last executing test programs: 10.115363588s ago: executing program 3 (id=5852): sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 7.746047048s ago: executing program 3 (id=5861): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x71c, &(0x7f0000000240)={0x0, 0x775e, 0x8000, 0x2, 0x180}, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r5, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7.72128358s ago: executing program 1 (id=5863): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.3033387s ago: executing program 0 (id=5870): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)}}, 0x0) 7.268672156s ago: executing program 0 (id=5871): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x4, 0x8, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x48, 0x29, 0x36, {0x5e, 0x5, '\x00', [@generic={0xff, 0x19, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff1"}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xf0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)="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", 0x800}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.735637475s ago: executing program 3 (id=5872): socket(0x6, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x4000004) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x1, '\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.214830268s ago: executing program 0 (id=5873): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x800, 0xfffffffd, 0x400000001d, 0x8000, 0x3, 0x10005, 0xfffffffffffffffd, 0x8001, 0x9, 0xfffffffe, 0x4}) 5.622909175s ago: executing program 2 (id=5878): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.579709678s ago: executing program 2 (id=5879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000011000000000000000000860090780000"], 0xfdef) 5.570808785s ago: executing program 4 (id=5880): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x10000002004cb, 0x0, 0xa1e, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0x10000, 0x202}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0xff, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0xf, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0xa000, 0xa, 0x10, 0x2, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.447114507s ago: executing program 4 (id=5881): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x88, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffc85, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.409724641s ago: executing program 4 (id=5882): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x71c, &(0x7f0000000240)={0x0, 0x775e, 0x8000, 0x2, 0x180}, &(0x7f0000000040), 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r5, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.259216805s ago: executing program 0 (id=5883): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="28000000010701010004000000000000010000091400078008170140000000060800024000000001961de6d75f265b21981f8c6654ccbc8c16f203632052178091fca6ebe1c2c9549545bed1eb9b4e7c931af447fd223300d06009d57fba0a0716587b4eb928113feb63b2f517f77bb621f69f37ea3feccfe62f43df87c8a6a1987c0ecb38d3c9b91dea1100a912ff4fc3d9a903"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) 5.101558819s ago: executing program 2 (id=5884): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.511017936s ago: executing program 1 (id=5885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd7000fddbdf25200000000800", @ANYRES32=r2, @ANYBLOB='<\x00-'], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 4.464683206s ago: executing program 4 (id=5886): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x10000002004cb, 0x0, 0xa1e, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.38261648s ago: executing program 3 (id=5887): socket(0x6, 0x1, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4000004) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.373482893s ago: executing program 1 (id=5888): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e0102030109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x0, 0x10, 0x2, {0x2, 0x31}}, 0x0}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.227091361s ago: executing program 4 (id=5889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000500)=""/156, 0x9c}], 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000840)="f16d5787cf4420a11019ee420f09391e3fdab2153dfe2c3b49e0aab86c49e9dd856426a14950b7eed09bfdaa681b5f040dc2ff334b161575375f0d1aca92847fe26bbc4ad3374dd8a0aec8b2a2130d0be181dcb7252271ac6c9c94cb13e17a833c69c7e4fcc02433b5a9634ce16b01dbb3c08b1066a52aecf1608ec69ecddd8ad66ccb4fc1362c68582a444d23", 0x8d}, {&(0x7f0000000700)="6841cff0e7670ac095c4aa54e5d569a6d8df96f1f0247f4b8cb7fc9da83674ac3138853801a4c8e5f785f1f11decd7ae79c18d72d7eb27ba0c428cef2a5f8891b6b3c209", 0x44}], 0x2, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x270, 0x20000000}, {0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x7ff}], 0x60, 0x40850}], 0x3, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}, {&(0x7f00000007c0)=""/96, 0x60}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000640)={@private1, r2}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000580)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYRES16=r0, @ANYRES64=r3, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x84}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.223523669s ago: executing program 0 (id=5890): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 3.149083443s ago: executing program 0 (id=5891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7}]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, 0x0, 0x0) dup2(r7, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r2, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1.934976157s ago: executing program 2 (id=5892): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f0000000480)='}\\\x00']}) symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendto(r0, 0x0, 0x0, 0x48801, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) 1.925741954s ago: executing program 4 (id=5893): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.804599074s ago: executing program 2 (id=5894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x10000002004cb, 0x0, 0xa1e, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.135025141s ago: executing program 1 (id=5895): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.10376111s ago: executing program 3 (id=5896): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x71c, &(0x7f0000000240)={0x0, 0x775e, 0x8000, 0x2, 0x180}, &(0x7f0000000040), &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x800) syz_io_uring_submit(0x0, r3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 734.865003ms ago: executing program 1 (id=5897): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001380)={&(0x7f0000001340)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 569.604618ms ago: executing program 2 (id=5898): socket(0x6, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x4000004) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x1, '\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 268.60966ms ago: executing program 1 (id=5899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 0s ago: executing program 3 (id=5900): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 5253][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1391.225281][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1391.225306][ T5889] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1391.225328][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1391.226829][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1391.226857][ T5889] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1391.226878][ T5889] usb 5-1: Manufacturer: syz [ 1391.242690][ T5889] usb 5-1: config 0 descriptor?? [ 1391.414190][T22859] usb 2-1: USB disconnect, device number 82 [ 1391.554169][ T5889] rc_core: IR keymap rc-hauppauge not found [ 1391.554198][ T5889] Registered IR keymap rc-empty [ 1391.557205][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.573021][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.594164][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1391.597279][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 1391.627679][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.646390][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.673053][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.698621][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.742675][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1391.763058][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1392.640397][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1392.653340][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1392.673073][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1392.700919][ T5889] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1392.725101][ T5889] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1392.725125][ T5889] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1392.762772][ T5889] usb 5-1: USB disconnect, device number 96 [ 1394.472686][T20284] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1394.637061][T20284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.637099][T20284] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1394.637112][T20284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.680678][T20284] usb 5-1: config 0 descriptor?? [ 1394.701525][T20284] pwc: Askey VC010 type 2 USB webcam detected. [ 1395.097022][T20284] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1395.097650][T20284] pwc: recv_control_msg error -32 req 02 val 2700 [ 1395.099379][T20284] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1395.099973][T20284] pwc: recv_control_msg error -32 req 04 val 1000 [ 1395.100736][T20284] pwc: recv_control_msg error -32 req 04 val 1300 [ 1395.135720][T20284] pwc: recv_control_msg error -32 req 04 val 1400 [ 1395.140273][T20284] pwc: recv_control_msg error -32 req 02 val 2000 [ 1395.168958][T20284] pwc: recv_control_msg error -32 req 02 val 2100 [ 1395.179876][T20284] pwc: recv_control_msg error -32 req 04 val 1500 [ 1395.185882][T20284] pwc: recv_control_msg error -32 req 02 val 2500 [ 1395.188977][T20284] pwc: recv_control_msg error -32 req 02 val 2400 [ 1395.393530][T20284] pwc: recv_control_msg error -32 req 02 val 2900 [ 1395.572777][ T5889] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1395.599638][T20284] pwc: recv_control_msg error -71 req 04 val 1100 [ 1395.600117][T20284] pwc: recv_control_msg error -71 req 04 val 1200 [ 1395.631206][T20284] pwc: Registered as video103. [ 1395.656743][T20284] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 1395.702963][T12973] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1395.734812][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 1395.735732][T20284] usb 5-1: USB disconnect, device number 97 [ 1395.737132][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.737189][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1395.737217][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1395.737243][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1395.737266][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.739862][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1395.739886][ T5889] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1395.739897][ T5889] usb 1-1: Manufacturer: syz [ 1395.754572][ T5889] usb 1-1: config 0 descriptor?? [ 1395.854812][T12973] usb 4-1: Using ep0 maxpacket: 16 [ 1395.861061][T12973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.861088][T12973] usb 4-1: config 0 has no interfaces? [ 1395.885206][T12973] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1395.885226][T12973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.885236][T12973] usb 4-1: Product: syz [ 1395.885244][T12973] usb 4-1: Manufacturer: syz [ 1395.885252][T12973] usb 4-1: SerialNumber: syz [ 1395.889642][T12973] usb 4-1: config 0 descriptor?? [ 1396.082680][ T5889] rc_core: IR keymap rc-hauppauge not found [ 1396.082709][ T5889] Registered IR keymap rc-empty [ 1396.083147][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1396.103073][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1396.124414][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1396.151746][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 1396.270909][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1396.290896][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.214885][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.233027][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.253423][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.273128][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.294793][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.322776][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.343416][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.371569][ T5889] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1397.398532][ T5889] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1397.398560][ T5889] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1397.448772][ T5889] usb 1-1: USB disconnect, device number 101 [ 1399.017196][T22859] usb 4-1: USB disconnect, device number 84 [ 1401.092980][T20284] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1401.243049][T20284] usb 3-1: Using ep0 maxpacket: 8 [ 1401.267335][T20284] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1401.267367][T20284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.267387][T20284] usb 3-1: Product: syz [ 1401.267402][T20284] usb 3-1: Manufacturer: syz [ 1401.267417][T20284] usb 3-1: SerialNumber: syz [ 1401.282679][ T5889] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1401.318501][T20284] usb 3-1: config 0 descriptor?? [ 1401.465817][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 1401.468550][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.468598][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1401.468625][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1401.468645][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1401.468669][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1401.469955][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1401.469977][ T5889] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1401.469997][ T5889] usb 4-1: Manufacturer: syz [ 1401.504643][ T5889] usb 4-1: config 0 descriptor?? [ 1401.700153][T20284] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1401.735587][T20284] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1401.975283][T23183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5380'. [ 1402.703445][T20284] usb 3-1: USB disconnect, device number 111 [ 1402.911958][ T5889] rc_core: IR keymap rc-hauppauge not found [ 1402.911981][ T5889] Registered IR keymap rc-empty [ 1402.912144][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1402.922757][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1402.944266][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1402.947566][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 1402.977873][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1402.992715][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.012760][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.032744][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.052748][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.073833][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.092827][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.971006][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1403.982727][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1404.002762][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1404.032479][ T5889] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1404.032507][ T5889] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1404.052739][ T5889] usb 4-1: USB disconnect, device number 85 [ 1404.124574][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1404.151370][T23205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1404.333110][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5389'. [ 1404.982168][T23228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5393'. [ 1405.003450][ T5889] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1405.672700][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 1405.675461][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.675493][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1405.675508][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1405.675519][ T5889] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1405.675531][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1405.676404][ T5889] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1405.676418][ T5889] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1405.676429][ T5889] usb 1-1: Manufacturer: syz [ 1405.735236][ T5889] usb 1-1: config 0 descriptor?? [ 1405.902753][T22859] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1406.053374][T22859] usb 3-1: Using ep0 maxpacket: 16 [ 1406.068231][T22859] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1406.068289][T22859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1406.068314][T22859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1406.068338][T22859] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1406.068361][T22859] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1406.071412][T22859] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1406.071440][T22859] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1406.071460][T22859] usb 3-1: Manufacturer: syz [ 1406.090297][T22859] usb 3-1: config 0 descriptor?? [ 1406.112785][ T5889] rc_core: IR keymap rc-hauppauge not found [ 1406.112806][ T5889] Registered IR keymap rc-empty [ 1406.112963][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.133260][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.213439][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1406.256773][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 1406.287455][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.322688][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.343105][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.362806][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.382759][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.402728][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.422716][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.442764][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.442828][T22859] rc_core: IR keymap rc-hauppauge not found [ 1406.442837][T22859] Registered IR keymap rc-empty [ 1406.443147][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.462797][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.477099][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.482779][ T5889] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1406.505879][ T5889] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1406.505904][ T5889] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1406.506549][T22859] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 1406.553453][T22859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input44 [ 1406.565838][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.594969][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.607555][ T5889] usb 1-1: USB disconnect, device number 102 [ 1406.613489][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.633669][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.653279][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.675162][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.693463][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.713131][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.741936][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.753010][T22859] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1406.823135][T22859] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1406.823152][T22859] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1406.946263][T22859] usb 3-1: USB disconnect, device number 112 [ 1408.300898][T23267] tipc: Enabling of bearer rejected, failed to enable media [ 1408.581151][T23278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5406'. [ 1412.672032][T23323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5421'. [ 1413.522037][T23326] tipc: Started in network mode [ 1413.522080][T23326] tipc: Node identity d6d3bab7074e, cluster identity 4711 [ 1413.532917][T23326] tipc: Enabled bearer , priority 0 [ 1413.535349][T23326] syzkaller0: entered promiscuous mode [ 1413.535370][T23326] syzkaller0: entered allmulticast mode [ 1413.556924][T23326] tipc: Resetting bearer [ 1413.593051][T23324] tipc: Resetting bearer [ 1413.828591][T23324] tipc: Disabling bearer [ 1413.968590][T23335] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5417'. [ 1414.334695][T23346] netlink: 'syz.1.5429': attribute type 3 has an invalid length. [ 1414.334718][T23346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5429'. [ 1414.865247][T23359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5432'. [ 1415.631275][T23365] binder: 23364:23365 ioctl 4018620d 0 returned -22 [ 1415.653811][T23365] binder: 23364:23365 ioctl c0306201 200000000380 returned -14 [ 1415.812941][T23373] tipc: Started in network mode [ 1415.812972][T23373] tipc: Node identity e679a12576a1, cluster identity 4711 [ 1415.813163][T23373] tipc: Enabled bearer , priority 0 [ 1415.815044][T23373] syzkaller0: entered promiscuous mode [ 1415.815070][T23373] syzkaller0: entered allmulticast mode [ 1415.863411][T23373] tipc: Resetting bearer [ 1415.900296][T23371] tipc: Resetting bearer [ 1416.936436][T23384] netlink: 'syz.0.5443': attribute type 3 has an invalid length. [ 1416.936452][T23384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1417.003238][T23371] tipc: Disabling bearer [ 1417.252805][T12973] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1417.397153][ T6553] tipc: Node number set to 2430116133 [ 1417.404386][T12973] usb 2-1: Using ep0 maxpacket: 32 [ 1417.416063][T12973] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1417.416091][T12973] usb 2-1: config 0 has no interface number 0 [ 1417.416140][T12973] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1417.420765][T12973] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1417.420796][T12973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.420817][T12973] usb 2-1: Product: syz [ 1417.420832][T12973] usb 2-1: Manufacturer: syz [ 1417.420847][T12973] usb 2-1: SerialNumber: syz [ 1417.444183][T12973] usb 2-1: config 0 descriptor?? [ 1419.221809][T23408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5448'. [ 1420.345397][T12973] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 1420.345454][T12973] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1420.345472][T12973] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1420.345567][T12973] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1420.383101][T12973] usb 2-1: USB disconnect, device number 83 [ 1420.692734][ T6551] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1420.876693][ T6551] usb 1-1: Using ep0 maxpacket: 32 [ 1420.922807][ T6551] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1420.922837][ T6551] usb 1-1: config 0 has no interface number 0 [ 1420.926749][ T6551] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1421.023600][ T6551] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1421.023690][ T6551] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.023886][ T6551] usb 1-1: Product: syz [ 1421.023946][ T6551] usb 1-1: Manufacturer: syz [ 1421.023994][ T6551] usb 1-1: SerialNumber: syz [ 1421.629432][ T6551] usb 1-1: config 0 descriptor?? [ 1421.774322][T23426] netlink: 'syz.3.5455': attribute type 3 has an invalid length. [ 1421.774345][T23426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5455'. [ 1422.042777][T12973] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1423.060173][T12973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.060231][T12973] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1423.060254][T12973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.079761][T12973] usb 3-1: config 0 descriptor?? [ 1423.099121][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.099258][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.488679][T23450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5454'. [ 1424.165833][ T6551] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1424.167221][ T6551] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1424.167294][ T6551] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1424.168483][ T6551] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1424.472925][ T5889] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1424.503101][T12973] ath6kl: Failed to read usb control message: -71 [ 1424.503153][T12973] ath6kl: Unable to read the bmi data from the device: -71 [ 1424.503169][T12973] ath6kl: Unable to recv target info: -71 [ 1424.519178][ T6551] usb 1-1: USB disconnect, device number 103 [ 1424.546940][T12973] ath6kl: Failed to init ath6kl core: -71 [ 1424.547503][T12973] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1424.592780][T12973] usb 3-1: USB disconnect, device number 113 [ 1424.732676][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 1424.738168][ T5889] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1424.738228][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1424.738258][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1424.738285][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1424.738309][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.739448][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1424.739476][ T5889] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1424.739497][ T5889] usb 4-1: Manufacturer: syz [ 1424.745691][ T5889] usb 4-1: config 0 descriptor?? [ 1424.982720][T12973] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1425.072737][ T5889] rc_core: IR keymap rc-hauppauge not found [ 1425.072759][ T5889] Registered IR keymap rc-empty [ 1425.073211][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.093734][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.115200][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1425.118580][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input45 [ 1425.132718][T12973] usb 2-1: Using ep0 maxpacket: 32 [ 1425.135366][T12973] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1425.135392][T12973] usb 2-1: config 0 has no interface number 0 [ 1425.135439][T12973] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1425.138390][T12973] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1425.138419][T12973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.138439][T12973] usb 2-1: Product: syz [ 1425.138452][T12973] usb 2-1: Manufacturer: syz [ 1425.138466][T12973] usb 2-1: SerialNumber: syz [ 1425.166772][T12973] usb 2-1: config 0 descriptor?? [ 1425.170414][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.192442][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.203190][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.223065][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.245125][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.264137][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.283545][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.303122][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.323036][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.343014][ T5889] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1425.385129][ T5889] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1425.385146][ T5889] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1425.500498][ T5889] usb 4-1: USB disconnect, device number 86 [ 1427.581961][T23489] tipc: Enabled bearer , priority 0 [ 1427.589936][T23489] syzkaller0: entered promiscuous mode [ 1427.589953][T23489] syzkaller0: entered allmulticast mode [ 1427.790621][T12973] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1427.790685][T12973] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1427.790702][T12973] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1427.790793][T12973] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1427.830953][T12973] usb 2-1: USB disconnect, device number 84 [ 1427.868955][T23492] tipc: Resetting bearer [ 1427.903451][T23488] tipc: Resetting bearer [ 1428.261412][T23502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5476'. [ 1429.075130][T23488] tipc: Disabling bearer [ 1429.266896][T12973] tipc: Node number set to 3516775095 [ 1429.402793][T22859] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1430.461602][T22859] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1430.461634][T22859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.467066][T22859] usb 3-1: config 0 descriptor?? [ 1430.494102][T22859] cp210x 3-1:0.0: cp210x converter detected [ 1430.906915][T23532] fuse: Bad value for 'fd' [ 1430.955872][T22859] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1430.958524][T22859] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1430.958582][T22859] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1431.008663][T22859] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1431.042118][T22859] usb 3-1: USB disconnect, device number 114 [ 1431.054610][T23539] tipc: Started in network mode [ 1431.054640][T23539] tipc: Node identity ead033cc6989, cluster identity 4711 [ 1431.054828][T23539] tipc: Enabled bearer , priority 0 [ 1431.055626][T23539] syzkaller0: entered promiscuous mode [ 1431.055648][T23539] syzkaller0: entered allmulticast mode [ 1431.055993][T23535] binder: 23534:23535 ioctl 4018620d 0 returned -22 [ 1431.188261][T22859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1431.197503][T22859] cp210x 3-1:0.0: device disconnected [ 1431.334555][T23535] binder: 23534:23535 ioctl c0306201 200000000380 returned -14 [ 1431.355908][T23544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5490'. [ 1432.096504][T23541] tipc: Resetting bearer [ 1432.136661][T23537] tipc: Resetting bearer [ 1432.333490][T23537] tipc: Disabling bearer [ 1432.382698][T22859] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1432.492898][ T6553] tipc: Node number set to 2203661260 [ 1432.545045][T22859] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1432.545078][T22859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.545098][T22859] usb 3-1: Product: syz [ 1432.545113][T22859] usb 3-1: Manufacturer: syz [ 1432.545127][T22859] usb 3-1: SerialNumber: syz [ 1432.614222][T22859] usb 3-1: config 0 descriptor?? [ 1432.823998][T22859] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1432.901025][T23575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1434.078381][T22859] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1434.096416][T22859] usb 3-1: USB disconnect, device number 115 [ 1434.298644][ T5889] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1434.447104][ T5889] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1434.447137][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.489939][ T5889] usb 5-1: config 0 descriptor?? [ 1434.504560][ T5889] cp210x 5-1:0.0: cp210x converter detected [ 1435.720439][ T5889] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1435.730472][ T5889] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1435.730524][ T5889] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1435.751601][ T5889] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1435.774691][ T5889] usb 5-1: USB disconnect, device number 98 [ 1435.839241][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1435.839980][ T5889] cp210x 5-1:0.0: device disconnected [ 1435.902810][T23599] tipc: Enabled bearer , priority 0 [ 1435.921078][T23599] syzkaller0: entered promiscuous mode [ 1435.921102][T23599] syzkaller0: entered allmulticast mode [ 1436.245105][T23613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5515'. [ 1437.544797][T23603] tipc: Resetting bearer [ 1437.545519][ T6551] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1437.582983][T23598] tipc: Resetting bearer [ 1437.697744][ T6551] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1437.697767][ T6551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.697778][ T6551] usb 3-1: Product: syz [ 1437.697786][ T6551] usb 3-1: Manufacturer: syz [ 1437.697793][ T6551] usb 3-1: SerialNumber: syz [ 1437.814300][T23598] tipc: Disabling bearer [ 1437.923499][T16488] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1438.074197][T16488] usb 4-1: Using ep0 maxpacket: 32 [ 1438.076061][T16488] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1438.076082][T16488] usb 4-1: config 0 has no interface number 0 [ 1438.078855][T16488] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1438.078884][T16488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.078961][T16488] usb 4-1: Product: syz [ 1438.078977][T16488] usb 4-1: Manufacturer: syz [ 1438.078991][T16488] usb 4-1: SerialNumber: syz [ 1438.164708][T16488] usb 4-1: config 0 descriptor?? [ 1438.188376][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1438.188412][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1438.189895][T16488] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1438.442097][T16488] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1438.538815][T16488] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1438.595899][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1438.659348][T16488] usb 4-1: USB disconnect, device number 87 [ 1438.794196][ T6553] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1438.897552][T16488] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1438.969040][ T6553] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.969058][ T6553] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1438.969079][ T6553] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1438.969091][ T6553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.987972][T16488] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1439.005374][T16488] quatech2 4-1:0.51: device disconnected [ 1439.043854][ T6553] usb 2-1: config 0 descriptor?? [ 1439.433796][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1439.436162][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1439.545045][T23645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5528'. [ 1440.404545][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1440.404604][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1440.405355][ T6551] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1440.464047][ T6551] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1440.492771][ T6551] usb 3-1: USB disconnect, device number 116 [ 1440.642748][T16488] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1440.795378][T16488] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1440.795410][T16488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.810307][T16488] usb 5-1: config 0 descriptor?? [ 1440.826629][T16488] cp210x 5-1:0.0: cp210x converter detected [ 1441.027183][T16488] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1441.027215][T16488] cp210x 5-1:0.0: querying part number failed [ 1441.091628][T16488] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1441.103531][T16488] usb 5-1: USB disconnect, device number 99 [ 1441.132387][T16488] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1441.153155][T16488] cp210x 5-1:0.0: device disconnected [ 1441.428323][T23668] netlink: 'syz.3.5533': attribute type 4 has an invalid length. [ 1442.200696][T23685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5540'. [ 1442.933085][ T10] usb 2-1: USB disconnect, device number 85 [ 1443.334628][ T6552] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1443.826959][ T6552] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.829301][ T6552] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1443.997116][ T6552] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1443.997149][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.997170][ T6552] usb 5-1: Product: syz [ 1443.997185][ T6552] usb 5-1: Manufacturer: syz [ 1443.997200][ T6552] usb 5-1: SerialNumber: syz [ 1444.099168][ T6552] usb 5-1: config 0 descriptor?? [ 1444.128430][ T6552] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1444.177255][ T6552] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1444.178229][ T6552] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1444.178288][ T6552] usb 5-1: media controller created [ 1444.246790][ T6552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1445.542309][ T6552] DVB: Unable to find symbol tda10046_attach() [ 1445.542338][ T6552] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1445.542353][ T6552] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1445.633324][ T6551] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1445.804356][ T6551] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.804383][ T6551] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1445.804468][ T6551] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1445.804493][ T6551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.859823][ T6551] usb 1-1: config 0 descriptor?? [ 1446.694568][ T6552] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1446.742743][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1446.765219][ T6552] usb 5-1: USB disconnect, device number 100 [ 1446.916005][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.916033][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1446.916072][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1446.916098][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.947698][ T10] usb 3-1: config 0 descriptor?? [ 1447.513529][ T6551] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1448.154724][ T6552] usb 1-1: USB disconnect, device number 104 [ 1448.364630][ T6551] usb 4-1: Using ep0 maxpacket: 16 [ 1449.153314][ T6551] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1449.153372][ T6551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1449.153487][ T6551] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1449.153515][ T6551] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1449.153539][ T6551] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1449.156814][ T6551] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1449.156844][ T6551] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1449.156865][ T6551] usb 4-1: Manufacturer: syz [ 1449.255998][ T6551] usb 4-1: config 0 descriptor?? [ 1449.555829][T23757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1449.644302][ T6551] rc_core: IR keymap rc-hauppauge not found [ 1449.644318][ T6551] Registered IR keymap rc-empty [ 1449.644673][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.663152][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.684069][ T6551] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1449.686533][ T6551] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 1449.692224][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.724173][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.758135][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.773732][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.793054][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.820884][T23765] netlink: 'syz.0.5559': attribute type 4 has an invalid length. [ 1449.823034][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.843564][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.863097][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.882880][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.902865][ T6551] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1449.935180][ T6551] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1449.935197][ T6551] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1450.001574][ T6551] usb 4-1: USB disconnect, device number 88 [ 1450.212398][ T6552] usb 3-1: USB disconnect, device number 117 [ 1451.342698][ T10] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1451.504533][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1451.507126][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1451.507153][ T10] usb 2-1: config 0 has no interface number 0 [ 1451.507202][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1451.510103][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1451.510133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.510153][ T10] usb 2-1: Product: syz [ 1451.510168][ T10] usb 2-1: Manufacturer: syz [ 1451.510182][ T10] usb 2-1: SerialNumber: syz [ 1451.564597][ T10] usb 2-1: config 0 descriptor?? [ 1452.272698][T22859] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1452.434839][T22859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.434875][T22859] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1452.434888][T22859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.506387][T22859] usb 3-1: config 0 descriptor?? [ 1452.657631][T22859] pwc: Askey VC010 type 2 USB webcam detected. [ 1453.066741][T22859] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1453.068955][T22859] pwc: recv_control_msg error -32 req 02 val 2700 [ 1453.071280][T22859] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1453.082087][T22859] pwc: recv_control_msg error -32 req 04 val 1000 [ 1453.103626][T22859] pwc: recv_control_msg error -32 req 04 val 1300 [ 1453.107122][T22859] pwc: recv_control_msg error -32 req 04 val 1400 [ 1453.108689][T22859] pwc: recv_control_msg error -32 req 02 val 2000 [ 1453.110437][T22859] pwc: recv_control_msg error -32 req 02 val 2100 [ 1453.116916][T22859] pwc: recv_control_msg error -32 req 04 val 1500 [ 1453.146972][T22859] pwc: recv_control_msg error -32 req 02 val 2500 [ 1453.150658][T22859] pwc: recv_control_msg error -32 req 02 val 2400 [ 1453.207499][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1453.207608][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1453.207626][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1453.208608][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1453.307437][ T10] usb 2-1: USB disconnect, device number 86 [ 1453.366686][T22859] pwc: recv_control_msg error -32 req 02 val 2900 [ 1453.572131][T22859] pwc: recv_control_msg error -71 req 04 val 1100 [ 1453.572676][T22859] pwc: recv_control_msg error -71 req 04 val 1200 [ 1453.612977][T22859] pwc: Registered as video103. [ 1453.644677][T22859] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 1453.683924][T22859] usb 3-1: USB disconnect, device number 118 [ 1454.118572][T23809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1457.127917][T23833] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5587'. [ 1458.127461][T23839] binder_alloc: 23838: binder_alloc_buf size -888 failed, no address space [ 1458.127598][T23839] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 1458.575742][T23849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5591'. [ 1459.242772][ T5889] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1459.374616][T23851] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5592'. [ 1459.392692][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 1459.396477][ T5889] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1459.396506][ T5889] usb 3-1: config 0 has no interface number 0 [ 1459.396559][ T5889] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1459.399980][ T5889] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1459.400010][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.400031][ T5889] usb 3-1: Product: syz [ 1459.400046][ T5889] usb 3-1: Manufacturer: syz [ 1459.400069][ T5889] usb 3-1: SerialNumber: syz [ 1459.427762][ T5889] usb 3-1: config 0 descriptor?? [ 1460.664522][ T6553] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1460.672363][ T6553] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1460.752721][T22859] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1460.862696][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1460.892711][T12973] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1460.903174][T22859] usb 1-1: Using ep0 maxpacket: 8 [ 1460.917621][T22859] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1460.917639][T22859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.917650][T22859] usb 1-1: Product: syz [ 1460.917658][T22859] usb 1-1: Manufacturer: syz [ 1460.917666][T22859] usb 1-1: SerialNumber: syz [ 1460.949967][T22859] usb 1-1: config 0 descriptor?? [ 1461.013012][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1461.017291][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1461.017320][ T10] usb 2-1: config 0 has no interface number 0 [ 1461.030188][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1461.030270][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.030290][ T10] usb 2-1: Product: syz [ 1461.030304][ T10] usb 2-1: Manufacturer: syz [ 1461.030318][ T10] usb 2-1: SerialNumber: syz [ 1461.041405][ T10] usb 2-1: config 0 descriptor?? [ 1461.051189][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1461.073256][T12973] usb 4-1: config 0 has no interfaces? [ 1461.081884][T12973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1461.082716][T12973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1461.082739][T12973] usb 4-1: SerialNumber: syz [ 1461.111365][T12973] usb 4-1: config 0 descriptor?? [ 1461.141480][T23872] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5600'. [ 1461.175916][T22859] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 1461.176568][T22859] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1461.214599][T22859] usb 1-1: USB disconnect, device number 105 [ 1461.964636][ T5889] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1461.964742][ T5889] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1461.964760][ T5889] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1461.964908][ T5889] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1462.037063][ T5889] usb 3-1: USB disconnect, device number 119 [ 1462.677576][ T6553] usb 4-1: USB disconnect, device number 89 [ 1463.423035][T23889] CIFS mount error: No usable UNC path provided in device string! [ 1463.423035][T23889] [ 1463.423049][T23889] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1464.248125][ T10] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1464.248422][ T10] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 1464.308006][ T10] usb 2-1: USB disconnect, device number 87 [ 1465.998698][T23903] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1466.472872][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1466.582870][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1466.622702][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1466.625201][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.625252][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1466.625279][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1466.625307][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1466.625330][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1466.626765][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1466.626792][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1466.626812][ T10] usb 4-1: Manufacturer: syz [ 1466.640592][ T10] usb 4-1: config 0 descriptor?? [ 1466.742722][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1466.744758][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.744791][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1466.744840][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1466.744855][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1466.744867][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1466.745820][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1466.745836][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1466.745847][ T9] usb 5-1: Manufacturer: syz [ 1466.773394][ T9] usb 5-1: config 0 descriptor?? [ 1467.082731][ T10] rc_core: IR keymap rc-hauppauge not found [ 1467.082750][ T10] Registered IR keymap rc-empty [ 1467.083189][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.103077][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.124349][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1467.127525][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 1467.225347][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.233053][ T9] rc_core: IR keymap rc-hauppauge not found [ 1467.233073][ T9] Registered IR keymap rc-empty [ 1467.233508][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.243384][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.253259][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.263188][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.274680][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 1467.283136][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.284439][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input49 [ 1467.298445][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.303273][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.313471][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.323281][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.335993][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.362805][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.365874][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.383171][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.383874][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.403119][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.409335][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.423870][ T10] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1467.424530][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.443818][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.467329][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.483125][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1467.511497][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1467.511513][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1467.527649][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1467.527676][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1467.613619][ T10] usb 4-1: USB disconnect, device number 90 [ 1467.619632][ T9] usb 5-1: USB disconnect, device number 101 [ 1467.806674][ T6552] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1468.007363][ T6552] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1468.012684][T12973] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1468.197422][T12973] usb 1-1: config 0 has no interfaces? [ 1468.199367][T12973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1468.199384][T12973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1468.199395][T12973] usb 1-1: SerialNumber: syz [ 1468.226790][T12973] usb 1-1: config 0 descriptor?? [ 1468.382739][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1469.462405][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1469.476667][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.476702][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1469.476718][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1469.476729][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1469.476741][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.479597][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1469.479628][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1469.479650][ T10] usb 4-1: Manufacturer: syz [ 1469.486323][ T10] usb 4-1: config 0 descriptor?? [ 1469.962970][ T10] rc_core: IR keymap rc-hauppauge not found [ 1469.962991][ T10] Registered IR keymap rc-empty [ 1469.963183][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1469.987942][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.004325][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1470.007308][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 1470.051271][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.071956][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.100519][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.112752][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.132742][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.152866][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.173305][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.193308][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.212959][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.232749][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1470.257757][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1470.257774][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1470.354920][ T10] usb 4-1: USB disconnect, device number 91 [ 1470.783445][ T6553] usb 1-1: USB disconnect, device number 106 [ 1471.182828][ T6552] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1471.332801][ T6552] usb 2-1: Using ep0 maxpacket: 16 [ 1471.335072][ T6552] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.335133][ T6552] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1471.335151][ T6552] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1471.335165][ T6552] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1471.335177][ T6552] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1471.336532][ T6552] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1471.336549][ T6552] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1471.336560][ T6552] usb 2-1: Manufacturer: syz [ 1471.339493][ T6552] usb 2-1: config 0 descriptor?? [ 1473.613105][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1474.663491][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.663527][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.663549][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1474.663590][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1474.663603][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.789840][ T10] usb 5-1: config 0 descriptor?? [ 1475.153783][ T6552] rc_core: IR keymap rc-hauppauge not found [ 1475.153804][ T6552] Registered IR keymap rc-empty [ 1475.154264][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.180774][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.194160][ T6552] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1475.199548][ T6552] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 1475.279010][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.293218][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.293697][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1475.293816][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1475.324065][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.342997][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.363136][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.383101][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.399609][ T10] usb 5-1: USB disconnect, device number 102 [ 1475.408857][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.424621][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.443018][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.463017][ T6552] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1475.487591][ T6552] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1475.487624][ T6552] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1475.523449][ T6552] usb 2-1: USB disconnect, device number 88 [ 1475.708966][ T6553] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1475.767062][ T6553] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1475.852339][T24013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5638'. [ 1476.112712][ T6552] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1476.279339][ T6552] usb 2-1: config 0 has no interfaces? [ 1476.293605][ T6552] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1476.293640][ T6552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1476.293662][ T6552] usb 2-1: SerialNumber: syz [ 1476.337021][ T6552] usb 2-1: config 0 descriptor?? [ 1476.722781][ T6552] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1476.874507][ T6552] usb 4-1: Using ep0 maxpacket: 32 [ 1476.891202][ T6552] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1476.891237][ T6552] usb 4-1: config 0 has no interface number 0 [ 1476.891287][ T6552] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1476.917680][ T6552] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1476.917712][ T6552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.917733][ T6552] usb 4-1: Product: syz [ 1476.917747][ T6552] usb 4-1: Manufacturer: syz [ 1476.917762][ T6552] usb 4-1: SerialNumber: syz [ 1476.971333][ T6552] usb 4-1: config 0 descriptor?? [ 1478.007734][ T6553] usb 2-1: USB disconnect, device number 89 [ 1478.512713][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1478.626739][ T6552] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1478.626796][ T6552] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1478.626813][ T6552] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1478.626903][ T6552] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1478.667589][ T6552] usb 4-1: USB disconnect, device number 92 [ 1478.686338][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1478.704916][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.704953][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1478.704968][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1478.705057][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1478.705070][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.706105][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1478.706122][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1478.706132][ T10] usb 1-1: Manufacturer: syz [ 1478.856713][ T10] usb 1-1: config 0 descriptor?? [ 1479.052730][T12973] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1479.239563][T12973] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1479.239596][T12973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.239617][T12973] usb 2-1: Product: syz [ 1479.239631][T12973] usb 2-1: Manufacturer: syz [ 1479.239646][T12973] usb 2-1: SerialNumber: syz [ 1479.718236][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1479.718669][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1481.158518][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1481.169969][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1481.390046][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5655'. [ 1481.635208][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1481.635269][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1481.693953][T12973] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1481.730910][T12973] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1481.742666][ T10] rc_core: IR keymap rc-hauppauge not found [ 1481.742686][ T10] Registered IR keymap rc-empty [ 1481.743079][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.763104][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.784514][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1481.798417][T12973] usb 2-1: USB disconnect, device number 90 [ 1481.815916][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input52 [ 1481.852777][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.872992][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.894461][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.913192][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.934410][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.952722][ T5889] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1481.954026][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.973223][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1481.995512][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1482.013336][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1482.033405][ T10] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 1482.065169][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1482.065509][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1482.079507][ T10] usb 1-1: USB disconnect, device number 107 [ 1482.108704][ T5889] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 1482.118376][ T5889] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1482.118406][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.118537][ T5889] usb 5-1: Product: syz [ 1482.118553][ T5889] usb 5-1: Manufacturer: syz [ 1482.118567][ T5889] usb 5-1: SerialNumber: syz [ 1482.177652][ T5889] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1482.639227][T17499] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1482.959290][T24104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.970659][T24104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.030929][T24104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.047500][T24104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.086322][T24104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.089075][T24104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.083230][T17499] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1484.083945][T17499] ath9k_htc: Failed to initialize the device [ 1484.539446][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.539543][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.102407][ T10] usb 5-1: USB disconnect, device number 103 [ 1485.134972][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 1486.302725][ T6552] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1486.463651][ T6552] usb 5-1: Using ep0 maxpacket: 8 [ 1486.465642][ T6552] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1486.471343][ T6552] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 1486.471367][ T6552] usb 5-1: config 7 has no interface number 0 [ 1486.502719][ T6551] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1486.504323][ T6552] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1486.505356][ T6552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.505381][ T6552] usb 5-1: Product: syz [ 1486.505396][ T6552] usb 5-1: Manufacturer: syz [ 1486.505809][ T6552] usb 5-1: SerialNumber: syz [ 1486.551090][T23694] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1486.677866][ T6551] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1486.677896][ T6551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.705489][ T6551] usb 4-1: config 0 descriptor?? [ 1486.722724][T23694] usb 3-1: Using ep0 maxpacket: 32 [ 1486.724761][T23694] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1486.724788][T23694] usb 3-1: config 0 has no interface number 0 [ 1486.724818][T23694] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1486.724832][T23694] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1486.725864][ T6551] cp210x 4-1:0.0: cp210x converter detected [ 1486.728124][T23694] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1486.728178][T23694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.728190][T23694] usb 3-1: Product: syz [ 1486.728197][T23694] usb 3-1: Manufacturer: syz [ 1486.728208][T23694] usb 3-1: SerialNumber: syz [ 1486.880841][T24142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.891306][T24142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1486.905674][T23694] usb 3-1: config 0 descriptor?? [ 1486.939103][ T6552] usbhid 5-1:7.67: couldn't find an input interrupt endpoint [ 1486.951359][ T6552] usb 5-1: USB disconnect, device number 104 [ 1487.332153][T23694] appletouch 3-1:0.85: Geyser mode initialized. [ 1487.372173][ T6551] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1487.372205][ T6551] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1487.417682][T23694] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input53 [ 1487.460571][ T6551] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1487.530615][ T6551] usb 4-1: USB disconnect, device number 93 [ 1487.563275][T23694] usb 3-1: USB disconnect, device number 120 [ 1487.585381][ T6551] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1487.586127][ T6551] cp210x 4-1:0.0: device disconnected [ 1488.652880][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1488.653071][ T5889] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1488.690561][T23694] appletouch 3-1:0.85: input: appletouch disconnected [ 1488.782866][ T10] usb 2-1: device descriptor read/64, error -71 [ 1488.801734][T24152] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5673'. [ 1488.817183][ T5889] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1488.817214][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.817233][ T5889] usb 1-1: Product: syz [ 1488.817248][ T5889] usb 1-1: Manufacturer: syz [ 1488.817262][ T5889] usb 1-1: SerialNumber: syz [ 1489.032769][ T10] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1489.172717][ T10] usb 2-1: device descriptor read/64, error -71 [ 1489.326243][T24166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1489.962827][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1489.962892][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1489.963658][ T10] usb usb2-port1: attempt power cycle [ 1490.383814][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1490.414518][ T10] usb 2-1: device descriptor read/8, error -71 [ 1491.395163][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 1491.396925][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1491.599767][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 1491.599827][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1491.600587][ T5889] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1491.660602][ T5889] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1491.712280][ T5889] usb 1-1: USB disconnect, device number 108 [ 1491.792787][T23694] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1491.942681][T23694] usb 2-1: Using ep0 maxpacket: 8 [ 1491.946134][T23694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1491.947941][T23694] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 1491.947959][T23694] usb 2-1: config 7 has no interface number 0 [ 1491.963295][T23694] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1491.963326][T23694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.963345][T23694] usb 2-1: Product: syz [ 1491.963360][T23694] usb 2-1: Manufacturer: syz [ 1491.963375][T23694] usb 2-1: SerialNumber: syz [ 1491.992759][ T6553] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1492.158392][ T6553] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1492.158413][ T6553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.180401][ T6553] usb 3-1: config 0 descriptor?? [ 1492.214200][ T6553] cp210x 3-1:0.0: cp210x converter detected [ 1492.379968][T24189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.380529][T24189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.433191][T24191] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5686'. [ 1492.597944][T23694] usbhid 2-1:7.67: couldn't find an input interrupt endpoint [ 1492.618790][T23694] usb 2-1: USB disconnect, device number 95 [ 1492.639113][ T6553] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1492.639604][ T6553] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1492.639653][ T6553] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1492.698671][ T6553] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1492.723561][ T6553] usb 3-1: USB disconnect, device number 121 [ 1492.757644][ T6553] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1492.758377][ T6553] cp210x 3-1:0.0: device disconnected [ 1494.242737][ T5889] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1494.372738][ T5889] usb 4-1: device descriptor read/64, error -71 [ 1494.483572][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1494.610905][T24210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1494.612819][ T5889] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1494.643371][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1494.643392][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.643402][ T10] usb 3-1: Product: syz [ 1494.643409][ T10] usb 3-1: Manufacturer: syz [ 1494.643417][ T10] usb 3-1: SerialNumber: syz [ 1494.774345][ T5889] usb 4-1: device descriptor read/64, error -71 [ 1494.893238][ T5889] usb usb4-port1: attempt power cycle [ 1496.267180][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1496.267244][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1496.332731][ T5889] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1496.354204][ T5889] usb 4-1: device descriptor read/8, error -71 [ 1496.632748][ T5889] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1496.653558][ T5889] usb 4-1: device descriptor read/8, error -71 [ 1496.763466][ T5889] usb usb4-port1: unable to enumerate USB device [ 1496.854872][T17499] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1497.062758][T24237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5705'. [ 1497.551595][T17499] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1497.551629][T17499] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.608867][T17499] usb 2-1: config 0 descriptor?? [ 1497.637245][T17499] cp210x 2-1:0.0: cp210x converter detected [ 1497.997717][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1497.997830][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1498.037586][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1498.086372][T17499] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1498.086866][T17499] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1498.086913][T17499] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1498.102720][ T31] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1498.127038][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1498.141345][T17499] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1498.161027][T17499] usb 2-1: USB disconnect, device number 96 [ 1498.161755][ T10] usb 3-1: USB disconnect, device number 122 [ 1498.187402][T17499] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1498.187955][T17499] cp210x 2-1:0.0: device disconnected [ 1498.192686][ T6553] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1498.254841][ T31] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1498.254874][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.260119][ T31] usb 1-1: config 0 descriptor?? [ 1498.269378][ T31] cp210x 1-1:0.0: cp210x converter detected [ 1498.346189][ T6553] usb 4-1: Using ep0 maxpacket: 16 [ 1498.349288][ T6553] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.349332][ T6553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1498.349347][ T6553] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1498.349397][ T6553] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1498.349410][ T6553] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1498.350473][ T6553] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1498.350492][ T6553] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1498.350503][ T6553] usb 4-1: Manufacturer: syz [ 1498.389291][ T6553] usb 4-1: config 0 descriptor?? [ 1498.402751][T23694] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1498.468062][ T31] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1498.468090][ T31] cp210x 1-1:0.0: querying part number failed [ 1498.500391][ T31] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1498.583410][T23694] usb 5-1: Using ep0 maxpacket: 8 [ 1498.590154][T23694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1498.597444][T23694] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 1498.597471][T23694] usb 5-1: config 7 has no interface number 0 [ 1498.604359][T23694] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1498.604388][T23694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.604408][T23694] usb 5-1: Product: syz [ 1498.604422][T23694] usb 5-1: Manufacturer: syz [ 1498.604482][T23694] usb 5-1: SerialNumber: syz [ 1498.732750][ T6553] rc_core: IR keymap rc-hauppauge not found [ 1498.732773][ T6553] Registered IR keymap rc-empty [ 1498.733379][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.753178][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.775872][ T6553] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1498.781449][ T6553] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 1498.802091][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.813172][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.833098][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.854325][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.874819][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.893829][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.910976][T24248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.914481][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.914955][T24248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.944091][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.948680][T23694] usbhid 5-1:7.67: couldn't find an input interrupt endpoint [ 1498.963153][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1498.963583][T23694] usb 5-1: USB disconnect, device number 105 [ 1498.982999][ T6553] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1499.061922][T24259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5711'. [ 1499.251689][ T6553] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1499.251956][ T6553] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1499.724754][ T6553] usb 4-1: USB disconnect, device number 98 [ 1501.221715][ T10] usb 1-1: USB disconnect, device number 109 [ 1501.273670][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1501.274430][ T10] cp210x 1-1:0.0: device disconnected [ 1501.842689][T23694] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1501.843858][ T6553] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1501.996910][ T6553] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.996954][ T6553] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1502.000838][ T6553] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1502.000869][ T6553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.000889][ T6553] usb 1-1: Product: syz [ 1502.000905][ T6553] usb 1-1: Manufacturer: syz [ 1502.000925][ T6553] usb 1-1: SerialNumber: syz [ 1502.111695][T24285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1502.264519][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1502.855537][T23694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.855571][T23694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.855610][T23694] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1502.855633][T23694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.859346][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1502.859374][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.924504][T23694] usb 5-1: config 0 descriptor?? [ 1502.947628][ T6553] usb 1-1: config 0 descriptor?? [ 1502.982101][ T6553] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1502.994381][ T9] usb 3-1: config 0 descriptor?? [ 1502.998032][ T9] cp210x 3-1:0.0: cp210x converter detected [ 1504.302990][ T6553] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1504.313285][ T6553] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1504.313357][ T6553] usb 1-1: media controller created [ 1504.442944][ T6553] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1504.497084][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1504.497969][T23694] usbhid 5-1:0.0: can't add hid device: -71 [ 1504.498092][T23694] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1504.518527][ T9] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1504.519019][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1504.519067][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1504.575260][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1504.613409][ T9] usb 3-1: USB disconnect, device number 123 [ 1504.615130][T23694] usb 5-1: USB disconnect, device number 106 [ 1505.515402][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1505.516199][ T9] cp210x 3-1:0.0: device disconnected [ 1505.572721][ T6553] DVB: Unable to find symbol tda10046_attach() [ 1505.572738][ T6553] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1505.572751][ T6553] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1505.777797][ T6553] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1505.821549][ T6553] usb 1-1: USB disconnect, device number 110 [ 1506.017091][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1506.162907][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1506.165124][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.165180][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1506.165207][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1506.165232][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1506.165255][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1506.167955][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1506.167980][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1506.167999][ T9] usb 2-1: Manufacturer: syz [ 1506.214138][ T6553] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1506.267937][ T9] usb 2-1: config 0 descriptor?? [ 1506.362757][ T6553] usb 1-1: Using ep0 maxpacket: 8 [ 1506.367252][ T6553] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1506.369626][ T6553] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 1506.369653][ T6553] usb 1-1: config 7 has no interface number 0 [ 1506.393759][ T6553] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1506.393790][ T6553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.393810][ T6553] usb 1-1: Product: syz [ 1506.393825][ T6553] usb 1-1: Manufacturer: syz [ 1506.393847][ T6553] usb 1-1: SerialNumber: syz [ 1506.908250][T24324] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5733'. [ 1508.283920][T24308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1508.284395][T24308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.338517][ T6553] usbhid 1-1:7.67: couldn't find an input interrupt endpoint [ 1508.342693][ T9] rc_core: IR keymap rc-hauppauge not found [ 1508.342714][ T9] Registered IR keymap rc-empty [ 1508.343212][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.363037][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.398152][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1508.420342][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 1508.421946][ T6553] usb 1-1: USB disconnect, device number 111 [ 1508.465120][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.483088][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.503551][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.523015][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.543033][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.563040][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.583042][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.603088][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.623031][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.643035][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1508.665934][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1508.665960][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1508.701143][ T9] usb 2-1: USB disconnect, device number 97 [ 1509.495059][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1509.682794][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1509.684489][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.684523][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1509.684538][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1509.684552][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1509.684564][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1509.685517][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1509.685534][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1509.685545][ T9] usb 2-1: Manufacturer: syz [ 1509.691932][ T9] usb 2-1: config 0 descriptor?? [ 1509.755234][T17499] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1509.912839][T17499] usb 3-1: device descriptor read/64, error -71 [ 1510.172751][T17499] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1510.292873][ T9] rc_core: IR keymap rc-hauppauge not found [ 1510.292895][ T9] Registered IR keymap rc-empty [ 1510.293364][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.322751][T17499] usb 3-1: device descriptor read/64, error -71 [ 1510.323104][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.353588][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1510.356096][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56 [ 1510.389650][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.403430][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.423055][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.456913][T17499] usb usb3-port1: attempt power cycle [ 1510.460712][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.482978][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.513021][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.533138][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.554683][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.564060][ T6551] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1510.589444][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.620178][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 1510.673435][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1510.673462][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1510.712700][ T6551] usb 5-1: Using ep0 maxpacket: 32 [ 1510.717129][ T6551] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1510.717158][ T6551] usb 5-1: config 0 has no interface number 0 [ 1510.717224][ T6551] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1510.721803][ T6551] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1510.721834][ T6551] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.721853][ T6551] usb 5-1: Product: syz [ 1510.721867][ T6551] usb 5-1: Manufacturer: syz [ 1510.721882][ T6551] usb 5-1: SerialNumber: syz [ 1510.739361][ T6551] usb 5-1: config 0 descriptor?? [ 1510.749695][ T6551] smsc75xx v1.0.0 [ 1510.804648][T17499] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1510.809120][ T9] usb 2-1: USB disconnect, device number 98 [ 1510.834494][T17499] usb 3-1: device descriptor read/8, error -71 [ 1511.258524][T17499] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1511.316697][T24369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5745'. [ 1512.045919][ T6551] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1512.045949][T17499] usb 3-1: device descriptor read/8, error -71 [ 1512.045950][ T6551] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1512.153244][T17499] usb usb3-port1: unable to enumerate USB device [ 1513.742738][ T6551] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1513.742770][ T6551] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1513.742790][ T6551] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1513.743236][ T6551] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1513.828634][ T6551] usb 5-1: USB disconnect, device number 107 [ 1515.022699][ T31] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1515.182432][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 1515.187693][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1515.191437][ T31] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 1515.191463][ T31] usb 1-1: config 7 has no interface number 0 [ 1515.198612][ T31] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1515.198642][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.198662][ T31] usb 1-1: Product: syz [ 1515.198676][ T31] usb 1-1: Manufacturer: syz [ 1515.198689][ T31] usb 1-1: SerialNumber: syz [ 1515.428349][T24380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.429055][T24380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.447891][ T31] usbhid 1-1:7.67: couldn't find an input interrupt endpoint [ 1515.459011][ T31] usb 1-1: USB disconnect, device number 112 [ 1517.221211][ T31] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1517.404216][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.404243][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1517.409356][ T31] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1517.409374][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.409385][ T31] usb 2-1: Product: syz [ 1517.409393][ T31] usb 2-1: Manufacturer: syz [ 1517.409400][ T31] usb 2-1: SerialNumber: syz [ 1517.437368][ T31] usb 2-1: config 0 descriptor?? [ 1517.466666][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1517.504421][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1517.511794][ T31] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1517.511830][ T31] usb 2-1: media controller created [ 1517.595131][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1517.828413][ T31] DVB: Unable to find symbol tda10046_attach() [ 1517.828424][ T31] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1517.828433][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1517.842739][ T6553] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1517.973153][ T6553] usb 3-1: device descriptor read/64, error -71 [ 1518.212974][ T6553] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1518.392756][ T6553] usb 3-1: device descriptor read/64, error -71 [ 1518.503635][ T6553] usb usb3-port1: attempt power cycle [ 1518.674829][T24423] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1518.839274][ T31] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1518.842783][ T6553] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1518.883936][ T31] usb 2-1: USB disconnect, device number 99 [ 1518.885271][ T6553] usb 3-1: device descriptor read/8, error -71 [ 1519.132708][ T6553] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1519.153767][ T6553] usb 3-1: device descriptor read/8, error -71 [ 1519.263038][ T6553] usb usb3-port1: unable to enumerate USB device [ 1519.618521][ T6553] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1520.522660][ T6553] usb 4-1: Using ep0 maxpacket: 32 [ 1520.525169][ T6553] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1520.525196][ T6553] usb 4-1: config 0 has no interface number 0 [ 1520.527980][ T6553] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1520.528010][ T6553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.528028][ T6553] usb 4-1: Product: syz [ 1520.528048][ T6553] usb 4-1: Manufacturer: syz [ 1520.528063][ T6553] usb 4-1: SerialNumber: syz [ 1520.601174][ T6553] usb 4-1: config 0 descriptor?? [ 1520.639409][ T6553] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1520.852836][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1520.875710][ T6553] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1520.923092][ T6553] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1521.002703][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1521.010944][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1521.012375][ T9] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 1521.012401][ T9] usb 1-1: config 7 has no interface number 0 [ 1521.033187][ T9] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 1521.033217][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.033236][ T9] usb 1-1: Product: syz [ 1521.033251][ T9] usb 1-1: Manufacturer: syz [ 1521.033265][ T9] usb 1-1: SerialNumber: syz [ 1521.286011][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1521.287724][ T10] usb 4-1: USB disconnect, device number 99 [ 1521.322715][ T31] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1521.357748][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1521.370757][T24445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.373459][T24445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.386280][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1521.392166][ T9] usbhid 1-1:7.67: couldn't find an input interrupt endpoint [ 1521.392850][ T10] quatech2 4-1:0.51: device disconnected [ 1521.447618][ T9] usb 1-1: USB disconnect, device number 113 [ 1521.528312][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.528358][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1521.542755][ T31] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1521.542784][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.542802][ T31] usb 2-1: Product: syz [ 1521.542816][ T31] usb 2-1: Manufacturer: syz [ 1521.542831][ T31] usb 2-1: SerialNumber: syz [ 1521.602227][ T31] usb 2-1: config 0 descriptor?? [ 1521.625012][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1521.649622][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1521.650251][ T31] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1521.650285][ T31] usb 2-1: media controller created [ 1521.684103][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1522.680681][ T31] DVB: Unable to find symbol tda10046_attach() [ 1522.680699][ T31] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1522.680715][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1522.874653][ T6553] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1523.918566][ T6553] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.918612][ T6553] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1523.943401][ T6553] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1523.943431][ T6553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.943503][ T6553] usb 3-1: Product: syz [ 1523.943518][ T6553] usb 3-1: Manufacturer: syz [ 1523.943532][ T6553] usb 3-1: SerialNumber: syz [ 1523.962746][T20284] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1524.264013][ T6553] usb 3-1: config 0 descriptor?? [ 1524.307208][T20284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.307244][T20284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.307336][T20284] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1524.307360][T20284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.368363][T20284] usb 5-1: config 0 descriptor?? [ 1524.385393][ T6553] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1524.430684][ T6553] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1524.440718][ T6553] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1524.441163][ T6553] usb 3-1: media controller created [ 1524.507808][ T6553] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1524.634863][ T31] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1524.658695][ T31] usb 2-1: USB disconnect, device number 100 [ 1524.699764][ T6553] DVB: Unable to find symbol tda10046_attach() [ 1524.699776][ T6553] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1524.699785][ T6553] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1524.814444][T20284] usbhid 5-1:0.0: can't add hid device: -71 [ 1524.816195][T20284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1524.844605][T20284] usb 5-1: USB disconnect, device number 108 [ 1525.066063][T24495] syzkaller1: entered promiscuous mode [ 1525.066081][T24495] syzkaller1: entered allmulticast mode [ 1525.215954][T20284] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1526.195690][ T6553] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1526.240021][ T6553] usb 3-1: USB disconnect, device number 6 [ 1526.292701][T20284] usb 4-1: Using ep0 maxpacket: 32 [ 1526.295006][T20284] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1526.295033][T20284] usb 4-1: config 0 has no interface number 0 [ 1526.297298][T20284] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1526.297325][T20284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.297338][T20284] usb 4-1: Product: syz [ 1526.297346][T20284] usb 4-1: Manufacturer: syz [ 1526.297354][T20284] usb 4-1: SerialNumber: syz [ 1526.302273][T20284] usb 4-1: config 0 descriptor?? [ 1526.336802][T20284] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1530.324224][T20284] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1530.324524][T20284] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1530.349170][T20284] usb 4-1: USB disconnect, device number 100 [ 1532.433371][ T6553] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1532.702194][ T6553] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.705721][ T6553] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1532.723485][ T6553] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1532.725207][ T6553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.769183][T20284] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1533.346789][T24560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1533.348703][ T6553] usb 1-1: config 0 descriptor?? [ 1533.372743][T20284] usb 5-1: Using ep0 maxpacket: 32 [ 1533.378244][T20284] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1533.378260][T20284] usb 5-1: config 0 has no interface number 0 [ 1533.378292][T20284] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1533.380983][T20284] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1533.381001][T20284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.381012][T20284] usb 5-1: Product: syz [ 1533.381020][T20284] usb 5-1: Manufacturer: syz [ 1533.381028][T20284] usb 5-1: SerialNumber: syz [ 1533.449769][T20284] usb 5-1: config 0 descriptor?? [ 1533.733264][T23694] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1533.891340][T23694] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1533.891371][T23694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.943308][T23694] usb 2-1: config 0 descriptor?? [ 1533.966132][T23694] cp210x 2-1:0.0: cp210x converter detected [ 1534.167247][T23694] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1534.167646][T23694] cp210x 2-1:0.0: querying part number failed [ 1534.210345][T23694] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1535.383774][T17499] usb 1-1: USB disconnect, device number 114 [ 1535.435258][T20284] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 1535.435316][T20284] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1535.435334][T20284] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1535.435439][T20284] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1535.500217][T20284] usb 5-1: USB disconnect, device number 109 [ 1535.972695][T20284] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1536.133644][T20284] usb 5-1: Using ep0 maxpacket: 8 [ 1536.895643][T20284] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1536.895673][T20284] usb 5-1: config 179 has no interface number 0 [ 1536.895710][T20284] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1536.895725][T20284] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1536.895740][T20284] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1536.895756][T20284] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1536.895769][T20284] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1536.895793][T20284] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1536.895804][T20284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.928475][T24588] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1537.068651][ T6551] usb 2-1: USB disconnect, device number 101 [ 1538.120049][T20284] usb 5-1: USB disconnect, device number 110 [ 1538.120124][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1538.120186][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1538.222906][ T6551] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1538.223642][ T6551] cp210x 2-1:0.0: device disconnected [ 1538.450419][T23694] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input57 [ 1538.632895][ T9] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1539.751123][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1539.751143][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.751153][ T9] usb 1-1: Product: syz [ 1539.751161][ T9] usb 1-1: Manufacturer: syz [ 1539.751169][ T9] usb 1-1: SerialNumber: syz [ 1539.982731][T20284] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1540.132732][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1540.134954][T20284] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 1540.138582][T20284] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1540.138611][T20284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.138631][T20284] usb 5-1: Product: syz [ 1540.138645][T20284] usb 5-1: Manufacturer: syz [ 1540.138658][T20284] usb 5-1: SerialNumber: syz [ 1540.218650][T20284] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1540.235760][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1540.235821][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1540.303426][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1540.309313][T23694] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1540.334275][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1540.334304][ T10] usb 2-1: config 0 has no interface number 0 [ 1540.334406][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1540.380159][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1540.381758][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.381783][ T10] usb 2-1: Product: syz [ 1540.381798][ T10] usb 2-1: Manufacturer: syz [ 1540.381812][ T10] usb 2-1: SerialNumber: syz [ 1540.437561][ T10] usb 2-1: config 0 descriptor?? [ 1540.740736][T24628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.755634][T24628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.805867][T24628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.818577][T24628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.297064][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1541.297379][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1541.301777][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1541.792860][T23694] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1541.793051][T23694] ath9k_htc: Failed to initialize the device [ 1541.833167][ T6553] usb 5-1: USB disconnect, device number 111 [ 1541.872338][ T6553] usb 5-1: ath9k_htc: USB layer deinitialized [ 1541.920564][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1542.400829][T17499] usb 1-1: USB disconnect, device number 115 [ 1542.438508][ T10] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 58 failed: -71 [ 1542.438565][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1542.438584][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1542.438675][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1542.464216][ T6553] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1543.451170][ T10] usb 2-1: USB disconnect, device number 102 [ 1543.482682][ T6553] usb 5-1: Using ep0 maxpacket: 16 [ 1543.486781][ T6553] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1543.486839][ T6553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1543.486867][ T6553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1543.486894][ T6553] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1543.486918][ T6553] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.488361][ T6553] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1543.488387][ T6553] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1543.488406][ T6553] usb 5-1: Manufacturer: syz [ 1543.501227][T24305] udevd[24305]: setting owner of /dev/bus/usb/002/102 to uid=0, gid=0 failed: No such file or directory [ 1543.651570][ T6553] usb 5-1: config 0 descriptor?? [ 1544.042686][ T6553] rc_core: IR keymap rc-hauppauge not found [ 1544.042706][ T6553] Registered IR keymap rc-empty [ 1544.043139][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.063033][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.087232][ T6553] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1544.093818][ T6553] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 1544.125967][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.143020][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.165050][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.184144][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.204485][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.223116][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.243099][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.263318][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.283024][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.303228][ T6553] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1544.341982][ T6553] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1544.342531][ T6553] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1545.345052][ T6553] usb 5-1: USB disconnect, device number 112 [ 1545.692912][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1545.868398][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.868646][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1545.868671][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.907917][ T10] usb 2-1: config 0 descriptor?? [ 1545.931911][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1545.978811][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.978878][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.354818][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1546.357804][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1546.359446][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1546.360318][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1546.391323][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1546.408483][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1546.422689][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1546.425999][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1546.434744][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1546.436673][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 1546.457743][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 1546.467126][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 1546.472123][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 1546.472951][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 1546.492030][ T10] pwc: recv_control_msg error -32 req 04 val 1100 [ 1546.526396][ T10] pwc: Registered as video103. [ 1546.563051][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input59 [ 1546.773079][T20284] usb 2-1: USB disconnect, device number 103 [ 1546.912757][T23694] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1546.922830][ T6553] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1547.037685][T24700] syzkaller1: entered promiscuous mode [ 1547.037711][T24700] syzkaller1: entered allmulticast mode [ 1547.063411][T23694] usb 3-1: Using ep0 maxpacket: 8 [ 1547.068589][T23694] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1547.068617][T23694] usb 3-1: config 179 has no interface number 0 [ 1547.068662][T23694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1547.068688][T23694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1547.068716][T23694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1547.068741][T23694] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1547.068768][T23694] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1547.068809][T23694] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1547.068831][T23694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.073879][ T6553] usb 4-1: Using ep0 maxpacket: 32 [ 1547.076363][ T6553] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1547.076388][ T6553] usb 4-1: config 0 has no interface number 0 [ 1547.080528][ T6553] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1547.080555][ T6553] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.080575][ T6553] usb 4-1: Product: syz [ 1547.080588][ T6553] usb 4-1: Manufacturer: syz [ 1547.080602][ T6553] usb 4-1: SerialNumber: syz [ 1547.092341][T24692] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1547.112050][ T6553] usb 4-1: config 0 descriptor?? [ 1547.142509][ T6553] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1547.258491][T24689] syz.4.5850 (24689): drop_caches: 2 [ 1547.486353][ T6553] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1547.517748][ T10] usb 3-1: USB disconnect, device number 7 [ 1547.519364][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1547.519431][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1547.597064][ T6553] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1547.648662][T23694] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input60 [ 1547.702718][T17499] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1547.801330][ T5889] usb 4-1: USB disconnect, device number 101 [ 1547.802865][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1547.828698][ T5889] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1547.829002][T24706] binder: 24705:24706 ioctl 4018620d 0 returned -22 [ 1547.851561][T17499] usb 5-1: device descriptor read/64, error -71 [ 1547.870987][ T5889] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1547.888953][ T5889] quatech2 4-1:0.51: device disconnected [ 1548.817337][T24712] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5860'. [ 1548.933235][T17499] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1549.063875][T17499] usb 5-1: device descriptor read/64, error -71 [ 1549.173461][T17499] usb usb5-port1: attempt power cycle [ 1549.192741][ T5889] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1549.286250][T24733] binder: BINDER_SET_CONTEXT_MGR already set [ 1549.286262][T24733] binder: 24732:24733 ioctl 4018620d 200000000040 returned -16 [ 1549.354630][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1549.354660][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.354678][ T5889] usb 2-1: Product: syz [ 1549.354692][ T5889] usb 2-1: Manufacturer: syz [ 1549.354706][ T5889] usb 2-1: SerialNumber: syz [ 1549.398711][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1549.532852][T17499] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1549.565231][T17499] usb 5-1: device descriptor read/8, error -71 [ 1549.566992][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.567010][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.567023][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1549.567048][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1549.567266][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.606380][ T10] usb 3-1: config 0 descriptor?? [ 1549.800831][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1549.800934][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1549.812716][T17499] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1549.838470][T17499] usb 5-1: device descriptor read/8, error -71 [ 1549.943909][T17499] usb usb5-port1: unable to enumerate USB device [ 1550.064041][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1550.064687][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1550.096221][ T10] usb 3-1: USB disconnect, device number 8 [ 1550.162781][T20284] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1550.312713][T20284] usb 4-1: Using ep0 maxpacket: 32 [ 1550.317141][T20284] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1550.317168][T20284] usb 4-1: config 0 has no interface number 0 [ 1550.317279][T20284] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1550.319680][T20284] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1550.319708][T20284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.319728][T20284] usb 4-1: Product: syz [ 1550.319742][T20284] usb 4-1: Manufacturer: syz [ 1550.319757][T20284] usb 4-1: SerialNumber: syz [ 1550.326730][T20284] usb 4-1: config 0 descriptor?? [ 1550.560994][T24746] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5874'. [ 1550.812189][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1550.812245][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1550.817867][ T5889] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1550.867688][ T5889] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 1551.140902][T24760] syzkaller1: entered promiscuous mode [ 1551.140979][T24760] syzkaller1: entered allmulticast mode [ 1551.163947][T24762] binder: BINDER_SET_CONTEXT_MGR already set [ 1551.164140][T24762] binder: 24761:24762 ioctl 4018620d 200000000040 returned -16 [ 1551.597583][T24771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1551.602548][T24771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1551.636640][T20284] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 58 failed: -71 [ 1551.636695][T20284] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1551.636720][T20284] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1551.636809][T20284] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1551.699890][T20284] usb 4-1: USB disconnect, device number 102 [ 1551.842785][T17499] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1551.982833][T17499] usb 3-1: device descriptor read/64, error -71 [ 1552.066698][T20284] usb 2-1: USB disconnect, device number 104 [ 1552.178639][T24777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1552.232752][T17499] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1552.362871][T17499] usb 3-1: device descriptor read/64, error -71 [ 1553.033464][T20284] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1553.418930][T17499] usb usb3-port1: attempt power cycle [ 1553.500154][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1553.602724][T20284] usb 2-1: Using ep0 maxpacket: 8 [ 1553.604794][T20284] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1553.614724][T20284] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1553.614752][T20284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.614772][T20284] usb 2-1: Product: syz [ 1553.614785][T20284] usb 2-1: Manufacturer: syz [ 1553.614799][T20284] usb 2-1: SerialNumber: syz [ 1553.619356][ T37] audit: type=1326 audit(1770502883.673:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24793 comm="syz.0.5891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab5fc9aeb9 code=0x0 [ 1553.652716][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1553.655266][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1553.655291][ T10] usb 4-1: config 0 has no interface number 0 [ 1553.655340][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1553.658312][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1553.658339][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.658359][ T10] usb 4-1: Product: syz [ 1553.658373][ T10] usb 4-1: Manufacturer: syz [ 1553.658386][ T10] usb 4-1: SerialNumber: syz [ 1553.690358][ T10] usb 4-1: config 0 descriptor?? [ 1553.695997][ T10] f81534 4-1:0.12: required endpoints missing [ 1553.754864][T20284] usb 2-1: config 0 descriptor?? [ 1553.762698][T17499] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1553.802427][T17499] usb 3-1: device descriptor read/8, error -71 [ 1554.042750][T17499] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1554.064862][T17499] usb 3-1: device descriptor read/8, error -71 [ 1554.173064][T17499] usb usb3-port1: unable to enumerate USB device [ 1554.759903][T24804] No control pipe specified [ 1554.982842][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1555.152079][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1555.152098][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.152109][ T10] usb 5-1: Product: syz [ 1555.152117][ T10] usb 5-1: Manufacturer: syz [ 1555.152125][ T10] usb 5-1: SerialNumber: syz [ 1555.398464][T20284] usb 2-1: USB disconnect, device number 105 [ 1555.461396][ T6553] usb 4-1: USB disconnect, device number 103 [ 1555.705891][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1555.705927][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1556.422754][ T6553] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1556.572793][ T6553] usb 3-1: Using ep0 maxpacket: 32 [ 1556.579262][ T6553] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1556.579291][ T6553] usb 3-1: config 0 has no interface number 0 [ 1556.579344][ T6553] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1556.593280][ T6553] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1556.593311][ T6553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.593332][ T6553] usb 3-1: Product: syz [ 1556.593346][ T6553] usb 3-1: Manufacturer: syz [ 1556.593360][ T6553] usb 3-1: SerialNumber: syz [ 1556.689492][ T6553] usb 3-1: config 0 descriptor?? [ 1556.727854][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1556.727911][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1556.728857][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1556.797972][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1556.853760][ C1] ================================================================== [ 1556.853779][ C1] BUG: KASAN: slab-use-after-free in __inet_lookup_established+0x20d/0x850 [ 1556.853810][ C1] Read of size 8 at addr ffff8880380c4030 by task kworker/1:11/6551 [ 1556.853827][ C1] [ 1556.853842][ C1] CPU: 1 UID: 0 PID: 6551 Comm: kworker/1:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1556.853868][ C1] Tainted: [L]=SOFTLOCKUP [ 1556.853876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1556.853889][ C1] Workqueue: events mptcp_worker [ 1556.853912][ C1] Call Trace: [ 1556.853920][ C1] [ 1556.853929][ C1] dump_stack_lvl+0xe8/0x150 [ 1556.853955][ C1] print_report+0xba/0x230 [ 1556.853985][ C1] ? __inet_lookup_established+0x20d/0x850 [ 1556.854005][ C1] kasan_report+0x117/0x150 [ 1556.854031][ C1] ? __inet_lookup_established+0x20d/0x850 [ 1556.854054][ C1] __inet_lookup_established+0x20d/0x850 [ 1556.854078][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1556.854101][ C1] ? __pfx___inet_lookup_established+0x10/0x10 [ 1556.854125][ C1] tcp_v4_rcv+0x104d/0x3780 [ 1556.854145][ C1] ? raw_local_deliver+0x30a/0xf40 [ 1556.854180][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1556.854200][ C1] ? raw_local_deliver+0x30a/0xf40 [ 1556.854225][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1556.854243][ C1] ip_protocol_deliver_rcu+0x221/0x440 [ 1556.854263][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 1556.854275][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 1556.854287][ C1] NF_HOOK+0x336/0x3c0 [ 1556.854297][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1556.854307][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1556.854316][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1556.854326][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1556.854337][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1556.854347][ C1] ? skb_dst+0x4f/0xd0 [ 1556.854357][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1556.854367][ C1] NF_HOOK+0x336/0x3c0 [ 1556.854376][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1556.854389][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1556.854399][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1556.854408][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1556.854417][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1556.854428][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1556.854437][ C1] ? process_backlog+0x271/0xc60 [ 1556.854454][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1556.854470][ C1] process_backlog+0x569/0xc60 [ 1556.854499][ C1] __napi_poll+0xae/0x530 [ 1556.854520][ C1] net_rx_action+0x696/0xe00 [ 1556.854541][ C1] ? csum_tcpudp_nofold+0x1f/0x60 [ 1556.854565][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1556.854584][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1556.854607][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1556.854628][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1556.854648][ C1] ? reacquire_held_locks+0x104/0x190 [ 1556.854673][ C1] handle_softirqs+0x1de/0x640 [ 1556.854689][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1556.854699][ C1] ? mptcp_pm_addr_send_ack+0x403/0x500 [ 1556.854713][ C1] mptcp_pm_addr_send_ack+0x41f/0x500 [ 1556.854727][ C1] ? mptcp_pm_worker+0xe3/0x350 [ 1556.854739][ C1] mptcp_pm_worker+0x174/0x350 [ 1556.854753][ C1] mptcp_worker+0xd2/0x1450 [ 1556.854766][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1556.854775][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1556.854784][ C1] process_scheduled_works+0xaec/0x17a0 [ 1556.854799][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1556.854808][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1556.854823][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1556.854836][ C1] ? schedule+0x90/0x360 [ 1556.854849][ C1] worker_thread+0xda6/0x1360 [ 1556.854864][ C1] kthread+0x726/0x8b0 [ 1556.854876][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1556.854885][ C1] ? __pfx_kthread+0x10/0x10 [ 1556.854896][ C1] ? rt_spin_unlock+0x14f/0x200 [ 1556.854907][ C1] ? rt_spin_unlock+0x160/0x200 [ 1556.854916][ C1] ? __pfx_kthread+0x10/0x10 [ 1556.854927][ C1] ret_from_fork+0x51b/0xa40 [ 1556.854938][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.854948][ C1] ? __switch_to+0xc82/0x1410 [ 1556.854962][ C1] ? __pfx_kthread+0x10/0x10 [ 1556.854981][ C1] ret_from_fork_asm+0x1a/0x30 [ 1556.854998][ C1] [ 1556.855002][ C1] [ 1556.855010][ C1] Allocated by task 24824: [ 1556.855016][ C1] kasan_save_track+0x3e/0x80 [ 1556.855028][ C1] __kasan_kmalloc+0x93/0xb0 [ 1556.855039][ C1] __kmalloc_noprof+0x235/0x7c0 [ 1556.855051][ C1] sk_prot_alloc+0xe7/0x210 [ 1556.855059][ C1] sk_clone+0x7f/0x1000 [ 1556.855067][ C1] inet_csk_clone_lock+0x2b/0x5c0 [ 1556.855078][ C1] tcp_create_openreq_child+0x30/0x2b10 [ 1556.855091][ C1] tcp_v4_syn_recv_sock+0x167/0xfc0 [ 1556.855100][ C1] tcp_v6_syn_recv_sock+0x153/0x1a80 [ 1556.855113][ C1] subflow_syn_recv_sock+0x286/0x1400 [ 1556.855126][ C1] tcp_check_req+0x115b/0x1bb0 [ 1556.855138][ C1] tcp_v4_rcv+0x179b/0x3780 [ 1556.855147][ C1] ip_protocol_deliver_rcu+0x221/0x440 [ 1556.855156][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 1556.855165][ C1] NF_HOOK+0x336/0x3c0 [ 1556.855173][ C1] NF_HOOK+0x336/0x3c0 [ 1556.855181][ C1] process_backlog+0x569/0xc60 [ 1556.855192][ C1] __napi_poll+0xae/0x530 [ 1556.855203][ C1] net_rx_action+0x696/0xe00 [ 1556.855215][ C1] handle_softirqs+0x1de/0x640 [ 1556.855223][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1556.855232][ C1] __dev_queue_xmit+0x1eba/0x3990 [ 1556.855241][ C1] ip_finish_output2+0xba2/0x1060 [ 1556.855254][ C1] ip_output+0x29f/0x450 [ 1556.855264][ C1] __ip_queue_xmit+0x1198/0x1be0 [ 1556.855275][ C1] __tcp_transmit_skb+0x253b/0x3ad0 [ 1556.855287][ C1] tcp_rcv_state_process+0x2e88/0x46c0 [ 1556.855300][ C1] tcp_v4_do_rcv+0xa25/0x12b0 [ 1556.855309][ C1] __release_sock+0x285/0x3d0 [ 1556.855318][ C1] release_sock+0x75/0x210 [ 1556.855329][ C1] mptcp_connect+0x649/0x830 [ 1556.855340][ C1] __inet_stream_connect+0x25a/0xdd0 [ 1556.855352][ C1] inet_stream_connect+0x66/0xa0 [ 1556.855364][ C1] __sys_connect+0x315/0x450 [ 1556.855376][ C1] __x64_sys_connect+0x7a/0x90 [ 1556.855388][ C1] do_syscall_64+0xe2/0xf80 [ 1556.855400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.855409][ C1] [ 1556.855411][ C1] Freed by task 24823: [ 1556.855416][ C1] kasan_save_track+0x3e/0x80 [ 1556.855427][ C1] kasan_save_free_info+0x46/0x50 [ 1556.855436][ C1] __kasan_slab_free+0x5c/0x80 [ 1556.855447][ C1] kfree+0x1bb/0x8f0 [ 1556.855456][ C1] __sk_destruct+0x626/0x880 [ 1556.855469][ C1] inet_csk_listen_stop+0x9cf/0xef0 [ 1556.855484][ C1] mptcp_check_listen_stop+0x1c6/0x2b0 [ 1556.855494][ C1] __mptcp_close+0xf5/0xce0 [ 1556.855502][ C1] mptcp_close+0x28/0x1a0 [ 1556.855512][ C1] inet_release+0x143/0x190 [ 1556.855524][ C1] sock_close+0xc3/0x240 [ 1556.855533][ C1] __fput+0x45e/0xa80 [ 1556.855541][ C1] task_work_run+0x1d9/0x270 [ 1556.855552][ C1] exit_to_user_mode_loop+0xed/0x480 [ 1556.855562][ C1] do_syscall_64+0x2b7/0xf80 [ 1556.855573][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.855582][ C1] [ 1556.855584][ C1] The buggy address belongs to the object at ffff8880380c4000 [ 1556.855584][ C1] which belongs to the cache kmalloc-4k of size 4096 [ 1556.855594][ C1] The buggy address is located 48 bytes inside of [ 1556.855594][ C1] freed 4096-byte region [ffff8880380c4000, ffff8880380c5000) [ 1556.855605][ C1] [ 1556.855607][ C1] The buggy address belongs to the physical page: [ 1556.855617][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x380c0 [ 1556.855630][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1556.855638][ C1] anon flags: 0x80000000000040(head|node=0|zone=1) [ 1556.855651][ C1] page_type: f5(slab) [ 1556.855660][ C1] raw: 0080000000000040 ffff88813fe27140 0000000000000000 dead000000000001 [ 1556.855669][ C1] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1556.855677][ C1] head: 0080000000000040 ffff88813fe27140 0000000000000000 dead000000000001 [ 1556.855685][ C1] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1556.855693][ C1] head: 0080000000000003 ffffea0000e03001 00000000ffffffff 00000000ffffffff [ 1556.855700][ C1] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1556.855705][ C1] page dumped because: kasan: bad access detected [ 1556.855714][ C1] page_owner tracks the page as allocated [ 1556.855718][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 69, tgid 69 (kworker/u8:4), ts 106665808808, free_ts 106549050902 [ 1556.855735][ C1] post_alloc_hook+0x228/0x280 [ 1556.855748][ C1] get_page_from_freelist+0x28bb/0x2950 [ 1556.855756][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1556.855764][ C1] alloc_pages_mpol+0xd1/0x380 [ 1556.855777][ C1] allocate_slab+0x86/0x3a0 [ 1556.855787][ C1] ___slab_alloc+0xaf8/0x13d0 [ 1556.855796][ C1] __slab_alloc+0xc5/0x1f0 [ 1556.855804][ C1] __kmalloc_node_track_caller_noprof+0x2b6/0x7f0 [ 1556.855816][ C1] kmalloc_reserve+0x136/0x290 [ 1556.855824][ C1] __alloc_skb+0x204/0x390 [ 1556.855836][ C1] nsim_dev_trap_report_work+0x29f/0xbc0 [ 1556.855847][ C1] process_scheduled_works+0xaec/0x17a0 [ 1556.855855][ C1] worker_thread+0xda6/0x1360 [ 1556.855863][ C1] kthread+0x726/0x8b0 [ 1556.855873][ C1] ret_from_fork+0x51b/0xa40 [ 1556.855881][ C1] ret_from_fork_asm+0x1a/0x30 [ 1556.855893][ C1] page last free pid 5858 tgid 5858 stack trace: [ 1556.855899][ C1] __free_frozen_pages+0xfd0/0x1160 [ 1556.855910][ C1] __put_partials+0x149/0x170 [ 1556.855919][ C1] __slab_free+0x2af/0x330 [ 1556.855928][ C1] qlist_free_all+0x97/0x100 [ 1556.855938][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1556.855948][ C1] __kasan_slab_alloc+0x22/0x80 [ 1556.855959][ C1] kmem_cache_alloc_noprof+0x188/0x6a0 [ 1556.855969][ C1] getname_flags+0xb7/0x540 [ 1556.855987][ C1] vfs_fstatat+0x43/0x170 [ 1556.855999][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1556.856007][ C1] do_syscall_64+0xe2/0xf80 [ 1556.856018][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.856027][ C1] [ 1556.856029][ C1] Memory state around the buggy address: [ 1556.856035][ C1] ffff8880380c3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1556.856041][ C1] ffff8880380c3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1556.856048][ C1] >ffff8880380c4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1556.856052][ C1] ^ [ 1556.856057][ C1] ffff8880380c4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1556.856064][ C1] ffff8880380c4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1556.856069][ C1] ================================================================== [ 1556.856901][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1556.856916][ C1] CPU: 1 UID: 0 PID: 6551 Comm: kworker/1:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1556.856931][ C1] Tainted: [L]=SOFTLOCKUP [ 1556.856935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1556.856942][ C1] Workqueue: events mptcp_worker [ 1556.856959][ C1] Call Trace: [ 1556.856964][ C1] [ 1556.856970][ C1] vpanic+0x1e0/0x670 [ 1556.856992][ C1] panic+0xc5/0xd0 [ 1556.857004][ C1] ? __pfx_panic+0x10/0x10 [ 1556.857019][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1556.857032][ C1] ? __inet_lookup_established+0x20d/0x850 [ 1556.857043][ C1] check_panic_on_warn+0x89/0xb0 [ 1556.857057][ C1] ? __inet_lookup_established+0x20d/0x850 [ 1556.857067][ C1] end_report+0x6f/0x140 [ 1556.857081][ C1] kasan_report+0x128/0x150 [ 1556.857094][ C1] ? __inet_lookup_established+0x20d/0x850 [ 1556.857105][ C1] __inet_lookup_established+0x20d/0x850 [ 1556.857117][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1556.857129][ C1] ? __pfx___inet_lookup_established+0x10/0x10 [ 1556.857142][ C1] tcp_v4_rcv+0x104d/0x3780 [ 1556.857152][ C1] ? raw_local_deliver+0x30a/0xf40 [ 1556.857171][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1556.857182][ C1] ? raw_local_deliver+0x30a/0xf40 [ 1556.857195][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1556.857205][ C1] ip_protocol_deliver_rcu+0x221/0x440 [ 1556.857216][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 1556.857227][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 1556.857238][ C1] NF_HOOK+0x336/0x3c0 [ 1556.857248][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1556.857257][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1556.857266][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1556.857275][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1556.857286][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1556.857296][ C1] ? skb_dst+0x4f/0xd0 [ 1556.857305][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1556.857316][ C1] NF_HOOK+0x336/0x3c0 [ 1556.857325][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1556.857338][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1556.857347][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1556.857356][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1556.857366][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1556.857377][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1556.857386][ C1] ? process_backlog+0x271/0xc60 [ 1556.857399][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1556.857408][ C1] process_backlog+0x569/0xc60 [ 1556.857425][ C1] __napi_poll+0xae/0x530 [ 1556.857437][ C1] net_rx_action+0x696/0xe00 [ 1556.857450][ C1] ? csum_tcpudp_nofold+0x1f/0x60 [ 1556.857465][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1556.857477][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1556.857491][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1556.857503][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1556.857516][ C1] ? reacquire_held_locks+0x104/0x190 [ 1556.857529][ C1] handle_softirqs+0x1de/0x640 [ 1556.857541][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 1556.857551][ C1] ? mptcp_pm_addr_send_ack+0x403/0x500 [ 1556.857564][ C1] mptcp_pm_addr_send_ack+0x41f/0x500 [ 1556.857578][ C1] ? mptcp_pm_worker+0xe3/0x350 [ 1556.857590][ C1] mptcp_pm_worker+0x174/0x350 [ 1556.857604][ C1] mptcp_worker+0xd2/0x1450 [ 1556.857615][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1556.857625][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 1556.857639][ C1] process_scheduled_works+0xaec/0x17a0 [ 1556.857654][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1556.857662][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1556.857677][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1556.857690][ C1] ? schedule+0x90/0x360 [ 1556.857703][ C1] worker_thread+0xda6/0x1360 [ 1556.857718][ C1] kthread+0x726/0x8b0 [ 1556.857730][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1556.857739][ C1] ? __pfx_kthread+0x10/0x10 [ 1556.857750][ C1] ? rt_spin_unlock+0x14f/0x200 [ 1556.857761][ C1] ? rt_spin_unlock+0x160/0x200 [ 1556.857770][ C1] ? __pfx_kthread+0x10/0x10 [ 1556.857781][ C1] ret_from_fork+0x51b/0xa40 [ 1556.857792][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.857801][ C1] ? __switch_to+0xc82/0x1410 [ 1556.857815][ C1] ? __pfx_kthread+0x10/0x10 [ 1556.857826][ C1] ret_from_fork_asm+0x1a/0x30 [ 1556.857843][ C1] [ 1556.858218][ C1] Kernel Offset: disabled