last executing test programs: 20.187393872s ago: executing program 3 (id=2834): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 19.359157906s ago: executing program 3 (id=2838): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_disconnect(r0) 14.207059147s ago: executing program 3 (id=2849): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x4112, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1) socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x5}, 0x4) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140), 0x14) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 13.919378797s ago: executing program 0 (id=2851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r2, 0x7d) fanotify_init(0x8, 0x80000) r3 = dup(r2) sendfile(r3, r2, 0x0, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(r1, &(0x7f0000000680)='./file0\x00', 0x4000, 0x0, &(0x7f00000009c0)) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f00000008c0)) msgctl$IPC_SET(0x0, 0x1, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 12.920810935s ago: executing program 0 (id=2853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x524, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x2, 0xc9, 0x0, 0x7197}}}, 0x9) 12.676377202s ago: executing program 0 (id=2854): clock_gettime(0xc, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_open_dev$dri(0x0, 0xd21, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.521753366s ago: executing program 1 (id=2857): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0x9}, {}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x240068c4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) 11.369110019s ago: executing program 3 (id=2858): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000009}, 0x0, 0x0) 10.779978188s ago: executing program 0 (id=2859): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x2d}) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400003, 0x0, {{}, {}, {0x8, 0x11, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.714774875s ago: executing program 1 (id=2860): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 9.658463719s ago: executing program 0 (id=2861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.584793345s ago: executing program 1 (id=2862): socket$inet6_tcp(0xa, 0x1, 0x0) chmod(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x57eeb83c9526c7ac) truncate(&(0x7f0000000340)='./file0\x00', 0x2) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r1, 0x7fffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x40c0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x44, 0x5, 0x7, 0x0, {0x9, 0x8000, 0x1c, 0xa, 0x8, 0x9, 0xa939, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb637aab3803380574019b9250dc4500000000000007ff00"}}) 9.58374195s ago: executing program 3 (id=2863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x6, 0xe1, 0xa, 0x50b}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000383a00fc00f9ffffffffffffff000000000000ff020000000000000000000000000001020090780000000269c829e400093301fe80000000000000000000881f22988a935336bf0efe6720d44a9100000000aafe8800e0ffffff00"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000005000000000200004000000000000000", @ANYBLOB="24e39362", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x7fff, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000180)=""/29}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000000c0)="510003000000", 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x1ff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000100039042bbd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000df02000000000000003821ef15d55fd122f36c4574e343afb4200000280012800b00050067b85861e370000018000280050013000100"], 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000240)={0xff, 0x6, '\x00', [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x10, {0x2, 0x2, 0xe, 0x9, [0x7]}}]}, 0x40) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r7, &(0x7f00000007c0), 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) connect$can_bcm(r6, &(0x7f0000000200), 0x10) clock_gettime(0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 7.892696379s ago: executing program 1 (id=2864): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) dup(r1) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) 7.763321898s ago: executing program 0 (id=2865): syz_open_dev$vim2m(0x0, 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d300000001090212"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.892155192s ago: executing program 2 (id=2870): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 4.733924867s ago: executing program 4 (id=2871): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) 4.679997621s ago: executing program 3 (id=2872): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = io_uring_setup(0x5bde, &(0x7f0000000140)={0x0, 0x549b, 0x0, 0xffffffff, 0x1000, 0x0, r0}) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000002c0)=0x8001, 0x4) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 4.573808981s ago: executing program 2 (id=2873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x1, 0x9, 0xfe}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 4.462042154s ago: executing program 4 (id=2874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 3.859999738s ago: executing program 4 (id=2875): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{&(0x7f0000000480), 0x0, 0x0, 0x10000}], 0x3e0000) 3.452610808s ago: executing program 4 (id=2876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000300)}) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getparam(0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.199838109s ago: executing program 2 (id=2877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2102) 2.346977404s ago: executing program 2 (id=2878): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.198933445s ago: executing program 4 (id=2879): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4080001}], 0x1, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 1.940699259s ago: executing program 2 (id=2880): msgget$private(0x0, 0x100) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 1.878680953s ago: executing program 1 (id=2881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 124.675289ms ago: executing program 2 (id=2882): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 99.254175ms ago: executing program 4 (id=2883): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000001300), 0x0, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2884): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r4, 0x0) kernel console output (not intermixed with test programs): 322740][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.322800][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 728.322816][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 728.322834][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.324404][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 728.324463][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 728.324478][ T36] usb 5-1: Manufacturer: syz [ 728.422389][ T36] usb 5-1: config 0 descriptor?? [ 728.729712][ T31] rc_core: IR keymap rc-hauppauge not found [ 728.729734][ T31] Registered IR keymap rc-empty [ 728.729867][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.749735][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.781417][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 728.784228][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input91 [ 728.824395][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.841304][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.869755][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.889840][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.919952][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.949676][ T36] rc_core: IR keymap rc-hauppauge not found [ 728.949700][ T36] Registered IR keymap rc-empty [ 728.949877][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.950023][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 728.979759][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 728.979918][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 729.011750][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 729.013007][ T36] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 729.039703][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 729.042691][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input92 [ 729.069746][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 729.074536][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.100644][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.119870][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.130004][ T31] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 729.130030][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 729.139825][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.159725][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.190373][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.209797][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.228423][ T31] usb 3-1: USB disconnect, device number 47 [ 729.239724][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.259792][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.279708][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 729.313578][ T36] mceusb 5-1:0.0: Registered < with mce emulator interface version 1 [ 729.313598][ T36] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 729.739690][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 730.579730][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 730.727585][T10248] usb 5-1: USB disconnect, device number 38 [ 730.735872][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 730.749121][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.749237][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.749259][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 730.749274][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 730.749291][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.809493][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 730.812215][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 730.812242][ T31] usb 3-1: Manufacturer: syz [ 730.860193][ T5881] usb 4-1: USB disconnect, device number 58 [ 730.882297][ T31] usb 3-1: config 0 descriptor?? [ 731.383165][T13372] pimreg: entered allmulticast mode [ 731.404434][T13369] pimreg: left allmulticast mode [ 731.563546][ T5881] IPVS: starting estimator thread 0... [ 731.959844][ T31] rc_core: IR keymap rc-hauppauge not found [ 731.959868][ T31] Registered IR keymap rc-empty [ 731.960021][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 731.979783][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.008562][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 732.031536][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input93 [ 732.048850][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.083078][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.100910][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.119972][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.133995][T13377] IPVS: using max 11 ests per chain, 26400 per kthread [ 732.144845][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.164509][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.180491][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.206515][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.219814][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.239830][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 732.301093][ T31] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 732.301120][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 732.340418][ T31] usb 3-1: USB disconnect, device number 48 [ 732.569733][ T10] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 732.766803][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.766832][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.766853][ T10] usb 2-1: config 0 has no interface number 0 [ 732.766899][ T10] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.766944][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 732.766978][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.843243][ T10] usb 2-1: config 0 descriptor?? [ 732.893731][ T10] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 733.119483][ T10] usb 2-1: USB disconnect, device number 36 [ 733.160008][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 733.214872][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 733.252221][T13395] erspan0: entered promiscuous mode [ 733.252431][T13395] macvtap1: entered promiscuous mode [ 733.252542][T13395] macvtap1: entered allmulticast mode [ 733.252552][T13395] erspan0: entered allmulticast mode [ 733.516753][T13400] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2215' sets config #1 [ 733.749679][ T5881] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 733.908338][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 733.918713][ T5881] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 733.918758][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.918777][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 733.918792][ T5881] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 733.918809][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.927481][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 733.927568][ T5881] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 733.927623][ T5881] usb 3-1: Manufacturer: syz [ 734.009441][ T5881] usb 3-1: config 0 descriptor?? [ 734.663612][T13407] netlink: 'syz.1.2218': attribute type 27 has an invalid length. [ 734.663629][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 734.663649][T13407] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 734.911453][T13416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2221'. [ 735.069776][ T5881] rc_core: IR keymap rc-hauppauge not found [ 735.069811][ T5881] Registered IR keymap rc-empty [ 735.070178][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.089871][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.111481][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 735.119089][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94 [ 735.176575][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.190917][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.230687][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.251274][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.269709][T12347] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 735.272087][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.295911][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.330807][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.349931][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.370691][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.389706][ T5881] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 735.466252][ T5881] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 735.466272][ T5881] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 735.513571][T12347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 735.513594][T12347] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 735.513612][T12347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 735.513628][T12347] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 735.548571][T13421] block nbd1: shutting down sockets [ 735.581362][T12347] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 735.581385][T12347] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 735.581400][T12347] usb 4-1: Product: syz [ 735.581411][T12347] usb 4-1: Manufacturer: syz [ 735.581421][T12347] usb 4-1: SerialNumber: syz [ 735.674309][ T5881] usb 3-1: USB disconnect, device number 49 [ 735.705546][T12347] usb 4-1: config 0 descriptor?? [ 735.754655][T12347] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 735.754674][T12347] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 735.754735][T12347] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 736.419726][ T5935] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 736.895701][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2226'. [ 736.921672][ T5935] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 736.921694][ T5935] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 736.921708][ T5935] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 736.921724][ T5935] usb 5-1: config 220 has no interface number 2 [ 736.921771][ T5935] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 736.921792][ T5935] usb 5-1: config 220 interface 0 has no altsetting 0 [ 736.921805][ T5935] usb 5-1: config 220 interface 76 has no altsetting 0 [ 736.921818][ T5935] usb 5-1: config 220 interface 1 has no altsetting 0 [ 736.934016][ T5935] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 736.934050][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.934071][ T5935] usb 5-1: Product: syz [ 736.934085][ T5935] usb 5-1: Manufacturer: syz [ 736.934097][ T5935] usb 5-1: SerialNumber: syz [ 736.972704][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2226'. [ 736.988566][T13431] erspan0: entered promiscuous mode [ 736.992993][T13431] macvtap1: entered promiscuous mode [ 737.001688][T13431] macvtap1: entered allmulticast mode [ 737.001756][T13431] erspan0: entered allmulticast mode [ 737.393810][ T5935] uvcvideo 5-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 737.393889][ T5935] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 737.393921][ T5935] uvcvideo 5-1:220.0: No valid video chain found. [ 737.393986][ T5935] usb 5-1: selecting invalid altsetting 0 [ 737.465748][ T5935] usb 5-1: selecting invalid altsetting 0 [ 737.465791][ T5935] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 737.487569][ T5935] usb 5-1: USB disconnect, device number 39 [ 738.340703][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 738.340739][T13445] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 738.409244][ T5935] usb 4-1: USB disconnect, device number 59 [ 742.321819][T13474] syzkaller0: entered promiscuous mode [ 742.321839][T13474] syzkaller0: entered allmulticast mode [ 743.444200][T13482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2240'. [ 744.177409][T13494] tipc: Enabled bearer , priority 10 [ 745.202193][ T5935] tipc: Node number set to 205638073 [ 745.469737][ T31] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 745.637813][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 745.637845][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 745.637871][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 745.637894][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 745.688484][ T31] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 745.688515][ T31] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 745.688528][ T31] usb 4-1: Product: syz [ 745.688538][ T31] usb 4-1: Manufacturer: syz [ 745.688548][ T31] usb 4-1: SerialNumber: syz [ 745.748288][ T31] usb 4-1: config 0 descriptor?? [ 745.768243][ T31] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 745.768263][ T31] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 745.768325][ T31] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 747.427023][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.427096][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.819067][T13525] syzkaller0: entered promiscuous mode [ 747.819087][T13525] syzkaller0: entered allmulticast mode [ 748.149391][T13529] blktrace: Concurrent blktraces are not allowed on sg0 [ 748.400286][ T31] usb 4-1: USB disconnect, device number 60 [ 748.409792][ T36] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 748.612762][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.612795][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 748.612836][ T36] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 748.612863][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.662126][ T36] usb 1-1: config 0 descriptor?? [ 748.702571][ T36] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 750.070054][T13529] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 750.070078][T13529] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2255'. [ 750.094005][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 750.094026][T13550] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 751.848207][ T5859] usb 1-1: USB disconnect, device number 37 [ 751.848900][T13569] syzkaller0: entered promiscuous mode [ 751.848939][T13569] syzkaller0: entered allmulticast mode [ 751.929665][ T5935] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 751.929672][ T36] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 752.089712][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 752.089724][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 752.108472][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.108520][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.108540][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.108568][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.108691][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.109945][ T36] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 752.109965][ T36] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 752.109979][ T36] usb 2-1: Manufacturer: syz [ 752.113824][ T36] usb 2-1: config 0 descriptor?? [ 752.229130][ T5935] usb 5-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 752.229227][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 752.229290][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 752.229313][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 752.229338][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.251010][ T5935] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 752.251041][ T5935] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 752.251061][ T5935] usb 5-1: Manufacturer: syz [ 752.326225][ T5935] usb 5-1: config 0 descriptor?? [ 752.563552][ T36] rc_core: IR keymap rc-hauppauge not found [ 752.563571][ T36] Registered IR keymap rc-empty [ 752.563722][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.579721][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.601757][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 752.605133][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95 [ 752.627636][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.652159][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.681048][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.699944][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.722956][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.745240][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.756880][ T5935] rc_core: IR keymap rc-hauppauge not found [ 752.756899][ T5935] Registered IR keymap rc-empty [ 752.757067][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.763276][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.781603][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.792229][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.807794][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.818509][ T5935] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 752.820597][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 752.840845][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input96 [ 752.846662][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.872126][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.889788][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.897124][ T36] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 752.897152][ T36] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 752.909713][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.929689][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.950081][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.969735][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 752.989732][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.021163][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.032745][ T36] usb 2-1: USB disconnect, device number 37 [ 753.049852][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 753.384814][ T5935] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 753.384832][ T5935] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 754.113277][ T5935] usb 5-1: USB disconnect, device number 40 [ 755.747935][T13613] syzkaller0: entered promiscuous mode [ 755.747955][T13613] syzkaller0: entered allmulticast mode [ 756.335178][ T37] audit: type=1800 audit(1772187450.552:120): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2280" name="bus" dev="ramfs" ino=37103 res=0 errno=0 [ 756.419808][ T5859] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 756.571031][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 756.573362][ T5859] usb 1-1: unable to get BOS descriptor or descriptor too short [ 756.574566][ T5859] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 756.574592][ T5859] usb 1-1: config 0 has no interface number 0 [ 756.574627][ T5859] usb 1-1: config 0 interface 245 has no altsetting 0 [ 756.576974][ T5859] usb 1-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=c3.52 [ 756.577009][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.577023][ T5859] usb 1-1: Product: syz [ 756.577033][ T5859] usb 1-1: Manufacturer: syz [ 756.577044][ T5859] usb 1-1: SerialNumber: syz [ 756.653899][ T5859] usb 1-1: config 0 descriptor?? [ 758.752473][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 758.969831][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 758.989933][ T31] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 758.990012][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.990033][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.990049][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 758.990065][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.996035][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.996056][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.996071][ T31] usb 2-1: Manufacturer: syz [ 759.073545][ T31] usb 2-1: config 0 descriptor?? [ 759.325362][ T5859] usb 1-1: active config #0 != 1 ?? [ 759.405568][ T5859] usb 1-1: USB disconnect, device number 38 [ 759.658473][T13642] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2291'. [ 759.660403][ T31] rc_core: IR keymap rc-hauppauge not found [ 759.660447][ T31] Registered IR keymap rc-empty [ 759.660827][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.697201][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.722808][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 759.747395][T13642] netlink: 'syz.3.2291': attribute type 5 has an invalid length. [ 759.752011][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input97 [ 759.781658][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.806543][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.819810][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.839715][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.859811][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.879679][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.899774][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.919685][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.939780][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.959742][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 759.988146][ T31] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 759.989225][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 760.074184][ T31] usb 2-1: USB disconnect, device number 38 [ 762.333789][T13661] syzkaller0: entered promiscuous mode [ 762.333818][T13661] syzkaller0: entered allmulticast mode [ 763.109786][ T810] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 763.229662][ T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 763.311664][ T810] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 763.314970][ T810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 763.314990][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 763.315005][ T810] usb 2-1: Product: syz [ 763.315015][ T810] usb 2-1: Manufacturer: syz [ 763.315026][ T810] usb 2-1: SerialNumber: syz [ 763.390621][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 763.390656][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 763.390714][ T31] usb 5-1: config 220 has no interface number 2 [ 763.390761][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 763.390780][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 763.390793][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 763.390806][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 763.398146][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 763.398167][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.398180][ T31] usb 5-1: Product: syz [ 763.398228][ T31] usb 5-1: Manufacturer: syz [ 763.398238][ T31] usb 5-1: SerialNumber: syz [ 763.581913][ T810] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 763.676648][T13681] blktrace: Concurrent blktraces are not allowed on sg0 [ 763.774354][ T31] usb 5-1: selecting invalid altsetting 0 [ 763.774858][ T31] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 763.774889][ T31] uvcvideo 5-1:220.0: No valid video chain found. [ 763.836376][ T31] usb 5-1: selecting invalid altsetting 0 [ 763.836402][ T31] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 763.919487][ T31] usb 5-1: USB disconnect, device number 41 [ 764.269783][ T810] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 764.435394][ T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.435417][ T810] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 764.435668][ T810] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.435695][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.591417][ T810] usb 3-1: config 0 descriptor?? [ 764.650232][ T810] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 765.000104][T13681] netlink: 'syz.2.2304': attribute type 10 has an invalid length. [ 765.002002][T13681] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2304'. [ 767.789152][T13702] block nbd4: shutting down sockets [ 768.679664][ T5935] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 768.835798][ T5935] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 768.835830][ T5935] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 768.835850][ T5935] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 768.835871][ T5935] usb 5-1: config 220 has no interface number 2 [ 768.835938][ T5935] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 768.835967][ T5935] usb 5-1: config 220 interface 0 has no altsetting 0 [ 768.835986][ T5935] usb 5-1: config 220 interface 76 has no altsetting 0 [ 768.836004][ T5935] usb 5-1: config 220 interface 1 has no altsetting 0 [ 768.911885][ T5935] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 768.911916][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.911944][ T5935] usb 5-1: Product: syz [ 768.911956][ T5935] usb 5-1: Manufacturer: syz [ 768.911992][ T5935] usb 5-1: SerialNumber: syz [ 769.255248][ T5935] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 769.255282][ T5935] uvcvideo 5-1:220.0: No valid video chain found. [ 769.258737][ T5935] usb 5-1: selecting invalid altsetting 0 [ 769.352729][ T5935] usb 5-1: selecting invalid altsetting 0 [ 769.352773][ T5935] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 769.378369][ T5935] usb 5-1: USB disconnect, device number 42 [ 771.049256][ T810] usb 2-1: USB disconnect, device number 39 [ 771.086013][ T810] usblp0: removed [ 771.157702][T10248] usb 3-1: USB disconnect, device number 50 [ 771.579680][ T810] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 771.659744][T10248] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 771.730545][ T810] usb 2-1: Using ep0 maxpacket: 16 [ 771.733338][ T810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.733376][ T810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 771.733396][ T810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 771.734981][ T810] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 771.735002][ T810] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 771.735016][ T810] usb 2-1: Manufacturer: syz [ 771.808080][ T810] usb 2-1: config 0 descriptor?? [ 771.836330][T10248] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 771.836352][T10248] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 771.836367][T10248] usb 3-1: config 220 has no interface number 2 [ 771.836414][T10248] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 771.836439][T10248] usb 3-1: config 220 interface 0 has no altsetting 0 [ 771.836452][T10248] usb 3-1: config 220 interface 76 has no altsetting 0 [ 771.836465][T10248] usb 3-1: config 220 interface 1 has no altsetting 0 [ 771.901432][T10248] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 771.901454][T10248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.901469][T10248] usb 3-1: Product: syz [ 771.901480][T10248] usb 3-1: Manufacturer: syz [ 771.901490][T10248] usb 3-1: SerialNumber: syz [ 772.254543][T10248] usb 3-1: selecting invalid altsetting 0 [ 772.254915][T10248] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 772.254938][T10248] uvcvideo 3-1:220.0: No valid video chain found. [ 772.285698][T10248] usb 3-1: selecting invalid altsetting 0 [ 772.285733][T10248] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 772.322557][T10248] usb 3-1: USB disconnect, device number 51 [ 772.650804][T13741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.569963][ T37] audit: type=1800 audit(1772187467.792:121): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2317" name="bus" dev="ramfs" ino=37311 res=0 errno=0 [ 774.833537][ T5935] usb 2-1: USB disconnect, device number 40 [ 781.457014][ T37] audit: type=1800 audit(1772187475.682:122): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2336" name="bus" dev="ramfs" ino=36655 res=0 errno=0 [ 783.469690][ T5935] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 783.619700][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 783.621954][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.622007][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.622035][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 783.622057][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 783.622081][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.689862][ T5935] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 783.689893][ T5935] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 783.689915][ T5935] usb 5-1: Manufacturer: syz [ 783.765406][ T5935] usb 5-1: config 0 descriptor?? [ 784.159748][ T5935] rc_core: IR keymap rc-hauppauge not found [ 784.159770][ T5935] Registered IR keymap rc-empty [ 784.159931][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.190523][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.222042][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 784.223004][T13842] syzkaller0: entered promiscuous mode [ 784.223026][T13842] syzkaller0: entered allmulticast mode [ 784.275544][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input98 [ 784.303324][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.334970][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.357927][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.369953][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.390444][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.409895][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.429791][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.450377][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.471259][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.491032][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 784.564619][ T5935] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 784.564645][ T5935] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 784.611954][ T5935] usb 5-1: USB disconnect, device number 43 [ 788.698595][T13899] syzkaller0: entered promiscuous mode [ 788.698623][T13899] syzkaller0: entered allmulticast mode [ 789.011521][T13910] netlink: 'syz.4.2369': attribute type 6 has an invalid length. [ 789.011545][T13910] netlink: 'syz.4.2369': attribute type 7 has an invalid length. [ 789.011560][T13910] netlink: 'syz.4.2369': attribute type 8 has an invalid length. [ 789.260866][ T5935] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 789.441815][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 789.441837][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 789.441852][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.441867][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 789.445599][ T5935] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 789.445627][ T5935] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 789.445645][ T5935] usb 5-1: Product: syz [ 789.445665][ T5935] usb 5-1: Manufacturer: syz [ 789.445675][ T5935] usb 5-1: SerialNumber: syz [ 789.468890][ T5935] usb 5-1: config 0 descriptor?? [ 789.528075][ T5935] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 789.528093][ T5935] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card [ 789.528152][ T5935] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 789.710051][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 789.736750][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 791.410329][ T31] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 791.592566][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 791.593345][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 791.634268][ T31] usb 3-1: config 7 has an invalid interface number: 207 but max is 0 [ 791.634301][ T31] usb 3-1: config 7 has no interface number 0 [ 791.634348][ T31] usb 3-1: config 7 interface 207 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 791.634374][ T31] usb 3-1: config 7 interface 207 has no altsetting 0 [ 791.699240][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=75.fd [ 791.699262][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.699277][ T31] usb 3-1: Product: syz [ 791.699287][ T31] usb 3-1: Manufacturer: syz [ 791.699298][ T31] usb 3-1: SerialNumber: syz [ 792.073756][ T31] ftdi_sio 3-1:7.207: FTDI USB Serial Device converter detected [ 792.074995][ T31] ftdi_sio ttyUSB0: unknown device type: 0x75fd [ 792.110893][ T31] usb 3-1: USB disconnect, device number 52 [ 792.114654][ T31] ftdi_sio 3-1:7.207: device disconnected [ 793.085896][ T31] usb 5-1: USB disconnect, device number 44 [ 794.337161][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 794.337770][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 794.759640][ T5859] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 794.931436][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 795.006059][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.009888][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.009922][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 795.009944][ T5859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 795.009968][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.238188][ T5859] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 795.238233][ T5859] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 795.238253][ T5859] usb 2-1: Manufacturer: syz [ 795.637444][ T5859] usb 2-1: config 0 descriptor?? [ 796.389727][T13971] tipc: Enabled bearer , priority 10 [ 797.265303][ T5859] rc_core: IR keymap rc-hauppauge not found [ 797.265326][ T5859] Registered IR keymap rc-empty [ 797.265498][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.293729][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.326577][ T5859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 797.380141][ T5859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input99 [ 797.433811][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.449736][ T10] tipc: Node number set to 2549698569 [ 797.462797][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.482160][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.499892][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.519933][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.541909][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.560825][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.610171][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.630803][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.649782][ T5859] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 797.673603][ T5859] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 797.673630][ T5859] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.433319][ T5859] usb 2-1: USB disconnect, device number 41 [ 798.939856][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 798.959343][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 800.049683][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 800.210311][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 800.210341][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 800.210453][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 800.210469][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 800.212511][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 800.212529][ T10] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 800.212561][ T10] usb 4-1: Product: syz [ 800.212571][ T10] usb 4-1: Manufacturer: syz [ 800.212582][ T10] usb 4-1: SerialNumber: syz [ 800.273850][ T10] usb 4-1: config 0 descriptor?? [ 800.322310][ T10] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 800.322328][ T10] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 800.322389][ T10] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 800.369678][ T5935] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 800.519797][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 800.522249][ T5935] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 800.522268][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.522300][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 800.522333][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 800.522348][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 800.522363][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.527859][ T5935] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 800.528050][ T5935] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 800.528073][ T5935] usb 5-1: Manufacturer: syz [ 800.640476][ T5935] usb 5-1: config 0 descriptor?? [ 801.089725][ T5935] rc_core: IR keymap rc-hauppauge not found [ 801.089749][ T5935] Registered IR keymap rc-empty [ 801.089928][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.109744][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.138711][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 801.168961][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100 [ 801.222640][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.260613][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.279774][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.302809][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.319754][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.339866][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.362897][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.379968][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.409816][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.440638][ T5935] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 801.497277][ T5935] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 801.497297][ T5935] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 801.570961][ T5935] usb 5-1: USB disconnect, device number 45 [ 802.127653][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 802.130586][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2404'. [ 804.044843][ T5881] usb 4-1: USB disconnect, device number 61 [ 805.829880][ T5935] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 806.029699][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 806.031688][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.031744][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.031775][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 806.031798][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 806.031823][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.033301][ T5935] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 806.033327][ T5935] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 806.033347][ T5935] usb 1-1: Manufacturer: syz [ 806.134753][ T5935] usb 1-1: config 0 descriptor?? [ 806.540019][ T5935] rc_core: IR keymap rc-hauppauge not found [ 806.540042][ T5935] Registered IR keymap rc-empty [ 806.540176][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.559953][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.592625][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 806.605944][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input101 [ 806.651561][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.680477][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.712197][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.729713][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.752824][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.769704][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.789850][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.810965][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.829728][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.849699][ T5935] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 806.890055][ T5935] mceusb 1-1:0.0: Registered < with mce emulator interface version 1 [ 806.892055][ T5935] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 807.419635][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 808.489885][ T5935] usb 1-1: USB disconnect, device number 39 [ 808.653452][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 808.654176][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 808.755572][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2420'. [ 808.865653][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.865735][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.069706][ T5935] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 810.232339][ T5935] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 810.232370][ T5935] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 810.240092][ T5935] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 810.240188][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.240248][ T5935] usb 1-1: Product: syz [ 810.240283][ T5935] usb 1-1: Manufacturer: syz [ 810.240336][ T5935] usb 1-1: SerialNumber: syz [ 811.444011][ T37] audit: type=1804 audit(1772187505.672:123): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2426" name="/newroot/400/file1" dev="fuse" ino=1 res=1 errno=0 [ 812.634652][ T5881] usb 1-1: USB disconnect, device number 40 [ 813.050281][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 813.052949][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2430'. [ 813.297245][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2431'. [ 814.762086][T14136] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2434'. [ 814.830189][T14136] netlink: 'syz.4.2434': attribute type 5 has an invalid length. [ 816.485617][T14150] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 816.485636][T14150] PKCS7: Only support pkcs7_signedData type [ 818.721875][T10248] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 818.725416][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 819.089739][T10248] usb 3-1: device descriptor read/64, error -32 [ 819.492317][T10248] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 819.822574][T10248] usb 3-1: Using ep0 maxpacket: 16 [ 820.512367][T10248] usb 3-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 820.512428][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 820.512457][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 820.512480][T10248] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 820.512504][T10248] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.597180][T10248] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 820.597213][T10248] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 820.597235][T10248] usb 3-1: Manufacturer: syz [ 820.640342][T10248] usb 3-1: config 0 descriptor?? [ 821.946751][T10248] rc_core: IR keymap rc-hauppauge not found [ 821.947014][T10248] Registered IR keymap rc-empty [ 821.947634][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 821.971186][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 821.991567][T10248] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 821.994970][T10248] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input102 [ 822.107132][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 822.123541][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 822.259379][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.079764][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.310628][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.329919][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.350305][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.389689][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.409695][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.430186][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 823.453160][T10248] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 823.453186][T10248] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 823.492140][T10248] usb 3-1: USB disconnect, device number 54 [ 823.890227][ T5881] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 825.472201][ T5881] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 825.472232][ T5881] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 825.472254][ T5881] usb 2-1: config 220 has no interface number 2 [ 825.472331][ T5881] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 825.472359][ T5881] usb 2-1: config 220 interface 0 has no altsetting 0 [ 825.472379][ T5881] usb 2-1: config 220 interface 76 has no altsetting 0 [ 825.472397][ T5881] usb 2-1: config 220 interface 1 has no altsetting 0 [ 825.475474][ T5881] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 825.475504][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.475524][ T5881] usb 2-1: Product: syz [ 825.475539][ T5881] usb 2-1: Manufacturer: syz [ 825.475554][ T5881] usb 2-1: SerialNumber: syz [ 825.827598][ T5881] usb 2-1: selecting invalid altsetting 0 [ 825.828011][ T5881] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 825.828041][ T5881] uvcvideo 2-1:220.0: No valid video chain found. [ 825.876922][ T5881] usb 2-1: selecting invalid altsetting 0 [ 825.876963][ T5881] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 826.120203][ T5881] usb 2-1: USB disconnect, device number 42 [ 828.749924][T14255] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2468' sets config #1 [ 832.309632][ T5933] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 832.469830][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 832.490607][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.490666][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 832.490687][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 832.490702][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 832.490741][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.492053][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 832.492074][ T5933] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 832.492089][ T5933] usb 5-1: Manufacturer: syz [ 832.516415][ T5933] usb 5-1: config 0 descriptor?? [ 832.929694][ T5933] rc_core: IR keymap rc-hauppauge not found [ 832.929717][ T5933] Registered IR keymap rc-empty [ 832.929873][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 832.949680][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 832.971358][ T5933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 832.974818][ T5933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input103 [ 832.991772][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.041859][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.063007][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.086880][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.100033][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.119705][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.142171][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.160161][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.186639][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.205524][ T5933] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 833.243400][ T5933] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 833.243481][ T5933] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 833.287804][ T5933] usb 5-1: USB disconnect, device number 46 [ 841.166555][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 849.926091][T14444] net_ratelimit: 102 callbacks suppressed [ 849.926113][T14444] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 850.592821][T14449] netlink: 'syz.2.2522': attribute type 29 has an invalid length. [ 850.592839][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 850.592858][T14449] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 850.785595][T14451] overlayfs: failed to resolve './file1/file0': -2 [ 851.112397][T14460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.779971][ T5933] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 851.854344][ T5935] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 852.649570][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 852.655793][ T5933] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 852.655829][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.655848][ T5933] usb 2-1: Product: syz [ 852.655862][ T5933] usb 2-1: Manufacturer: syz [ 852.655876][ T5933] usb 2-1: SerialNumber: syz [ 852.712372][ T5933] usb 2-1: config 0 descriptor?? [ 852.789795][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 852.843214][ T5935] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 852.843247][ T5935] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 852.845578][ T5935] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.845857][ T5935] usb 1-1: config 1 interface 0 has no altsetting 0 [ 852.904025][ T5935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 852.904064][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.905040][ T5935] usb 1-1: Product: syz [ 852.905060][ T5935] usb 1-1: Manufacturer: syz [ 852.905094][ T5935] usb 1-1: SerialNumber: syz [ 852.987352][ T5933] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 853.010182][ T5933] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 853.012106][ T5933] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 853.012251][ T5933] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 853.048670][ T5933] usb 2-1: USB disconnect, device number 43 [ 853.177517][T14474] udevd[14474]: setting mode of /dev/bus/usb/002/043 to 020664 failed: No such file or directory [ 853.190482][T14474] udevd[14474]: setting owner of /dev/bus/usb/002/043 to uid=0, gid=0 failed: No such file or directory [ 853.282629][ T5935] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 853.514659][T14475] usblp0:failed reading printer status (-71) [ 853.517158][ T5935] usb 1-1: USB disconnect, device number 41 [ 853.519990][T10248] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 853.546236][ T5935] usblp0: removed [ 853.692577][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 853.692599][T10248] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 853.692617][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 853.692633][T10248] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 853.703042][T10248] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 853.703125][T10248] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 853.703186][T10248] usb 3-1: Product: syz [ 853.703227][T10248] usb 3-1: Manufacturer: syz [ 853.703269][T10248] usb 3-1: SerialNumber: syz [ 853.805933][T10248] usb 3-1: config 0 descriptor?? [ 853.834995][T10248] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 853.835011][T10248] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 853.835071][T10248] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 854.028627][T10248] usb 3-1: USB disconnect, device number 55 [ 854.661517][T14510] syzkaller0: entered promiscuous mode [ 854.661536][T14510] syzkaller0: entered allmulticast mode [ 856.238162][T14533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.834465][T14554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2550'. [ 860.233766][T14558] tipc: Enabling of bearer rejected, already enabled [ 861.329556][ T810] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 861.499607][ T810] usb 4-1: Using ep0 maxpacket: 16 [ 861.502452][ T810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.502508][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 861.502537][ T810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 861.502559][ T810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 861.502582][ T810] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.505322][ T810] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 861.505352][ T810] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 861.505373][ T810] usb 4-1: Manufacturer: syz [ 861.583436][ T810] usb 4-1: config 0 descriptor?? [ 861.781448][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2556'. [ 862.145245][ T810] rc_core: IR keymap rc-hauppauge not found [ 862.145270][ T810] Registered IR keymap rc-empty [ 862.145391][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.159711][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.198885][ T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 862.242003][ T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input104 [ 862.273404][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.299768][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.320475][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.339606][ T5881] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 862.350770][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.381013][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.401484][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.435883][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.451016][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.469707][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.489846][ T810] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 862.507075][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 862.522628][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 862.537831][ T5881] usb 2-1: config 7 has an invalid interface number: 207 but max is 0 [ 862.537861][ T5881] usb 2-1: config 7 has no interface number 0 [ 862.538220][ T5881] usb 2-1: config 7 interface 207 altsetting 129 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 862.538259][ T5881] usb 2-1: config 7 interface 207 has no altsetting 0 [ 862.602687][ T5881] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=75.fd [ 862.602838][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.602861][ T5881] usb 2-1: Product: syz [ 862.602877][ T5881] usb 2-1: Manufacturer: syz [ 862.602891][ T5881] usb 2-1: SerialNumber: syz [ 862.661633][ T810] mceusb 4-1:0.0: Registered < with mce emulator interface version 1 [ 862.663452][ T810] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 862.940054][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 863.200820][ T5881] ftdi_sio 2-1:7.207: FTDI USB Serial Device converter detected [ 863.232753][ T5881] ftdi_sio ttyUSB0: unknown device type: 0x75fd [ 863.292254][ T5881] usb 2-1: USB disconnect, device number 44 [ 863.312707][ T5881] ftdi_sio 2-1:7.207: device disconnected [ 863.954704][ T36] usb 4-1: USB disconnect, device number 62 [ 865.087759][T14604] tipc: Enabled bearer , priority 10 [ 866.099696][T12347] tipc: Node number set to 3170811286 [ 866.137745][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 866.137777][T14612] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 866.509641][T10248] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 866.659573][T10248] usb 4-1: Using ep0 maxpacket: 32 [ 866.662002][T10248] usb 4-1: unable to get BOS descriptor or descriptor too short [ 866.663224][T10248] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 866.663249][T10248] usb 4-1: config 0 has no interface number 0 [ 866.663283][T10248] usb 4-1: config 0 interface 245 has no altsetting 0 [ 866.665628][T10248] usb 4-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=c3.52 [ 866.665657][T10248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.665688][T10248] usb 4-1: Product: syz [ 866.665703][T10248] usb 4-1: Manufacturer: syz [ 866.665719][T10248] usb 4-1: SerialNumber: syz [ 866.696852][T10248] usb 4-1: config 0 descriptor?? [ 868.173642][T14629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2574'. [ 868.175032][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2574'. [ 868.729634][ T5872] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 868.880714][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 868.890169][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.890403][ T5872] usb 3-1: config 0 has no interfaces? [ 868.914766][ T5872] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 868.914789][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.914804][ T5872] usb 3-1: Product: syz [ 868.914814][ T5872] usb 3-1: Manufacturer: syz [ 868.914824][ T5872] usb 3-1: SerialNumber: syz [ 868.939714][ T5881] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 868.979789][ T5872] usb 3-1: config 0 descriptor?? [ 869.119729][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 869.126567][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.126626][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 869.126657][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 869.126689][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 869.126714][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.136002][ T5881] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 869.136033][ T5881] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 869.136054][ T5881] usb 5-1: Manufacturer: syz [ 869.344837][ T5881] usb 5-1: config 0 descriptor?? [ 869.454520][T10248] usb 4-1: active config #0 != 1 ?? [ 869.593746][T14644] tipc: Enabling of bearer rejected, already enabled [ 870.132447][T10248] usb 4-1: USB disconnect, device number 63 [ 870.381341][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.381423][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.459690][ T5881] rc_core: IR keymap rc-hauppauge not found [ 870.459711][ T5881] Registered IR keymap rc-empty [ 870.459862][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.483450][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.501285][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 870.504564][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input105 [ 870.534550][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.550522][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.580418][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.600580][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.619720][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.639647][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.643836][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2581'. [ 870.643921][T14654] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 870.667208][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.689706][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.709944][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.729719][ T5881] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 870.763922][ T5881] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 870.763950][ T5881] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 870.811779][ T5881] usb 5-1: USB disconnect, device number 47 [ 870.969583][T10248] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 871.119610][T10248] usb 1-1: Using ep0 maxpacket: 32 [ 871.122810][T10248] usb 1-1: unable to get BOS descriptor or descriptor too short [ 871.128403][T10248] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 871.128432][T10248] usb 1-1: config 0 has no interface number 0 [ 871.128466][T10248] usb 1-1: config 0 interface 245 has no altsetting 0 [ 871.149814][T10248] usb 1-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=c3.52 [ 871.149848][T10248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.149870][T10248] usb 1-1: Product: syz [ 871.149887][T10248] usb 1-1: Manufacturer: syz [ 871.149903][T10248] usb 1-1: SerialNumber: syz [ 871.210924][T10248] usb 1-1: config 0 descriptor?? [ 872.751597][ T5881] usb 3-1: USB disconnect, device number 56 [ 873.089653][ T5872] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 873.609509][ C1] hrtimer: interrupt took 36102 ns [ 873.877520][T10248] usb 1-1: active config #0 != 1 ?? [ 873.890177][T10248] usb 1-1: USB disconnect, device number 42 [ 873.999430][ T5872] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.999668][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 874.039852][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 874.039885][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 874.039907][ T5872] usb 5-1: Product: syz [ 874.039922][ T5872] usb 5-1: Manufacturer: syz [ 874.039938][ T5872] usb 5-1: SerialNumber: syz [ 874.110729][ T5872] usb 5-1: config 0 descriptor?? [ 874.191415][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2588'. [ 874.371591][ T5872] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 874.395856][ T5872] usb 5-1: USB disconnect, device number 48 [ 874.534448][T14578] udevd[14578]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.739620][T10248] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 874.891868][T10248] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 874.891892][T10248] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 874.891910][T10248] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.894888][T10248] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 874.894917][T10248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 874.894940][T10248] usb 2-1: Product: syz [ 874.894956][T10248] usb 2-1: Manufacturer: syz [ 874.894973][T10248] usb 2-1: SerialNumber: syz [ 875.271271][T10248] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 875.508641][ T36] usb 2-1: USB disconnect, device number 45 [ 875.565292][ T36] usblp0: removed [ 876.479308][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'. [ 876.479343][T14696] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 877.150604][T14709] tipc: Started in network mode [ 877.150790][T14709] tipc: Node identity ac141441, cluster identity 4711 [ 877.167645][T14709] tipc: Enabled bearer , priority 10 [ 878.296542][ T5933] tipc: Node number set to 2886997057 [ 879.080729][ T5872] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 879.081093][T10248] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 879.259532][T10248] usb 3-1: Using ep0 maxpacket: 16 [ 879.261485][T10248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.261540][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.261575][T10248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 879.261592][T10248] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 879.261614][T10248] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.262793][T10248] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.262824][T10248] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 879.262840][T10248] usb 3-1: Manufacturer: syz [ 879.267073][T10248] usb 3-1: config 0 descriptor?? [ 879.269878][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 879.273173][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 879.280333][ T5872] usb 5-1: config 0 has an invalid interface number: 245 but max is 0 [ 879.280359][ T5872] usb 5-1: config 0 has no interface number 0 [ 879.280454][ T5872] usb 5-1: config 0 interface 245 has no altsetting 0 [ 879.283315][ T5872] usb 5-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=c3.52 [ 879.283345][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.283368][ T5872] usb 5-1: Product: syz [ 879.283383][ T5872] usb 5-1: Manufacturer: syz [ 879.283401][ T5872] usb 5-1: SerialNumber: syz [ 879.409841][ T31] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 879.456045][ T5872] usb 5-1: config 0 descriptor?? [ 879.599736][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 879.600695][T10248] rc_core: IR keymap rc-hauppauge not found [ 879.600747][T10248] Registered IR keymap rc-empty [ 879.601365][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 879.603063][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.603114][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.603184][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 879.603219][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 879.603244][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.604913][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 879.604990][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 879.605006][ T31] usb 4-1: Manufacturer: syz [ 879.620380][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 879.938642][T10248] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 879.953393][ T31] usb 4-1: config 0 descriptor?? [ 880.821456][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 880.863864][T10248] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input106 [ 880.917767][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 880.950207][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 880.973573][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 880.990851][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.010463][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.055420][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.069973][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.099803][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.131041][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.152111][T10248] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 881.240172][T10248] mceusb 3-1:0.0: Registered < with mce emulator interface version 1 [ 881.240261][T10248] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 881.279889][ T31] rc_core: IR keymap rc-hauppauge not found [ 881.279911][ T31] Registered IR keymap rc-empty [ 881.280199][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.300486][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.328650][ T31] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 881.362050][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input107 [ 881.397528][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.420756][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.450203][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.469880][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.489838][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.509981][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.530035][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.551977][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.569735][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.590341][ T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 881.638382][ T31] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 881.638410][ T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 881.749607][ T31] usb 4-1: USB disconnect, device number 64 [ 882.060287][ T5872] usb 5-1: active config #0 != 1 ?? [ 882.122950][ T5872] usb 5-1: USB disconnect, device number 49 [ 882.445460][ T810] usb 3-1: USB disconnect, device number 57 [ 882.698793][T14744] syzkaller0: entered promiscuous mode [ 882.698821][T14744] syzkaller0: entered allmulticast mode [ 885.418094][T14780] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 885.418122][T14780] PKCS7: Only support pkcs7_signedData type [ 887.430861][T14800] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2615' sets config #1 [ 889.369652][ T31] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 889.519840][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 889.524789][ T31] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 889.524832][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.524849][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.524867][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.524886][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.524917][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 889.524934][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.850883][ T31] usb 4-1: usb_control_msg returned -32 [ 889.850935][ T31] usbtmc 4-1:16.0: can't read capabilities [ 890.772324][T14823] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 890.777121][ T5933] usb 4-1: USB disconnect, device number 65 [ 894.452355][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2631'. [ 894.453362][T14855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2631'. [ 895.133899][T14859] tipc: Enabling of bearer rejected, already enabled [ 900.700214][ T5933] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 900.701350][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 900.782180][T14899] tipc: Enabling of bearer rejected, already enabled [ 900.904492][ T5933] usb 1-1: device descriptor read/64, error -32 [ 901.819704][ T5933] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 901.919594][T10248] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 902.082487][T10248] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 902.104762][T10248] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 902.104881][T10248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.104904][T10248] usb 4-1: Product: syz [ 902.105017][T10248] usb 4-1: Manufacturer: syz [ 902.105053][T10248] usb 4-1: SerialNumber: syz [ 902.346433][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.346458][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.346485][ T5933] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 902.346503][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.882559][ T5933] usb 1-1: config 0 descriptor?? [ 902.897693][T10248] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 903.577573][T10248] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 903.578040][T10248] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 903.578093][T10248] usb 4-1: media controller created [ 903.814639][T10248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 904.722999][T10248] usb 4-1: USB disconnect, device number 66 [ 905.318353][T14929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.360158][ T5933] usb 1-1: can't set config #0, error -71 [ 905.387183][ T5933] usb 1-1: USB disconnect, device number 44 [ 905.520042][ T5935] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 905.674970][ T5935] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 905.674994][ T5935] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 905.675012][ T5935] usb 5-1: config 0 interface 0 has no altsetting 0 [ 905.718232][ T5935] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 905.718254][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 905.718269][ T5935] usb 5-1: Product: syz [ 905.718279][ T5935] usb 5-1: Manufacturer: syz [ 905.718290][ T5935] usb 5-1: SerialNumber: syz [ 905.773083][ T5935] usb 5-1: config 0 descriptor?? [ 905.778752][ T5935] usb 5-1: selecting invalid altsetting 0 [ 905.889616][ T5933] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 906.146622][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.147115][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.147469][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.147788][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.148107][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.148440][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.148758][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.149067][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.149400][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.659594][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 906.700985][ T5933] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 906.701016][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.701037][ T5933] usb 1-1: Product: syz [ 906.701071][ T5933] usb 1-1: Manufacturer: syz [ 906.701087][ T5933] usb 1-1: SerialNumber: syz [ 906.741225][T14933] usb 5-1: cannot submit urb 0, error -90: internal error [ 906.766143][ T5933] usb 1-1: config 0 descriptor?? [ 906.911314][T14931] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 906.951943][T10248] usb 5-1: USB disconnect, device number 50 [ 907.104944][T14947] udevd[14947]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.481136][ T5933] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 907.482172][ T5933] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 907.515687][ T5933] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 907.515756][ T5933] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 907.563236][ T5933] usb 1-1: USB disconnect, device number 45 [ 907.848642][T14956] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2657'. [ 910.784067][T14985] tipc: Enabling of bearer rejected, already enabled [ 911.897001][T14993] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2669'. [ 911.916202][T14993] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2669'. [ 913.639856][ T5953] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 913.841592][ T5953] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 913.841617][ T5953] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 913.841634][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 913.847454][ T5953] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 913.847477][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 913.847492][ T5953] usb 1-1: Product: syz [ 913.847503][ T5953] usb 1-1: Manufacturer: syz [ 913.847514][ T5953] usb 1-1: SerialNumber: syz [ 913.953068][ T5953] usb 1-1: config 0 descriptor?? [ 913.984674][ T5953] usb 1-1: selecting invalid altsetting 0 [ 914.366774][ T5953] usb 1-1: USB disconnect, device number 46 [ 914.540172][T15013] udevd[15013]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.332700][T15021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.387890][T15021] tipc: Failed to remove unknown binding: 66,0,0/2549698569:2433343442/2433343443 [ 915.411010][T15021] tipc: Failed to remove unknown binding: 66,0,0/2549698569:2433343442/2433343443 [ 915.822556][T15029] tipc: Enabling of bearer rejected, already enabled [ 916.773033][T15034] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2680'. [ 916.810267][T15034] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2680'. [ 916.845564][T15033] tipc: Enabling of bearer rejected, failed to enable media [ 916.846234][T15033] syzkaller0: entered promiscuous mode [ 916.846251][T15033] syzkaller0: entered allmulticast mode [ 917.529614][ T5935] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 917.684571][ T5935] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 917.684608][ T5935] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 917.684633][ T5935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 917.731377][ T5935] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 917.731400][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 917.731415][ T5935] usb 4-1: Product: syz [ 917.731426][ T5935] usb 4-1: Manufacturer: syz [ 917.731443][ T5935] usb 4-1: SerialNumber: syz [ 917.777557][ T5935] usb 4-1: config 0 descriptor?? [ 917.854088][ T5935] usb 4-1: selecting invalid altsetting 0 [ 917.949628][ T5933] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 918.051741][ T5935] usb 4-1: USB disconnect, device number 67 [ 918.101707][ T5933] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 918.101734][ T5933] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 918.101755][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 918.103861][ T5933] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 918.103881][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 918.103896][ T5933] usb 1-1: Product: syz [ 918.103906][ T5933] usb 1-1: Manufacturer: syz [ 918.103917][ T5933] usb 1-1: SerialNumber: syz [ 918.221120][ T5933] usb 1-1: config 0 descriptor?? [ 918.302117][T15007] udevd[15007]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.388797][ T5933] usb 1-1: selecting invalid altsetting 0 [ 918.726674][ T5933] usb 1-1: USB disconnect, device number 47 [ 918.826706][T15015] udevd[15015]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: No such file or directory [ 918.886113][T15003] udevd[15003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.689966][T15057] netlink: 'syz.3.2687': attribute type 6 has an invalid length. [ 919.689987][T15057] netlink: 'syz.3.2687': attribute type 7 has an invalid length. [ 919.690001][T15057] netlink: 'syz.3.2687': attribute type 8 has an invalid length. [ 919.999617][ T5933] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 920.429601][ T811] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 920.841990][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 920.842994][ T5933] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 920.843017][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.843034][ T5933] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 920.938412][ T5933] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 920.938437][ T5933] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 920.938453][ T5933] usb 4-1: Product: syz [ 920.938465][ T5933] usb 4-1: Manufacturer: syz [ 920.938476][ T5933] usb 4-1: SerialNumber: syz [ 920.991080][ T5933] usb 4-1: config 0 descriptor?? [ 921.015221][ T5933] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 921.015240][ T5933] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 921.015308][ T5933] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 921.062663][ T811] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 921.062691][ T811] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 921.062712][ T811] usb 1-1: config 0 interface 0 has no altsetting 0 [ 921.065160][ T811] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 921.065191][ T811] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 921.065215][ T811] usb 1-1: Product: syz [ 921.065231][ T811] usb 1-1: Manufacturer: syz [ 921.065247][ T811] usb 1-1: SerialNumber: syz [ 921.184297][ T811] usb 1-1: config 0 descriptor?? [ 921.515810][ T811] usb 1-1: selecting invalid altsetting 0 [ 921.819399][ T811] usb 1-1: USB disconnect, device number 48 [ 921.969379][T15003] udevd[15003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.651900][T15090] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 923.651915][T15090] PKCS7: Only support pkcs7_signedData type [ 924.079617][T10248] usb 4-1: USB disconnect, device number 68 [ 924.509595][T10248] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 924.639572][T10248] usb 4-1: device descriptor read/64, error -71 [ 924.879637][T10248] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 925.205827][T10248] usb 4-1: device descriptor read/64, error -71 [ 925.310111][T10248] usb usb4-port1: attempt power cycle [ 926.347998][T10248] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 926.360420][T10248] usb 4-1: device descriptor read/8, error -71 [ 926.749563][T10248] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 926.770537][T10248] usb 4-1: device descriptor read/8, error -71 [ 927.022771][T10248] usb usb4-port1: unable to enumerate USB device [ 928.340722][T15128] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 928.340742][T15128] PKCS7: Only support pkcs7_signedData type [ 929.479733][T15141] blktrace: Concurrent blktraces are not allowed on sg0 [ 929.640418][T15143] netlink: 'syz.4.2709': attribute type 27 has an invalid length. [ 929.640442][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'. [ 929.640470][T15143] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 929.939608][ T5953] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 930.143642][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.143669][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.143699][ T5953] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.143716][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.250882][ T5953] usb 1-1: config 0 descriptor?? [ 930.297913][ T5953] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 931.069273][T15144] netlink: 'syz.0.2707': attribute type 10 has an invalid length. [ 931.069300][T15144] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2707'. [ 931.590603][T15156] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 931.590626][T15156] PKCS7: Only support pkcs7_signedData type [ 931.668376][ T37] audit: type=1800 audit(1772187625.892:124): pid=15152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2710" name="bus" dev="ramfs" ino=41873 res=0 errno=0 [ 931.748053][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.748125][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.323380][T15164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2714'. [ 933.268232][T15169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2715'. [ 934.532739][ T5859] usb 1-1: USB disconnect, device number 49 [ 934.683471][T15187] netlink: 'syz.1.2720': attribute type 27 has an invalid length. [ 934.683488][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 934.989560][ T5935] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 935.147024][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 935.149815][ T5935] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 935.149991][ T5935] usb 1-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 935.164647][ T5935] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 935.164740][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.164795][ T5935] usb 1-1: Product: syz [ 935.164837][ T5935] usb 1-1: Manufacturer: syz [ 935.164880][ T5935] usb 1-1: SerialNumber: syz [ 935.225147][ T5935] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 935.226355][ T5935] imon 1-1:155.0: unable to initialize intf0, err -19 [ 935.226375][ T5935] imon:imon_probe: failed to initialize context! [ 935.226389][ T5935] imon 1-1:155.0: unable to register, err -19 [ 936.513635][T15187] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 937.369760][T10248] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 937.529671][T10248] usb 5-1: Using ep0 maxpacket: 16 [ 937.531959][T10248] usb 5-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 937.531996][T10248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.532016][T10248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 937.532032][T10248] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 937.532048][T10248] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.533617][T10248] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.533638][T10248] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.533653][T10248] usb 5-1: Manufacturer: syz [ 937.626036][T10248] usb 5-1: config 0 descriptor?? [ 937.705212][T15214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.841224][T15214] tipc: Failed to remove unknown binding: 66,0,0/2549698569:2496284719/2496284720 [ 937.857581][T15214] tipc: Failed to remove unknown binding: 66,0,0/2549698569:2496284719/2496284720 [ 938.269629][T10248] rc_core: IR keymap rc-hauppauge not found [ 938.269651][T10248] Registered IR keymap rc-empty [ 938.269803][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.297976][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.321839][T10248] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 938.326945][T10248] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input108 [ 938.354279][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.380085][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.409891][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.439757][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.459709][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.489771][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.509778][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.540089][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.569688][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.587537][ T5953] usb 1-1: USB disconnect, device number 50 [ 938.600096][T10248] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 938.662347][T10248] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 938.662373][T10248] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 938.723217][T10248] usb 5-1: USB disconnect, device number 51 [ 939.222760][T15233] tipc: Enabling of bearer rejected, already enabled [ 939.817918][ T36] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 939.820376][ C1] raw-gadget.2 gadget.3: ignoring, device is not running [ 940.070446][ T36] usb 4-1: device descriptor read/64, error -32 [ 940.319804][ T36] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 940.349660][ T5859] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 940.499535][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 940.506519][ T5859] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 940.506563][ T5859] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 940.506582][ T5859] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 940.506601][ T5859] usb 1-1: config 1 interface 0 has no altsetting 0 [ 940.562612][ T5859] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 940.562636][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.562652][ T5859] usb 1-1: Product: syz [ 940.562663][ T5859] usb 1-1: Manufacturer: syz [ 940.562675][ T5859] usb 1-1: SerialNumber: syz [ 940.793425][ T5859] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 940.982620][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.982658][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.982700][ T36] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 940.982725][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.986775][ T36] usb 4-1: config 0 descriptor?? [ 941.229623][T15235] usblp0:failed reading printer status (-71) [ 941.234278][ T5872] usb 1-1: USB disconnect, device number 51 [ 941.268714][ T5872] usblp0: removed [ 941.735748][T15243] netlink: 'syz.1.2735': attribute type 27 has an invalid length. [ 941.735828][T15243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2735'. [ 941.735848][T15243] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 943.796701][T15260] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2739'. [ 943.832287][T15260] netlink: 'syz.1.2739': attribute type 5 has an invalid length. [ 944.409751][ T5859] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 944.515448][T15268] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2742' sets config #1 [ 944.585858][ T5859] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 944.585886][ T5859] usb 2-1: config 0 interface 0 has no altsetting 0 [ 944.678028][ T5859] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 944.678118][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 944.678141][ T5859] usb 2-1: Product: syz [ 944.678158][ T5859] usb 2-1: Manufacturer: syz [ 944.678174][ T5859] usb 2-1: SerialNumber: syz [ 944.741883][ T5859] usb 2-1: config 0 descriptor?? [ 944.806279][T15270] tipc: Enabling of bearer rejected, failed to enable media [ 944.809851][T15270] syzkaller0: entered promiscuous mode [ 944.809894][T15270] syzkaller0: entered allmulticast mode [ 944.870881][ T5859] usb 2-1: selecting invalid altsetting 0 [ 945.092751][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 945.092861][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 945.205367][ T36] usb 4-1: USB disconnect, device number 74 [ 946.400471][ T5859] usb 2-1: USB disconnect, device number 46 [ 946.734409][T15219] udevd[15219]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.952863][T15283] tipc: Enabling of bearer rejected, already enabled [ 947.699809][ T5872] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 947.849588][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 947.852297][ T5872] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 947.852354][ T5872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.852378][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.852404][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.852429][ T5872] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.852469][ T5872] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.852493][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.171926][ T5872] usb 5-1: usb_control_msg returned -32 [ 948.171985][ T5872] usbtmc 5-1:16.0: can't read capabilities [ 948.239972][ T5872] usb 5-1: USB disconnect, device number 52 [ 949.677871][ T5872] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 949.842427][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 949.844842][ T5872] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 949.844897][ T5872] usb 4-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 949.848182][ T5872] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 949.848212][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.848347][ T5872] usb 4-1: Product: syz [ 949.848365][ T5872] usb 4-1: Manufacturer: syz [ 949.848381][ T5872] usb 4-1: SerialNumber: syz [ 949.938299][ T5872] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 949.959654][ T5872] imon 4-1:155.0: unable to initialize intf0, err -19 [ 949.959676][ T5872] imon:imon_probe: failed to initialize context! [ 949.959690][ T5872] imon 4-1:155.0: unable to register, err -19 [ 951.054935][T15326] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 951.054966][T15326] PKCS7: Only support pkcs7_signedData type [ 952.464433][ T5859] usb 4-1: USB disconnect, device number 75 [ 953.219605][ T811] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 953.319614][T14943] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 953.388993][ T811] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 953.389016][ T811] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 953.389046][ T811] usb 2-1: config 220 interface 0 has no altsetting 0 [ 953.431022][ T811] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 953.431061][ T811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.431078][ T811] usb 2-1: Product: syz [ 953.431089][ T811] usb 2-1: Manufacturer: syz [ 953.431100][ T811] usb 2-1: SerialNumber: syz [ 953.497328][T14943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 953.497358][T14943] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 953.497431][T14943] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.545571][T14943] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 953.545703][T14943] usb 4-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 953.545727][T14943] usb 4-1: Product: syz [ 953.545743][T14943] usb 4-1: Manufacturer: syz [ 953.545881][T14943] usb 4-1: SerialNumber: syz [ 953.629218][T14943] usb 4-1: config 0 descriptor?? [ 953.715777][ T811] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 953.715805][ T811] uvcvideo 2-1:220.0: No valid video chain found. [ 953.748220][T14943] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 953.766043][ T811] usb 2-1: USB disconnect, device number 47 [ 953.952093][ T5935] usb 4-1: USB disconnect, device number 76 [ 954.129725][ T811] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 954.261583][ T811] usb 3-1: device descriptor read/64, error -71 [ 954.672183][ T811] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 955.239582][ T811] usb 3-1: device descriptor read/64, error -71 [ 955.353811][ T811] usb usb3-port1: attempt power cycle [ 955.699576][ T811] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 955.724880][ T811] usb 3-1: device descriptor read/8, error -71 [ 956.072158][ T811] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 956.134908][ T811] usb 3-1: device descriptor read/8, error -71 [ 956.245233][ T811] usb usb3-port1: unable to enumerate USB device [ 957.219612][ T5935] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 957.539560][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 957.541763][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.541810][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.541831][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 957.541847][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 957.541864][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.542990][ T5935] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 957.543011][ T5935] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 957.543026][ T5935] usb 3-1: Manufacturer: syz [ 957.662478][ T5935] usb 3-1: config 0 descriptor?? [ 958.289839][ T5935] rc_core: IR keymap rc-hauppauge not found [ 958.289864][ T5935] Registered IR keymap rc-empty [ 958.290025][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.318370][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.338826][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 958.362420][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input109 [ 958.401786][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.419757][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.447582][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.461279][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.479620][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.499650][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.519617][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.540417][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.560075][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.581188][ T5935] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 958.619055][ T5935] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 958.619142][ T5935] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 958.673006][ T5935] usb 3-1: USB disconnect, device number 62 [ 959.866860][T15420] tipc: Enabling of bearer rejected, already enabled [ 964.290230][ T5935] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 964.449393][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 964.459080][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.459134][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 964.459163][ T5935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 964.459185][ T5935] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 964.459208][ T5935] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.490398][ T5935] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 964.490431][ T5935] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 964.490454][ T5935] usb 2-1: Manufacturer: syz [ 964.497301][ T5935] usb 2-1: config 0 descriptor?? [ 965.219586][ T5935] rc_core: IR keymap rc-hauppauge not found [ 965.219610][ T5935] Registered IR keymap rc-empty [ 965.219791][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.239597][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.262186][ T5935] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 965.267282][ T5935] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input110 [ 965.460144][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.479749][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.499747][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.805867][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.851523][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.898040][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.958254][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.005894][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.089004][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.099660][ T5935] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.479809][ T5935] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 966.479831][ T5935] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 966.517981][ T5935] usb 2-1: USB disconnect, device number 48 [ 966.879573][ T5953] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 967.039622][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 967.045480][ T5953] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 967.045537][ T5953] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 967.045554][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 967.045573][ T5953] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 967.045591][ T5953] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 967.045621][ T5953] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 967.045639][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.368860][ T5953] usb 3-1: usb_control_msg returned -32 [ 967.368896][ T5953] usbtmc 3-1:16.0: can't read capabilities [ 967.524060][ T5953] usb 3-1: USB disconnect, device number 63 [ 967.719591][ T36] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 967.898863][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 967.921976][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 967.922000][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 967.922016][ T36] usb 2-1: Product: syz [ 967.922027][ T36] usb 2-1: Manufacturer: syz [ 967.922039][ T36] usb 2-1: SerialNumber: syz [ 968.183679][ T36] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 968.239327][ T36] usb 2-1: USB disconnect, device number 49 [ 968.264400][ T36] usblp0: removed [ 968.386980][T15475] tipc: Enabling of bearer rejected, already enabled [ 973.775972][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 973.889656][ T5859] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 974.041143][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 974.043670][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.043741][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 974.043773][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 974.043804][ T5859] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 974.043830][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.045218][ T5859] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 974.045248][ T5859] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 974.045271][ T5859] usb 1-1: Manufacturer: syz [ 974.078175][ T5859] usb 1-1: config 0 descriptor?? [ 974.867817][T15256] Bluetooth: hci5: command 0x0406 tx timeout [ 975.309620][ T5859] rc_core: IR keymap rc-hauppauge not found [ 975.309638][ T5859] Registered IR keymap rc-empty [ 975.309755][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.330432][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.364356][ T5859] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 975.387939][ T5859] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input111 [ 975.412619][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.431082][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.449856][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.479069][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.501777][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.519975][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.539601][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.560159][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.582822][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.600572][ T5859] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 975.644984][ T5859] mceusb 1-1:0.0: Registered < with mce emulator interface version 1 [ 975.645010][ T5859] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 976.256192][T15526] netlink: 'syz.4.2812': attribute type 72 has an invalid length. [ 976.896859][ T811] usb 1-1: USB disconnect, device number 52 [ 977.484633][T15558] netlink: 'syz.2.2820': attribute type 1 has an invalid length. [ 977.603898][T15563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2820'. [ 977.786093][T15562] bond2: (slave geneve2): making interface the new active one [ 977.827006][T15562] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 977.861148][T15563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 977.879966][ T140] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 977.880292][ T140] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 977.880324][ T140] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 977.880360][ T140] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 981.323055][T15629] bridge_slave_1: left allmulticast mode [ 981.323086][T15629] bridge_slave_1: left promiscuous mode [ 981.323349][T15629] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.630554][T15629] bond0: (slave bond_slave_0): Releasing backup interface [ 981.846667][T15629] bond0: (slave bond_slave_1): Releasing backup interface [ 982.058055][T15629] team0: Port device team_slave_0 removed [ 982.204338][T15629] team0: Port device team_slave_1 removed [ 982.205415][T15629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.205441][T15629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.287652][T15629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.287683][T15629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.345449][T15629] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.757444][T15650] overlayfs: overlapping lowerdir path [ 982.939814][ T5953] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 983.239543][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 983.252480][ T5953] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.252520][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0 [ 983.252558][ T5953] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 983.252583][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.848139][ T5953] usb 3-1: config 0 descriptor?? [ 984.348587][ T5953] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 984.561043][ T811] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 984.709909][ T811] usb 4-1: Using ep0 maxpacket: 8 [ 984.714684][ T811] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 984.718368][ T811] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 984.718398][ T811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.718420][ T811] usb 4-1: Product: syz [ 984.718436][ T811] usb 4-1: Manufacturer: syz [ 984.718451][ T811] usb 4-1: SerialNumber: syz [ 984.779821][ T811] usb 4-1: config 0 descriptor?? [ 984.788041][ T811] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 984.839716][ T5881] usb 3-1: USB disconnect, device number 64 [ 984.871399][T15671] fido_id[15671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 986.226154][ T811] gspca_zc3xx: reg_w_i err -71 [ 986.809662][ T811] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 986.810759][ T811] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 986.845779][ T811] usb 4-1: USB disconnect, device number 77 [ 988.591685][ T5953] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 989.129530][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 989.138076][ T5953] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 989.138103][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 989.138122][ T5953] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 989.138140][ T5953] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.138171][ T5953] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 989.138187][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.403503][ T5953] usb 4-1: GET_CAPABILITIES returned 0 [ 989.403551][ T5953] usbtmc 4-1:16.0: can't read capabilities [ 989.761451][ T5953] usb 4-1: USB disconnect, device number 78 [ 994.500209][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.500281][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.744469][T15757] Bluetooth: MGMT ver 1.23 [ 994.800326][T15759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2863'. [ 995.221039][T15763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2866'. [ 997.051414][ T5953] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 997.216282][ T5953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.216304][ T5953] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 997.216331][ T5953] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 997.216348][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.261700][ T5953] usb 1-1: config 0 descriptor?? [ 997.497002][ T5953] usb 1-1: string descriptor 0 read error: -71 [ 997.554149][ T5953] usb 1-1: USB disconnect, device number 53 [ 998.388058][T15790] gretap0: entered promiscuous mode [ 999.876002][T15802] syz_tun: entered allmulticast mode [ 999.900301][T15802] syz_tun: left allmulticast mode [ 1000.943829][T15817] evm: overlay not supported [ 1005.199630][ T5859] ------------[ cut here ]------------ [ 1005.199648][ T5859] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1005.199674][ T5859] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:4/5859 [ 1005.199890][ T5859] Modules linked in: [ 1005.199923][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1005.199949][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1005.199965][ T5859] Workqueue: events drm_fb_helper_damage_work [ 1005.200067][ T5859] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1005.200105][ T5859] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 7a d0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1005.200125][ T5859] RSP: 0018:ffffc90004faf8e0 EFLAGS: 00010246 [ 1005.200144][ T5859] RAX: 1ffff11004aeb600 RBX: ffffffff8f750d20 RCX: 0000000000000000 [ 1005.200161][ T5859] RDX: ffffffff8bbf2f40 RSI: ffffffff8bc0ee40 RDI: ffffffff8f750d20 [ 1005.200177][ T5859] RBP: ffffc90004faf9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1005.200192][ T5859] R10: dffffc0000000000 R11: fffffbfff1ed45b7 R12: ffffffff8bc0ee40 [ 1005.200219][ T5859] R13: ffff88802575b000 R14: 0000000000000000 R15: ffffffff8bbf2f40 [ 1005.200236][ T5859] FS: 0000000000000000(0000) GS:ffff888126442000(0000) knlGS:0000000000000000 [ 1005.200254][ T5859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1005.200270][ T5859] CR2: 00007f30015d5900 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1005.200290][ T5859] Call Trace: [ 1005.200304][ T5859] [ 1005.200320][ T5859] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1005.200359][ T5859] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1005.200442][ T5859] ? rt_spin_unlock+0x160/0x200 [ 1005.200555][ T5859] ? drm_vblank_get+0x147/0x260 [ 1005.200591][ T5859] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1005.200624][ T5859] drm_fb_helper_damage_work+0x131/0x6f0 [ 1005.200670][ T5859] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1005.200706][ T5859] ? preempt_schedule_thunk+0x16/0x30 [ 1005.200759][ T5859] ? process_scheduled_works+0xa25/0x1830 [ 1005.200790][ T5859] ? process_scheduled_works+0xa25/0x1830 [ 1005.200822][ T5859] process_scheduled_works+0xb02/0x1830 [ 1005.200884][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1005.200923][ T5859] ? assign_work+0x3d5/0x5e0 [ 1005.200960][ T5859] worker_thread+0xa50/0xfc0 [ 1005.201027][ T5859] kthread+0x388/0x470 [ 1005.201052][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 1005.201082][ T5859] ? __pfx_kthread+0x10/0x10 [ 1005.201107][ T5859] ret_from_fork+0x51e/0xb90 [ 1005.201157][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 1005.201187][ T5859] ? __switch_to+0xc7d/0x1450 [ 1005.201233][ T5859] ? __pfx_kthread+0x10/0x10 [ 1005.201259][ T5859] ret_from_fork_asm+0x1a/0x30 [ 1005.201299][ T5859] [ 1005.201318][ T5859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1005.201335][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1005.201359][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1005.201374][ T5859] Workqueue: events drm_fb_helper_damage_work [ 1005.201407][ T5859] Call Trace: [ 1005.201416][ T5859] [ 1005.201425][ T5859] vpanic+0x56c/0xa60 [ 1005.201466][ T5859] ? __pfx__printk+0x10/0x10 [ 1005.201491][ T5859] ? __pfx_vpanic+0x10/0x10 [ 1005.201522][ T5859] ? is_bpf_text_address+0x292/0x2b0 [ 1005.201574][ T5859] ? is_bpf_text_address+0x26/0x2b0 [ 1005.201613][ T5859] panic+0xc5/0xd0 [ 1005.201644][ T5859] ? __pfx_panic+0x10/0x10 [ 1005.201693][ T5859] ? ret_from_fork_asm+0x1a/0x30 [ 1005.201721][ T5859] __warn+0x315/0x4f0 [ 1005.201752][ T5859] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1005.201788][ T5859] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1005.201824][ T5859] __report_bug+0x29a/0x540 [ 1005.201919][ T5859] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1005.201954][ T5859] ? __pfx___report_bug+0x10/0x10 [ 1005.202007][ T5859] report_bug_entry+0x19a/0x290 [ 1005.202036][ T5859] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1005.202068][ T5859] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1005.202101][ T5859] handle_bug+0xca/0x200 [ 1005.202175][ T5859] exc_invalid_op+0x1a/0x50 [ 1005.202216][ T5859] asm_exc_invalid_op+0x1a/0x20 [ 1005.202254][ T5859] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1005.202289][ T5859] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 7a d0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1005.202310][ T5859] RSP: 0018:ffffc90004faf8e0 EFLAGS: 00010246 [ 1005.202329][ T5859] RAX: 1ffff11004aeb600 RBX: ffffffff8f750d20 RCX: 0000000000000000 [ 1005.202345][ T5859] RDX: ffffffff8bbf2f40 RSI: ffffffff8bc0ee40 RDI: ffffffff8f750d20 [ 1005.202362][ T5859] RBP: ffffc90004faf9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1005.202377][ T5859] R10: dffffc0000000000 R11: fffffbfff1ed45b7 R12: ffffffff8bc0ee40 [ 1005.202395][ T5859] R13: ffff88802575b000 R14: 0000000000000000 R15: ffffffff8bbf2f40 [ 1005.202435][ T5859] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1005.202483][ T5859] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1005.202519][ T5859] ? rt_spin_unlock+0x160/0x200 [ 1005.202546][ T5859] ? drm_vblank_get+0x147/0x260 [ 1005.202582][ T5859] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1005.202633][ T5859] drm_fb_helper_damage_work+0x131/0x6f0 [ 1005.202680][ T5859] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1005.202714][ T5859] ? preempt_schedule_thunk+0x16/0x30 [ 1005.202743][ T5859] ? process_scheduled_works+0xa25/0x1830 [ 1005.202772][ T5859] ? process_scheduled_works+0xa25/0x1830 [ 1005.202807][ T5859] process_scheduled_works+0xb02/0x1830 [ 1005.202871][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1005.202912][ T5859] ? assign_work+0x3d5/0x5e0 [ 1005.202949][ T5859] worker_thread+0xa50/0xfc0 [ 1005.203013][ T5859] kthread+0x388/0x470 [ 1005.203039][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 1005.203071][ T5859] ? __pfx_kthread+0x10/0x10 [ 1005.203097][ T5859] ret_from_fork+0x51e/0xb90 [ 1005.203133][ T5859] ? __pfx_ret_from_fork+0x10/0x10 [ 1005.203175][ T5859] ? __switch_to+0xc7d/0x1450 [ 1005.203214][ T5859] ? __pfx_kthread+0x10/0x10 [ 1005.203239][ T5859] ret_from_fork_asm+0x1a/0x30 [ 1005.203280][ T5859] [ 1005.203963][ T5859] Kernel Offset: disabled