last executing test programs: 25m6.178471723s ago: executing program 1 (id=108): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x20) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 25m6.176299238s ago: executing program 1 (id=110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m47.756446174s ago: executing program 1 (id=124): syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0xffffffff}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 24m47.751813737s ago: executing program 1 (id=129): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x97) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x4, 0xffff, 0xc}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088}, 0x4000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f0000001480)) io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)) prlimit64(0x0, 0xe, 0x0, 0x0) 24m47.750301173s ago: executing program 1 (id=131): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 24m47.74080912s ago: executing program 1 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) tee(r0, r0, 0xe2c, 0x26dd981490c996da) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x121900, 0x0) close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f27137b5a76d2688f54c65", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, 0x0, 0x1d7) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB="000000000000800000000000e600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c1401002cbd7000fedbdf1b0800010002000000080003000000000008003d0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 24m22.266272358s ago: executing program 32 (id=135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) tee(r0, r0, 0xe2c, 0x26dd981490c996da) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x121900, 0x0) close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f27137b5a76d2688f54c65", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, 0x0, 0x1d7) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB="000000000000800000000000e600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c1401002cbd7000fedbdf1b0800010002000000080003000000000008003d0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 18.655627682s ago: executing program 5 (id=1972): futex(&(0x7f0000000380), 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe8800f9ffffffffffffff0000000001ac14142500000000000000000000000000000000000000000a00000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001"], 0xc4}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020400070e000000000000000010000005000600000000000a00fffc00000000fe8000000000000000200000000000aa010000000000000002000100000000030300e9000000002005000500000000000a004e2300000002fc0000000000000000000000000000010200000000000015"], 0x70}}, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0xfffffc7a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101b8298a20030478fa0203135f19010902120001000010000904"], 0x0) 18.313250359s ago: executing program 5 (id=1980): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 18.134785044s ago: executing program 2 (id=1984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726", 0x17}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 17.716454015s ago: executing program 2 (id=1985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 17.608700015s ago: executing program 2 (id=1986): fsopen(&(0x7f0000000180)='proc\x00', 0x1) r0 = eventfd(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x80, 0x42000006, 0x20a}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858", 0x31, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) 17.343592849s ago: executing program 4 (id=1987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 16.906962705s ago: executing program 2 (id=1989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feff0000000000000000fc010000000008000000000000000001000107174e24630e000000203a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000fe000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffbfffffff0400000000000000090000000000100000000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e0000000535000002000100200000000000000048000300"], 0x140}}, 0x844) 16.73178074s ago: executing program 2 (id=1990): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef0000000109021200"], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x84, 0x0, @dev, @local}}}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 16.689198615s ago: executing program 4 (id=1991): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f000001a3c0)={0x2c, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.559795029s ago: executing program 5 (id=1992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0xb8}}, 0x4000c040) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000140001000000000000080000e000000200000000000000000000000000000000000000000000000000000000000008001000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) lseek(r0, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc040ff0b, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x4919, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e0000"], 0xfe33) 16.434813546s ago: executing program 0 (id=1993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 15.608903507s ago: executing program 0 (id=1996): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 1.67651746s ago: executing program 0 (id=1998): connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000c80)}}) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x8a242) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfWsz\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xa8\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendfile(r5, r5, 0x0, 0x2000fb) 1.671676548s ago: executing program 4 (id=2004): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000001c0)}], 0x2, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 1.670733468s ago: executing program 0 (id=2005): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)='s', 0x1}], 0x1}, 0x4004404) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r2}) 1.669875745s ago: executing program 3 (id=2006): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 1.667762201s ago: executing program 0 (id=2007): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8048802) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000440)={r6, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.667548394s ago: executing program 5 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000001, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) io_setup(0xb, &(0x7f00000003c0)) open(&(0x7f0000000780)='./bus\x00', 0x14337e, 0x0) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) 1.667433371s ago: executing program 2 (id=2009): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b45"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x2, 0x1, 0x5, 0xe2, 0x4, 0x2380}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)) 1.667294392s ago: executing program 3 (id=2010): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) 1.664825498s ago: executing program 4 (id=2011): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbea250e0000002000018014000700ac1414bb00000000000000000000000008000800040000001c0002800800070007000000060002034e2000000800040000f8ffff"], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r3, 0x22, 0x0, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000400)='rr\x00'], 0x0, 0x1}}, 0x30) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x4, 0x4, 0x0, 0x0, 0x0, 0x8}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 1.489275261s ago: executing program 3 (id=2012): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 658.041812ms ago: executing program 3 (id=2013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000100feff0000000000000000fc010000000008000000000000000001000107174e24630e000000203a00"/64, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000fe000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffbfffffff0400000000000000090000000000100000000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e0000000535000002000100200000000000000048000300"], 0x140}}, 0x844) 514.556244ms ago: executing program 5 (id=2014): fsopen(&(0x7f0000000180)='proc\x00', 0x1) r0 = eventfd(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x80, 0x42000006, 0x20a}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b2", 0x35, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) 284.230011ms ago: executing program 3 (id=2015): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f00000044c0)={0x2020}, 0x2020) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 0s ago: executing program 5 (id=2016): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc2200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x323800) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) setpgid(0x0, 0x0) fchdir(r4) kernel console output (not intermixed with test programs): ivid-000: kernel_thread() failed [ 714.326391][ T5993] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 714.520753][ T5993] usb 6-1: Using ep0 maxpacket: 16 [ 714.733283][ T5993] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.733305][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 714.733326][ T5993] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 714.733339][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.171001][ T5993] usb 6-1: config 0 descriptor?? [ 716.415331][ T5993] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 716.415367][ T5993] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 716.415394][ T5993] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 716.415420][ T5993] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 716.415446][ T5993] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 716.681315][ T5993] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 717.791390][ T5993] usb 6-1: USB disconnect, device number 14 [ 752.383489][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.383577][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.819757][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.819855][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.184491][T10701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'. [ 821.989378][T10717] vivid-000: kernel_thread() failed [ 823.274594][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 842.938840][T10882] capability: warning: `syz.3.927' uses 32-bit capabilities (legacy support in use) [ 842.939579][T10882] program syz.3.927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.177507][T10895] program syz.2.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.860475][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.933'. [ 866.185241][T10991] program syz.2.951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.184853][T11022] ALSA: mixer_oss: invalid OSS volume '' [ 869.256323][ T5993] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 870.206337][ T5993] usb 4-1: Using ep0 maxpacket: 32 [ 870.208780][ T5993] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 870.208806][ T5993] usb 4-1: config 0 has no interface number 0 [ 870.208851][ T5993] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 870.208874][ T5993] usb 4-1: config 0 interface 184 has no altsetting 0 [ 870.211425][ T5993] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 870.211451][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.211469][ T5993] usb 4-1: Product: syz [ 870.211483][ T5993] usb 4-1: Manufacturer: syz [ 870.211496][ T5993] usb 4-1: SerialNumber: syz [ 870.304512][ T5993] usb 4-1: config 0 descriptor?? [ 870.323705][ T5993] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 870.324297][ T5993] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 871.202493][T11033] program syz.2.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.524082][T11035] fuse: Bad value for 'fd' [ 873.017032][ T5993] usb 4-1: USB disconnect, device number 8 [ 873.667106][T11042] fuse: Bad value for 'rootmode' [ 875.259598][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.259694][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 885.896409][ T5993] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 886.086253][ T5993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 886.212940][ T5993] usb 6-1: not running at top speed; connect to a high speed hub [ 886.519353][ T5993] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 886.519388][ T5993] usb 6-1: config 1 interface 0 has no altsetting 0 [ 886.525604][ T5993] usb 6-1: string descriptor 0 read error: -22 [ 886.525716][ T5993] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 886.525729][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.696529][T11073] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 889.355502][ T5993] usbhid 6-1:1.0: can't add hid device: -32 [ 889.376801][ T5993] usbhid 6-1:1.0: probe with driver usbhid failed with error -32 [ 889.428701][ T5993] usb 6-1: USB disconnect, device number 15 [ 889.470179][T11094] ALSA: mixer_oss: invalid OSS volume '' [ 890.986537][ T810] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 891.360999][ T810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 891.696531][ T810] usb 3-1: not running at top speed; connect to a high speed hub [ 891.967334][ T810] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 891.967355][ T810] usb 3-1: config 1 interface 0 has no altsetting 0 [ 891.969109][ T810] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 891.969126][ T810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.969136][ T810] usb 3-1: Product: syz [ 891.969143][ T810] usb 3-1: Manufacturer: syz [ 891.969151][ T810] usb 3-1: SerialNumber: syz [ 891.974639][T11108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 893.239649][ T810] usbhid 3-1:1.0: can't add hid device: -71 [ 893.239771][ T810] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 893.282371][ T810] usb 3-1: USB disconnect, device number 6 [ 904.024336][T11172] ALSA: mixer_oss: invalid OSS volume '' [ 908.310904][ T810] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 909.646337][ T810] usb 6-1: Using ep0 maxpacket: 16 [ 909.652538][ T810] usb 6-1: config 0 has no interfaces? [ 909.654906][ T810] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 909.654933][ T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.654952][ T810] usb 6-1: Product: syz [ 909.654966][ T810] usb 6-1: Manufacturer: syz [ 909.654979][ T810] usb 6-1: SerialNumber: syz [ 909.659312][ T810] usb 6-1: config 0 descriptor?? [ 910.814426][T11223] ALSA: mixer_oss: invalid OSS volume '' [ 912.033169][ T5993] usb 6-1: USB disconnect, device number 16 [ 923.726411][ T5993] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 924.236282][ T5993] usb 3-1: Using ep0 maxpacket: 16 [ 924.238815][ T5993] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 924.238846][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 924.241607][ T5993] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.241634][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.241653][ T5993] usb 3-1: Product: syz [ 924.241667][ T5993] usb 3-1: Manufacturer: syz [ 924.241682][ T5993] usb 3-1: SerialNumber: syz [ 924.248635][ T5993] usb 3-1: config 0 descriptor?? [ 924.333654][ T5993] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 924.333691][ T5993] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 925.122801][ T5993] em28xx 3-1:0.0: chip ID is em2874 [ 925.831594][T11294] ALSA: mixer_oss: invalid OSS volume '' [ 926.484589][T11301] program syz.0.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.417037][ T9661] usb 3-1: USB disconnect, device number 7 [ 927.419315][ T9661] em28xx 3-1:0.0: Disconnecting em28xx [ 927.472951][ T9661] em28xx 3-1:0.0: Freeing device [ 934.417127][T11368] uprobe: syz.2.1027:11368 failed to unregister, leaking uprobe [ 936.702887][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.702955][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.817950][T11383] uprobe: syz.3.1029:11383 failed to unregister, leaking uprobe [ 946.367768][T11407] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 953.301359][T11431] smc: net device wlan0 applied user defined pnetid SYZ0 [ 972.093503][T11542] uprobe: syz.2.1056:11542 failed to unregister, leaking uprobe [ 976.026822][T11577] fuse: Bad value for 'fd' [ 992.236037][T11646] fuse: Bad value for 'fd' [ 993.424194][T11674] program syz.5.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.142970][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.143056][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.292430][T11737] netlink: 'syz.2.1098': attribute type 2 has an invalid length. [ 1003.788212][T11761] trusted_key: syz.0.1103 sent an empty control message without MSG_MORE. [ 1011.857722][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 1026.677716][T11885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1027.016251][ T36] audit: type=1326 audit(1773397051.405:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.016306][ T36] audit: type=1326 audit(1773397051.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.016349][ T36] audit: type=1326 audit(1773397051.405:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196475][ T36] audit: type=1326 audit(1773397051.405:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196525][ T36] audit: type=1326 audit(1773397051.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196562][ T36] audit: type=1326 audit(1773397051.405:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196597][ T36] audit: type=1326 audit(1773397051.405:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196634][ T36] audit: type=1326 audit(1773397051.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196670][ T36] audit: type=1326 audit(1773397051.405:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1027.196706][ T36] audit: type=1326 audit(1773397051.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11891 comm="syz.2.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1043.138829][T11986] program syz.3.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.579403][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.579498][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.785217][T12066] fuse: Unknown parameter 'user_i00000000000000000000' [ 1060.287100][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 1060.287121][ T36] audit: type=1326 audit(1773397084.705:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.287160][ T36] audit: type=1326 audit(1773397084.705:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.384669][ T36] audit: type=1326 audit(1773397084.785:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b1f1bcfce code=0x7ffc0000 [ 1060.384722][ T36] audit: type=1326 audit(1773397084.795:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.395276][ T36] audit: type=1326 audit(1773397084.805:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.395327][ T36] audit: type=1326 audit(1773397084.805:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.395366][ T36] audit: type=1326 audit(1773397084.805:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.395403][ T36] audit: type=1326 audit(1773397084.805:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.395441][ T36] audit: type=1326 audit(1773397084.805:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.395479][ T36] audit: type=1326 audit(1773397084.805:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12059 comm="syz.2.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1060.911035][T12075] usb usb8: usbfs: process 12075 (syz.2.1164) did not claim interface 0 before use [ 1062.726838][T12098] fuse: Bad value for 'fd' [ 1063.909409][T12116] fuse: Unknown parameter 'user_i00000000000000000000' [ 1064.002381][T12117] random: crng reseeded on system resumption [ 1067.376249][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 1067.376275][ T36] audit: type=1326 audit(1773397090.625:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376309][ T36] audit: type=1326 audit(1773397090.635:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376331][ T36] audit: type=1326 audit(1773397090.635:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376351][ T36] audit: type=1326 audit(1773397090.635:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376372][ T36] audit: type=1326 audit(1773397090.635:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376393][ T36] audit: type=1326 audit(1773397090.635:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376414][ T36] audit: type=1326 audit(1773397090.635:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376435][ T36] audit: type=1326 audit(1773397090.635:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376456][ T36] audit: type=1326 audit(1773397090.645:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1067.376477][ T36] audit: type=1326 audit(1773397090.645:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.4.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1078.236602][T12183] fuse: Unknown parameter 'user_i00000000000000000000' [ 1079.927922][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 1079.927938][ T36] audit: type=1326 audit(1773397104.345:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931382][ T36] audit: type=1326 audit(1773397104.345:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931436][ T36] audit: type=1326 audit(1773397104.345:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931459][ T36] audit: type=1326 audit(1773397104.345:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931484][ T36] audit: type=1326 audit(1773397104.345:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931505][ T36] audit: type=1326 audit(1773397104.345:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931526][ T36] audit: type=1326 audit(1773397104.345:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931546][ T36] audit: type=1326 audit(1773397104.345:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931566][ T36] audit: type=1326 audit(1773397104.345:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1079.931588][ T36] audit: type=1326 audit(1773397104.345:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.3.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1083.183788][T12216] usb usb8: usbfs: process 12216 (syz.0.1196) did not claim interface 0 before use [ 1097.937519][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 1097.937535][ T36] audit: type=1326 audit(1773397122.345:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.937576][ T36] audit: type=1326 audit(1773397122.345:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939481][ T36] audit: type=1326 audit(1773397122.355:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939520][ T36] audit: type=1326 audit(1773397122.355:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939557][ T36] audit: type=1326 audit(1773397122.355:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939593][ T36] audit: type=1326 audit(1773397122.355:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939642][ T36] audit: type=1326 audit(1773397122.355:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939680][ T36] audit: type=1326 audit(1773397122.355:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939717][ T36] audit: type=1326 audit(1773397122.355:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1097.939756][ T36] audit: type=1326 audit(1773397122.355:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12306 comm="syz.5.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1098.542300][T12312] usb usb8: usbfs: process 12312 (syz.5.1212) did not claim interface 0 before use [ 1098.835587][T12315] usb usb8: usbfs: process 12315 (syz.3.1213) did not claim interface 0 before use [ 1100.334203][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 1100.766674][T12334] gtp0: entered promiscuous mode [ 1100.766699][T12334] gtp0: entered allmulticast mode [ 1102.110274][ T9661] IPVS: starting estimator thread 0... [ 1102.241711][T12356] IPVS: using max 15 ests per chain, 36000 per kthread [ 1104.611146][T12351] usb usb8: usbfs: process 12351 (syz.2.1218) did not claim interface 0 before use [ 1116.765398][ T5875] IPVS: starting estimator thread 0... [ 1116.866386][T12444] IPVS: using max 15 ests per chain, 36000 per kthread [ 1120.193845][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 1120.193864][ T36] audit: type=1326 audit(1773397144.565:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.193913][ T36] audit: type=1326 audit(1773397144.575:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.193952][ T36] audit: type=1326 audit(1773397144.575:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.193989][ T36] audit: type=1326 audit(1773397144.575:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.194028][ T36] audit: type=1326 audit(1773397144.575:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.194066][ T36] audit: type=1326 audit(1773397144.575:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.194106][ T36] audit: type=1326 audit(1773397144.585:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.194142][ T36] audit: type=1326 audit(1773397144.585:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.194265][ T36] audit: type=1326 audit(1773397144.585:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1120.194304][ T36] audit: type=1326 audit(1773397144.585:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12468 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa95ec799 code=0x7ffc0000 [ 1121.129996][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.130065][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.424395][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 1122.024086][T12475] usb usb8: usbfs: process 12475 (syz.3.1240) did not claim interface 0 before use [ 1122.130000][T12493] gtp0: entered promiscuous mode [ 1122.130025][T12493] gtp0: entered allmulticast mode [ 1149.961710][T12622] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 1152.059632][T12644] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1154.109776][T12665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 1154.109801][T12665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 1154.168134][T12665] syz_tun: entered promiscuous mode [ 1154.330757][T12665] syz_tun: left promiscuous mode [ 1156.346637][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 1156.354253][T12687] gtp0: entered promiscuous mode [ 1156.354269][T12687] gtp0: entered allmulticast mode [ 1157.001926][T12691] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1178.399266][T12812] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1178.457555][ T5993] IPVS: starting estimator thread 0... [ 1178.607461][T12814] IPVS: using max 15 ests per chain, 36000 per kthread [ 1179.958637][T12829] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1182.815872][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.815915][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.025718][T12856] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1192.442227][T12905] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1197.125558][T12940] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1209.209192][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1334'. [ 1209.209228][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1334'. [ 1209.214252][T12995] syz_tun: entered promiscuous mode [ 1209.248169][T12995] syz_tun: left promiscuous mode [ 1212.999156][ T810] IPVS: starting estimator thread 0... [ 1213.144572][T13040] IPVS: using max 15 ests per chain, 36000 per kthread [ 1215.289022][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 1215.289047][T13054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 1215.329908][T13054] syz_tun: entered promiscuous mode [ 1215.426379][T13054] syz_tun: left promiscuous mode [ 1216.806288][T11210] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1216.958924][T11210] usb 4-1: Using ep0 maxpacket: 32 [ 1217.042338][T11210] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1217.042356][T11210] usb 4-1: config 0 has no interface number 0 [ 1217.042391][T11210] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1217.042403][T11210] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1217.042419][T11210] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1217.042436][T11210] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1217.054272][T11210] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1217.054302][T11210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.054320][T11210] usb 4-1: Product: syz [ 1217.054334][T11210] usb 4-1: Manufacturer: syz [ 1217.054347][T11210] usb 4-1: SerialNumber: syz [ 1217.103252][T11210] usb 4-1: config 0 descriptor?? [ 1217.217803][T11210] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input8 [ 1219.769845][T11210] usb 4-1: USB disconnect, device number 9 [ 1230.296351][T11210] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1230.446363][T11210] usb 4-1: Using ep0 maxpacket: 8 [ 1230.448072][T11210] usb 4-1: config 0 has no interfaces? [ 1230.448106][T11210] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1230.448128][T11210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.451120][T11210] usb 4-1: config 0 descriptor?? [ 1231.007455][T13152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.010768][T13152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.819645][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 1231.925246][T13181] gtp0: entered promiscuous mode [ 1231.925353][T13181] gtp0: entered allmulticast mode [ 1233.686429][ T5875] usb 4-1: USB disconnect, device number 10 [ 1243.901775][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.901879][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1247.662195][T12870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1247.896343][T12870] usb 4-1: Using ep0 maxpacket: 8 [ 1247.898996][T12870] usb 4-1: config 0 has no interfaces? [ 1247.899029][T12870] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1247.899052][T12870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.904108][T12870] usb 4-1: config 0 descriptor?? [ 1248.649594][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.649936][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.954825][T13287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.076307][ T810] usb 4-1: USB disconnect, device number 11 [ 1250.772578][T13300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.306490][T13362] loop2: detected capacity change from 0 to 7 [ 1264.370850][T13362] Dev loop2: unable to read RDB block 7 [ 1264.370920][T13362] loop2: unable to read partition table [ 1264.371142][T13362] loop2: partition table beyond EOD, truncated [ 1264.371284][T13362] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1264.756350][ T810] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1264.916683][ T810] usb 5-1: Using ep0 maxpacket: 8 [ 1264.922629][ T810] usb 5-1: config 0 has no interfaces? [ 1264.922651][ T810] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1264.922671][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.926602][ T810] usb 5-1: config 0 descriptor?? [ 1265.568285][T13383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.568802][T13383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.311944][ T5875] usb 5-1: USB disconnect, device number 10 [ 1267.566243][T11210] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1267.746364][T11210] usb 3-1: Using ep0 maxpacket: 32 [ 1267.748406][T11210] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1267.748437][T11210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1267.748462][T11210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1267.748485][T11210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1267.748511][T11210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1267.752957][T11210] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1267.752985][T11210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.753005][T11210] usb 3-1: Product: syz [ 1267.753025][T11210] usb 3-1: Manufacturer: syz [ 1267.753040][T11210] usb 3-1: SerialNumber: syz [ 1267.989977][T11210] usb 3-1: config 0 descriptor?? [ 1268.405068][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.405118][T11210] input input9: Device does not respond to id packet M [ 1268.433558][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.433683][T11210] input input9: Device does not respond to id packet P [ 1268.486597][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.486671][T11210] input input9: Device does not respond to id packet B [ 1268.487042][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.487067][T11210] input input9: Device does not respond to id packet N [ 1268.487446][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.487788][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.488086][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.488421][T11210] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1268.616608][T11210] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 1268.724703][T11210] usb 3-1: USB disconnect, device number 8 [ 1283.048982][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1430'. [ 1283.068547][T13481] bond0: entered promiscuous mode [ 1283.068568][T13481] bond_slave_0: entered promiscuous mode [ 1283.068795][T13481] bond_slave_1: entered promiscuous mode [ 1283.069677][T13481] macvlan2: entered promiscuous mode [ 1283.074447][T13481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1283.107753][T13481] bond0: left promiscuous mode [ 1283.107774][T13481] bond_slave_0: left promiscuous mode [ 1283.108077][T13481] bond_slave_1: left promiscuous mode [ 1284.841204][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 1284.846609][T13502] bond0: entered promiscuous mode [ 1284.846623][T13502] bond_slave_0: entered promiscuous mode [ 1284.846740][T13502] bond_slave_1: entered promiscuous mode [ 1284.847034][T13502] macvlan2: entered promiscuous mode [ 1284.847975][T13502] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1284.848470][T13502] bond0: left promiscuous mode [ 1284.848479][T13502] bond_slave_0: left promiscuous mode [ 1284.848630][T13502] bond_slave_1: left promiscuous mode [ 1287.146300][ T5993] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1287.326627][ T5993] usb 1-1: Using ep0 maxpacket: 32 [ 1287.330246][ T5993] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1287.330275][ T5993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1287.330356][ T5993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1287.330379][ T5993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1287.330404][ T5993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1287.333134][ T5993] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1287.333160][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.333179][ T5993] usb 1-1: Product: syz [ 1287.333192][ T5993] usb 1-1: Manufacturer: syz [ 1287.333202][ T5993] usb 1-1: SerialNumber: syz [ 1287.345629][ T5993] usb 1-1: config 0 descriptor?? [ 1288.008430][ T5993] input input10: Device does not respond to id packet M [ 1288.234955][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.235006][ T5993] input input10: Device does not respond to id packet P [ 1288.235418][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.235460][ T5993] input input10: Device does not respond to id packet B [ 1288.244173][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.244230][ T5993] input input10: Device does not respond to id packet N [ 1288.244699][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.245129][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.252183][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.254248][ T5993] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1288.345164][ T5993] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 1288.389570][ T5993] usb 1-1: USB disconnect, device number 11 [ 1290.170594][ T5993] IPVS: starting estimator thread 0... [ 1290.276411][T13564] IPVS: using max 15 ests per chain, 36000 per kthread [ 1299.336369][ T5867] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1299.503504][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1299.503523][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1299.650324][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1299.650352][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1299.655596][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1299.655623][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1299.686478][ T5867] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1299.686507][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.686526][ T5867] usb 3-1: Product: syz [ 1299.686539][ T5867] usb 3-1: Manufacturer: syz [ 1299.686552][ T5867] usb 3-1: SerialNumber: syz [ 1299.701241][ T5867] usb 3-1: config 0 descriptor?? [ 1299.726874][ T5867] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 1299.727224][ T5867] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 1304.771034][ T5867] usb 3-1: USB disconnect, device number 9 [ 1305.387972][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.388015][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.149370][T13687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.856472][ T5993] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1311.008555][T13746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.053636][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1311.053667][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1311.055651][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1311.055679][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1311.058844][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1311.058872][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1311.085019][ T5993] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1311.085043][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.085054][ T5993] usb 4-1: Product: syz [ 1311.085061][ T5993] usb 4-1: Manufacturer: syz [ 1311.085069][ T5993] usb 4-1: SerialNumber: syz [ 1311.239575][ T5993] usb 4-1: config 0 descriptor?? [ 1311.316850][ T5993] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 1311.316974][ T5993] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 1314.320388][T12870] usb 4-1: USB disconnect, device number 12 [ 1315.832916][T12870] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1315.986325][T12870] usb 1-1: Using ep0 maxpacket: 32 [ 1315.988153][T12870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1315.988172][T12870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1315.988185][T12870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1315.988198][T12870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1315.988212][T12870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1315.990308][T12870] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1315.990324][T12870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.990334][T12870] usb 1-1: Product: syz [ 1315.990342][T12870] usb 1-1: Manufacturer: syz [ 1315.990350][T12870] usb 1-1: SerialNumber: syz [ 1315.994111][T12870] usb 1-1: config 0 descriptor?? [ 1316.527462][T12870] input input11: Device does not respond to id packet M [ 1316.661578][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.661629][T12870] input input11: Device does not respond to id packet P [ 1316.662057][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.662099][T12870] input input11: Device does not respond to id packet B [ 1316.664002][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.664031][T12870] input input11: Device does not respond to id packet N [ 1316.664398][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.664763][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.665106][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.665453][T12870] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 1316.774738][T12870] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 1316.806784][T12870] usb 1-1: USB disconnect, device number 12 [ 1319.253285][T13806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.186344][ T5993] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1321.349853][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1321.349883][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1321.351457][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1321.351474][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1321.352924][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1321.352939][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1321.420520][ T5993] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1321.420539][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.420549][ T5993] usb 4-1: Product: syz [ 1321.420557][ T5993] usb 4-1: Manufacturer: syz [ 1321.420565][ T5993] usb 4-1: SerialNumber: syz [ 1321.423613][ T5993] usb 4-1: config 0 descriptor?? [ 1321.496542][ T5993] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 1321.496698][ T5993] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 1322.221262][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.240821][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.361074][T13842] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1322.522577][T13846] random: crng reseeded on system resumption [ 1325.686603][T11210] usb 4-1: USB disconnect, device number 13 [ 1325.814600][T13867] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1517'. [ 1326.036135][T13869] random: crng reseeded on system resumption [ 1335.747097][T13909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.753666][T13909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.038221][T13918] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1528'. [ 1337.687884][ T1225] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1341.927461][T13972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.927746][T13972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.235051][T13978] loop2: detected capacity change from 0 to 7 [ 1342.351508][T13913] Dev loop2: unable to read RDB block 7 [ 1342.351538][T13913] loop2: unable to read partition table [ 1342.351684][T13913] loop2: partition table beyond EOD, truncated [ 1342.398966][T13978] Dev loop2: unable to read RDB block 7 [ 1342.398997][T13978] loop2: unable to read partition table [ 1342.399116][T13978] loop2: partition table beyond EOD, truncated [ 1342.399143][T13978] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1347.916383][ T5804] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1348.166377][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 1348.449310][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1348.449346][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1348.449371][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1348.449392][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1348.449416][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1348.452620][ T5804] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1348.452647][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.452665][ T5804] usb 5-1: Product: syz [ 1348.452678][ T5804] usb 5-1: Manufacturer: syz [ 1348.452692][ T5804] usb 5-1: SerialNumber: syz [ 1348.467803][ T5804] usb 5-1: config 0 descriptor?? [ 1348.836097][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1348.837008][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.859630][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.861262][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.862611][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.863040][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.863518][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.863971][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.864476][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.864897][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.882557][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.884481][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.885054][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.885487][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.885959][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.887111][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.887536][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.887949][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.888468][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.890448][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1348.890491][ T5804] input input12: Timeout waiting for response from device. [ 1349.111839][ T5804] usb 5-1: USB disconnect, device number 11 [ 1350.743978][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 1350.743991][ T36] audit: type=1326 audit(1773397375.155:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.744176][ T36] audit: type=1326 audit(1773397375.155:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.744405][ T36] audit: type=1326 audit(1773397375.155:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.744687][ T36] audit: type=1326 audit(1773397375.155:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.744848][ T36] audit: type=1326 audit(1773397375.155:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.745080][ T36] audit: type=1326 audit(1773397375.155:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.745246][ T36] audit: type=1326 audit(1773397375.155:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.806320][ T36] audit: type=1326 audit(1773397375.155:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1350.806371][ T36] audit: type=1326 audit(1773397375.215:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1351.143598][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.144127][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.401249][ T36] audit: type=1326 audit(1773397375.815:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14035 comm="syz.4.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb89ac799 code=0x7ffc0000 [ 1351.811548][T14037] usb usb8: usbfs: process 14037 (syz.4.1550) did not claim interface 0 before use [ 1352.380517][T14068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1352.383309][T14068] process 'syz.2.1556' launched './file0' with NULL argv: empty string added [ 1355.610483][T14096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.610980][T14096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.795266][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1356.795283][ T36] audit: type=1326 audit(1773397381.205:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.795325][ T36] audit: type=1326 audit(1773397381.205:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.795761][ T36] audit: type=1326 audit(1773397381.205:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.795787][ T36] audit: type=1326 audit(1773397381.205:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.795809][ T36] audit: type=1326 audit(1773397381.205:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.796025][ T36] audit: type=1326 audit(1773397381.205:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.796384][ T36] audit: type=1326 audit(1773397381.205:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.799604][ T36] audit: type=1326 audit(1773397381.215:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1356.805421][ T36] audit: type=1326 audit(1773397381.215:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1357.452226][ T36] audit: type=1326 audit(1773397381.865:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14118 comm="syz.2.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f1fc799 code=0x7ffc0000 [ 1357.840871][T14120] usb usb8: usbfs: process 14120 (syz.2.1574) did not claim interface 0 before use [ 1360.402668][T14164] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1582'. [ 1360.886416][ T5867] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1361.036321][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 1361.038518][ T5867] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1361.038553][ T5867] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1361.041345][ T5867] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1361.041361][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.041371][ T5867] usb 5-1: Product: syz [ 1361.041386][ T5867] usb 5-1: Manufacturer: syz [ 1361.041394][ T5867] usb 5-1: SerialNumber: syz [ 1361.123723][ T5867] usb 5-1: config 0 descriptor?? [ 1363.552514][ T5875] usb 5-1: USB disconnect, device number 12 [ 1365.346384][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 1366.216307][ T5804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1366.385899][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 1366.447228][ T5804] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1366.447258][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.459577][ T5804] usb 5-1: config 0 descriptor?? [ 1366.501636][ T5804] as10x_usb: device has been detected [ 1366.502416][ T5804] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1366.565482][ T5804] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1366.712071][ T5804] as10x_usb: error during firmware upload part1 [ 1366.712711][ T5804] Registered device nBox DVB-T Dongle [ 1366.789644][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.789711][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.058845][ T5804] usb 5-1: USB disconnect, device number 13 [ 1367.271720][ T5804] Unregistered device nBox DVB-T Dongle [ 1367.350886][ T5804] as10x_usb: device has been disconnected [ 1368.983542][T14237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.687198][T14244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1370.133752][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 1370.316500][ T5804] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1370.586293][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 1370.588532][ T5804] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1370.588560][ T5804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.595677][ T5804] usb 6-1: config 0 descriptor?? [ 1370.758419][T14257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1370.776338][ T5804] as10x_usb: device has been detected [ 1370.777293][ T5804] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1371.641452][ T5804] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1371.696430][ T5804] as10x_usb: error during firmware upload part1 [ 1371.696825][ T5804] Registered device nBox DVB-T Dongle [ 1371.722937][ T5804] usb 6-1: USB disconnect, device number 17 [ 1371.782700][ T5804] Unregistered device nBox DVB-T Dongle [ 1371.810124][ T5804] as10x_usb: device has been disconnected [ 1374.216248][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1612'. [ 1375.037788][T14297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.531876][T14321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.956365][ T5993] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1378.106371][ T5993] usb 1-1: Using ep0 maxpacket: 8 [ 1378.108549][ T5993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1378.110499][ T5993] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1378.116988][ T5993] usb 1-1: string descriptor 0 read error: -22 [ 1378.117081][ T5993] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1378.117104][ T5993] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1378.290434][ T5993] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1378.331152][ T5993] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1378.331633][ T5993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1378.331694][ T5993] usb 1-1: media controller created [ 1378.384830][T14325] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1378.384923][T14325] usb 1-1: dvb_usb_au6610: wlen=83, aborting [ 1378.414425][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1378.512066][ T5993] zl10353_read_register: readreg error (reg=127, ret==0) [ 1378.679224][ T5993] usb 1-1: USB disconnect, device number 13 [ 1378.781950][T14333] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1623'. [ 1378.993595][T14337] random: crng reseeded on system resumption [ 1379.178989][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1379.179011][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1624'. [ 1379.185138][T14341] team0: entered promiscuous mode [ 1379.185150][T14341] team_slave_0: entered promiscuous mode [ 1379.185278][T14341] team_slave_1: entered promiscuous mode [ 1379.187817][T14341] bond0: entered promiscuous mode [ 1379.187835][T14341] bond_slave_0: entered promiscuous mode [ 1379.188054][T14341] bond_slave_1: entered promiscuous mode [ 1379.199885][T14341] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1384.798956][T14387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.702297][T14405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.639996][T14406] geneve2: entered promiscuous mode [ 1387.640013][T14406] geneve2: entered allmulticast mode [ 1387.706702][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 1387.801571][T14416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1388.066465][ T810] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1388.316480][ T810] usb 6-1: Using ep0 maxpacket: 32 [ 1388.405117][ T810] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1388.405139][ T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1388.405153][ T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1388.405165][ T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1388.405179][ T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1388.429821][ T810] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1388.429851][ T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.429870][ T810] usb 6-1: Product: syz [ 1388.429884][ T810] usb 6-1: Manufacturer: syz [ 1388.429898][ T810] usb 6-1: SerialNumber: syz [ 1388.437652][ T810] usb 6-1: config 0 descriptor?? [ 1389.081592][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.082068][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.082508][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.082941][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.083390][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.083822][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.084267][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.084701][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.085134][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.085572][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.086021][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.091191][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.091642][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.092073][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.092504][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.094084][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.094506][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.094951][ T810] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1389.094991][ T810] input input13: Timeout waiting for response from device. [ 1389.186351][ T810] usb 6-1: USB disconnect, device number 18 [ 1390.546292][T12870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1390.926287][T12870] usb 1-1: Using ep0 maxpacket: 8 [ 1390.929296][T12870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1390.930319][T12870] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1390.933468][T12870] usb 1-1: string descriptor 0 read error: -22 [ 1390.933522][T12870] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1390.933536][T12870] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1391.033305][T12870] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1391.068357][T12870] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1391.068716][T12870] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1391.068763][T12870] usb 1-1: media controller created [ 1391.111187][T12870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1391.475682][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.483928][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.604996][T12870] zl10353_read_register: readreg error (reg=127, ret==0) [ 1392.616909][T14433] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 1392.616981][T14433] usb 1-1: dvb_usb_au6610: wlen=83, aborting [ 1392.717900][T12870] usb 1-1: USB disconnect, device number 14 [ 1395.267124][T14470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.128112][T14488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1398.449179][T14498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.449583][T14498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.414475][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1665'. [ 1409.709212][T14545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.446674][ T5804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1415.566503][ T810] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1415.750355][ T810] usb 3-1: Using ep0 maxpacket: 32 [ 1415.844807][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.844891][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.844914][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1415.844956][ T5804] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1415.844980][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.860022][ T810] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1415.860050][ T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.877315][ T5804] usb 4-1: config 0 descriptor?? [ 1415.890438][ T810] usb 3-1: config 0 descriptor?? [ 1415.945346][ T810] as10x_usb: device has been detected [ 1415.959509][ T810] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1416.184924][ T810] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1416.337436][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337463][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337479][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337494][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337510][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337525][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337546][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337561][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337576][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.337590][ T5804] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1416.371261][ T810] as10x_usb: error during firmware upload part1 [ 1416.371882][ T810] Registered device nBox DVB-T Dongle [ 1416.443594][ T5804] plantronics 0003:047F:FFFF.000E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1416.569795][T11210] usb 4-1: USB disconnect, device number 14 [ 1416.850495][ T5804] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1417.026480][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 1417.028595][ T5804] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1417.028625][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.041513][ T5804] usb 5-1: config 0 descriptor?? [ 1417.075091][ T5804] as10x_usb: device has been detected [ 1417.075757][ T5804] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1417.155773][T14635] fido_id[14635]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1417.174394][ T5804] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1417.213072][ T5804] as10x_usb: error during firmware upload part1 [ 1417.213712][ T5804] Registered device nBox DVB-T Dongle [ 1420.478071][ T5804] usb 3-1: USB disconnect, device number 10 [ 1420.907842][ T5804] Unregistered device nBox DVB-T Dongle [ 1420.923406][ T5804] as10x_usb: device has been disconnected [ 1421.276328][ T810] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1421.441793][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 1421.457941][ T810] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1421.457972][ T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.461048][ T810] usb 1-1: config 0 descriptor?? [ 1421.522833][ T810] as10x_usb: device has been detected [ 1421.523675][ T810] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1421.568365][ T810] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1421.635871][ T810] as10x_usb: error during firmware upload part1 [ 1421.643318][ T810] Registered device nBox DVB-T Dongle [ 1424.162918][ T810] usb 5-1: USB disconnect, device number 14 [ 1424.184086][ T810] Unregistered device nBox DVB-T Dongle [ 1424.233782][ T810] as10x_usb: device has been disconnected [ 1424.469927][T14706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.695573][ T810] usb 1-1: USB disconnect, device number 15 [ 1424.744239][ T810] Unregistered device nBox DVB-T Dongle [ 1424.786104][ T810] as10x_usb: device has been disconnected [ 1424.918249][T14706] geneve3: entered promiscuous mode [ 1424.918275][T14706] geneve3: entered allmulticast mode [ 1424.986648][ T5875] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1425.322545][T14718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1425.365589][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1425.382478][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1425.382511][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1425.382535][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1425.382557][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1425.382591][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1425.386116][ T5875] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1425.386142][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.386160][ T5875] usb 5-1: Product: syz [ 1425.386174][ T5875] usb 5-1: Manufacturer: syz [ 1425.386266][ T5875] usb 5-1: SerialNumber: syz [ 1425.391508][ T5875] usb 5-1: config 0 descriptor?? [ 1425.839591][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.839642][ T5875] input input14: Device does not respond to id packet M [ 1425.910993][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.911025][ T5875] input input14: Device does not respond to id packet P [ 1425.913716][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.913744][ T5875] input input14: Device does not respond to id packet B [ 1425.914104][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.914128][ T5875] input input14: Device does not respond to id packet N [ 1425.914459][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.914796][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.915157][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1425.915522][ T5875] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1426.035964][ T5875] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 1426.063499][ T5875] usb 5-1: USB disconnect, device number 15 [ 1427.300151][T14726] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1427.300196][T14726] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1427.300217][T14726] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1427.961219][T14744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1696'. [ 1427.961259][T14744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1696'. [ 1428.014376][T14741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'. [ 1428.084580][T14744] bond0: entered promiscuous mode [ 1428.084604][T14744] bond_slave_0: entered promiscuous mode [ 1428.084827][T14744] bond_slave_1: entered promiscuous mode [ 1428.220173][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.220261][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.274007][T14744] bond0: left promiscuous mode [ 1428.274032][T14744] bond_slave_0: left promiscuous mode [ 1428.274283][T14744] bond_slave_1: left promiscuous mode [ 1441.240980][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 1441.263688][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 1441.318632][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 1441.332687][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 1441.349056][ T7055] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.409252][ T7046] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.410426][ T7046] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.411316][ T7046] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.411402][ T7046] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.411479][ T7046] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.411555][ T7046] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.411628][ T7046] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.784307][T14817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1442.529502][T14816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1444.502327][T14838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1712'. [ 1445.683735][T14822] udevd[14822]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1445.991127][T14848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1446.334941][T14851] geneve3: entered promiscuous mode [ 1446.334977][T14851] geneve3: entered allmulticast mode [ 1447.098752][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1718'. [ 1449.354053][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.354357][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.436316][ T810] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1449.816821][ T810] usb 5-1: device descriptor read/64, error -71 [ 1450.083881][ T810] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1450.276307][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 1450.278522][ T810] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1450.278550][ T810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.283467][ T810] usb 5-1: config 0 descriptor?? [ 1450.364615][ T810] as10x_usb: device has been detected [ 1450.365487][ T810] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1450.409977][ T810] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1450.431720][ T810] as10x_usb: error during firmware upload part1 [ 1450.432386][ T810] Registered device nBox DVB-T Dongle [ 1450.496719][T14907] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1727'. [ 1451.018721][T14911] random: crng reseeded on system resumption [ 1451.132032][T14908] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1451.144859][T14908] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1451.144922][T14908] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1452.342167][T14899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1455.866767][ T810] usb 5-1: USB disconnect, device number 17 [ 1455.912077][ T810] Unregistered device nBox DVB-T Dongle [ 1455.937145][ T810] as10x_usb: device has been disconnected [ 1462.369500][T12870] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1462.478295][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.478324][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.553148][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.553173][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.564595][ T7055] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.565633][ T7055] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.565677][ T7055] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.565705][ T7055] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.567463][T12870] usb 3-1: Using ep0 maxpacket: 32 [ 1462.584964][T12870] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1462.584983][T12870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.591085][T12870] usb 3-1: config 0 descriptor?? [ 1462.632303][T12870] as10x_usb: device has been detected [ 1462.633153][T12870] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1462.643495][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.688189][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.688212][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.689043][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.689061][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1733'. [ 1462.800809][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.826314][ T5993] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1462.978750][T12870] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1463.050828][T12870] as10x_usb: error during firmware upload part1 [ 1463.051188][T12870] Registered device nBox DVB-T Dongle [ 1466.193970][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 1466.824554][T14993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1467.193458][T15008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.737295][T14964] usb 3-1: USB disconnect, device number 11 [ 1467.840099][T14964] Unregistered device nBox DVB-T Dongle [ 1467.870352][T14964] as10x_usb: device has been disconnected [ 1468.026947][T15013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 1468.026971][T15013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 1468.039700][T15013] bond0: entered promiscuous mode [ 1468.039720][T15013] bond_slave_0: entered promiscuous mode [ 1468.039929][T15013] bond_slave_1: entered promiscuous mode [ 1468.116359][T15013] bond0: left promiscuous mode [ 1468.116375][T15013] bond_slave_0: left promiscuous mode [ 1468.116528][T15013] bond_slave_1: left promiscuous mode [ 1468.547440][T15008] geneve2: entered promiscuous mode [ 1468.547467][T15008] geneve2: entered allmulticast mode [ 1468.736373][ T5804] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1468.886350][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 1468.888062][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1468.888093][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1468.888118][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1468.888137][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1468.888150][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1468.891177][ T5804] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1468.891203][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.891222][ T5804] usb 5-1: Product: syz [ 1468.891231][ T5804] usb 5-1: Manufacturer: syz [ 1468.891239][ T5804] usb 5-1: SerialNumber: syz [ 1468.895282][ T5804] usb 5-1: config 0 descriptor?? [ 1469.120752][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1469.121210][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.121644][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.122074][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.122461][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.122762][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.123061][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.123365][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.123673][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.124025][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.124325][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.124807][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.125119][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.125418][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.125719][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.126017][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.126751][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.127203][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.127636][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.128164][ T5804] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1469.128204][ T5804] input input15: Timeout waiting for response from device. [ 1469.161226][ T5804] usb 5-1: USB disconnect, device number 18 [ 1472.789620][T15051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1473.851399][T15053] geneve3: entered promiscuous mode [ 1473.851418][T15053] geneve3: entered allmulticast mode [ 1477.461584][T15087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.717060][T15104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.969663][T15111] geneve3: entered promiscuous mode [ 1478.969690][T15111] geneve3: entered allmulticast mode [ 1479.514829][T15114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1480.352246][T15122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1764'. [ 1480.713635][T15092] udevd[15092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1481.342141][T15138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1482.561083][ T7046] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1482.818272][T15151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1770'. [ 1482.818295][T15151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1770'. [ 1482.864282][T15147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1483.315602][T15138] geneve2: entered promiscuous mode [ 1483.315629][T15138] geneve2: entered allmulticast mode [ 1483.516363][ T5993] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1483.666728][ T5993] usb 6-1: Using ep0 maxpacket: 8 [ 1483.669445][ T5993] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1483.672689][ T5993] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1483.676112][ T5993] usb 6-1: string descriptor 0 read error: -22 [ 1483.712747][ T5993] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1483.712766][ T5993] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1483.779744][ T5993] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1483.810582][ T5993] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1483.810812][ T5993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1483.810853][ T5993] usb 6-1: media controller created [ 1483.850655][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1483.970438][ T5993] zl10353_read_register: readreg error (reg=127, ret==0) [ 1484.014735][ T5993] usb 6-1: USB disconnect, device number 19 [ 1484.125781][T15151] bond0: entered promiscuous mode [ 1484.125798][T15151] bond_slave_0: entered promiscuous mode [ 1484.125933][T15151] bond_slave_1: entered promiscuous mode [ 1484.166441][T15151] bond0: left promiscuous mode [ 1484.166460][T15151] bond_slave_0: left promiscuous mode [ 1484.166661][T15151] bond_slave_1: left promiscuous mode [ 1485.873861][T15169] cgroup: fork rejected by pids controller in /syz0 [ 1485.904182][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1777'. [ 1486.970868][T15155] udevd[15155]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1487.024727][T15092] udevd[15092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1488.074624][T15365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.965202][T15366] geneve2: entered promiscuous mode [ 1488.965231][T15366] geneve2: entered allmulticast mode [ 1489.659519][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.659615][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1498.448964][T15406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1498.699588][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 1498.738353][T15408] geneve3: entered promiscuous mode [ 1498.738380][T15408] geneve3: entered allmulticast mode [ 1500.074005][T15413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1500.190659][T15401] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1500.190685][T15401] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1500.190697][T15401] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1501.545295][T15422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1790'. [ 1501.698817][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 1501.698840][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 1501.713338][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 1501.713360][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 1501.730052][ T7055] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1501.730281][ T7055] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1501.730336][ T7055] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1501.730383][ T7055] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1501.916397][T14964] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1502.097606][T14964] usb 3-1: Using ep0 maxpacket: 32 [ 1502.099516][T14964] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1502.099546][T14964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.102912][T14964] usb 3-1: config 0 descriptor?? [ 1502.110811][T14964] as10x_usb: device has been detected [ 1502.111303][T14964] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1502.129856][T14964] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1502.160277][T14964] as10x_usb: error during firmware upload part1 [ 1502.160950][T14964] Registered device nBox DVB-T Dongle [ 1502.221213][T15430] udevd[15430]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1502.389503][T15433] udevd[15433]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1506.818304][ T5804] usb 3-1: USB disconnect, device number 12 [ 1506.844168][ T5804] Unregistered device nBox DVB-T Dongle [ 1506.849786][ T5804] as10x_usb: device has been disconnected [ 1515.332998][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 1515.333022][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 1515.333977][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 1515.333998][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 1516.371565][T15499] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1516.846867][T15507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1517.041344][T15508] geneve2: entered promiscuous mode [ 1517.041380][T15508] geneve2: entered allmulticast mode [ 1519.428684][T15516] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1519.428724][T15516] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1519.428744][T15516] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1519.676427][T14264] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1519.866666][T14264] usb 1-1: Using ep0 maxpacket: 8 [ 1519.868728][T14264] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1519.869640][T14264] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1519.872781][T14264] usb 1-1: string descriptor 0 read error: -22 [ 1519.872841][T14264] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1519.872854][T14264] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1519.886059][T14264] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1519.914771][T14264] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1519.915133][T14264] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1519.915178][T14264] usb 1-1: media controller created [ 1520.003281][T14264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1520.211818][T14264] zl10353_read_register: readreg error (reg=127, ret==0) [ 1520.452350][T14264] usb 1-1: USB disconnect, device number 16 [ 1521.343362][T15551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1521.967093][T15540] udevd[15540]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1522.027992][T15565] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1815'. [ 1522.326302][ T5804] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1522.449978][T15573] random: crng reseeded on system resumption [ 1522.518733][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 1522.522398][ T5804] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1522.522416][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.529820][ T5804] usb 1-1: config 0 descriptor?? [ 1522.568631][ T5804] as10x_usb: device has been detected [ 1522.692739][ T5804] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1522.870993][ T5804] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1522.882369][ T5804] as10x_usb: error during firmware upload part1 [ 1522.883063][ T5804] Registered device nBox DVB-T Dongle [ 1524.312920][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1817'. [ 1524.312935][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1817'. [ 1524.391852][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1817'. [ 1524.391875][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1817'. [ 1525.610270][T15586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1525.810007][T15587] geneve3: entered promiscuous mode [ 1525.810035][T15587] geneve3: entered allmulticast mode [ 1527.067094][T11210] usb 1-1: USB disconnect, device number 17 [ 1527.094873][T11210] Unregistered device nBox DVB-T Dongle [ 1527.127039][T11210] as10x_usb: device has been disconnected [ 1533.965797][T14964] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1534.827950][T14964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.827978][T14964] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1534.828006][T14964] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1534.828019][T14964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.872877][T14964] usb 6-1: config 0 descriptor?? [ 1535.144031][T14964] usb 6-1: string descriptor 0 read error: -71 [ 1535.172072][T14964] usb 6-1: USB disconnect, device number 20 [ 1535.548002][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1827'. [ 1535.597029][T15638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1536.102731][T15638] geneve3: entered promiscuous mode [ 1536.102758][T15638] geneve3: entered allmulticast mode [ 1536.183062][T15616] udevd[15616]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1541.752432][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1839'. [ 1542.453942][T15709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.845600][T15616] udevd[15616]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1543.113309][T15709] geneve3: entered promiscuous mode [ 1543.113366][T15709] geneve3: entered allmulticast mode [ 1551.102095][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.102190][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1553.109531][T15754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1842'. [ 1553.737008][T15752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.943787][T15755] geneve2: entered promiscuous mode [ 1553.943841][T15755] geneve2: entered allmulticast mode [ 1556.422650][T15791] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1853'. [ 1556.976099][T15794] udevd[15794]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1557.028009][T15800] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1854'. [ 1557.051888][T15794] udevd[15794]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1557.309903][T15812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1558.230572][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 1558.230587][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 1558.237807][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 1558.237821][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 1558.243119][ T67] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.243256][ T67] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.243287][ T67] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1558.243314][ T67] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.025299][T15849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1862'. [ 1563.040981][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.041598][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.457191][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1868'. [ 1565.480628][T15876] udevd[15876]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1565.500030][T15882] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1869'. [ 1566.749982][T15899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1874'. [ 1567.891033][T12870] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1568.206461][T12870] usb 4-1: Using ep0 maxpacket: 32 [ 1568.208713][T12870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.208739][T12870] usb 4-1: config 0 has no interfaces? [ 1568.208769][T12870] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1568.208792][T12870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.212924][T12870] usb 4-1: config 0 descriptor?? [ 1568.446318][T14264] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1568.658986][T14264] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1568.733025][T14264] usb 1-1: string descriptor 0 read error: -22 [ 1568.733165][T14264] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 1568.733188][T14264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.568972][T15927] vivid-007: ================= START STATUS ================= [ 1571.569047][T15927] vivid-007: Enable Output Cropping: true grabbed [ 1571.570390][T15927] vivid-007: Enable Output Composing: true grabbed [ 1571.570404][T15927] vivid-007: Enable Output Scaler: true grabbed [ 1571.570416][T15927] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1571.570483][T15927] vivid-007: Transmit Mode: HDMI grabbed [ 1571.570539][T15927] vivid-007: Hotplug Present: 0x00000000 [ 1571.570550][T15927] vivid-007: RxSense Present: 0x00000000 [ 1571.570559][T15927] vivid-007: EDID Present: 0x00000000 [ 1571.570570][T15927] vivid-007: ================== END STATUS ================== [ 1572.758637][T14264] usbhid 1-1:1.0: can't add hid device: -71 [ 1572.758816][T14264] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1572.767374][T14264] usb 1-1: USB disconnect, device number 18 [ 1573.129981][T15937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'. [ 1574.106006][T12870] usb 4-1: USB disconnect, device number 16 [ 1574.453379][T15906] udevd[15906]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1587.846367][T16035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1587.849972][T16029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1895'. [ 1587.963071][T16040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1897'. [ 1588.875847][T16038] geneve2: entered promiscuous mode [ 1588.875871][T16038] geneve2: entered allmulticast mode [ 1589.788544][T16045] udevd[16045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1589.792648][T16044] udevd[16044]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1590.563686][T16072] vivid-007: ================= START STATUS ================= [ 1590.563706][T16072] vivid-007: Enable Output Cropping: true [ 1590.563729][T16072] vivid-007: Enable Output Composing: true [ 1590.563747][T16072] vivid-007: Enable Output Scaler: true [ 1590.563765][T16072] vivid-007: Tx RGB Quantization Range: Automatic [ 1590.563784][T16072] vivid-007: Transmit Mode: HDMI [ 1590.563801][T16072] vivid-007: Hotplug Present: 0x00000000 [ 1590.563819][T16072] vivid-007: RxSense Present: 0x00000000 [ 1590.563837][T16072] vivid-007: EDID Present: 0x00000000 [ 1590.563856][T16072] vivid-007: ================== END STATUS ================== [ 1592.071708][T16094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1593.088172][T16101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1912'. [ 1593.998590][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1914'. [ 1605.237187][T16137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'. [ 1605.573581][T16157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1924'. [ 1605.696384][T12870] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1605.852806][T12870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1605.852840][T12870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.852875][T12870] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1605.852898][T12870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.866094][T12870] usb 4-1: config 0 descriptor?? [ 1605.947428][T12870] hub 4-1:0.0: USB hub found [ 1606.047270][T16154] udevd[16154]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1606.104224][T12870] hub 4-1:0.0: 1 port detected [ 1606.306520][T14964] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1606.408727][T12870] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1606.408882][T12870] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1606.521250][T14964] usb 1-1: Using ep0 maxpacket: 32 [ 1606.547635][T12870] usbhid 4-1:0.0: can't add hid device: -71 [ 1606.548250][T12870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1606.575641][T14964] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1606.575699][T14964] usb 1-1: config 0 has no interface number 0 [ 1606.575749][T14964] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1606.723498][T14964] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1606.723541][T14964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.723605][T14964] usb 1-1: Product: syz [ 1606.723620][T14964] usb 1-1: Manufacturer: syz [ 1606.723671][T14964] usb 1-1: SerialNumber: syz [ 1607.072316][T14964] usb 1-1: config 0 descriptor?? [ 1607.223686][T16166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1607.293122][T12870] usb 4-1: USB disconnect, device number 17 [ 1607.781970][T16166] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1607.976521][ T5993] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1608.126351][ T5993] usb 6-1: Using ep0 maxpacket: 32 [ 1608.131084][ T5993] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1608.131111][ T5993] usb 6-1: config 0 has no interface number 0 [ 1608.131229][ T5993] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1608.131257][ T5993] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1608.175241][ T5993] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1608.175259][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.175270][ T5993] usb 6-1: Product: syz [ 1608.175316][ T5993] usb 6-1: Manufacturer: syz [ 1608.175324][ T5993] usb 6-1: SerialNumber: syz [ 1608.214571][ T5993] usb 6-1: config 0 descriptor?? [ 1608.473985][ T5993] appletouch 6-1:0.85: Failed to read mode from device. [ 1608.474300][ T5993] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1608.594055][ T5993] usb 6-1: USB disconnect, device number 21 [ 1608.956354][T11210] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1609.230713][T11210] usb 4-1: Using ep0 maxpacket: 32 [ 1609.252211][T11210] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1609.252241][T11210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.252261][T11210] usb 4-1: Product: syz [ 1609.252275][T11210] usb 4-1: Manufacturer: syz [ 1609.252287][T11210] usb 4-1: SerialNumber: syz [ 1609.273868][T11210] usb 4-1: config 0 descriptor?? [ 1609.884774][T14964] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1609.884799][T14964] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1609.885032][T14964] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1609.921458][T11210] airspy 4-1:0.0: Board ID: 00 [ 1609.921480][T11210] airspy 4-1:0.0: Firmware version: [ 1609.948835][T14964] usb 1-1: USB disconnect, device number 19 [ 1610.256446][ T5804] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1610.321861][T11210] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 1610.359390][T11210] airspy 4-1:0.0: Registered as swradio24 [ 1610.359405][T11210] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1610.387434][T11210] usb 4-1: USB disconnect, device number 18 [ 1610.406307][ T5804] usb 6-1: Using ep0 maxpacket: 16 [ 1610.407901][ T5804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1610.409712][ T5804] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1610.409728][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.409738][ T5804] usb 6-1: Product: syz [ 1610.409747][ T5804] usb 6-1: Manufacturer: syz [ 1610.409754][ T5804] usb 6-1: SerialNumber: syz [ 1610.460202][ T5804] usb 6-1: config 0 descriptor?? [ 1610.509507][ T5804] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1610.509529][ T5804] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1611.126393][T11210] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1611.180973][ T5804] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1611.822046][T11210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1611.822071][T11210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.822133][T11210] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1611.822147][T11210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.825832][T11210] usb 1-1: config 0 descriptor?? [ 1611.870108][T11210] hub 1-1:0.0: USB hub found [ 1612.334969][T11210] hub 1-1:0.0: 1 port detected [ 1612.662913][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.662979][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.664322][T11210] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1612.664345][T11210] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1612.755635][T11210] usbhid 1-1:0.0: can't add hid device: -71 [ 1612.755722][T11210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1612.790125][T11210] usb 1-1: USB disconnect, device number 20 [ 1612.920302][ T5804] em28xx 6-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1612.920334][ T5804] em28xx 6-1:0.0: board has no eeprom [ 1613.006304][ T5804] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1613.006444][ T5804] em28xx 6-1:0.0: dvb set to bulk mode. [ 1613.010756][ T810] em28xx 6-1:0.0: Binding DVB extension [ 1613.026472][ T5804] usb 6-1: USB disconnect, device number 22 [ 1613.074198][ T5804] em28xx 6-1:0.0: Disconnecting em28xx [ 1613.278484][ T810] em28xx 6-1:0.0: Registering input extension [ 1613.278899][ T5804] em28xx 6-1:0.0: Closing input extension [ 1613.381764][ T5804] em28xx 6-1:0.0: Freeing device [ 1614.599895][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 1623.653731][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 1623.681069][T16289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1953'. [ 1623.916428][ T810] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1624.096637][ T810] usb 5-1: Using ep0 maxpacket: 32 [ 1624.105005][ T810] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1624.105034][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.105053][ T810] usb 5-1: Product: syz [ 1624.105066][ T810] usb 5-1: Manufacturer: syz [ 1624.105081][ T810] usb 5-1: SerialNumber: syz [ 1624.129077][ T810] usb 5-1: config 0 descriptor?? [ 1624.166631][T14264] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1624.326371][T11210] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1624.326565][T14264] usb 4-1: Using ep0 maxpacket: 16 [ 1624.329221][T14264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.329244][T14264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.332057][T14264] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1624.332083][T14264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.332156][T14264] usb 4-1: Product: syz [ 1624.332166][T14264] usb 4-1: Manufacturer: syz [ 1624.332173][T14264] usb 4-1: SerialNumber: syz [ 1624.483929][T11210] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1624.498419][T11210] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1624.498499][T11210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.498520][T11210] usb 6-1: Product: syz [ 1624.498542][T11210] usb 6-1: Manufacturer: syz [ 1624.498557][T11210] usb 6-1: SerialNumber: syz [ 1624.618321][ T810] airspy 5-1:0.0: Board ID: 00 [ 1624.618399][ T810] airspy 5-1:0.0: Firmware version: [ 1624.634815][T14264] usb 4-1: 0:2 : does not exist [ 1624.687236][T14264] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1624.821298][ T810] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 1624.880022][ T810] airspy 5-1:0.0: Registered as swradio24 [ 1624.880044][ T810] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1624.916384][ T810] usb 5-1: USB disconnect, device number 19 [ 1625.189210][T14264] usb 4-1: USB disconnect, device number 19 [ 1625.836434][ T810] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1626.095440][T11210] usb 6-1: 1:1: cannot get freq at ep 0x1 [ 1626.338856][ T810] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1626.338936][ T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.338988][ T810] usb 5-1: Product: syz [ 1626.339003][ T810] usb 5-1: Manufacturer: syz [ 1626.339051][ T810] usb 5-1: SerialNumber: syz [ 1626.585998][ T810] usb 5-1: config 0 descriptor?? [ 1628.218992][T16306] udevd[16306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1628.392758][ T810] usb 5-1: Firmware version (0.0) predates our first public release. [ 1628.392785][ T810] usb 5-1: Please update to version 0.2 or newer [ 1628.527690][T11210] usb 6-1: USB disconnect, device number 23 [ 1628.702658][ T810] usb 5-1: USB disconnect, device number 20 [ 1628.841591][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1972'. [ 1628.866015][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 1628.866034][ T36] audit: type=1326 audit(1773397653.275:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1628.866081][ T36] audit: type=1326 audit(1773397653.275:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x7ffc0000 [ 1628.955353][ T36] audit: type=1326 audit(1773397653.365:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d69bacfce code=0x7ffc0000 [ 1628.955408][ T36] audit: type=1326 audit(1773397653.365:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1628.955448][ T36] audit: type=1326 audit(1773397653.365:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1629.011835][ T36] audit: type=1326 audit(1773397653.425:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1629.028272][ T36] audit: type=1326 audit(1773397653.445:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1629.106695][T16356] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1629.106722][T16356] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1629.107419][T16356] vhci_hcd vhci_hcd.0: Device attached [ 1629.197385][ T36] audit: type=1326 audit(1773397653.615:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1629.268857][ T36] audit: type=1326 audit(1773397653.685:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1629.326404][T11210] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1629.348068][ T5804] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1629.370072][ T36] audit: type=1326 audit(1773397653.785:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16352 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d69bec42b code=0x7ffc0000 [ 1629.499241][ T5804] usb 4-1: config 0 has no interfaces? [ 1629.499279][ T5804] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1629.499303][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.536725][T14264] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1629.556303][T11210] usb 6-1: Using ep0 maxpacket: 32 [ 1629.689712][T16360] udevd[16360]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1629.942419][T11210] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 1629.942451][T11210] usb 6-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 1629.942471][T11210] usb 6-1: Product: syz [ 1629.942486][T11210] usb 6-1: Manufacturer: syz [ 1629.942501][T11210] usb 6-1: SerialNumber: syz [ 1630.094213][ T5804] usb 4-1: config 0 descriptor?? [ 1632.179398][T16357] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 1632.179444][T16358] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1632.185059][ T5804] usb 4-1: USB disconnect, device number 20 [ 1632.230415][ T67] vhci_hcd vhci_hcd.3: stop threads [ 1632.236852][ T67] vhci_hcd vhci_hcd.3: release socket [ 1632.264140][T11210] usb 6-1: config 0 descriptor?? [ 1632.280657][ T67] vhci_hcd vhci_hcd.3: disconnect device [ 1632.334052][T11210] usb 6-1: can't set config #0, error -71 [ 1632.426422][T11210] usb 6-1: USB disconnect, device number 24 [ 1637.333862][T14264] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1641.817890][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1982'. [ 1641.858458][ T5806] block nbd1: Receive control failed (result -1) [ 1641.872210][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1641.872249][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1641.872286][ T5806] Tainted: [L]=SOFTLOCKUP [ 1641.872293][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1641.872307][ T5806] Workqueue: hci3 hci_rx_work [ 1641.872499][ T5806] Call Trace: [ 1641.872508][ T5806] [ 1641.872516][ T5806] dump_stack_lvl+0xe8/0x150 [ 1641.872622][ T5806] sysfs_create_dir_ns+0x271/0x2a0 [ 1641.872706][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1641.872822][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1641.872849][ T5806] ? rt_spin_unlock+0x160/0x200 [ 1641.872877][ T5806] kobject_add_internal+0x631/0xd10 [ 1641.872942][ T5806] kobject_add+0x163/0x240 [ 1641.872979][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 1641.873008][ T5806] ? get_device_parent+0x370/0x3a0 [ 1641.873113][ T5806] device_add+0x408/0xb80 [ 1641.873140][ T5806] hci_conn_add_sysfs+0xd5/0x210 [ 1641.873199][ T5806] le_conn_complete_evt+0xf1d/0x1430 [ 1641.873257][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1641.873281][ T5806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1641.873313][ T5806] ? lockdep_hardirqs_on+0x7a/0x110 [ 1641.873393][ T5806] ? skb_pull_data+0xfb/0x200 [ 1641.873468][ T5806] hci_le_conn_complete_evt+0x187/0x470 [ 1641.873498][ T5806] hci_event_packet+0x7af/0x12c0 [ 1641.873534][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1641.873592][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 1641.873620][ T5806] ? rt_spin_unlock+0x14f/0x200 [ 1641.873655][ T5806] ? hci_send_to_monitor+0xe2/0x590 [ 1641.873681][ T5806] hci_rx_work+0x3ee/0x1030 [ 1641.873717][ T5806] ? process_scheduled_works+0xa25/0x1830 [ 1641.873768][ T5806] process_scheduled_works+0xb02/0x1830 [ 1641.873820][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 1641.873852][ T5806] ? assign_work+0x3d5/0x5e0 [ 1641.873883][ T5806] worker_thread+0xa50/0xfc0 [ 1641.873934][ T5806] kthread+0x388/0x470 [ 1641.873966][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 1641.873993][ T5806] ? __pfx_kthread+0x10/0x10 [ 1641.874017][ T5806] ret_from_fork+0x51e/0xb90 [ 1641.874062][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 1641.874089][ T5806] ? __switch_to+0xc7d/0x1450 [ 1641.874128][ T5806] ? __pfx_kthread+0x10/0x10 [ 1641.874151][ T5806] ret_from_fork_asm+0x1a/0x30 [ 1641.874188][ T5806] [ 1641.874259][ T5806] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1641.874297][ T5806] Bluetooth: hci3: failed to register connection device [ 1642.029530][ T5993] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1642.029699][ T5875] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1642.176345][ T5993] usb 1-1: Using ep0 maxpacket: 32 [ 1642.179591][ T5993] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1642.179617][ T5993] usb 1-1: config 0 has no interface number 0 [ 1642.179669][ T5993] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1642.179696][ T5993] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1642.182436][ T5993] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1642.182454][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.182464][ T5993] usb 1-1: Product: syz [ 1642.182471][ T5993] usb 1-1: Manufacturer: syz [ 1642.182479][ T5993] usb 1-1: SerialNumber: syz [ 1642.186520][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 1642.189210][ T5875] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1642.189233][ T5875] usb 6-1: config 0 has no interface number 0 [ 1642.189273][ T5875] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1642.189300][ T5875] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1642.194748][ T5875] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1642.194774][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.194793][ T5875] usb 6-1: Product: syz [ 1642.194806][ T5875] usb 6-1: Manufacturer: syz [ 1642.194821][ T5875] usb 6-1: SerialNumber: syz [ 1642.234391][ T5993] usb 1-1: config 0 descriptor?? [ 1642.240538][ T5875] usb 6-1: config 0 descriptor?? [ 1642.661195][ T5875] appletouch 6-1:0.85: Geyser mode initialized. [ 1642.681052][ T5875] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input19 [ 1642.712084][ T5993] appletouch 1-1:0.85: Geyser mode initialized. [ 1642.766114][ T5993] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input18 [ 1642.953196][ T5993] usb 6-1: USB disconnect, device number 25 [ 1643.031426][ T5875] usb 1-1: USB disconnect, device number 21 [ 1643.191733][ T5993] appletouch 6-1:0.85: input: appletouch disconnected [ 1643.278845][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 1643.346506][ T5875] appletouch 1-1:0.85: input: appletouch disconnected [ 1643.529482][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 1643.529518][T16442] nbd: must specify a device to reconfigure [ 1643.547735][T16444] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1992'. [ 1643.676363][ T5993] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1643.683195][T16447] random: crng reseeded on system resumption [ 1643.696285][T11210] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1643.886468][T11210] usb 3-1: Using ep0 maxpacket: 32 [ 1643.891007][T11210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.891021][T11210] usb 3-1: config 0 has no interfaces? [ 1643.891039][T11210] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1643.891051][T11210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.893850][T11210] usb 3-1: config 0 descriptor?? [ 1643.945497][ T5993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1643.953267][ T5993] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1643.953294][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.953314][ T5993] usb 5-1: Product: syz [ 1643.953329][ T5993] usb 5-1: Manufacturer: syz [ 1643.953342][ T5993] usb 5-1: SerialNumber: syz [ 1644.652229][T16458] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1996'. [ 1645.241787][ T5993] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 1645.384624][ T5993] usb 5-1: USB disconnect, device number 21 [ 1645.934550][T16431] udevd[16431]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1646.003223][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1646.003238][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1646.003725][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1646.003735][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1646.183545][T16514] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1646.776627][ T810] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1646.816403][T11210] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1646.926396][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 1646.927996][ T810] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1646.928012][ T810] usb 1-1: config 0 has no interface number 0 [ 1646.928037][ T810] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1646.928052][ T810] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1646.929802][ T810] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1646.929817][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.929827][ T810] usb 1-1: Product: syz [ 1646.929835][ T810] usb 1-1: Manufacturer: syz [ 1646.929842][ T810] usb 1-1: SerialNumber: syz [ 1646.935847][ T810] usb 1-1: config 0 descriptor?? [ 1646.976386][T11210] usb 5-1: Using ep0 maxpacket: 16 [ 1647.040523][T11210] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.040549][T11210] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1647.070347][T11210] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1647.070377][T11210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.070396][T11210] usb 5-1: Product: syz [ 1647.070409][T11210] usb 5-1: Manufacturer: syz [ 1647.070479][T11210] usb 5-1: SerialNumber: syz [ 1647.393024][T11210] usb 5-1: 0:2 : does not exist [ 1647.446480][ T810] appletouch 1-1:0.85: Geyser mode initialized. [ 1647.449715][ T810] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input20 [ 1647.462839][T11210] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1647.761168][T14964] usb 1-1: USB disconnect, device number 22 [ 1647.781393][T11210] usb 5-1: USB disconnect, device number 22 [ 1647.988255][T14964] appletouch 1-1:0.85: input: appletouch disconnected [ 1648.169818][T16413] udevd[16413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1648.796871][T16538] block nbd3: Device being setup by another task [ 1648.850091][T14964] usb 3-1: USB disconnect, device number 13 [ 1649.500679][T16415] block nbd3: Receive control failed (result -32) [ 1649.504864][T16537] block nbd3: shutting down sockets [ 1658.551147][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 1658.551165][ T36] audit: type=1326 audit(1773397682.965:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16557 comm="syz.5.2008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d69bec799 code=0x0 [ 1658.590513][T16574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1658.726312][ T5804] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1658.726319][ T5993] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1658.762827][T16577] geneve3: entered promiscuous mode [ 1658.762853][T16577] geneve3: entered allmulticast mode [ 1658.876291][ T5993] usb 1-1: Using ep0 maxpacket: 32 [ 1658.879136][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.879166][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.879188][ T5804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1658.879237][ T5804] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1658.879323][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.881037][ T5993] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1658.881062][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.968382][ T5804] usb 3-1: config 0 descriptor?? [ 1658.969513][ T5993] usb 1-1: config 0 descriptor?? [ 1659.188859][ T5993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1659.209990][ T5993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1659.211248][ T5993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1659.211301][ T5993] usb 1-1: media controller created [ 1659.251235][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1659.276649][ T5803] block nbd5: Receive control failed (result -32) [ 1659.296179][T16415] block nbd5: Receive control failed (result -32) [ 1659.301274][T16558] block nbd5: shutting down sockets [ 1659.403843][ T5804] hid_parser_main: 5 callbacks suppressed [ 1659.403897][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.403917][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.403933][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.403948][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.403964][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.403979][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.403994][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.404008][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.404023][ T5804] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1659.623633][T16581] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2013'. [ 1659.665130][ T5804] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1659.786113][ T5804] usb 3-1: USB disconnect, device number 14 [ 1659.943145][T16584] fido_id[16584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1660.130488][T16559] [ 1660.130498][T16559] ====================================================== [ 1660.130505][T16559] WARNING: possible circular locking dependency detected [ 1660.130568][T16559] syzkaller #0 Tainted: G L [ 1660.130580][T16559] ------------------------------------------------------ [ 1660.130587][T16559] syz.0.2007/16559 is trying to acquire lock: [ 1660.130597][T16559] ffffffff8deedda0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1660.130715][T16559] [ 1660.130715][T16559] but task is already holding lock: [ 1660.130721][T16559] ffffffff8f50f6f8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 1660.130801][T16559] [ 1660.130801][T16559] which lock already depends on the new lock. [ 1660.130801][T16559] [ 1660.130808][T16559] [ 1660.130808][T16559] the existing dependency chain (in reverse order) is: [ 1660.130815][T16559] [ 1660.130815][T16559] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 1660.130867][T16559] mutex_lock_nested+0x5a/0x1d0 [ 1660.130887][T16559] kobject_uevent_net_broadcast+0x281/0x560 [ 1660.130905][T16559] kobject_uevent_env+0x55f/0x9e0 [ 1660.130923][T16559] device_add+0x557/0xb80 [ 1660.130940][T16559] device_create+0x269/0x300 [ 1660.130959][T16559] msr_device_create+0x33/0x50 [ 1660.130984][T16559] cpuhp_invoke_callback+0x445/0x860 [ 1660.131021][T16559] cpuhp_thread_fun+0x36b/0x780 [ 1660.131045][T16559] smpboot_thread_fn+0x541/0xa50 [ 1660.131070][T16559] kthread+0x388/0x470 [ 1660.131086][T16559] ret_from_fork+0x51e/0xb90 [ 1660.131109][T16559] ret_from_fork_asm+0x1a/0x30 [ 1660.131125][T16559] [ 1660.131125][T16559] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1660.131149][T16559] cpuhp_thread_fun+0x127/0x780 [ 1660.131174][T16559] smpboot_thread_fn+0x541/0xa50 [ 1660.131199][T16559] kthread+0x388/0x470 [ 1660.131222][T16559] ret_from_fork+0x51e/0xb90 [ 1660.131244][T16559] ret_from_fork_asm+0x1a/0x30 [ 1660.131260][T16559] [ 1660.131260][T16559] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1660.131285][T16559] cpus_read_lock+0x42/0x160 [ 1660.131306][T16559] static_key_slow_inc+0x12/0x30 [ 1660.131371][T16559] setup_udp_tunnel_sock+0x343/0x550 [ 1660.131446][T16559] l2tp_tunnel_register+0xe04/0x14d0 [ 1660.131546][T16559] pppol2tp_connect+0x8b7/0x17c0 [ 1660.131568][T16559] __sys_connect+0x315/0x450 [ 1660.131618][T16559] __x64_sys_connect+0x7a/0x90 [ 1660.131641][T16559] do_syscall_64+0x14d/0xf80 [ 1660.131693][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.131724][T16559] [ 1660.131724][T16559] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1660.131750][T16559] lock_sock_nested+0x3e/0x130 [ 1660.131797][T16559] inet_shutdown+0x6a/0x390 [ 1660.131847][T16559] nbd_mark_nsock_dead+0x2e9/0x560 [ 1660.131911][T16559] recv_work+0x1c9d/0x1dc0 [ 1660.131927][T16559] process_scheduled_works+0xb02/0x1830 [ 1660.131950][T16559] worker_thread+0xa50/0xfc0 [ 1660.131972][T16559] kthread+0x388/0x470 [ 1660.131988][T16559] ret_from_fork+0x51e/0xb90 [ 1660.132011][T16559] ret_from_fork_asm+0x1a/0x30 [ 1660.132026][T16559] [ 1660.132026][T16559] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1660.132051][T16559] mutex_lock_nested+0x5a/0x1d0 [ 1660.132070][T16559] nbd_queue_rq+0x37b/0x1100 [ 1660.132096][T16559] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1660.132166][T16559] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1660.132243][T16559] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1660.132263][T16559] blk_mq_run_hw_queue+0x368/0x520 [ 1660.132278][T16559] blk_mq_dispatch_list+0xd1f/0xe20 [ 1660.132297][T16559] blk_mq_flush_plug_list+0x48d/0x570 [ 1660.132316][T16559] __blk_flush_plug+0x3ed/0x4d0 [ 1660.132382][T16559] __submit_bio+0x28d/0x580 [ 1660.132401][T16559] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1660.132419][T16559] block_read_full_folio+0x7b7/0x830 [ 1660.132501][T16559] filemap_read_folio+0x137/0x3b0 [ 1660.132562][T16559] do_read_cache_folio+0x2bf/0x560 [ 1660.132603][T16559] read_part_sector+0xb8/0x2b0 [ 1660.132621][T16559] adfspart_check_ICS+0xa5/0xa40 [ 1660.132640][T16559] bdev_disk_changed+0x7ba/0x1550 [ 1660.132657][T16559] blkdev_get_whole+0x2e5/0x480 [ 1660.132708][T16559] bdev_open+0x31e/0xcc0 [ 1660.132724][T16559] blkdev_open+0x485/0x620 [ 1660.132745][T16559] do_dentry_open+0x83d/0x13e0 [ 1660.132795][T16559] vfs_open+0x3b/0x350 [ 1660.132812][T16559] path_openat+0x2e43/0x38a0 [ 1660.132862][T16559] do_file_open+0x23e/0x4a0 [ 1660.132885][T16559] do_sys_openat2+0x113/0x200 [ 1660.132904][T16559] __x64_sys_openat+0x138/0x170 [ 1660.132924][T16559] do_syscall_64+0x14d/0xf80 [ 1660.132948][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.132966][T16559] [ 1660.132966][T16559] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1660.132991][T16559] mutex_lock_nested+0x5a/0x1d0 [ 1660.133010][T16559] nbd_queue_rq+0xc6/0x1100 [ 1660.133035][T16559] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 1660.133053][T16559] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 1660.133074][T16559] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 1660.133094][T16559] blk_mq_run_hw_queue+0x368/0x520 [ 1660.133111][T16559] blk_mq_dispatch_list+0xd1f/0xe20 [ 1660.133130][T16559] blk_mq_flush_plug_list+0x48d/0x570 [ 1660.133149][T16559] __blk_flush_plug+0x3ed/0x4d0 [ 1660.133168][T16559] __submit_bio+0x28d/0x580 [ 1660.133187][T16559] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1660.133205][T16559] block_read_full_folio+0x7b7/0x830 [ 1660.133230][T16559] filemap_read_folio+0x137/0x3b0 [ 1660.133255][T16559] do_read_cache_folio+0x2bf/0x560 [ 1660.133270][T16559] read_part_sector+0xb8/0x2b0 [ 1660.133287][T16559] adfspart_check_ICS+0xa5/0xa40 [ 1660.133306][T16559] bdev_disk_changed+0x7ba/0x1550 [ 1660.133323][T16559] blkdev_get_whole+0x2e5/0x480 [ 1660.133341][T16559] bdev_open+0x31e/0xcc0 [ 1660.133358][T16559] blkdev_open+0x485/0x620 [ 1660.133378][T16559] do_dentry_open+0x83d/0x13e0 [ 1660.133396][T16559] vfs_open+0x3b/0x350 [ 1660.133414][T16559] path_openat+0x2e43/0x38a0 [ 1660.133438][T16559] do_file_open+0x23e/0x4a0 [ 1660.133461][T16559] do_sys_openat2+0x113/0x200 [ 1660.133481][T16559] __x64_sys_openat+0x138/0x170 [ 1660.133501][T16559] do_syscall_64+0x14d/0xf80 [ 1660.133525][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.133542][T16559] [ 1660.133542][T16559] -> #3 (set->srcu){.+.+}-{0:0}: [ 1660.133566][T16559] __synchronize_srcu+0xca/0x3e0 [ 1660.133602][T16559] elevator_switch+0x1e8/0x7a0 [ 1660.133619][T16559] elevator_change+0x2cc/0x450 [ 1660.133637][T16559] elevator_set_default+0x36c/0x430 [ 1660.133654][T16559] blk_register_queue+0x366/0x430 [ 1660.133674][T16559] __add_disk+0x677/0xd50 [ 1660.133694][T16559] add_disk_fwnode+0xfb/0x480 [ 1660.133716][T16559] nbd_dev_add+0x72c/0xb50 [ 1660.133738][T16559] nbd_init+0x168/0x1f0 [ 1660.133849][T16559] do_one_initcall+0x250/0x8d0 [ 1660.133873][T16559] do_initcall_level+0x104/0x190 [ 1660.133937][T16559] do_initcalls+0x59/0xa0 [ 1660.133952][T16559] kernel_init_freeable+0x2a6/0x3e0 [ 1660.133969][T16559] kernel_init+0x1d/0x1d0 [ 1660.133988][T16559] ret_from_fork+0x51e/0xb90 [ 1660.134010][T16559] ret_from_fork_asm+0x1a/0x30 [ 1660.134026][T16559] [ 1660.134026][T16559] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1660.134051][T16559] mutex_lock_nested+0x5a/0x1d0 [ 1660.134070][T16559] elevator_change+0x1b3/0x450 [ 1660.134088][T16559] elevator_set_none+0xb5/0x140 [ 1660.134105][T16559] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 1660.134127][T16559] nbd_start_device+0x17f/0xb20 [ 1660.134152][T16559] nbd_ioctl+0x57b/0xe40 [ 1660.134167][T16559] blkdev_ioctl+0x5e6/0x750 [ 1660.134186][T16559] __se_sys_ioctl+0xff/0x170 [ 1660.134243][T16559] do_syscall_64+0x14d/0xf80 [ 1660.134268][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.134285][T16559] [ 1660.134285][T16559] -> #1 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1660.134323][T16559] blk_alloc_queue+0x54e/0x690 [ 1660.134339][T16559] __blk_mq_alloc_disk+0x197/0x390 [ 1660.134359][T16559] nbd_dev_add+0x499/0xb50 [ 1660.134383][T16559] nbd_init+0x168/0x1f0 [ 1660.134397][T16559] do_one_initcall+0x250/0x8d0 [ 1660.134422][T16559] do_initcall_level+0x104/0x190 [ 1660.134439][T16559] do_initcalls+0x59/0xa0 [ 1660.134455][T16559] kernel_init_freeable+0x2a6/0x3e0 [ 1660.134473][T16559] kernel_init+0x1d/0x1d0 [ 1660.134489][T16559] ret_from_fork+0x51e/0xb90 [ 1660.134512][T16559] ret_from_fork_asm+0x1a/0x30 [ 1660.134528][T16559] [ 1660.134528][T16559] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1660.134552][T16559] __lock_acquire+0x15a5/0x2cf0 [ 1660.134568][T16559] lock_acquire+0xf0/0x2e0 [ 1660.134583][T16559] fs_reclaim_acquire+0x71/0x100 [ 1660.134626][T16559] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1660.134651][T16559] __alloc_skb+0x1d0/0x7d0 [ 1660.134674][T16559] alloc_uevent_skb+0x7d/0x230 [ 1660.134693][T16559] kobject_uevent_net_broadcast+0x2fd/0x560 [ 1660.134712][T16559] kobject_uevent_env+0x55f/0x9e0 [ 1660.134730][T16559] drm_sysfs_lease_event+0x111/0x150 [ 1660.134813][T16559] drm_lease_destroy+0x2f9/0x400 [ 1660.134870][T16559] drm_master_put+0x10a/0x210 [ 1660.134913][T16559] drm_master_release+0x35e/0x560 [ 1660.134930][T16559] drm_file_free+0x783/0x9f0 [ 1660.134977][T16559] drm_release+0x2f4/0x400 [ 1660.135000][T16559] __fput+0x461/0xa90 [ 1660.135044][T16559] task_work_run+0x1d9/0x270 [ 1660.135063][T16559] exit_to_user_mode_loop+0xed/0x480 [ 1660.135098][T16559] do_syscall_64+0x32d/0xf80 [ 1660.135122][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.135139][T16559] [ 1660.135139][T16559] other info that might help us debug this: [ 1660.135139][T16559] [ 1660.135146][T16559] Chain exists of: [ 1660.135146][T16559] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 1660.135146][T16559] [ 1660.135175][T16559] Possible unsafe locking scenario: [ 1660.135175][T16559] [ 1660.135182][T16559] CPU0 CPU1 [ 1660.135187][T16559] ---- ---- [ 1660.135199][T16559] lock(uevent_sock_mutex); [ 1660.135210][T16559] lock(cpuhp_state-up); [ 1660.135228][T16559] lock(uevent_sock_mutex); [ 1660.135241][T16559] lock(fs_reclaim); [ 1660.135251][T16559] [ 1660.135251][T16559] *** DEADLOCK *** [ 1660.135251][T16559] [ 1660.135256][T16559] 2 locks held by syz.0.2007/16559: [ 1660.135265][T16559] #0: ffff888025bd6158 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_release+0x74/0x560 [ 1660.135307][T16559] #1: ffffffff8f50f6f8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 1660.135353][T16559] [ 1660.135353][T16559] stack backtrace: [ 1660.135366][T16559] CPU: 1 UID: 0 PID: 16559 Comm: syz.0.2007 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1660.135393][T16559] Tainted: [L]=SOFTLOCKUP [ 1660.135400][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1660.135411][T16559] Call Trace: [ 1660.135418][T16559] [ 1660.135426][T16559] dump_stack_lvl+0xe8/0x150 [ 1660.135453][T16559] print_circular_bug+0x2e1/0x300 [ 1660.135477][T16559] check_noncircular+0x12e/0x150 [ 1660.135501][T16559] __lock_acquire+0x15a5/0x2cf0 [ 1660.135525][T16559] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1660.135552][T16559] ? lockdep_hardirqs_on+0x7a/0x110 [ 1660.135580][T16559] lock_acquire+0xf0/0x2e0 [ 1660.135596][T16559] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1660.135625][T16559] fs_reclaim_acquire+0x71/0x100 [ 1660.135642][T16559] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1660.135669][T16559] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 1660.135695][T16559] ? __alloc_skb+0x1d0/0x7d0 [ 1660.135719][T16559] ? lockdep_hardirqs_on+0x7a/0x110 [ 1660.135747][T16559] __alloc_skb+0x1d0/0x7d0 [ 1660.135773][T16559] alloc_uevent_skb+0x7d/0x230 [ 1660.135796][T16559] kobject_uevent_net_broadcast+0x2fd/0x560 [ 1660.135820][T16559] kobject_uevent_env+0x55f/0x9e0 [ 1660.135843][T16559] drm_sysfs_lease_event+0x111/0x150 [ 1660.135869][T16559] ? __pfx_drm_sysfs_lease_event+0x10/0x10 [ 1660.135899][T16559] drm_lease_destroy+0x2f9/0x400 [ 1660.135926][T16559] drm_master_put+0x10a/0x210 [ 1660.135946][T16559] drm_master_release+0x35e/0x560 [ 1660.135968][T16559] drm_file_free+0x783/0x9f0 [ 1660.135994][T16559] ? drm_release+0x2ec/0x400 [ 1660.136021][T16559] drm_release+0x2f4/0x400 [ 1660.136047][T16559] ? __pfx_drm_release+0x10/0x10 [ 1660.136071][T16559] __fput+0x461/0xa90 [ 1660.136098][T16559] task_work_run+0x1d9/0x270 [ 1660.136119][T16559] ? __pfx_task_work_run+0x10/0x10 [ 1660.136143][T16559] exit_to_user_mode_loop+0xed/0x480 [ 1660.136169][T16559] ? rcu_is_watching+0x15/0xb0 [ 1660.136190][T16559] do_syscall_64+0x32d/0xf80 [ 1660.136212][T16559] ? trace_irq_disable+0x3b/0x150 [ 1660.136248][T16559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.136267][T16559] ? clear_bhb_loop+0x40/0x90 [ 1660.136287][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.136305][T16559] RIP: 0033:0x7efef4fac799 [ 1660.136328][T16559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1660.136346][T16559] RSP: 002b:00007ffdbbfb5a08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1660.136445][T16559] RAX: 0000000000000000 RBX: 00007ffdbbfb5af0 RCX: 00007efef4fac799 [ 1660.136458][T16559] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1660.136470][T16559] RBP: 0000000000194d57 R08: 0000000000000001 R09: 0000000000000000 [ 1660.136481][T16559] R10: 0000001b2db20000 R11: 0000000000000246 R12: 00007ffdbbfb5b30 [ 1660.136495][T16559] R13: 00007efef5225fac R14: 000000000019549d R15: 00007efef5225fa0 [ 1660.136516][T16559] [ 1660.156361][ T5804] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1660.168380][ T5993] az6027: usb out operation failed. (-71) [ 1660.168396][ T5993] stb0899_attach: Driver disabled by Kconfig [ 1660.168432][ T5993] az6027: no front-end attached [ 1660.168432][ T5993] [ 1660.168920][ T5993] az6027: usb out operation failed. (-71) [ 1660.169024][ T5993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1660.308385][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1660.308419][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1660.308445][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1660.308466][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1660.308501][ T5804] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1660.308523][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.424763][ T5993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 1660.425640][ T5804] usb 4-1: config 0 descriptor?? [ 1660.426011][ T5993] dvb-usb: schedule remote query interval to 400 msecs. [ 1660.426026][ T5993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1660.987441][ T5993] usb 1-1: USB disconnect, device number 23 [ 1661.463337][ T5804] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1661.490908][ T5993] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1662.592800][ T5993] usb 4-1: USB disconnect, device number 21