last executing test programs: 2m31.45000599s ago: executing program 2 (id=3209): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a5", 0x43}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m30.773670021s ago: executing program 2 (id=3213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) close(r4) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m30.466380205s ago: executing program 2 (id=3216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0xa) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 2m30.246996179s ago: executing program 2 (id=3217): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs$userns(0x0, &(0x7f0000001240)) 2m29.810445591s ago: executing program 2 (id=3219): syz_open_dev$cec(&(0x7f0000000180), 0xffffffffffffffff, 0x40e60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) sendmsg$inet6(r3, 0x0, 0x4048044) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r5, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) 2m29.298301273s ago: executing program 2 (id=3222): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) close_range(r0, 0xffffffffffffffff, 0x0) 20.354340854s ago: executing program 3 (id=3410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000440)="3aa69ff85d0ce6af14f959d64b689751d9c5992be6bdd563da341e6da515f020f90e58e8baead0cbc0d24ca94c523520dcaf9bfd68fe984a5befa8c17a7e6ae0c50197178920533e1d6d3da8e4152376291efb90bd966e7d679a420e", 0x5c}}, 0x4040044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4087, 0xff7}], 0x1}, 0x8}], 0x3ffff90, 0x0, 0x0) 17.765290419s ago: executing program 3 (id=3415): fsopen(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 15.655066336s ago: executing program 3 (id=3418): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.912374155s ago: executing program 3 (id=3421): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 14.15205947s ago: executing program 3 (id=3423): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 14.136716587s ago: executing program 1 (id=3424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, 0x0, 0x0, 0x34000, 0x0) 13.797758893s ago: executing program 0 (id=3425): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 13.607272899s ago: executing program 4 (id=3426): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf1a210081aedc2334e65d45f9c589ccfc55f50000", @ANYRES32=0x0, @ANYBLOB="0c002c8008000000008000001b002a007e15cf0340080211000001090000000700000040"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 11.669620071s ago: executing program 1 (id=3427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) socket$nl_rdma(0x10, 0x3, 0x14) 9.865704848s ago: executing program 4 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.924138668s ago: executing program 0 (id=3429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) socket$nl_rdma(0x10, 0x3, 0x14) 8.854889648s ago: executing program 1 (id=3430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0xa) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0002003}) 7.314288301s ago: executing program 3 (id=3431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6.359704548s ago: executing program 32 (id=3431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5.624197508s ago: executing program 0 (id=3433): socket(0x3, 0x3, 0x203) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 5.622144811s ago: executing program 4 (id=3434): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2", 0x37, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd", 0xe7, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400b", 0xb5}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.55988321s ago: executing program 1 (id=3435): socket(0x3, 0x3, 0x203) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 4.539513732s ago: executing program 0 (id=3436): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b", 0x63}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c", 0x89}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x3}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.202273184s ago: executing program 4 (id=3437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x24040840}, 0x2404c040) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000030400000000fdffff0000000300", @ANYRES32=r8, @ANYBLOB="000000004000020008000140", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4894}, 0x0) 4.093458837s ago: executing program 1 (id=3438): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 3.630137626s ago: executing program 0 (id=3439): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000000000000800", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) process_vm_writev(r1, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002400)=""/211, 0xd3}, {&(0x7f0000002500)=""/151, 0x97}, {&(0x7f00000025c0)=""/136, 0x88}], 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x54}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) 3.426071942s ago: executing program 1 (id=3440): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 1.947442804s ago: executing program 4 (id=3441): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r1, 0x5434, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) 242.554323ms ago: executing program 4 (id=3442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x54}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5c2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x1}, {0x6c, 0x1}, {0x6c}, {0x6c, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x1}, {0x1b, 0x1}, {0x16}, {0x4}, {0x16, 0x1}, {0x36}, {0x24, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x30}, {0xf}, {0x24, 0x1}, {0xb, 0x1}, {0xc}, {0x12}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7, 0xbe, "9c3321"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e"]) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 0s ago: executing program 0 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090607000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008000140e00040000c00028008000140e00000020c00148008000140ffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0, 0x70000}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4087, 0xff7}], 0x1}, 0x8}], 0x3ffff90, 0x0, 0x0) kernel console output (not intermixed with test programs): 949.541207][ T42] usb 4-1: Manufacturer: syz [ 949.545723][ T42] usb 4-1: config 0 descriptor?? [ 949.566785][ T5719] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 949.716744][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 949.719185][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.719244][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.719275][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 949.719298][ T5719] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 949.719421][ T5719] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.721379][ T5719] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 949.721409][ T5719] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 949.721429][ T5719] usb 1-1: Manufacturer: syz [ 949.730852][ T5719] usb 1-1: config 0 descriptor?? [ 949.886742][ T42] rc_core: IR keymap rc-hauppauge not found [ 949.886767][ T42] Registered IR keymap rc-empty [ 949.886932][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 949.916824][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 949.939856][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 949.961467][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input169 [ 949.965696][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 949.988128][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.006967][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.026853][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.046881][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.076905][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.096964][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.116798][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.137843][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.148109][ T5719] rc_core: IR keymap rc-hauppauge not found [ 950.148131][ T5719] Registered IR keymap rc-empty [ 950.148312][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.164982][ T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 950.168227][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.193533][ T5719] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 950.215685][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input170 [ 950.234776][ T42] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 950.234804][ T42] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 950.240514][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.258683][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.277073][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.278009][ T42] usb 4-1: USB disconnect, device number 96 [ 950.296821][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.316792][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.344590][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.357080][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.376954][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.396796][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.416825][ T5719] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 950.457322][ T5719] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 950.457352][ T5719] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 950.535017][ T5719] usb 1-1: USB disconnect, device number 63 [ 950.581676][ T60] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 951.686800][ T5719] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 951.836766][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 951.841085][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.841142][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 951.841160][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.841172][ T5719] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 951.841186][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.842298][ T5719] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 951.842325][ T5719] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 951.842338][ T5719] usb 4-1: Manufacturer: syz [ 951.850108][ T5719] usb 4-1: config 0 descriptor?? [ 952.176813][ T5719] rc_core: IR keymap rc-hauppauge not found [ 952.176836][ T5719] Registered IR keymap rc-empty [ 952.176990][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.197023][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.218385][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 952.221589][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input171 [ 952.230932][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.246739][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.266813][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.287065][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.307013][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.335000][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.346879][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.375307][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.394618][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.406775][ T5719] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 952.431204][ T5719] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 952.431223][ T5719] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 952.554538][ T42] usb 4-1: USB disconnect, device number 97 [ 953.677434][ T5719] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 954.056718][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 954.058719][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.058753][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.058795][ T5719] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 954.058820][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.075832][ T5719] usb 2-1: config 0 descriptor?? [ 954.516769][ T9858] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 954.668467][ T9858] usb 1-1: Using ep0 maxpacket: 16 [ 954.672426][ T9858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.672559][ T9858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 954.672590][ T9858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 954.672613][ T9858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 954.672637][ T9858] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 954.675308][ T9858] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 954.675338][ T9858] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 954.675359][ T9858] usb 1-1: Manufacturer: syz [ 954.712442][ T9858] usb 1-1: config 0 descriptor?? [ 954.966757][ T5817] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 955.057439][T15234] binder_alloc: 15233: binder_alloc_buf, no vma [ 955.116677][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 955.136213][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.136251][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 955.136268][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 955.136348][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 955.136370][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.160272][ T5817] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 955.160303][ T5817] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 955.160323][ T5817] usb 4-1: Manufacturer: syz [ 955.233939][ T5817] usb 4-1: config 0 descriptor?? [ 955.327126][ T9858] rc_core: IR keymap rc-hauppauge not found [ 955.327151][ T9858] Registered IR keymap rc-empty [ 955.327719][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.347184][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.377068][ T9858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 955.388536][ T9858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input172 [ 955.403947][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.417364][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.438376][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.461020][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.482648][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.497441][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.518762][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.536959][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.556768][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.576862][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 955.624873][ T9858] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 955.624905][ T9858] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 955.707803][ T9858] usb 1-1: USB disconnect, device number 64 [ 955.773636][ T5719] usb 2-1: string descriptor 0 read error: -71 [ 955.979924][ T5719] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 955.980025][ T5719] letsketch 0003:6161:4D15.0021: probe with driver letsketch failed with error -32 [ 955.984714][ T5817] rc_core: IR keymap rc-hauppauge not found [ 955.984735][ T5817] Registered IR keymap rc-empty [ 955.984907][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 956.004486][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 956.034066][ T5719] usb 2-1: USB disconnect, device number 91 [ 956.045917][ T5817] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 956.648650][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input173 [ 957.019028][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.036816][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.056964][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.077445][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.097115][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.117606][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.136822][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.156883][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.177928][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.204233][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 957.248901][ T5817] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 957.248931][ T5817] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 957.294505][ T5817] usb 4-1: USB disconnect, device number 98 [ 957.649218][ T60] Bluetooth: hci2: unexpected event for opcode 0x007f [ 957.962318][T15274] 9pnet_fd: Insufficient options for proto=fd [ 958.386769][ T9858] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 958.536908][ T9858] usb 4-1: Using ep0 maxpacket: 16 [ 958.540060][ T9858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.540118][ T9858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.540141][ T9858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 958.540154][ T9858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 958.540168][ T9858] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.541435][ T9858] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 958.541464][ T9858] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 958.541484][ T9858] usb 4-1: Manufacturer: syz [ 958.549099][ T9858] usb 4-1: config 0 descriptor?? [ 958.736802][ T5817] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 958.876729][ T9858] rc_core: IR keymap rc-hauppauge not found [ 958.876745][ T9858] Registered IR keymap rc-empty [ 958.876907][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 958.887031][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 958.894409][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.894465][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.894490][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 958.894511][ T5817] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 958.894533][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.896948][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 958.897869][ T5817] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 958.897894][ T5817] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 958.897912][ T5817] usb 5-1: Manufacturer: syz [ 958.912879][ T5817] usb 5-1: config 0 descriptor?? [ 958.920115][ T9858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 958.928824][ T9858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input174 [ 958.936026][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 958.949687][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 958.969145][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 958.987026][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.007138][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.027928][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.046983][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.066900][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.086926][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.107469][ T9858] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 959.141982][ T9858] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 959.142011][ T9858] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 959.250412][ T5611] usb 4-1: USB disconnect, device number 99 [ 959.269853][ T5817] rc_core: IR keymap rc-hauppauge not found [ 959.269876][ T5817] Registered IR keymap rc-empty [ 959.270075][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.287916][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.317969][ T5817] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 959.328384][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input175 [ 959.399014][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.417046][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.440714][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.456761][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.476918][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.496825][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.516790][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.536957][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.557408][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.576813][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 959.608029][ T5817] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 959.608059][ T5817] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 959.689597][ T5817] usb 5-1: USB disconnect, device number 87 [ 959.967288][ T42] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 960.137994][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 960.141032][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.141091][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.141111][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.141123][ T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 960.141136][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.142687][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 960.142708][ T42] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 960.142720][ T42] usb 1-1: Manufacturer: syz [ 960.207861][ T5791] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 960.242982][ T42] usb 1-1: config 0 descriptor?? [ 960.389116][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 960.392345][ T5791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.392381][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.392398][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.392411][ T5791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 960.392668][ T5791] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.394424][ T5791] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 960.394442][ T5791] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 960.394454][ T5791] usb 2-1: Manufacturer: syz [ 960.487531][ T5791] usb 2-1: config 0 descriptor?? [ 960.536801][ T42] rc_core: IR keymap rc-hauppauge not found [ 960.536824][ T42] Registered IR keymap rc-empty [ 960.537136][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.566822][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.600608][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 960.619877][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input176 [ 960.643485][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.657059][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.677017][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.700784][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.716737][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.736771][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.756798][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.779802][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.797638][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.807004][ T5791] rc_core: IR keymap rc-hauppauge not found [ 960.807024][ T5791] Registered IR keymap rc-empty [ 960.807245][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 960.826958][ T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 960.827241][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 960.864154][ T5791] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 960.871961][ T42] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 960.871987][ T42] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 960.885959][ T5791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input177 [ 960.978093][ T42] usb 1-1: USB disconnect, device number 65 [ 960.982502][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.312016][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.338634][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.368547][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.393469][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.536992][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.562526][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.595490][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.637191][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 961.671300][ T5791] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 962.218663][ T5791] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 962.218693][ T5791] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 962.273440][ T5791] usb 2-1: USB disconnect, device number 92 [ 962.936732][ T42] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 962.975386][ T60] Bluetooth: hci4: unexpected event for opcode 0x007f [ 962.987102][ T5611] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 963.106915][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 963.109013][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.109073][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.109091][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 963.109104][ T42] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 963.109117][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.110314][ T42] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 963.110341][ T42] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 963.110353][ T42] usb 5-1: Manufacturer: syz [ 963.118715][ T42] usb 5-1: config 0 descriptor?? [ 963.164690][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 963.210648][ T5611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.210711][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 963.210733][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 963.210751][ T5611] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 963.210775][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.212523][ T5611] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 963.212554][ T5611] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 963.212576][ T5611] usb 1-1: Manufacturer: syz [ 963.294866][ T5611] usb 1-1: config 0 descriptor?? [ 963.476854][ T42] rc_core: IR keymap rc-hauppauge not found [ 963.476879][ T42] Registered IR keymap rc-empty [ 963.478099][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.496912][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.520523][ T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 963.525933][ T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input178 [ 963.531931][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.557406][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.577311][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.597342][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.617005][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.633989][ T5611] rc_core: IR keymap rc-hauppauge not found [ 963.634012][ T5611] Registered IR keymap rc-empty [ 963.634172][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.637773][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.656925][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.670526][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.678252][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.696326][ T5611] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 963.696776][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.717323][ T42] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 963.720059][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input179 [ 963.754265][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.764192][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3218'. [ 963.775379][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.786940][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.790387][ T42] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 963.790417][ T42] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 963.808471][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.826754][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.844543][ T42] usb 5-1: USB disconnect, device number 88 [ 963.849826][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.866966][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.887133][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.906965][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.927039][ T5611] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 963.960175][ T5611] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 963.962677][ T5611] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 964.031773][ T49] usb 1-1: USB disconnect, device number 66 [ 964.536672][T11149] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 964.690863][T11149] usb 2-1: Using ep0 maxpacket: 16 [ 964.693289][T11149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.693349][T11149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 964.693371][T11149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 964.693384][T11149] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 964.693397][T11149] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.694512][T11149] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 964.694546][T11149] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 964.694564][T11149] usb 2-1: Manufacturer: syz [ 964.711537][T11149] usb 2-1: config 0 descriptor?? [ 965.056192][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.094529][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.104484][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.126738][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.130186][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.256789][T11149] rc_core: IR keymap rc-hauppauge not found [ 965.256812][T11149] Registered IR keymap rc-empty [ 965.256995][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.276895][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.320585][T11149] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 965.326447][T11149] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input180 [ 965.353642][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.370706][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.392562][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.419372][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.436802][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.468534][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.553185][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.569298][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.588610][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.606781][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.770364][T11149] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 965.770394][T11149] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 965.786257][T11149] usb 2-1: USB disconnect, device number 93 [ 966.716735][ T5607] Bluetooth: hci4: unexpected event for opcode 0x007f [ 967.027547][ T170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.179116][ T5607] Bluetooth: hci1: command tx timeout [ 967.598567][T11149] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 967.618170][ T170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.756739][T11149] usb 4-1: Using ep0 maxpacket: 16 [ 967.759061][T11149] usb 4-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 967.760706][T11149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.760740][T11149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 967.760763][T11149] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 967.760788][T11149] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.763699][T11149] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 967.763827][T11149] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 967.763845][T11149] usb 4-1: Manufacturer: syz [ 967.772929][T11149] usb 4-1: config 0 descriptor?? [ 968.092255][ T170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.116789][T11149] rc_core: IR keymap rc-hauppauge not found [ 968.116811][T11149] Registered IR keymap rc-empty [ 968.116917][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.149444][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.168629][T11149] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 968.189409][T11149] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input181 [ 968.212753][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.229438][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.247663][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.270129][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.292253][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.308170][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.331156][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.351839][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.366843][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.396797][T11149] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 968.474000][T11149] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 968.474028][T11149] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 968.556032][T11149] usb 4-1: USB disconnect, device number 100 [ 968.891131][ T170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.948578][ T5607] Bluetooth: hci1: command tx timeout [ 971.977019][ T5607] Bluetooth: hci1: command tx timeout [ 972.049766][ T170] bridge_slave_1: left allmulticast mode [ 972.049806][ T170] bridge_slave_1: left promiscuous mode [ 972.050205][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.220797][ T170] bridge_slave_0: left allmulticast mode [ 972.220837][ T170] bridge_slave_0: left promiscuous mode [ 972.221134][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.316700][ T5817] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 972.467723][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 972.484660][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.484720][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 972.484751][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 972.484774][ T5817] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 972.484799][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.525322][ T5817] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 972.525357][ T5817] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 972.525379][ T5817] usb 2-1: Manufacturer: syz [ 972.579099][ T5817] usb 2-1: config 0 descriptor?? [ 972.936734][ T5817] rc_core: IR keymap rc-hauppauge not found [ 972.936760][ T5817] Registered IR keymap rc-empty [ 972.936935][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 972.958338][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 972.989808][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 973.014793][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input182 [ 973.032486][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.046917][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.066817][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.086772][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.108152][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.174559][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.188107][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.206789][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.226800][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.246755][ T5817] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 973.274223][ T5817] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 973.274252][ T5817] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 973.509273][T11149] usb 2-1: USB disconnect, device number 94 [ 974.711362][ T5607] Bluetooth: hci1: command tx timeout [ 975.272471][ T5607] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 975.276736][ T5817] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 975.426778][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 975.431260][ T5817] usb 4-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 975.431323][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 975.431354][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 975.431377][ T5817] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 975.431402][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.432977][ T5817] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 975.433005][ T5817] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 975.433026][ T5817] usb 4-1: Manufacturer: syz [ 975.522387][ T5817] usb 4-1: config 0 descriptor?? [ 975.820778][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.477463][ T5719] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 976.712161][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 976.798889][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.798925][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.798967][ T5719] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 976.799009][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.887285][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.890767][ T5817] rc_core: IR keymap rc-hauppauge not found [ 976.890817][ T5817] Registered IR keymap rc-empty [ 976.896234][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 976.936983][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 976.940275][ T5719] usb 2-1: config 0 descriptor?? [ 976.962455][ T170] bond0 (unregistering): Released all slaves [ 976.993494][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 977.014007][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input183 [ 977.156695][T15376] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.157499][T15376] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.158593][T15376] bridge_slave_0: entered allmulticast mode [ 977.165808][T15376] bridge_slave_0: entered promiscuous mode [ 977.507029][T15509] syz.0.3252 (15509): drop_caches: 2 [ 977.581428][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 978.508330][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.544656][T15376] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.544810][T15376] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.545049][T15376] bridge_slave_1: entered allmulticast mode [ 978.556172][T15376] bridge_slave_1: entered promiscuous mode [ 978.740295][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.924440][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.936794][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.956761][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.977239][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 978.998309][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.057965][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.075801][ T5719] usb 2-1: string descriptor 0 read error: -71 [ 979.076802][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.096812][ T5817] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 979.114235][ T5719] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 979.114406][ T5719] letsketch 0003:6161:4D15.0022: probe with driver letsketch failed with error -32 [ 979.226993][ T170] tipc: Left network mode [ 979.248460][ T5817] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 979.248488][ T5817] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 979.258945][T15376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.281039][T15376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.295145][ T5817] usb 4-1: USB disconnect, device number 101 [ 979.321849][ T5719] usb 2-1: USB disconnect, device number 95 [ 979.891088][T15519] 9pnet_fd: Insufficient options for proto=fd [ 980.048697][T15521] syz.3.3256 (15521): drop_caches: 2 [ 980.314648][ T5719] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 980.966701][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 980.972523][ T5719] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 980.972553][ T5719] usb 2-1: config 0 has no interface number 0 [ 980.972605][ T5719] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 980.972632][ T5719] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 980.977133][ T5719] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 980.977172][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.977195][ T5719] usb 2-1: Product: syz [ 980.977211][ T5719] usb 2-1: Manufacturer: syz [ 980.977226][ T5719] usb 2-1: SerialNumber: syz [ 980.985085][ T5719] usb 2-1: config 0 descriptor?? [ 980.987244][T15513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 980.987481][T15513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 981.215748][T15513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 981.216384][T15513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 981.422640][ T5719] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 981.794081][T15376] team0: Port device team_slave_0 added [ 981.850833][ T60] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 981.941214][T15533] Bluetooth: MGMT ver 1.23 [ 981.941267][T15533] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 982.035406][T15376] team0: Port device team_slave_1 added [ 982.262452][ T5719] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 982.262776][ T5719] asix 2-1:0.34: probe with driver asix failed with error -71 [ 982.293309][ T5719] usb 2-1: USB disconnect, device number 96 [ 982.434025][T15376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.434045][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.434074][T15376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.489800][T15376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.489819][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.489846][T15376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.807913][ T5611] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 983.220916][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 983.345209][T15376] hsr_slave_0: entered promiscuous mode [ 983.346773][T15376] hsr_slave_1: entered promiscuous mode [ 983.347800][T15376] debugfs: 'hsr0' already exists in 'hsr' [ 983.347828][T15376] Cannot create hsr debugfs directory [ 984.109451][ T5611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.109509][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.109536][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.109557][ T5611] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 984.109579][ T5611] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 984.331668][ T5611] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 984.331705][ T5611] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 984.331726][ T5611] usb 4-1: Manufacturer: syz [ 984.380576][ T5611] usb 4-1: config 0 descriptor?? [ 984.789049][T15562] binder: 15561:15562 ioctl c0306201 0 returned -14 [ 984.797126][ T5611] rc_core: IR keymap rc-hauppauge not found [ 984.797146][ T5611] Registered IR keymap rc-empty [ 984.797319][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.816776][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.843596][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 984.853090][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input184 [ 984.858874][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.877538][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.897916][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.918316][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.943820][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.971983][ T5817] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 984.972706][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 984.991269][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.006760][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.026832][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.046751][ T5611] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 985.078155][ T5611] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 985.078184][ T5611] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 985.119902][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 985.126484][ T5817] usb 1-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 985.126715][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.126745][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 985.126766][ T5817] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 985.126856][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.157363][ T5611] usb 4-1: USB disconnect, device number 102 [ 985.169103][ T5817] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 985.169133][ T5817] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 985.169152][ T5817] usb 1-1: Manufacturer: syz [ 985.256228][ T5817] usb 1-1: config 0 descriptor?? [ 985.486714][ T994] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 985.496019][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 985.578749][ T5817] rc_core: IR keymap rc-hauppauge not found [ 985.578773][ T5817] Registered IR keymap rc-empty [ 985.578945][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.596798][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.772004][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 985.776692][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 985.779314][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input185 [ 985.795913][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 985.807169][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.606769][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.624115][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.624187][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 986.624218][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 986.624241][ T994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 986.624265][ T994] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 986.639080][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.643061][ T994] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 986.643092][ T994] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 986.643113][ T994] usb 5-1: Manufacturer: syz [ 986.651215][ T994] usb 5-1: config 0 descriptor?? [ 986.659290][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.844340][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.857390][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.877582][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.896881][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.916849][ T5817] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 986.944986][ T5817] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 986.945250][ T5817] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 987.064743][ T170] hsr_slave_0: left promiscuous mode [ 987.092823][ T170] hsr_slave_1: left promiscuous mode [ 987.092957][ T5817] usb 1-1: USB disconnect, device number 67 [ 987.108744][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.108775][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.136740][ T994] rc_core: IR keymap rc-hauppauge not found [ 987.136762][ T994] Registered IR keymap rc-empty [ 987.136937][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.142247][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.142277][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.157604][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.192131][ T994] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 987.211126][ T994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input186 [ 987.264369][ T60] Bluetooth: hci3: unexpected event for opcode 0x4889 [ 987.294063][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.306773][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.326889][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.347341][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.353164][ T170] veth1_macvtap: left promiscuous mode [ 987.355424][ T170] veth0_macvtap: left promiscuous mode [ 987.356343][ T170] veth1_vlan: left promiscuous mode [ 987.382848][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.397253][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.401087][ T170] veth0_vlan: left promiscuous mode [ 987.419496][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.436847][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.456867][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.476743][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.496778][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 987.527977][ T994] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 987.528006][ T994] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 987.591594][ T49] usb 5-1: USB disconnect, device number 89 [ 987.759893][T15583] binder: BINDER_SET_CONTEXT_MGR already set [ 987.759911][T15583] binder: 15582:15583 ioctl 4018620d 200000000100 returned -16 [ 988.216786][ T49] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 988.387787][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 988.392071][ T49] usb 1-1: config 241 has an invalid interface number: 85 but max is 1 [ 988.392102][ T49] usb 1-1: config 241 has an invalid interface number: 126 but max is 1 [ 988.392124][ T49] usb 1-1: config 241 has no interface number 0 [ 988.392142][ T49] usb 1-1: config 241 has no interface number 1 [ 988.392207][ T49] usb 1-1: config 241 interface 85 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 988.392232][ T49] usb 1-1: config 241 interface 85 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 988.392260][ T49] usb 1-1: config 241 interface 85 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 988.392287][ T49] usb 1-1: config 241 interface 85 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 988.392311][ T49] usb 1-1: config 241 interface 85 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 988.392351][ T49] usb 1-1: config 241 interface 85 has no altsetting 0 [ 988.392371][ T49] usb 1-1: config 241 interface 126 has no altsetting 0 [ 988.400920][ T49] usb 1-1: string descriptor 0 read error: -22 [ 988.401072][ T49] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0081, bcdDevice=1d.a2 [ 988.401095][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.777069][ T49] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 988.788446][ T49] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 988.788495][ T49] dib0700: firmware download failed at 7 with -22 [ 989.136493][ T49] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 989.148858][ T49] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 989.148908][ T49] dib0700: firmware download failed at 7 with -22 [ 989.178324][ T49] usb 1-1: USB disconnect, device number 68 [ 990.611378][ T170] team0 (unregistering): Port device team_slave_1 removed [ 990.687574][ T170] team0 (unregistering): Port device team_slave_0 removed [ 990.846743][ T994] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 990.996780][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 991.001508][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.001570][ T994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.001599][ T994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 991.001622][ T994] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 991.001647][ T994] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.003093][ T994] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 991.003131][ T994] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 991.003152][ T994] usb 4-1: Manufacturer: syz [ 991.112672][ T994] usb 4-1: config 0 descriptor?? [ 991.468551][ T994] rc_core: IR keymap rc-hauppauge not found [ 991.468574][ T994] Registered IR keymap rc-empty [ 991.468751][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.495017][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.510108][ T994] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 991.531651][ T994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input187 [ 991.553833][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.566839][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.587009][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.606857][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.626872][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.646885][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.666763][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.686902][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.706723][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.726748][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.746818][ T994] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 991.804369][ T994] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 991.804397][ T994] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 991.890920][ T5791] usb 4-1: USB disconnect, device number 103 [ 994.366756][ T49] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 994.611854][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 994.614707][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.614766][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 994.614796][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 994.614816][ T49] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 994.614841][ T49] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.617664][ T49] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 994.617691][ T49] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 994.617710][ T49] usb 4-1: Manufacturer: syz [ 994.642109][ T49] usb 4-1: config 0 descriptor?? [ 996.009562][ T49] rc_core: IR keymap rc-hauppauge not found [ 996.009586][ T49] Registered IR keymap rc-empty [ 996.009755][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.009870][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 996.029270][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.048552][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 996.052177][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input188 [ 996.077124][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.109743][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.146711][ T5719] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 996.149477][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.166752][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.198293][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.220725][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.237177][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.256968][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.278041][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.313603][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.338626][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 996.341216][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.341272][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.341302][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.341324][ T5719] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 996.341356][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.344579][ T5719] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 996.344609][ T5719] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 996.344629][ T5719] usb 2-1: Manufacturer: syz [ 996.348166][ T49] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 996.420441][ T49] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 996.420468][ T49] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 996.430384][ T49] usb 4-1: USB disconnect, device number 104 [ 996.488229][ T5719] usb 2-1: config 0 descriptor?? [ 996.853572][ T5719] rc_core: IR keymap rc-hauppauge not found [ 996.853595][ T5719] Registered IR keymap rc-empty [ 996.853761][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 996.874941][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 996.888583][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 996.893114][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input189 [ 997.569090][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.591881][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.613385][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.627163][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.646907][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.666865][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.686850][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.706896][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.726935][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.746955][ T5719] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 997.776733][ T5719] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 997.776762][ T5719] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 997.838183][ T5719] usb 2-1: USB disconnect, device number 97 [ 998.534630][T15658] syz.0.3288 (15658): drop_caches: 2 [ 999.383534][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.383618][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.942781][T15665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3290'. [ 1001.236797][ T5611] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1001.980830][ T994] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1002.208291][ T5611] usb 2-1: Using ep0 maxpacket: 16 [ 1002.223249][ T5611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.223334][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1002.223363][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1002.223385][ T5611] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1002.223409][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.256718][ T5611] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1002.256754][ T5611] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1002.256776][ T5611] usb 2-1: Manufacturer: syz [ 1002.356625][ T994] usb 1-1: Using ep0 maxpacket: 16 [ 1002.359048][ T994] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.359119][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1002.359150][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1002.359172][ T994] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1002.359196][ T994] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.361250][ T994] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1002.361279][ T994] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1002.361299][ T994] usb 1-1: Manufacturer: syz [ 1002.412183][ T5611] usb 2-1: config 0 descriptor?? [ 1002.462349][ T994] usb 1-1: config 0 descriptor?? [ 1002.838019][ T5611] rc_core: IR keymap rc-hauppauge not found [ 1002.838043][ T5611] Registered IR keymap rc-empty [ 1002.838235][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.846929][ T994] rc_core: IR keymap rc-hauppauge not found [ 1002.846951][ T994] Registered IR keymap rc-empty [ 1002.847125][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1002.858505][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1002.867347][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1002.910804][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1002.990501][ T994] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1003.014580][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input190 [ 1003.039079][ T994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input191 [ 1003.084408][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1003.085423][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1003.109211][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1003.109705][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1003.127093][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.089840][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.090045][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.157074][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.161599][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.177127][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.180254][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.200311][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.201799][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.224965][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.225161][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.242546][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.242735][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.258249][ T994] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1004.269737][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.287085][ T994] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1004.287113][ T994] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1004.288036][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.306744][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1004.333474][ T994] usb 1-1: USB disconnect, device number 69 [ 1004.511991][ T5611] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1004.512030][ T5611] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1004.569720][ T5611] usb 2-1: USB disconnect, device number 98 [ 1004.836824][ T60] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 1005.423346][T15714] syz.4.3295 (15714): drop_caches: 2 [ 1009.935948][T15376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1010.121151][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.166750][ T5791] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1010.196855][T15376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1010.252361][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.261343][T15376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1010.315775][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1010.322552][T15376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1010.330910][ T5791] usb 4-1: Using ep0 maxpacket: 16 [ 1010.334537][ T5791] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1010.334598][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.334627][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1010.334649][ T5791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1010.334675][ T5791] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.484891][T15376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1010.618606][ T5791] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.618640][ T5791] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.618675][ T5791] usb 4-1: Manufacturer: syz [ 1010.649822][ T5791] usb 4-1: config 0 descriptor?? [ 1011.963655][T15376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.028994][T15376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.120326][T15755] syz.0.3301 (15755): drop_caches: 2 [ 1012.144129][ T9506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.160279][ T9506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.268069][ T9506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.270409][ T9506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.659175][ T5791] rc_core: IR keymap rc-hauppauge not found [ 1012.659200][ T5791] Registered IR keymap rc-empty [ 1012.659374][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1012.676782][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1012.703183][ T5791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1012.710096][ T5791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input192 [ 1012.717186][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1012.790862][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1012.797271][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1012.817231][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1012.841839][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1013.071849][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1013.086804][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1013.117080][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1013.154130][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1013.237493][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1013.245577][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1013.629122][ T5791] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1013.629279][ T5791] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1014.070241][ T5791] usb 4-1: USB disconnect, device number 105 [ 1018.536805][ T5791] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1018.798940][T15503] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1018.880697][T15376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.010917][T15503] usb 2-1: Using ep0 maxpacket: 16 [ 1019.578440][T15503] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.578807][T15503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1019.578863][T15503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1019.578914][T15503] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1019.578965][T15503] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.582938][T15503] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1019.582995][T15503] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1019.583046][T15503] usb 2-1: Manufacturer: syz [ 1019.975091][T15503] usb 2-1: config 0 descriptor?? [ 1019.986577][ T5791] usb 4-1: Using ep0 maxpacket: 16 [ 1019.995434][ T5791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.995494][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1019.995523][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1019.995544][ T5791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1019.995566][ T5791] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.000443][ T5791] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1020.000473][ T5791] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1020.000491][ T5791] usb 4-1: Manufacturer: syz [ 1020.031213][ T5791] usb 4-1: config 0 descriptor?? [ 1020.436962][T15376] veth0_vlan: entered promiscuous mode [ 1020.492791][T15376] veth1_vlan: entered promiscuous mode [ 1020.560381][T15503] rc_core: IR keymap rc-hauppauge not found [ 1020.560407][T15503] Registered IR keymap rc-empty [ 1020.560590][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.596135][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.610213][T15503] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 1020.635395][T15503] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input194 [ 1020.637043][T15376] veth0_macvtap: entered promiscuous mode [ 1020.667417][T15376] veth1_macvtap: entered promiscuous mode [ 1020.710048][T15376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.756999][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.777226][ T5791] rc_core: IR keymap rc-hauppauge not found [ 1020.777251][ T5791] Registered IR keymap rc-empty [ 1020.777422][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.778243][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1020.796713][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1020.797032][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.172997][T15810] syz.0.3309 (15810): drop_caches: 2 [ 1021.880664][T15376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.902901][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1021.905549][ T5791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1022.000353][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1022.016813][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1022.036890][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1022.066207][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1022.077232][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1022.094046][ T5791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input193 [ 1022.107517][T15503] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1022.150101][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.166706][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.170037][ T174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.170341][ T174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.170609][ T174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.170651][ T174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.196853][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.218910][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.237186][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.252877][T15503] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1022.252969][T15503] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1022.256707][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.276769][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.297129][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.316752][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.351953][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1022.395879][ T5791] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1022.395909][ T5791] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1022.466964][ T42] usb 2-1: USB disconnect, device number 99 [ 1022.472421][ T5791] usb 4-1: USB disconnect, device number 106 [ 1024.866621][T15836] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1025.481005][T15836] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1025.484611][T15836] overlayfs: failed to look up (tracing) for ino (-66) [ 1027.313723][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1027.344769][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1027.363782][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1027.397593][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1027.400894][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1028.003529][T15849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 1029.046851][T15503] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1029.196617][T15503] usb 4-1: Using ep0 maxpacket: 16 [ 1029.201735][T15503] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.201796][T15503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.201826][T15503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1029.201849][T15503] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1029.201874][T15503] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.203482][T15503] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1029.203511][T15503] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1029.203532][T15503] usb 4-1: Manufacturer: syz [ 1029.430987][T15503] usb 4-1: config 0 descriptor?? [ 1029.496819][ T60] Bluetooth: hci5: command tx timeout [ 1029.726616][T15503] rc_core: IR keymap rc-hauppauge not found [ 1029.726641][T15503] Registered IR keymap rc-empty [ 1029.726820][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.755564][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.773434][T15503] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1029.790144][T15503] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input195 [ 1029.856271][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.879132][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.925301][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.936808][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.956938][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.978139][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1029.996761][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1030.017246][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1030.036827][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1030.056748][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1030.077159][T15503] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1030.423947][T15503] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1030.423977][T15503] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1030.487958][T15503] usb 4-1: USB disconnect, device number 107 [ 1030.694245][ T5792] udevd[5792]: setting owner of /dev/bus/usb/004/107 to uid=0, gid=0 failed: No such file or directory [ 1031.576851][ T60] Bluetooth: hci5: command tx timeout [ 1033.124564][T15838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.124828][T15838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.125051][T15838] bridge_slave_0: entered allmulticast mode [ 1033.149560][T15838] bridge_slave_0: entered promiscuous mode [ 1033.154328][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.154554][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.155185][T15838] bridge_slave_1: entered allmulticast mode [ 1033.185463][T15838] bridge_slave_1: entered promiscuous mode [ 1033.324581][T15838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.347229][T15838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.644633][ T60] Bluetooth: hci5: command tx timeout [ 1034.897349][T15838] team0: Port device team_slave_0 added [ 1034.912090][T15838] team0: Port device team_slave_1 added [ 1035.046285][ T60] Bluetooth: hci4: unexpected event for opcode 0x4889 [ 1035.046788][T15503] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1035.206692][T15503] usb 1-1: Using ep0 maxpacket: 16 [ 1035.208972][T15503] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.209030][T15503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1035.209060][T15503] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1035.209083][T15503] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1035.209106][T15503] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.210392][T15503] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1035.210419][T15503] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1035.210438][T15503] usb 1-1: Manufacturer: syz [ 1035.215923][T15503] usb 1-1: config 0 descriptor?? [ 1035.479243][ T174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.666623][T15503] rc_core: IR keymap rc-hauppauge not found [ 1035.666644][T15503] Registered IR keymap rc-empty [ 1035.666793][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.688294][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.709393][T15503] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1035.712783][T15503] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input196 [ 1035.744548][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.756846][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.776746][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.796740][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.816713][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.836929][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.856949][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.876821][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.896758][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.915111][T15838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.915124][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.915140][T15838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.916725][T15503] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1035.931946][T15838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.931962][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.931987][T15838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.029995][T15503] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1036.030024][T15503] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1036.063010][T15503] usb 1-1: USB disconnect, device number 70 [ 1036.699821][ T60] Bluetooth: hci5: command tx timeout [ 1036.704249][ T174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.423365][T15838] hsr_slave_0: entered promiscuous mode [ 1038.432890][T15838] hsr_slave_1: entered promiscuous mode [ 1038.445957][T15838] debugfs: 'hsr0' already exists in 'hsr' [ 1038.445989][T15838] Cannot create hsr debugfs directory [ 1041.457385][T15914] syz.3.3331 (15914): drop_caches: 2 [ 1042.786695][ T174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.976628][ T174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.226989][ T5611] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1047.380307][ T5611] usb 2-1: Using ep0 maxpacket: 16 [ 1047.387460][ T5611] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.387518][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1047.387549][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1047.387571][ T5611] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1047.387595][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.389061][ T5611] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1047.389089][ T5611] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1047.389112][ T5611] usb 2-1: Manufacturer: syz [ 1048.519375][ T5611] usb 2-1: config 0 descriptor?? [ 1049.070565][ T5611] rc_core: IR keymap rc-hauppauge not found [ 1049.070591][ T5611] Registered IR keymap rc-empty [ 1049.070778][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.090977][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.110361][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1049.145353][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input197 [ 1049.170319][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.208197][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.228428][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.251565][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.274046][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.286819][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.306796][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.328966][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.351499][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.369964][ T5611] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1049.400960][ T5611] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1049.400988][ T5611] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1049.417094][ T60] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1049.525675][ T5611] usb 2-1: USB disconnect, device number 100 [ 1050.725862][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1055.704037][ T174] bridge_slave_1: left allmulticast mode [ 1055.704079][ T174] bridge_slave_1: left promiscuous mode [ 1055.704383][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.861458][ T174] bridge_slave_0: left allmulticast mode [ 1055.861496][ T174] bridge_slave_0: left promiscuous mode [ 1055.861799][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.016706][ T5791] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1056.216725][ T5791] usb 4-1: Using ep0 maxpacket: 16 [ 1056.222305][ T5791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.222366][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1056.222396][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1056.222419][ T5791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1056.222445][ T5791] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.224858][ T5791] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1056.224890][ T5791] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1056.224911][ T5791] usb 4-1: Manufacturer: syz [ 1056.290693][ T5791] usb 4-1: config 0 descriptor?? [ 1056.710122][ T5791] rc_core: IR keymap rc-hauppauge not found [ 1056.710139][ T5791] Registered IR keymap rc-empty [ 1056.710240][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.736667][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.758526][ T5791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1056.763424][ T5791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input198 [ 1056.769701][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.797046][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.816795][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.839838][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.866821][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.878177][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.897458][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.916867][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.937517][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1056.948191][ T174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.960775][ T5791] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1057.005668][ T5791] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1057.005807][ T5791] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1057.040362][ T5791] usb 4-1: USB disconnect, device number 108 [ 1057.055785][ T174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.089773][ T174] bond0 (unregistering): Released all slaves [ 1057.162508][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1059.820860][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.820944][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.317398][ T5732] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1061.476606][ T5732] usb 1-1: Using ep0 maxpacket: 32 [ 1061.488869][ T5732] usb 1-1: config 241 has an invalid interface number: 85 but max is 2 [ 1061.488900][ T5732] usb 1-1: config 241 has an invalid interface number: 5 but max is 2 [ 1061.488919][ T5732] usb 1-1: config 241 has an invalid interface number: 126 but max is 2 [ 1061.488939][ T5732] usb 1-1: config 241 has no interface number 0 [ 1061.488954][ T5732] usb 1-1: config 241 has no interface number 1 [ 1061.488971][ T5732] usb 1-1: config 241 has no interface number 2 [ 1061.489048][ T5732] usb 1-1: config 241 interface 85 has no altsetting 0 [ 1061.489067][ T5732] usb 1-1: config 241 interface 5 has no altsetting 0 [ 1061.489085][ T5732] usb 1-1: config 241 interface 126 has no altsetting 0 [ 1062.084203][ T5732] usb 1-1: string descriptor 0 read error: -22 [ 1062.085302][ T5732] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0081, bcdDevice=1d.a2 [ 1062.085358][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.755639][ T5732] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 1062.790730][ T5732] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1062.790791][ T5732] dib0700: firmware download failed at 7 with -22 [ 1062.813849][ T5732] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 1062.816237][ T5732] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1062.816288][ T5732] dib0700: firmware download failed at 7 with -22 [ 1062.834766][T16035] binder: 16033:16035 ioctl c0306201 0 returned -14 [ 1062.862859][ T5732] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 1062.865341][ T5732] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1062.865394][ T5732] dib0700: firmware download failed at 7 with -22 [ 1063.439659][ T5732] usb 1-1: USB disconnect, device number 71 [ 1068.325190][T16052] syz.3.3357 (16052): drop_caches: 2 [ 1068.445417][ T9858] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1068.598418][ T9858] usb 5-1: Using ep0 maxpacket: 16 [ 1068.601011][ T9858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.601069][ T9858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1068.601099][ T9858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1068.601122][ T9858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1068.601147][ T9858] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1068.602855][ T9858] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1068.602892][ T9858] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1068.602913][ T9858] usb 5-1: Manufacturer: syz [ 1068.622355][ T9858] usb 5-1: config 0 descriptor?? [ 1068.777700][ T174] hsr_slave_0: left promiscuous mode [ 1068.836926][ T174] hsr_slave_1: left promiscuous mode [ 1068.841168][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.841197][ T174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.898166][ T174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.898197][ T174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.996655][ T9858] rc_core: IR keymap rc-hauppauge not found [ 1068.996680][ T9858] Registered IR keymap rc-empty [ 1068.996831][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.018324][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.038406][ T9858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1069.051524][ T9858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input199 [ 1069.062185][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.077113][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.097965][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.116892][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.117602][ T174] veth1_macvtap: left promiscuous mode [ 1069.117829][ T174] veth0_macvtap: left promiscuous mode [ 1069.120142][ T174] veth1_vlan: left promiscuous mode [ 1069.120355][ T174] veth0_vlan: left promiscuous mode [ 1069.136958][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.156746][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.176892][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.198482][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.217490][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.237029][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.257177][ T9858] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1069.293468][ T9858] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1069.293498][ T9858] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1069.360480][ T9858] usb 5-1: USB disconnect, device number 90 [ 1069.984615][T16062] syz.1.3361 (16062): drop_caches: 2 [ 1072.061787][ T174] team0 (unregistering): Port device team_slave_1 removed [ 1072.157562][ T174] team0 (unregistering): Port device team_slave_0 removed [ 1072.279248][T16078] binder_alloc: 16076: binder_alloc_buf, no vma [ 1076.410498][T15838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1077.299702][T15838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.303855][T15838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1077.607624][T16123] syz.3.3372 (16123): drop_caches: 2 [ 1077.834545][T15838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1078.006642][T15838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1078.820088][T15838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1078.835200][T15838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1079.390546][T15838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1080.275439][T15838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.408708][T15838] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.560324][T15510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.560480][T15510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.579654][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.579873][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.169047][T11149] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1082.332396][T11149] usb 2-1: Using ep0 maxpacket: 16 [ 1082.334793][T11149] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.334861][T11149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1082.334891][T11149] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1082.334915][T11149] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1082.334938][T11149] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.338620][T11149] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1082.338646][T11149] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1082.338665][T11149] usb 2-1: Manufacturer: syz [ 1082.626702][T11149] usb 2-1: config 0 descriptor?? [ 1082.983344][T15838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.066880][T11149] rc_core: IR keymap rc-hauppauge not found [ 1083.066903][T11149] Registered IR keymap rc-empty [ 1083.067077][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.086669][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.117706][T11149] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1083.157088][T11149] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input200 [ 1083.192242][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.216817][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.242284][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.256815][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.276821][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.297040][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.332632][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.364686][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.386810][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.417790][T11149] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1083.581679][T11149] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1083.581710][T11149] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1083.666362][T11149] usb 2-1: USB disconnect, device number 101 [ 1084.579219][T15838] veth0_vlan: entered promiscuous mode [ 1084.612137][T15838] veth1_vlan: entered promiscuous mode [ 1084.976674][ T9858] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1085.137018][ T9858] usb 1-1: Using ep0 maxpacket: 16 [ 1085.139821][ T9858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.139882][ T9858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1085.139913][ T9858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1085.139935][ T9858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1085.139960][ T9858] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1085.141505][ T9858] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1085.141540][ T9858] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1085.141561][ T9858] usb 1-1: Manufacturer: syz [ 1085.162178][ T9858] usb 1-1: config 0 descriptor?? [ 1085.678764][ T9858] rc_core: IR keymap rc-hauppauge not found [ 1085.678789][ T9858] Registered IR keymap rc-empty [ 1085.678973][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.696933][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.727107][ T9858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1085.735061][ T9858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input201 [ 1085.838418][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.861278][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.886838][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.907091][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.934929][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.952728][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.973471][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1085.986744][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1086.010616][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1086.026877][ T9858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1086.111316][ T9858] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1086.111346][ T9858] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1086.130725][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1086.203282][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1086.205449][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1086.212255][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1086.214417][ T9858] usb 1-1: USB disconnect, device number 72 [ 1086.215226][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.456677][ T60] Bluetooth: hci1: command tx timeout [ 1088.624862][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1088.626511][ T5607] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1088.848080][ T5790] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1089.709397][ T994] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1089.876620][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 1089.883742][ T5790] usb 2-1: config 241 has an invalid interface number: 85 but max is 2 [ 1089.883774][ T5790] usb 2-1: config 241 has an invalid interface number: 5 but max is 2 [ 1089.883795][ T5790] usb 2-1: config 241 has an invalid interface number: 126 but max is 2 [ 1089.883818][ T5790] usb 2-1: config 241 has no interface number 0 [ 1089.883835][ T5790] usb 2-1: config 241 has no interface number 1 [ 1089.883852][ T5790] usb 2-1: config 241 has no interface number 2 [ 1089.883934][ T5790] usb 2-1: config 241 interface 85 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 1089.883959][ T5790] usb 2-1: config 241 interface 85 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1089.883987][ T5790] usb 2-1: config 241 interface 85 altsetting 5 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1089.884089][ T5790] usb 2-1: config 241 interface 85 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 1089.884114][ T5790] usb 2-1: config 241 interface 85 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1089.884154][ T5790] usb 2-1: config 241 interface 85 has no altsetting 0 [ 1089.884175][ T5790] usb 2-1: config 241 interface 5 has no altsetting 0 [ 1089.884195][ T5790] usb 2-1: config 241 interface 126 has no altsetting 0 [ 1089.911287][ T5790] usb 2-1: string descriptor 0 read error: -22 [ 1089.911452][ T5790] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0081, bcdDevice=1d.a2 [ 1089.911478][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.966696][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 1089.968772][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.968804][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.968842][ T994] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1089.968863][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.049754][ T994] usb 5-1: config 0 descriptor?? [ 1090.413669][ T5790] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 1090.458319][ T5790] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1090.458370][ T5790] dib0700: firmware download failed at 7 with -22 [ 1090.493311][ T5790] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 1090.495916][ T5790] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1090.495967][ T5790] dib0700: firmware download failed at 7 with -22 [ 1090.539790][ T5607] Bluetooth: hci1: command tx timeout [ 1090.543088][ T5790] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware [ 1090.568592][ T5790] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1090.568642][ T5790] dib0700: firmware download failed at 7 with -22 [ 1090.601371][ T5790] usb 2-1: USB disconnect, device number 102 [ 1092.202495][T16276] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1092.239460][ T994] usb 5-1: string descriptor 0 read error: -71 [ 1092.263705][ T994] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 1092.263818][ T994] letsketch 0003:6161:4D15.0023: probe with driver letsketch failed with error -32 [ 1092.270364][ T994] usb 5-1: USB disconnect, device number 91 [ 1092.623421][ T5607] Bluetooth: hci1: command tx timeout [ 1093.575704][ T5607] Bluetooth: hci0: unexpected event for opcode 0x4889 [ 1093.918360][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.918618][T16222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.918837][T16222] bridge_slave_0: entered allmulticast mode [ 1093.922069][T16222] bridge_slave_0: entered promiscuous mode [ 1093.934478][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.934666][T16222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.934859][T16222] bridge_slave_1: entered allmulticast mode [ 1093.938132][T16222] bridge_slave_1: entered promiscuous mode [ 1094.001613][T16222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.196593][T16222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.702087][ T5607] Bluetooth: hci1: command tx timeout [ 1097.170656][ T5611] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1097.228484][T16222] team0: Port device team_slave_0 added [ 1097.246144][T16222] team0: Port device team_slave_1 added [ 1097.316651][ T5611] usb 2-1: Using ep0 maxpacket: 16 [ 1097.319572][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.319604][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.319643][ T5611] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1097.319666][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.343947][ T5611] usb 2-1: config 0 descriptor?? [ 1097.719994][T16222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.720015][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.720108][T16222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.777079][T16222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.777100][T16222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.777132][T16222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.370315][ T5607] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1098.510017][ T43] bridge_slave_1: left allmulticast mode [ 1098.532792][ T43] bridge_slave_1: left promiscuous mode [ 1098.534474][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.923435][ T43] bridge_slave_0: left allmulticast mode [ 1098.923474][ T43] bridge_slave_0: left promiscuous mode [ 1098.925043][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.060199][ T5611] usb 2-1: string descriptor 0 read error: -71 [ 1099.091822][ T5611] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 1099.091920][ T5611] letsketch 0003:6161:4D15.0024: probe with driver letsketch failed with error -32 [ 1099.176030][ T5611] usb 2-1: USB disconnect, device number 103 [ 1100.457810][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.496849][ T994] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1100.577651][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.612832][ T43] bond0 (unregistering): Released all slaves [ 1100.646582][ T994] usb 5-1: Using ep0 maxpacket: 16 [ 1100.649907][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.649967][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1100.649997][ T994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1100.650019][ T994] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1100.650043][ T994] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.652890][ T994] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1100.652918][ T994] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1100.652939][ T994] usb 5-1: Manufacturer: syz [ 1100.745455][ T994] usb 5-1: config 0 descriptor?? [ 1100.784679][T16222] hsr_slave_0: entered promiscuous mode [ 1100.876838][T16222] hsr_slave_1: entered promiscuous mode [ 1100.881295][T16222] debugfs: 'hsr0' already exists in 'hsr' [ 1100.881330][T16222] Cannot create hsr debugfs directory [ 1101.015752][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1101.076619][ T994] rc_core: IR keymap rc-hauppauge not found [ 1101.076645][ T994] Registered IR keymap rc-empty [ 1101.076838][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.104798][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.118669][ T994] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1101.122343][ T994] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input202 [ 1101.153251][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.167116][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.188391][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.206724][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.226793][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.246749][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.266703][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.287013][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.306935][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.326792][ T994] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1101.359995][ T994] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1101.360024][ T994] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1101.441430][T11149] usb 5-1: USB disconnect, device number 92 [ 1101.756842][ T43] hsr_slave_0: left promiscuous mode [ 1101.776651][ T43] hsr_slave_1: left promiscuous mode [ 1101.777911][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.812725][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.204718][ T43] veth1_vlan: left promiscuous mode [ 1102.353475][T16376] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1102.788152][T16376] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1102.788672][T16376] overlayfs: failed to look up (tracing) for ino (-66) [ 1103.141965][ T43] veth0_vlan: left promiscuous mode [ 1104.916689][ T5817] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1105.049324][T16383] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1105.501447][T16383] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1105.501885][T16383] overlayfs: failed to look up (tracing) for ino (-66) [ 1106.526667][ T5817] usb 5-1: Using ep0 maxpacket: 16 [ 1106.529426][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.529486][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1106.529515][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1106.529539][ T5817] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1106.529563][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.531409][ T5817] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.531436][ T5817] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1106.531457][ T5817] usb 5-1: Manufacturer: syz [ 1106.563187][ T5817] usb 5-1: config 0 descriptor?? [ 1107.702040][T16388] binder: BINDER_SET_CONTEXT_MGR already set [ 1107.702057][T16388] binder: 16387:16388 ioctl 4018620d 200000000100 returned -16 [ 1107.798113][ T5817] rc_core: IR keymap rc-hauppauge not found [ 1107.798136][ T5817] Registered IR keymap rc-empty [ 1107.798310][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.817478][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.840040][ T5817] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1107.866071][ T5817] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input203 [ 1107.884420][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.897700][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.916760][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.936701][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.958016][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.976666][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1107.996682][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1108.016739][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1108.037162][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1108.056719][ T5817] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1108.122459][ T5817] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1108.122488][ T5817] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1108.130550][T15383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1108.154623][T15383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1108.179953][T15383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1108.183789][T15383] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1108.184733][T15383] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1108.344029][ T5817] usb 5-1: USB disconnect, device number 93 [ 1108.381559][ T5607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1108.381590][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.381616][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1108.381631][ T5607] Workqueue: hci0 hci_rx_work [ 1108.381665][ T5607] Call Trace: [ 1108.381675][ T5607] [ 1108.381684][ T5607] dump_stack_lvl+0xe8/0x150 [ 1108.381714][ T5607] sysfs_create_dir_ns+0x271/0x2a0 [ 1108.381747][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1108.381772][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1108.381808][ T5607] ? rt_spin_unlock+0x160/0x200 [ 1108.381835][ T5607] kobject_add_internal+0x631/0xd10 [ 1108.381873][ T5607] kobject_add+0x163/0x240 [ 1108.381910][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 1108.381949][ T5607] ? get_device_parent+0x370/0x3a0 [ 1108.381978][ T5607] device_add+0x408/0xbb0 [ 1108.382011][ T5607] hci_conn_add_sysfs+0xd5/0x210 [ 1108.382042][ T5607] le_conn_complete_evt+0x10e6/0x16b0 [ 1108.382076][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1108.382101][ T5607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1108.382132][ T5607] ? lockdep_hardirqs_on+0x7a/0x110 [ 1108.382165][ T5607] ? skb_pull_data+0xfb/0x200 [ 1108.382204][ T5607] hci_le_conn_complete_evt+0x187/0x470 [ 1108.382246][ T5607] hci_event_packet+0x659/0xef0 [ 1108.382283][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1108.382304][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1108.382334][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 1108.382369][ T5607] ? rt_spin_unlock+0x14f/0x200 [ 1108.382404][ T5607] ? hci_send_to_monitor+0xe2/0x590 [ 1108.382434][ T5607] hci_rx_work+0x3ee/0x1040 [ 1108.382471][ T5607] ? process_scheduled_works+0xa70/0x1860 [ 1108.382498][ T5607] process_scheduled_works+0xb5d/0x1860 [ 1108.382557][ T5607] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.382589][ T5607] ? assign_work+0x3d5/0x5e0 [ 1108.382617][ T5607] worker_thread+0xa53/0xfc0 [ 1108.382670][ T5607] kthread+0x388/0x470 [ 1108.382707][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 1108.382730][ T5607] ? __pfx_kthread+0x10/0x10 [ 1108.382762][ T5607] ret_from_fork+0x514/0xb70 [ 1108.382791][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.382816][ T5607] ? __switch_to+0xc79/0x1410 [ 1108.382854][ T5607] ? __pfx_kthread+0x10/0x10 [ 1108.382884][ T5607] ret_from_fork_asm+0x1a/0x30 [ 1108.382931][ T5607] [ 1108.383041][ T5607] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1108.383088][ T5607] Bluetooth: hci0: failed to register connection device [ 1108.777404][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1108.839652][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1109.101283][ T5607] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1109.101313][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1109.101340][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1109.101355][ T5607] Workqueue: hci4 hci_rx_work [ 1109.101389][ T5607] Call Trace: [ 1109.101399][ T5607] [ 1109.101414][ T5607] dump_stack_lvl+0xe8/0x150 [ 1109.101444][ T5607] sysfs_create_dir_ns+0x271/0x2a0 [ 1109.101478][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1109.101506][ T5607] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1109.101545][ T5607] ? rt_spin_unlock+0x160/0x200 [ 1109.101571][ T5607] kobject_add_internal+0x631/0xd10 [ 1109.101616][ T5607] kobject_add+0x163/0x240 [ 1109.101664][ T5607] ? __pfx_kobject_add+0x10/0x10 [ 1109.101704][ T5607] ? get_device_parent+0x370/0x3a0 [ 1109.101736][ T5607] device_add+0x408/0xbb0 [ 1109.101765][ T5607] hci_conn_add_sysfs+0xd5/0x210 [ 1109.101796][ T5607] le_conn_complete_evt+0x10e6/0x16b0 [ 1109.101825][ T5607] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1109.101854][ T5607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1109.101877][ T5607] ? lockdep_hardirqs_on+0x7a/0x110 [ 1109.101902][ T5607] ? skb_pull_data+0xfb/0x200 [ 1109.101932][ T5607] hci_le_conn_complete_evt+0x187/0x470 [ 1109.101965][ T5607] hci_event_packet+0x659/0xef0 [ 1109.101994][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1109.102012][ T5607] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1109.102035][ T5607] ? __pfx_hci_event_packet+0x10/0x10 [ 1109.102056][ T5607] ? rt_spin_unlock+0x14f/0x200 [ 1109.102082][ T5607] ? hci_send_to_monitor+0xe2/0x590 [ 1109.102106][ T5607] hci_rx_work+0x3ee/0x1040 [ 1109.102134][ T5607] ? process_scheduled_works+0xa70/0x1860 [ 1109.102155][ T5607] process_scheduled_works+0xb5d/0x1860 [ 1109.102200][ T5607] ? __pfx_process_scheduled_works+0x10/0x10 [ 1109.102225][ T5607] ? assign_work+0x3d5/0x5e0 [ 1109.102248][ T5607] worker_thread+0xa53/0xfc0 [ 1109.102291][ T5607] kthread+0x388/0x470 [ 1109.102314][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 1109.102330][ T5607] ? __pfx_kthread+0x10/0x10 [ 1109.102354][ T5607] ret_from_fork+0x514/0xb70 [ 1109.102376][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 1109.102395][ T5607] ? __switch_to+0xc79/0x1410 [ 1109.102422][ T5607] ? __pfx_kthread+0x10/0x10 [ 1109.102446][ T5607] ret_from_fork_asm+0x1a/0x30 [ 1109.102483][ T5607] [ 1109.102638][ T5607] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1109.102685][ T5607] Bluetooth: hci4: failed to register connection device [ 1110.435840][ T5607] Bluetooth: hci3: command tx timeout [ 1110.457135][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 1111.176724][T14164] Bluetooth: hci4: command 0x0406 tx timeout [ 1112.846821][T14164] Bluetooth: hci3: command tx timeout [ 1113.177287][T14164] Bluetooth: hci0: command 0x0406 tx timeout [ 1113.262206][T15383] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.460743][ T5603] ================================================================== [ 1113.460764][ T5603] BUG: KASA[ 1113.460764][ T5603] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 1113.460798][ T5603] Read of size 1 at addr ffff88804ee947e8 by task syz-executor/5603 [ 1113.460817][ T5603] [ 1113.460835][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1113.460858][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1113.460870][ T5603] Call Trace: [ 1113.460878][ T5603] [ 1113.460887][ T5603] dump_stack_lvl+0xe8/0x150 [ 1113.460913][ T5603] print_address_description+0x55/0x1e0 [ 1113.460938][ T5603] ? rt_spin_lock+0x83/0x400 [ 1113.460956][ T5603] print_report+0x58/0x70 [ 1113.460978][ T5603] kasan_report+0x117/0x150 [ 1113.461004][ T5603] ? rt_spin_lock+0x83/0x400 [ 1113.461028][ T5603] ? bt_accept_unlink+0x7d/0x2f0 [ 1113.461056][ T5603] __kasan_check_byte+0x2a/0x40 [ 1113.461080][ T5603] lock_acquire+0x84/0x350 [ 1113.461110][ T5603] ? __local_bh_disable_ip+0x3c/0x420 [ 1113.461133][ T5603] rt_spin_lock+0x83/0x400 [ 1113.461153][ T5603] ? bt_accept_unlink+0x7d/0x2f0 [ 1113.461194][ T5603] ? __pfx_rt_spin_lock+0x10/0x10 [ 1113.461217][ T5603] ? rcu_is_watching+0x15/0xb0 [ 1113.461246][ T5603] ? __local_bh_disable_ip+0x3c/0x420 [ 1113.461269][ T5603] ? bt_accept_unlink+0x61/0x2f0 [ 1113.461299][ T5603] bt_accept_unlink+0x7d/0x2f0 [ 1113.461328][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 1113.461353][ T5603] ? bt_accept_unlink+0x61/0x2f0 [ 1113.461382][ T5603] l2cap_sock_teardown_cb+0x17e/0x490 [ 1113.461411][ T5603] l2cap_chan_del+0xb5/0x610 [ 1113.461436][ T5603] ? l2cap_conn_del+0x331/0x570 [ 1113.461460][ T5603] l2cap_conn_del+0x33d/0x570 [ 1113.461484][ T5603] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1113.461507][ T5603] hci_conn_hash_flush+0x10d/0x260 [ 1113.461534][ T5603] hci_dev_close_sync+0x821/0x10e0 [ 1113.461557][ T5603] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1113.461578][ T5603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1113.461615][ T5603] ? hci_unregister_dev+0x212/0x5a0 [ 1113.461644][ T5603] hci_unregister_dev+0x21a/0x5a0 [ 1113.461673][ T5603] vhci_release+0x155/0x1b0 [ 1113.461695][ T5603] ? __pfx_vhci_release+0x10/0x10 [ 1113.461717][ T5603] __fput+0x461/0xa70 [ 1113.461753][ T5603] task_work_run+0x1d9/0x270 [ 1113.461784][ T5603] ? __pfx_task_work_run+0x10/0x10 [ 1113.461814][ T5603] ? do_exit+0x70a/0x22c0 [ 1113.461841][ T5603] ? kmem_cache_free+0x187/0x6c0 [ 1113.461865][ T5603] ? put_net+0x191/0x260 [ 1113.461886][ T5603] ? do_exit+0x70a/0x22c0 [ 1113.461916][ T5603] do_exit+0x70f/0x22c0 [ 1113.461943][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 1113.461971][ T5603] ? rt_spin_lock+0x1e0/0x400 [ 1113.461992][ T5603] ? __pfx_do_exit+0x10/0x10 [ 1113.462020][ T5603] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1113.462047][ T5603] ? rt_spin_unlock+0x160/0x200 [ 1113.462071][ T5603] do_group_exit+0x21b/0x2d0 [ 1113.462100][ T5603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.462123][ T5603] __x64_sys_exit_group+0x3f/0x40 [ 1113.462152][ T5603] x64_sys_call+0x221a/0x2240 [ 1113.462178][ T5603] do_syscall_64+0x15f/0xf80 [ 1113.462204][ T5603] ? trace_irq_disable+0x3b/0x140 [ 1113.462229][ T5603] ? clear_bhb_loop+0x40/0x90 [ 1113.462253][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.462275][ T5603] RIP: 0033:0x7f948c6ece59 [ 1113.462294][ T5603] Code: Unable to access opcode bytes at 0x7f948c6ece2f. [ 1113.462306][ T5603] RSP: 002b:00007ffdc27f8b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1113.462329][ T5603] RAX: ffffffffffffffda RBX: 00007f948c78223c RCX: 00007f948c6ece59 [ 1113.462345][ T5603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1113.462358][ T5603] RBP: 0000000000000016 R08: 0000000000000000 R09: 00007f948c7821ca [ 1113.462372][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc27f9e50 [ 1113.462386][ T5603] R13: 00007f948c7821ca R14: 000055558cd9f4e8 R15: 00007ffdc27fc010 [ 1113.462410][ T5603] [ 1113.462418][ T5603] [ 1113.462425][ T5603] Allocated by task 5792: [ 1113.462435][ T5603] kasan_save_track+0x3e/0x80 [ 1113.462454][ T5603] __kasan_kmalloc+0x93/0xb0 [ 1113.462474][ T5603] __kmalloc_noprof+0x3e7/0x7b0 [ 1113.462491][ T5603] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1113.462511][ T5603] tomoyo_check_open_permission+0x229/0x470 [ 1113.462538][ T5603] security_file_open+0xa9/0x240 [ 1113.462566][ T5603] do_dentry_open+0x4c0/0x13e0 [ 1113.462593][ T5603] vfs_open+0x3b/0x350 [ 1113.462627][ T5603] path_openat+0x2e43/0x38a0 [ 1113.462648][ T5603] do_file_open+0x23e/0x4a0 [ 1113.462668][ T5603] do_sys_openat2+0x113/0x200 [ 1113.462694][ T5603] __x64_sys_openat+0x138/0x170 [ 1113.462722][ T5603] do_syscall_64+0x15f/0xf80 [ 1113.462746][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.462766][ T5603] [ 1113.462771][ T5603] Freed by task 5792: [ 1113.462780][ T5603] kasan_save_track+0x3e/0x80 [ 1113.462798][ T5603] kasan_save_free_info+0x46/0x50 [ 1113.462825][ T5603] __kasan_slab_free+0x5c/0x80 [ 1113.462844][ T5603] kfree+0x1c5/0x6c0 [ 1113.462861][ T5603] tomoyo_realpath_from_path+0x598/0x5d0 [ 1113.462881][ T5603] tomoyo_check_open_permission+0x229/0x470 [ 1113.462906][ T5603] security_file_open+0xa9/0x240 [ 1113.462932][ T5603] do_dentry_open+0x4c0/0x13e0 [ 1113.462957][ T5603] vfs_open+0x3b/0x350 [ 1113.462982][ T5603] path_openat+0x2e43/0x38a0 [ 1113.463002][ T5603] do_file_open+0x23e/0x4a0 [ 1113.463022][ T5603] do_sys_openat2+0x113/0x200 [ 1113.463049][ T5603] __x64_sys_openat+0x138/0x170 [ 1113.463076][ T5603] do_syscall_64+0x15f/0xf80 [ 1113.463100][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.463120][ T5603] [ 1113.463125][ T5603] The buggy address belongs to the object at ffff88804ee94000 [ 1113.463125][ T5603] which belongs to the cache kmalloc-4k of size 4096 [ 1113.463143][ T5603] The buggy address is located 2024 bytes inside of [ 1113.463143][ T5603] freed 4096-byte region [ffff88804ee94000, ffff88804ee95000) [ 1113.463165][ T5603] [ 1113.463171][ T5603] The buggy address belongs to the physical page: [ 1113.463182][ T5603] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ee90 [ 1113.463202][ T5603] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1113.463219][ T5603] flags: 0x80000000000040(head|node=0|zone=1) [ 1113.463237][ T5603] page_type: f5(slab) [ 1113.463257][ T5603] raw: 0080000000000040 ffff88801a011140 dead000000000100 dead000000000122 [ 1113.463275][ T5603] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1113.463294][ T5603] head: 0080000000000040 ffff88801a011140 dead000000000100 dead000000000122 [ 1113.463312][ T5603] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1113.463352][ T5603] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1113.463370][ T5603] head: 00000007f47f992a 0000000000000000 00000000ffffffff 0000000000000008 [ 1113.463380][ T5603] page dumped because: kasan: bad access detected [ 1113.463391][ T5603] page_owner tracks the page as allocated [ 1113.463399][ T5603] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 995, tgid 995 (kworker/u8:9), ts 189290830934, free_ts 188737529187 [ 1113.463435][ T5603] post_alloc_hook+0x22d/0x280 [ 1113.463456][ T5603] get_page_from_freelist+0x27c8/0x2840 [ 1113.463482][ T5603] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1113.463506][ T5603] allocate_slab+0x77/0x660 [ 1113.463533][ T5603] refill_objects+0x33c/0x3d0 [ 1113.463558][ T5603] __pcs_replace_empty_main+0x373/0x720 [ 1113.463587][ T5603] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1113.463617][ T5603] __alloc_skb+0x2c1/0x7d0 [ 1113.463639][ T5603] nsim_dev_trap_report_work+0x29f/0xbd0 [ 1113.463667][ T5603] process_scheduled_works+0xb5d/0x1860 [ 1113.463687][ T5603] worker_thread+0xa53/0xfc0 [ 1113.463707][ T5603] kthread+0x388/0x470 [ 1113.463731][ T5603] ret_from_fork+0x514/0xb70 [ 1113.463752][ T5603] ret_from_fork_asm+0x1a/0x30 [ 1113.463775][ T5603] page last free pid 5611 tgid 5611 stack trace: [ 1113.463787][ T5603] __free_frozen_pages+0xfa6/0x10f0 [ 1113.463808][ T5603] __slab_free+0x252/0x2a0 [ 1113.463828][ T5603] qlist_free_all+0x99/0x100 [ 1113.463846][ T5603] kasan_quarantine_reduce+0x148/0x160 [ 1113.463864][ T5603] __kasan_slab_alloc+0x22/0x80 [ 1113.463884][ T5603] __kmalloc_cache_noprof+0x338/0x690 [ 1113.463906][ T5603] usb_control_msg+0x73/0x3e0 [ 1113.463925][ T5603] hub_ext_port_status+0x116/0x820 [ 1113.463953][ T5603] hub_port_debounce+0x220/0x330 [ 1113.463974][ T5603] hub_event+0x1d7e/0x4f60 [ 1113.463996][ T5603] process_scheduled_works+0xb5d/0x1860 [ 1113.464015][ T5603] worker_thread+0xa53/0xfc0 [ 1113.464035][ T5603] kthread+0x388/0x470 [ 1113.464058][ T5603] ret_from_fork+0x514/0xb70 [ 1113.464078][ T5603] ret_from_fork_asm+0x1a/0x30 [ 1113.464101][ T5603] [ 1113.464106][ T5603] Memory state around the buggy address: [ 1113.464117][ T5603] ffff88804ee94680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1113.464131][ T5603] ffff88804ee94700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1113.464145][ T5603] >ffff88804ee94780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1113.464156][ T5603] ^ [ 1113.464167][ T5603] ffff88804ee94800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1113.464181][ T5603] ffff88804ee94880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1113.464191][ T5603] ================================================================== [ 1113.480428][ T5603] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1113.480450][ T5603] CPU: 0 UID: 0 PID: 5603 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1113.480473][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1113.480484][ T5603] Call Trace: [ 1113.480491][ T5603] [ 1113.480499][ T5603] vpanic+0x56c/0xa60 [ 1113.480528][ T5603] ? __pfx_vpanic+0x10/0x10 [ 1113.480550][ T5603] ? __pfx___schedule+0x10/0x10 [ 1113.480575][ T5603] panic+0xc5/0xd0 [ 1113.480602][ T5603] ? __pfx_panic+0x10/0x10 [ 1113.480625][ T5603] ? preempt_schedule_common+0x82/0xd0 [ 1113.480650][ T5603] ? rt_spin_lock+0x83/0x400 [ 1113.480668][ T5603] check_panic_on_warn+0x89/0xb0 [ 1113.480693][ T5603] ? rt_spin_lock+0x83/0x400 [ 1113.480711][ T5603] end_report+0x73/0x170 [ 1113.480732][ T5603] ? rt_spin_lock+0x83/0x400 [ 1113.480749][ T5603] kasan_report+0x128/0x150 [ 1113.480770][ T5603] ? rt_spin_lock+0x83/0x400 [ 1113.480792][ T5603] ? bt_accept_unlink+0x7d/0x2f0 [ 1113.480816][ T5603] __kasan_check_byte+0x2a/0x40 [ 1113.480836][ T5603] lock_acquire+0x84/0x350 [ 1113.480867][ T5603] ? __local_bh_disable_ip+0x3c/0x420 [ 1113.480889][ T5603] rt_spin_lock+0x83/0x400 [ 1113.480907][ T5603] ? bt_accept_unlink+0x7d/0x2f0 [ 1113.480932][ T5603] ? __pfx_rt_spin_lock+0x10/0x10 [ 1113.480951][ T5603] ? rcu_is_watching+0x15/0xb0 [ 1113.480975][ T5603] ? __local_bh_disable_ip+0x3c/0x420 [ 1113.480994][ T5603] ? bt_accept_unlink+0x61/0x2f0 [ 1113.481019][ T5603] bt_accept_unlink+0x7d/0x2f0 [ 1113.481043][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 1113.481068][ T5603] ? bt_accept_unlink+0x61/0x2f0 [ 1113.481094][ T5603] l2cap_sock_teardown_cb+0x17e/0x490 [ 1113.481118][ T5603] l2cap_chan_del+0xb5/0x610 [ 1113.481139][ T5603] ? l2cap_conn_del+0x331/0x570 [ 1113.481159][ T5603] l2cap_conn_del+0x33d/0x570 [ 1113.481180][ T5603] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1113.481199][ T5603] hci_conn_hash_flush+0x10d/0x260 [ 1113.481222][ T5603] hci_dev_close_sync+0x821/0x10e0 [ 1113.481242][ T5603] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1113.481259][ T5603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1113.481284][ T5603] ? hci_unregister_dev+0x212/0x5a0 [ 1113.481309][ T5603] hci_unregister_dev+0x21a/0x5a0 [ 1113.481333][ T5603] vhci_release+0x155/0x1b0 [ 1113.481352][ T5603] ? __pfx_vhci_release+0x10/0x10 [ 1113.481370][ T5603] __fput+0x461/0xa70 [ 1113.481400][ T5603] task_work_run+0x1d9/0x270 [ 1113.481426][ T5603] ? __pfx_task_work_run+0x10/0x10 [ 1113.481451][ T5603] ? do_exit+0x70a/0x22c0 [ 1113.481472][ T5603] ? kmem_cache_free+0x187/0x6c0 [ 1113.481493][ T5603] ? put_net+0x191/0x260 [ 1113.481510][ T5603] ? do_exit+0x70a/0x22c0 [ 1113.481534][ T5603] do_exit+0x70f/0x22c0 [ 1113.481557][ T5603] ? lockdep_hardirqs_on+0x7a/0x110 [ 1113.481582][ T5603] ? rt_spin_lock+0x1e0/0x400 [ 1113.481607][ T5603] ? __pfx_do_exit+0x10/0x10 [ 1113.481631][ T5603] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1113.481654][ T5603] ? rt_spin_unlock+0x160/0x200 [ 1113.481674][ T5603] do_group_exit+0x21b/0x2d0 [ 1113.481698][ T5603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.481717][ T5603] __x64_sys_exit_group+0x3f/0x40 [ 1113.481742][ T5603] x64_sys_call+0x221a/0x2240 [ 1113.481764][ T5603] do_syscall_64+0x15f/0xf80 [ 1113.481787][ T5603] ? trace_irq_disable+0x3b/0x140 [ 1113.481808][ T5603] ? clear_bhb_loop+0x40/0x90 [ 1113.481828][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.481846][ T5603] RIP: 0033:0x7f948c6ece59 [ 1113.481863][ T5603] Code: Unable to access opcode bytes at 0x7f948c6ece2f. [ 1113.481873][ T5603] RSP: 002b:00007ffdc27f8b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1113.481895][ T5603] RAX: ffffffffffffffda RBX: 00007f948c78223c RCX: 00007f948c6ece59 [ 1113.481909][ T5603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1113.481921][ T5603] RBP: 0000000000000016 R08: 0000000000000000 R09: 00007f948c7821ca [ 1113.481933][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc27f9e50 [ 1113.481946][ T5603] R13: 00007f948c7821ca R14: 000055558cd9f4e8 R15: 00007ffdc27fc010 [ 1113.481968][ T5603] [ 1113.482126][ T5603] Kernel Offset: disabled