last executing test programs: 18.30023352s ago: executing program 1 (id=253): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) 15.797391952s ago: executing program 2 (id=260): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0", 0x39}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6", 0x4f}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14.878942362s ago: executing program 1 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x9, 0x0) r1 = getpid() symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40040) r4 = io_uring_setup(0x3454, &(0x7f0000000340)={0x0, 0xffffeffe, 0x18, 0x2, 0x3}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x181000, &(0x7f0000000400)={[{@verity_off}, {@uuid_auto}, {@uuid_off}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='async'}, {@appraise}, {@obj_type={'obj_type', 0x3d, '/dev/cpu/#/msr\x00'}}, {@euid_gt}]}) eventfd2(0x49d, 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 14.875118502s ago: executing program 0 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580), 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) r6 = dup(r5) shutdown(r5, 0x1) sendmsg$inet_sctp(r6, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 11.968313967s ago: executing program 1 (id=264): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x24, 0x1}, {0x1}, {0x30, 0x1}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 11.928081409s ago: executing program 2 (id=265): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x47d, @loopback}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x5, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 11.435990365s ago: executing program 0 (id=267): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff030000000905820300"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000304030000000000000000005500", @ANYRES32=r1, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) 11.435787445s ago: executing program 2 (id=268): syz_usbip_server_init(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40c0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x22) 10.514357835s ago: executing program 2 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x9, 0x0) r1 = getpid() symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40040) r4 = io_uring_setup(0x3454, &(0x7f0000000340)={0x0, 0xffffeffe, 0x18, 0x2, 0x3}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x181000, &(0x7f0000000400)={[{@verity_off}, {@uuid_auto}, {@uuid_off}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@flag='async'}, {@appraise}, {@obj_type={'obj_type', 0x3d, '/dev/cpu/#/msr\x00'}}, {@euid_gt}]}) eventfd2(0x49d, 0x800) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 8.467973693s ago: executing program 2 (id=273): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) setuid(0xee00) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x3, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="a36dbb", 0x0, 0x0, 0x11, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x80, 0xfe, 0x22, 0xfe, 0x3, 0x6, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xcf) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0xfa, 0x4e6023) 7.870639092s ago: executing program 0 (id=274): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c", 0x3b}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6", 0x4f}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.39835023s ago: executing program 3 (id=276): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) 4.841156091s ago: executing program 1 (id=277): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000340)=@random={'os2.', '/dev/ppp\x00'}, &(0x7f0000000440)='/dev/ppp\x00', 0x9, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) 4.744026875s ago: executing program 3 (id=278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) 4.743653015s ago: executing program 0 (id=279): r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) readv(r0, &(0x7f00000002c0), 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0dd2c90430bbc00000"], 0x9) readv(r2, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="9b0f2abd7000ffdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x20008800) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x0, 0xa}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r10) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1508a1a9b46941cb}, 0x8094) landlock_restrict_self(r1, 0xe) r11 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x3}}, 0x20) 4.220063282s ago: executing program 3 (id=280): syz_usbip_server_init(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40c0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x22) 3.739490217s ago: executing program 1 (id=281): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000540)}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.66603783s ago: executing program 0 (id=282): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) 2.678326882s ago: executing program 1 (id=283): r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r5) ioctl$UBLK_U_CMD_ADD_DEV(r1, 0xc0207504, 0x0) getsockname$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) io_uring_setup(0xd94, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240000d4}, 0x24048801) sendmsg$nl_route_sched(r7, 0x0, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039000000000000000000000008001c"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 2.658357593s ago: executing program 3 (id=284): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001800)={'#! ', './file0', [{0x20, '\x1d'}, {0x20, '*@]'}, {0x20, '\xa0\xb3\x85\xe1up.stat\x00{\tcq\x9f\xaet\xe5nE(\xeb\xbd\xda0\xfb\xba\x0ed!Rh\xc0r\xc5\x13F\xc3\xe2\x1f\x17\xe2\x9d\xab\a\xe2\xba\xac\x1c\xc6\xf5\x84\xa4]\x93\x01\x1b\xfdE\x119\xc7\xdf4\xa56)SO\xa3yd{\xe8\xc0'}, {0x20, '\xde\xb6[i\xfe\xc1\xbc\x15\x8d\xc0\xd3\x11K*\xc09}P\xfd\xde\x8aX\xc6I\x04|y\x06h\r\xfe\x8d(\xc4\xd3\x83E\xe1oa\xab\xa5\xdc\xf8\x95\xbb~\xd7\x8b\xdb4\xe9k6\xa2n:\x8b\xc9\x10\xb88\xceP\xef\xd1\x9e\x8drF\xc2\xb8C\"\x8bLX\xbf`\xfaI\x1b\xd8\xaa\xce\x8b\xd1c\x9c\x95\xdf\xc3\x93['}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd5"}, 0xe3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 2.625859284s ago: executing program 2 (id=285): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x24, 0x1}, {0x1}, {0x30, 0x1}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 1.415025824s ago: executing program 3 (id=286): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4020080}, 0x0) 1.22106156s ago: executing program 3 (id=287): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=288): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 76.218249][ T5761] cgroup: Unknown subsys name 'net' [ 76.349512][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.991082][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.578425][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.588186][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.595037][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.596017][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.610215][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.619564][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.628452][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.628563][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.642356][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.644671][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.657716][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.665164][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.668152][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.672614][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.680251][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.694024][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.694903][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.708801][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.709098][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.724763][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.732317][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.739754][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.740104][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.757289][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.209755][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 80.225410][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 80.345224][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.404242][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.440534][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.450082][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.457509][ T5773] bridge_slave_0: entered allmulticast mode [ 80.465408][ T5773] bridge_slave_0: entered promiscuous mode [ 80.479881][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.487137][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.494382][ T5773] bridge_slave_1: entered allmulticast mode [ 80.501823][ T5773] bridge_slave_1: entered promiscuous mode [ 80.514455][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.521605][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.531024][ T5772] bridge_slave_0: entered allmulticast mode [ 80.538023][ T5772] bridge_slave_0: entered promiscuous mode [ 80.580338][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.587820][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.595168][ T5772] bridge_slave_1: entered allmulticast mode [ 80.601951][ T5772] bridge_slave_1: entered promiscuous mode [ 80.621467][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.666254][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.697325][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.704616][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.711904][ T5774] bridge_slave_0: entered allmulticast mode [ 80.718969][ T5774] bridge_slave_0: entered promiscuous mode [ 80.759521][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.767315][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.774812][ T5774] bridge_slave_1: entered allmulticast mode [ 80.781627][ T5774] bridge_slave_1: entered promiscuous mode [ 80.791762][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.804968][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.818108][ T5773] team0: Port device team_slave_0 added [ 80.866424][ T5773] team0: Port device team_slave_1 added [ 80.884316][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.891516][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.899051][ T5775] bridge_slave_0: entered allmulticast mode [ 80.906032][ T5775] bridge_slave_0: entered promiscuous mode [ 80.945363][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.955268][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.962744][ T5775] bridge_slave_1: entered allmulticast mode [ 80.969572][ T5775] bridge_slave_1: entered promiscuous mode [ 80.989570][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.003682][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.015843][ T5772] team0: Port device team_slave_0 added [ 81.035703][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.042737][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.068924][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.102413][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.113693][ T5772] team0: Port device team_slave_1 added [ 81.120116][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.128030][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.156672][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.178212][ T5774] team0: Port device team_slave_0 added [ 81.198430][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.215767][ T5774] team0: Port device team_slave_1 added [ 81.232641][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.239753][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.266158][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.317681][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.325192][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.357266][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.381526][ T5775] team0: Port device team_slave_0 added [ 81.405379][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.414934][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.441420][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.454794][ T5775] team0: Port device team_slave_1 added [ 81.461164][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.468265][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.494290][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.512660][ T5773] hsr_slave_0: entered promiscuous mode [ 81.519321][ T5773] hsr_slave_1: entered promiscuous mode [ 81.608318][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.618004][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.646675][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.689713][ T5772] hsr_slave_0: entered promiscuous mode [ 81.697129][ T5772] hsr_slave_1: entered promiscuous mode [ 81.703524][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.711270][ T5772] Cannot create hsr debugfs directory [ 81.717753][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.725546][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.751814][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.756862][ T5782] Bluetooth: hci0: command tx timeout [ 81.781304][ T5774] hsr_slave_0: entered promiscuous mode [ 81.789276][ T5774] hsr_slave_1: entered promiscuous mode [ 81.795599][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.803659][ T5774] Cannot create hsr debugfs directory [ 81.822168][ T5782] Bluetooth: hci3: command tx timeout [ 81.827824][ T5782] Bluetooth: hci2: command tx timeout [ 81.833777][ T5787] Bluetooth: hci1: command tx timeout [ 81.960881][ T5775] hsr_slave_0: entered promiscuous mode [ 81.967434][ T5775] hsr_slave_1: entered promiscuous mode [ 81.974765][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.982479][ T5775] Cannot create hsr debugfs directory [ 82.267113][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.295626][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.306076][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.318351][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.388488][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.398163][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.408122][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.419285][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.527072][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.537991][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.550862][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.577029][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.658694][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.669861][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.679716][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.690904][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.761974][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.803523][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.829245][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.857260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.864646][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.904953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.912180][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.924839][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.956215][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.963417][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.980493][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.987659][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.024457][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.116402][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.128342][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.158694][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.165847][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.193234][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.200422][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.226344][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.267555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.274807][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.317207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.324456][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.647355][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.761871][ T5773] veth0_vlan: entered promiscuous mode [ 83.798421][ T5773] veth1_vlan: entered promiscuous mode [ 83.833788][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.843804][ T5782] Bluetooth: hci0: command tx timeout [ 83.903111][ T5782] Bluetooth: hci3: command tx timeout [ 83.912804][ T5782] Bluetooth: hci2: command tx timeout [ 83.914954][ T5787] Bluetooth: hci1: command tx timeout [ 83.949881][ T5773] veth0_macvtap: entered promiscuous mode [ 83.971609][ T5773] veth1_macvtap: entered promiscuous mode [ 83.989966][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.016358][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.043955][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.069226][ T5774] veth0_vlan: entered promiscuous mode [ 84.082808][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.105205][ T5774] veth1_vlan: entered promiscuous mode [ 84.129425][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.140494][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.150589][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.159496][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.217970][ T5772] veth0_vlan: entered promiscuous mode [ 84.286156][ T5772] veth1_vlan: entered promiscuous mode [ 84.310090][ T5775] veth0_vlan: entered promiscuous mode [ 84.349929][ T5774] veth0_macvtap: entered promiscuous mode [ 84.354377][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.374663][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.376647][ T5775] veth1_vlan: entered promiscuous mode [ 84.418067][ T5774] veth1_macvtap: entered promiscuous mode [ 84.440011][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.484971][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.507151][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.519503][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.539669][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.555580][ T5772] veth0_macvtap: entered promiscuous mode [ 84.565051][ T5775] veth0_macvtap: entered promiscuous mode [ 84.577972][ T5775] veth1_macvtap: entered promiscuous mode [ 84.604662][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.617800][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.629565][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.646394][ T5772] veth1_macvtap: entered promiscuous mode [ 84.668697][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.693258][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.713616][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.725968][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501427][ T5787] Bluetooth: hci0: command tx timeout [ 86.501504][ T5777] Bluetooth: hci2: command tx timeout [ 86.506952][ T5787] Bluetooth: hci3: command tx timeout [ 86.518567][ T5782] Bluetooth: hci1: command tx timeout [ 86.528090][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.572359][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.608645][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.626412][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.686470][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.707246][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.724924][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.740891][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.759949][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.770726][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.787412][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.799803][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.819804][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.831330][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.841263][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.852166][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.864205][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.875172][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.887069][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.897271][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.908148][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.918349][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.929224][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.940978][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.988265][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.997553][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.009976][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.021379][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.049627][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.072243][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.081627][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.107284][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.412311][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.420299][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.530106][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.579998][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.604266][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.745725][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.755383][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.799929][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.827830][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.979587][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.002877][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.060488][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.101694][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.542805][ T5085] Bluetooth: hci0: command tx timeout [ 88.549125][ T5782] Bluetooth: hci2: command tx timeout [ 88.558841][ T5787] Bluetooth: hci3: command tx timeout [ 88.565068][ T5085] Bluetooth: hci1: command tx timeout [ 89.446122][ T5864] veth0: entered promiscuous mode [ 89.518594][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.025469][ T971] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.293089][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 90.474572][ T971] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 90.569726][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.999982][ T971] pvrusb2: Hardware description: Terratec Grabster AV400 [ 91.007467][ T971] pvrusb2: ********** [ 91.011495][ T971] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 91.024091][ T971] pvrusb2: Important functionality might not be entirely working. [ 91.031972][ T971] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 91.044505][ T971] pvrusb2: ********** [ 91.316632][ T5877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11'. [ 91.563111][ T2323] pvrusb2: Invalid write control endpoint [ 92.054978][ T971] usb 3-1: USB disconnect, device number 2 [ 92.325362][ T23] cfg80211: failed to load regulatory.db [ 92.378543][ T2323] pvrusb2: Invalid write control endpoint [ 92.484492][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 92.722304][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 93.067362][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 93.125971][ T2323] pvrusb2: Device being rendered inoperable [ 93.160218][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 93.222109][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 93.283248][ T2323] pvrusb2: Attached sub-driver cx25840 [ 93.288912][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 93.332167][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 94.912274][ T5813] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.030503][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 96.050077][ T5813] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 96.066211][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.074410][ T5934] ======================================================= [ 96.074410][ T5934] WARNING: The mand mount option has been deprecated and [ 96.074410][ T5934] and is ignored by this kernel. Remove the mand [ 96.074410][ T5934] option from the mount to silence this warning. [ 96.074410][ T5934] ======================================================= [ 96.131527][ T5813] pvrusb2: Hardware description: Terratec Grabster AV400 [ 96.164626][ T5813] pvrusb2: ********** [ 96.168682][ T5813] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 96.181919][ T5813] pvrusb2: Important functionality might not be entirely working. [ 96.197643][ T5813] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 96.209434][ T5813] pvrusb2: ********** [ 96.350631][ T2323] pvrusb2: Invalid write control endpoint [ 96.569306][ T5813] usb 2-1: USB disconnect, device number 2 [ 96.589768][ T2323] pvrusb2: Invalid write control endpoint [ 96.606759][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 96.618504][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 96.630276][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 96.646737][ T2323] pvrusb2: Device being rendered inoperable [ 96.653323][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 96.660576][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 96.681320][ T2323] pvrusb2: Attached sub-driver cx25840 [ 96.696525][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 96.709688][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.469778][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.552250][ T5776] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.682227][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 99.689382][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.699734][ T5833] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.710898][ T5833] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.720176][ T5833] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.728527][ T5833] usb 3-1: Manufacturer: syz [ 99.734182][ T5776] usb 2-1: Using ep0 maxpacket: 8 [ 99.741312][ T5833] usb 3-1: config 0 descriptor?? [ 99.748757][ T5776] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.758959][ T5776] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.768887][ T5776] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.780816][ T5776] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.794564][ T5776] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.803768][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.029572][ T5776] usb 2-1: GET_CAPABILITIES returned 0 [ 100.035343][ T5776] usbtmc 2-1:16.0: can't read capabilities [ 100.307934][ T5813] usb 2-1: USB disconnect, device number 3 [ 101.682646][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.032794][ T5776] usb 1-1: Using ep0 maxpacket: 8 [ 102.117239][ T5776] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 102.332659][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.355908][ T5776] pvrusb2: Hardware description: Terratec Grabster AV400 [ 102.422381][ T5833] usb 3-1: USB disconnect, device number 3 [ 102.432108][ T5776] pvrusb2: ********** [ 102.437201][ T5776] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 102.451110][ T5776] pvrusb2: Important functionality might not be entirely working. [ 102.460560][ T5776] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 102.474372][ T5776] pvrusb2: ********** [ 102.810028][ T2323] pvrusb2: Invalid write control endpoint [ 103.569035][ T5833] usb 1-1: USB disconnect, device number 2 [ 103.782991][ T2323] pvrusb2: Invalid write control endpoint [ 103.788795][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.804387][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.812902][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.834498][ T2323] pvrusb2: Device being rendered inoperable [ 103.855339][ T6014] gretap1: entered allmulticast mode [ 103.915654][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 103.922997][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 103.932279][ T2323] pvrusb2: Attached sub-driver cx25840 [ 103.937840][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 103.948059][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 105.673943][ T5833] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.579136][ T6040] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 106.852168][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 106.880089][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.890782][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.906757][ T5833] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 107.120293][ T5833] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 107.129091][ T5833] usb 1-1: Manufacturer: syz [ 107.138355][ T5833] usb 1-1: config 0 descriptor?? [ 108.402511][ T6061] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 108.465120][ T6061] gretap1: entered allmulticast mode [ 108.562252][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.538398][ T5813] usb 1-1: USB disconnect, device number 3 [ 109.614027][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 109.642936][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.652590][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.680941][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.696431][ T9] pvrusb2: ********** [ 109.701621][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.736205][ T9] pvrusb2: Important functionality might not be entirely working. [ 109.757922][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.780664][ T6078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 109.787666][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.791466][ T9] pvrusb2: ********** [ 109.806884][ T6078] vhci_hcd vhci_hcd.0: Device attached [ 109.856842][ T6079] vhci_hcd: connection closed [ 109.859385][ T49] vhci_hcd: stop threads [ 109.894990][ T2323] pvrusb2: Invalid write control endpoint [ 109.898088][ T49] vhci_hcd: release socket [ 109.919764][ T49] vhci_hcd: disconnect device [ 111.342355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 111.480626][ T9] usb 2-1: USB disconnect, device number 4 [ 111.529631][ T2323] pvrusb2: Invalid write control endpoint [ 111.572596][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 111.583287][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 111.590877][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 111.602331][ T2323] pvrusb2: Device being rendered inoperable [ 111.608427][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 111.622560][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 111.640604][ T2323] pvrusb2: Attached sub-driver cx25840 [ 111.657888][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 111.677847][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 111.809078][ T6095] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 111.984137][ T6097] gretap1: entered allmulticast mode [ 113.632242][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.892211][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 114.012168][ T5814] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.052596][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.067724][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 114.089792][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.117741][ T5814] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.145891][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.194543][ T5814] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.256111][ T5814] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.293665][ T5814] usb 2-1: Manufacturer: syz [ 114.321393][ T5814] usb 2-1: config 0 descriptor?? [ 114.399989][ T6127] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 114.406581][ T6127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.440627][ T6127] vhci_hcd vhci_hcd.0: Device attached [ 114.482747][ T6128] vhci_hcd: connection closed [ 114.484181][ T12] vhci_hcd: stop threads [ 114.502376][ T12] vhci_hcd: release socket [ 114.511565][ T12] vhci_hcd: disconnect device [ 114.652822][ T5814] rc_core: IR keymap rc-hauppauge not found [ 114.658815][ T5814] Registered IR keymap rc-empty [ 114.665822][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.708445][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.749838][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 114.771688][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 114.792833][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.798987][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.846102][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.884332][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.913780][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.942383][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 114.972193][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.006029][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.007218][ T5833] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.044473][ T5833] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.052242][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.070171][ T5833] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.096466][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.112605][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.134098][ T6132] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 115.151060][ T5814] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 115.179553][ T5833] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 115.185894][ T5814] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.211897][ T5814] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.323441][ T5814] usb 2-1: USB disconnect, device number 5 [ 115.635968][ T5833] usb 4-1: USB disconnect, device number 2 [ 116.162142][ T5814] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.315305][ T6147] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.91'. [ 116.394495][ T5814] usb 2-1: Using ep0 maxpacket: 8 [ 116.599871][ T5814] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.640375][ T5814] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.693193][ T5814] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.730637][ T5814] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.195135][ T5814] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.204499][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.645210][ T5814] usb 2-1: GET_CAPABILITIES returned 0 [ 117.704337][ T5814] usbtmc 2-1:16.0: can't read capabilities [ 118.645381][ T6165] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 118.651933][ T6165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.661723][ T6165] vhci_hcd vhci_hcd.0: Device attached [ 118.670511][ T6166] vhci_hcd: connection closed [ 118.670854][ T36] vhci_hcd: stop threads [ 118.682707][ T36] vhci_hcd: release socket [ 118.687233][ T36] vhci_hcd: disconnect device [ 118.792601][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.984251][ T787] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 118.993755][ T787] usb 1-1: config 0 has no interface number 0 [ 118.999963][ T787] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.011061][ T787] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.020903][ T787] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 119.032097][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.044911][ T787] usb 1-1: config 0 descriptor?? [ 119.174440][ T5778] usb 2-1: USB disconnect, device number 6 [ 119.479640][ T787] uclogic 0003:28BD:0905.0001: Interface probing failed: -22 [ 119.497341][ T787] uclogic 0003:28BD:0905.0001: interface is invalid, ignoring [ 119.697159][ T787] usb 1-1: USB disconnect, device number 4 [ 119.722939][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.912177][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 119.921128][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.936804][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.950053][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.962213][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 119.972217][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.986816][ T5814] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 119.999378][ T5814] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.010803][ T5814] usb 4-1: Manufacturer: syz [ 120.025991][ T5814] usb 4-1: config 0 descriptor?? [ 120.323145][ T5814] rc_core: IR keymap rc-hauppauge not found [ 120.329136][ T5814] Registered IR keymap rc-empty [ 120.361385][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.422543][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 120.517929][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 120.534842][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 121.262374][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.314708][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.422366][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.462304][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 121.558894][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.377762][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.438177][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.489814][ T787] IPVS: starting estimator thread 0... [ 122.502331][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 122.532451][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.956057][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 123.994375][ T6200] IPVS: using max 19 ests per chain, 45600 per kthread [ 124.013934][ T5814] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 124.053649][ T5814] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 124.094989][ T5814] usb 4-1: USB disconnect, device number 3 [ 124.403029][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 124.622365][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 124.664100][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.712357][ T5776] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.726688][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.838274][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.005546][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.022305][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 125.057863][ T5776] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 125.083537][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.094253][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.132152][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.142366][ T5776] usb 2-1: config 0 has no interface number 0 [ 125.169159][ T5776] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 125.218045][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.257791][ T5776] usb 2-1: Product: syz [ 125.282108][ T5776] usb 2-1: Manufacturer: syz [ 125.292893][ T5776] usb 2-1: SerialNumber: syz [ 125.310419][ T5776] usb 2-1: config 0 descriptor?? [ 125.559687][ T23] usb 1-1: GET_CAPABILITIES returned 0 [ 125.565326][ T23] usbtmc 1-1:16.0: can't read capabilities [ 126.657226][ T6220] netlink: 48 bytes leftover after parsing attributes in process `syz.2.108'. [ 127.295816][ T5776] usb 1-1: USB disconnect, device number 5 [ 128.612170][ T23] IPVS: starting estimator thread 0... [ 128.712397][ T6236] IPVS: using max 15 ests per chain, 36000 per kthread [ 128.842849][ T23] usb 2-1: USB disconnect, device number 7 [ 130.983263][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.3.121'. [ 132.222022][ C1] sched: RT throttling activated [ 133.143028][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.156033][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.792172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.453241][ T5814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.652318][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 136.664424][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.684571][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.847122][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.980271][ T5814] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 137.117087][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.289952][ T5814] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.329921][ T5814] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.362435][ T5814] usb 4-1: Manufacturer: syz [ 137.443370][ T5814] usb 4-1: config 0 descriptor?? [ 137.848011][ T6298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.134'. [ 138.542351][ T5814] rc_core: IR keymap rc-hauppauge not found [ 138.548370][ T5814] Registered IR keymap rc-empty [ 138.624459][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.662231][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.780441][ T6310] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 138.957071][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 139.544184][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 139.613301][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.673159][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 139.902680][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.213560][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.432773][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 141.491001][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.401962][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.462289][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.517372][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.561563][ T6339] netlink: 48 bytes leftover after parsing attributes in process `syz.1.147'. [ 142.587620][ T5814] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 142.879757][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.892103][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.152480][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 143.212865][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.340476][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.361226][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.384826][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.451006][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.464898][ T5814] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 143.487042][ T5814] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 143.501959][ T5814] usb 4-1: USB disconnect, device number 4 [ 143.510851][ T23] usb 3-1: Manufacturer: syz [ 143.541983][ T23] usb 3-1: config 0 descriptor?? [ 143.579043][ T6351] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 143.622920][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 143.632942][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.643567][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.655695][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.665643][ T5832] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.676369][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.693862][ T5832] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.703935][ T5832] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.711973][ T5832] usb 1-1: Manufacturer: syz [ 143.738831][ T5832] usb 1-1: config 0 descriptor?? [ 145.612210][ T5832] rc_core: IR keymap rc-hauppauge not found [ 145.631471][ T5832] Registered IR keymap rc-empty [ 145.644671][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 145.662356][ T23] usb 3-1: USB disconnect, device number 4 [ 147.083558][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 147.123869][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 147.194052][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 147.282640][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.162210][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.192213][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.228259][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.282291][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.322321][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.344083][ T6381] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 148.382402][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.422237][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.463082][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.502178][ T5832] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 148.554655][ T5832] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 148.577932][ T5832] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.607326][ T5832] usb 1-1: USB disconnect, device number 6 [ 150.152193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.302473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 152.682287][ T5833] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.142149][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 153.177464][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.226778][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.285531][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.337752][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.389760][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.713319][ T5833] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.743652][ T5833] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.751722][ T5833] usb 4-1: Manufacturer: syz [ 153.843354][ T5833] usb 4-1: config 0 descriptor?? [ 154.004546][ T5833] usb 4-1: can't set config #0, error -71 [ 154.042550][ T5833] usb 4-1: USB disconnect, device number 5 [ 155.272179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.792409][ T6419] Bluetooth: MGMT ver 1.22 [ 157.422405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 160.392204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.032420][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.272338][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 161.289803][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.312519][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.334681][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 161.363553][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.382070][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.390197][ T8] usb 1-1: Manufacturer: syz [ 161.411613][ T8] usb 1-1: config 0 descriptor?? [ 161.790949][ T6438] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 162.273035][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.475460][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 162.487794][ T5833] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.500115][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.517520][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.527763][ T5833] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.541388][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.563478][ T5833] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.579045][ T5833] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.591899][ T5833] usb 3-1: Manufacturer: syz [ 162.605114][ T5833] usb 3-1: config 0 descriptor?? [ 162.686149][ T8] usb 1-1: USB disconnect, device number 7 [ 162.764343][ T6445] geneve0: entered promiscuous mode [ 162.835972][ T6445] loop3: detected capacity change from 0 to 7 [ 162.861701][ T6445] Dev loop3: unable to read RDB block 7 [ 162.883087][ T6445] loop3: unable to read partition table [ 162.892363][ T6445] loop3: partition table beyond EOD, truncated [ 162.920921][ T6445] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 163.002232][ T5833] rc_core: IR keymap rc-hauppauge not found [ 163.008455][ T5833] Registered IR keymap rc-empty [ 163.019147][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.056956][ T6450] Zero length message leads to an empty skb [ 163.063243][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.099395][ T5833] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 163.115078][ T5833] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 163.132611][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.133742][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.172612][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.208629][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 163.312064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.332036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.342044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.198797][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.218961][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 164.310005][ T787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.332628][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.347829][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.363018][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.364521][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.384352][ T787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.397760][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.410212][ T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.421024][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.422264][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.473631][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.505728][ T5833] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 164.592129][ T5833] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 164.601487][ T5833] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.647327][ T5833] usb 3-1: USB disconnect, device number 5 [ 164.936558][ T787] usb 4-1: GET_CAPABILITIES returned 0 [ 164.952299][ T787] usbtmc 4-1:16.0: can't read capabilities [ 165.162963][ T787] usb 4-1: USB disconnect, device number 6 [ 169.791099][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 169.810348][ T6489] loop8: detected capacity change from 0 to 8 [ 169.872292][ T6490] program syz.0.195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.899271][ T6489] Dev loop8: unable to read RDB block 8 [ 169.905251][ T6489] loop8: unable to read partition table [ 169.912872][ T6489] loop8: partition table beyond EOD, truncated [ 169.919988][ T6489] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 172.842431][ T5833] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.082431][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 173.142363][ T5833] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.264892][ T5833] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.371142][ T5833] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.518436][ T5833] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.575975][ T5833] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.650482][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.928431][ T5833] usb 2-1: usb_control_msg returned -71 [ 173.945250][ T5833] usbtmc 2-1:16.0: can't read capabilities [ 173.978767][ T5833] usb 2-1: USB disconnect, device number 8 [ 181.182210][ T787] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 181.563917][ T787] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 181.602154][ T787] usb 3-1: config 0 has no interface number 0 [ 181.643204][ T787] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 181.672267][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.682209][ T5832] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.711373][ T787] usb 3-1: Product: syz [ 181.731183][ T787] usb 3-1: Manufacturer: syz [ 181.745949][ T787] usb 3-1: SerialNumber: syz [ 181.767357][ T787] usb 3-1: config 0 descriptor?? [ 181.862189][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 183.122772][ T787] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 183.253041][ T787] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 183.270581][ T5832] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.308512][ T787] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 183.336930][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.353527][ T787] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 183.397646][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.438333][ T5832] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.463984][ T787] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 184.912093][ T5832] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.921206][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.943872][ T5833] usb 3-1: USB disconnect, device number 6 [ 185.018189][ T5833] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 185.082924][ T5833] keyspan 3-1:0.133: device disconnected [ 185.254468][ T5832] usb 4-1: can't set config #16, error -71 [ 185.279161][ T5832] usb 4-1: USB disconnect, device number 7 [ 193.122137][ T5814] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.372287][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 193.380913][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.414585][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.428001][ T6618] gretap1: entered allmulticast mode [ 193.443200][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.462042][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.492106][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.511683][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.761617][ T5814] usb 3-1: usb_control_msg returned -71 [ 193.802466][ T5814] usbtmc 3-1:16.0: can't read capabilities [ 193.849436][ T5814] usb 3-1: USB disconnect, device number 7 [ 194.224406][ T6623] syz.0.228[6623]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 194.555254][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.715747][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.419108][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 204.862404][ C1] llc_process_tmr_ev: timer called on closed connection [ 206.071008][ T6695] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 206.860427][ T6700] loop8: detected capacity change from 0 to 7 [ 206.890751][ T6700] Dev loop8: unable to read RDB block 7 [ 206.906989][ T6700] loop8: unable to read partition table [ 207.042987][ T6700] loop8: partition table beyond EOD, truncated [ 207.105892][ T6700] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 207.275530][ T6705] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 207.282131][ T6705] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 207.316986][ T6705] vhci_hcd vhci_hcd.0: Device attached [ 207.355178][ T6706] vhci_hcd: connection closed [ 207.356634][ T49] vhci_hcd: stop threads [ 207.382769][ T49] vhci_hcd: release socket [ 207.387273][ T49] vhci_hcd: disconnect device [ 207.475439][ T6712] netlink: 436 bytes leftover after parsing attributes in process `syz.3.259'. [ 207.782229][ T5776] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.006664][ T5776] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.057623][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 208.065208][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 208.071379][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 208.080832][ T5776] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.191541][ T5776] usb 4-1: Product: syz [ 208.263188][ T5776] usb 4-1: Manufacturer: syz [ 208.340566][ T5776] usb 4-1: SerialNumber: syz [ 210.407281][ T6728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.262'. [ 212.243267][ T5776] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 212.335909][ T5776] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 212.384332][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.392793][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.423509][ T5776] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 212.452100][ T5776] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 212.478487][ T5776] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 212.699946][ T5776] lan78xx: probe of 4-1:1.0 failed with error -71 [ 212.822783][ T5776] usb 4-1: USB disconnect, device number 8 [ 212.959523][ T6744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 212.966119][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 213.033875][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 213.054688][ T6745] vhci_hcd: connection closed [ 213.055823][ T36] vhci_hcd: stop threads [ 213.082316][ T36] vhci_hcd: release socket [ 213.097030][ T36] vhci_hcd: disconnect device [ 213.162137][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 213.344901][ T5814] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 213.353961][ T5814] usb 1-1: config 0 has no interface number 0 [ 213.362694][ T5814] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 213.392196][ T5814] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.412222][ T5814] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.435976][ T5814] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 213.452129][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.517937][ T6755] netlink: 436 bytes leftover after parsing attributes in process `syz.3.271'. [ 213.822399][ T971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.025236][ T5814] usb 1-1: Product: syz [ 214.029625][ T5814] usb 1-1: Manufacturer: syz [ 214.034473][ T5814] usb 1-1: SerialNumber: syz [ 214.394302][ T5814] usb 1-1: config 0 descriptor?? [ 214.404107][ T6740] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.910534][ T5814] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 214.920533][ T971] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 214.967690][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.968996][ T5814] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 214.989079][ T971] usb 4-1: Product: syz [ 215.018232][ T971] usb 4-1: Manufacturer: syz [ 215.152191][ T971] usb 4-1: SerialNumber: syz [ 215.156898][ T5814] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 215.417470][ T5814] usb 1-1: USB disconnect, device number 8 [ 215.743337][ T5814] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 215.768296][ T5814] cyberjack 1-1:0.69: device disconnected [ 216.022246][ T5832] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 216.212253][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 216.220631][ T5832] usb 2-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 216.234497][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.252121][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.268375][ T5832] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 216.283632][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.307985][ T5832] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.320381][ T5832] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.328746][ T5832] usb 2-1: Manufacturer: syz [ 216.351246][ T5832] usb 2-1: config 0 descriptor?? [ 216.587318][ T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 216.605922][ T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 216.624735][ T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 216.636935][ T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 216.647400][ T971] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 216.777215][ T971] lan78xx: probe of 4-1:1.0 failed with error -71 [ 216.842139][ T5832] rc_core: IR keymap rc-hauppauge not found [ 216.856053][ T6773] UHID_CREATE from different security context by process 211 (syz.2.273), this is not allowed. [ 217.008981][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.097578][ T971] usb 4-1: USB disconnect, device number 9 [ 217.150495][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.261064][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.397073][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.502418][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.617755][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.713841][ T5832] Registered IR keymap rc-empty [ 217.745036][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.848037][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 217.955219][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.074924][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.184335][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.279092][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.434726][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.621821][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.741749][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.851470][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 218.929002][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.023993][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.078075][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.133424][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.233313][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.329116][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.396155][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.412150][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 219.476011][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.499098][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 219.533176][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.533712][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 219.552108][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.568282][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.591798][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.609710][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.723640][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.737501][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.745445][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.753121][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.760941][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.768695][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.776612][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.785211][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.793013][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.800676][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.808457][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.816605][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 219.941332][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.043998][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.080424][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.205159][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.293713][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.422217][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.442203][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.512239][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.533094][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.553886][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.582186][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.590617][ T6790] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 220.593667][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.597192][ T6790] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.602037][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.656688][ T6790] vhci_hcd vhci_hcd.0: Device attached [ 220.669329][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.682356][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.810245][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.817863][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.832233][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.839798][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.847919][ T6791] vhci_hcd: connection closed [ 220.848219][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.849159][ T36] vhci_hcd: stop threads [ 220.853045][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853073][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853098][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853122][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853144][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853168][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853191][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853214][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853238][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853261][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853285][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853309][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.853332][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.866911][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 220.872556][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872583][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872605][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872627][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872649][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872672][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872696][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872717][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872740][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872763][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872785][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872808][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872832][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872855][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872879][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872902][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872925][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872957][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.872981][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.873005][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.873028][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.873051][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.873074][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.873097][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 220.952279][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 220.957683][ T971] vhci_hcd: vhci_device speed not set [ 221.168571][ T36] vhci_hcd: release socket [ 221.182488][ T36] vhci_hcd: disconnect device [ 221.222241][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.227645][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.237221][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.245399][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.253828][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.262147][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.262628][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.269573][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.269604][ T5778] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 221.300704][ T5778] hid-generic 0000:0000:0004.0002: hidraw0: HID v0.03 Device [syz1] on syz0 [ 221.365023][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.372593][ T5814] usb 1-1: Using ep0 maxpacket: 16 [ 221.380389][ T5814] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 221.391251][ T5814] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 221.410036][ T5814] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 221.424980][ T5814] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 221.433561][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.448316][ T5814] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 221.462163][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.609648][ T5814] usb 1-1: config 0 has no interface number 0 [ 221.622574][ T971] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 221.642116][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 221.662051][ T5814] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 221.731571][ T971] usb 39-1: enqueue for inactive port 0 [ 221.738530][ T6806] netlink: 436 bytes leftover after parsing attributes in process `syz.1.283'. [ 221.853285][ T971] vhci_hcd: vhci_device speed not set [ 222.654151][ T5832] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 222.686908][ T5814] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 222.697295][ T5832] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 222.718072][ T6800] fido_id[6800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 222.722036][ T5814] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.759600][ T5832] usb 2-1: USB disconnect, device number 9 [ 222.811096][ T5814] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.841497][ T5814] usb 1-1: config 0 interface 125 has no altsetting 0 [ 222.861874][ T5814] usb 1-1: config 0 interface 125 has no altsetting 2 [ 222.894865][ T5814] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 222.914308][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.937829][ T5814] usb 1-1: Product: syz [ 222.952565][ T5814] usb 1-1: Manufacturer: syz [ 222.957241][ T5814] usb 1-1: SerialNumber: syz [ 222.991604][ T5814] usb 1-1: config 0 descriptor?? [ 223.022492][ T5814] usb 1-1: selecting invalid altsetting 2 [ 223.030729][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 223.192198][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.224502][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 223.230691][ C0] usb 1-1: async_complete: urb error -71 [ 223.236504][ C0] usb 1-1: async_complete: urb error -71 [ 223.242214][ C0] usb 1-1: async_complete: urb error -71 [ 223.248005][ C0] usb 1-1: async_complete: urb error -71 [ 223.287087][ T5814] get_1284_register: usb error -71 [ 223.297527][ T8] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 223.317365][ T5814] usb 1-1: USB disconnect, device number 9 [ 223.327316][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.352112][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.361808][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.402127][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.426838][ T5832] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.436071][ T5833] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.452428][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.460547][ T5832] usb 2-1: Product: syz [ 223.471361][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.491131][ T5832] usb 2-1: Manufacturer: syz [ 223.496057][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.504755][ T5832] usb 2-1: SerialNumber: syz [ 223.523227][ T8] usb 3-1: Manufacturer: syz [ 223.553509][ T8] usb 3-1: config 0 descriptor?? [ 223.633961][ T5833] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 223.646471][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.674026][ T5833] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 223.701752][ T5833] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 223.720373][ T5833] usb 4-1: Manufacturer: syz [ 223.738681][ T5833] usb 4-1: config 0 descriptor?? [ 224.242209][ T8] rc_core: IR keymap rc-hauppauge not found [ 224.242213][ T5833] rc_core: IR keymap rc-hauppauge not found [ 224.242228][ T5833] Registered IR keymap rc-empty [ 224.243228][ T5833] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 224.259636][ T8] Registered IR keymap rc-empty [ 224.273926][ T5833] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 224.292612][ T5833] ------------[ cut here ]------------ [ 224.298204][ T5833] usb 4-1: BOGUS control dir, pipe 80000a80 doesn't match bRequestType 50 [ 224.307654][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.307851][ T5833] WARNING: CPU: 1 PID: 5833 at drivers/usb/core/urb.c:413 usb_submit_urb+0x10ac/0x17d0 [ 224.324737][ T5833] Modules linked in: [ 224.328679][ T5833] CPU: 1 PID: 5833 Comm: kworker/1:6 Not tainted syzkaller #0 [ 224.336255][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.346444][ T5833] Workqueue: usb_hub_wq hub_event [ 224.351529][ T5833] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 224.357454][ T5833] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 224.377278][ T5833] RSP: 0018:ffffc900048bee00 EFLAGS: 00010246 [ 224.383643][ T5833] RAX: 7ec2686b5f73b000 RBX: ffff88802690cc00 RCX: 0000000000100000 [ 224.386099][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.392693][ T5833] RDX: ffffc90018901000 RSI: 000000000007cb9d RDI: 000000000007cb9e [ 224.392715][ T5833] RBP: 1ffff11005927d08 R08: ffffc900048bea07 R09: 1ffff92000917d40 [ 224.392733][ T5833] R10: dffffc0000000000 R11: fffff52000917d41 R12: dffffc0000000000 [ 224.392749][ T5833] R13: ffff88802c93e840 R14: 0000000080000a80 R15: ffff8880266b6820 [ 224.392765][ T5833] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 224.392784][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.443545][ T8] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 224.448206][ T5833] CR2: 000000110c35ed63 CR3: 000000007d838000 CR4: 00000000003506e0 [ 224.448235][ T5833] Call Trace: [ 224.472450][ T5833] [ 224.475435][ T5833] igorplugusb_probe+0x812/0xc60 [ 224.480448][ T5833] usb_probe_interface+0x5c9/0xb20 [ 224.485670][ T5833] ? usb_register_driver+0x3d0/0x3d0 [ 224.491004][ T5833] really_probe+0x25b/0xb20 [ 224.493039][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input12 [ 224.496631][ T5833] ? pm_runtime_barrier+0x14b/0x1c0 [ 224.515311][ T5833] __driver_probe_device+0x1ef/0x390 [ 224.520663][ T5833] driver_probe_device+0x4f/0x420 [ 224.525869][ T5833] __device_attach_driver+0x2ca/0x510 [ 224.531302][ T5833] bus_for_each_drv+0x252/0x2e0 [ 224.536299][ T5833] ? coredump_store+0x90/0x90 [ 224.541026][ T5833] ? bus_find_device+0x300/0x300 [ 224.546199][ T5833] __device_attach+0x2c2/0x420 [ 224.551033][ T5833] ? device_attach+0x20/0x20 [ 224.555746][ T5833] ? __kmem_cache_free+0xba/0x1e0 [ 224.560837][ T5833] ? do_raw_spin_unlock+0x121/0x230 [ 224.566175][ T5833] bus_probe_device+0x180/0x260 [ 224.571082][ T5833] device_add+0x88e/0xc50 [ 224.575520][ T5833] usb_set_configuration+0x1a79/0x20c0 [ 224.581063][ T5833] usb_generic_driver_probe+0x8d/0x150 [ 224.586660][ T5833] usb_probe_device+0x13d/0x270 [ 224.591559][ T5833] ? usb_register_device_driver+0x230/0x230 [ 224.598500][ T5833] really_probe+0x25b/0xb20 [ 224.603280][ T5833] ? pm_runtime_barrier+0x14b/0x1c0 [ 224.608536][ T5833] __driver_probe_device+0x1ef/0x390 [ 224.614023][ T5833] driver_probe_device+0x4f/0x420 [ 224.619098][ T5833] __device_attach_driver+0x2ca/0x510 [ 224.624615][ T5833] bus_for_each_drv+0x252/0x2e0 [ 224.629515][ T5833] ? coredump_store+0x90/0x90 [ 224.634306][ T5833] ? bus_find_device+0x300/0x300 [ 224.637517][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.639282][ T5833] __device_attach+0x2c2/0x420 [ 224.639318][ T5833] ? device_attach+0x20/0x20 [ 224.639339][ T5833] ? __kmem_cache_free+0xba/0x1e0 [ 224.639376][ T5833] ? do_raw_spin_unlock+0x121/0x230 [ 224.639414][ T5833] bus_probe_device+0x180/0x260 [ 224.639440][ T5833] device_add+0x88e/0xc50 [ 224.675737][ T5833] usb_new_device+0xa3c/0x1660 [ 224.680560][ T5833] ? usb_disconnect+0x8a0/0x8a0 [ 224.683084][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.685509][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.697899][ T5833] ? lockdep_hardirqs_on+0x98/0x150 [ 224.704265][ T5833] hub_event+0x29bf/0x49f0 [ 224.708768][ T5833] ? hub_post_resume+0x120/0x120 [ 224.714134][ T5833] ? read_lock_is_recursive+0x20/0x20 [ 224.719554][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.724842][ T5833] ? process_scheduled_works+0x96f/0x15d0 [ 224.730695][ T5833] ? process_scheduled_works+0x96f/0x15d0 [ 224.736559][ T5833] process_scheduled_works+0xa5d/0x15d0 [ 224.742228][ T5833] ? worker_attach_to_pool+0x380/0x380 [ 224.742728][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.747724][ T5833] ? assign_work+0x3d2/0x5d0 [ 224.747764][ T5833] worker_thread+0xa55/0xfc0 [ 224.747793][ T5833] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 224.747825][ T5833] ? _raw_spin_unlock+0x40/0x40 [ 224.775167][ T5833] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 224.781151][ T5833] kthread+0x2fa/0x390 [ 224.786180][ T5833] ? pr_cont_work+0x560/0x560 [ 224.790927][ T5833] ? kthread_blkcg+0xd0/0xd0 [ 224.795654][ T5833] ret_from_fork+0x48/0x80 [ 224.800113][ T5833] ? kthread_blkcg+0xd0/0xd0 [ 224.803363][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.805604][ T5833] ret_from_fork_asm+0x11/0x20 [ 224.816961][ T5833] [ 224.820019][ T5833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.827414][ T5833] CPU: 1 PID: 5833 Comm: kworker/1:6 Not tainted syzkaller #0 [ 224.834912][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.845103][ T5833] Workqueue: usb_hub_wq hub_event [ 224.850172][ T5833] Call Trace: [ 224.853491][ T5833] [ 224.856443][ T5833] dump_stack_lvl+0x18c/0x250 [ 224.861198][ T5833] ? show_regs_print_info+0x20/0x20 [ 224.866433][ T5833] ? load_image+0x420/0x420 [ 224.870968][ T5833] panic+0x2dc/0x730 [ 224.872619][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.882139][ T5833] ? bpf_jit_dump+0xd0/0xd0 [ 224.886715][ T5833] ? ret_from_fork_asm+0x11/0x20 [ 224.891717][ T5833] __warn+0x2e0/0x470 [ 224.895753][ T5833] ? usb_submit_urb+0x10ac/0x17d0 [ 224.900835][ T5833] ? usb_submit_urb+0x10ac/0x17d0 [ 224.905892][ T5833] report_bug+0x2be/0x4f0 [ 224.910263][ T5833] ? usb_submit_urb+0x10ac/0x17d0 [ 224.915310][ T5833] ? usb_submit_urb+0x10ac/0x17d0 [ 224.920382][ T5833] ? usb_submit_urb+0x10ae/0x17d0 [ 224.923139][ T8] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 224.932562][ T5833] handle_bug+0xcf/0x120 [ 224.936845][ T5833] exc_invalid_op+0x1a/0x50 [ 224.941387][ T5833] asm_exc_invalid_op+0x1a/0x20 [ 224.946261][ T5833] RIP: 0010:usb_submit_urb+0x10ac/0x17d0 [ 224.951948][ T5833] Code: df 0f b6 44 05 00 84 c0 0f 85 29 06 00 00 45 0f b6 45 00 48 c7 c7 c0 7a 6b 8b 48 8b 74 24 20 4c 89 fa 44 89 f1 e8 54 66 ed fa <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 96 f4 ff ff 89 e9 80 e1 07 [ 224.971663][ T5833] RSP: 0018:ffffc900048bee00 EFLAGS: 00010246 [ 224.977751][ T5833] RAX: 7ec2686b5f73b000 RBX: ffff88802690cc00 RCX: 0000000000100000 [ 224.985820][ T5833] RDX: ffffc90018901000 RSI: 000000000007cb9d RDI: 000000000007cb9e [ 224.993804][ T5833] RBP: 1ffff11005927d08 R08: ffffc900048bea07 R09: 1ffff92000917d40 [ 225.001783][ T5833] R10: dffffc0000000000 R11: fffff52000917d41 R12: dffffc0000000000 [ 225.009770][ T5833] R13: ffff88802c93e840 R14: 0000000080000a80 R15: ffff8880266b6820 [ 225.017783][ T5833] igorplugusb_probe+0x812/0xc60 [ 225.022755][ T5833] usb_probe_interface+0x5c9/0xb20 [ 225.027892][ T5833] ? usb_register_driver+0x3d0/0x3d0 [ 225.033201][ T5833] really_probe+0x25b/0xb20 [ 225.037724][ T5833] ? pm_runtime_barrier+0x14b/0x1c0 [ 225.042937][ T5833] __driver_probe_device+0x1ef/0x390 [ 225.048241][ T5833] driver_probe_device+0x4f/0x420 [ 225.053281][ T5833] __device_attach_driver+0x2ca/0x510 [ 225.058674][ T5833] bus_for_each_drv+0x252/0x2e0 [ 225.063539][ T5833] ? coredump_store+0x90/0x90 [ 225.068320][ T5833] ? bus_find_device+0x300/0x300 [ 225.073279][ T5833] __device_attach+0x2c2/0x420 [ 225.078064][ T5833] ? device_attach+0x20/0x20 [ 225.082664][ T5833] ? __kmem_cache_free+0xba/0x1e0 [ 225.087712][ T5833] ? do_raw_spin_unlock+0x121/0x230 [ 225.093001][ T5833] bus_probe_device+0x180/0x260 [ 225.097963][ T5833] device_add+0x88e/0xc50 [ 225.102314][ T5833] usb_set_configuration+0x1a79/0x20c0 [ 225.107835][ T5833] usb_generic_driver_probe+0x8d/0x150 [ 225.113324][ T5833] usb_probe_device+0x13d/0x270 [ 225.118190][ T5833] ? usb_register_device_driver+0x230/0x230 [ 225.124090][ T5833] really_probe+0x25b/0xb20 [ 225.128607][ T5833] ? pm_runtime_barrier+0x14b/0x1c0 [ 225.133836][ T5833] __driver_probe_device+0x1ef/0x390 [ 225.139142][ T5833] driver_probe_device+0x4f/0x420 [ 225.144186][ T5833] __device_attach_driver+0x2ca/0x510 [ 225.149769][ T5833] bus_for_each_drv+0x252/0x2e0 [ 225.154648][ T5833] ? coredump_store+0x90/0x90 [ 225.159358][ T5833] ? bus_find_device+0x300/0x300 [ 225.164329][ T5833] __device_attach+0x2c2/0x420 [ 225.169110][ T5833] ? device_attach+0x20/0x20 [ 225.173711][ T5833] ? __kmem_cache_free+0xba/0x1e0 [ 225.178758][ T5833] ? do_raw_spin_unlock+0x121/0x230 [ 225.183987][ T5833] bus_probe_device+0x180/0x260 [ 225.188856][ T5833] device_add+0x88e/0xc50 [ 225.193212][ T5833] usb_new_device+0xa3c/0x1660 [ 225.198009][ T5833] ? usb_disconnect+0x8a0/0x8a0 [ 225.202877][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.208092][ T5833] ? lockdep_hardirqs_on+0x98/0x150 [ 225.213311][ T5833] hub_event+0x29bf/0x49f0 [ 225.217805][ T5833] ? hub_post_resume+0x120/0x120 [ 225.222759][ T5833] ? read_lock_is_recursive+0x20/0x20 [ 225.228149][ T5833] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.233362][ T5833] ? process_scheduled_works+0x96f/0x15d0 [ 225.239194][ T5833] ? process_scheduled_works+0x96f/0x15d0 [ 225.244958][ T5833] process_scheduled_works+0xa5d/0x15d0 [ 225.250581][ T5833] ? worker_attach_to_pool+0x380/0x380 [ 225.256086][ T5833] ? assign_work+0x3d2/0x5d0 [ 225.260709][ T5833] worker_thread+0xa55/0xfc0 [ 225.265324][ T5833] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 225.271324][ T5833] ? _raw_spin_unlock+0x40/0x40 [ 225.276205][ T5833] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 225.282152][ T5833] kthread+0x2fa/0x390 [ 225.286248][ T5833] ? pr_cont_work+0x560/0x560 [ 225.290946][ T5833] ? kthread_blkcg+0xd0/0xd0 [ 225.295551][ T5833] ret_from_fork+0x48/0x80 [ 225.299980][ T5833] ? kthread_blkcg+0xd0/0xd0 [ 225.304582][ T5833] ret_from_fork_asm+0x11/0x20 [ 225.309386][ T5833] [ 225.312815][ T5833] Kernel Offset: disabled [ 225.317212][ T5833] Rebooting in 86400 seconds..