last executing test programs: 3m31.514335097s ago: executing program 2 (id=3106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3m29.966151698s ago: executing program 2 (id=3111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) kcmp(r0, r0, 0x3, r1, r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r4, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3m28.848812994s ago: executing program 2 (id=3114): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x3000, 0xac, &(0x7f00000006c0)=""/172}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 3m28.023949171s ago: executing program 2 (id=3116): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m26.330533137s ago: executing program 2 (id=3118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x6, &(0x7f0000000400)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xf5df, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mkdir(0x0, 0x61) syz_clone3(&(0x7f0000000040)={0x2a0a00300, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m22.109568606s ago: executing program 2 (id=3127): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m6.584446255s ago: executing program 32 (id=3127): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 16.072850882s ago: executing program 3 (id=3445): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6", 0x4f}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.435560289s ago: executing program 1 (id=3448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 12.818350239s ago: executing program 3 (id=3451): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) 12.416256092s ago: executing program 1 (id=3452): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 11.951977527s ago: executing program 1 (id=3454): r0 = msgget$private(0x0, 0x3ac) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, 0x0, 0x0) shutdown(r5, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x1}, 0x8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5", 0x1d}], 0x1}, 0x41) 11.407362236s ago: executing program 3 (id=3455): r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r0, &(0x7f00000002c0), 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0dd2c90430bbc00000"], 0x9) readv(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="9b0f2abd7000ffdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x20008800) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FE_GET_EVENT(r3, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x0, 0xa}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r10) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r9, @ANYRES16=r5, @ANYRES16=r8, @ANYRESDEC=r8], 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b46941cb}, 0x8094) landlock_restrict_self(r1, 0xe) r11 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x3}}, 0x20) 9.635289564s ago: executing program 1 (id=3456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0xffffffff, 0x2, 0x10, {0x6, 0x1}, 0x4, 0x80000001}) 9.156854199s ago: executing program 3 (id=3457): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x24, 0x1}, {0x1}, {0x30, 0x1}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900"/32], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 8.446449033s ago: executing program 0 (id=3458): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x3000, 0xac, &(0x7f00000006c0)=""/172}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 7.795432774s ago: executing program 0 (id=3459): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x110}}, 0x0) 6.798904227s ago: executing program 0 (id=3460): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 6.420823169s ago: executing program 4 (id=3462): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 6.314747352s ago: executing program 4 (id=3463): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) 5.948535164s ago: executing program 3 (id=3464): r0 = msgget$private(0x0, 0x3ac) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, 0x0, 0x0) shutdown(r5, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)={0x1}, 0x8, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5", 0x1d}], 0x1}, 0x41) 3.850097113s ago: executing program 3 (id=3465): r0 = socket(0xa, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x4bfa, 0x600000000000003e) r4 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r2, @ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = inotify_init() r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x4b8200, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x20) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000080)={0x20004, r8, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x1, r11, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r7, 0xc01864c1, &(0x7f0000000300)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r10, 0xc01864c1, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x9, 0x4adb, 0x58e}, &(0x7f0000000380)=0x10) close_range(r5, 0xffffffffffffffff, 0x0) 3.847568944s ago: executing program 4 (id=3466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000002ac0)={0x0, 0x33424752, 0x2, @stepwise={0x16, 0x1, 0x81, 0x3, 0x8, 0x7}}) write(r5, &(0x7f0000000000)="ea", 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r5, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x1}, 0x8) close(r5) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010328bd701baddcd1a1a1b20c0000000900"], 0x28}, 0x1, 0x0, 0x0, 0x9000}, 0x20044884) 3.704451178s ago: executing program 1 (id=3467): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x3000, 0xac, &(0x7f00000006c0)=""/172}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 3.375330229s ago: executing program 0 (id=3468): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000"], 0x110}}, 0x0) 2.531579007s ago: executing program 1 (id=3469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4847, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x24004040) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x50}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sync_file_range(r5, 0x1, 0x2, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.496353058s ago: executing program 4 (id=3470): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.291843215s ago: executing program 4 (id=3471): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 2.092013331s ago: executing program 4 (id=3472): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.881623088s ago: executing program 0 (id=3473): r0 = msgget$private(0x0, 0x3ac) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5", 0x1d}], 0x1}, 0x41) 0s ago: executing program 0 (id=3474): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) kernel console output (not intermixed with test programs): BSSID 50:50:50:50:50:50 [ 1055.689748][T11449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.952291][T11449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.974107][T11449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.956870][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 1056.993768][T13665] batadv0: entered promiscuous mode [ 1056.999449][T13665] macsec1: entered promiscuous mode [ 1057.005849][T13665] macsec1: entered allmulticast mode [ 1057.023153][T13665] batadv0: entered allmulticast mode [ 1057.106941][T13665] batadv0: left allmulticast mode [ 1057.112974][T13665] batadv0: left promiscuous mode [ 1059.228203][ T5838] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1059.856381][ T5838] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1059.996119][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.249344][ T5838] usb 4-1: Product: syz [ 1060.253909][ T5838] usb 4-1: Manufacturer: syz [ 1060.258560][ T5838] usb 4-1: SerialNumber: syz [ 1062.252005][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1062.266947][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1062.277848][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1062.296448][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1062.305570][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1062.322071][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1063.656013][T13698] chnl_net:caif_netlink_parms(): no params data found [ 1063.783293][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1063.821745][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1063.837098][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1063.860959][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1063.870747][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1063.889715][ T5838] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1063.908163][ T5838] usb 4-1: USB disconnect, device number 81 [ 1064.046793][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.054337][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.062163][T13698] bridge_slave_0: entered allmulticast mode [ 1064.069780][T13698] bridge_slave_0: entered promiscuous mode [ 1064.079849][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.087485][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.101269][T13698] bridge_slave_1: entered allmulticast mode [ 1064.112456][T13698] bridge_slave_1: entered promiscuous mode [ 1064.195623][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.240176][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.399326][T11830] Bluetooth: hci0: command tx timeout [ 1064.424300][T13698] team0: Port device team_slave_0 added [ 1064.466072][T13698] team0: Port device team_slave_1 added [ 1065.152540][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.192281][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.288180][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.333192][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.382453][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.420371][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.752219][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'. [ 1065.789858][T13725] batadv0: entered promiscuous mode [ 1065.795589][T13725] macsec1: entered promiscuous mode [ 1065.802002][T13725] macsec1: entered allmulticast mode [ 1065.807456][T13725] batadv0: entered allmulticast mode [ 1065.840754][T13725] batadv0: left allmulticast mode [ 1065.846826][T13725] batadv0: left promiscuous mode [ 1066.250235][T13698] hsr_slave_0: entered promiscuous mode [ 1066.330388][T13698] hsr_slave_1: entered promiscuous mode [ 1066.379197][T13698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.460973][T11830] Bluetooth: hci0: command tx timeout [ 1066.468599][T13698] Cannot create hsr debugfs directory [ 1068.540872][T11830] Bluetooth: hci0: command tx timeout [ 1070.433325][T13698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.544143][T13698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.620865][T11830] Bluetooth: hci0: command tx timeout [ 1070.793261][T13698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.539625][T13698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.777227][T13698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1073.814784][T13698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.849633][T13698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.888026][T13698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1074.884881][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.908042][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.924450][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.931703][ T9689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.034223][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.041508][T11449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.126842][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.901026][T13698] veth0_vlan: entered promiscuous mode [ 1076.971512][T13780] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1076.997058][T13698] veth1_vlan: entered promiscuous mode [ 1077.060392][T13698] veth0_macvtap: entered promiscuous mode [ 1077.072589][T13698] veth1_macvtap: entered promiscuous mode [ 1077.115520][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.126352][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.136874][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.161325][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.178312][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.195787][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.215418][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.231562][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.255048][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.277811][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.290512][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.309224][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.328975][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.339913][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.363859][T13698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.396312][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.417154][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.439874][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.463295][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.473477][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.495594][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.515072][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.530518][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.555868][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.576840][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.607635][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.627315][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.639991][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.665157][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.686666][T13698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.717673][T13698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.737517][T13698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.748596][T13698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.760150][T13698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.510907][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.518791][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.567207][T13790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2473'. [ 1078.584340][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.607645][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.491060][T13820] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1085.056270][T13835] netlink: 436 bytes leftover after parsing attributes in process `syz.2.2485'. [ 1085.350934][ T23] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1086.394203][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1086.410280][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.418695][ T23] usb 3-1: Product: syz [ 1086.424868][ T23] usb 3-1: Manufacturer: syz [ 1086.450911][ T23] usb 3-1: SerialNumber: syz [ 1088.920647][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1088.933993][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1088.946147][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1088.967701][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1088.977995][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1089.001710][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1089.280734][ T23] usb 3-1: USB disconnect, device number 67 [ 1089.966755][T10164] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1090.402121][T10164] usb 1-1: Using ep0 maxpacket: 16 [ 1090.528589][T10164] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.698378][T10164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1090.830539][T10164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1090.871189][T10164] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1090.906040][T10164] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.943920][T10164] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1090.966508][T10164] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1091.190866][T10164] usb 1-1: Manufacturer: syz [ 1091.209127][T10164] usb 1-1: config 0 descriptor?? [ 1091.229456][T13882] comedi comedi1: aio_iiro_16: I/O port conflict (0x100,8) [ 1091.591696][T10164] rc_core: IR keymap rc-hauppauge not found [ 1091.604139][T10164] Registered IR keymap rc-empty [ 1091.620719][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1091.670945][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1091.712193][T10164] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1091.740215][T10164] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input88 [ 1091.891405][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1091.941186][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1091.992104][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.031526][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.070891][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.106553][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.156984][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.201849][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.250124][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.290895][T10164] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1092.332851][T10164] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1092.357553][T10164] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1092.381243][T10164] usb 1-1: USB disconnect, device number 83 [ 1092.653568][T13900] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2503'. [ 1092.942218][ T7006] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1093.162243][ T7006] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1093.190865][ T7006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.216360][ T7006] usb 2-1: Product: syz [ 1093.240954][ T7006] usb 2-1: Manufacturer: syz [ 1093.245717][ T7006] usb 2-1: SerialNumber: syz [ 1095.503768][T13919] mmap: syz.0.2511 (13919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1097.235906][ T7006] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1097.262933][ T7006] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1097.281300][ T7006] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1097.297981][ T7006] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1097.313793][ T7006] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1097.422835][ T7006] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1097.493880][ T7006] usb 2-1: USB disconnect, device number 61 [ 1098.603656][T13933] tipc: Started in network mode [ 1098.608699][T13933] tipc: Node identity 4, cluster identity 4711 [ 1098.615179][T13933] tipc: Node number set to 4 [ 1102.503656][T13969] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2523'. [ 1102.609801][T13970] tipc: Started in network mode [ 1102.614958][T13970] tipc: Node identity 4, cluster identity 4711 [ 1102.621684][T13970] tipc: Node number set to 4 [ 1104.050962][ T5838] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1104.262501][ T5838] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1104.283790][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.299714][ T5838] usb 4-1: Product: syz [ 1104.304568][ T5838] usb 4-1: Manufacturer: syz [ 1104.311056][ T5838] usb 4-1: SerialNumber: syz [ 1106.507607][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1106.578944][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1106.636064][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1106.651272][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1106.714743][ T5838] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1106.745834][ T5838] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1107.975498][ T5838] usb 4-1: USB disconnect, device number 82 [ 1109.901045][T11830] Bluetooth: hci0: command tx timeout [ 1109.960957][T13421] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1110.141510][T13421] usb 1-1: Using ep0 maxpacket: 16 [ 1110.151488][T13421] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.167461][T13421] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1110.181126][T13421] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1110.200506][T13421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.232217][T13421] usb 1-1: config 0 descriptor?? [ 1110.700531][T13421] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1110.737030][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2543'. [ 1110.888947][T13421] usb 1-1: USB disconnect, device number 84 [ 1113.851551][T14054] tipc: Started in network mode [ 1113.856535][T14054] tipc: Node identity 4, cluster identity 4711 [ 1113.862794][T14054] tipc: Node number set to 4 [ 1117.514826][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.521341][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.234417][T14106] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2564'. [ 1120.542853][ T5820] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1121.036594][ T5820] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1121.096646][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.131468][ T5820] usb 4-1: Product: syz [ 1121.141655][ T5820] usb 4-1: Manufacturer: syz [ 1121.154403][ T5820] usb 4-1: SerialNumber: syz [ 1123.331725][ T23] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1125.012001][ T5820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1125.017612][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 1125.340993][ T5820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1125.432202][ T5820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1125.541072][ T5820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1125.592036][ T5820] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1125.600934][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1125.673985][ T5820] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1125.951072][ T5820] usb 4-1: USB disconnect, device number 83 [ 1125.992013][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1126.013643][ T23] usb 2-1: can't read configurations, error -71 [ 1127.576873][T14140] tipc: Started in network mode [ 1127.582803][T14140] tipc: Node identity 4, cluster identity 4711 [ 1127.589022][T14140] tipc: Node number set to 4 [ 1128.480020][T11830] Bluetooth: hci4: command 0x0406 tx timeout [ 1129.046261][T14151] binder: 14147:14151 ioctl c0306201 0 returned -14 [ 1130.594415][ T5820] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1130.790904][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 1131.075804][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.087152][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1131.106533][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1131.118072][ T5820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1131.129551][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.156042][ T5820] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1131.173888][ T5820] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1131.188981][ T5820] usb 3-1: Manufacturer: syz [ 1131.197816][ T5820] usb 3-1: config 0 descriptor?? [ 1131.610821][ T5820] rc_core: IR keymap rc-hauppauge not found [ 1131.639790][ T5820] Registered IR keymap rc-empty [ 1131.645021][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1131.690925][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1131.750653][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1131.783246][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input89 [ 1131.812518][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1131.861237][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1131.890924][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1131.928689][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.057934][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.098247][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.320581][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.375195][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.424063][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.485023][ T5820] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1132.748640][ T5820] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1132.765366][ T5820] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1132.811922][ T5820] usb 3-1: USB disconnect, device number 68 [ 1133.584881][T14190] binder: 14187:14190 ioctl c0306201 0 returned -14 [ 1138.140931][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 1139.582999][T14231] binder: 14229:14231 ioctl c0306201 0 returned -14 [ 1139.901334][T14243] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1145.326617][T14275] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1146.686658][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 1152.000933][ T5818] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1152.171169][ T7006] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1152.203071][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1152.224992][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.243118][ T5818] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1152.252283][ T5818] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1152.516797][ T5818] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1152.530085][ T5818] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1152.541505][ T5818] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1152.572198][ T5818] usb 4-1: string descriptor 0 read error: -22 [ 1152.578583][ T5818] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1152.598286][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.630982][ T7006] usb 2-1: Using ep0 maxpacket: 16 [ 1152.653004][ T7006] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.700936][ T7006] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1152.720856][ T7006] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1152.747546][ T7006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.779850][ T7006] usb 2-1: config 0 descriptor?? [ 1152.858804][ T5818] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 1154.189789][ T7006] usbhid 2-1:0.0: can't add hid device: -71 [ 1154.218463][ T7006] usbhid: probe of 2-1:0.0 failed with error -71 [ 1154.246278][ T7006] usb 2-1: USB disconnect, device number 64 [ 1154.504561][T14347] netlink: 436 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1154.841049][T13873] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1155.158545][T13873] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1155.256399][T13873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.277995][T13873] usb 1-1: Product: syz [ 1155.299762][T13873] usb 1-1: Manufacturer: syz [ 1155.320922][T13873] usb 1-1: SerialNumber: syz [ 1155.516552][T14351] batadv0: entered promiscuous mode [ 1155.522162][T14351] macsec1: entered promiscuous mode [ 1155.527933][T14351] macsec1: entered allmulticast mode [ 1155.533453][T14351] batadv0: entered allmulticast mode [ 1158.630899][T13873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1158.646248][T13873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1158.676605][T13873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1158.700874][T13873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1158.745070][T13873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1158.817820][T13873] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1158.850119][T13873] usb 1-1: USB disconnect, device number 85 [ 1158.978298][ T5818] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1159.072808][ T5818] usb 4-1: USB disconnect, device number 84 [ 1160.722740][T14374] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1165.492440][ T5818] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1165.718201][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1165.765066][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.800240][ T5818] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1165.830324][ T5818] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1165.841739][ T5818] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1165.868822][ T5818] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1165.881993][ T5818] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1166.141064][ T5818] usb 2-1: string descriptor 0 read error: -22 [ 1166.147451][ T5818] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1166.170937][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.401583][ T5818] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 1166.921958][ T5818] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1166.976645][ T5818] usb 2-1: USB disconnect, device number 65 [ 1167.020224][T14400] udevd[14400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.202153][T14438] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1171.184726][T14451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2659'. [ 1171.542261][T14456] batadv0: entered promiscuous mode [ 1171.542457][T14456] macsec1: entered promiscuous mode [ 1171.543041][T14456] macsec1: entered allmulticast mode [ 1171.543103][T14456] batadv0: entered allmulticast mode [ 1177.400987][ T5838] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1177.590235][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.597760][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.613229][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1177.632401][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.642819][ T5838] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1177.652049][ T5838] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1177.663964][ T5838] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1177.677414][ T5838] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1177.725085][ T5838] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1177.738940][ T5838] usb 3-1: string descriptor 0 read error: -22 [ 1177.746056][ T5838] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1177.755320][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.222955][ T5838] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 1179.508604][ T5838] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1179.532757][ T5838] usb 3-1: USB disconnect, device number 69 [ 1179.613266][T14460] udevd[14460]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1181.333667][T14523] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1181.651026][ T5820] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1182.515309][ T5820] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1182.545100][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.562993][ T5820] usb 2-1: Product: syz [ 1182.571575][ T5820] usb 2-1: Manufacturer: syz [ 1182.581606][ T5820] usb 2-1: SerialNumber: syz [ 1182.839208][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1182.853393][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1182.866973][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1182.878672][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1182.931524][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1182.987030][ T5820] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1183.227478][ T5820] usb 2-1: USB disconnect, device number 66 [ 1186.597321][T14577] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2698'. [ 1186.770822][ T5838] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1186.989880][ T5818] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1187.028891][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1187.363475][ T5838] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.398740][ T5818] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1187.464385][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.483851][ T5838] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1187.520818][ T5818] usb 4-1: Product: syz [ 1187.526837][ T5838] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1187.549458][ T5818] usb 4-1: Manufacturer: syz [ 1187.559624][ T5818] usb 4-1: SerialNumber: syz [ 1187.569770][ T5838] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1187.607265][ T5838] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1187.622961][ T5838] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1187.643334][ T5838] usb 2-1: string descriptor 0 read error: -22 [ 1187.657232][ T5838] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1187.697143][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.927563][ T5838] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 1188.893055][ T5838] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1189.158211][ T5838] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1189.182296][ T5838] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1189.221722][ T5838] usb 2-1: USB disconnect, device number 67 [ 1189.523628][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1189.561000][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1189.636598][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1189.793248][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1189.901390][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1189.962718][ T5818] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1190.021217][ T5818] usb 4-1: USB disconnect, device number 85 [ 1192.922027][T14622] netlink: 436 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1193.203828][ T5820] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1194.667533][ T5820] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1194.676766][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.685342][ T5820] usb 2-1: Product: syz [ 1194.689606][ T5820] usb 2-1: Manufacturer: syz [ 1194.908916][ T5820] usb 2-1: SerialNumber: syz [ 1195.858371][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1195.996021][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1196.021320][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1196.063471][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1196.247099][ T5820] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1196.395899][ T5820] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1196.466176][ T5820] usb 2-1: USB disconnect, device number 68 [ 1200.433437][T14667] netlink: 436 bytes leftover after parsing attributes in process `syz.3.2727'. [ 1200.923435][T13421] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1201.313647][T13421] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1201.352384][T13421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.379410][T13421] usb 4-1: Product: syz [ 1201.398517][T13421] usb 4-1: Manufacturer: syz [ 1202.170837][T13421] usb 4-1: SerialNumber: syz [ 1203.100985][T14114] Bluetooth: hci2: command 0x0406 tx timeout [ 1207.281277][T13421] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -110 [ 1207.321048][T13421] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1207.341257][T13421] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1207.370924][T13421] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1207.392807][T13421] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1207.417666][T13421] lan78xx: probe of 4-1:1.0 failed with error -32 [ 1207.452782][T13421] usb 4-1: USB disconnect, device number 86 [ 1210.661338][T10164] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1211.755255][T10164] usb 2-1: device descriptor read/64, error -71 [ 1212.031057][T10164] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1212.191038][T10164] usb 2-1: device descriptor read/64, error -71 [ 1212.311084][T10164] usb usb2-port1: attempt power cycle [ 1212.731010][T10164] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1212.771746][T10164] usb 2-1: device descriptor read/8, error -71 [ 1214.022046][T10164] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1214.413987][T10164] usb 2-1: device not accepting address 72, error -71 [ 1214.421807][T10164] usb usb2-port1: unable to enumerate USB device [ 1215.751236][T10164] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1215.910995][T10164] usb 3-1: device descriptor read/64, error -71 [ 1216.335711][T10164] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1217.440867][T10164] usb 3-1: device descriptor read/64, error -71 [ 1217.561310][T10164] usb usb3-port1: attempt power cycle [ 1218.049481][T10164] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1218.161735][T10164] usb 3-1: device descriptor read/8, error -71 [ 1218.470990][T10164] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1218.542765][T10164] usb 3-1: device descriptor read/8, error -71 [ 1218.788158][T10164] usb usb3-port1: unable to enumerate USB device [ 1221.811624][T10164] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1221.991135][T10164] usb 3-1: device descriptor read/64, error -71 [ 1222.281287][T10164] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1222.451177][T10164] usb 3-1: device descriptor read/64, error -71 [ 1222.583356][T10164] usb usb3-port1: attempt power cycle [ 1223.181358][T10164] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1223.237916][T10164] usb 3-1: device descriptor read/8, error -71 [ 1223.551004][T10164] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1225.182484][T10164] usb 3-1: device descriptor read/8, error -71 [ 1225.317470][T10164] usb usb3-port1: unable to enumerate USB device [ 1230.394683][ T786] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1230.580942][ T786] usb 2-1: device descriptor read/64, error -71 [ 1230.870811][ T786] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1231.041004][ T786] usb 2-1: device descriptor read/64, error -71 [ 1231.318656][ T786] usb usb2-port1: attempt power cycle [ 1231.730832][ T786] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1231.781664][ T786] usb 2-1: device descriptor read/8, error -71 [ 1232.060940][ T786] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1232.101621][ T786] usb 2-1: device descriptor read/8, error -71 [ 1232.271262][ T786] usb usb2-port1: unable to enumerate USB device [ 1234.034551][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1237.560818][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1237.761044][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1237.773056][ T9] usb 2-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 1237.794035][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1237.830803][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1237.877069][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1237.901015][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.959749][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1237.979341][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1237.998114][ T9] usb 2-1: Manufacturer: syz [ 1238.007566][ T9] usb 2-1: config 0 descriptor?? [ 1238.420958][ T9] rc_core: IR keymap rc-hauppauge not found [ 1238.427661][ T9] Registered IR keymap rc-empty [ 1238.437646][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1239.031474][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1239.051482][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.058050][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.192910][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1239.245457][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input90 [ 1240.335992][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1240.577941][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1240.700921][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1240.743436][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1240.790897][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.142780][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.448176][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.601817][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.712758][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.742313][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.770867][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1241.812733][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1241.832041][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1241.881162][ T9] usb 2-1: USB disconnect, device number 77 [ 1246.101035][ T5818] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1246.509498][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 1246.709638][ T5818] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 1246.723380][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1246.749795][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1246.782264][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1246.803113][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.858803][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1246.870886][ T5818] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1246.899232][ T5818] usb 4-1: Manufacturer: syz [ 1246.913430][ T5818] usb 4-1: config 0 descriptor?? [ 1247.911460][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1247.921919][ T5818] Registered IR keymap rc-empty [ 1247.938517][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1247.990986][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.048367][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1248.101551][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 1248.153362][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.201187][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.231328][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.260917][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.291033][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.341185][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.405626][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.461371][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.511067][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.609324][ T5818] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1248.652540][ T5818] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1248.677416][ T5818] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1248.747141][ T5818] usb 4-1: USB disconnect, device number 87 [ 1251.340992][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1261.100849][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1264.500807][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1266.580952][ T5891] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1266.787211][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1266.842688][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.870975][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1266.880032][ T5891] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1266.952136][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.041655][ T5891] usb 4-1: config 0 descriptor?? [ 1270.432426][ T9] usb 4-1: USB disconnect, device number 88 [ 1275.351041][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1275.635280][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1275.675360][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.705984][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1275.750496][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1275.801521][ T9] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1275.901731][T14114] Bluetooth: hci2: command 0x0406 tx timeout [ 1276.318080][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1276.329295][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1276.352419][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1276.358773][ T9] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1276.380989][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.620882][ T9] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1276.751082][ T5818] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1276.930832][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 1276.939848][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.954740][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.966024][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1276.975976][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1276.985960][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1277.004321][ T5818] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1277.016416][ T5818] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1277.028149][ T5818] usb 3-1: Manufacturer: syz [ 1277.047797][ T5818] usb 3-1: config 0 descriptor?? [ 1277.075400][ T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1277.121454][ T9] usb 1-1: USB disconnect, device number 86 [ 1277.161770][T15200] udevd[15200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.331562][ T5818] rc_core: IR keymap rc-hauppauge not found [ 1277.349560][ T5818] Registered IR keymap rc-empty [ 1277.359707][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.390918][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.422155][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1277.458309][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input92 [ 1277.530375][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.598412][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.632357][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.674807][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.730963][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.764349][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.831369][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.871332][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.910893][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1277.951730][ T5818] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1278.003013][ T5818] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1278.031065][ T5818] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1278.077423][ T5818] usb 3-1: USB disconnect, device number 78 [ 1280.300912][T14114] Bluetooth: hci2: command 0x0406 tx timeout [ 1281.011050][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1281.230079][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1281.241125][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.264120][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1281.289430][ T9] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1281.310147][ T9] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1281.338789][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1281.381612][ T9] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1282.869474][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1282.990162][ T9] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1283.000124][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.240922][ T9] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1283.713905][ T9] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1283.791007][ T9] usb 1-1: USB disconnect, device number 87 [ 1287.931074][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1288.240841][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1288.443507][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1288.471583][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.496050][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1288.514680][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1288.535999][ T9] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1288.573523][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1288.622408][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1288.667268][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1288.691277][ T9] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1288.738004][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.555936][ T9] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 1289.963831][ T9] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1290.058981][ T9] usb 2-1: USB disconnect, device number 78 [ 1290.263766][T15319] overlayfs: missing 'lowerdir' [ 1293.646325][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1294.421031][ T5891] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1294.642520][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1294.671323][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.714950][ T5891] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1294.772566][ T5891] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1294.805937][ T5891] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1294.850625][ T5891] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1294.908223][ T5891] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1294.930908][ T5891] usb 2-1: string descriptor 0 read error: -22 [ 1294.937774][ T5891] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1294.967467][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.350909][ T5891] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 1295.910922][ T5891] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1295.990978][ T5891] usb 2-1: USB disconnect, device number 79 [ 1300.047233][T14114] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 1300.516652][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.523146][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.331982][T15425] kvm: kvm [15424]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 1308.692454][ T23] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1308.897175][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1308.923877][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.954600][ T23] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1309.000384][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1309.040921][ T23] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1309.050039][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.093461][ T23] usb 3-1: config 0 descriptor?? [ 1309.112965][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1311.185931][ T5838] usb 3-1: USB disconnect, device number 79 [ 1311.476608][T15509] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1311.573899][T15513] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1314.626179][T15539] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2975'. [ 1314.718889][T15541] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1315.071227][T14114] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1319.119005][T15580] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1319.343393][T15587] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1324.614028][T15623] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2995'. [ 1325.693397][T15633] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2997'. [ 1329.201020][T15654] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3005'. [ 1335.685578][T15695] netlink: 'syz.2.3011': attribute type 72 has an invalid length. [ 1335.701181][T15695] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3011'. [ 1340.860791][T11830] Bluetooth: hci2: command 0x0406 tx timeout [ 1341.518015][T15735] netlink: 'syz.0.3026': attribute type 72 has an invalid length. [ 1341.568039][T15735] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3026'. [ 1346.809098][T15780] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3036'. [ 1361.905371][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.952324][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1379.401575][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1379.621773][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1379.695682][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.788305][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1379.921496][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1380.026088][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1380.261788][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.278215][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1380.287783][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1380.320846][ T9] usb 1-1: Manufacturer: syz [ 1380.336308][ T9] usb 1-1: config 0 descriptor?? [ 1381.630821][ T9] rc_core: IR keymap rc-hauppauge not found [ 1381.725961][ T9] Registered IR keymap rc-empty [ 1381.809995][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1382.233522][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1382.293142][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1382.333523][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input93 [ 1382.506760][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.050873][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.140850][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.341244][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.376325][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.440788][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.488766][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.530865][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.568460][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.610811][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1383.762324][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1383.820945][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1383.872700][ T9] usb 1-1: USB disconnect, device number 88 [ 1388.030765][T14114] Bluetooth: hci2: command 0x0406 tx timeout [ 1392.973510][ T7006] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1393.432536][ T7006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1393.450248][ T7006] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1393.693445][ T7006] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1393.703659][ T7006] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1393.713972][ T7006] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1393.723719][ T7006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.864091][ T7006] usb 3-1: config 0 descriptor?? [ 1394.792715][ T7006] hdpvr 3-1:0.0: unexpected answer of status request, len -32 [ 1395.520735][ T7006] hdpvr 3-1:0.0: device init failed [ 1395.526112][ T7006] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1397.410733][ T9] usb 3-1: USB disconnect, device number 80 [ 1400.860000][ T5891] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1401.043729][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1401.072096][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.091008][ T5891] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1401.106997][ T5891] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1401.133248][ T5891] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1401.168816][ T5891] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1401.242148][ T5891] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1401.285776][ T5891] usb 1-1: string descriptor 0 read error: -22 [ 1401.310373][ T5891] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1401.330075][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.574104][ T5891] usb 1-1: 2:0: failed to get current value for ch 0 (-32) [ 1402.054797][ T5891] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1402.159996][ T5891] usb 1-1: USB disconnect, device number 89 [ 1407.201102][T10164] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1407.438469][T10164] usb 2-1: Using ep0 maxpacket: 16 [ 1407.446276][T10164] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.635286][T10164] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1407.670437][T10164] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1408.392982][T10164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.424183][T10164] usb 2-1: config 0 descriptor?? [ 1408.930771][T13873] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1409.071152][T10164] usbhid 2-1:0.0: can't add hid device: -71 [ 1409.077245][T10164] usbhid: probe of 2-1:0.0 failed with error -71 [ 1409.112613][T10164] usb 2-1: USB disconnect, device number 80 [ 1409.174439][T13873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1409.210840][T13873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.250765][T13873] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1409.290444][T13873] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1409.312067][T13873] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1409.357897][T13873] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1409.429919][T13873] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1409.632059][T13873] usb 4-1: string descriptor 0 read error: -22 [ 1409.639822][T13873] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1409.650844][T13873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.774299][T13873] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 1411.500130][T13873] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1411.647216][T13873] usb 4-1: USB disconnect, device number 89 [ 1423.378976][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.392313][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.411918][T11830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1426.422779][T11830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1426.432494][T11830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1426.440554][T11830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1426.462194][T11830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1426.477496][T11830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1427.995417][T13971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.331014][T13873] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1428.481123][T13971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.540359][T13873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1428.622401][T14114] Bluetooth: hci3: command tx timeout [ 1428.729559][T13873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1429.031583][T13873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1429.050708][T13873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1429.061596][T13873] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1429.070945][T13873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.105776][T13873] usb 1-1: config 0 descriptor?? [ 1429.115553][T16227] chnl_net:caif_netlink_parms(): no params data found [ 1429.732766][T13971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.701067][T14114] Bluetooth: hci3: command tx timeout [ 1431.582482][T13971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.811389][T16227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.832158][T16227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.847472][T16227] bridge_slave_0: entered allmulticast mode [ 1431.882682][T16227] bridge_slave_0: entered promiscuous mode [ 1431.963039][T16227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.970352][T13873] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 1431.988084][T16227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.002967][T13873] hdpvr 1-1:0.0: device init failed [ 1432.051068][T16227] bridge_slave_1: entered allmulticast mode [ 1432.060542][T16227] bridge_slave_1: entered promiscuous mode [ 1432.081333][T13873] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1432.157696][T13873] usb 1-1: USB disconnect, device number 90 [ 1432.449642][T16227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1432.861608][T14114] Bluetooth: hci3: command tx timeout [ 1433.321683][T16227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.506089][T16227] team0: Port device team_slave_0 added [ 1433.524905][T16227] team0: Port device team_slave_1 added [ 1433.559830][T13971] tipc: Left network mode [ 1433.627652][T16227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1433.680414][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.759325][T16227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.793198][T16227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.830970][T16227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.928723][T16227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.812800][T16227] hsr_slave_0: entered promiscuous mode [ 1434.842065][T16227] hsr_slave_1: entered promiscuous mode [ 1434.869872][T16227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1434.901061][T16227] Cannot create hsr debugfs directory [ 1434.943122][T14114] Bluetooth: hci3: command tx timeout [ 1435.220780][ T7006] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1435.645255][ T7006] usb 2-1: Using ep0 maxpacket: 32 [ 1435.661690][ T7006] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1435.669866][ T7006] usb 2-1: config 0 has no interface number 0 [ 1435.702878][ T7006] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1435.734312][ T7006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.765707][ T7006] usb 2-1: Product: syz [ 1435.769961][ T7006] usb 2-1: Manufacturer: syz [ 1435.789145][ T7006] usb 2-1: SerialNumber: syz [ 1435.962882][ T7006] usb 2-1: config 0 descriptor?? [ 1435.972618][ T7006] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1437.100776][ T5818] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1437.194689][ T7006] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1437.220450][ T7006] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1437.353126][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1437.380711][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1437.430416][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1437.486282][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1437.571296][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1437.601706][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.627239][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1437.628714][T10164] usb 2-1: USB disconnect, device number 81 [ 1437.653176][ T5818] usb 4-1: config 0 descriptor?? [ 1437.745491][T10164] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1437.847273][T10164] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1437.917610][T10164] quatech2 2-1:0.51: device disconnected [ 1439.241796][T13971] IPVS: stopping master sync thread 14374 ... [ 1440.214959][ T5818] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1440.251913][ T5818] hdpvr 4-1:0.0: device init failed [ 1440.352060][ T5818] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1440.392498][ T5818] usb 4-1: USB disconnect, device number 90 [ 1441.030880][T13971] hsr_slave_0: left promiscuous mode [ 1441.071778][T13971] hsr_slave_1: left promiscuous mode [ 1441.136132][T13971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.176787][T13971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.365618][T13971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.408817][T13971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.491818][T13971] bridge_slave_1: left allmulticast mode [ 1441.497598][T13971] bridge_slave_1: left promiscuous mode [ 1441.580225][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.703531][T13971] bridge_slave_0: left allmulticast mode [ 1441.772447][T13971] bridge_slave_0: left promiscuous mode [ 1441.858113][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.099377][T13971] batadv0: left allmulticast mode [ 1442.113382][T13971] batadv0: left promiscuous mode [ 1442.132082][T13971] veth1_macvtap: left promiscuous mode [ 1442.138066][T13971] veth0_macvtap: left promiscuous mode [ 1442.163899][T13971] veth1_vlan: left promiscuous mode [ 1442.178868][T13971] veth0_vlan: left promiscuous mode [ 1447.785142][T13971] team0 (unregistering): Port device team_slave_1 removed [ 1448.266473][T13971] team0 (unregistering): Port device team_slave_0 removed [ 1448.717190][T13971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1448.885454][T13971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.931705][T13971] bond0 (unregistering): Released all slaves [ 1450.077827][T16227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1450.161005][T16227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1450.202198][T16227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1450.254473][T16227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1451.730459][T16227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.752228][T16227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.794277][T13973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.801704][T13973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.832732][T13973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.839961][T13973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.900438][T16420] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1454.066480][T16227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.009842][T16227] veth0_vlan: entered promiscuous mode [ 1455.053720][T16227] veth1_vlan: entered promiscuous mode [ 1455.154413][T16227] veth0_macvtap: entered promiscuous mode [ 1455.203707][T16227] veth1_macvtap: entered promiscuous mode [ 1455.259980][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.285225][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.309289][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.331080][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.440655][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.493636][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.535923][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.579181][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.615521][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.652509][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.687243][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.726523][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.764482][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.805016][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.865584][T16227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.892878][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.923563][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.948747][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.976409][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.989184][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.999968][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.010027][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.024427][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.034423][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.048435][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.069056][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.088644][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.098859][T16227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.109591][T16227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.152114][T16227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1456.204769][T16227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.230787][T16227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.251400][T16227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.289637][T16227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.805420][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.835665][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.937891][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.947512][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.580865][T13873] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1458.973238][T13873] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1459.010703][T13873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.018913][T13873] usb 1-1: Product: syz [ 1459.029192][T13873] usb 1-1: Manufacturer: syz [ 1459.048815][T13873] usb 1-1: SerialNumber: syz [ 1459.086096][T13873] usb 1-1: config 0 descriptor?? [ 1459.520942][T13873] usb 1-1: ignoring: probably an ADSL modem [ 1459.876020][T13873] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1459.886579][T13873] usb 1-1: USB disconnect, device number 91 [ 1460.722518][T16507] futex_wake_op: syz.3.3201 tries to shift op by 36; fix this program [ 1468.700890][T16553] Bluetooth: hci3: command 0x0406 tx timeout [ 1473.084268][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1473.334939][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 1473.371380][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.410934][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1473.453276][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1473.504378][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1473.536624][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.587639][ T5891] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1473.632573][ T5891] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1473.660855][ T5891] usb 5-1: Manufacturer: syz [ 1473.681818][ T5891] usb 5-1: config 0 descriptor?? [ 1475.300696][ T5891] rc_core: IR keymap rc-hauppauge not found [ 1475.337295][ T5891] Registered IR keymap rc-empty [ 1475.351118][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1475.411140][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1475.458115][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1475.538282][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input94 [ 1475.695463][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1475.851302][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1475.911781][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.051363][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.571241][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.608856][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.671010][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.710853][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.753121][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.800853][ T5891] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1476.920949][ T7006] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1477.196815][ T5891] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1477.206062][ T5891] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1477.228340][ T5891] usb 5-1: USB disconnect, device number 2 [ 1477.400725][ T7006] usb 2-1: Using ep0 maxpacket: 16 [ 1477.418693][ T7006] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 1477.447284][ T7006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.478222][ T7006] usb 2-1: config 0 has no interface number 0 [ 1477.706000][ T7006] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 1477.715249][ T7006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.752444][ T7006] usb 2-1: Product: syz [ 1477.756718][ T7006] usb 2-1: Manufacturer: syz [ 1477.788659][ T7006] usb 2-1: SerialNumber: syz [ 1477.971971][ T7006] usb 2-1: config 0 descriptor?? [ 1480.071015][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1481.543000][T13873] usb 2-1: USB disconnect, device number 82 [ 1481.742862][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1481.778009][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.838663][ T5891] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1481.886204][ T5891] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1481.940855][ T5891] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1482.020966][ T5891] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1482.102757][ T5891] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1482.181402][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 1482.187815][ T5891] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1482.253794][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.519580][ T5891] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 1483.018925][ T5891] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1483.105493][ T5891] usb 5-1: USB disconnect, device number 3 [ 1483.385527][T16747] Bluetooth: MGMT ver 1.22 [ 1483.390074][T16747] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1483.560773][ T5101] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1483.802933][ T5101] usb 4-1: Using ep0 maxpacket: 16 [ 1483.810434][ T5101] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.830735][ T5101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1483.850699][ T5101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1483.872437][ T5101] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1483.890130][ T5101] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1483.933970][ T5101] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1483.943586][ T5101] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1483.960771][ T5101] usb 4-1: Manufacturer: syz [ 1483.986844][ T5101] usb 4-1: config 0 descriptor?? [ 1484.717026][ T5101] rc_core: IR keymap rc-hauppauge not found [ 1484.938779][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.945449][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.962073][ T5101] Registered IR keymap rc-empty [ 1484.968512][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.013048][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.082917][ T5101] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1485.153382][ T5101] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input95 [ 1485.378028][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.460973][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.501266][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.681633][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.751446][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.821492][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1485.896443][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.188791][ T5838] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1487.273689][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.320862][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.376954][ T5101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1487.400961][ T5838] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1487.409515][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.422891][ T5101] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1487.459884][ T5838] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1487.461089][ T5101] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1487.490646][ T5838] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1487.518820][ T5838] usb 1-1: Manufacturer: syz [ 1487.537179][ T5838] usb 1-1: config 0 descriptor?? [ 1487.570114][ T5101] usb 4-1: USB disconnect, device number 91 [ 1487.928027][ T5838] rc_core: IR keymap rc-hauppauge not found [ 1487.934122][ T5838] Registered IR keymap rc-empty [ 1487.940093][ T5838] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1487.953688][ T5838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input96 [ 1488.030871][ T5101] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1488.100886][ T5838] igorplugusb 1-1:0.0: submit urb failed: -53 [ 1488.254219][ T5101] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1488.287961][ T5101] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.304832][ T5101] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1488.334803][ T5101] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1488.379411][ T5101] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1488.393335][ T5101] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1488.405083][ T5101] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1488.416176][ T5101] usb 4-1: string descriptor 0 read error: -22 [ 1488.424249][ T5101] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1488.433928][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.589497][T16804] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1488.689629][ T5101] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 1489.149754][ T5101] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1489.229159][ T5101] usb 4-1: USB disconnect, device number 92 [ 1489.370370][ T5891] usb 1-1: USB disconnect, device number 92 [ 1492.810930][ T5838] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1493.101267][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 1493.136163][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.170680][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1493.200671][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1493.210410][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1493.240654][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.300784][ T5838] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1493.330398][ T5838] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1493.351161][ T5838] usb 4-1: Manufacturer: syz [ 1493.399047][ T5838] usb 4-1: config 0 descriptor?? [ 1494.185132][ T5838] rc_core: IR keymap rc-hauppauge not found [ 1494.195260][ T5838] Registered IR keymap rc-empty [ 1494.200398][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1494.290746][ T5891] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1494.301796][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1494.374706][ T5838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1494.409455][ T5838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input97 [ 1494.458228][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1494.490745][ T5891] usb 2-1: Using ep0 maxpacket: 8 [ 1494.511295][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1494.515290][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1494.541342][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1494.571327][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.582225][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1494.700876][T10164] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1494.733667][ T5891] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1494.770959][ T5891] pvrusb2: ********** [ 1494.791159][ T5891] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1494.844590][ T5891] pvrusb2: Important functionality might not be entirely working. [ 1494.877676][ T5891] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1494.904844][ T5891] pvrusb2: ********** [ 1494.904982][T10164] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1494.946011][T10164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.971594][ T2323] pvrusb2: Invalid write control endpoint [ 1495.000791][T10164] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1495.014971][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.061984][T10164] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1495.071006][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.110767][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.131089][T10164] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1495.165514][T10164] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1495.177469][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.230884][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.258067][ T2323] pvrusb2: Invalid write control endpoint [ 1495.302348][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1495.313647][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1495.360374][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1495.383551][ T5838] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1495.421175][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1495.433395][T10164] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1495.441180][ T2323] pvrusb2: Device being rendered inoperable [ 1495.454315][T16845] pvrusb2: Attempted to execute control transfer when device not ok [ 1495.463075][T10164] usb 5-1: string descriptor 0 read error: -22 [ 1495.469418][T10164] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1495.473189][ T5838] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1495.491566][T10164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.505190][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1495.520994][ T5101] usb 2-1: USB disconnect, device number 83 [ 1495.529747][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1495.575463][ T5838] usb 4-1: USB disconnect, device number 93 [ 1495.597073][ T2323] pvrusb2: Attached sub-driver cx25840 [ 1495.625474][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1495.670280][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1495.755690][T10164] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 1496.336997][T10164] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1496.491183][T10164] usb 5-1: USB disconnect, device number 4 [ 1499.581367][ T786] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1499.790716][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 1499.802559][ T786] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.830855][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1499.843912][ T786] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1499.874288][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.128074][ T786] usb 2-1: config 0 descriptor?? [ 1500.601254][ T786] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 1500.608746][ T786] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 1500.665797][ T786] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 1500.680863][ T786] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 1500.710772][ T5838] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1500.743652][ T786] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1500.926674][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 1500.981662][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.071652][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1501.089490][ T786] usb 2-1: USB disconnect, device number 84 [ 1501.152297][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1501.172737][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1501.187186][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.209179][ T5838] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1501.228329][ T5838] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1501.248357][ T5838] usb 4-1: Manufacturer: syz [ 1501.268029][ T5838] usb 4-1: config 0 descriptor?? [ 1501.439751][T16940] fido_id[16940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1502.071776][ T5838] rc_core: IR keymap rc-hauppauge not found [ 1502.077764][ T5838] Registered IR keymap rc-empty [ 1502.106050][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1502.301680][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1502.342935][ T5838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1502.741222][ T5838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input98 [ 1503.738840][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1503.801112][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1503.908708][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.141005][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.230798][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.310788][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.340744][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.402294][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.462298][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.491439][ T5838] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1504.571057][ T5838] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1504.580775][ T5838] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1504.682167][ T5838] usb 4-1: USB disconnect, device number 94 [ 1509.630766][T16971] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1509.661046][T17012] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1509.971060][T16971] usb 2-1: Using ep0 maxpacket: 16 [ 1509.993092][T16971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.013905][T16971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1510.050716][T16971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1510.109725][T16971] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1510.152679][T16971] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.222950][T16971] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1510.270708][T16971] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1510.320816][T16971] usb 2-1: Manufacturer: syz [ 1510.337453][T16971] usb 2-1: config 0 descriptor?? [ 1511.981179][T16971] rc_core: IR keymap rc-hauppauge not found [ 1511.998631][T16971] Registered IR keymap rc-empty [ 1512.010166][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.066832][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.102069][T16971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1512.144474][T16971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input99 [ 1512.182343][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.302308][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.310935][ T7006] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1512.362638][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.550844][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.610893][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.622925][ T7006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1512.633083][ T7006] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1512.648766][ T7006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1512.658982][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.666267][ T7006] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1512.677144][ T7006] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1512.687372][ T7006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.701511][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.715074][ T7006] usb 5-1: config 0 descriptor?? [ 1512.889055][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.953576][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1512.990990][T16971] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1513.037597][T16971] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1513.067246][T16971] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1513.098727][T16971] usb 2-1: USB disconnect, device number 85 [ 1514.194903][ T7006] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 1514.218707][ T7006] hdpvr 5-1:0.0: device init failed [ 1514.226994][ T7006] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1515.443950][ T7006] usb 5-1: USB disconnect, device number 5 [ 1519.901124][T16971] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1520.121659][T16971] usb 5-1: Using ep0 maxpacket: 16 [ 1520.142366][T16971] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.160937][T16971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1520.181101][T16971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1520.218455][T16971] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1520.260127][T16971] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1520.314528][T16971] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1520.350654][T16971] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1520.368902][T16971] usb 5-1: Manufacturer: syz [ 1520.382243][T16971] usb 5-1: config 0 descriptor?? [ 1521.262758][T16971] rc_core: IR keymap rc-hauppauge not found [ 1521.293507][T16971] Registered IR keymap rc-empty [ 1521.343060][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.411638][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.471908][T16971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1521.518123][T16971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100 [ 1521.555549][T10164] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1521.608893][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.680768][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.720932][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.767847][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.777086][T10164] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1521.801487][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.828563][T10164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.852360][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.879755][T10164] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1521.895992][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1521.950873][T10164] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1521.962978][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1522.000900][T10164] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1522.020800][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1522.057588][T10164] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1522.070771][T16971] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1522.110081][T10164] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1522.134277][T16971] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1522.151555][T10164] usb 2-1: string descriptor 0 read error: -22 [ 1522.157927][T10164] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1522.167470][T16971] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1523.379518][T10164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.403143][T16971] usb 5-1: USB disconnect, device number 6 [ 1523.668006][T10164] usb 2-1: can't set config #1, error -71 [ 1524.465492][T10164] usb 2-1: USB disconnect, device number 86 [ 1526.490800][T10164] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1526.941587][T10164] usb 2-1: device not accepting address 87, error -71 [ 1532.005568][ T5101] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1532.270747][ T5101] usb 4-1: Using ep0 maxpacket: 32 [ 1532.301046][ T5101] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1532.350696][ T5101] usb 4-1: config 0 has no interface number 0 [ 1532.382952][ T5101] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1532.392285][ T5101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.400325][ T5101] usb 4-1: Product: syz [ 1532.424428][ T5101] usb 4-1: Manufacturer: syz [ 1532.429127][ T5101] usb 4-1: SerialNumber: syz [ 1532.454158][ T5101] usb 4-1: config 0 descriptor?? [ 1532.486383][ T5101] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1532.702422][ T5101] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1532.757130][ T5101] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1532.861058][T14802] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1532.927768][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1532.934664][T16971] usb 4-1: USB disconnect, device number 95 [ 1532.998116][T16971] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1533.050860][T16971] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1533.063888][T16971] quatech2 4-1:0.51: device disconnected [ 1533.098811][T14802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1533.140756][T14802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1533.182689][T14802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1533.209245][T14802] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1533.240825][T14802] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1533.249990][T14802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.336372][T14802] usb 5-1: config 0 descriptor?? [ 1534.667863][T14802] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 1534.724566][T14802] hdpvr 5-1:0.0: device init failed [ 1534.738609][T14802] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1535.816419][T14802] usb 5-1: USB disconnect, device number 7 [ 1540.587856][ T7006] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1540.999028][ T7006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1541.065861][ T7006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1541.153944][ T7006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1541.235281][ T7006] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1541.260321][ T7006] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1541.269800][ T7006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.297712][ T7006] usb 1-1: config 0 descriptor?? [ 1542.147601][ T7006] hdpvr 1-1:0.0: unexpected answer of status request, len -32 [ 1542.948711][ T7006] hdpvr 1-1:0.0: device init failed [ 1542.968775][ T7006] hdpvr: probe of 1-1:0.0 failed with error -12 [ 1543.242826][T17222] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1544.268665][ T7006] usb 1-1: USB disconnect, device number 93 [ 1546.238406][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.245107][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.432423][T17267] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1549.627651][ T7006] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1549.838231][ T7006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1549.910270][ T7006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1550.032916][ T7006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1550.134248][ T7006] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1550.182714][ T7006] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1550.308186][ T7006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.475809][ T7006] usb 2-1: config 0 descriptor?? [ 1551.361225][T14114] Bluetooth: hci3: command 0x0406 tx timeout [ 1551.369306][ T7006] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 1551.377618][ T7006] hdpvr 2-1:0.0: device init failed [ 1551.388439][ T7006] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1553.075728][T10164] usb 2-1: USB disconnect, device number 89 [ 1553.359874][T17293] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1553.421157][T16971] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1554.771741][T16971] usb 1-1: Using ep0 maxpacket: 16 [ 1554.779229][T16971] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.800638][T16971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1554.813550][T16971] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1554.830947][T16971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.866190][T16971] usb 1-1: config 0 descriptor?? [ 1555.326225][T16971] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 1555.356042][T16971] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 1555.388006][T16971] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 1555.410483][T16971] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1555.740099][T16971] usb 1-1: USB disconnect, device number 94 [ 1557.710808][T10164] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1559.855052][T10164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1559.871850][T10164] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1561.130693][T10164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1561.140523][T10164] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1561.200730][T10164] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1561.209859][T10164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.311635][T10164] usb 4-1: config 0 descriptor?? [ 1561.322858][T10164] usb 4-1: can't set config #0, error -71 [ 1561.370735][T10164] usb 4-1: USB disconnect, device number 96 [ 1562.677088][T17348] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1564.870938][ T5101] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1566.260728][T17361] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1566.390733][ T5101] usb 1-1: device not accepting address 95, error -71 [ 1566.463122][T17361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1566.483391][T17361] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1566.514247][T17361] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1566.544741][T17361] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1566.565043][T17361] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1566.584489][T17361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.614002][T17361] usb 5-1: config 0 descriptor?? [ 1567.187897][T17361] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 1567.963305][T17361] hdpvr 5-1:0.0: device init failed [ 1567.968701][T17361] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1568.850756][ T5891] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1569.060840][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1569.076618][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.098288][ T5838] usb 5-1: USB disconnect, device number 8 [ 1569.109803][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1569.165252][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1569.208630][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1569.250402][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1569.296166][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1569.315942][ T5891] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1569.349966][ T5891] usb 4-1: Manufacturer: syz [ 1569.452179][ T5891] usb 4-1: config 0 descriptor?? [ 1570.300866][ T5891] rc_core: IR keymap rc-hauppauge not found [ 1570.306871][ T5891] Registered IR keymap rc-empty [ 1570.347333][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1570.410856][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1570.452484][ T5891] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1570.484833][ T5891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input101 [ 1571.785202][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1571.852462][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1571.895309][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1571.961332][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1571.990735][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1572.054649][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1572.101055][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1572.137281][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1572.181285][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1572.290939][ T5891] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1572.353591][ T5891] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1572.391424][ T5891] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1572.488322][ T5891] usb 4-1: USB disconnect, device number 97 [ 1573.602151][ T786] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1573.960782][ T5891] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1574.140823][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1574.160622][ T786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1574.169056][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1574.170329][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1574.202778][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1574.230648][ T786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1574.240487][ T786] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1574.251860][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1574.266212][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.276727][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1574.288830][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1574.322383][ T786] usb 5-1: config 0 descriptor?? [ 1574.434866][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.470373][ T5891] usb 4-1: config 0 descriptor?? [ 1575.041309][ T786] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 1575.085280][ T786] hdpvr 5-1:0.0: device init failed [ 1575.138080][ T786] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1575.949156][ T5891] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 1575.961425][ T5891] hdpvr 4-1:0.0: device init failed [ 1575.973047][ T5891] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1576.891198][ T786] usb 5-1: USB disconnect, device number 9 [ 1578.740953][ T786] usb 4-1: USB disconnect, device number 98 [ 1579.203094][T17446] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1582.780743][T17361] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1582.998100][T17361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1583.024331][T17361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1583.061439][T17361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1583.200186][T17361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1583.226507][T17361] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1583.261628][T17361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.313979][T17361] usb 4-1: config 0 descriptor?? [ 1583.862613][T17483] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1583.924878][T17361] hdpvr 4-1:0.0: unexpected answer of status request, len -32 [ 1584.720691][T17361] hdpvr 4-1:0.0: device init failed [ 1584.885302][T17361] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1586.701683][ T786] usb 4-1: USB disconnect, device number 99 [ 1587.214247][T17510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3427'. [ 1588.090742][ T786] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1589.140669][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 1589.198585][ T786] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1589.248432][ T786] usb 4-1: config 0 has no interface number 0 [ 1589.339822][ T786] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1589.391360][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.399447][ T786] usb 4-1: Product: syz [ 1589.444821][ T786] usb 4-1: Manufacturer: syz [ 1589.470651][ T786] usb 4-1: SerialNumber: syz [ 1589.502019][ T786] usb 4-1: config 0 descriptor?? [ 1589.531535][ T786] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1589.796929][ T786] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1589.828611][ T786] quatech2: probe of 4-1:0.51 failed with error -71 [ 1589.884701][ T786] usb 4-1: USB disconnect, device number 100 [ 1591.511102][ T786] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1591.810898][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 1591.827976][ T786] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.893743][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1591.901553][ T786] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1591.912390][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.934775][ T786] usb 2-1: config 0 descriptor?? [ 1595.452417][ T786] usbhid 2-1:0.0: can't add hid device: -71 [ 1595.465242][ T786] usbhid: probe of 2-1:0.0 failed with error -71 [ 1595.489005][ T786] usb 2-1: USB disconnect, device number 90 [ 1595.530773][T17575] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1600.970713][T17361] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1601.200792][T17361] usb 4-1: Using ep0 maxpacket: 16 [ 1601.373832][T17361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.404923][T17361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1601.420713][T17624] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3459'. [ 1601.444065][T17361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1601.466758][T17361] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1601.477620][T17361] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1601.492719][T17361] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1601.507620][T17361] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1601.520816][ T7006] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1601.525798][T17361] usb 4-1: Manufacturer: syz [ 1601.566622][T17361] usb 4-1: config 0 descriptor?? [ 1601.838658][ T7006] usb 2-1: Using ep0 maxpacket: 16 [ 1601.866673][ T7006] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.901576][T17361] rc_core: IR keymap rc-hauppauge not found [ 1601.907962][T17361] Registered IR keymap rc-empty [ 1601.913943][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1601.935205][ T7006] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1601.951512][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1601.964022][ T7006] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1601.982961][T17361] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1602.011342][T17361] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input102 [ 1602.118926][ T7006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.126674][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.180802][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.202074][ T7006] usb 2-1: config 0 descriptor?? [ 1602.222492][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.260833][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.302105][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.340785][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.381518][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.431101][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.470914][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.511941][T17361] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1602.562738][T17361] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1602.594066][T17361] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1602.602911][ T5891] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1602.626284][T17361] usb 4-1: USB disconnect, device number 101 [ 1602.703262][ T7006] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 1602.718789][ T7006] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 1602.727043][ T7006] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0 [ 1602.738954][ T7006] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1603.245826][ T7006] usb 2-1: USB disconnect, device number 91 [ 1605.032133][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 1605.039628][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.060410][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1605.084789][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1605.106484][ T5891] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1605.163888][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.177565][T17636] fido_id[17636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1605.242715][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1605.281025][ T5891] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1605.289112][ T5891] usb 1-1: Manufacturer: syz [ 1605.333346][ T5891] usb 1-1: config 0 descriptor?? [ 1605.514480][ T5891] usb 1-1: can't set config #0, error -71 [ 1605.554579][ T5891] usb 1-1: USB disconnect, device number 97 [ 1606.441010][T17653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1608.885167][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1608.902688][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.909093][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.140436][ T5891] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1609.151646][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.200852][ T5891] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1609.220860][ T5891] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1609.228931][ T5891] usb 5-1: Manufacturer: syz [ 1609.282257][ T5891] usb 5-1: config 0 descriptor?? [ 1609.430695][ T5891] rc_core: IR keymap rc-hauppauge not found [ 1609.436849][ T5891] Registered IR keymap rc-empty [ 1609.448736][ T5891] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1609.479639][ T5891] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input103 [ 1609.530807][ T5891] ------------[ cut here ]------------ [ 1609.536420][ T5891] usb 5-1: BOGUS control dir, pipe 80000a80 doesn't match bRequestType 10 [ 1609.561624][ T5891] WARNING: CPU: 0 PID: 5891 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 1609.571780][ T5891] Modules linked in: [ 1609.575767][ T5891] CPU: 0 PID: 5891 Comm: kworker/0:7 Not tainted syzkaller #0 [ 1609.583990][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1609.594231][ T5891] Workqueue: usb_hub_wq hub_event [ 1609.599363][ T5891] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 1609.605249][ T5891] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 1609.627567][ T5891] RSP: 0018:ffffc90004a4ee00 EFLAGS: 00010246 [ 1609.632330][ T7006] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1609.634998][ T5891] RAX: 28735001978f6400 RBX: ffff888069982e00 RCX: 0000000000100000 [ 1609.650163][ T5891] RDX: ffffc90016fe8000 RSI: 00000000000535b4 RDI: 00000000000535b5 [ 1609.658366][ T5891] RBP: 1ffff1100caafa88 R08: ffffc90004a4ea07 R09: 1ffff92000949d40 [ 1609.666977][ T5891] R10: dffffc0000000000 R11: fffff52000949d41 R12: dffffc0000000000 [ 1609.675208][ T5891] R13: ffff88806557d440 R14: 0000000080000a80 R15: ffff88806689ca78 [ 1609.683369][ T5891] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1609.692445][ T5891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1609.699087][ T5891] CR2: 0000001b32323ffc CR3: 0000000065368000 CR4: 00000000003506f0 [ 1609.707281][ T5891] Call Trace: [ 1609.710772][ T5891] [ 1609.713850][ T5891] igorplugusb_probe+0x812/0xc60 [ 1609.719032][ T5891] usb_probe_interface+0x5c9/0xb20 [ 1609.726542][ T5891] ? usb_register_driver+0x3d0/0x3d0 [ 1609.732425][ T5891] really_probe+0x25b/0xb20 [ 1609.737088][ T5891] ? pm_runtime_barrier+0x14b/0x1c0 [ 1609.742522][ T5891] __driver_probe_device+0x1ef/0x390 [ 1609.747883][ T5891] driver_probe_device+0x4f/0x420 [ 1609.753072][ T5891] __device_attach_driver+0x2ca/0x510 [ 1609.758521][ T5891] bus_for_each_drv+0x252/0x2e0 [ 1609.763576][ T5891] ? coredump_store+0x90/0x90 [ 1609.768326][ T5891] ? bus_find_device+0x300/0x300 [ 1609.773551][ T5891] __device_attach+0x2c2/0x420 [ 1609.778572][ T5891] ? device_attach+0x20/0x20 [ 1609.783329][ T5891] ? __kmem_cache_free+0xba/0x1e0 [ 1609.788495][ T5891] ? do_raw_spin_unlock+0x121/0x230 [ 1609.793860][ T5891] bus_probe_device+0x180/0x260 [ 1609.798780][ T5891] device_add+0x88e/0xc50 [ 1609.803302][ T5891] usb_set_configuration+0x1a79/0x20c0 [ 1609.808870][ T5891] usb_generic_driver_probe+0x8d/0x150 [ 1609.814485][ T5891] usb_probe_device+0x13d/0x270 [ 1609.819402][ T5891] ? usb_register_device_driver+0x230/0x230 [ 1609.827643][ T5891] really_probe+0x25b/0xb20 [ 1609.832645][ T5891] ? pm_runtime_barrier+0x14b/0x1c0 [ 1609.838185][ T5891] __driver_probe_device+0x1ef/0x390 [ 1609.843665][ T5891] driver_probe_device+0x4f/0x420 [ 1609.848886][ T5891] __device_attach_driver+0x2ca/0x510 [ 1609.854414][ T5891] bus_for_each_drv+0x252/0x2e0 [ 1609.858044][ T7006] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1609.859309][ T5891] ? coredump_store+0x90/0x90 [ 1609.859343][ T5891] ? bus_find_device+0x300/0x300 [ 1609.876865][ T5891] __device_attach+0x2c2/0x420 [ 1609.881824][ T5891] ? device_attach+0x20/0x20 [ 1609.886491][ T5891] ? __kmem_cache_free+0xba/0x1e0 [ 1609.891755][ T5891] ? do_raw_spin_unlock+0x121/0x230 [ 1609.897069][ T5891] bus_probe_device+0x180/0x260 [ 1609.902375][ T5891] device_add+0x88e/0xc50 [ 1609.906808][ T5891] usb_new_device+0xa3c/0x1660 [ 1609.909570][ T7006] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.911787][ T5891] ? usb_disconnect+0x8a0/0x8a0 [ 1609.911827][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.935231][ T5891] ? lockdep_hardirqs_on+0x98/0x150 [ 1609.940703][ T5891] hub_event+0x29bf/0x49f0 [ 1609.945257][ T5891] ? hub_post_resume+0x120/0x120 [ 1609.950270][ T5891] ? read_lock_is_recursive+0x20/0x20 [ 1609.955362][ T7006] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1609.956008][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.970058][ T5891] ? process_scheduled_works+0x96f/0x15d0 [ 1609.975998][ T5891] ? process_scheduled_works+0x96f/0x15d0 [ 1609.978534][ T7006] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1609.981849][ T5891] process_scheduled_works+0xa5d/0x15d0 [ 1609.981923][ T5891] ? worker_attach_to_pool+0x380/0x380 [ 1609.981963][ T5891] ? assign_work+0x3d2/0x5d0 [ 1609.981999][ T5891] worker_thread+0xa55/0xfc0 [ 1609.982062][ T5891] kthread+0x2fa/0x390 [ 1609.982084][ T5891] ? pr_cont_work+0x560/0x560 [ 1609.982113][ T5891] ? kthread_blkcg+0xd0/0xd0 [ 1609.982137][ T5891] ret_from_fork+0x48/0x80 [ 1609.982193][ T5891] ? kthread_blkcg+0xd0/0xd0 [ 1609.982216][ T5891] ret_from_fork_asm+0x11/0x20 [ 1609.982275][ T5891] [ 1609.982288][ T5891] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1609.982306][ T5891] CPU: 0 PID: 5891 Comm: kworker/0:7 Not tainted syzkaller #0 [ 1609.982327][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1609.982342][ T5891] Workqueue: usb_hub_wq hub_event [ 1609.982370][ T5891] Call Trace: [ 1609.982379][ T5891] [ 1609.982388][ T5891] dump_stack_lvl+0x18c/0x250 [ 1609.982418][ T5891] ? show_regs_print_info+0x20/0x20 [ 1609.982443][ T5891] ? load_image+0x420/0x420 [ 1609.982500][ T5891] panic+0x2dc/0x730 [ 1609.982545][ T5891] ? bpf_jit_dump+0xd0/0xd0 [ 1609.982593][ T5891] ? ret_from_fork_asm+0x11/0x20 [ 1609.982628][ T5891] __warn+0x2e0/0x470 [ 1609.982659][ T5891] ? usb_submit_urb+0x10ac/0x17d0 [ 1609.982691][ T5891] ? usb_submit_urb+0x10ac/0x17d0 [ 1609.982721][ T5891] report_bug+0x2be/0x4f0 [ 1609.982754][ T5891] ? usb_submit_urb+0x10ac/0x17d0 [ 1609.982785][ T5891] ? usb_submit_urb+0x10ac/0x17d0 [ 1609.982820][ T5891] ? usb_submit_urb+0x10ae/0x17d0 [ 1609.982851][ T5891] handle_bug+0xcf/0x120 [ 1609.982877][ T5891] exc_invalid_op+0x1a/0x50 [ 1609.982904][ T5891] asm_exc_invalid_op+0x1a/0x20 [ 1609.983010][ T5891] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 1609.983041][ T5891] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 1609.983058][ T5891] RSP: 0018:ffffc90004a4ee00 EFLAGS: 00010246 [ 1609.983114][ T5891] RAX: 28735001978f6400 RBX: ffff888069982e00 RCX: 0000000000100000 [ 1609.983171][ T5891] RDX: ffffc90016fe8000 RSI: 00000000000535b4 RDI: 00000000000535b5 [ 1609.983211][ T5891] RBP: 1ffff1100caafa88 R08: ffffc90004a4ea07 R09: 1ffff92000949d40 [ 1609.983259][ T5891] R10: dffffc0000000000 R11: fffff52000949d41 R12: dffffc0000000000 [ 1609.983311][ T5891] R13: ffff88806557d440 R14: 0000000080000a80 R15: ffff88806689ca78 [ 1609.983436][ T5891] igorplugusb_probe+0x812/0xc60 [ 1609.983537][ T5891] usb_probe_interface+0x5c9/0xb20 [ 1609.983639][ T5891] ? usb_register_driver+0x3d0/0x3d0 [ 1609.983684][ T5891] really_probe+0x25b/0xb20 [ 1609.983764][ T5891] ? pm_runtime_barrier+0x14b/0x1c0 [ 1609.983837][ T5891] __driver_probe_device+0x1ef/0x390 [ 1609.983916][ T5891] driver_probe_device+0x4f/0x420 [ 1609.983991][ T5891] __device_attach_driver+0x2ca/0x510 [ 1609.984073][ T5891] bus_for_each_drv+0x252/0x2e0 [ 1609.984121][ T5891] ? coredump_store+0x90/0x90 [ 1609.984182][ T5891] ? bus_find_device+0x300/0x300 [ 1609.984269][ T5891] __device_attach+0x2c2/0x420 [ 1609.984346][ T5891] ? device_attach+0x20/0x20 [ 1609.984405][ T5891] ? __kmem_cache_free+0xba/0x1e0 [ 1609.984497][ T5891] ? do_raw_spin_unlock+0x121/0x230 [ 1609.984619][ T5891] bus_probe_device+0x180/0x260 [ 1609.984708][ T5891] device_add+0x88e/0xc50 [ 1609.984800][ T5891] usb_set_configuration+0x1a79/0x20c0 [ 1609.984964][ T5891] usb_generic_driver_probe+0x8d/0x150 [ 1609.985057][ T5891] usb_probe_device+0x13d/0x270 [ 1609.985122][ T5891] ? usb_register_device_driver+0x230/0x230 [ 1609.985173][ T5891] really_probe+0x25b/0xb20 [ 1609.985245][ T5891] ? pm_runtime_barrier+0x14b/0x1c0 [ 1609.985315][ T5891] __driver_probe_device+0x1ef/0x390 [ 1609.985388][ T5891] driver_probe_device+0x4f/0x420 [ 1609.985461][ T5891] __device_attach_driver+0x2ca/0x510 [ 1609.985535][ T5891] bus_for_each_drv+0x252/0x2e0 [ 1609.985605][ T5891] ? coredump_store+0x90/0x90 [ 1609.985660][ T5891] ? bus_find_device+0x300/0x300 [ 1609.985742][ T5891] __device_attach+0x2c2/0x420 [ 1609.985813][ T5891] ? device_attach+0x20/0x20 [ 1609.985872][ T5891] ? __kmem_cache_free+0xba/0x1e0 [ 1609.985977][ T5891] ? do_raw_spin_unlock+0x121/0x230 [ 1609.986090][ T5891] bus_probe_device+0x180/0x260 [ 1609.986153][ T5891] device_add+0x88e/0xc50 [ 1609.986246][ T5891] usb_new_device+0xa3c/0x1660 [ 1609.986341][ T5891] ? usb_disconnect+0x8a0/0x8a0 [ 1609.986412][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.986502][ T5891] ? lockdep_hardirqs_on+0x98/0x150 [ 1609.986598][ T5891] hub_event+0x29bf/0x49f0 [ 1609.986816][ T5891] ? hub_post_resume+0x120/0x120 [ 1609.986884][ T5891] ? read_lock_is_recursive+0x20/0x20 [ 1609.986970][ T5891] ? _raw_spin_unlock_irq+0x23/0x50 [ 1609.987051][ T5891] ? process_scheduled_works+0x96f/0x15d0 [ 1609.987119][ T5891] ? process_scheduled_works+0x96f/0x15d0 [ 1609.987191][ T5891] process_scheduled_works+0xa5d/0x15d0 [ 1609.987360][ T5891] ? worker_attach_to_pool+0x380/0x380 [ 1609.987477][ T5891] ? assign_work+0x3d2/0x5d0 [ 1609.987565][ T5891] worker_thread+0xa55/0xfc0 [ 1609.987723][ T5891] kthread+0x2fa/0x390 [ 1609.987787][ T5891] ? pr_cont_work+0x560/0x560 [ 1609.987862][ T5891] ? kthread_blkcg+0xd0/0xd0 [ 1609.987917][ T5891] ret_from_fork+0x48/0x80 [ 1609.987981][ T5891] ? kthread_blkcg+0xd0/0xd0 [ 1609.988042][ T5891] ret_from_fork_asm+0x11/0x20 [ 1609.988153][ T5891] [ 1609.994490][ T5891] Kernel Offset: disabled