last executing test programs: 1m59.360702796s ago: executing program 4 (id=459): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x6) ioctl$FIONREAD(r3, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.735119882s ago: executing program 4 (id=463): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xf1c1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "629fe25e06f600", "2fd672a2d0ffff00", "ace06e88"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "63a970f9c96b9919", "68c9fa3999daf8c4c237c8b534397b2d", "f8cb0071", "a664d6946aab5f1e"}, 0x28) 1m58.437233497s ago: executing program 4 (id=466): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, &(0x7f0000006200)={0x2020}, 0x2020) 1m58.005806411s ago: executing program 4 (id=468): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m57.049545621s ago: executing program 4 (id=472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315, 0xfc}], 0x0, 0x0, 0x0}) 1m56.858119369s ago: executing program 4 (id=473): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1m56.542686725s ago: executing program 32 (id=473): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1m7.304844263s ago: executing program 2 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m6.317189485s ago: executing program 2 (id=748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x47}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m5.974140876s ago: executing program 2 (id=753): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x26e8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x2}, {0x37d, 0x0, 0x3}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000180)={0x300000000000000, 0x0, 0x4, 0x2, 0x8}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m5.58467681s ago: executing program 2 (id=758): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) creat(&(0x7f0000000c40)='./file0\x00', 0x100) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008aec1, &(0x7f0000000d00)={"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"}) 1m5.308515594s ago: executing program 2 (id=760): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m5.137586548s ago: executing program 2 (id=761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x47}, @ptr={0x66646185, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m4.878883451s ago: executing program 33 (id=761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x47}, @ptr={0x66646185, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7.725932502s ago: executing program 1 (id=1068): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, r1, 0xe5994000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) pipe(&(0x7f0000000040)) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 7.594758856s ago: executing program 5 (id=1069): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000080), 0xc, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f00000004c0)=""/251, 0xfb}], 0x2}, 0x38, 0xc0002000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='Q') socket$packet(0x11, 0x2, 0x300) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000010003000400200082b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fd42b252c092e69fc700000000"], 0x40) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000040)=ANY=[], 0x0) 5.736333003s ago: executing program 1 (id=1078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000, 0xfffffffffffffffd}, @flat=@binder={0x73622a85, 0x10a, 0x10002}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x3}) 5.493917673s ago: executing program 1 (id=1080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x119e75c40673edef) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.146106763s ago: executing program 1 (id=1083): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e9000360ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4e5ea27a00e97a6f6e7b7e2720637a1e7892", 0x91}], 0x1}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x4, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x6, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0xf90, 0x2, 0x6, 0x8, 0x400], 0x54000, 0x100204}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.399445749s ago: executing program 5 (id=1084): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x5, 0x5, {{0x5, 0x4, 0x2, 0x1e, 0x14, 0x69, 0x0, 0x8, 0x2f, 0x0, @broadcast, @broadcast}}}}) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x6, 0x8}, {0x5, 0x56d1, 0x64f, 0x2}}}}, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 4.395436318s ago: executing program 1 (id=1094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x3, 0x2c5, 0x4, 0x7, 0x4, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.080182795s ago: executing program 3 (id=1086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4.058571142s ago: executing program 0 (id=1087): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) 4.050963455s ago: executing program 1 (id=1088): syz_open_dev$ptys(0xc, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0xfffffe15) 4.039603554s ago: executing program 6 (id=1089): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000104000380600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000"], 0x0) 3.799195098s ago: executing program 0 (id=1090): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, r1, 0xe5994000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) pipe(&(0x7f0000000040)) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 3.797521122s ago: executing program 3 (id=1091): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet(r2, &(0x7f0000002480)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)="040a089e3caeae5fc0405d770aba75b0f7918f418c8123abfeaa1a25e778fb212c73626ab2637369f653ad64686b4b4b27151fbdbe199d9699566a1784236db10ea7fbb12af7f960582728a35d1cc5e781e417d61c4a78fea7bdbb4a9a288a1bcd674c379b1d2a08709dee47b2e52eb6c191124c7af18ad592e1dc8013a2fa19a93996a82298768bcecd7724adb2201ef8e493cde793aa5a19e62f76afe8d768dc0c2c4ab98faa68854518a781562b6b72b620894ebcdf8991", 0xb9}], 0x5, &(0x7f0000001c40)=[@ip_retopts={{0x10}}], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.788302937s ago: executing program 6 (id=1092): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) 2.425689813s ago: executing program 6 (id=1093): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) umount2(&(0x7f00000021c0)='./file0/file0\x00', 0x3) 2.2771489s ago: executing program 5 (id=1095): creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x2000c8c0) sendmmsg$inet6(r0, 0x0, 0x0, 0x40) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x8000000004) 2.188469188s ago: executing program 3 (id=1096): syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sw_sync_info(0xffffff9c, 0x0, 0x84902, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) futex(&(0x7f000000cffc)=0x4, 0x1, 0x4, 0x0, 0x0, 0x80000000) 2.070540791s ago: executing program 6 (id=1097): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(0x0, 0x1, 0x400) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 1.588699454s ago: executing program 5 (id=1098): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.51327687s ago: executing program 0 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x3, 0x2c5, 0x4, 0x7, 0x4, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x9, 0xc, 0x0, 0x6, 0x1, 0x86, 0x2, 0xe7, 0x0, 0x2, 0x4, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.364174101s ago: executing program 6 (id=1100): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)=@newtfilter={0x49c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x46c, 0x2, [@TCA_ROUTE4_POLICE={0x458, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5bb, 0xffffffffffffffff, 0x10001, 0x5, 0x9b, {0x7, 0x1, 0x1de, 0xfffa, 0x1, 0x3}, {0x41, 0x1, 0x9, 0x8, 0x6}, 0x800, 0x8, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x7, 0x174, 0x9, 0x1, 0x5, 0x6, 0x8, 0x4180, 0x1aa4, 0x3b, 0x2, 0x0, 0x2b7f, 0xc476, 0x43b, 0x2, 0x0, 0x401, 0xffffffff, 0x7, 0x7, 0x9, 0xd8, 0x4, 0x5, 0x9, 0xa5, 0x1, 0x0, 0x9, 0x819, 0x8, 0x80000000, 0x330c, 0x49fe30be, 0xa, 0x4, 0xd9, 0x0, 0x0, 0x7, 0xe, 0xe, 0x10, 0x1, 0xb44, 0x5, 0x6, 0xb3b4, 0x4, 0x39b1506, 0x6929, 0xedea, 0x1, 0x5, 0x10001, 0x0, 0x2, 0x8, 0x76c4, 0x100, 0x2, 0x80000001, 0xa, 0x7, 0x9, 0x80000000, 0x6, 0x101, 0x800, 0x4, 0x1, 0xd, 0x4, 0x2, 0x10001, 0x3ff, 0x9, 0x2, 0x8, 0x7, 0x2, 0x2, 0xcf98, 0x2, 0x3, 0x1, 0xfffff000, 0x7, 0x1ff, 0x5, 0x6, 0x8, 0x0, 0xd4, 0x3, 0x2, 0x8, 0x3df, 0xfc74, 0x6, 0x164f49b9, 0x8, 0x3, 0x3, 0x4, 0x789c14e7, 0x3, 0x8, 0x2, 0x1, 0x2, 0x2, 0x38000000, 0x0, 0xc, 0xfffffc00, 0xe589, 0xf51b, 0x9, 0x2, 0x6, 0x2, 0x0, 0x2, 0x49f, 0xc235, 0x800, 0x2, 0x9923, 0x10, 0x6, 0x8, 0x2, 0xe, 0x0, 0x401, 0x5, 0x9, 0x3, 0xfffffea9, 0x10001, 0x0, 0x9, 0x10001, 0x7, 0x7, 0x8000, 0x5, 0x8, 0x3, 0x94dc, 0x2, 0x9ca5, 0x9, 0x9, 0xd9, 0x1, 0x3, 0x931, 0x5, 0x3, 0x9, 0x1, 0x7fffffff, 0xe8b, 0x1, 0xc, 0xfe0, 0x2, 0x0, 0x0, 0x9, 0xef800000, 0x0, 0xb, 0x4, 0xa, 0x80000000, 0x9, 0x3, 0xc, 0x6, 0x6, 0x4, 0x2, 0x9, 0x6, 0xffffffff, 0x5, 0x2, 0x7, 0x9, 0x7fffffff, 0x1, 0x6, 0xffffffff, 0xfff, 0x40, 0x8e4a, 0x5, 0x3, 0x10001, 0x9, 0xff, 0x0, 0x5, 0x42fd, 0x5, 0x107d0002, 0xa, 0x3c, 0x51099d78, 0x0, 0xffffffff, 0x1, 0x5, 0x8001, 0x1, 0x4, 0x2c, 0x3, 0x9, 0xffff7fff, 0xe, 0x4, 0x40, 0x9, 0xffffffa5, 0x9, 0x4cd7c86c, 0x0, 0x3, 0x985, 0x40000, 0x6, 0xb, 0x4, 0x7, 0x7, 0x6, 0x3ff, 0x3ff, 0x400, 0x6, 0x6, 0x5, 0x100, 0x8000, 0x7fffffff, 0x55cd, 0x8, 0xfffffff9, 0x40]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xea}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x49c}}, 0x200c8080) 1.241841935s ago: executing program 5 (id=1101): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 937.002376ms ago: executing program 6 (id=1102): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000000, @mcast2, 0x6}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa00}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 912.896694ms ago: executing program 0 (id=1103): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/35, 0x23}, 0x7}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 686.16955ms ago: executing program 3 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000906010800000000000000000200000408000940000000090900020073797a66e21515010007"], 0x34}}, 0x40010) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x0) 658.632527ms ago: executing program 0 (id=1105): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0xbbf, 0x0, 0x3}, {0x2a4, 0x0, 0x4}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x5, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0x41000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 470.848101ms ago: executing program 3 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000001340)='GPL\x00', 0x8, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 254.024627ms ago: executing program 0 (id=1107): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r3, 0x0) ftruncate(r3, 0x80796c) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0xc, 0x0, 0x0}, 0x0) 90.27574ms ago: executing program 5 (id=1108): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$setlease(r3, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08007d80240002000600eb"], 0x2c}, 0x1, 0x0, 0x0, 0x889c}, 0x4004000) 0s ago: executing program 3 (id=1109): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x0, 0x9, 0x1, 'c'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000240)={0x0, 0x5253bfbc6f536fcf, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): input0 [ 189.055595][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.072249][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.078127][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.084007][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.089881][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.095762][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.101639][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.107604][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.113564][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.119431][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.125821][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.131795][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.137661][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.143538][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.149423][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.155125][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.161473][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.167354][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.173263][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.178972][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.184782][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.190498][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.196402][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.202116][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.209147][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.214864][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.220881][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.227241][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.233118][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.238994][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.244867][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.250738][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.256694][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.262563][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.268431][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.274318][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.280191][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.286267][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.292142][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.298014][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.304017][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.310059][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.316030][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.321929][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.327790][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.334167][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.340118][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.346016][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.351889][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.357835][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.363748][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.369623][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.375495][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.381384][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.387317][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.393252][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.399228][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.405107][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.411029][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.416743][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.424037][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.429920][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.436211][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.441913][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.447982][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.454070][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.459780][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.465674][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.471377][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.477154][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.483038][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.488756][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.494534][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.500231][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.506027][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.511725][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.517511][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.523232][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.529005][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.534694][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.540869][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.546567][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.552760][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.558463][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.564255][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.570254][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.576186][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.582069][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.587790][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.593561][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.599471][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.605185][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.610999][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.616701][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.622534][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.628392][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.634246][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.643258][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.649389][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.655243][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.661242][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.667119][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.672990][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.678870][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.684724][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.690576][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.696471][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.702334][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.708195][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.714046][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.719919][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.725782][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.731660][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.737552][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.746576][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.752302][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.758356][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.764212][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.769912][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.775704][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.781575][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.787438][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.793155][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.799850][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.805740][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.811784][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.817660][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.823532][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.829253][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.835030][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.841342][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.848224][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.854104][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.859975][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.865726][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.871513][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.877388][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.883671][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.889588][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.895509][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.901240][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 189.907160][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.913049][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.918930][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.924789][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.930762][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.936626][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.942485][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.948777][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.954726][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.960588][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.966481][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.972390][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.978297][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.984181][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.990124][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 189.995845][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 190.001734][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.007435][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 190.013188][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.018894][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 190.024688][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.030560][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.036436][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.042312][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.048501][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.054468][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.060362][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.066267][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.072146][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.078016][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.083900][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.089612][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 190.095384][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 190.101113][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 190.137735][ T6474] usb 2-1: USB disconnect, device number 20 [ 190.323734][ T6477] usb 3-1: USB disconnect, device number 16 [ 190.374779][ T7651] pic_ioport_write: 58 callbacks suppressed [ 190.374800][ T7651] kvm: pic: single mode not supported [ 190.501590][ T7659] loop2: detected capacity change from 0 to 7 [ 190.535834][ T7659] Dev loop2: unable to read RDB block 7 [ 190.545627][ T7659] loop2: unable to read partition table [ 190.552312][ T7659] loop2: partition table beyond EOD, truncated [ 190.561528][ T7659] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.313239][ T7679] syz_tun: entered allmulticast mode [ 192.320583][ T7679] syz_tun: left allmulticast mode [ 192.566108][ T5717] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 192.716651][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 192.727033][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.740414][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.754225][ T5717] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.764141][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.777370][ T5717] usb 3-1: Product: syz [ 192.786802][ T5717] usb 3-1: Manufacturer: syz [ 192.798124][ T5717] usb 3-1: SerialNumber: syz [ 192.818710][ T5717] usb 3-1: config 0 descriptor?? [ 192.831137][ T5717] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.844014][ T5717] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 193.131867][ T7719] Failed to get privilege flags for destination (handle=0x2:0x0) [ 193.373067][ T7723] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.441561][ T5717] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 193.455648][ T5717] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 193.547867][ T7731] syz_tun: entered allmulticast mode [ 193.591020][ T7730] syz_tun: left allmulticast mode [ 193.677004][ T6456] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 193.838822][ T6456] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 193.847379][ T6456] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 193.857079][ T6456] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 193.870591][ T6456] usb 1-1: config 220 has no interface number 2 [ 193.877353][ T6456] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 193.891047][ T6456] usb 1-1: config 220 interface 0 has no altsetting 0 [ 193.898401][ T6456] usb 1-1: config 220 interface 76 has no altsetting 0 [ 193.905542][ T6456] usb 1-1: config 220 interface 1 has no altsetting 0 [ 193.915560][ T6456] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 193.925402][ T6456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.946963][ T6456] usb 1-1: Product: syz [ 193.954527][ T6456] usb 1-1: Manufacturer: syz [ 193.963433][ T6456] usb 1-1: SerialNumber: syz [ 194.197657][ T6456] usb 1-1: selecting invalid altsetting 0 [ 194.213517][ T6456] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 194.221361][ T6456] uvcvideo 1-1:220.0: No valid video chain found. [ 194.235613][ T6456] usb 1-1: selecting invalid altsetting 0 [ 194.241930][ T6456] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 194.262215][ T6456] usb 1-1: USB disconnect, device number 14 [ 194.331326][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338818][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.474370][ T5717] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 194.482516][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 194.491658][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 194.500431][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 194.507918][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 194.515129][ T5717] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 194.526649][ T5717] usb 3-1: USB disconnect, device number 17 [ 194.893012][ T7752] syzkaller0: entered promiscuous mode [ 194.899453][ T7752] syzkaller0: entered allmulticast mode [ 195.478684][ T7767] binder: 7766:7767 unknown command 0 [ 195.484676][ T7767] binder: 7766:7767 ioctl c0306201 80000080 returned -22 [ 195.911767][ T5717] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.081000][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 196.093241][ T5717] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 196.106438][ T5717] usb 4-1: config 0 has no interface number 0 [ 196.121161][ T5717] usb 4-1: config 0 interface 184 has no altsetting 0 [ 196.132285][ T5717] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 196.143234][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.154532][ T5717] usb 4-1: Product: syz [ 196.160038][ T5717] usb 4-1: Manufacturer: syz [ 196.164799][ T5717] usb 4-1: SerialNumber: syz [ 196.193242][ T5717] usb 4-1: config 0 descriptor?? [ 196.823804][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 196.846278][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 197.882305][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 197.899529][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 197.913561][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 197.928546][ T7772] syz_tun: entered allmulticast mode [ 197.933362][ T5717] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 197.941378][ T7772] syz_tun: left allmulticast mode [ 197.997383][ T5717] usb 4-1: USB disconnect, device number 19 [ 198.126877][ T6474] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.241457][ T7798] kvm: pic: single mode not supported [ 198.241567][ T7798] kvm: pic: single mode not supported [ 198.259303][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.662'. [ 198.318810][ T6474] usb 3-1: Using ep0 maxpacket: 16 [ 198.330216][ T6474] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.351135][ T6474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.382662][ T6474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 198.400076][ T6474] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 198.413442][ T6474] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.442062][ T6474] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.462560][ T6474] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.490038][ T6474] usb 3-1: Manufacturer: syz [ 198.542373][ T6474] usb 3-1: config 0 descriptor?? [ 199.893079][ T7819] kvm: emulating exchange as write [ 199.908115][ T6474] rc_core: IR keymap rc-hauppauge not found [ 199.932119][ T6474] Registered IR keymap rc-empty [ 199.947903][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 199.977787][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.027422][ T6474] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 200.059750][ T6474] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 200.095249][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.126319][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.157537][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.186189][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.256876][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.287412][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.325750][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.367210][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.386281][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.426554][ T6474] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 200.468549][ T6474] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 200.507891][ T6474] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 200.547873][ T6474] usb 3-1: USB disconnect, device number 18 [ 200.780985][ T7839] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.076991][ T6474] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 201.250328][ T6474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.279378][ T6474] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.300859][ T6474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.329966][ T6474] usb 1-1: config 0 descriptor?? [ 201.359371][ T6474] pwc: Askey VC010 type 2 USB webcam detected. [ 201.431561][ T7864] binder: 7863:7864 unknown command 0 [ 201.445911][ T7864] binder: 7863:7864 ioctl c0306201 80000080 returned -22 [ 201.701117][ T7868] loop5: detected capacity change from 0 to 7 [ 201.711306][ T7868] Dev loop5: unable to read RDB block 7 [ 201.717469][ T7868] loop5: unable to read partition table [ 201.724623][ T7868] loop5: partition table beyond EOD, truncated [ 201.733973][ T7868] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.765245][ T6474] pwc: recv_control_msg error -32 req 02 val 2b00 [ 201.782478][ T6474] pwc: recv_control_msg error -32 req 02 val 2700 [ 201.807398][ T6474] pwc: recv_control_msg error -32 req 02 val 2c00 [ 201.827343][ T6474] pwc: recv_control_msg error -32 req 04 val 1000 [ 201.853935][ T6474] pwc: recv_control_msg error -32 req 04 val 1300 [ 201.876169][ T6460] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 201.894303][ T6474] pwc: recv_control_msg error -32 req 04 val 1400 [ 201.904665][ T6474] pwc: recv_control_msg error -32 req 02 val 2000 [ 201.972019][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 202.048512][ T6460] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 202.071791][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.100066][ T6460] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.130337][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.141714][ T6474] pwc: recv_control_msg error -71 req 04 val 1500 [ 202.156289][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.171656][ T6474] pwc: recv_control_msg error -71 req 02 val 2500 [ 202.188403][ T6474] pwc: recv_control_msg error -71 req 02 val 2400 [ 202.191520][ T6460] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 202.198267][ T6474] pwc: recv_control_msg error -71 req 02 val 2600 [ 202.214518][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.225596][ T6474] pwc: recv_control_msg error -71 req 02 val 2900 [ 202.226509][ T6474] pwc: recv_control_msg error -71 req 02 val 2800 [ 202.241586][ T6460] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.241791][ T6474] pwc: recv_control_msg error -71 req 04 val 1100 [ 202.284020][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.297812][ T6474] pwc: recv_control_msg error -71 req 04 val 1200 [ 202.307234][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.334810][ T6474] pwc: Registered as video103. [ 202.346346][ T6460] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 202.357986][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 202.374473][ T6474] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 202.379080][ T6460] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.439030][ T5638] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 202.444645][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.464721][ T6474] usb 1-1: USB disconnect, device number 15 [ 202.496329][ T6460] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 202.543248][ T6460] usb 6-1: string descriptor 0 read error: -22 [ 202.550190][ T6460] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 202.575779][ T6460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.607704][ T5638] usb 4-1: Using ep0 maxpacket: 16 [ 202.609486][ T6460] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 202.634646][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.672109][ T5638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.708446][ T5638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.748560][ T5638] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 202.772569][ T5638] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.792406][ T5638] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.807788][ T5638] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.826021][ T5638] usb 4-1: Manufacturer: syz [ 202.839098][ T5638] usb 4-1: config 0 descriptor?? [ 202.931476][ T7893] netlink: 'syz.0.692': attribute type 4 has an invalid length. [ 203.196113][ T5638] rc_core: IR keymap rc-hauppauge not found [ 203.210570][ T5638] Registered IR keymap rc-empty [ 203.219452][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.250180][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.288171][ T5638] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 203.313804][ T5638] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 203.343175][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.386205][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.420732][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.457321][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.466714][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.474490][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.484636][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.499204][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.507438][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.536640][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.566093][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.596340][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.636849][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.666079][ T5638] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.718771][ T5638] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.748029][ T5638] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.761878][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.785538][ T5638] usb 4-1: USB disconnect, device number 20 [ 203.799611][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.148605][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.181722][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.206227][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.257351][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.344748][ T7921] kvm: pic: non byte read [ 204.354064][ T7921] pic_ioport_write: 58 callbacks suppressed [ 204.354082][ T7921] kvm: pic: level sensitive irq not supported [ 204.370604][ T7921] kvm: pic: non byte read [ 204.386778][ T7921] kvm: pic: level sensitive irq not supported [ 204.386849][ T7921] kvm: pic: non byte read [ 204.415098][ T7921] kvm: pic: level sensitive irq not supported [ 204.415195][ T7921] kvm: pic: non byte read [ 204.427326][ T7921] kvm: pic: level sensitive irq not supported [ 204.427397][ T7921] kvm: pic: non byte read [ 204.438979][ T7921] kvm: pic: level sensitive irq not supported [ 204.439064][ T7921] kvm: pic: non byte read [ 204.450435][ T7921] kvm: pic: level sensitive irq not supported [ 204.450506][ T7921] kvm: pic: non byte read [ 204.461693][ T7921] kvm: pic: level sensitive irq not supported [ 204.461886][ T7921] kvm: pic: non byte read [ 204.474052][ T7921] kvm: pic: level sensitive irq not supported [ 204.474123][ T7921] kvm: pic: non byte read [ 204.485675][ T7921] kvm: pic: level sensitive irq not supported [ 204.485744][ T7921] kvm: pic: non byte read [ 204.496982][ T7921] kvm: pic: level sensitive irq not supported [ 205.127079][ T6456] usb 6-1: USB disconnect, device number 6 [ 205.578548][ T7940] syzkaller0: entered promiscuous mode [ 205.586008][ T7940] syzkaller0: entered allmulticast mode [ 205.597068][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.707'. [ 205.609251][ T7942] syzkaller0: entered promiscuous mode [ 205.615660][ T7942] syzkaller0: entered allmulticast mode [ 205.686716][ T6456] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 205.856002][ T6456] usb 2-1: Using ep0 maxpacket: 32 [ 205.865385][ T6456] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 205.888732][ T6456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.911866][ T7954] loop5: detected capacity change from 0 to 7 [ 205.918365][ T6456] usb 2-1: Product: syz [ 205.922912][ T6456] usb 2-1: Manufacturer: syz [ 205.939801][ T6456] usb 2-1: SerialNumber: syz [ 205.958672][ T6456] usb 2-1: config 0 descriptor?? [ 205.967483][ T6456] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 205.973976][ T7954] Dev loop5: unable to read RDB block 7 [ 205.979954][ T7954] loop5: unable to read partition table [ 205.988990][ T7954] loop5: partition table beyond EOD, truncated [ 206.022117][ T7954] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.816693][ T6456] gspca_ov534_9: reg_w failed -71 [ 208.056083][ T6456] gspca_ov534_9: Unknown sensor 0000 [ 208.056170][ T6456] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 208.108581][ T6456] usb 2-1: USB disconnect, device number 21 [ 208.816465][ T6474] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 208.824969][ T5638] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 208.997659][ T5638] usb 3-1: Using ep0 maxpacket: 32 [ 209.006071][ T6474] usb 2-1: Using ep0 maxpacket: 8 [ 209.019147][ T5638] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 209.037603][ T6474] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.052356][ T5638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.066324][ T6474] usb 2-1: config 4 interface 0 has no altsetting 0 [ 209.086263][ T6477] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.096351][ T5638] usb 3-1: config 0 descriptor?? [ 209.103932][ T6474] usb 2-1: string descriptor 0 read error: -22 [ 209.116396][ T6474] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 209.128336][ T5638] gspca_main: sq930x-2.14.0 probing 041e:403c [ 209.146169][ T6474] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 209.189043][ T6474] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 209.220059][ T6474] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 209.246694][ T6474] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 209.257949][ T6477] usb 6-1: Using ep0 maxpacket: 32 [ 209.268287][ T6474] usb 2-1: media controller created [ 209.287350][ T6477] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 209.323419][ T6477] usb 6-1: config 0 has no interface number 0 [ 209.343997][ T6477] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.379521][ T6474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.390634][ T6477] usb 6-1: config 0 interface 89 has no altsetting 0 [ 209.433236][ T6477] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 209.445094][ T6477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.467379][ T6477] usb 6-1: Product: syz [ 209.477097][ T6477] usb 6-1: Manufacturer: syz [ 209.488317][ T6477] usb 6-1: SerialNumber: syz [ 209.506302][ T6477] usb 6-1: config 0 descriptor?? [ 209.525576][ T6477] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 209.548093][ T6477] em28xx 6-1:0.89: Video interface 89 found: [ 209.667998][ T6474] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.865222][ T6474] usb 2-1: USB disconnect, device number 22 [ 210.146782][ T6477] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 210.586464][ T5638] gspca_sq930x: reg_w 0105 bc00 failed -71 [ 210.598692][ T5638] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 210.628383][ T5638] usb 3-1: USB disconnect, device number 19 [ 210.996091][ T6477] em28xx 6-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 211.007666][ T6477] em28xx 6-1:0.89: failed to read eeprom (err=-5) [ 211.014583][ T6477] em28xx 6-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 211.226316][ T6477] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 211.243871][ T6477] em28xx 6-1:0.89: analog set to bulk mode. [ 211.258595][ T6474] em28xx 6-1:0.89: Registering V4L2 extension [ 211.274911][ T6477] usb 6-1: USB disconnect, device number 7 [ 211.301771][ T6477] em28xx 6-1:0.89: Disconnecting em28xx [ 211.458260][ T6474] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 211.486441][ T6474] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 211.511916][ T6474] em28xx 6-1:0.89: No AC97 audio processor [ 211.574796][ T6474] usb 6-1: Decoder not found [ 211.586343][ T6474] em28xx 6-1:0.89: failed to create media graph [ 211.607398][ T6474] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 211.624869][ T6474] em28xx 6-1:0.89: Registering snapshot button... [ 211.645650][ T6474] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input32 [ 211.676648][ T6474] em28xx 6-1:0.89: Remote control support is not available for this card. [ 211.705352][ T6477] em28xx 6-1:0.89: Closing input extension [ 211.724794][ T6477] em28xx 6-1:0.89: Deregistering snapshot button [ 211.770118][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 211.770433][ T5637] Bluetooth: hci0: command 0x0406 tx timeout [ 211.776618][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 211.790255][ T5717] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 211.870270][ T6477] em28xx 6-1:0.89: Freeing device [ 211.959007][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 211.982964][ T5717] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.002684][ T5717] usb 4-1: config 0 has no interface number 0 [ 212.030675][ T5717] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.073329][ T5717] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.111569][ T5717] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.145335][ T5717] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.195892][ T5717] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.215572][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.241684][ T5717] usb 4-1: config 0 descriptor?? [ 212.269174][ T5717] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.565494][ T5717] usb 4-1: USB disconnect, device number 21 [ 212.588795][ T5717] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 212.934540][ T8115] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.201990][ T8130] binder: 8128:8130 unknown command 0 [ 213.241267][ T8130] binder: 8128:8130 ioctl c0306201 80000080 returned -22 [ 213.431362][ T8140] binder: 8139:8140 ioctl c0306201 800003c0 returned -14 [ 213.895902][ T8162] ======================================================= [ 213.895902][ T8162] WARNING: The mand mount option has been deprecated and [ 213.895902][ T8162] and is ignored by this kernel. Remove the mand [ 213.895902][ T8162] option from the mount to silence this warning. [ 213.895902][ T8162] ======================================================= [ 214.171437][ T6474] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 214.357478][ T6474] usb 6-1: Using ep0 maxpacket: 16 [ 214.379226][ T6474] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.396011][ T6474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.428220][ T6474] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.444098][ T6474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.455315][ T6474] usb 6-1: Product: syz [ 214.462124][ T6474] usb 6-1: Manufacturer: syz [ 214.467777][ T6474] usb 6-1: SerialNumber: syz [ 214.489355][ T6474] usb 6-1: config 0 descriptor?? [ 214.513662][ T6474] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.545072][ T6474] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 214.704102][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.722498][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.733540][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.744559][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.753582][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.138067][ T8192] kvm: pic: single mode not supported [ 215.139330][ T8192] pic_ioport_write: 25 callbacks suppressed [ 215.139349][ T8192] kvm: pic: level sensitive irq not supported [ 215.154703][ T6474] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 215.168145][ T6474] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 215.181183][ T8192] kvm: pic: single mode not supported [ 215.182863][ T8192] kvm: pic: single mode not supported [ 215.201236][ T8192] kvm: pic: level sensitive irq not supported [ 215.226453][ T8192] kvm: pic: single mode not supported [ 215.232656][ T8192] kvm: pic: level sensitive irq not supported [ 215.599784][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.616193][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.623802][ T8182] bridge_slave_0: entered allmulticast mode [ 215.632927][ T8182] bridge_slave_0: entered promiscuous mode [ 215.642226][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.650247][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.658035][ T8182] bridge_slave_1: entered allmulticast mode [ 215.666887][ T8182] bridge_slave_1: entered promiscuous mode [ 215.712318][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.725414][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.774688][ T8182] team0: Port device team_slave_0 added [ 215.784509][ T8182] team0: Port device team_slave_1 added [ 215.796126][ T6474] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 215.811453][ T6474] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 215.826024][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 215.846240][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.853346][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.882674][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.897602][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.904703][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.931812][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.006083][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 216.012508][ T8182] hsr_slave_0: entered promiscuous mode [ 216.017320][ T6474] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 216.023627][ T10] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 216.033441][ T6474] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 216.042007][ T8182] hsr_slave_1: entered promiscuous mode [ 216.047918][ T10] usb 2-1: config 0 has no interface number 0 [ 216.054942][ T8182] debugfs: 'hsr0' already exists in 'hsr' [ 216.061526][ T10] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 216.071648][ T8182] Cannot create hsr debugfs directory [ 216.088916][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 216.106100][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.126019][ T10] usb 2-1: Product: syz [ 216.130316][ T10] usb 2-1: Manufacturer: syz [ 216.134951][ T10] usb 2-1: SerialNumber: syz [ 216.159215][ T10] usb 2-1: config 0 descriptor?? [ 216.167139][ T8214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.189603][ T6474] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 216.202381][ T6474] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 216.210652][ T6474] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 216.219509][ T6474] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 216.232317][ T6474] usb 6-1: USB disconnect, device number 8 [ 216.413025][ T8214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.477689][ T8182] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.490965][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.500526][ T8182] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.513891][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.523265][ T8182] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.534067][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.542962][ T8182] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.557238][ T8182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.656636][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.680646][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.696738][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.703887][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.715675][ T5717] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 216.728941][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.736244][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.807349][ T5639] Bluetooth: hci4: command tx timeout [ 216.876999][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 216.894908][ T5717] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.912562][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.921852][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.937440][ T5717] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 216.965339][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.995017][ T5717] usb 1-1: config 0 descriptor?? [ 217.031803][ T8182] veth0_vlan: entered promiscuous mode [ 217.051759][ T8182] veth1_vlan: entered promiscuous mode [ 217.116733][ T8182] veth0_macvtap: entered promiscuous mode [ 217.129331][ T8182] veth1_macvtap: entered promiscuous mode [ 217.158069][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.180176][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.201792][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.212848][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.234860][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.255491][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.422312][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.441439][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.479774][ T5717] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 217.538703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.560177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.925491][ T6474] usb 1-1: USB disconnect, device number 16 [ 218.190119][ T8243] loop5: detected capacity change from 0 to 7 [ 218.198359][ T8243] loop5: [ 218.201437][ T8243] loop5: partition table partially beyond EOD, truncated [ 218.259821][ T10] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 218.276756][ T10] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 218.290138][ T10] asix 2-1:0.188: probe with driver asix failed with error -71 [ 218.322049][ T10] usb 2-1: USB disconnect, device number 23 [ 218.818120][ T6474] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.886207][ T5639] Bluetooth: hci4: command tx timeout [ 218.996047][ T6474] usb 1-1: Using ep0 maxpacket: 8 [ 219.010303][ T6474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.023391][ T6474] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 219.042534][ T6474] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 219.075858][ T6474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.121335][ T6474] usb 1-1: config 0 descriptor?? [ 219.145491][ T6474] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 219.176528][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 219.348134][ T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 219.357692][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.381075][ T10] usb 4-1: config 0 descriptor?? [ 219.640829][ T6474] usb 1-1: USB disconnect, device number 17 [ 219.769001][ T8270] netlink: 72 bytes leftover after parsing attributes in process `syz.6.791'. [ 219.914174][ T8272] capability: warning: `syz.1.792' uses deprecated v2 capabilities in a way that may be insecure [ 220.318211][ T8277] syzkaller0: entered promiscuous mode [ 220.323836][ T8277] syzkaller0: entered allmulticast mode [ 220.514671][ T8279] binder: 8278:8279 unknown command 0 [ 220.520639][ T8279] binder: 8278:8279 ioctl c0306201 80000080 returned -22 [ 220.966205][ T5639] Bluetooth: hci4: command tx timeout [ 221.128153][ T5638] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 221.196067][ T6475] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 221.289523][ T5638] usb 7-1: Using ep0 maxpacket: 32 [ 221.298676][ T5638] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.310865][ T5638] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.323468][ T5638] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 221.333199][ T5638] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 221.342077][ T5638] usb 7-1: Product: syz [ 221.346670][ T5638] usb 7-1: Manufacturer: syz [ 221.356058][ T6475] usb 2-1: Using ep0 maxpacket: 32 [ 221.371668][ T5638] hub 7-1:4.0: USB hub found [ 221.378199][ T6475] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.392933][ T6475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 221.404728][ T6475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.420072][ T10] usb 4-1: Cannot set autoneg [ 221.425800][ T6475] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 221.438336][ T6475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.440809][ T10] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 221.452677][ T6475] usb 2-1: Product: syz [ 221.464400][ T6475] usb 2-1: Manufacturer: syz [ 221.469969][ T6475] usb 2-1: SerialNumber: syz [ 221.481344][ T6475] usb 2-1: config 0 descriptor?? [ 221.488947][ T8291] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 221.509347][ T6475] hub 2-1:0.0: bad descriptor, ignoring hub [ 221.525200][ T6475] hub 2-1:0.0: probe with driver hub failed with error -5 [ 221.541296][ T10] usb 4-1: USB disconnect, device number 22 [ 221.558553][ T6475] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 221.573619][ T5638] hub 7-1:4.0: 2 ports detected [ 221.727457][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 221.737066][ T6475] usb 2-1: USB disconnect, device number 24 [ 222.049548][ T8306] fuse: Bad value for 'fd' [ 222.094316][ T8306] bond1: entered promiscuous mode [ 222.141967][ T8309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.483471][ T8318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.796411][ T5638] hub 7-1:4.0: activate --> -90 [ 222.926469][ T6460] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.047506][ T5639] Bluetooth: hci4: command tx timeout [ 223.095027][ T6460] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 223.132216][ T6460] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.177643][ T6460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.203348][ T5638] usb 7-1-port2: cannot warm reset (err = -71) [ 223.213218][ T6460] usb 6-1: Product: syz [ 223.218708][ T10] usb 7-1: USB disconnect, device number 2 [ 223.230752][ T5638] usb 7-1-port2: attempt power cycle [ 223.234596][ T6460] usb 6-1: Manufacturer: syz [ 223.251599][ T6460] usb 6-1: SerialNumber: syz [ 223.290098][ T6460] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.365557][ T5717] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.610274][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.625381][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.639210][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.652247][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.664729][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.675734][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.690290][ T5638] usb 6-1: USB disconnect, device number 9 [ 223.782552][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 223.795609][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 223.805548][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 223.816757][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 223.826715][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 224.390186][ T8379] sit1: entered allmulticast mode [ 224.407444][ T5717] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 224.415432][ T5717] ath9k_htc: Failed to initialize the device [ 224.430898][ T5638] usb 6-1: ath9k_htc: USB layer deinitialized [ 224.736155][ T5638] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 224.807594][ T8382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.906150][ T5638] usb 6-1: Using ep0 maxpacket: 32 [ 224.916574][ T5638] usb 6-1: config index 0 descriptor too short (expected 241, got 72) [ 224.926558][ T5638] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 224.939405][ T5638] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 224.949420][ T5638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.964942][ T5638] usb 6-1: config 0 descriptor?? [ 224.985707][ T5638] mos7840 6-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 225.119388][ T29] audit: type=1800 audit(1777955952.995:7): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.830" name="/" dev="fuse" ino=4 res=0 errno=0 [ 225.226643][ T6475] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 225.386270][ T6475] usb 7-1: Using ep0 maxpacket: 32 [ 225.393797][ T6475] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.406052][ T6475] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.422088][ T6475] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 225.432461][ T6475] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 225.440975][ T6475] usb 7-1: Product: syz [ 225.445220][ T6475] usb 7-1: Manufacturer: syz [ 225.460641][ T6475] hub 7-1:4.0: USB hub found [ 225.664223][ T6475] hub 7-1:4.0: 2 ports detected [ 225.784943][ T5638] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 225.812630][ T5638] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 225.841176][ T5638] usb 6-1: USB disconnect, device number 10 [ 225.880141][ T5638] mos7840 6-1:0.0: device disconnected [ 225.991375][ T8400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.960001][ T6475] hub 7-1:4.0: activate --> -90 [ 227.380484][ T5638] usb 7-1: USB disconnect, device number 7 [ 227.786368][ T6474] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 227.919018][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 227.929581][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 227.941552][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 227.958012][ T6474] usb 4-1: Using ep0 maxpacket: 32 [ 227.963832][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 227.975806][ T6474] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.001799][ T6474] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.028089][ T6474] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 228.037694][ T5717] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 228.046147][ T6474] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 228.063111][ T6474] usb 4-1: Product: syz [ 228.072716][ T6474] usb 4-1: Manufacturer: syz [ 228.095650][ T6474] hub 4-1:4.0: USB hub found [ 228.206822][ T5717] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 228.216345][ T5717] usb 6-1: config 0 has no interfaces? [ 228.224776][ T5717] usb 6-1: config 0 has no interfaces? [ 228.231969][ T5717] usb 6-1: config 0 has no interfaces? [ 228.238968][ T5717] usb 6-1: config 0 has no interfaces? [ 228.247587][ T5717] usb 6-1: config 0 has no interfaces? [ 228.254867][ T5717] usb 6-1: config 0 has no interfaces? [ 228.261555][ T5717] usb 6-1: config 0 has no interfaces? [ 228.268479][ T5717] usb 6-1: config 0 has no interfaces? [ 228.276862][ T5717] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 228.286413][ T5717] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 228.294885][ T5717] usb 6-1: Product: syz [ 228.299475][ T5717] usb 6-1: Manufacturer: syz [ 228.304198][ T5717] usb 6-1: SerialNumber: syz [ 228.314988][ T6474] hub 4-1:4.0: 2 ports detected [ 228.315792][ T5717] usb 6-1: config 0 descriptor?? [ 228.376061][ T6456] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 228.527978][ T6456] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.538434][ T6456] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.550182][ T6456] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.561473][ T6456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.569842][ T6456] usb 1-1: SerialNumber: syz [ 228.577114][ T6477] usb 6-1: USB disconnect, device number 11 [ 228.810668][ T6456] usb 1-1: 0:2 : does not exist [ 228.858552][ T6456] usb 1-1: USB disconnect, device number 18 [ 228.920870][ T5695] udevd[5695]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.373423][ T8473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.507021][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 229.530487][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 229.555421][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.6.867'. [ 229.609484][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.869'. [ 229.641710][ T6474] hub 4-1:4.0: activate --> -90 [ 229.844814][ T5717] usb 4-1: USB disconnect, device number 23 [ 229.857701][ T6474] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 230.098457][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 230.496231][ T5717] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 230.656219][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 230.669284][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.693260][ T5717] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.714368][ T5717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.728796][ T5717] usb 7-1: config 0 descriptor?? [ 230.962948][ T5717] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 231.817771][ T8534] netlink: 'syz.0.888': attribute type 16 has an invalid length. [ 231.840796][ T8534] netlink: 'syz.0.888': attribute type 17 has an invalid length. [ 232.069885][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.090094][ T6474] usb 7-1: USB disconnect, device number 8 [ 232.109992][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.150578][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.295346][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.334511][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.354116][ T8534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.368111][ T8534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.405237][ T8534] veth1_vlan: left promiscuous mode [ 232.420354][ T8534] veth0_vlan: left promiscuous mode [ 232.432316][ T8534] veth0_vlan: entered promiscuous mode [ 232.449472][ T8534] veth1_vlan: entered promiscuous mode [ 232.462485][ T8534] veth1_macvtap: left promiscuous mode [ 232.470899][ T8534] veth0_macvtap: left promiscuous mode [ 232.482020][ T8534] veth0_macvtap: entered promiscuous mode [ 232.494444][ T8534] veth1_macvtap: entered promiscuous mode [ 232.510302][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.518766][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.528907][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.540246][ T8534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.554852][ T8534] bond1: left promiscuous mode [ 232.561653][ T8534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.620496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.627732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.656039][ T6474] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 232.667194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.674424][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.819545][ T6474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.847738][ T6474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.871794][ T6474] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.907538][ T6474] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.929330][ T6474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.945125][ T6474] usb 7-1: config 0 descriptor?? [ 233.013231][ T1176] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.044249][ T1176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.090151][ T1176] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.103309][ T1176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.113567][ T1176] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.125219][ T1176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.220866][ T1176] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.241562][ T1176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.429109][ T6474] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 233.517404][ T6475] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 233.540956][ T8570] binder: 8569:8570 unknown command 0 [ 233.553516][ T8570] binder: 8569:8570 ioctl c0306201 80000080 returned -22 [ 233.695213][ T6475] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 233.708656][ T6475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.717326][ T6475] usb 6-1: Product: syz [ 233.721637][ T6475] usb 6-1: Manufacturer: syz [ 233.728915][ T6475] usb 6-1: SerialNumber: syz [ 233.748374][ T6475] usb 6-1: config 0 descriptor?? [ 233.761942][ T6475] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 233.916055][ T6474] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 234.236055][ T6474] usb 4-1: Using ep0 maxpacket: 32 [ 234.243853][ T6474] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 234.252673][ T6474] usb 4-1: config 0 has no interface number 0 [ 234.259166][ T6474] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.269371][ T6474] usb 4-1: config 0 interface 89 has no altsetting 0 [ 234.279522][ T6474] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 234.289634][ T6474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.298928][ T6474] usb 4-1: Product: syz [ 234.303283][ T6474] usb 4-1: Manufacturer: syz [ 234.308319][ T6474] usb 4-1: SerialNumber: syz [ 234.316768][ T6474] usb 4-1: config 0 descriptor?? [ 234.329057][ T6474] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 234.338880][ T6474] em28xx 4-1:0.89: Video interface 89 found: [ 234.934905][ T6474] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 235.256140][ T5756] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 235.312805][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.907'. [ 235.435811][ T5756] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 235.448791][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 235.457107][ T5756] usb 1-1: Product: syz [ 235.465743][ T5756] usb 1-1: config 0 descriptor?? [ 235.478374][ T5756] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 235.488525][ T5756] usb 1-1: Detected FT232H [ 235.493925][ T5638] usb 7-1: USB disconnect, device number 9 [ 235.677679][ T5756] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 235.784475][ T6475] gspca_stk1135: reg_w 0x203 err -71 [ 235.794186][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.800982][ T6475] gspca_stk1135: Sensor write failed [ 235.807129][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.813513][ T6475] gspca_stk1135: Sensor write failed [ 235.819926][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.826474][ T6475] gspca_stk1135: Sensor read failed [ 235.831920][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.838394][ T6475] gspca_stk1135: Sensor read failed [ 235.843678][ T6475] gspca_stk1135: Detected sensor type unknown (0x0) [ 235.851965][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.858444][ T6475] gspca_stk1135: Sensor read failed [ 235.863713][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.870231][ T6475] gspca_stk1135: Sensor read failed [ 235.875504][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.881941][ T6475] gspca_stk1135: Sensor write failed [ 235.887372][ T6475] gspca_stk1135: serial bus timeout: status=0x00 [ 235.893760][ T6475] gspca_stk1135: Sensor write failed [ 235.899359][ T6475] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 235.914265][ T6475] usb 6-1: USB disconnect, device number 12 [ 235.966127][ T6474] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 236.147372][ T5756] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.157336][ T6474] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 236.167938][ T6474] em28xx 4-1:0.89: board has no eeprom [ 236.227420][ T6474] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 236.235411][ T6474] em28xx 4-1:0.89: analog set to bulk mode. [ 236.242076][ T5756] em28xx 4-1:0.89: Registering V4L2 extension [ 236.256304][ T6474] usb 4-1: USB disconnect, device number 24 [ 236.294341][ T6474] em28xx 4-1:0.89: Disconnecting em28xx [ 236.325046][ T5756] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 236.334929][ T5756] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 236.342505][ T5756] em28xx 4-1:0.89: No AC97 audio processor [ 236.355749][ T5756] usb 4-1: Decoder not found [ 236.363332][ T5756] em28xx 4-1:0.89: failed to create media graph [ 236.370681][ T5756] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 236.399500][ T5756] em28xx 4-1:0.89: Registering snapshot button... [ 236.412473][ T5756] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input34 [ 236.428722][ T5756] em28xx 4-1:0.89: Remote control support is not available for this card. [ 236.458709][ T6474] em28xx 4-1:0.89: Closing input extension [ 236.474362][ T6474] em28xx 4-1:0.89: Deregistering snapshot button [ 236.521979][ T6474] em28xx 4-1:0.89: Freeing device [ 236.918278][ T5756] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 236.995789][ T8610] syzkaller0: entered promiscuous mode [ 237.002168][ T8610] syzkaller0: entered allmulticast mode [ 237.108047][ T5756] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.143873][ T5756] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.162548][ T5756] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.196076][ T5756] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.210931][ T5756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.234992][ T5756] usb 7-1: config 0 descriptor?? [ 237.474886][ T5756] usbhid 7-1:0.0: can't add hid device: -71 [ 237.490590][ T5756] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 237.533796][ T5756] usb 7-1: USB disconnect, device number 10 [ 237.878962][ T8631] syzkaller0: entered promiscuous mode [ 237.886325][ T8631] syzkaller0: entered allmulticast mode [ 238.068062][ T6456] usb 1-1: USB disconnect, device number 19 [ 238.103796][ T6456] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 238.140640][ T6456] ftdi_sio 1-1:0.0: device disconnected [ 238.866046][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 239.030720][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 239.039892][ T10] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 239.050427][ T10] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 239.070922][ T10] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.097714][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 239.107645][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.118293][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.126823][ T10] usb 1-1: Product: syz [ 239.131154][ T10] usb 1-1: Manufacturer: syz [ 239.135820][ T10] usb 1-1: SerialNumber: syz [ 239.151479][ T8656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.162807][ T8656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.404744][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 239.423349][ T10] usb 1-1: USB disconnect, device number 20 [ 240.683853][ T8662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 241.077200][ T5756] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 241.102416][ T8678] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 241.207533][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 241.248471][ T5756] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.268948][ T5756] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 241.290248][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.318797][ T5756] usb 2-1: config 0 descriptor?? [ 241.334563][ T5756] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.399440][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 241.415905][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 241.433157][ T10] usb 1-1: config 0 has no interface number 0 [ 241.445741][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 241.462538][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 241.473330][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.481938][ T10] usb 1-1: Product: syz [ 241.487045][ T10] usb 1-1: Manufacturer: syz [ 241.491785][ T10] usb 1-1: SerialNumber: syz [ 241.496576][ T6456] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 241.512594][ T10] usb 1-1: config 0 descriptor?? [ 241.679018][ T6456] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 241.711269][ T6456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.725576][ T5717] usb 2-1: USB disconnect, device number 25 [ 241.777588][ T6456] usb 4-1: config 0 descriptor?? [ 241.807276][ T6456] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 241.931355][ T8691] syzkaller0: entered promiscuous mode [ 241.937504][ T8691] syzkaller0: entered allmulticast mode [ 242.164100][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 242.176111][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 242.263285][ T6475] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 242.438680][ T6475] usb 6-1: Using ep0 maxpacket: 16 [ 242.474839][ T6475] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.489518][ T6475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.502938][ T6475] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.512343][ T6475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.520472][ T6475] usb 6-1: Product: syz [ 242.524678][ T6475] usb 6-1: Manufacturer: syz [ 242.529747][ T6475] usb 6-1: SerialNumber: syz [ 242.538023][ T6475] usb 6-1: config 0 descriptor?? [ 242.554121][ T6475] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.563540][ T6475] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 242.594600][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 242.621843][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 242.632329][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 242.655948][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 242.679520][ T10] usb 1-1: USB disconnect, device number 21 [ 243.027868][ T8705] netlink: 'syz.1.948': attribute type 16 has an invalid length. [ 243.036078][ T8705] netlink: 'syz.1.948': attribute type 17 has an invalid length. [ 243.173891][ T6475] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 243.180851][ T6475] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 243.490621][ T6456] gspca_stv06xx: I2C: Read error writing address: -71 [ 243.500642][ T6456] usb 4-1: USB disconnect, device number 25 [ 243.820840][ T6475] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 244.235678][ T6475] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 244.259016][ T6475] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 244.295735][ T6475] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 244.302747][ T6475] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 244.310459][ T6475] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 244.343006][ T6475] usb 6-1: USB disconnect, device number 13 [ 244.991913][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.019014][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.058955][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.127528][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.138654][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.151333][ T8705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.162469][ T8705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.178269][ T8705] veth1_vlan: left promiscuous mode [ 245.184614][ T8705] veth0_vlan: left promiscuous mode [ 245.190808][ T8705] veth0_vlan: entered promiscuous mode [ 245.199343][ T8705] veth1_vlan: entered promiscuous mode [ 245.214774][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.224169][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.233383][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.242521][ T8705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.254371][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.323239][ T8710] syzkaller0: entered promiscuous mode [ 245.330020][ T8710] syzkaller0: entered allmulticast mode [ 245.364886][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.372170][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.389323][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.396613][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.500234][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.527867][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.856627][ T5638] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 246.018609][ T5638] usb 2-1: Using ep0 maxpacket: 32 [ 246.048063][ T5638] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 246.059488][ T5638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.078641][ T5638] usb 2-1: config 0 descriptor?? [ 246.146532][ T6475] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 246.296336][ T6475] usb 6-1: Using ep0 maxpacket: 32 [ 246.302435][ T5638] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 246.311827][ T6475] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 246.322953][ T6475] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.337528][ T5638] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.358904][ T6475] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 246.374955][ T5638] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 246.383206][ T6475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.392833][ T5638] usb 2-1: media controller created [ 246.399318][ T6475] usb 6-1: Product: syz [ 246.408097][ T6475] usb 6-1: Manufacturer: syz [ 246.423656][ T6475] usb 6-1: SerialNumber: syz [ 246.447123][ T5638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.458447][ T6475] usb 6-1: config 0 descriptor?? [ 246.488615][ T6475] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 246.597925][ T5638] az6027: usb out operation failed. (-71) [ 246.627666][ T5638] az6027: usb out operation failed. (-71) [ 246.633455][ T5638] stb0899_attach: Driver disabled by Kconfig [ 246.641187][ T5638] az6027: no front-end attached [ 246.641187][ T5638] [ 246.678192][ T5638] az6027: usb out operation failed. (-71) [ 246.684037][ T5638] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 246.707559][ T6475] gspca_sunplus: reg_r err -32 [ 246.712491][ T5638] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 246.735339][ T5638] dvb-usb: schedule remote query interval to 400 msecs. [ 246.743489][ T5638] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 246.758023][ T5638] usb 2-1: USB disconnect, device number 26 [ 246.883592][ T5638] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 247.706226][ T6475] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 248.306672][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.315579][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.336754][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 249.498614][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 249.514571][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 249.538674][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.555762][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 249.582311][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 249.611519][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.623396][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 249.641596][ T10] usb 6-1: USB disconnect, device number 14 [ 249.648238][ T9] usb 1-1: Product: syz [ 249.669147][ T9] usb 1-1: Manufacturer: syz [ 249.703682][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 249.710546][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 249.731497][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 249.744452][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 249.928208][ T6475] usb 1-1: USB disconnect, device number 22 [ 250.586069][ T5638] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 250.758312][ T5638] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.778945][ T5638] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.793503][ T8816] syzkaller0: entered promiscuous mode [ 250.799477][ T5638] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.809505][ T8816] syzkaller0: entered allmulticast mode [ 250.815327][ T5638] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 250.831999][ T5638] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 250.859567][ T5638] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.882443][ T5638] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.901379][ T5638] usb 1-1: Product: syz [ 250.911542][ T5638] usb 1-1: Manufacturer: syz [ 250.949850][ T5638] cdc_wdm 1-1:1.0: skipping garbage [ 250.963700][ T5638] cdc_wdm 1-1:1.0: skipping garbage [ 250.984737][ T5638] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 250.998553][ T5638] cdc_wdm 1-1:1.0: Unknown control protocol [ 251.189915][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.195797][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.202075][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.207822][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.214286][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.220228][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.226181][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.232059][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.237856][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.243775][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.254983][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.260989][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.266875][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.272596][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.278445][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.284317][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.290430][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.296347][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.302235][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.307950][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.313754][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.319630][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.325641][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.331690][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.337597][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.343304][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.349100][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.355404][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.361301][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.367331][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.373225][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.378996][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.384786][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.390800][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.396677][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.402397][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.408229][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.413946][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.419755][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.425471][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.432274][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.438001][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.443792][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.449504][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.455402][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.461101][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.466920][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.472849][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.478740][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.484624][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.490354][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.496162][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.501887][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.507682][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.513552][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.519504][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.526740][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.532456][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.538253][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.544138][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.549859][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.555649][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.561359][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.567263][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.572984][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.578747][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.584466][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.590265][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.596220][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.602103][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.608009][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.613889][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.619763][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.625647][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.631563][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.637503][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.643381][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.649284][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.655169][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.660869][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.666672][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.672385][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.678162][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.683875][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.689804][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.695519][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.702013][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.707714][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.713515][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.719387][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.725283][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.730999][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.736879][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.742616][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.748474][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.754382][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.760315][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.766373][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.772267][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.778195][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.784075][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.789799][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.795609][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.801537][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.807420][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.813317][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.819038][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.824943][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.830851][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.836942][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.842821][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.849053][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.854943][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.860815][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.866731][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.872611][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.878497][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.884376][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.890263][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.896133][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.902011][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.907896][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.913763][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.919666][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.925541][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.931248][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 251.938849][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.944738][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.950613][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.956518][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.962387][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.968270][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.974145][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.980010][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.985883][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.991743][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 251.997691][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.003569][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.009446][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.015320][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.021208][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.027073][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.032929][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.038806][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.044514][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.050401][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.056325][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.062267][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.068173][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.074049][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.079948][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.089167][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.094887][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.100801][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.106723][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.112456][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.118285][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.124185][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.130101][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.135998][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.141905][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.147829][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.153718][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.159655][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.165539][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.171760][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.177743][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.183639][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.189541][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.195425][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.201344][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.207225][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.213130][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.219004][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.224891][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.230595][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.236415][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.242305][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.248478][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.254349][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.260215][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.266107][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.271977][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.277875][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.283745][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.289615][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.295583][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.301474][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.307413][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.313282][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.319150][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.325015][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.331054][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.337001][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.342878][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.348784][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.354698][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.360402][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.366204][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.372082][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.377961][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.383828][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.389724][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.395593][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.401501][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.407420][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.413301][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.419196][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.425075][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.430967][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.436864][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.442734][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.448635][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.454552][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.460459][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.466324][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.472182][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.478065][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.483950][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.489851][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.495725][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.501588][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.507495][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.513361][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.519222][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.525091][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.530983][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.536854][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.542714][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.548573][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.554442][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.560313][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.566395][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.572267][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.578162][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.584034][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.589936][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.595804][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.601679][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.608004][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.613872][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.619760][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.625625][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.631508][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.637397][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.643264][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.648969][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.656492][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.662402][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.668119][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.673881][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.679760][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.685483][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.691279][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.697273][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.703147][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.708857][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.714647][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.720362][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.726243][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.732134][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.737836][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.743663][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.749366][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.755169][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.761054][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.766772][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.772554][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.778286][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.784089][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.789798][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.795807][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.801520][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.807385][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.813118][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.818984][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.824709][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.830495][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.836396][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.842271][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.848175][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.854060][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.859928][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.865802][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.871726][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.877639][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.883502][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.889417][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.895289][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.901159][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.907040][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.913013][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.918966][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.924828][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.930738][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.936635][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.942339][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.948128][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.953857][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 252.959725][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.965599][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.971584][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.977485][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.983460][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.989325][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 252.995199][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.001105][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.006819][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.012649][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.018525][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.024432][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.030283][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.036007][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.041846][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.047577][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.053510][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.059252][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.065034][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.070757][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.076640][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.082494][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.088374][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.094176][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.099966][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.105697][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.111492][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.117214][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.123017][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.128831][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.134811][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.140536][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.146347][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.152234][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.158175][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.164084][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.166284][ T6474] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 253.174650][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.183456][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.189261][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.195040][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.200772][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.206820][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.212550][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.218366][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.224073][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.229880][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.235608][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.241475][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.247275][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.253200][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.258934][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.264744][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.270537][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.276348][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.282078][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.287929][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.293638][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.299449][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.305166][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.310947][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.316679][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.322495][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.328274][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.334053][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.339771][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.345580][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.351300][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.359267][ C0] cdc_wdm 1-1:1.0: Stall on int endpoint [ 253.365095][ C0] cdc_wdm 1-1:1.0: Cannot schedule work [ 253.371652][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 253.398920][ T5638] usb 1-1: USB disconnect, device number 23 [ 253.476489][ T6474] usb 7-1: Using ep0 maxpacket: 32 [ 253.483928][ T6474] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 133, changing to 11 [ 253.509926][ T6474] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57441, setting to 1024 [ 253.549415][ T6474] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 253.559737][ T6474] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 253.570931][ T6474] usb 7-1: Product: syz [ 253.575189][ T6474] usb 7-1: Manufacturer: syz [ 253.610160][ T6474] hub 7-1:4.0: USB hub found [ 253.672914][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b987800: rx timeout, send abort [ 253.808494][ T6474] hub 7-1:4.0: 2 ports detected [ 254.173056][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b042400: rx timeout, send abort [ 254.184378][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b987800: abort rx timeout. Force session deactivation [ 254.326082][ T6475] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 254.511175][ T6475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.525973][ T6475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.546034][ T6475] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.574567][ T6475] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.607799][ T6475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.654733][ T6475] usb 1-1: config 0 descriptor?? [ 254.681384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b042400: abort rx timeout. Force session deactivation [ 255.159296][ T6475] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 255.705352][ T6474] usb 7-1: USB disconnect, device number 11 [ 255.794393][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.801068][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966321][ T6475] usb 7-1-port1: config error [ 256.596214][ T8860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.118821][ T9] usb 1-1: USB disconnect, device number 24 [ 257.210487][ T8876] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 257.230578][ T8873] syzkaller0: entered promiscuous mode [ 257.250516][ T8873] syzkaller0: entered allmulticast mode [ 257.439303][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.999'. [ 257.533295][ T8883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.076097][ T5724] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 260.238714][ T5724] usb 6-1: Using ep0 maxpacket: 8 [ 260.265038][ T5724] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 260.283647][ T5724] usb 6-1: config 0 has no interface number 0 [ 260.301061][ T5724] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 260.312393][ T5724] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 260.324703][ T5724] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.352281][ T5724] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 260.390708][ T5724] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 260.426056][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.455060][ T5724] usb 6-1: config 0 descriptor?? [ 260.493304][ T5724] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 260.507090][ T6474] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 260.558325][ T8913] syzkaller0: entered promiscuous mode [ 260.568831][ T8913] syzkaller0: entered allmulticast mode [ 260.576855][ T8915] netlink: 'syz.0.1012': attribute type 11 has an invalid length. [ 260.644215][ T8917] binder: 8916:8917 ioctl c0306201 800003c0 returned -14 [ 260.686588][ T6474] usb 4-1: Using ep0 maxpacket: 16 [ 260.708619][ T6474] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 260.730734][ T6474] usb 4-1: config 0 has no interface number 0 [ 260.746331][ T6474] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 260.778080][ T6474] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 260.802335][ T6474] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 260.823521][ T6473] usb 6-1: USB disconnect, device number 15 [ 260.840199][ T6474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.864802][ T6473] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 260.877712][ T6474] usb 4-1: Product: syz [ 260.885237][ T6474] usb 4-1: Manufacturer: syz [ 260.912584][ T6474] usb 4-1: SerialNumber: syz [ 260.937161][ T6474] usb 4-1: config 0 descriptor?? [ 260.943302][ T8908] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 260.965067][ T8908] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.206691][ T8908] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.218492][ T8908] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.421970][ T8933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.779709][ T5953] bridge_slave_1: left allmulticast mode [ 261.789104][ T5953] bridge_slave_1: left promiscuous mode [ 261.797347][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.816726][ T5953] bridge_slave_0: left allmulticast mode [ 261.836058][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 261.844619][ T5953] bridge_slave_0: left promiscuous mode [ 261.854068][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.018228][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 262.034947][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 262.063691][ T6474] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 262.069553][ T9] usb 1-1: config 0 has no interface number 0 [ 262.103656][ T6474] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 262.105358][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 262.172138][ T6474] asix 4-1:0.34: probe with driver asix failed with error -71 [ 262.187888][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 262.218002][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.240306][ T6474] usb 4-1: USB disconnect, device number 26 [ 262.250522][ T9] usb 1-1: Product: syz [ 262.271577][ T9] usb 1-1: Manufacturer: syz [ 262.282737][ T9] usb 1-1: SerialNumber: syz [ 262.354867][ T9] usb 1-1: config 0 descriptor?? [ 262.393051][ T8940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.578565][ T5953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.618934][ T5953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.639124][ T8940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.668974][ T5953] bond0 (unregistering): Released all slaves [ 263.187502][ T8973] syzkaller0: entered promiscuous mode [ 263.220077][ T8973] syzkaller0: entered allmulticast mode [ 263.403374][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 263.434048][ T5953] hsr_slave_0: left promiscuous mode [ 263.483038][ T5953] hsr_slave_1: left promiscuous mode [ 263.510006][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.533900][ T5953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.914873][ T5953] team0 (unregistering): Port device team_slave_1 removed [ 263.958958][ T5953] team0 (unregistering): Port device team_slave_0 removed [ 264.426918][ T6474] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 264.496889][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 264.534349][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 264.568944][ T9] asix 1-1:0.188: probe with driver asix failed with error -71 [ 264.601361][ T6474] usb 7-1: Using ep0 maxpacket: 8 [ 264.618814][ T6474] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 264.649544][ T6474] usb 7-1: config 0 has no interface number 0 [ 264.664346][ T9] usb 1-1: USB disconnect, device number 25 [ 264.684001][ T6474] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.727426][ T6474] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 264.765765][ T6474] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.831135][ T6474] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.896845][ T6474] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 264.915517][ T6474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.947646][ T8997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 264.994420][ T6474] usb 7-1: config 0 descriptor?? [ 265.055604][ T6474] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 265.429046][ C1] ldusb 7-1:0.55: usb_submit_urb failed (-1) [ 265.438654][ T6473] usb 7-1: USB disconnect, device number 12 [ 265.450710][ T6473] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 265.631206][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1035'. [ 265.897342][ T6460] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 266.065990][ T6460] usb 4-1: Using ep0 maxpacket: 8 [ 266.079780][ T6460] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.110771][ T6460] usb 4-1: config 4 interface 0 has no altsetting 0 [ 266.137011][ T6460] usb 4-1: string descriptor 0 read error: -22 [ 266.161863][ T6460] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 266.173788][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 266.202302][ T6460] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 266.275602][ T6460] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 266.312661][ T6460] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.352470][ T6460] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 266.372996][ T6460] usb 4-1: media controller created [ 266.444324][ T6460] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.749940][ T5639] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 266.770646][ T6460] zl10353_read_register: readreg error (reg=127, ret==0) [ 266.885126][ T6460] usb 4-1: USB disconnect, device number 27 [ 267.470563][ T9049] syzkaller0: entered promiscuous mode [ 267.494078][ T9049] syzkaller0: entered allmulticast mode [ 267.739017][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 267.790215][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.876101][ T6460] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 267.979865][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 268.041175][ T9068] syzkaller0: entered promiscuous mode [ 268.056545][ T9068] syzkaller0: entered allmulticast mode [ 268.062501][ T6460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.083577][ T6460] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.111131][ T6460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.157757][ T6460] usb 2-1: config 0 descriptor?? [ 268.400705][ T6460] usbhid 2-1:0.0: can't add hid device: -71 [ 268.422078][ T6460] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 268.460463][ T6460] usb 2-1: USB disconnect, device number 27 [ 268.480623][ T9078] syzkaller0: entered promiscuous mode [ 268.500099][ T9078] syzkaller0: entered allmulticast mode [ 268.686119][ T6474] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 268.737512][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1053'. [ 268.865957][ T6474] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 268.893265][ T6474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.914897][ T6474] usb 6-1: Product: syz [ 268.924088][ T6474] usb 6-1: Manufacturer: syz [ 268.942013][ T6474] usb 6-1: SerialNumber: syz [ 268.957229][ T6460] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 269.127946][ T6460] usb 2-1: Using ep0 maxpacket: 32 [ 269.155188][ T6460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.201434][ T6460] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 269.240972][ T6460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.275585][ T6460] usb 2-1: config 0 descriptor?? [ 269.305366][ T6460] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 269.346553][ T6460] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 269.419120][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 269.436933][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 269.459333][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 270.026678][ T9] usb 2-1: USB disconnect, device number 28 [ 270.061302][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 270.697604][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 270.939633][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 270.976895][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 271.007864][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 271.030893][ T6474] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 271.060717][ T6474] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 271.086656][ T6474] usb 6-1: USB disconnect, device number 16 [ 272.017287][ T6460] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 272.168021][ T5756] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 272.179281][ T6460] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 272.202924][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 272.213919][ T6460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.232442][ T6460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.243899][ T6460] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 272.259136][ T6460] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 272.269179][ T6460] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 272.278117][ T6460] usb 2-1: Manufacturer: syz [ 272.289015][ T9156] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 272.295285][ T6460] usb 2-1: config 0 descriptor?? [ 272.346534][ T5756] usb 7-1: Using ep0 maxpacket: 16 [ 272.360459][ T5756] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 272.384769][ T5756] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.386334][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 272.398669][ T5756] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.410623][ T5756] usb 7-1: Product: syz [ 272.415043][ T5756] usb 7-1: Manufacturer: syz [ 272.420496][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.432907][ T5756] usb 7-1: SerialNumber: syz [ 272.439830][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.449557][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 272.458987][ T5724] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 272.467718][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.468347][ T5756] usb 7-1: config 0 descriptor?? [ 272.490578][ T9] usb 6-1: config 0 descriptor?? [ 272.506955][ T5756] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.519660][ T5756] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 272.616189][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 272.628387][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 272.652261][ T5724] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.666095][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.688251][ T5724] usb 1-1: Product: syz [ 272.696056][ T5724] usb 1-1: Manufacturer: syz [ 272.707077][ T5724] usb 1-1: SerialNumber: syz [ 272.719149][ T5724] usb 1-1: config 0 descriptor?? [ 272.740952][ T6460] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 272.752708][ T5724] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.776922][ T5724] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 272.787995][ T6460] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 273.117100][ T5756] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 273.207817][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 273.351756][ T5724] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 273.533160][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.542271][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.552061][ T5756] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 273.566202][ T5756] em28xx 7-1:0.0: board has no eeprom [ 273.629565][ T6460] usb 2-1: USB disconnect, device number 29 [ 273.787681][ T5724] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 273.806371][ T5724] em28xx 1-1:0.0: board has no eeprom [ 273.926487][ T9184] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 273.945480][ T9184] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 273.954654][ T9184] kvm: requested 87161 ns i8254 timer period limited to 200000 ns [ 273.964010][ T9184] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 273.972570][ T9184] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 273.981995][ T9184] kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 274.009695][ T9184] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 274.031863][ T9184] kvm: requested 142476 ns i8254 timer period limited to 200000 ns [ 274.055093][ T9184] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 274.064175][ T9184] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 274.716526][ T5724] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 274.717548][ T5756] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 274.733277][ T5724] em28xx 1-1:0.0: dvb set to bulk mode. [ 274.733881][ T5756] em28xx 7-1:0.0: dvb set to bulk mode. [ 274.745218][ T9] em28xx 1-1:0.0: Binding DVB extension [ 274.770307][ T5756] usb 7-1: USB disconnect, device number 13 [ 274.773157][ T5724] usb 1-1: USB disconnect, device number 26 [ 274.822206][ T5724] em28xx 1-1:0.0: Disconnecting em28xx [ 274.854793][ T5756] em28xx 7-1:0.0: Disconnecting em28xx [ 274.876594][ T9] em28xx 1-1:0.0: Registering input extension [ 274.885465][ T6473] em28xx 7-1:0.0: Binding DVB extension [ 274.942702][ T6474] usb 6-1: USB disconnect, device number 17 [ 274.991462][ T6473] em28xx 7-1:0.0: Registering input extension [ 275.016360][ T5756] em28xx 7-1:0.0: Closing input extension [ 275.039775][ T5724] em28xx 1-1:0.0: Closing input extension [ 275.124991][ T5756] em28xx 7-1:0.0: Freeing device [ 275.130648][ T5724] em28xx 1-1:0.0: Freeing device [ 275.139270][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 275.398596][ T6474] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 275.566137][ T6474] usb 6-1: Using ep0 maxpacket: 8 [ 275.610516][ T6474] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.640037][ T6474] usb 6-1: config 4 interface 0 has no altsetting 0 [ 275.661041][ T6474] usb 6-1: string descriptor 0 read error: -22 [ 275.677765][ T6474] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 275.690648][ T6474] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 275.765336][ T6474] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 275.792923][ T6474] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.816573][ T6474] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 275.823920][ T6474] usb 6-1: media controller created [ 275.966119][ T6460] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 275.980960][ T6474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.139534][ T6460] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 276.173782][ T6460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.202962][ T6460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.229954][ T6460] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 276.254341][ T6474] zl10353_read_register: readreg error (reg=127, ret==0) [ 276.291011][ T6460] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 276.300725][ T6460] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 276.309036][ T6460] usb 1-1: Manufacturer: syz [ 276.317796][ T6460] usb 1-1: config 0 descriptor?? [ 276.455844][ T6474] usb 6-1: USB disconnect, device number 18 [ 276.713731][ T9228] syzkaller0: entered promiscuous mode [ 276.739830][ T9228] syzkaller0: entered allmulticast mode [ 276.764547][ T6460] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 276.816213][ T6460] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 277.988067][ T6474] usb 1-1: USB disconnect, device number 27 [ 279.446003][ T9272] [ 279.448491][ T9272] ===================================================== [ 279.455542][ T9272] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 279.463050][ T9272] syzkaller #0 Tainted: G L [ 279.469096][ T9272] ----------------------------------------------------- [ 279.476065][ T9272] syz.5.1108/9272 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 279.483746][ T9272] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 279.492445][ T9272] [ 279.492445][ T9272] and this task is already holding: [ 279.499846][ T9272] ffff888027cd0c20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 279.508541][ T9272] which would create a new lock dependency: [ 279.514466][ T9272] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 279.522104][ T9272] [ 279.522104][ T9272] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 279.529445][ T6473] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 279.531580][ T9272] (&dev->event_lock#2){..-.}-{3:3} [ 279.531613][ T9272] [ 279.531613][ T9272] ... which became SOFTIRQ-irq-safe at: [ 279.531625][ T9272] lock_acquire+0x106/0x350 [ 279.556752][ T9272] _raw_spin_lock_irqsave+0x40/0x60 [ 279.562094][ T9272] input_event+0x71/0xc0 [ 279.566459][ T9272] hidinput_hid_event+0x13df/0x1ec0 [ 279.571767][ T9272] hid_process_event+0x4be/0x620 [ 279.576824][ T9272] hid_report_raw_event+0xec2/0x1730 [ 279.582229][ T9272] hid_input_report+0x44b/0x580 [ 279.587199][ T9272] hid_ctrl+0x1ec/0x560 [ 279.591488][ T9272] __usb_hcd_giveback_urb+0x376/0x540 [ 279.596974][ T9272] dummy_timer+0xbc0/0x4650 [ 279.601596][ T9272] __hrtimer_run_queues+0x3c0/0xa20 [ 279.606906][ T9272] hrtimer_run_softirq+0x17a/0x240 [ 279.612134][ T9272] handle_softirqs+0x22a/0x840 [ 279.617006][ T9272] __irq_exit_rcu+0xca/0x220 [ 279.621705][ T9272] irq_exit_rcu+0x9/0x30 [ 279.626057][ T9272] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 279.631815][ T9272] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 279.637929][ T9272] finish_task_switch+0x427/0xbe0 [ 279.643059][ T9272] __schedule+0x17bc/0x5680 [ 279.647673][ T9272] preempt_schedule_common+0x82/0xd0 [ 279.653077][ T9272] preempt_schedule_thunk+0x16/0x30 [ 279.658396][ T9272] _raw_spin_unlock_irqrestore+0x74/0x80 [ 279.664147][ T9272] usbhid_init_reports+0x83/0x270 [ 279.669286][ T9272] hiddev_ioctl+0x901/0x1710 [ 279.673995][ T9272] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 279.679574][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 279.684889][ T9272] do_fast_syscall_32+0x33/0x70 [ 279.689851][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.696291][ T9272] [ 279.696291][ T9272] to a SOFTIRQ-irq-unsafe lock: [ 279.703324][ T9272] (tasklist_lock){.+.+}-{3:3} [ 279.703352][ T9272] [ 279.703352][ T9272] ... which became SOFTIRQ-irq-unsafe at: [ 279.716009][ T9272] ... [ 279.716018][ T9272] lock_acquire+0x106/0x350 [ 279.723227][ T9272] _raw_read_lock+0x36/0x50 [ 279.727839][ T9272] __do_wait+0xde/0x740 [ 279.732112][ T9272] do_wait+0x1e7/0x510 [ 279.736300][ T9272] kernel_wait+0xd6/0x1c0 [ 279.740743][ T9272] call_usermodehelper_exec_work+0xbe/0x230 [ 279.746744][ T9272] process_scheduled_works+0xb5d/0x1860 [ 279.752406][ T9272] worker_thread+0xa53/0xfc0 [ 279.757101][ T9272] kthread+0x388/0x470 [ 279.761329][ T9272] ret_from_fork+0x514/0xb70 [ 279.766023][ T9272] ret_from_fork_asm+0x1a/0x30 [ 279.770910][ T9272] [ 279.770910][ T9272] other info that might help us debug this: [ 279.770910][ T9272] [ 279.781159][ T9272] Chain exists of: [ 279.781159][ T9272] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 279.781159][ T9272] [ 279.794229][ T9272] Possible interrupt unsafe locking scenario: [ 279.794229][ T9272] [ 279.802566][ T9272] CPU0 CPU1 [ 279.807965][ T9272] ---- ---- [ 279.813347][ T9272] lock(tasklist_lock); [ 279.817614][ T9272] local_irq_disable(); [ 279.824383][ T9272] lock(&dev->event_lock#2); [ 279.831613][ T9272] lock(&f_owner->lock); [ 279.838499][ T9272] [ 279.841970][ T9272] lock(&dev->event_lock#2); [ 279.846846][ T9272] [ 279.846846][ T9272] *** DEADLOCK *** [ 279.846846][ T9272] [ 279.854999][ T9272] 5 locks held by syz.5.1108/9272: [ 279.860130][ T9272] #0: ffffffff8eb03ef0 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 279.869312][ T9272] #1: ffff888035c28e88 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 279.878831][ T9272] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 279.887942][ T9272] #3: ffff88802a315d38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 279.897115][ T9272] #4: ffff888027cd0c20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 279.906305][ T9272] [ 279.906305][ T9272] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 279.916722][ T9272] -> (&dev->event_lock#2){..-.}-{3:3} { [ 279.922576][ T9272] IN-SOFTIRQ-W at: [ 279.926839][ T9272] lock_acquire+0x106/0x350 [ 279.933542][ T9272] _raw_spin_lock_irqsave+0x40/0x60 [ 279.940954][ T9272] input_event+0x71/0xc0 [ 279.947393][ T9272] hidinput_hid_event+0x13df/0x1ec0 [ 279.954784][ T9272] hid_process_event+0x4be/0x620 [ 279.961923][ T9272] hid_report_raw_event+0xec2/0x1730 [ 279.969406][ T9272] hid_input_report+0x44b/0x580 [ 279.976475][ T9272] hid_ctrl+0x1ec/0x560 [ 279.982821][ T9272] __usb_hcd_giveback_urb+0x376/0x540 [ 279.990417][ T9272] dummy_timer+0xbc0/0x4650 [ 279.997126][ T9272] __hrtimer_run_queues+0x3c0/0xa20 [ 280.004521][ T9272] hrtimer_run_softirq+0x17a/0x240 [ 280.011837][ T9272] handle_softirqs+0x22a/0x840 [ 280.018803][ T9272] __irq_exit_rcu+0xca/0x220 [ 280.025602][ T9272] irq_exit_rcu+0x9/0x30 [ 280.032046][ T9272] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 280.039876][ T9272] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.048050][ T9272] finish_task_switch+0x427/0xbe0 [ 280.055263][ T9272] __schedule+0x17bc/0x5680 [ 280.061963][ T9272] preempt_schedule_common+0x82/0xd0 [ 280.069443][ T9272] preempt_schedule_thunk+0x16/0x30 [ 280.076838][ T9272] _raw_spin_unlock_irqrestore+0x74/0x80 [ 280.084662][ T9272] usbhid_init_reports+0x83/0x270 [ 280.091881][ T9272] hiddev_ioctl+0x901/0x1710 [ 280.098665][ T9272] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 280.106326][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.113724][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.120769][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.129313][ T9272] INITIAL USE at: [ 280.133490][ T9272] lock_acquire+0x106/0x350 [ 280.140099][ T9272] _raw_spin_lock_irqsave+0x40/0x60 [ 280.147496][ T9272] input_inject_event+0xa4/0x330 [ 280.154538][ T9272] kbd_led_trigger_activate+0xbc/0x100 [ 280.162106][ T9272] led_trigger_set+0x535/0x960 [ 280.168992][ T9272] led_trigger_set_default+0x260/0x2a0 [ 280.176565][ T9272] led_classdev_register_ext+0x787/0x9c0 [ 280.184307][ T9272] input_leds_connect+0x517/0x790 [ 280.191437][ T9272] input_register_device+0xce0/0x1140 [ 280.198916][ T9272] atkbd_connect+0x71e/0xa10 [ 280.205612][ T9272] serio_driver_probe+0x82/0xb0 [ 280.212569][ T9272] really_probe+0x267/0xaf0 [ 280.219186][ T9272] __driver_probe_device+0x1ef/0x380 [ 280.226584][ T9272] driver_probe_device+0x4f/0x240 [ 280.233721][ T9272] __driver_attach+0x34c/0x640 [ 280.240588][ T9272] bus_for_each_dev+0x23b/0x2c0 [ 280.247557][ T9272] serio_handle_event+0x1af/0xf80 [ 280.254695][ T9272] process_scheduled_works+0xb5d/0x1860 [ 280.262347][ T9272] worker_thread+0xa53/0xfc0 [ 280.269039][ T9272] kthread+0x388/0x470 [ 280.275214][ T9272] ret_from_fork+0x514/0xb70 [ 280.281903][ T9272] ret_from_fork_asm+0x1a/0x30 [ 280.288777][ T9272] } [ 280.291552][ T9272] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 280.300868][ T9272] -> (&client->buffer_lock){....}-{3:3} { [ 280.306806][ T9272] INITIAL USE at: [ 280.310894][ T9272] lock_acquire+0x106/0x350 [ 280.317326][ T9272] _raw_spin_lock+0x2e/0x40 [ 280.323760][ T9272] evdev_pass_values+0xb9/0xbd0 [ 280.330549][ T9272] evdev_events+0x1e6/0x340 [ 280.336991][ T9272] input_pass_values+0x288/0x890 [ 280.343868][ T9272] input_event_dispose+0x330/0x6b0 [ 280.350910][ T9272] input_inject_event+0x1dc/0x330 [ 280.357867][ T9272] evdev_write+0x325/0x4c0 [ 280.364222][ T9272] vfs_write+0x29a/0xb90 [ 280.370400][ T9272] ksys_write+0x150/0x270 [ 280.376672][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.383807][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.390596][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.398862][ T9272] } [ 280.401546][ T9272] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 280.409891][ T9272] ... acquired at: [ 280.413880][ T9272] _raw_spin_lock+0x2e/0x40 [ 280.418576][ T9272] evdev_pass_values+0xb9/0xbd0 [ 280.423629][ T9272] evdev_events+0x1e6/0x340 [ 280.428331][ T9272] input_pass_values+0x288/0x890 [ 280.433465][ T9272] input_event_dispose+0x330/0x6b0 [ 280.438769][ T9272] input_inject_event+0x1dc/0x330 [ 280.443988][ T9272] evdev_write+0x325/0x4c0 [ 280.448609][ T9272] vfs_write+0x29a/0xb90 [ 280.453053][ T9272] ksys_write+0x150/0x270 [ 280.457578][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.462970][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.468018][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.474549][ T9272] [ 280.476882][ T9272] -> (&new->fa_lock){....}-{3:3} { [ 280.482114][ T9272] INITIAL USE at: [ 280.486118][ T9272] lock_acquire+0x106/0x350 [ 280.492384][ T9272] _raw_write_lock_irq+0x3d/0x50 [ 280.499084][ T9272] fasync_remove_entry+0xf1/0x1c0 [ 280.505881][ T9272] lease_modify+0x4f7/0x6c0 [ 280.512153][ T9272] locks_remove_file+0x5f0/0xf70 [ 280.518849][ T9272] __fput+0x3ae/0xa60 [ 280.524588][ T9272] task_work_run+0x1d9/0x270 [ 280.530938][ T9272] exit_to_user_mode_loop+0xed/0x480 [ 280.537980][ T9272] __do_fast_syscall_32+0x446/0x6e0 [ 280.544943][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.551556][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.559645][ T9272] INITIAL READ USE at: [ 280.564078][ T9272] lock_acquire+0x106/0x350 [ 280.570779][ T9272] _raw_read_lock_irqsave+0x48/0x60 [ 280.578179][ T9272] kill_fasync+0x199/0x4d0 [ 280.584793][ T9272] evdev_pass_values+0x627/0xbd0 [ 280.591928][ T9272] evdev_events+0x1e6/0x340 [ 280.598630][ T9272] input_pass_values+0x288/0x890 [ 280.605769][ T9272] input_event_dispose+0x330/0x6b0 [ 280.613073][ T9272] input_inject_event+0x1dc/0x330 [ 280.620294][ T9272] evdev_write+0x325/0x4c0 [ 280.626906][ T9272] vfs_write+0x29a/0xb90 [ 280.633342][ T9272] ksys_write+0x150/0x270 [ 280.639867][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.647263][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.654312][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.662833][ T9272] } [ 280.665435][ T9272] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 280.674224][ T9272] ... acquired at: [ 280.678136][ T9272] _raw_read_lock_irqsave+0x48/0x60 [ 280.683531][ T9272] kill_fasync+0x199/0x4d0 [ 280.688151][ T9272] evdev_pass_values+0x627/0xbd0 [ 280.693292][ T9272] evdev_events+0x1e6/0x340 [ 280.697995][ T9272] input_pass_values+0x288/0x890 [ 280.703166][ T9272] input_event_dispose+0x330/0x6b0 [ 280.708483][ T9272] input_inject_event+0x1dc/0x330 [ 280.713701][ T9272] evdev_write+0x325/0x4c0 [ 280.718322][ T9272] vfs_write+0x29a/0xb90 [ 280.722762][ T9272] ksys_write+0x150/0x270 [ 280.727287][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.732685][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.737735][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.744255][ T9272] [ 280.746594][ T9272] -> (&f_owner->lock){....}-{3:3} { [ 280.751829][ T9272] INITIAL USE at: [ 280.755737][ T9272] lock_acquire+0x106/0x350 [ 280.761826][ T9272] _raw_write_lock_irq+0x3d/0x50 [ 280.768350][ T9272] __f_setown+0x67/0x370 [ 280.774190][ T9272] generic_setlease+0xacf/0xfd0 [ 280.780634][ T9272] do_fcntl_add_lease+0x35e/0x470 [ 280.787245][ T9272] fcntl_setlease+0x123/0x180 [ 280.793512][ T9272] do_fcntl+0x8b3/0x1a20 [ 280.799344][ T9272] do_compat_fcntl64+0x51e/0x7e0 [ 280.805870][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.812661][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.819104][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.827026][ T9272] INITIAL READ USE at: [ 280.831376][ T9272] lock_acquire+0x106/0x350 [ 280.837899][ T9272] _raw_read_lock_irqsave+0x48/0x60 [ 280.845118][ T9272] send_sigurg+0x55/0x420 [ 280.851470][ T9272] sk_send_sigurg+0x6c/0x2e0 [ 280.858076][ T9272] tcp_check_urg+0x200/0x760 [ 280.864704][ T9272] tcp_urg+0x15d/0x410 [ 280.870808][ T9272] tcp_rcv_established+0xf7b/0x2800 [ 280.878025][ T9272] tcp_v4_do_rcv+0x964/0x13c0 [ 280.884738][ T9272] __release_sock+0x265/0x3a0 [ 280.891444][ T9272] release_sock+0x190/0x260 [ 280.897964][ T9272] tcp_sendmsg+0x39/0x50 [ 280.904217][ T9272] __sys_sendto+0x5de/0x710 [ 280.910735][ T9272] __ia32_sys_sendto+0xdd/0x100 [ 280.917605][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 280.924827][ T9272] do_fast_syscall_32+0x33/0x70 [ 280.931704][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.940050][ T9272] } [ 280.942569][ T9272] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 280.951437][ T9272] ... acquired at: [ 280.955251][ T9272] _raw_read_lock_irqsave+0x48/0x60 [ 280.960640][ T9272] send_sigio+0x38/0x370 [ 280.965085][ T9272] kill_fasync+0x24d/0x4d0 [ 280.969712][ T9272] lease_break_callback+0x26/0x30 [ 280.974937][ T9272] __break_lease+0x81f/0x1ea0 [ 280.979808][ T9272] do_dentry_open+0x1010/0x14e0 [ 280.984851][ T9272] vfs_open+0x3b/0x340 [ 280.989133][ T9272] path_openat+0x2e08/0x3860 [ 280.993934][ T9272] do_file_open+0x23e/0x4a0 [ 280.998640][ T9272] do_sys_openat2+0x113/0x200 [ 281.003510][ T9272] __ia32_compat_sys_open+0x117/0x140 [ 281.009075][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 281.014480][ T9272] do_fast_syscall_32+0x33/0x70 [ 281.019529][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.026063][ T9272] [ 281.028408][ T9272] [ 281.028408][ T9272] the dependencies between the lock to be acquired [ 281.028417][ T9272] and SOFTIRQ-irq-unsafe lock: [ 281.042058][ T9272] -> (tasklist_lock){.+.+}-{3:3} { [ 281.047300][ T9272] HARDIRQ-ON-R at: [ 281.051300][ T9272] lock_acquire+0x106/0x350 [ 281.057470][ T9272] _raw_read_lock+0x36/0x50 [ 281.063642][ T9272] __do_wait+0xde/0x740 [ 281.069475][ T9272] do_wait+0x1e7/0x510 [ 281.075217][ T9272] kernel_wait+0xd6/0x1c0 [ 281.081219][ T9272] call_usermodehelper_exec_work+0xbe/0x230 [ 281.088793][ T9272] process_scheduled_works+0xb5d/0x1860 [ 281.096007][ T9272] worker_thread+0xa53/0xfc0 [ 281.102272][ T9272] kthread+0x388/0x470 [ 281.108009][ T9272] ret_from_fork+0x514/0xb70 [ 281.114264][ T9272] ret_from_fork_asm+0x1a/0x30 [ 281.120706][ T9272] SOFTIRQ-ON-R at: [ 281.124700][ T9272] lock_acquire+0x106/0x350 [ 281.130869][ T9272] _raw_read_lock+0x36/0x50 [ 281.137041][ T9272] __do_wait+0xde/0x740 [ 281.142879][ T9272] do_wait+0x1e7/0x510 [ 281.148616][ T9272] kernel_wait+0xd6/0x1c0 [ 281.154623][ T9272] call_usermodehelper_exec_work+0xbe/0x230 [ 281.162185][ T9272] process_scheduled_works+0xb5d/0x1860 [ 281.169396][ T9272] worker_thread+0xa53/0xfc0 [ 281.175651][ T9272] kthread+0x388/0x470 [ 281.181394][ T9272] ret_from_fork+0x514/0xb70 [ 281.187717][ T9272] ret_from_fork_asm+0x1a/0x30 [ 281.194156][ T9272] INITIAL USE at: [ 281.198064][ T9272] lock_acquire+0x106/0x350 [ 281.204150][ T9272] _raw_write_lock_irq+0x3d/0x50 [ 281.210673][ T9272] copy_process+0x2b4c/0x4440 [ 281.216934][ T9272] kernel_clone+0x284/0x8f0 [ 281.223027][ T9272] user_mode_thread+0x110/0x180 [ 281.229468][ T9272] rest_init+0x23/0x300 [ 281.235201][ T9272] start_kernel+0x38a/0x3e0 [ 281.241288][ T9272] x86_64_start_reservations+0x24/0x30 [ 281.248420][ T9272] x86_64_start_kernel+0x143/0x1c0 [ 281.255123][ T9272] common_startup_64+0x13e/0x147 [ 281.261648][ T9272] INITIAL READ USE at: [ 281.265994][ T9272] lock_acquire+0x106/0x350 [ 281.272512][ T9272] _raw_read_lock+0x36/0x50 [ 281.279031][ T9272] __do_wait+0xde/0x740 [ 281.285215][ T9272] do_wait+0x1e7/0x510 [ 281.291307][ T9272] kernel_wait+0xd6/0x1c0 [ 281.297671][ T9272] call_usermodehelper_exec_work+0xbe/0x230 [ 281.305582][ T9272] process_scheduled_works+0xb5d/0x1860 [ 281.313140][ T9272] worker_thread+0xa53/0xfc0 [ 281.319750][ T9272] kthread+0x388/0x470 [ 281.325835][ T9272] ret_from_fork+0x514/0xb70 [ 281.332445][ T9272] ret_from_fork_asm+0x1a/0x30 [ 281.339228][ T9272] } [ 281.341739][ T9272] ... key at: [] tasklist_lock+0x18/0x40 [ 281.349482][ T9272] ... acquired at: [ 281.353295][ T9272] _raw_read_lock+0x36/0x50 [ 281.357992][ T9272] send_sigio+0x101/0x370 [ 281.362530][ T9272] kill_fasync+0x24d/0x4d0 [ 281.367150][ T9272] lease_break_callback+0x26/0x30 [ 281.372395][ T9272] __break_lease+0x81f/0x1ea0 [ 281.377274][ T9272] do_dentry_open+0x1010/0x14e0 [ 281.382328][ T9272] vfs_open+0x3b/0x340 [ 281.386591][ T9272] path_openat+0x2e08/0x3860 [ 281.391393][ T9272] do_file_open+0x23e/0x4a0 [ 281.396110][ T9272] do_sys_openat2+0x113/0x200 [ 281.400992][ T9272] __ia32_compat_sys_open+0x117/0x140 [ 281.406564][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 281.411957][ T9272] do_fast_syscall_32+0x33/0x70 [ 281.417002][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.423526][ T9272] [ 281.425858][ T9272] [ 281.425858][ T9272] stack backtrace: [ 281.431775][ T9272] CPU: 0 UID: 0 PID: 9272 Comm: syz.5.1108 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.431800][ T9272] Tainted: [L]=SOFTLOCKUP [ 281.431806][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.431824][ T9272] Call Trace: [ 281.431836][ T9272] [ 281.431844][ T9272] dump_stack_lvl+0xe8/0x150 [ 281.431865][ T9272] __lock_acquire+0x2a94/0x2cf0 [ 281.431893][ T9272] ? send_sigio+0x101/0x370 [ 281.431917][ T9272] lock_acquire+0x106/0x350 [ 281.431934][ T9272] ? send_sigio+0x101/0x370 [ 281.431959][ T9272] ? lock_acquire+0x106/0x350 [ 281.431976][ T9272] ? kill_fasync+0x199/0x4d0 [ 281.432002][ T9272] _raw_read_lock+0x36/0x50 [ 281.432021][ T9272] ? send_sigio+0x101/0x370 [ 281.432044][ T9272] send_sigio+0x101/0x370 [ 281.432076][ T9272] kill_fasync+0x24d/0x4d0 [ 281.432101][ T9272] ? kill_fasync+0x53/0x4d0 [ 281.432125][ T9272] lease_break_callback+0x26/0x30 [ 281.432153][ T9272] __break_lease+0x81f/0x1ea0 [ 281.432181][ T9272] ? __pfx___break_lease+0x10/0x10 [ 281.432204][ T9272] ? __pfx_apparmor_file_open+0x10/0x10 [ 281.432223][ T9272] ? fsnotify_open_perm_and_set_mode+0x13c/0x6d0 [ 281.432251][ T9272] do_dentry_open+0x1010/0x14e0 [ 281.432275][ T9272] vfs_open+0x3b/0x340 [ 281.432293][ T9272] ? path_openat+0x2df0/0x3860 [ 281.432319][ T9272] path_openat+0x2e08/0x3860 [ 281.432350][ T9272] ? __pfx_stack_trace_save+0x10/0x10 [ 281.432379][ T9272] ? stack_depot_save_flags+0x33/0x810 [ 281.432405][ T9272] ? __pfx_path_openat+0x10/0x10 [ 281.432428][ T9272] ? __ia32_compat_sys_open+0x117/0x140 [ 281.432452][ T9272] ? __lock_acquire+0x6b5/0x2cf0 [ 281.432473][ T9272] do_file_open+0x23e/0x4a0 [ 281.432500][ T9272] ? __pfx_do_file_open+0x10/0x10 [ 281.432532][ T9272] ? _raw_spin_unlock+0x28/0x50 [ 281.432550][ T9272] ? alloc_fd+0x64b/0x6c0 [ 281.432574][ T9272] do_sys_openat2+0x113/0x200 [ 281.432593][ T9272] ? __se_sys_futex_time32+0x3ab/0x440 [ 281.432617][ T9272] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.432639][ T9272] ? rcu_is_watching+0x15/0xb0 [ 281.432661][ T9272] __ia32_compat_sys_open+0x117/0x140 [ 281.432685][ T9272] __do_fast_syscall_32+0x229/0x6e0 [ 281.432709][ T9272] ? do_fast_syscall_32+0x33/0x70 [ 281.432732][ T9272] ? irqentry_exit+0x10f/0x730 [ 281.432754][ T9272] ? trace_irq_disable+0x3b/0x140 [ 281.432781][ T9272] do_fast_syscall_32+0x33/0x70 [ 281.432804][ T9272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.432826][ T9272] RIP: 0023:0xf7ff301c [ 281.432847][ T9272] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 281.432863][ T9272] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 281.432881][ T9272] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 281.432894][ T9272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.432904][ T9272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.432914][ T9272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 281.432924][ T9272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.432941][ T9272] [ 281.851270][ T6473] usb 1-1: Using ep0 maxpacket: 16 [ 281.867200][ T6473] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.922755][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.994453][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 282.027127][ T6473] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 282.038459][ T5638] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 282.072246][ T6473] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.114152][ T6473] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 282.153028][ T6473] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 282.161650][ T6473] usb 1-1: Manufacturer: syz [ 282.171562][ T6473] usb 1-1: config 0 descriptor?? [ 282.247127][ T5638] usb 4-1: Using ep0 maxpacket: 32 [ 282.259696][ T5638] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 282.277102][ T5638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.323289][ T5638] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 282.335997][ T5638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.361271][ T5638] usb 4-1: Product: syz [ 282.366646][ T5638] usb 4-1: Manufacturer: syz [ 282.375600][ T5638] usb 4-1: SerialNumber: syz [ 282.385009][ T5638] usb 4-1: config 0 descriptor?? [ 282.395999][ T6473] rc_core: IR keymap rc-hauppauge not found [ 282.402234][ T6473] Registered IR keymap rc-empty [ 282.408267][ T5638] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 282.415293][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.446111][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.466916][ T6473] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 282.481530][ T6473] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 282.497733][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.516073][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.538353][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.556356][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.586202][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.616118][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.636398][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.676070][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.696054][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.716066][ T6473] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 282.737252][ T6473] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 282.746256][ T6473] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 282.760996][ T6473] usb 1-1: USB disconnect, device number 28 [ 284.611329][ T6460] usb 4-1: USB disconnect, device number 28 [ 288.566043][ T5639] Bluetooth: hci3: command 0x0406 tx timeout