.464609][ T5899] usb 3-1: SerialNumber: syz [ 649.530232][T16966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4265'. [ 649.578432][ T5885] usb 4-1: USB disconnect, device number 11 [ 649.767924][ T5899] uvcvideo 3-1:63.66: Found UVC 0.00 device syz (174f:8acf) [ 649.785928][ T5899] uvcvideo 3-1:63.66: No valid video chain found. [ 649.805065][ T5899] usb 3-1: USB disconnect, device number 24 [ 649.868826][T16997] random: crng reseeded on system resumption [ 650.005877][ T5916] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 650.190441][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.209527][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.227797][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 650.256402][ T5916] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 650.273713][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.398194][T16995] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 650.421484][ T5916] hub 5-1:1.0: bad descriptor, ignoring hub [ 650.448254][ T5916] hub 5-1:1.0: probe with driver hub failed with error -5 [ 650.476539][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 650.498698][ T5916] cdc_wdm 5-1:1.0: skipping garbage [ 650.529668][ T5916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 650.563599][ T5916] cdc_wdm 5-1:1.0: Unknown control protocol [ 650.733676][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 650.740323][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 650.865502][T17008] binder: BINDER_SET_CONTEXT_MGR already set [ 650.891043][T17008] binder: 17005:17008 ioctl 4018620d 200000000040 returned -16 [ 651.353927][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 651.458508][ T5899] usb 5-1: USB disconnect, device number 16 [ 651.516251][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 651.548430][ T10] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 651.570155][ T10] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 651.598765][ T10] usb 3-1: config 63 has no interface number 0 [ 651.623926][ T10] usb 3-1: config 63 interface 66 has no altsetting 0 [ 651.644831][ T10] usb 3-1: language id specifier not provided by device, defaulting to English [ 651.654096][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 651.691694][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 651.723887][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.823957][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 651.843412][ T5899] usb 5-1: config 0 has no interfaces? [ 651.860958][ T5899] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 651.891430][ T10] uvcvideo 3-1:63.66: Found UVC 0.00 device (174f:8acf) [ 651.912140][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.926210][ T10] uvcvideo 3-1:63.66: No valid video chain found. [ 651.963601][ T5899] usb 5-1: config 0 descriptor?? [ 651.980155][ T10] usb 3-1: USB disconnect, device number 25 [ 652.206255][ T5916] usb 5-1: USB disconnect, device number 17 [ 652.361655][T17022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4283'. [ 652.372385][T17022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4283'. [ 652.474277][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4286'. [ 652.704265][ T5916] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 652.883935][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 652.900221][ T5916] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 652.915845][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.940274][ T5916] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 652.959333][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.976429][ T5916] usb 1-1: Product: syz [ 652.995138][ T5916] usb 1-1: Manufacturer: syz [ 653.011108][ T5916] usb 1-1: SerialNumber: syz [ 653.037034][ T5916] usb 1-1: config 0 descriptor?? [ 653.043914][ T5885] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 653.054900][ T5916] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 653.224104][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 653.240467][ T5885] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 653.249871][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.262915][ T5916] gspca_sunplus: reg_r err -32 [ 653.281416][ T5885] usb 5-1: config 0 descriptor?? [ 653.299497][ T5885] as10x_usb: device has been detected [ 653.314156][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 653.327978][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 653.366280][ T5885] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 653.436629][ T5885] as10x_usb: error during firmware upload part1 [ 653.451519][ T5885] Registered device nBox DVB-T Dongle [ 653.486667][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.579413][ T5936] usb 5-1: USB disconnect, device number 18 [ 653.594398][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.628447][ T5936] Unregistered device nBox DVB-T Dongle [ 653.635949][ T5936] as10x_usb: device has been disconnected [ 653.671575][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 653.704178][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.742695][ T10] usb 4-1: Manufacturer: syz [ 653.784078][ T10] usb 4-1: config 0 descriptor?? [ 654.210204][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 654.221264][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 654.266120][T17056] netlink: 'syz.4.4296': attribute type 72 has an invalid length. [ 654.344381][ T5916] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 654.667575][T17071] random: crng reseeded on system resumption [ 655.382779][T17078] netlink: 'syz.1.4303': attribute type 10 has an invalid length. [ 655.555268][ T5936] usb 1-1: USB disconnect, device number 123 [ 655.883007][T17088] netlink: 'syz.0.4307': attribute type 72 has an invalid length. [ 655.925969][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4306'. [ 656.109018][ T5916] usb 4-1: USB disconnect, device number 12 [ 656.177908][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'. [ 656.534273][T17106] netlink: 'syz.3.4314': attribute type 10 has an invalid length. [ 656.752478][T17108] binder: BINDER_SET_CONTEXT_MGR already set [ 656.768006][T17108] binder: 17103:17108 ioctl 4018620d 200000000040 returned -16 [ 656.945599][T17117] binder: 17109:17117 ioctl c0306201 0 returned -14 [ 657.004110][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 657.210555][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 657.247533][ T10] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 657.283151][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.339343][ T10] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 657.380266][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.409700][ T10] usb 4-1: Product: syz [ 657.430231][ T10] usb 4-1: Manufacturer: syz [ 657.444231][ T10] usb 4-1: SerialNumber: syz [ 657.490193][T17123] netlink: 'syz.0.4318': attribute type 72 has an invalid length. [ 657.552212][ T10] usb 4-1: config 0 descriptor?? [ 657.668269][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 657.850039][ T10] gspca_sunplus: reg_r err -32 [ 658.176699][T17140] random: crng reseeded on system resumption [ 658.690640][T17146] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 659.003976][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 659.320460][T17157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4329'. [ 659.613923][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 659.637307][ T141] ------------[ cut here ]------------ [ 659.642789][ T141] conntrack cleanup blocked for 60s [ 659.642805][ T141] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:5/141 [ 659.660661][ T141] Modules linked in: [ 659.664885][ T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.675954][ T141] Tainted: [L]=SOFTLOCKUP [ 659.680264][ T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 659.691219][ T141] Workqueue: netns cleanup_net [ 659.696082][ T141] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 659.702865][ T141] Code: 08 48 89 df e8 bd d6 64 f8 4c 8b 3b 49 39 df 74 69 e8 60 84 fa f7 45 31 e4 e9 8e fe ff ff e8 53 84 fa f7 48 8d 3d 6c cc 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 659.722551][ T141] RSP: 0018:ffffc90002ee78b0 EFLAGS: 00010293 [ 659.728932][ T141] RAX: ffffffff89cb3b9d RBX: ffffc90002ee7a50 RCX: ffff88801f33bd00 [ 659.737151][ T141] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90210810 [ 659.745208][ T141] RBP: 0000000000000003 R08: ffff888031904803 R09: 1ffff11006320900 [ 659.753188][ T141] R10: dffffc0000000000 R11: ffffed1006320901 R12: 0000000000000001 [ 659.761205][ T141] R13: dffffc0000000000 R14: 0000000100008bd5 R15: 0000000100008bd6 [ 659.769227][ T141] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 659.778370][ T141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 659.784970][ T141] CR2: 00002000002f9030 CR3: 0000000045e8a000 CR4: 00000000003526f0 [ 659.792930][ T141] Call Trace: [ 659.796224][ T141] [ 659.799151][ T141] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 659.805275][ T141] ops_undo_list+0x52b/0x940 [ 659.809861][ T141] ? __pfx_ops_undo_list+0x10/0x10 [ 659.815071][ T141] ? idr_destroy+0x218/0x290 [ 659.819657][ T141] ? do_raw_spin_unlock+0xf5/0x210 [ 659.824788][ T141] cleanup_net+0x56b/0x800 [ 659.829213][ T141] ? __pfx_cleanup_net+0x10/0x10 [ 659.834191][ T141] ? process_scheduled_works+0xa8d/0x18c0 [ 659.839900][ T141] ? process_scheduled_works+0xa8d/0x18c0 [ 659.845907][ T141] process_scheduled_works+0xb6e/0x18c0 [ 659.851471][ T141] ? __pfx_process_scheduled_works+0x10/0x10 [ 659.857502][ T141] ? assign_work+0x3d5/0x5e0 [ 659.862086][ T141] worker_thread+0xa53/0xfc0 [ 659.866714][ T141] kthread+0x388/0x470 [ 659.870774][ T141] ? __pfx_worker_thread+0x10/0x10 [ 659.876059][ T141] ? __pfx_kthread+0x10/0x10 [ 659.880690][ T141] ret_from_fork+0x51e/0xb90 [ 659.885358][ T141] ? __pfx_ret_from_fork+0x10/0x10 [ 659.890475][ T141] ? __switch_to+0xc7d/0x1450 [ 659.895246][ T141] ? __pfx_kthread+0x10/0x10 [ 659.899842][ T141] ret_from_fork_asm+0x1a/0x30 [ 659.904668][ T141] [ 659.907702][ T141] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 659.914965][ T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.925884][ T141] Tainted: [L]=SOFTLOCKUP [ 659.930631][ T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 659.940674][ T141] Workqueue: netns cleanup_net [ 659.945435][ T141] Call Trace: [ 659.948701][ T141] [ 659.951618][ T141] vpanic+0x56c/0xa60 [ 659.955590][ T141] ? __pfx__printk+0x10/0x10 [ 659.960172][ T141] ? __pfx_vpanic+0x10/0x10 [ 659.964676][ T141] ? is_bpf_text_address+0x292/0x2b0 [ 659.969960][ T141] ? is_bpf_text_address+0x26/0x2b0 [ 659.975156][ T141] panic+0xc5/0xd0 [ 659.978871][ T141] ? __pfx_panic+0x10/0x10 [ 659.983288][ T141] ? ret_from_fork_asm+0x1a/0x30 [ 659.988226][ T141] __warn+0x315/0x4f0 [ 659.992207][ T141] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 659.998377][ T141] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 660.004543][ T141] __report_bug+0x29a/0x540 [ 660.009049][ T141] ? __lock_acquire+0x6b5/0x2cf0 [ 660.014009][ T141] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 660.020178][ T141] ? __pfx___report_bug+0x10/0x10 [ 660.025209][ T141] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 660.031393][ T141] report_bug_entry+0x19a/0x290 [ 660.036257][ T141] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 660.042406][ T141] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 660.048556][ T141] handle_bug+0xce/0x200 [ 660.052807][ T141] exc_invalid_op+0x1a/0x50 [ 660.057308][ T141] asm_exc_invalid_op+0x1a/0x20 [ 660.062165][ T141] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 660.068926][ T141] Code: 08 48 89 df e8 bd d6 64 f8 4c 8b 3b 49 39 df 74 69 e8 60 84 fa f7 45 31 e4 e9 8e fe ff ff e8 53 84 fa f7 48 8d 3d 6c cc 55 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 660.088535][ T141] RSP: 0018:ffffc90002ee78b0 EFLAGS: 00010293 [ 660.094600][ T141] RAX: ffffffff89cb3b9d RBX: ffffc90002ee7a50 RCX: ffff88801f33bd00 [ 660.102557][ T141] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff90210810 [ 660.110519][ T141] RBP: 0000000000000003 R08: ffff888031904803 R09: 1ffff11006320900 [ 660.118478][ T141] R10: dffffc0000000000 R11: ffffed1006320901 R12: 0000000000000001 [ 660.126625][ T141] R13: dffffc0000000000 R14: 0000000100008bd5 R15: 0000000100008bd6 [ 660.134599][ T141] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 660.140770][ T141] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 660.146828][ T141] ops_undo_list+0x52b/0x940 [ 660.151419][ T141] ? __pfx_ops_undo_list+0x10/0x10 [ 660.156519][ T141] ? idr_destroy+0x218/0x290 [ 660.161105][ T141] ? do_raw_spin_unlock+0xf5/0x210 [ 660.166206][ T141] cleanup_net+0x56b/0x800 [ 660.170615][ T141] ? __pfx_cleanup_net+0x10/0x10 [ 660.175548][ T141] ? process_scheduled_works+0xa8d/0x18c0 [ 660.181257][ T141] ? process_scheduled_works+0xa8d/0x18c0 [ 660.186970][ T141] process_scheduled_works+0xb6e/0x18c0 [ 660.192531][ T141] ? __pfx_process_scheduled_works+0x10/0x10 [ 660.198502][ T141] ? assign_work+0x3d5/0x5e0 [ 660.203090][ T141] worker_thread+0xa53/0xfc0 [ 660.207689][ T141] kthread+0x388/0x470 [ 660.211745][ T141] ? __pfx_worker_thread+0x10/0x10 [ 660.216846][ T141] ? __pfx_kthread+0x10/0x10 [ 660.221433][ T141] ret_from_fork+0x51e/0xb90 [ 660.226516][ T141] ? __pfx_ret_from_fork+0x10/0x10 [ 660.231620][ T141] ? __switch_to+0xc7d/0x1450 [ 660.236290][ T141] ? __pfx_kthread+0x10/0x10 [ 660.240865][ T141] ret_from_fork_asm+0x1a/0x30 [ 660.245633][ T141] [ 660.248974][ T141] Kernel Offset: disabled [ 660.253285][ T141] Rebooting in 86400 seconds..