last executing test programs: 1m58.058458187s ago: executing program 3 (id=1502): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000009c0), 0x4) 1m57.964425364s ago: executing program 3 (id=1503): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mount(0x0, &(0x7f0000001200)='./dlm\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./dlm/domain1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) fcntl$addseals(r0, 0x409, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc140011800c000100636f756e7465720004000280400000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a310004000014000380100000800c000180050001"], 0xb8}}, 0x40) 1m57.650943817s ago: executing program 3 (id=1505): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.606699164s ago: executing program 3 (id=1506): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m57.414456867s ago: executing program 3 (id=1508): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000340)="ab") pread64(r6, 0x0, 0x0, 0xd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r8 = socket$inet(0x2, 0x1, 0x0) listen(r8, 0x7) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r9 = syz_io_uring_setup(0x34b8, &(0x7f00000024c0)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10d) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000040)=@IORING_OP_SENDMSG_ZC={0x30, 0x50, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, {0xfffe}}) io_uring_enter(r9, 0x1, 0x1, 0x1, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000380)={{}, "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"}) 1m57.358205907s ago: executing program 3 (id=1509): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB=',']) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 17.652083s ago: executing program 2 (id=1672): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, 0x0) init_module(0x0, 0x2ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x2140c0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) 17.604057842s ago: executing program 4 (id=1673): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000012}) 16.745110755s ago: executing program 4 (id=1677): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000600)=""/125, 0x7d}, {0x0}, {&(0x7f0000000380)=""/51, 0x33}], 0x3}, 0x40000001) 16.23088566s ago: executing program 4 (id=1678): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(0x0, 0x880) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r3, r1, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) unshare(0x22020600) 12.831256729s ago: executing program 4 (id=1681): add_key(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 10.462246504s ago: executing program 1 (id=1684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 10.215291568s ago: executing program 1 (id=1686): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x10, 0x10}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x566}], 0x1}, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x7f) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e00"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0xf4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000004090000012", 0x2d}], 0x1}, 0x40) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r5, 0x0, 0x2, 0x4}}, 0x20) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) 7.867217211s ago: executing program 4 (id=1688): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x40400c0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x3}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r2, 0xeac96000) r5 = syz_open_dev$I2C(0x0, 0x1, 0x2603) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={0x0}) 7.845898185s ago: executing program 2 (id=1689): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x10, 0x10}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x566}], 0x1}, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x7f) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e00"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0xf4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000004090000012", 0x2d}], 0x1}, 0x40) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r5, 0x0, 0x2, 0x4}}, 0x20) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) 6.459949798s ago: executing program 2 (id=1691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = socket(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x43010, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x26, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)}, 0x40) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 6.358569892s ago: executing program 1 (id=1692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f00000001c0)='.', 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) 5.740396567s ago: executing program 1 (id=1694): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.372099722s ago: executing program 2 (id=1695): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5.099543191s ago: executing program 2 (id=1696): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856ca", 0x1d, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b81581", 0xb}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584", 0x40}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9", 0x30}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xd9f}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.934760228s ago: executing program 4 (id=1697): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c927", 0x2, 0x4044880, 0x0, 0x0) 4.81789114s ago: executing program 0 (id=1698): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, 0x0) init_module(0x0, 0x2ef, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000000)='binfmt_misc\x00', 0x2140c0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) 4.726673577s ago: executing program 1 (id=1699): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 3.775206185s ago: executing program 2 (id=1700): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d7401097307733960000000109021200"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x4a21, 0x3, 0x6, 0x5, 0x9b, 0x86, 0x9, 0x10001}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.483449177s ago: executing program 0 (id=1701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000}, 0x20) 1.707127871s ago: executing program 0 (id=1702): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x10, 0x10}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x566}], 0x1}, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x7f) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000026000100fdff07000010b2897e00"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd4, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0xf4}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000004090000012", 0x2d}], 0x1}, 0x40) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r5, 0x0, 0x2, 0x4}}, 0x20) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) 1.606733715s ago: executing program 1 (id=1703): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000240), 0x0, 0x6) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) prlimit64(0x0, 0xa, 0x0, &(0x7f00000000c0)) connect$inet6(r1, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 933.723429ms ago: executing program 0 (id=1704): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='htcp', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c927", 0x2, 0x4044880, 0x0, 0x0) 142.61515ms ago: executing program 0 (id=1705): r0 = fsmount(0xffffffffffffffff, 0x1, 0xe) fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044044) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x6ab858183a7ef63b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x802, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 0s ago: executing program 0 (id=1706): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) kernel console output (not intermixed with test programs): USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 468.015232][ T198] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 468.015258][ T198] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 468.015279][ T198] usb 2-1: config 14 has no interface number 0 [ 468.015295][ T198] usb 2-1: config 14 has no interface number 1 [ 468.015373][ T198] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 468.015398][ T198] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 468.015424][ T198] usb 2-1: config 14 interface 57 has no altsetting 0 [ 468.015443][ T198] usb 2-1: config 14 interface 228 has no altsetting 0 [ 468.017131][ T5707] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 468.115599][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.115629][ T198] usb 2-1: Product: syz [ 468.115644][ T198] usb 2-1: Manufacturer: syz [ 468.115659][ T198] usb 2-1: SerialNumber: syz [ 468.198778][ T5707] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 468.201638][ T5707] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.201730][ T5707] usb 3-1: config 0 has no interfaces? [ 468.201766][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.216646][ T5707] usb 3-1: config 0 descriptor?? [ 468.578038][ T198] legousbtower 2-1:14.57: interrupt endpoints not found [ 469.496600][ T198] legousbtower 2-1:14.228: interrupt endpoints not found [ 469.511996][ T198] usb 2-1: USB disconnect, device number 45 [ 470.220296][ T36] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 470.220407][ T36] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 470.220457][ T36] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 470.220604][ T36] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 470.260139][ T5707] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 470.280727][ T36] usb 1-1: USB disconnect, device number 46 [ 470.437904][ T5707] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 470.440762][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.465655][ T5707] usb 5-1: config 0 descriptor?? [ 470.527130][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 470.699241][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 470.703690][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.704150][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 470.704196][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.914412][ T36] usb 3-1: USB disconnect, device number 49 [ 471.037763][ T9084] loop0: detected capacity change from 0 to 4096 [ 471.974666][ T5707] usb 5-1: Cannot set autoneg [ 471.974981][ T5707] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 472.777910][ T5707] usb 5-1: USB disconnect, device number 41 [ 473.015406][ T9106] siw: device registration error -23 [ 473.856033][ T36] usb 2-1: USB disconnect, device number 46 [ 474.217097][ T5828] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 474.297097][ T36] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 474.297319][ T5715] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 474.367596][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 474.372126][ T5828] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 474.375208][ T5828] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 474.375238][ T5828] usb 5-1: config 0 has no interface number 0 [ 474.375290][ T5828] usb 5-1: config 0 interface 12 has no altsetting 0 [ 474.421001][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.421032][ T5828] usb 5-1: Product: syz [ 474.421048][ T5828] usb 5-1: Manufacturer: syz [ 474.421064][ T5828] usb 5-1: SerialNumber: syz [ 474.452973][ T5828] usb 5-1: config 0 descriptor?? [ 474.469646][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 474.470369][ T36] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 474.472260][ T5715] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.472544][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.472569][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 474.472605][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.537140][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.537270][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.537303][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 474.537331][ T5715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 474.537355][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.541590][ T5715] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.541685][ T5715] usb 1-1: Manufacturer: syz [ 474.558346][ T36] usb 2-1: config 0 descriptor?? [ 474.600125][ T5715] usb 1-1: config 0 descriptor?? [ 475.007469][ T5715] rc_core: IR keymap rc-hauppauge not found [ 475.007485][ T5715] Registered IR keymap rc-empty [ 475.008669][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.027447][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.051107][ T5715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 475.061382][ T5715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 475.096121][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.108926][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.127649][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.147616][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.168644][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.187445][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.208411][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.227430][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.247476][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.267625][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 475.296035][ T5715] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 475.296056][ T5715] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 475.352907][ T5707] usb 1-1: USB disconnect, device number 47 [ 475.987058][ T5715] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 476.138320][ T5715] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 476.139868][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.139898][ T5715] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 476.140003][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.744023][ T5828] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 476.744088][ T5828] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 476.744107][ T5828] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 476.744203][ T5828] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 476.788162][ T5828] usb 5-1: USB disconnect, device number 42 [ 477.024856][ T36] usb 2-1: USB disconnect, device number 47 [ 477.092512][ T9203] comedi comedi0: Minor 3 could not be opened [ 477.407065][ T5828] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 478.702037][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 478.703108][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.707113][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.707167][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.707194][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 478.707219][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 478.707241][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.773154][ T5828] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.773182][ T5828] usb 1-1: Manufacturer: syz [ 478.811323][ T5828] usb 1-1: config 0 descriptor?? [ 479.064627][ T5715] usb 3-1: USB disconnect, device number 50 [ 479.168711][ T5828] rc_core: IR keymap rc-hauppauge not found [ 479.168734][ T5828] Registered IR keymap rc-empty [ 479.170687][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.188990][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.211360][ T5828] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 479.227407][ T5828] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 479.246576][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.266477][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.297583][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.317269][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.337336][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.357375][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.377443][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.397248][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.420260][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.439444][ T5828] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 479.461506][ T5828] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 479.461535][ T5828] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 479.514453][ T9] usb 1-1: USB disconnect, device number 48 [ 479.639110][ T5715] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 479.676996][ T36] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 479.799731][ T5715] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 479.800910][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.800936][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 479.800974][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.812725][ T5715] usb 3-1: config 0 descriptor?? [ 479.827298][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 479.828545][ T36] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 479.841714][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.841742][ T36] usb 2-1: Product: syz [ 479.841756][ T36] usb 2-1: Manufacturer: syz [ 479.841770][ T36] usb 2-1: SerialNumber: syz [ 480.218860][ T36] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 480.238479][ T36] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 480.244487][ T36] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 480.244555][ T36] usb 2-1: media controller created [ 480.264035][ T9251] loop0: detected capacity change from 0 to 4096 [ 480.298382][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.527013][ T5707] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 480.571843][ T36] zl10353_read_register: readreg error (reg=127, ret==-110) [ 480.622451][ T9260] comedi comedi0: Minor 3 could not be opened [ 480.675164][ T36] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 480.685583][ T36] usb 2-1: USB disconnect, device number 48 [ 480.700121][ T5707] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 480.703499][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.703536][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.703577][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.811401][ T5707] usb 1-1: config 0 descriptor?? [ 481.249219][ T5707] usbhid 1-1:0.0: can't add hid device: -71 [ 481.249361][ T5707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 481.266106][ T5707] usb 1-1: USB disconnect, device number 49 [ 481.827243][ T36] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 481.978100][ T36] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 481.982286][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 481.982319][ T36] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 481.982365][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.156461][ T198] usb 3-1: USB disconnect, device number 51 [ 482.262868][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 483.637078][ T5869] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 483.788089][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 483.789192][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.791168][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.791227][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.791258][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 483.791287][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 483.791312][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.795179][ T5869] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.795207][ T5869] usb 1-1: Manufacturer: syz [ 483.894911][ T5869] usb 1-1: config 0 descriptor?? [ 483.902444][ T5715] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 484.017076][ T36] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 484.067022][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 484.069187][ T5715] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 484.070666][ T5715] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 484.070693][ T5715] usb 3-1: config 0 has no interface number 0 [ 484.070806][ T5715] usb 3-1: config 0 interface 12 has no altsetting 0 [ 484.073794][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.073821][ T5715] usb 3-1: Product: syz [ 484.073898][ T5715] usb 3-1: Manufacturer: syz [ 484.073914][ T5715] usb 3-1: SerialNumber: syz [ 484.153283][ T5715] usb 3-1: config 0 descriptor?? [ 484.218418][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 484.220024][ T36] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 484.251583][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.251719][ T36] usb 2-1: Product: syz [ 484.251737][ T36] usb 2-1: Manufacturer: syz [ 484.251752][ T36] usb 2-1: SerialNumber: syz [ 484.339150][ T5869] rc_core: IR keymap rc-hauppauge not found [ 484.339190][ T5869] Registered IR keymap rc-empty [ 484.391756][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.407894][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.466285][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 484.487666][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 484.546465][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.562443][ T36] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 484.583543][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.600604][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.619694][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.622692][ T36] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 484.623512][ T36] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 484.623638][ T36] usb 2-1: media controller created [ 484.638039][ T198] usb 5-1: USB disconnect, device number 43 [ 484.665697][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.677391][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.699194][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.717511][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.739723][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.748515][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.757403][ T5869] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 484.856172][ T5869] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 484.856201][ T5869] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 484.942326][ T5869] usb 1-1: USB disconnect, device number 50 [ 485.068108][ T36] zl10353_read_register: readreg error (reg=127, ret==-71) [ 485.137290][ T198] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 485.298153][ T198] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 485.300206][ T198] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.300241][ T198] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.300273][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.329997][ T36] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 485.341533][ T36] usb 2-1: USB disconnect, device number 49 [ 485.424952][ T198] usb 5-1: config 0 descriptor?? [ 487.413587][ T5715] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 487.413651][ T5715] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 487.413671][ T5715] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 487.413776][ T5715] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 487.488757][ T5715] usb 3-1: USB disconnect, device number 52 [ 487.754931][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 488.004673][ T198] usbhid 5-1:0.0: can't add hid device: -71 [ 488.004804][ T198] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 488.023498][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 488.044479][ T198] usb 5-1: USB disconnect, device number 44 [ 488.167843][ T9] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 488.169130][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 488.169155][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 488.184864][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.184896][ T9] usb 3-1: Product: syz [ 488.184912][ T9] usb 3-1: Manufacturer: syz [ 488.184940][ T9] usb 3-1: SerialNumber: syz [ 488.458633][ T9] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 488.657040][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 488.817052][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 488.818058][ T10] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 488.824550][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.824580][ T10] usb 2-1: Product: syz [ 488.824596][ T10] usb 2-1: Manufacturer: syz [ 488.824612][ T10] usb 2-1: SerialNumber: syz [ 488.867192][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 488.989363][ T5869] usb 3-1: USB disconnect, device number 53 [ 489.021464][ T5869] usblp0: removed [ 489.032018][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 489.034852][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 489.056562][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 489.056593][ T9] usb 5-1: config 0 has no interface number 0 [ 489.056711][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 489.095181][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.095277][ T9] usb 5-1: Product: syz [ 489.095294][ T9] usb 5-1: Manufacturer: syz [ 489.095308][ T9] usb 5-1: SerialNumber: syz [ 489.130129][ T10] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 489.149324][ T9] usb 5-1: config 0 descriptor?? [ 489.175974][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 489.176686][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 489.176803][ T10] usb 2-1: media controller created [ 489.241712][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.550591][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 489.647055][ T5869] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 489.761909][ T10] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 489.799072][ T10] usb 2-1: USB disconnect, device number 50 [ 489.799481][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 489.801449][ T5869] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 489.803497][ T5869] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 489.803524][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.803543][ T5869] usb 1-1: config 0 has no interface number 0 [ 489.803590][ T5869] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 489.803614][ T5869] usb 1-1: config 0 interface 1 has no altsetting 0 [ 489.831079][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.831108][ T5869] usb 1-1: Product: syz [ 489.831123][ T5869] usb 1-1: Manufacturer: syz [ 489.831138][ T5869] usb 1-1: SerialNumber: syz [ 489.914924][ T5869] usb 1-1: config 0 descriptor?? [ 490.107619][ T5715] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 490.168189][ T5869] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 490.168230][ T5869] cx231xx 1-1:0.1: Not found matching IAD interface [ 490.183887][ T5869] usb 1-1: USB disconnect, device number 51 [ 490.257681][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 490.262124][ T5715] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 490.276332][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.276396][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.276435][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 490.276460][ T5715] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 490.276483][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.283730][ T5715] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 490.283758][ T5715] usb 3-1: Manufacturer: syz [ 490.305962][ T5715] usb 3-1: config 0 descriptor?? [ 490.637200][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 490.657132][ T5715] rc_core: IR keymap rc-hauppauge not found [ 490.657155][ T5715] Registered IR keymap rc-empty [ 490.657636][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.678822][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.701470][ T5715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 490.711003][ T5715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 490.742238][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.761370][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.780866][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.798895][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.818540][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.837470][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 490.838630][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 490.841436][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.841462][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.841481][ T10] usb 1-1: config 0 has no interface number 0 [ 490.841591][ T10] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 490.841616][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 490.846063][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.846156][ T10] usb 1-1: Product: syz [ 490.846173][ T10] usb 1-1: Manufacturer: syz [ 490.846188][ T10] usb 1-1: SerialNumber: syz [ 490.847049][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.869689][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.887420][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.908920][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.932437][ T5715] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 490.995727][ T10] usb 1-1: config 0 descriptor?? [ 491.018427][ T5715] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 491.018457][ T5715] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 491.059592][ T5715] usb 3-1: USB disconnect, device number 54 [ 491.085970][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'. [ 491.230611][ T10] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 491.230648][ T10] cx231xx 1-1:0.1: Not found matching IAD interface [ 491.327068][ T5869] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 491.415727][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 491.415792][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 491.415812][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 491.415918][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 491.457838][ T9] usb 5-1: USB disconnect, device number 45 [ 491.483612][ T5869] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 491.484919][ T5869] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.484948][ T5869] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 491.507574][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.507603][ T5869] usb 2-1: Product: syz [ 491.507617][ T5869] usb 2-1: Manufacturer: syz [ 491.507631][ T5869] usb 2-1: SerialNumber: syz [ 491.780040][ T5869] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 492.127050][ T5869] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 492.167513][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 492.216653][ T9] usb 2-1: USB disconnect, device number 51 [ 492.240835][ T9] usblp0: removed [ 492.278810][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 492.283675][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 492.283719][ T5869] usb 3-1: can't read configurations, error -61 [ 492.407039][ T5869] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 492.474425][ T1964] usb 1-1: USB disconnect, device number 52 [ 492.558995][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 492.561555][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 492.561596][ T5869] usb 3-1: can't read configurations, error -61 [ 492.565888][ T5869] usb usb3-port1: attempt power cycle [ 492.967390][ T5869] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 492.988890][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 492.991277][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 492.991314][ T5869] usb 3-1: can't read configurations, error -61 [ 493.097102][ T1964] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 493.127282][ T5869] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 493.149208][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 493.150830][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 493.150870][ T5869] usb 3-1: can't read configurations, error -61 [ 493.152615][ T5869] usb usb3-port1: unable to enumerate USB device [ 493.167027][ T198] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 493.190924][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 493.248718][ T1964] usb 1-1: Using ep0 maxpacket: 16 [ 493.249889][ T1964] usb 1-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 493.251159][ T1964] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 493.251209][ T1964] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 493.251254][ T1964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.259598][ T1964] usb 1-1: config 0 descriptor?? [ 493.387320][ T198] usb 2-1: Using ep0 maxpacket: 32 [ 493.388294][ T198] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 493.392847][ T198] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 493.392879][ T198] usb 2-1: config 0 has no interface number 0 [ 493.392931][ T198] usb 2-1: config 0 interface 12 has no altsetting 0 [ 493.414957][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.414989][ T198] usb 2-1: Product: syz [ 493.415004][ T198] usb 2-1: Manufacturer: syz [ 493.415020][ T198] usb 2-1: SerialNumber: syz [ 493.467965][ T198] usb 2-1: config 0 descriptor?? [ 493.707104][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 493.723178][ T1964] hid_parser_main: 30 callbacks suppressed [ 493.723201][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723228][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723254][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723280][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723305][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723328][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723351][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723374][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723397][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.723423][ T1964] apple 0003:05AC:026C.0016: unknown main item tag 0x0 [ 493.729254][ T1964] apple 0003:05AC:026C.0016: hidraw0: USB HID v0.01 Device [HID 05ac:026c] on usb-dummy_hcd.0-1/input0 [ 493.898028][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 493.899564][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.899584][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 493.903382][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.903408][ T10] usb 5-1: Product: syz [ 493.903417][ T10] usb 5-1: Manufacturer: syz [ 493.903468][ T10] usb 5-1: SerialNumber: syz [ 493.983889][ T9] usb 1-1: USB disconnect, device number 53 [ 494.200575][ T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 494.726281][ T10] usb 5-1: USB disconnect, device number 46 [ 494.764022][ T10] usblp0: removed [ 495.140586][ T9545] vxcan7: entered allmulticast mode [ 495.596354][ T9561] loop0: detected capacity change from 0 to 4096 [ 495.644345][ T9561] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 495.644372][ T9561] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 495.644431][ T9561] loop0: [ 495.799971][ T198] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 495.800037][ T198] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 495.800056][ T198] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 495.800161][ T198] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 495.909133][ T198] usb 2-1: USB disconnect, device number 52 [ 498.572820][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 502.232356][ C1] vxcan1: j1939_simple_recv: Received already invalidated message [ 502.887926][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.888007][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.497066][ T5869] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 503.506977][ T9629] vxcan11: entered allmulticast mode [ 503.539023][ T1964] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 503.647465][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 503.648605][ T5869] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 503.650298][ T5869] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 503.650414][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.650444][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.650472][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.654921][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.654947][ T5869] usb 1-1: Product: syz [ 503.654963][ T5869] usb 1-1: Manufacturer: syz [ 503.654978][ T5869] usb 1-1: SerialNumber: syz [ 503.666612][ T5869] usb 1-1: config 0 descriptor?? [ 503.668087][ T9623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 503.688364][ T1964] usb 5-1: Using ep0 maxpacket: 32 [ 503.689376][ T1964] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 503.690889][ T1964] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 503.690912][ T1964] usb 5-1: config 0 has no interface number 0 [ 503.690956][ T1964] usb 5-1: config 0 interface 12 has no altsetting 0 [ 503.699672][ T1964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.699700][ T1964] usb 5-1: Product: syz [ 503.699714][ T1964] usb 5-1: Manufacturer: syz [ 503.699728][ T1964] usb 5-1: SerialNumber: syz [ 503.791930][ T1964] usb 5-1: config 0 descriptor?? [ 503.872244][ T5869] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 503.960067][ T5869] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 504.089606][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 504.090507][ C1] powermate: config urb returned -71 [ 504.090781][ C1] powermate: config urb returned -71 [ 504.090977][ C1] powermate: config urb returned -71 [ 504.091174][ C1] powermate: config urb returned -71 [ 504.099030][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 504.099100][ T5869] usb 1-1: USB disconnect, device number 54 [ 504.217349][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 504.397109][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 504.398243][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 504.400641][ T9] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 504.400707][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.400737][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 504.400765][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 504.400788][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.402706][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 504.402731][ T9] usb 3-1: Manufacturer: syz [ 504.542550][ T9] usb 3-1: config 0 descriptor?? [ 504.877052][ T9] rc_core: IR keymap rc-hauppauge not found [ 504.877076][ T9] Registered IR keymap rc-empty [ 504.878756][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 504.909378][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 504.931613][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 504.953927][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 504.979128][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 504.999142][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.017575][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.037406][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.058929][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.077430][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.097448][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.117438][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.151234][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.167436][ T9] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 505.207297][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 505.207335][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 505.267744][ T9] usb 3-1: USB disconnect, device number 59 [ 506.126160][ T1964] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 506.126221][ T1964] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 506.126238][ T1964] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 506.126338][ T1964] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 506.159011][ T1964] usb 5-1: USB disconnect, device number 47 [ 506.487024][ T5715] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 506.657431][ T5715] usb 1-1: Using ep0 maxpacket: 8 [ 506.662176][ T5715] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 506.665761][ T5715] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 506.665819][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 506.665845][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 506.665873][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 506.736654][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.736685][ T5715] usb 1-1: Product: syz [ 506.736701][ T5715] usb 1-1: Manufacturer: syz [ 506.736716][ T5715] usb 1-1: SerialNumber: syz [ 507.131415][ T5715] usb 1-1: config 0 descriptor?? [ 507.132325][ T9681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 507.353464][ T5715] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 507.364276][ T5715] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 507.573435][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 507.574601][ C1] powermate: config urb returned -71 [ 507.574845][ C1] powermate: config urb returned -71 [ 507.575074][ C1] powermate: config urb returned -71 [ 507.575304][ C1] powermate: config urb returned -71 [ 507.614980][ T5715] usb 1-1: USB disconnect, device number 55 [ 507.615069][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 507.857064][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 507.938255][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 508.027021][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 508.027768][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 508.029182][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.029240][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.029272][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 508.029307][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 508.029331][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.031528][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 508.031554][ T10] usb 3-1: Manufacturer: syz [ 508.124975][ T10] usb 3-1: config 0 descriptor?? [ 508.138176][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 508.140247][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.140272][ T9] usb 2-1: config 0 has no interfaces? [ 508.140305][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.187032][ T9] usb 2-1: config 0 descriptor?? [ 508.257599][ T5707] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 508.408208][ T5707] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 508.410361][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.410418][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.451419][ T5707] usb 5-1: config 0 descriptor?? [ 508.477062][ T10] rc_core: IR keymap rc-hauppauge not found [ 508.477085][ T10] Registered IR keymap rc-empty [ 508.477714][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.509356][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.560961][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 508.585447][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37 [ 508.618535][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.650571][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.668823][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.689862][ T5869] usb 2-1: USB disconnect, device number 53 [ 508.703771][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.717709][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.738222][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.767485][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.787530][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.817424][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.847412][ T10] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 508.883568][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 508.883656][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 508.897696][ T5715] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 508.904022][ T5707] ath6kl: Unsupported hardware version: 0x0 [ 508.970156][ T5707] ath6kl: Failed to init ath6kl core: -22 [ 508.970942][ T5707] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 508.988155][ T10] usb 3-1: USB disconnect, device number 60 [ 509.049514][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 509.099496][ T5715] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 509.105166][ T5715] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 509.105237][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 509.105268][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 509.105296][ T5715] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 509.105383][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.110858][ T5715] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 509.110885][ T5715] usb 1-1: Manufacturer: syz [ 509.124440][ T5715] usb 1-1: config 0 descriptor?? [ 509.138517][ T1964] usb 5-1: USB disconnect, device number 48 [ 509.559412][ T5715] rc_core: IR keymap rc-hauppauge not found [ 509.559433][ T5715] Registered IR keymap rc-empty [ 509.560408][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.578316][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.603238][ T5715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 509.619720][ T5715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 509.640811][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.664269][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.677689][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.697605][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.717414][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.737461][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.757378][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.782648][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.805294][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.820500][ T5715] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 509.915120][ T5715] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 509.915150][ T5715] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 510.029950][ T5715] usb 1-1: USB disconnect, device number 56 [ 510.058004][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 510.199245][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 510.415181][ T9788] vxcan9: entered allmulticast mode [ 510.967037][ T36] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 511.117954][ T36] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 511.119510][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 511.119543][ T36] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 511.119568][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 511.127480][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.127507][ T36] usb 1-1: Product: syz [ 511.127521][ T36] usb 1-1: Manufacturer: syz [ 511.127535][ T36] usb 1-1: SerialNumber: syz [ 511.143144][ T36] usb 1-1: config 0 descriptor?? [ 511.199829][ T9799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 511.200260][ T9799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 511.212007][ T36] usb 1-1: ucan: probing device on interface #0 [ 512.837293][ T5707] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 512.841205][ T36] usb 1-1: ucan: could not read protocol version, ret=-110 [ 512.841233][ T36] usb 1-1: ucan: probe failed; try to update the device firmware [ 512.996980][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 512.997973][ T5707] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.000172][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.000242][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 513.000273][ T5707] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 513.000301][ T5707] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 513.000325][ T5707] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 513.002074][ T5707] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 513.002100][ T5707] usb 5-1: Manufacturer: syz [ 513.114389][ T5707] usb 5-1: config 0 descriptor?? [ 513.338889][ T1964] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 513.457145][ T5707] rc_core: IR keymap rc-hauppauge not found [ 513.457170][ T5707] Registered IR keymap rc-empty [ 513.457685][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.485536][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.487917][ T1964] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 513.489465][ T1964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.489490][ T1964] usb 3-1: config 0 has no interfaces? [ 513.489519][ T1964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.534759][ T5707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 513.546716][ T1964] usb 3-1: config 0 descriptor?? [ 513.565845][ T5707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 513.585642][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.607795][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.627591][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.657619][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.687384][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.707521][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.727396][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.747486][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.767721][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.787422][ T5707] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 513.818361][ T5707] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 513.818392][ T5707] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 513.857581][ T5707] usb 5-1: USB disconnect, device number 49 [ 514.053365][ T1964] usb 3-1: USB disconnect, device number 61 [ 514.306186][ T5707] usb 1-1: USB disconnect, device number 57 [ 514.517072][ T1964] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 514.586665][ T9854] vxcan15: entered allmulticast mode [ 514.666987][ T1964] usb 2-1: Using ep0 maxpacket: 16 [ 514.668963][ T1964] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 514.671495][ T1964] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 514.671544][ T1964] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 514.671589][ T1964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.787240][ T5707] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 514.924543][ T1964] usb 2-1: config 0 descriptor?? [ 514.939355][ T5707] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 514.940936][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.952035][ T5707] usb 1-1: config 0 descriptor?? [ 516.706724][ T1964] hid (null): invalid report_size 29797 [ 516.706757][ T1964] hid (null): invalid report_size 29289 [ 516.724098][ T1964] hid_parser_main: 30 callbacks suppressed [ 516.724132][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.724161][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.724184][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727753][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727788][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727811][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727835][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727858][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727881][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.727904][ T1964] apple 0003:05AC:026C.0017: unknown main item tag 0x0 [ 516.728073][ T1964] apple 0003:05AC:026C.0017: invalid report_size 29797 [ 516.728088][ T1964] apple 0003:05AC:026C.0017: item 0 2 1 7 parsing failed [ 516.730274][ T1964] apple 0003:05AC:026C.0017: parse failed [ 516.730380][ T1964] apple 0003:05AC:026C.0017: probe with driver apple failed with error -22 [ 516.850221][ T5707] usb 1-1: Cannot read MAC address [ 516.850498][ T5707] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 517.024698][ T5707] usb 2-1: USB disconnect, device number 54 [ 517.310930][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 517.347151][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 517.519543][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 517.521086][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.521159][ T10] usb 3-1: config 0 has no interfaces? [ 517.521192][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.583360][ T10] usb 3-1: config 0 descriptor?? [ 517.995098][ T9905] vxcan13: entered allmulticast mode [ 518.183569][ T5871] usb 1-1: USB disconnect, device number 58 [ 518.325625][ T5869] usb 3-1: USB disconnect, device number 62 [ 519.355151][ T9932] loop0: detected capacity change from 0 to 4096 [ 519.830016][ T9934] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 519.830090][ T9934] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 519.830210][ T9934] loop0: [ 521.631907][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 524.987387][ T9969] syzkaller0: entered promiscuous mode [ 524.987418][ T9969] syzkaller0: entered allmulticast mode [ 525.037027][ T36] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 525.213895][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 525.214774][ T36] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 525.240160][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.240191][ T36] usb 5-1: Product: syz [ 525.240207][ T36] usb 5-1: Manufacturer: syz [ 525.240221][ T36] usb 5-1: SerialNumber: syz [ 525.522592][ T36] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 525.574726][ T36] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 525.575207][ T36] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 525.575265][ T36] usb 5-1: media controller created [ 525.635669][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.712926][ T36] zl10353_read_register: readreg error (reg=127, ret==-71) [ 525.843639][ T36] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 525.865732][ T36] usb 5-1: USB disconnect, device number 50 [ 525.881907][ T5967] udevd[5967]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory [ 525.887099][ T5869] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 526.037899][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 526.039230][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.039255][ T5869] usb 3-1: config 0 has no interfaces? [ 526.039286][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.053569][ T5869] usb 3-1: config 0 descriptor?? [ 526.464787][T10009] vxcan15: entered allmulticast mode [ 526.692150][ T9] usb 3-1: USB disconnect, device number 63 [ 526.789679][T10025] syzkaller0: entered promiscuous mode [ 526.789718][T10025] syzkaller0: entered allmulticast mode [ 530.087184][ T5869] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 530.257104][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 530.258278][ T5869] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 530.263656][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.263685][ T5869] usb 2-1: Product: syz [ 530.263700][ T5869] usb 2-1: Manufacturer: syz [ 530.263716][ T5869] usb 2-1: SerialNumber: syz [ 530.345509][T10061] netlink: 'syz.4.1432': attribute type 2 has an invalid length. [ 530.345526][T10061] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1432'. [ 530.563310][ T5869] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 530.589394][ T5869] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 530.589961][ T5869] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 530.590018][ T5869] usb 2-1: media controller created [ 530.743742][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.874325][ T5869] zl10353_read_register: readreg error (reg=127, ret==-71) [ 531.039046][ T5869] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 531.056264][ T5869] usb 2-1: USB disconnect, device number 55 [ 531.107045][ T5715] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 531.130398][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 531.259944][ T5715] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 531.265198][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.265228][ T5715] usb 3-1: config 0 has no interfaces? [ 531.265261][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.280700][ T5715] usb 3-1: config 0 descriptor?? [ 531.291774][ T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 531.324587][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.324618][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.324660][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.365865][ T10] usb 1-1: config 0 descriptor?? [ 531.380576][ T1964] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 531.527436][ T1964] usb 5-1: Using ep0 maxpacket: 16 [ 531.530964][ T1964] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 531.532847][ T1964] usb 5-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 531.532908][ T1964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.532939][ T1964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 531.532968][ T1964] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 531.532993][ T1964] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 531.534640][ T1964] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 531.534664][ T1964] usb 5-1: Manufacturer: syz [ 531.546162][ T1964] usb 5-1: config 0 descriptor?? [ 531.914149][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 532.285897][ T1964] rc_core: IR keymap rc-hauppauge not found [ 532.285922][ T1964] Registered IR keymap rc-empty [ 532.286412][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.297300][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.319146][ T1964] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 532.328074][ T1964] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 532.348990][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.368349][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.395849][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.407496][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.427374][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.450347][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.467408][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.483843][ T5601] usb 1-1: USB disconnect, device number 59 [ 532.498952][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.517430][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.537381][ T1964] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 532.586112][ T1964] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 532.586142][ T1964] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 532.621385][ T1964] usb 5-1: USB disconnect, device number 51 [ 532.967023][ T5601] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 533.118079][ T5601] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 533.119807][ T5601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.119836][ T5601] usb 1-1: config 0 has no interfaces? [ 533.119869][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.146122][ T5601] usb 1-1: config 0 descriptor?? [ 533.347010][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 533.529542][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 533.531121][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.531150][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.531189][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.576091][ T10] usb 2-1: config 0 descriptor?? [ 533.818044][ T10] usb 3-1: USB disconnect, device number 64 [ 534.792784][ T5871] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 535.297764][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 535.375451][ T5871] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 535.416599][ T5871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 535.416768][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.416800][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.420385][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 535.704839][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.704889][ T5871] usb 3-1: Product: syz [ 535.704906][ T5871] usb 3-1: Manufacturer: syz [ 535.704966][ T5871] usb 3-1: SerialNumber: syz [ 536.320866][ T5871] usb 3-1: config 0 descriptor?? [ 536.321679][T10193] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.333482][ T10] usb 1-1: USB disconnect, device number 60 [ 536.380179][ T9] usb 2-1: USB disconnect, device number 56 [ 536.526159][ T5871] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 536.541714][ T5871] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 536.767627][ C0] powermate: config urb returned -71 [ 536.767867][ C0] powermate: config urb returned -71 [ 536.768087][ C0] powermate: config urb returned -71 [ 536.768311][ C0] powermate: config urb returned -71 [ 536.775092][ T5601] usb 3-1: USB disconnect, device number 65 [ 536.775236][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 536.957060][ T5871] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 537.107678][ T5871] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 537.108539][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 537.108942][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.108967][ T5871] usb 1-1: config 0 has no interfaces? [ 537.108997][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.117048][ T5715] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 537.173924][ T5871] usb 1-1: config 0 descriptor?? [ 537.277012][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 537.278603][ T5715] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 537.281835][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.281905][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.281933][ T5715] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 537.281960][ T5715] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 537.281982][ T5715] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.319030][ T5715] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 537.319058][ T5715] usb 2-1: Manufacturer: syz [ 537.338226][ T5715] usb 2-1: config 0 descriptor?? [ 537.487936][T10222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 537.709545][ T5715] rc_core: IR keymap rc-hauppauge not found [ 537.709571][ T5715] Registered IR keymap rc-empty [ 537.710047][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.727338][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.752926][ T5715] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 537.765803][ T5715] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42 [ 537.813320][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.832292][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.853730][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.867728][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.888822][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.908965][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.928460][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.948234][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 537.990143][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 538.007353][ T5715] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 538.053797][ T5715] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 538.053827][ T5715] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 538.098093][ T5715] usb 2-1: USB disconnect, device number 57 [ 538.860817][ T5869] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 538.889363][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 538.919027][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 538.922789][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 538.931661][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 538.933987][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 539.050961][ T5869] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 539.087584][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.087613][ T5869] usb 5-1: config 0 has no interfaces? [ 539.087643][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.128341][ T5869] usb 5-1: config 0 descriptor?? [ 539.537604][ T5869] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 539.807935][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 539.892796][ T5869] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 539.892891][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.893040][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.168339][ T5869] usb 2-1: config 0 descriptor?? [ 540.562326][ T1964] usb 1-1: USB disconnect, device number 61 [ 540.958666][ T9] usb 5-1: USB disconnect, device number 52 [ 541.843357][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 541.843499][ T5869] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 541.921138][ T5869] usb 2-1: USB disconnect, device number 58 [ 542.257159][ T5600] Bluetooth: hci5: command tx timeout [ 542.927284][T10270] comedi comedi1: reset error (fatal) [ 543.103462][ T5869] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 544.421492][ T5600] Bluetooth: hci5: command tx timeout [ 544.476652][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1519'. [ 544.488505][ T5869] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 544.492515][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.492543][ T5869] usb 3-1: config 0 has no interfaces? [ 544.492577][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.521258][ T5869] usb 3-1: config 0 descriptor?? [ 544.770376][T10295] netlink: 'syz.4.1521': attribute type 2 has an invalid length. [ 544.770401][T10295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1521'. [ 545.593461][T10302] comedi comedi0: Minor 3 could not be opened [ 545.765135][T10244] lo speed is unknown, defaulting to 1000 [ 546.257648][ T5869] usb 3-1: USB disconnect, device number 66 [ 546.507169][ T5600] Bluetooth: hci5: command tx timeout [ 546.807067][ T5869] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 546.972150][ T5869] usb 3-1: device descriptor read/64, error -71 [ 547.267535][ T5869] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 547.517098][ T5869] usb 3-1: device descriptor read/64, error -71 [ 547.779271][ T5869] usb usb3-port1: attempt power cycle [ 549.937798][ T5600] Bluetooth: hci5: command tx timeout [ 549.976981][ T5869] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 550.021008][ T5869] usb 3-1: device descriptor read/8, error -71 [ 551.207095][ T5869] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 551.238832][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 551.240070][ T5869] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.240091][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 551.240113][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.288311][ T5869] usb 3-1: config 0 descriptor?? [ 551.794167][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.232786][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 552.232927][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 552.281042][ T5869] usb 3-1: USB disconnect, device number 70 [ 553.117383][T10342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 553.260953][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.282139][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 553.587007][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 553.617059][ T1964] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 553.737938][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 553.739057][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.739084][ T10] usb 2-1: config 0 has no interfaces? [ 553.739118][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.753302][ T10] usb 2-1: config 0 descriptor?? [ 553.859805][ T1964] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 553.861478][ T1964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.861508][ T1964] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 553.901995][ T1964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.902028][ T1964] usb 3-1: Product: syz [ 553.902044][ T1964] usb 3-1: Manufacturer: syz [ 553.902060][ T1964] usb 3-1: SerialNumber: syz [ 554.101021][T10355] comedi comedi0: Minor 3 could not be opened [ 554.158740][ T1964] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 554.297650][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.590199][ T5601] usb 3-1: USB disconnect, device number 71 [ 554.644237][ T5601] usblp0: removed [ 555.727450][ T5601] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 556.420985][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.574523][ T5601] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 556.602267][ T5601] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.602322][ T5601] usb 1-1: config 0 interface 0 has no altsetting 0 [ 556.602360][ T5601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.653432][ T5601] usb 1-1: config 0 descriptor?? [ 556.677872][ T5871] usb 2-1: USB disconnect, device number 59 [ 558.007638][ T36] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 558.147026][ T36] usb 2-1: device descriptor read/64, error -71 [ 558.210341][T10244] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.210470][T10244] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.216670][T10244] bridge_slave_0: entered allmulticast mode [ 558.220265][T10244] bridge_slave_0: entered promiscuous mode [ 558.327672][T10244] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.327824][T10244] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.397642][ T36] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 558.398638][ T5601] usbhid 1-1:0.0: can't add hid device: -71 [ 558.400429][ T5601] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 558.447573][ T5601] usb 1-1: USB disconnect, device number 62 [ 558.480158][T10244] bridge_slave_1: entered allmulticast mode [ 558.508571][T10244] bridge_slave_1: entered promiscuous mode [ 558.579733][ T36] usb 2-1: device descriptor read/64, error -71 [ 558.700558][ T36] usb usb2-port1: attempt power cycle [ 558.725463][T10244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.752204][T10244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.874193][T10244] team0: Port device team_slave_0 added [ 558.897897][ T5869] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 558.927499][T10244] team0: Port device team_slave_1 added [ 559.053108][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 559.053737][ T36] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 559.053967][ T5869] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 559.056662][ T5869] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 559.056727][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.056756][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 559.056789][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 559.057000][ T5871] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 559.097011][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.107045][ T5869] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 559.107077][ T5869] usb 3-1: Manufacturer: syz [ 559.163268][ T36] usb 2-1: device descriptor read/8, error -71 [ 559.207000][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 559.214683][ T5871] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 559.216805][ T5871] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 559.217155][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 559.217184][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 559.217208][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 559.222171][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.222210][ T5871] usb 1-1: Product: syz [ 559.222224][ T5871] usb 1-1: Manufacturer: syz [ 559.222238][ T5871] usb 1-1: SerialNumber: syz [ 559.381792][ T5869] usb 3-1: config 0 descriptor?? [ 559.447298][ T36] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 559.452780][ T5871] usb 1-1: config 0 descriptor?? [ 559.454945][T10382] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 559.490110][ T36] usb 2-1: device descriptor read/8, error -71 [ 559.597432][ T36] usb usb2-port1: unable to enumerate USB device [ 559.677132][ T5871] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 559.726315][ T5871] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 559.896326][T10382] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1545'. [ 559.977025][ T5869] rc_core: IR keymap rc-hauppauge not found [ 559.977049][ T5869] Registered IR keymap rc-empty [ 560.037292][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.069152][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.093155][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 560.139193][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43 [ 560.311222][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.327888][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.359762][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.378594][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.397593][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.425848][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.656016][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.760468][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 560.931793][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 561.047604][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 562.662635][ T5869] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 562.662666][ T5869] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 564.965006][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.965228][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.330241][ T5869] usb 3-1: USB disconnect, device number 72 [ 565.427189][ T5871] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 565.590312][ T5871] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 565.630729][ T5871] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 565.630763][ T5871] usb 2-1: Product: syz [ 565.630778][ T5871] usb 2-1: Manufacturer: syz [ 565.630919][ T5871] usb 2-1: SerialNumber: syz [ 565.714485][ T5871] usb 2-1: config 0 descriptor?? [ 565.799423][ T5871] ch341 2-1:0.0: ch341-uart converter detected [ 567.023444][ C0] powermate: config urb returned -71 [ 567.023640][ C0] powermate: config urb returned -71 [ 567.023877][ C0] powermate: config urb returned -71 [ 567.024098][ C0] powermate: config urb returned -71 [ 567.077973][ T36] usb 1-1: USB disconnect, device number 63 [ 567.078139][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 567.119359][ T5871] ch341-uart ttyUSB0: failed to read break control: -71 [ 567.119481][ T5871] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 567.254972][T10403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'. [ 567.303107][ T5871] usb 2-1: USB disconnect, device number 64 [ 567.332513][ T5871] ch341 2-1:0.0: device disconnected [ 567.402193][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 567.515494][T10244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.515514][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.515542][T10244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.831926][T10244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.831945][T10244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.831975][T10244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.067017][ T5871] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 568.219861][ T5871] usb 2-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 568.222463][ T5871] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.222501][ T5871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 568.222538][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.270193][ T5871] usb 2-1: config 0 descriptor?? [ 568.400009][T10244] hsr_slave_0: entered promiscuous mode [ 568.424051][T10244] hsr_slave_1: entered promiscuous mode [ 568.425958][T10244] debugfs: 'hsr0' already exists in 'hsr' [ 568.426045][T10244] Cannot create hsr debugfs directory [ 569.517516][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1554'. [ 569.792466][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 570.036539][ T5871] usbhid 2-1:0.0: can't add hid device: -71 [ 570.036771][ T5871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 570.087797][ T5871] usb 2-1: USB disconnect, device number 65 [ 570.098989][ T13] bridge_slave_1: left allmulticast mode [ 570.099260][ T13] bridge_slave_1: left promiscuous mode [ 570.112787][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.540147][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 572.072006][ T13] bridge_slave_0: left allmulticast mode [ 572.072045][ T13] bridge_slave_0: left promiscuous mode [ 572.115021][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.435564][ T5869] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 573.728860][ T5869] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 573.731366][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 573.731408][ T5869] usb 1-1: can't read configurations, error -61 [ 573.872630][ T5869] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 574.033253][ T5869] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 574.035441][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 574.035483][ T5869] usb 1-1: can't read configurations, error -61 [ 574.035996][ T5869] usb usb1-port1: attempt power cycle [ 574.367291][ T5828] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 574.428749][ T5869] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 574.449675][ T5869] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 574.456556][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 574.456598][ T5869] usb 1-1: can't read configurations, error -61 [ 574.517177][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 574.517931][ T5828] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 574.519291][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.570873][ T5828] pvrusb2: Hardware description: Terratec Grabster AV400 [ 574.570893][ T5828] pvrusb2: ********** [ 574.570900][ T5828] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 574.570912][ T5828] pvrusb2: Important functionality might not be entirely working. [ 574.570921][ T5828] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 574.570932][ T5828] pvrusb2: ********** [ 574.617299][ T5869] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 574.643727][ T5869] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 574.646328][ T5869] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 574.646362][ T5869] usb 1-1: can't read configurations, error -61 [ 574.648204][ T5869] usb usb1-port1: unable to enumerate USB device [ 574.760318][ T2385] pvrusb2: Invalid write control endpoint [ 574.881856][ T2385] pvrusb2: Invalid write control endpoint [ 574.881872][ T2385] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 574.881884][ T2385] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 574.881893][ T2385] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 574.881905][ T2385] pvrusb2: Device being rendered inoperable [ 574.967094][ T2385] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 574.967191][ T2385] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 574.973759][ T2385] pvrusb2: Attached sub-driver cx25840 [ 574.973776][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 574.973787][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 575.012606][ T5828] usb 3-1: USB disconnect, device number 73 [ 576.483948][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.461170][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 577.559065][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.772570][ T13] bond0 (unregistering): Released all slaves [ 577.794717][ T13] bond1 (unregistering): Released all slaves [ 578.521313][T10440] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 578.521342][T10440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 578.521354][T10440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 578.574339][ T13] : left promiscuous mode [ 579.809743][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'. [ 580.248317][ T5871] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 580.610735][ T5871] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 581.011379][ T5871] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 581.011411][ T5871] usb 2-1: Product: syz [ 581.011426][ T5871] usb 2-1: Manufacturer: syz [ 581.011440][ T5871] usb 2-1: SerialNumber: syz [ 581.057191][ T5871] usb 2-1: config 0 descriptor?? [ 581.070018][ T5871] ch341 2-1:0.0: ch341-uart converter detected [ 582.080896][ T5871] ch341-uart ttyUSB0: failed to read break control: -71 [ 582.080937][ T5871] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 582.087808][ T5871] usb 2-1: USB disconnect, device number 66 [ 582.091274][ T5871] ch341 2-1:0.0: device disconnected [ 582.383553][ T5707] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 582.402557][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 582.526998][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 582.547054][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 582.552153][ T5707] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 582.556379][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.616461][ T5707] pvrusb2: Hardware description: Terratec Grabster AV400 [ 582.616481][ T5707] pvrusb2: ********** [ 582.616488][ T5707] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 582.616499][ T5707] pvrusb2: Important functionality might not be entirely working. [ 582.616508][ T5707] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 582.616519][ T5707] pvrusb2: ********** [ 582.677997][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 582.679186][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 582.679204][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 582.679227][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.992430][ T2385] pvrusb2: Invalid write control endpoint [ 584.996142][ T10] gud 3-1:1.0: Failed to add properties (error=-71) [ 584.996198][ T10] gud 3-1:1.0: probe with driver gud failed with error -71 [ 585.072747][ T5601] usb 5-1: USB disconnect, device number 53 [ 585.238888][ T2385] pvrusb2: Invalid write control endpoint [ 585.238908][ T2385] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 585.238918][ T2385] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 585.238927][ T2385] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 585.238937][ T2385] pvrusb2: Device being rendered inoperable [ 585.238974][ T2385] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 585.239027][ T2385] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 585.333958][ T2385] pvrusb2: Attached sub-driver cx25840 [ 585.333978][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 585.333990][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 585.421686][ T10] usb 3-1: USB disconnect, device number 74 [ 586.091493][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 588.264165][ T5871] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 588.364067][ T5249] 8021q: adding VLAN 0 to HW filter on device eth1 [ 588.418013][ T5871] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 588.447566][ T5871] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 588.447598][ T5871] usb 3-1: Product: syz [ 588.447626][ T5871] usb 3-1: Manufacturer: syz [ 588.447641][ T5871] usb 3-1: SerialNumber: syz [ 588.628945][ T5871] usb 3-1: config 0 descriptor?? [ 588.710487][ T5871] ch341 3-1:0.0: ch341-uart converter detected [ 588.808611][ T5601] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 588.817004][ T5707] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 589.000472][ T5707] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 589.002555][ T5601] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 589.012670][ T5601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.012706][ T5601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.012746][ T5601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.014961][ T5707] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 589.015053][ T5707] usb 1-1: Product: syz [ 589.015068][ T5707] usb 1-1: Manufacturer: syz [ 589.015082][ T5707] usb 1-1: SerialNumber: syz [ 589.131462][ T5601] usb 2-1: config 0 descriptor?? [ 589.157217][ T5707] usb 1-1: config 0 descriptor?? [ 589.192495][ T5707] ch341 1-1:0.0: ch341-uart converter detected [ 589.545805][T10552] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 589.615424][ T5601] hid_parser_main: 16 callbacks suppressed [ 589.615451][ T5601] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 589.704741][ T5601] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 589.814458][ T5601] cp2112 0003:10C4:EA90.0018: error requesting version [ 590.009217][ T5707] usb 1-1: failed to send control message: -71 [ 590.009286][ T5707] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 590.032020][ T5707] usb 1-1: USB disconnect, device number 68 [ 590.163791][ T5707] ch341 1-1:0.0: device disconnected [ 590.165845][ T5601] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -32 [ 590.232784][ T5871] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 590.352960][ T5871] usb 3-1: USB disconnect, device number 75 [ 590.552439][ T5871] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 590.571819][ T5871] ch341 3-1:0.0: device disconnected [ 592.739459][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 593.193950][ T5601] usb 2-1: USB disconnect, device number 67 [ 595.240470][ T5707] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 595.441588][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 595.448062][ T5707] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 595.453394][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.160945][ T5707] pvrusb2: Hardware description: Terratec Grabster AV400 [ 596.161013][ T5707] pvrusb2: ********** [ 596.161020][ T5707] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 596.161034][ T5707] pvrusb2: Important functionality might not be entirely working. [ 596.161044][ T5707] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 596.161055][ T5707] pvrusb2: ********** [ 596.683646][ T2385] pvrusb2: Invalid write control endpoint [ 596.876602][ T2385] pvrusb2: Invalid write control endpoint [ 596.876621][ T2385] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 596.876631][ T2385] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 596.876639][ T2385] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 596.876650][ T2385] pvrusb2: Device being rendered inoperable [ 596.876748][ T2385] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 596.878460][ T2385] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 596.926646][ T36] usb 5-1: USB disconnect, device number 54 [ 596.947282][ T2385] pvrusb2: Attached sub-driver cx25840 [ 596.947298][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 596.947307][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 597.161130][T10591] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 597.161160][T10591] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 597.161172][T10591] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 597.206741][ T5249] 8021q: adding VLAN 0 to HW filter on device eth2 [ 597.966943][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 598.118631][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 598.120642][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 598.120662][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 598.120695][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.347000][ T5707] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 598.506742][ T5707] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 598.531187][ T5707] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.531229][ T5707] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.531268][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.616584][ T5707] usb 5-1: config 0 descriptor?? [ 598.844415][ T10] gud 1-1:1.0: Failed to add properties (error=-71) [ 598.844466][ T10] gud 1-1:1.0: probe with driver gud failed with error -71 [ 599.178448][ T5869] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 599.248411][ T10] usb 1-1: USB disconnect, device number 69 [ 599.327731][ T5869] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 599.329297][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 599.329329][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 599.329355][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 599.339045][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.339074][ T5869] usb 3-1: Product: syz [ 599.339089][ T5869] usb 3-1: Manufacturer: syz [ 599.339105][ T5869] usb 3-1: SerialNumber: syz [ 599.507714][ T5869] usb 3-1: config 0 descriptor?? [ 599.533850][T10622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.534071][T10622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.565890][ T5869] usb 3-1: ucan: probing device on interface #0 [ 599.840775][ T5869] usb 3-1: ucan: could not read protocol version, ret=0 [ 599.840804][ T5869] usb 3-1: ucan: probe failed; try to update the device firmware [ 600.073835][ T10] usb 3-1: USB disconnect, device number 76 [ 600.106254][ T5707] usbhid 5-1:0.0: can't add hid device: -71 [ 600.106389][ T5707] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 600.430061][ T5707] usb 5-1: USB disconnect, device number 55 [ 600.518327][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 600.565449][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 600.572840][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 600.612100][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 600.643994][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.143069][ T5707] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 601.143631][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 601.472821][ T5707] usb 3-1: device descriptor read/64, error -32 [ 601.887536][ T5707] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 601.888023][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 602.051352][ T5707] usb 3-1: device descriptor read/64, error -32 [ 602.164814][ T5707] usb usb3-port1: attempt power cycle [ 602.723276][ T5707] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 602.758198][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 602.758810][ T5707] usb 3-1: device descriptor read/8, error -32 [ 602.851907][ T5600] Bluetooth: hci4: command tx timeout [ 602.868814][ T5707] raw-gadget.0 gadget.2: failed to queue suspend event [ 602.918556][ T5707] raw-gadget.0 gadget.2: failed to queue reset event [ 603.009493][ T5707] raw-gadget.0 gadget.2: failed to queue resume event [ 603.097084][ T5707] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 603.117820][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 603.117962][ T5707] usb 3-1: device descriptor read/8, error -32 [ 603.227422][ T5707] raw-gadget.0 gadget.2: failed to queue suspend event [ 603.228057][ T5707] usb usb3-port1: unable to enumerate USB device [ 604.270583][T10650] raw-gadget.0 gadget.2: failed to queue disconnect event [ 604.315263][T10665] netlink: 'syz.0.1609': attribute type 2 has an invalid length. [ 604.315288][T10665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1609'. [ 604.980850][ T5600] Bluetooth: hci4: command tx timeout [ 605.466995][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 605.627982][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 605.632568][ T9] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 605.632608][ T9] usb 3-1: Product: syz [ 605.632624][ T9] usb 3-1: Manufacturer: syz [ 605.632639][ T9] usb 3-1: SerialNumber: syz [ 605.639956][ T9] usb 3-1: config 0 descriptor?? [ 605.667479][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 605.920603][T10679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 605.939066][ T13] hsr_slave_0: left promiscuous mode [ 605.977132][ T13] hsr_slave_1: left promiscuous mode [ 606.000481][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.000591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.087113][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.087145][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.090240][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 606.237358][ T13] veth1_macvtap: left promiscuous mode [ 606.244237][ T13] veth0_macvtap: left promiscuous mode [ 606.245591][ T13] veth1_vlan: left promiscuous mode [ 606.270838][ T13] veth0_vlan: left promiscuous mode [ 606.660603][ T9] ch341-uart ttyUSB0: failed to read break control: -71 [ 606.660668][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 606.688298][ T9] usb 3-1: USB disconnect, device number 81 [ 606.707542][ T9] ch341 3-1:0.0: device disconnected [ 607.056998][ T5600] Bluetooth: hci4: command tx timeout [ 608.849206][ T13] team0 (unregistering): Port device team_slave_1 removed [ 608.908854][ T13] team0 (unregistering): Port device team_slave_0 removed [ 608.999021][ T5828] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 609.117785][T10665] : entered promiscuous mode [ 609.136959][ T5600] Bluetooth: hci4: command tx timeout [ 609.156916][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 609.159560][ T5828] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.171724][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.171781][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.171808][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 609.171833][ T5828] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 609.171855][ T5828] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.175027][ T5828] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 609.175049][ T5828] usb 3-1: Manufacturer: syz [ 609.221690][ T5828] usb 3-1: config 0 descriptor?? [ 610.338523][ T5828] rc_core: IR keymap rc-hauppauge not found [ 610.338547][ T5828] Registered IR keymap rc-empty [ 610.339028][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.357305][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.379868][ T5828] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 610.411260][ T5828] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 610.452092][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.501890][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.527399][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.547462][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.567473][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.587548][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.607469][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.627326][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.657055][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.677507][ T5828] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 610.777333][ T5828] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 610.777363][ T5828] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 610.837301][ T5828] usb 3-1: USB disconnect, device number 82 [ 611.374683][ T5869] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 611.482564][T10722] macvlan0: entered promiscuous mode [ 611.528183][ T5869] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 611.529996][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.530023][ T5869] usb 5-1: config 0 has no interfaces? [ 611.530055][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.536049][ T5869] usb 5-1: config 0 descriptor?? [ 612.141224][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 612.141329][T10733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.141341][T10733] IPv6: NLM_F_CREATE should be set when creating new route [ 612.142288][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 612.142379][T10733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.146982][ T5871] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 612.291957][T10630] lo speed is unknown, defaulting to 1000 [ 612.299034][ T5871] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 612.352640][ T5871] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 612.352672][ T5871] usb 3-1: Product: syz [ 612.352687][ T5871] usb 3-1: Manufacturer: syz [ 612.352700][ T5871] usb 3-1: SerialNumber: syz [ 612.410485][ T5871] usb 3-1: config 0 descriptor?? [ 612.426930][ T36] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 612.438198][ T5871] ch341 3-1:0.0: ch341-uart converter detected [ 612.474690][T10738] netlink: 'syz.0.1626': attribute type 2 has an invalid length. [ 612.474715][T10738] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1626'. [ 612.633003][ T36] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 612.718775][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.718838][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.782434][ T36] usb 2-1: config 0 descriptor?? [ 612.894213][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 613.228335][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 613.230121][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 613.231788][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 613.233480][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 613.234386][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 613.236067][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 613.243617][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 613.250911][ T36] pwc: recv_control_msg error -32 req 02 val 2100 [ 613.252849][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 613.256021][ T36] pwc: recv_control_msg error -32 req 02 val 2500 [ 613.498633][ T5871] ch341-uart ttyUSB0: failed to read break control: -71 [ 613.498701][ T5871] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 613.504561][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 613.505063][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 613.505630][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 613.506282][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 613.507643][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 613.567561][ T5871] usb 3-1: USB disconnect, device number 83 [ 613.570873][ T5871] ch341 3-1:0.0: device disconnected [ 613.912018][ T5828] usb 5-1: USB disconnect, device number 56 [ 613.981284][ T36] pwc: Registered as video103. [ 614.069968][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 614.121877][ T36] usb 2-1: USB disconnect, device number 68 [ 615.859633][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'. [ 616.255406][ T5869] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 616.566932][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 616.568181][ T5869] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 616.570512][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.570570][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.570599][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 616.570624][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 616.570649][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.571942][ T5869] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 616.571967][ T5869] usb 3-1: Manufacturer: syz [ 616.861100][ T5869] usb 3-1: config 0 descriptor?? [ 616.863480][T10776] loop5: detected capacity change from 0 to 7 [ 617.247004][ T5869] rc_core: IR keymap rc-hauppauge not found [ 617.247027][ T5869] Registered IR keymap rc-empty [ 617.247655][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.267379][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.301766][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 617.388310][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 617.423020][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.447279][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.470070][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.498191][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.517520][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.551614][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.567352][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.600802][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.617452][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.640875][ T5869] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 617.712579][ T5869] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 617.712608][ T5869] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 617.763642][ T5869] usb 3-1: USB disconnect, device number 84 [ 617.767899][T10776] Dev loop5: unable to read RDB block 7 [ 617.767957][T10776] loop5: unable to read partition table [ 617.768171][T10776] loop5: partition table beyond EOD, truncated [ 617.768217][T10776] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.913911][T10779] Dev loop5: unable to read RDB block 7 [ 617.913958][T10779] loop5: unable to read partition table [ 617.914189][T10779] loop5: partition table beyond EOD, truncated [ 617.914226][T10779] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 618.373473][ T13] bridge_slave_1: left allmulticast mode [ 618.373512][ T13] bridge_slave_1: left promiscuous mode [ 618.373798][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.486998][ T5828] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 619.627777][ T5828] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 619.632350][ T5828] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 619.632379][ T5828] usb 1-1: Product: syz [ 619.632393][ T5828] usb 1-1: Manufacturer: syz [ 619.632407][ T5828] usb 1-1: SerialNumber: syz [ 619.633353][ T13] bridge_slave_0: left allmulticast mode [ 619.633388][ T13] bridge_slave_0: left promiscuous mode [ 619.633677][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.647575][ T5828] usb 1-1: config 0 descriptor?? [ 619.700593][ T5828] ch341 1-1:0.0: ch341-uart converter detected [ 620.057056][ T5707] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 620.208124][ T5707] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 620.210398][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.210437][ T5707] usb 5-1: config 0 has no interfaces? [ 620.210471][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.259400][ T5707] usb 5-1: config 0 descriptor?? [ 620.270436][ T5871] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 620.428226][ T5871] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 620.429894][ T5871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.429920][ T5871] usb 3-1: config 0 has no interfaces? [ 620.429954][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.474207][ T5871] usb 3-1: config 0 descriptor?? [ 620.616123][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 620.790472][ T5828] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 620.903461][ T5601] usb 5-1: USB disconnect, device number 57 [ 621.007797][ T5828] usb 1-1: USB disconnect, device number 70 [ 621.035223][ T5828] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 621.051964][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.058207][ T5828] ch341 1-1:0.0: device disconnected [ 621.195260][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.283394][ T13] bond0 (unregistering): Released all slaves [ 622.144727][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 622.415751][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 624.751328][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.751419][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.862987][ T10] usb 3-1: USB disconnect, device number 85 [ 626.086174][ T13] hsr_slave_0: left promiscuous mode [ 626.117634][ T13] hsr_slave_1: left promiscuous mode [ 626.120464][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.171210][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.331467][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1656'. [ 626.487639][ T5828] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 627.636960][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 627.638045][ T5828] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 627.640174][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.778232][ T5828] pvrusb2: Hardware description: Terratec Grabster AV400 [ 627.778252][ T5828] pvrusb2: ********** [ 627.778259][ T5828] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 627.778422][ T5828] pvrusb2: Important functionality might not be entirely working. [ 627.778432][ T5828] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 627.778445][ T5828] pvrusb2: ********** [ 627.988495][ T2385] pvrusb2: Invalid write control endpoint [ 627.988585][ T13] team0 (unregistering): Port device team_slave_1 removed [ 628.045962][ T13] team0 (unregistering): Port device team_slave_0 removed [ 628.380029][ T10] usb 5-1: USB disconnect, device number 58 [ 628.452798][ T2385] pvrusb2: Invalid write control endpoint [ 628.452811][ T2385] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 628.452817][ T2385] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 628.452822][ T2385] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 628.452827][ T2385] pvrusb2: Device being rendered inoperable [ 628.454038][ T2385] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 628.454077][ T2385] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 628.560085][ T2385] pvrusb2: Attached sub-driver cx25840 [ 628.560098][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 628.560104][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 629.082760][T10630] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.082970][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.083152][T10630] bridge_slave_0: entered allmulticast mode [ 629.088880][T10630] bridge_slave_0: entered promiscuous mode [ 629.092002][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.092219][T10630] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.092382][T10630] bridge_slave_1: entered allmulticast mode [ 629.095179][T10630] bridge_slave_1: entered promiscuous mode [ 629.210140][T10907] ======================================================= [ 629.210140][T10907] WARNING: The mand mount option has been deprecated and [ 629.210140][T10907] and is ignored by this kernel. Remove the mand [ 629.210140][T10907] option from the mount to silence this warning. [ 629.210140][T10907] ======================================================= [ 630.109175][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1660'. [ 633.238863][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.245672][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.605419][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'. [ 633.686938][ T5871] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 633.838063][ T5871] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 633.839950][ T5871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.839977][ T5871] usb 2-1: config 0 has no interfaces? [ 633.840010][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.885409][ T5871] usb 2-1: config 0 descriptor?? [ 634.599229][T10921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 634.599249][T10921] IPv6: NLM_F_CREATE should be set when creating new route [ 634.600120][T10921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.933047][ T5601] usb 2-1: USB disconnect, device number 69 [ 635.982510][T10931] loop5: detected capacity change from 0 to 7 [ 636.005386][T10931] Dev loop5: unable to read RDB block 7 [ 636.005432][T10931] loop5: unable to read partition table [ 636.005657][T10931] loop5: partition table beyond EOD, truncated [ 636.005678][T10931] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.143627][T10931] Dev loop5: unable to read RDB block 7 [ 636.143673][T10931] loop5: unable to read partition table [ 636.143886][T10931] loop5: partition table beyond EOD, truncated [ 636.143907][T10931] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.612991][T10929] vxcan17: entered allmulticast mode [ 637.487530][T10630] team0: Port device team_slave_0 added [ 637.495737][T10630] team0: Port device team_slave_1 added [ 637.551154][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.551174][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.551205][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.553777][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.553791][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.553818][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.746550][T10630] hsr_slave_0: entered promiscuous mode [ 637.789380][T10630] hsr_slave_1: entered promiscuous mode [ 644.183833][T10978] vxcan17: entered allmulticast mode [ 647.614438][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 647.702437][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 647.915222][ T5707] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 648.068203][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 648.071443][ T5707] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 648.132356][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.544658][ T5707] pvrusb2: Hardware description: Terratec Grabster AV400 [ 648.544682][ T5707] pvrusb2: ********** [ 648.544689][ T5707] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 648.544726][ T5707] pvrusb2: Important functionality might not be entirely working. [ 648.544784][ T5707] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 648.544798][ T5707] pvrusb2: ********** [ 648.913676][ T2385] pvrusb2: Invalid write control endpoint [ 649.547370][ T2385] pvrusb2: Invalid write control endpoint [ 649.547387][ T2385] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 649.547397][ T2385] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 649.547406][ T2385] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 649.547416][ T2385] pvrusb2: Device being rendered inoperable [ 649.548096][ T2385] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 649.548155][ T2385] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 649.643718][ T5828] usb 5-1: USB disconnect, device number 59 [ 649.658865][ T2385] pvrusb2: Attached sub-driver cx25840 [ 649.658884][ T2385] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 649.658896][ T2385] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 649.819367][T11019] vxcan11: entered allmulticast mode [ 649.929432][T10630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 649.973385][T10630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.974634][T10630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 650.023799][T10630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.036414][T10630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 650.084660][T10630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.108387][T10630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 650.155145][T10630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.763732][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.764233][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.113810][T11037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.134954][T11037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.826977][ T5707] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 651.997787][ T5707] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 652.017249][ T5707] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.017280][ T5707] usb 3-1: config 0 has no interfaces? [ 652.017313][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.025691][ T5707] usb 3-1: config 0 descriptor?? [ 655.219694][T11080] dummy_hcd dummy_hcd.0: remove, state 1 [ 655.219979][T11080] usb usb1: USB disconnect, device number 1 [ 655.248253][T11080] dummy_hcd dummy_hcd.0: stopped [ 655.248271][T11080] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 655.302636][ C0] ================================================================== [ 655.302716][ C0] BUG: KASAN: slab-use-after-free in usb_giveback_urb_bh+0x2b9/0x440 [ 655.302873][ C0] Write of size 8 at addr ffff88802950f420 by task ksoftirqd/0/15 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 655.302888][ C0] [ 655.302907][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.302954][ C0] Tainted: [L]=SOFTLOCKUP [ 655.302961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.302971][ C0] Call Trace: [ 655.302984][ C0] [ 655.303019][ C0] dump_stack_lvl+0xe8/0x150 [ 655.303161][ C0] print_address_description+0x55/0x1e0 [ 655.303206][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.303250][ C0] print_report+0x58/0x70 [ 655.303269][ C0] kasan_report+0x117/0x150 [ 655.303332][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.303353][ C0] usb_giveback_urb_bh+0x2b9/0x440 [ 655.303374][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 655.303393][ C0] ? rcu_is_watching+0x15/0xb0 [ 655.303458][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 655.303533][ C0] process_scheduled_works+0xa8e/0x14e0 [ 655.303549][ C0] ? __lock_acquire+0x683/0x2ce0 [ 655.303602][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 655.303620][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.303645][ C0] ? assign_work+0x3cf/0x5d0 [ 655.303665][ C0] bh_worker+0x46a/0x880 [ 655.303665][ C0] bh_worker+0x46a/0x880 [ 655.303709][ C0] tasklet_action+0xc/0x70 [ 655.303749][ C0] handle_softirqs+0x1d9/0x6c0 [ 655.303772][ C0] run_ksoftirqd+0x52/0x180 [ 655.303794][ C0] smpboot_thread_fn+0x57c/0xa80 [ 655.303835][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 655.303857][ C0] kthread+0x388/0x470 [ 655.303898][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 655.303917][ C0] ? __pfx_kthread+0x10/0x10 [ 655.303938][ C0] ret_from_fork+0x514/0xb70 [ 655.303998][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 655.304020][ C0] ? __switch_to+0xc89/0x1420 [ 655.304057][ C0] ? __pfx_kthread+0x10/0x10 [ 655.304080][ C0] ret_from_fork_asm+0x1a/0x30 [ 655.304108][ C0] [ 655.304136][ C0] [ 655.304141][ C0] Allocated by task 1: [ 655.304169][ C0] kasan_save_track+0x3e/0x80 [ 655.304184][ C0] __kasan_kmalloc+0x93/0xb0 [ 655.304208][ C0] __kmalloc_noprof+0x41a/0x780 [ 655.304259][ C0] __usb_create_hcd+0x67/0x900 [ 655.304277][ C0] dummy_hcd_probe+0xf6/0x270 [ 655.304297][ C0] platform_probe+0xf9/0x190 [ 655.304368][ C0] really_probe+0x254/0xae0 [ 655.304385][ C0] __driver_probe_device+0x1e8/0x360 [ 655.304403][ C0] driver_probe_device+0x4f/0x240 [ 655.304418][ C0] __device_attach_driver+0x270/0x410 [ 655.304434][ C0] bus_for_each_drv+0x25b/0x2f0 [ 655.304476][ C0] __device_attach+0x2c7/0x450 [ 655.304490][ C0] device_initial_probe+0xa1/0xd0 [ 655.304505][ C0] bus_probe_device+0x12d/0x220 [ 655.304524][ C0] device_add+0x7d7/0xb80 [ 655.304563][ C0] platform_device_add+0x4bd/0x860 [ 655.304585][ C0] dummy_hcd_init+0x667/0xd00 [ 655.304677][ C0] do_one_initcall+0x250/0x870 [ 655.304700][ C0] do_initcall_level+0x10a/0x1a0 [ 655.304764][ C0] do_initcalls+0x59/0xa0 [ 655.304786][ C0] kernel_init_freeable+0x29d/0x3e0 [ 655.304809][ C0] kernel_init+0x22/0x1d0 [ 655.304951][ C0] ret_from_fork+0x514/0xb70 [ 655.304973][ C0] ret_from_fork_asm+0x1a/0x30 [ 655.304993][ C0] [ 655.304997][ C0] Freed by task 11079: [ 655.305006][ C0] kasan_save_track+0x3e/0x80 [ 655.305019][ C0] kasan_save_free_info+0x40/0x50 [ 655.305037][ C0] __kasan_slab_free+0x5c/0x80 [ 655.305050][ C0] kfree+0x1c5/0x6c0 [ 655.305090][ C0] usb_release_dev+0x57/0xe0 [ 655.305123][ C0] device_release+0xc4/0x1f0 [ 655.305140][ C0] kobject_put+0x222/0x550 [ 655.305195][ C0] usbdev_release+0x39b/0x740 [ 655.305251][ C0] __fput+0x42a/0xa80 [ 655.305297][ C0] task_work_run+0x1d9/0x270 [ 655.305321][ C0] exit_to_user_mode_loop+0x1fa/0x750 [ 655.305359][ C0] do_syscall_64+0x353/0x580 [ 655.305390][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.305423][ C0] [ 655.305428][ C0] Last potentially related work creation: [ 655.305434][ C0] kasan_save_stack+0x3e/0x60 [ 655.305477][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 655.305494][ C0] insert_work+0x3d/0x330 [ 655.305508][ C0] __queue_work+0xd1d/0x10f0 [ 655.305525][ C0] queue_work_on+0x106/0x1d0 [ 655.305541][ C0] unlink1+0x33d/0x3e0 [ 655.305553][ C0] usb_hcd_flush_endpoint+0x167/0x440 [ 655.305567][ C0] usb_disable_interface+0x279/0x350 [ 655.305587][ C0] usb_unbind_interface+0x265/0x9f0 [ 655.305609][ C0] device_release_driver_internal+0x4f5/0x880 [ 655.305627][ C0] bus_remove_device+0x449/0x560 [ 655.305647][ C0] device_del+0x528/0x8f0 [ 655.305660][ C0] usb_disable_device+0x3d4/0x8d0 [ 655.305680][ C0] usb_disconnect+0x32d/0x990 [ 655.305696][ C0] usb_remove_hcd+0x275/0x670 [ 655.305712][ C0] dummy_hcd_remove+0xed/0x130 [ 655.305793][ C0] device_release_driver_internal+0x48b/0x880 [ 655.305810][ C0] unbind_store+0x1a4/0x1d0 [ 655.305830][ C0] kernfs_fop_write_iter+0x3a5/0x540 [ 655.305911][ C0] vfs_write+0x61e/0xbb0 [ 655.305946][ C0] ksys_write+0x156/0x270 [ 655.305962][ C0] do_syscall_64+0x174/0x580 [ 655.305976][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.305991][ C0] [ 655.305994][ C0] Second to last potentially related work creation: [ 655.306021][ C0] kasan_save_stack+0x3e/0x60 [ 655.306043][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 655.306061][ C0] insert_work+0x3d/0x330 [ 655.306076][ C0] __queue_work+0xd1d/0x10f0 [ 655.306100][ C0] queue_work_on+0x106/0x1d0 [ 655.306118][ C0] usb_hcd_submit_urb+0xa2d/0x1b40 [ 655.306142][ C0] usb_start_wait_urb+0x13f/0x5b0 [ 655.306159][ C0] usb_control_msg+0x234/0x3e0 [ 655.306176][ C0] hub_ext_port_status+0x114/0x810 [ 655.306191][ C0] hub_activate+0x740/0x1b10 [ 655.306219][ C0] hub_resume+0xa4/0x3f0 [ 655.306237][ C0] usb_resume_both+0x5f1/0xb20 [ 655.306249][ C0] __rpm_callback+0x2d6/0x930 [ 655.306310][ C0] rpm_resume+0x104d/0x16d0 [ 655.306322][ C0] __pm_runtime_resume+0x119/0x170 [ 655.306336][ C0] usb_autoresume_device+0x23/0xf0 [ 655.306349][ C0] usbdev_open+0x190/0x790 [ 655.306361][ C0] chrdev_open+0x4dc/0x600 [ 655.306381][ C0] do_dentry_open+0x849/0x1420 [ 655.306422][ C0] vfs_open+0x3b/0x350 [ 655.306441][ C0] path_openat+0x1448/0x1d60 [ 655.306495][ C0] do_file_open+0x23e/0x4a0 [ 655.306512][ C0] do_sys_openat2+0x115/0x200 [ 655.306526][ C0] __x64_sys_openat+0x138/0x170 [ 655.306539][ C0] do_syscall_64+0x174/0x580 [ 655.306553][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.306578][ C0] [ 655.306582][ C0] The buggy address belongs to the object at ffff88802950f000 [ 655.306582][ C0] which belongs to the cache kmalloc-2k of size 2048 [ 655.306599][ C0] The buggy address is located 1056 bytes inside of [ 655.306599][ C0] freed 2048-byte region [ffff88802950f000, ffff88802950f800) [ 655.306618][ C0] [ 655.306623][ C0] The buggy address belongs to the physical page: [ 655.306632][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29508 [ 655.306650][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 655.306663][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 655.306676][ C0] page_type: f5(slab) [ 655.306691][ C0] raw: 0080000000000040 ffff88813ffb8000 dead000000000100 dead000000000122 [ 655.306706][ C0] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 655.306721][ C0] head: 0080000000000040 ffff88813ffb8000 dead000000000100 dead000000000122 [ 655.306734][ C0] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 655.306748][ C0] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 655.306761][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 655.306769][ C0] page dumped because: kasan: bad access detected [ 655.306778][ C0] page_owner tracks the page as allocated [ 655.306783][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11916025451, free_ts 11899067325 [ 655.306812][ C0] post_alloc_hook+0x1f9/0x250 [ 655.306875][ C0] get_page_from_freelist+0x262a/0x26a0 [ 655.306892][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 655.306908][ C0] allocate_slab+0x79/0x5e0 [ 655.306942][ C0] refill_objects+0x2d8/0x350 [ 655.306960][ C0] __pcs_replace_empty_main+0x330/0x690 [ 655.306978][ C0] __kmalloc_noprof+0x544/0x780 [ 655.306991][ C0] platform_device_alloc+0x39/0x260 [ 655.307012][ C0] dummy_hcd_init+0x2c9/0xd00 [ 655.307033][ C0] do_one_initcall+0x250/0x870 [ 655.307054][ C0] do_initcall_level+0x10a/0x1a0 [ 655.307078][ C0] do_initcalls+0x59/0xa0 [ 655.307098][ C0] kernel_init_freeable+0x29d/0x3e0 [ 655.307119][ C0] kernel_init+0x22/0x1d0 [ 655.307135][ C0] ret_from_fork+0x514/0xb70 [ 655.307156][ C0] ret_from_fork_asm+0x1a/0x30 [ 655.307177][ C0] page last free pid 198 tgid 198 stack trace: [ 655.307186][ C0] free_pages_prepare+0x946/0xa40 [ 655.307219][ C0] __free_contig_range_common+0x174/0x340 [ 655.307239][ C0] free_pages_bulk+0x48/0x120 [ 655.307256][ C0] vfree+0x26f/0x510 [ 655.307299][ C0] delayed_vfree_work+0x55/0x80 [ 655.307312][ C0] process_scheduled_works+0xa8e/0x14e0 [ 655.307328][ C0] worker_thread+0xa47/0xfb0 [ 655.307343][ C0] kthread+0x388/0x470 [ 655.307362][ C0] ret_from_fork+0x514/0xb70 [ 655.307381][ C0] ret_from_fork_asm+0x1a/0x30 [ 655.307403][ C0] [ 655.307406][ C0] Memory state around the buggy address: [ 655.307416][ C0] ffff88802950f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.307427][ C0] ffff88802950f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.307437][ C0] >ffff88802950f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.307446][ C0] ^ [ 655.307455][ C0] ffff88802950f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.307465][ C0] ffff88802950f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.307473][ C0] ================================================================== [ 655.482841][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 655.482869][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 655.482904][ C0] Tainted: [L]=SOFTLOCKUP [ 655.482911][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.482925][ C0] Call Trace: [ 655.482933][ C0] [ 655.482942][ C0] vpanic+0x56c/0xa60 [ 655.482985][ C0] ? __pfx_vpanic+0x10/0x10 [ 655.483021][ C0] panic+0xc5/0xd0 [ 655.483051][ C0] ? __pfx_panic+0x10/0x10 [ 655.483084][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 655.483170][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.483192][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 655.483214][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.483247][ C0] check_panic_on_warn+0x89/0xb0 [ 655.483334][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.483359][ C0] end_report+0x73/0x170 [ 655.483382][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.483406][ C0] kasan_report+0x128/0x150 [ 655.483430][ C0] ? usb_giveback_urb_bh+0x2b9/0x440 [ 655.483458][ C0] usb_giveback_urb_bh+0x2b9/0x440 [ 655.483484][ C0] ? __pfx_usb_giveback_urb_bh+0x10/0x10 [ 655.483511][ C0] ? rcu_is_watching+0x15/0xb0 [ 655.483538][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 655.483563][ C0] process_scheduled_works+0xa8e/0x14e0 [ 655.483586][ C0] ? __lock_acquire+0x683/0x2ce0 [ 655.483618][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 655.483642][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.483674][ C0] ? assign_work+0x3cf/0x5d0 [ 655.483699][ C0] bh_worker+0x46a/0x880 [ 655.483730][ C0] tasklet_action+0xc/0x70 [ 655.483754][ C0] handle_softirqs+0x1d9/0x6c0 [ 655.483782][ C0] run_ksoftirqd+0x52/0x180 [ 655.483810][ C0] smpboot_thread_fn+0x57c/0xa80 [ 655.483838][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 655.483869][ C0] kthread+0x388/0x470 [ 655.483899][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 655.483925][ C0] ? __pfx_kthread+0x10/0x10 [ 655.483956][ C0] ret_from_fork+0x514/0xb70 [ 655.483988][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 655.484019][ C0] ? __switch_to+0xc89/0x1420 [ 655.484047][ C0] ? __pfx_kthread+0x10/0x10 [ 655.484078][ C0] ret_from_fork_asm+0x1a/0x30 [ 655.484117][ C0] [ 655.484402][ C0] Kernel Offset: disabled