last executing test programs: 2m4.212642169s ago: executing program 0 (id=655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=@allocspi={0xf8, 0x16, 0x10, 0x70b52d, 0x25dfdbfe, {{{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x87}, {@in6=@empty, 0x4d3, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xffffffffffffffc0, 0x3, 0xb, 0x7fffffffffffffff, 0x8000, 0x1, 0x94, 0x1}, {0x7fff, 0x4, 0x9, 0x4ba15d0a}, {0x200, 0x401, 0x3}, 0x70bd25, 0x0, 0x2, 0x0, 0x20, 0x3a}, 0x13b, 0x8}}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m4.005290546s ago: executing program 0 (id=658): socket$inet6(0xa, 0x80802, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) 2m3.889761413s ago: executing program 0 (id=660): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) 2m3.70952235s ago: executing program 0 (id=664): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 2m2.76991168s ago: executing program 0 (id=681): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e8ddc20f905ffffebfd010203010902"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x80000020) 2m2.568294685s ago: executing program 0 (id=682): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000000c0)) 2m2.276276677s ago: executing program 32 (id=682): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000000c0)) 1m16.655871857s ago: executing program 2 (id=1156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 1m16.558754265s ago: executing program 2 (id=1158): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1m16.48945252s ago: executing program 2 (id=1159): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0xfff, 0x44b, 0x8009}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1m16.316641262s ago: executing program 2 (id=1162): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 1m15.412249702s ago: executing program 2 (id=1181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) 1m14.955591227s ago: executing program 2 (id=1187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0x57a}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 1m14.504304835s ago: executing program 33 (id=1187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000005c0)={0x79, 0x0, 0x57a}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 5.467481395s ago: executing program 5 (id=1833): r0 = syz_io_uring_setup(0x223d, &(0x7f0000000100)={0x0, 0xb050, 0x100, 0x2, 0x5cc}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x30, 0x21, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 5.358972556s ago: executing program 5 (id=1834): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x6, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x100800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x6, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xfd, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) 5.148327237s ago: executing program 5 (id=1836): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 4.923788881s ago: executing program 6 (id=1838): r0 = epoll_create1(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.683388503s ago: executing program 6 (id=1839): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 4.381045555s ago: executing program 6 (id=1840): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xc, @loopback, 0x4001}, 0x1c) 4.211793762s ago: executing program 6 (id=1841): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3.853292535s ago: executing program 3 (id=1843): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x300, 0x2, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r4, 0x0, 0x2000fb) 3.64613544s ago: executing program 3 (id=1845): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x0, 0x1, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.463222542s ago: executing program 4 (id=1846): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) unshare(0x2040400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 3.188595572s ago: executing program 6 (id=1848): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x32, 0x0, 0x800800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}}, 0x0) 3.150346897s ago: executing program 4 (id=1849): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 2.975957444s ago: executing program 6 (id=1850): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x0) 2.855923116s ago: executing program 1 (id=1851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 2.838312964s ago: executing program 4 (id=1852): inotify_init1(0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x10, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 2.557232609s ago: executing program 4 (id=1853): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x45}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.31192239s ago: executing program 5 (id=1854): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 2.246088298s ago: executing program 3 (id=1855): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 2.097794329s ago: executing program 1 (id=1856): unshare(0x26020480) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) dup3(r1, r0, 0x80000) ppoll(&(0x7f0000000000)=[{r0, 0x8224}], 0x1, 0x0, 0x0, 0x0) 1.916980823s ago: executing program 1 (id=1857): syz_clone3(&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000600)={[0x5, 0x7, 0x3, 0x8, 0x1, 0x5, 0x0, 0x5, 0x10, 0x8, 0x0, 0x7e6dec74, 0x4006, 0x7fe, 0x8, 0x10001, 0x95c8, 0x1000, 0xf12, 0x1, 0x5, 0x8, 0x5, 0x6, 0x2, 0xffb0, 0x261, 0xc000, 0x0, 0xfffffff2, 0x80000001, 0x7, 0x10001, 0x6, 0x6, 0x5, 0x6, 0xf6, 0x1, 0x8, 0x9, 0x5, 0x3, 0xffffffff, 0x9, 0xf33, 0x4, 0x80, 0xffffffff, 0x5, 0x10, 0xe, 0xffffffff, 0x100, 0x8, 0x1, 0x7816, 0x3, 0xfc8, 0x9, 0x7, 0x4, 0x1, 0x8, 0x7b, 0x3, 0x2, 0x2, 0x7, 0x8003, 0xb, 0x7fff, 0x3, 0xfff, 0x1, 0x5, 0x3, 0x4, 0x0, 0x49c, 0x9, 0x2, 0x5, 0x3, 0x0, 0x80000000, 0x2, 0x2, 0x75f, 0x7fffffff, 0x200, 0xf, 0x28, 0x401, 0xffffffff, 0xe, 0x7, 0x4, 0x0, 0x9, 0x0, 0x6, 0xa, 0x21fb, 0x8, 0x8, 0x400, 0x7, 0x5, 0x4, 0x5, 0x6, 0x9, 0x401, 0x5, 0x0, 0x7, 0x8, 0x7ff, 0x6, 0x1, 0x6, 0x5, 0x40, 0x18000000, 0x7, 0xfffffffa, 0x9, 0xffff, 0x7fff, 0x1, 0x3, 0x357c, 0x1, 0xf0000000, 0x10, 0x0, 0x7, 0x4, 0x1, 0x4, 0x3, 0x8, 0x3, 0x4, 0x5, 0x0, 0xa, 0x6, 0x9, 0x3, 0x32c, 0x7, 0xb, 0x7, 0x55, 0x3b7, 0x1, 0xe6b3, 0x6, 0x2, 0x6, 0x6, 0x6, 0x6, 0x3, 0xffffff80, 0x401, 0x5, 0x4, 0x203, 0x1, 0xffffffff, 0x5, 0xfff, 0x9, 0xfffffc00, 0xc862, 0x2, 0x4, 0x7, 0x897a, 0x7, 0x6, 0x4a, 0x1, 0x94f, 0x7, 0x80, 0x5d, 0xfffffff7, 0xffff6b4a, 0x3, 0x8, 0x1000, 0x9, 0xd8, 0x8000, 0x5, 0xffff, 0x6, 0x4, 0x3, 0x1000001, 0x2, 0xffffffff, 0x7, 0xfffffffc, 0x1fc, 0x1, 0x5, 0x10, 0x4, 0x8001, 0x401, 0x10001, 0xc51, 0x8, 0x2, 0x1, 0x1, 0x2, 0x1000, 0x2, 0x0, 0xfff, 0x722, 0x400, 0x7, 0x269e, 0xd, 0x80, 0x9668, 0xd, 0x6, 0x1, 0x5, 0x4, 0x0, 0x80000001, 0x6da, 0xe70, 0x200, 0x3, 0x5a9, 0x3, 0x4, 0x6, 0x2771, 0xbf, 0x9, 0x10, 0x6, 0x2, 0x0, 0x66, 0x2, 0x9, 0x8, 0x2, 0x9, 0x1, 0xfffffff9, 0x2, 0x80000000, 0x1, 0x81, 0x1, 0x1, 0x6, 0x1085, 0xb, 0x56bf, 0x2, 0x5, 0x2, 0x5, 0x8e, 0x782, 0x4, 0x7, 0x6, 0x0, 0x2, 0x9, 0x3, 0x6d, 0x10000, 0xbb7, 0x6, 0xb, 0x1, 0xe, 0x1, 0x8, 0x401, 0xffffffff, 0xff, 0x2c3, 0x7, 0x93e, 0x0, 0x80000001, 0x5, 0x6dff, 0x3, 0xfff, 0x8, 0x1, 0x3, 0x4, 0x8, 0x2, 0x80, 0x0, 0x6, 0x9, 0x6, 0x4, 0x2, 0x2, 0x2, 0x2, 0x4, 0x1000, 0x0, 0x7484, 0x0, 0x227bac07, 0x2, 0x3, 0x9, 0x2, 0x0, 0x80, 0x2, 0x4, 0x5f12, 0x5, 0x4, 0xffffffd8, 0x9, 0x1, 0x4, 0x4, 0x94, 0x1003, 0x200, 0x18a58e18, 0x8001, 0x8b, 0x6, 0x2, 0x5, 0x8, 0x2, 0x6, 0x681, 0x8, 0x10000, 0x4, 0x1b04, 0xfffffffa, 0x9, 0x7, 0xd, 0x3, 0xfffff1a4, 0x0, 0x4, 0x8, 0x375, 0xe, 0x0, 0x2, 0x5, 0x7fff, 0x2000005, 0x1, 0x0, 0xb, 0x8, 0x7, 0x1, 0xffff, 0xdb, 0xfffff001, 0x1, 0xb, 0x10, 0xf, 0x69c, 0x11001, 0x6, 0xdd5f, 0x40, 0x81, 0xb729, 0xa6, 0x8, 0x1ff, 0x9, 0x9, 0x2e8def05, 0x800, 0x2, 0x6, 0x5, 0x6, 0x8, 0x1, 0x5, 0x7, 0x3, 0x2, 0xa6e, 0x9, 0x76, 0x0, 0x1ff, 0xa3c, 0x6, 0x8, 0x7, 0x1, 0x0, 0xffff5e33, 0x9, 0x6, 0x0, 0x11, 0x1, 0x9c, 0xa7c1, 0x7, 0x54, 0xc, 0x80000001, 0xb25f, 0x4, 0x2, 0x6, 0x5, 0x9, 0x7fffffff, 0x3, 0x9, 0x1ff, 0x401, 0x6, 0xbefa, 0x6, 0x7, 0x2, 0x3, 0x4, 0x7, 0x2bb5, 0x712, 0x8, 0x10000, 0x2, 0x8000, 0xf, 0xe1, 0x800000, 0x6, 0x4, 0x4, 0xf, 0xff, 0x59c, 0x37, 0x7ff, 0xd8000000, 0x3, 0x9, 0x9893, 0x101, 0x3ff, 0x1, 0xfffffff8, 0x6, 0x40000, 0x9, 0x20, 0x1, 0xb, 0x3, 0x10, 0x8, 0x9, 0x7d0, 0x7, 0x1, 0x7, 0x0, 0x8, 0x6, 0x72, 0xdf8, 0x1, 0x101, 0xa, 0x9, 0x1, 0x1, 0x1ff, 0xfff, 0xc, 0x6f5, 0xe2f, 0x0, 0x8, 0x80, 0x101, 0x200, 0x1000, 0x3, 0x3, 0x7, 0x6, 0x9, 0xe, 0x3, 0x10, 0x3, 0x10000, 0x4, 0x7, 0x9, 0x400, 0x7, 0x6, 0x2, 0xd, 0xe0d3, 0x261, 0x3, 0x1, 0x1000, 0x4, 0x200, 0x384, 0x8, 0x80000001, 0x7, 0x4, 0x7, 0x2, 0x0, 0x5, 0x0, 0x3, 0x10000, 0x9, 0x7, 0x4, 0x2, 0x0, 0x2, 0x97fe, 0x200, 0x6, 0x9, 0x0, 0x100, 0x8000, 0xfad2, 0xa, 0xffffe9f9, 0xc000, 0x8b, 0x6, 0x9, 0x31fb000, 0x3ff, 0xd, 0x9, 0x8001, 0x8, 0x7ff, 0x8, 0x1, 0x5, 0x3, 0x7, 0x200, 0x7, 0x10, 0x4, 0xc, 0x3, 0x80, 0x0, 0x3, 0x4, 0x1, 0x1, 0x2, 0x5, 0x8000, 0x8, 0x0, 0x20dc68, 0x9, 0x3ff, 0x10, 0x9f, 0x100, 0xfffffff9, 0x8, 0x2, 0x80, 0xd, 0x1ff, 0xb5, 0x3, 0x17280000, 0x8, 0xfffff901, 0x9, 0x10001, 0x7, 0x0, 0xf, 0x4, 0x6, 0x5, 0x6, 0x5, 0x80000001, 0x2, 0x401, 0xb, 0x4, 0x3, 0x6, 0x7fffffff, 0x5, 0x8, 0x8, 0x5, 0x5, 0x200, 0x5c, 0x5, 0x85, 0x9, 0x35f7cd71, 0x1, 0x52b3, 0x800, 0x8, 0xfffffffd, 0x1, 0x5, 0x2, 0x6, 0x9, 0xffffff20, 0x10000, 0x3386, 0x0, 0x80000001, 0x0, 0x9, 0x0, 0x0, 0x7fff, 0x70a8546, 0x5, 0xfff, 0x0, 0x1ff, 0x95, 0x8001, 0x7, 0x4, 0x1, 0x81, 0x1, 0x1, 0x2, 0x3ff, 0x6, 0xf3, 0x8, 0x8, 0x8, 0xffff, 0xb, 0x10, 0x3, 0x8, 0x0, 0xfff, 0x8, 0x81, 0x8000007, 0x5, 0x8, 0x8, 0x4, 0xbe, 0x4, 0x8, 0xffffffff, 0x2, 0x5, 0x4, 0x9, 0x401, 0x1, 0x8000, 0x8, 0xf, 0x3ff, 0x7, 0x4, 0x200, 0xaf6, 0x9, 0x3, 0x5, 0x726, 0x2, 0x1, 0x9, 0x4, 0x8001, 0x8000, 0x2, 0x3, 0x7, 0x7, 0x6, 0x3698, 0x3, 0x10000, 0xfffffffc, 0xfffffff2, 0x8, 0x401, 0x0, 0x4769c1aa, 0x64, 0x9, 0x4f, 0x9, 0x7, 0xfffffffc, 0x4, 0x5, 0x4, 0x9, 0x80000001, 0x1, 0x2, 0x629, 0x5, 0x4, 0x8, 0x7fe020, 0x0, 0x0, 0x1, 0x2, 0x3, 0xfffffff7, 0x7, 0x2, 0x6, 0x9, 0xa48, 0xffff8000, 0x97c1, 0x8, 0x6, 0x1, 0x10000, 0xb, 0x1, 0xffff, 0x68c, 0x7, 0x9, 0x2, 0x40, 0x81, 0x1ff, 0x8, 0x4, 0x7fff, 0xb01d79c, 0x10001, 0xfff, 0x49a, 0xffffdf98, 0x2, 0x5, 0x3, 0x10000, 0x7, 0x33, 0x6, 0xfff, 0x5b9, 0x1ff, 0x1, 0x6, 0x8, 0x2, 0x800, 0x0, 0x6, 0x8, 0x9, 0x1, 0x3, 0x4, 0xfffffffa, 0x8, 0x7, 0x1000, 0x9, 0x0, 0x2b0, 0x3, 0xc, 0x1, 0x7fffffff, 0x80000000, 0xc7ad, 0x1000, 0x1c20, 0x8, 0xfffffeff, 0x800, 0x4, 0x6, 0x0, 0x6, 0xd1, 0x7, 0x4, 0x93, 0x7ff, 0x8, 0x8, 0x1, 0x3, 0x6, 0x7, 0xd3e, 0x4, 0x80000000, 0x1000, 0x6, 0x1, 0x1, 0x7, 0x6, 0xd, 0x6, 0x4, 0x800, 0x800, 0x3, 0x2c4, 0xce7, 0x1c, 0x1, 0x1, 0xe, 0x3, 0x4b1, 0xc97, 0x51b, 0x8, 0x3, 0x99af, 0x6, 0xbe1, 0x1, 0x3, 0xf90b, 0x0, 0x8, 0x80, 0x71, 0x3, 0x3, 0x7, 0x3, 0x5, 0x3, 0x80, 0x4710, 0x5e4, 0x2, 0x3, 0xfc, 0x864, 0x9, 0x1, 0x4, 0x0, 0x0, 0x0, 0x4, 0x95a, 0xeca, 0x0, 0x80, 0x8ed, 0x1, 0x7, 0x2, 0x9, 0x1000, 0x8001, 0x1, 0x7ff, 0x3, 0x1, 0x96, 0x3, 0x2, 0x5, 0x3145, 0x8, 0x4, 0x34, 0x6, 0x9, 0x0, 0x1, 0x0, 0x100, 0x4, 0x7, 0x595, 0x401, 0x1, 0xff, 0x5, 0x9, 0xf1d, 0x4, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x5, 0x8000, 0x5, 0x9, 0x2b9, 0x101, 0x7, 0x3d1, 0x1c0, 0x2496, 0x5, 0x1, 0xb, 0x1, 0x9, 0x4, 0x8, 0x2, 0x9, 0x1, 0x5, 0x169, 0xffffbebd, 0x8, 0x7ff, 0x2, 0x9, 0xffffff2e, 0x8, 0x5, 0x6, 0x9, 0x8, 0x8, 0x0, 0xeca1, 0x100, 0x4, 0x3, 0x5, 0x10, 0x9, 0x6, 0x2, 0x8, 0x6, 0xf048, 0x100, 0xfffff000, 0x5, 0x1, 0x9, 0xf9f, 0x9, 0x3, 0x9, 0x409, 0x2, 0x1798, 0x2, 0x1000, 0x0, 0x10, 0x803, 0x2, 0x0, 0x5]}) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r0 = msgget$private(0x0, 0x540) msgsnd(r0, &(0x7f0000000280)=ANY=[], 0x402, 0x0) 1.732005501s ago: executing program 5 (id=1858): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.483085777s ago: executing program 1 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.31329768s ago: executing program 5 (id=1860): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x1906) 1.171987423s ago: executing program 3 (id=1861): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 1.152569312s ago: executing program 4 (id=1862): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r3, r3], &(0x7f0000000040)=[0x0]}) 932.175537ms ago: executing program 4 (id=1863): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 844.541551ms ago: executing program 1 (id=1864): r0 = syz_io_uring_setup(0xa4f, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 487.553006ms ago: executing program 3 (id=1865): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000000)="3079070aeccbb4c5") 163.955046ms ago: executing program 1 (id=1866): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xe89}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @sint={0xc000000, 0x4}}]}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) 0s ago: executing program 3 (id=1867): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) kernel console output (not intermixed with test programs): dProduct=90a3, bcdDevice=1e.eb [ 166.176076][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.199913][ T8108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.206645][ T8135] sctp: [Deprecated]: syz.4.826 (pid 8135) Use of int in max_burst socket option deprecated. [ 166.206645][ T8135] Use struct sctp_assoc_value instead [ 166.305774][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'. [ 166.531649][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.580605][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.622474][ T6367] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input30 [ 166.764947][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.790567][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.958877][ T8155] pim6reg1: entered promiscuous mode [ 167.080126][ T6367] usb 4-1: USB disconnect, device number 14 [ 167.086413][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.086464][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.665249][ T8171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.806623][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.423585][ T5882] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 168.524414][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.611345][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.640499][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.660664][ T5882] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 168.680132][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.703034][ T5882] usb 2-1: config 0 descriptor?? [ 168.823671][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 168.854757][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.010888][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 169.053561][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 169.083169][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.125749][ T5882] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 169.126490][ T10] usb 5-1: config 0 descriptor?? [ 169.163647][ T5882] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 169.164294][ T8195] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 169.178430][ T5882] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 169.206783][ T5882] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 169.231681][ T5882] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 169.260339][ T5882] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 169.732392][ T10] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 169.757573][ T10] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 169.772716][ T5882] playstation 0003:054C:0DF2.001D: Failed to retrieve feature with reportID 5: -71 [ 169.784133][ T10] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 169.790965][ T10] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 169.823595][ T5882] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense calibration info: -71 [ 169.830737][ T10] elan 0003:04F3:0755.001E: unknown main item tag 0x0 [ 169.873010][ T5882] playstation 0003:054C:0DF2.001D: Failed to get calibration data from DualSense [ 169.884908][ T10] elan 0003:04F3:0755.001E: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 169.889888][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.936816][ T5882] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 169.969735][ T10] usb 5-1: USB disconnect, device number 15 [ 169.970577][ T5882] playstation 0003:054C:0DF2.001D: probe with driver playstation failed with error -71 [ 170.071871][ T5882] usb 2-1: USB disconnect, device number 19 [ 170.087325][ T8223] fido_id[8223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 170.129565][ T8220] kvm: apic: phys broadcast and lowest prio [ 170.136000][ T8220] kvm: apic: phys broadcast and lowest prio [ 170.294774][ T798] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 170.480399][ T798] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 170.505368][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.513412][ T798] usb 3-1: Product: syz [ 170.543574][ T798] usb 3-1: Manufacturer: syz [ 170.559759][ T798] usb 3-1: SerialNumber: syz [ 170.764061][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 170.861037][ T798] rtl8150 3-1:1.0: couldn't reset the device [ 170.874056][ T798] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 170.899138][ T798] usb 3-1: USB disconnect, device number 20 [ 170.938526][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.295046][ T8261] binder: 8259:8261 ioctl 4018620d 0 returned -22 [ 171.574476][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.119489][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.605588][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.086184][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.107683][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.168854][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.267813][ T8336] netlink: 'syz.3.890': attribute type 13 has an invalid length. [ 173.809936][ T8357] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.898'. [ 174.209066][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.486026][ T8380] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 174.618828][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.252899][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.655483][ T8411] input: syz1 as /devices/virtual/input/input31 [ 175.691331][ T8413] netlink: 'syz.2.918': attribute type 13 has an invalid length. [ 175.719249][ T8415] input: syz0 as /devices/virtual/input/input32 [ 176.026722][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.297895][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.513914][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.603795][ T5825] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 176.780065][ T5825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.814580][ T5825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.843280][ T5825] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 176.858454][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.023526][ T5825] usb 3-1: SerialNumber: syz [ 177.286095][ T5825] usb 3-1: 0:2 : does not exist [ 177.324409][ T5825] usb 3-1: USB disconnect, device number 21 [ 177.329730][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.427434][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.642358][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 177.654765][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.686348][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 177.724216][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.734248][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 177.804333][ T8467] binder: 8466:8467 ioctl c0306201 800003c0 returned -14 [ 178.370610][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.503580][ T5882] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 178.673528][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 178.694640][ T5882] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.702762][ T5882] usb 3-1: config 0 has no interface number 0 [ 178.731955][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 178.755818][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.778049][ T5882] usb 3-1: Product: syz [ 178.782263][ T5882] usb 3-1: Manufacturer: syz [ 178.792247][ T5882] usb 3-1: SerialNumber: syz [ 178.813163][ T5882] usb 3-1: config 0 descriptor?? [ 178.883752][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.033640][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 179.046601][ T5825] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.051256][ T5882] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 179.059344][ T5825] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.090731][ T5882] usb 3-1: USB disconnect, device number 22 [ 179.103837][ T5825] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 179.132103][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 179.163649][ T5825] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 179.197399][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.218876][ T5825] usb 6-1: config 0 descriptor?? [ 179.409567][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.961216][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 179.990110][ T24] usb 6-1: USB disconnect, device number 2 [ 180.035967][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 180.065008][ T5882] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 180.113856][ T5882] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.455864][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.685112][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.223049][ T8565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 181.229842][ T8565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.242800][ T8565] vhci_hcd vhci_hcd.0: Device attached [ 181.320427][ T8567] usbip_core: unknown command [ 181.326326][ T8567] vhci_hcd: unknown pdu 4244635647 [ 181.332746][ T8567] usbip_core: unknown command [ 181.345840][ T6492] vhci_hcd vhci_hcd.4: stop threads [ 181.363152][ T6492] vhci_hcd vhci_hcd.4: release socket [ 181.374070][ T6492] vhci_hcd vhci_hcd.4: disconnect device [ 181.423778][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 181.483907][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.531804][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.845244][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.569645][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.621617][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'. [ 183.723668][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.766182][ T8624] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 183.946612][ T798] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 184.134925][ T798] usb 3-1: Using ep0 maxpacket: 32 [ 184.146690][ T798] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 184.168985][ T798] usb 3-1: config 0 has no interface number 0 [ 184.176697][ T798] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.211915][ T798] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 184.247751][ T798] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 184.303240][ T798] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 184.319101][ T798] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 184.331095][ T798] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.342687][ T798] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.389188][ T798] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 184.401213][ T798] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 184.411531][ T798] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.435648][ T798] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 184.448332][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.478905][ T798] usb 3-1: Product: syz [ 184.483335][ T798] usb 3-1: Manufacturer: syz [ 184.493621][ T798] usb 3-1: SerialNumber: syz [ 184.505711][ T798] usb 3-1: config 0 descriptor?? [ 184.520230][ T8622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.530293][ T8622] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.567356][ T798] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 184.585576][ T798] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 184.622376][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.666095][ T798] scsi host1: microtekX6 [ 185.032080][ T5825] usb 3-1: USB disconnect, device number 23 [ 185.405969][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 185.474854][ T8661] vxlan0: entered promiscuous mode [ 185.503194][ T3504] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.530706][ T3504] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.549749][ T3504] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.587249][ T3504] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.655067][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.727845][ T8669] veth0_to_bond: Caught tx_queue_len zero misconfig [ 186.444887][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.605855][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 186.620515][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.653518][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.679465][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.706519][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.731260][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.767159][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.769075][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.804739][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 186.817766][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.071177][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 187.093583][ T24] usbtmc 4-1:16.0: can't read capabilities [ 187.121844][ T30] audit: type=1326 audit(1770488179.176:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.5.1048" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d539 code=0x0 [ 187.408590][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.419382][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.428585][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.467774][ T8737] loop6: detected capacity change from 0 to 2640 [ 187.482415][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.491413][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.501007][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.510141][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.519251][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.524888][ T8740] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.528393][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.530491][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.554889][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.564018][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.567004][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.573121][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.610518][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.620864][ T8740] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.632395][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.650766][ T8740] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.671136][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.679535][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.688673][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.697779][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.707405][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.716517][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 187.728922][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.730421][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 187.737941][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.747686][ T6104] ldm_validate_partition_table(): Disk read failed. [ 187.811244][ T6104] Dev loop6: unable to read RDB block 0 [ 187.826060][ T6104] loop6: unable to read partition table [ 187.870703][ T8737] ldm_validate_partition_table(): Disk read failed. [ 187.903641][ T8737] Dev loop6: unable to read RDB block 0 [ 187.912800][ T8737] loop6: unable to read partition table [ 187.924844][ T8737] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 187.985940][ T985] usb 4-1: USB disconnect, device number 15 [ 188.475291][ T8763] netlink: 'syz.5.1063': attribute type 9 has an invalid length. [ 188.495557][ T8763] netlink: 'syz.5.1063': attribute type 11 has an invalid length. [ 188.523556][ T8763] netlink: 'syz.5.1063': attribute type 12 has an invalid length. [ 188.542000][ T8763] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1063'. [ 188.568223][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1063'. [ 188.604248][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.766896][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.776986][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.873597][ T985] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 188.873597][ T5910] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 189.024569][ T985] usb 5-1: Using ep0 maxpacket: 32 [ 189.031420][ T985] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 189.035765][ T5910] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 189.039996][ T985] usb 5-1: config 0 has no interface number 0 [ 189.050340][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.055181][ T985] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 189.074442][ T5910] usb 4-1: config 0 descriptor?? [ 189.076227][ T985] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 189.090378][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.095501][ T5910] gspca_main: spca508-2.14.0 probing 8086:0110 [ 189.098762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.115610][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.125110][ T985] usb 5-1: Product: syz [ 189.129470][ T985] usb 5-1: Manufacturer: syz [ 189.134241][ T985] usb 5-1: SerialNumber: syz [ 189.141867][ T985] usb 5-1: config 0 descriptor?? [ 189.149995][ T985] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 189.293245][ T5910] gspca_spca508: reg_read err -32 [ 189.299360][ T5910] gspca_spca508: reg_read err -32 [ 189.305379][ T5910] gspca_spca508: reg_read err -32 [ 189.311957][ T5910] gspca_spca508: reg_read err -32 [ 189.518877][ T5910] gspca_spca508: reg write: error -71 [ 189.533014][ T5910] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 189.547898][ T5910] usb 4-1: USB disconnect, device number 16 [ 189.805511][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.813656][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.816004][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.998560][ T985] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 190.359097][ T985] usb 5-1: USB disconnect, device number 16 [ 190.474645][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 190.525858][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.534627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.981486][ T8827] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 190.988128][ T8827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.997954][ T8827] vhci_hcd vhci_hcd.0: Device attached [ 191.106670][ T8828] usbip_core: unknown command [ 191.127486][ T8828] vhci_hcd: unknown pdu 4244635647 [ 191.145303][ T8828] usbip_core: unknown command [ 191.154967][ T6492] vhci_hcd vhci_hcd.5: stop threads [ 191.170631][ T6492] vhci_hcd vhci_hcd.5: release socket [ 191.186686][ T6492] vhci_hcd vhci_hcd.5: disconnect device [ 191.234601][ T5910] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 191.253182][ T5910] usb 43-1: enqueue for inactive port 0 [ 191.333803][ T5910] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 191.380402][ T8846] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.1094'. [ 191.701778][ T8854] loop6: detected capacity change from 0 to 2640 [ 191.749952][ T8854] ldm_validate_partition_table(): Disk read failed. [ 191.790221][ T8854] Dev loop6: unable to read RDB block 0 [ 191.837726][ T8854] loop6: unable to read partition table [ 191.894481][ T8854] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 192.079315][ T8870] netlink: 'syz.4.1106': attribute type 11 has an invalid length. [ 192.245692][ T8872] dummy0: entered promiscuous mode [ 192.252620][ T8872] bond0: entered promiscuous mode [ 192.258854][ T8872] bond_slave_0: entered promiscuous mode [ 192.271983][ T8872] bond_slave_1: entered promiscuous mode [ 192.344344][ T8872] debugfs: 'hsr1' already exists in 'hsr' [ 192.354932][ T8872] Cannot create hsr debugfs directory [ 192.385448][ T8872] hsr1: entered allmulticast mode [ 192.417533][ T8872] dummy0: entered allmulticast mode [ 192.431446][ T8872] bond0: entered allmulticast mode [ 192.439928][ T8872] bond_slave_0: entered allmulticast mode [ 192.464661][ T8872] bond_slave_1: entered allmulticast mode [ 192.483555][ T8861] buffer_io_error: 6340 callbacks suppressed [ 192.483573][ T8861] Buffer I/O error on dev loop6, logical block 0, async page read [ 192.501269][ T8861] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.293358][ T8898] netlink: 'syz.1.1118': attribute type 10 has an invalid length. [ 193.346485][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.354288][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.391810][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.399077][ T8898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.407704][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.415029][ T8898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.436300][ T8898] bridge0: entered promiscuous mode [ 193.452113][ T8898] bridge0: entered allmulticast mode [ 193.467078][ T8898] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 193.977466][ T24] net_ratelimit: 10 callbacks suppressed [ 193.977485][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.991905][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.133697][ T5825] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 194.303596][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 194.313745][ T5825] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 194.323568][ T5825] usb 6-1: config 0 has no interface number 0 [ 194.329800][ T5825] usb 6-1: config 0 interface 184 has no altsetting 0 [ 194.358989][ T5825] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 194.376882][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.385497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.394388][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.405464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.414152][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.417068][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.428713][ T5825] usb 6-1: Product: syz [ 194.432893][ T5825] usb 6-1: Manufacturer: syz [ 194.438288][ T5825] usb 6-1: SerialNumber: syz [ 194.446868][ T5825] usb 6-1: config 0 descriptor?? [ 194.460545][ T5825] smsc75xx v1.0.0 [ 194.642837][ T8942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.659057][ T8942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.843812][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.852223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.008752][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.349019][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 195.478751][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 195.703282][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 195.719606][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 195.741391][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 195.760296][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 195.771288][ T5825] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.789023][ T5825] usb 6-1: USB disconnect, device number 3 [ 195.994220][ T8994] input: syz0 as /devices/virtual/input/input36 [ 196.278463][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 196.335150][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.532115][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 196.543723][ T5825] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 196.725402][ T5825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.743593][ T5825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.767062][ T5825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.794259][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.812600][ T5825] usb 2-1: Product: syz [ 196.816996][ T5825] usb 2-1: Manufacturer: syz [ 196.821753][ T5825] usb 2-1: SerialNumber: syz [ 196.843862][ T798] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 196.993610][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 197.007308][ T798] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.025478][ T798] usb 5-1: config 0 has no interface number 0 [ 197.047194][ T798] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.066172][ T5825] usb 2-1: 0:2 : does not exist [ 197.078060][ T798] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.090341][ T798] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 197.100468][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.110874][ T5825] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 197.137129][ T798] usb 5-1: config 0 descriptor?? [ 197.182315][ T5825] usb 2-1: USB disconnect, device number 20 [ 197.273104][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.549532][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.748979][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.779355][ T798] input: HID 28bd:0094 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0021/input/input37 [ 197.817542][ T798] uclogic 0003:28BD:0094.0021: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 197.888919][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.986746][ T9063] binder: 9060:9063 ioctl c0306201 800003c0 returned -14 [ 198.049048][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.066083][ T6367] usb 5-1: USB disconnect, device number 17 [ 198.119608][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.132777][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.144352][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.154504][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.163928][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.334298][ T798] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 198.348057][ T36] bridge_slave_1: left allmulticast mode [ 198.363795][ T36] bridge_slave_1: left promiscuous mode [ 198.370760][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.381058][ T36] bridge_slave_0: left allmulticast mode [ 198.387084][ T36] bridge_slave_0: left promiscuous mode [ 198.393050][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.515211][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 198.522430][ T798] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.548596][ T798] usb 4-1: config 0 has no interface number 0 [ 198.569465][ T798] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 198.578584][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.608934][ T798] usb 4-1: Product: syz [ 198.613153][ T798] usb 4-1: Manufacturer: syz [ 198.617914][ T798] usb 4-1: SerialNumber: syz [ 198.637087][ T798] usb 4-1: config 0 descriptor?? [ 198.666254][ T798] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 198.803552][ T985] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 198.885943][ T36] bond0 (unregistering): left promiscuous mode [ 198.892196][ T36] bond_slave_0: left promiscuous mode [ 198.899205][ T36] bond_slave_1: left promiscuous mode [ 198.904860][ T6367] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 198.918105][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.929890][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.940215][ T36] bond0 (unregistering): Released all slaves [ 198.987092][ T985] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 199.011886][ T985] usb 6-1: config 4 has no interface number 0 [ 199.027355][ T985] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 199.051713][ T985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.070683][ T985] usb 6-1: Product: syz [ 199.080868][ T985] usb 6-1: Manufacturer: syz [ 199.085864][ T6367] usb 5-1: Using ep0 maxpacket: 8 [ 199.089257][ T6367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.112080][ T985] usb 6-1: SerialNumber: syz [ 199.137653][ T6367] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.142815][ T985] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.28/input/input38 [ 199.159731][ T6367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.183103][ T62] net_ratelimit: 11 callbacks suppressed [ 199.183121][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.209846][ T6367] usb 5-1: config 0 descriptor?? [ 199.387158][ T36] batadv0: left promiscuous mode [ 199.407133][ T36] hsr_slave_0: left promiscuous mode [ 199.420669][ T36] hsr_slave_1: left promiscuous mode [ 199.427559][ T5180] bcm5974 6-1:4.28: could not read from device [ 199.437016][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.448275][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.458507][ T985] bcm5974 6-1:4.28: could not read from device [ 199.466641][ T6367] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.479486][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.495778][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.508165][ T5180] bcm5974 6-1:4.28: could not read from device [ 199.508348][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.522724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.548765][ T985] input: failed to attach handler mousedev to device input38, error: -5 [ 199.565161][ T36] veth1_macvtap: left promiscuous mode [ 199.572376][ T36] veth0_macvtap: left promiscuous mode [ 199.587153][ T5180] bcm5974 6-1:4.28: could not read from device [ 199.590506][ T985] usb 6-1: USB disconnect, device number 4 [ 199.600033][ T36] veth1_vlan: left promiscuous mode [ 199.624271][ T36] veth0_vlan: left promiscuous mode [ 199.624335][ T5180] bcm5974 6-1:4.28: could not read from device [ 199.761171][ T5838] udevd[5838]: Error opening device "/dev/input/event4": No such file or directory [ 199.776217][ T5838] udevd[5838]: Unable to EVIOCGABS device "/dev/input/event4" [ 199.789193][ T5838] udevd[5838]: Unable to EVIOCGABS device "/dev/input/event4" [ 199.797363][ T5838] udevd[5838]: Unable to EVIOCGABS device "/dev/input/event4" [ 199.805523][ T5838] udevd[5838]: Unable to EVIOCGABS device "/dev/input/event4" [ 199.860024][ T798] gspca_spca1528: reg_w err -71 [ 199.869290][ T798] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 199.884597][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.893010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.913965][ T798] usb 4-1: USB disconnect, device number 17 [ 200.036264][ T10] usb 5-1: USB disconnect, device number 18 [ 200.208872][ T5836] Bluetooth: hci1: command tx timeout [ 200.232785][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.047593][ T36] team0 (unregistering): Port device team_slave_1 removed [ 201.092932][ T36] team0 (unregistering): Port device team_slave_0 removed [ 201.251983][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.494319][ T9109] tipc: Started in network mode [ 201.499797][ T9109] tipc: Node identity ac14142f, cluster identity 4711 [ 201.507442][ T9109] tipc: New replicast peer: 0.0.0.0 [ 201.515123][ T9109] tipc: Enabled bearer , priority 10 [ 201.551291][ T9110] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 201.828897][ T9141] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1210'. [ 201.882048][ T9070] chnl_net:caif_netlink_parms(): no params data found [ 202.049011][ T6500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.058029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.068437][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.171269][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.179569][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.188168][ T9070] bridge_slave_0: entered allmulticast mode [ 202.201676][ T9070] bridge_slave_0: entered promiscuous mode [ 202.212245][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.220619][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.228345][ T9070] bridge_slave_1: entered allmulticast mode [ 202.237725][ T9070] bridge_slave_1: entered promiscuous mode [ 202.288470][ T5836] Bluetooth: hci1: command tx timeout [ 202.306554][ T985] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 202.350824][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.385600][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.488359][ T985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.502302][ T9070] team0: Port device team_slave_0 added [ 202.522313][ T9070] team0: Port device team_slave_1 added [ 202.523156][ T985] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.573542][ T5825] tipc: Node number set to 2886997039 [ 202.583752][ T985] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.617022][ T985] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 202.622806][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.638439][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 202.646742][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.646773][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.650451][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.705432][ T985] usb 5-1: Product: syz [ 202.709647][ T985] usb 5-1: Manufacturer: syz [ 202.725431][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.726338][ T985] usb 5-1: SerialNumber: syz [ 202.781747][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.896167][ T9070] hsr_slave_0: entered promiscuous mode [ 202.903150][ T9070] hsr_slave_1: entered promiscuous mode [ 202.912172][ T9070] debugfs: 'hsr0' already exists in 'hsr' [ 202.931410][ T9070] Cannot create hsr debugfs directory [ 202.972819][ T9182] netlink: 'syz.5.1219': attribute type 1 has an invalid length. [ 203.003337][ T985] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 203.053572][ T6367] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.070976][ T9182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.121389][ T9185] bond1: (slave geneve2): making interface the new active one [ 203.131086][ T9185] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 203.225818][ T6367] usb 4-1: Using ep0 maxpacket: 16 [ 203.242150][ T6367] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 203.273984][ T6367] usb 4-1: config 0 has no interface number 0 [ 203.280165][ T6367] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 203.292352][ T24] usb 5-1: USB disconnect, device number 19 [ 203.332089][ T6367] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 203.358805][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.376246][ T6367] usb 4-1: Product: syz [ 203.391012][ T6367] usb 4-1: Manufacturer: syz [ 203.407122][ T6367] usb 4-1: SerialNumber: syz [ 203.445660][ T6367] usb 4-1: config 0 descriptor?? [ 203.461206][ T9070] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.498837][ T9070] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.519619][ T9070] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 203.599058][ T9070] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 203.654575][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 203.757072][ T9211] syzkaller1: entered promiscuous mode [ 203.762634][ T9211] syzkaller1: entered allmulticast mode [ 203.854009][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 203.865344][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 203.877981][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 203.916868][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.930486][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.969446][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.995170][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.012160][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.019118][ T24] usb 5-1: Product: syz [ 204.023304][ T24] usb 5-1: Manufacturer: syz [ 204.048275][ T24] usb 5-1: SerialNumber: syz [ 204.056527][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.063803][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.069321][ T6367] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 204.127487][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.134790][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.137062][ T6367] usb 4-1: USB disconnect, device number 18 [ 204.312258][ T9148] usblp0: removed [ 204.333953][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.366502][ T5836] Bluetooth: hci1: command tx timeout [ 204.379183][ T6367] net_ratelimit: 3 callbacks suppressed [ 204.379199][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.396172][ T9070] veth0_vlan: entered promiscuous mode [ 204.432087][ T9070] veth1_vlan: entered promiscuous mode [ 204.481269][ T9070] veth0_macvtap: entered promiscuous mode [ 204.499543][ T9070] veth1_macvtap: entered promiscuous mode [ 204.529708][ T24] usb 5-1: 0:2 : does not exist [ 204.568381][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.577644][ T24] usb 5-1: USB disconnect, device number 20 [ 204.643357][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.702805][ T6500] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.759203][ T6500] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.792605][ T6500] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.850901][ T6500] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.012433][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.041481][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.135611][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.137342][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.144108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.171196][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.204907][ T9251] syzkaller1: entered promiscuous mode [ 205.264073][ T9251] syzkaller1: entered allmulticast mode [ 205.411665][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.677621][ T9265] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 205.733931][ T9273] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 205.737079][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1241'. [ 206.303910][ T62] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 206.449069][ T5836] Bluetooth: hci1: command tx timeout [ 206.455691][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.485271][ T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.498091][ T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.518051][ T62] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.533688][ T62] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.543385][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.559506][ T62] usb 6-1: config 0 descriptor?? [ 207.032268][ T62] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 207.032507][ T9313] vivid-002: disconnect [ 207.164354][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.172698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.305196][ T9310] vivid-002: reconnect [ 207.489791][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.506116][ T5910] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 207.686277][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.731964][ T5910] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.758310][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.785462][ T5910] usb 4-1: config 0 descriptor?? [ 207.805611][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.813961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.903631][ T5825] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 208.073647][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 208.087589][ T5825] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 208.142575][ T5825] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 208.172329][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.197744][ T5825] usb 7-1: Product: syz [ 208.201962][ T5825] usb 7-1: Manufacturer: syz [ 208.227189][ T5910] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 208.229221][ T5825] usb 7-1: SerialNumber: syz [ 208.272905][ T5910] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0023/input/input40 [ 208.291895][ T5825] usb 7-1: config 0 descriptor?? [ 208.337226][ T5825] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 208.366939][ C1] plantronics 0003:047F:FFFF.0022: usb_submit_urb(ctrl) failed: -1 [ 208.374739][ T5825] usb 7-1: Detected FT232R [ 208.463216][ T5910] keytouch 0003:0926:3333.0023: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 208.544181][ T5825] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 208.777901][ T5825] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 208.835911][ T5882] usb 4-1: USB disconnect, device number 19 [ 208.980649][ T5825] usb 7-1: USB disconnect, device number 2 [ 209.045862][ T5825] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 209.074810][ T5825] ftdi_sio 7-1:0.0: device disconnected [ 209.146787][ T6367] usb 6-1: USB disconnect, device number 5 [ 209.570650][ T6367] net_ratelimit: 4 callbacks suppressed [ 209.570666][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.061428][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.093979][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.123887][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.153221][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.183723][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.212325][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.239097][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.252330][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.264686][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.406657][ T30] audit: type=1326 audit(1770488202.456:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.6.1280" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 211.160340][ T9421] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 211.813176][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 212.403675][ T6367] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 212.573777][ T6367] usb 5-1: Using ep0 maxpacket: 8 [ 212.586978][ T6367] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 212.595246][ T6367] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.611021][ T6367] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.620901][ T6367] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.630901][ T6367] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.654945][ T6367] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.664081][ T6367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.887422][ T6367] usb 5-1: usb_control_msg returned -32 [ 212.895678][ T6367] usbtmc 5-1:16.0: can't read capabilities [ 212.973788][ T5913] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 213.115759][ T9474] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1315'. [ 213.127022][ T9474] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1315'. [ 213.150436][ T5913] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 213.160100][ T5913] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 213.171716][ T5913] usb 4-1: Product: syz [ 213.181411][ T5913] usb 4-1: Manufacturer: syz [ 213.187604][ T5913] usb 4-1: SerialNumber: syz [ 213.195574][ T5913] usb 4-1: config 0 descriptor?? [ 213.206568][ T5913] ch341 4-1:0.0: ch341-uart converter detected [ 213.774082][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'. [ 213.782983][ T9488] netlink: 'syz.6.1320': attribute type 13 has an invalid length. [ 213.808172][ T9488] vxlan0: entered promiscuous mode [ 213.816131][ T6502] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.826293][ T6502] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.835271][ T6502] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.871674][ T6502] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.891127][ T24] usb 5-1: USB disconnect, device number 21 [ 214.219786][ T5913] ch341-uart ttyUSB0: break control not supported, using simulated break [ 214.252832][ T5913] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 214.274719][ T5913] usb 4-1: USB disconnect, device number 20 [ 214.291796][ T5913] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 214.311837][ T5913] ch341 4-1:0.0: device disconnected [ 214.579044][ T9514] vivid-002: disconnect [ 214.751092][ T9508] vivid-002: reconnect [ 214.781994][ T5882] net_ratelimit: 56 callbacks suppressed [ 214.782013][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.789972][ T9518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.849324][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.858034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.107215][ T9529] bridge0: port 3(erspan0) entered blocking state [ 215.143657][ T9529] bridge0: port 3(erspan0) entered disabled state [ 215.152154][ T9529] erspan0: entered allmulticast mode [ 215.183067][ T30] audit: type=1326 audit(1770488207.226:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7fc00000 [ 215.285642][ T9529] erspan0: entered promiscuous mode [ 215.302168][ T9529] bridge0: port 3(erspan0) entered blocking state [ 215.309084][ T9529] bridge0: port 3(erspan0) entered forwarding state [ 215.363968][ T9532] erspan0: left allmulticast mode [ 215.364047][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 215.414829][ T9532] erspan0: left promiscuous mode [ 215.428759][ T9532] bridge0: port 3(erspan0) entered disabled state [ 215.817612][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.020309][ T30] audit: type=1326 audit(1770488208.076:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.6.1334" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 216.475483][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1339'. [ 216.603720][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.612240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.705889][ T6367] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 216.763154][ T30] audit: type=1326 audit(1770488208.816:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf742d539 code=0x7fc00000 [ 216.808439][ T30] audit: type=1326 audit(1770488208.816:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf742d567 code=0x7fc00000 [ 216.848688][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.911603][ T6367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.934674][ T6367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.949412][ T30] audit: type=1326 audit(1770488208.816:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf742d539 code=0x7fc00000 [ 216.979814][ T6367] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.013242][ T6367] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.039875][ T6367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.081076][ T6367] usb 2-1: config 0 descriptor?? [ 217.384137][ T62] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 217.530767][ T6367] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 217.553244][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 217.570285][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 217.593792][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.616539][ T62] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.638888][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 217.649160][ T62] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 217.660725][ T62] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 217.681646][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.694319][ T5913] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 217.709509][ T62] usb 4-1: config 0 descriptor?? [ 217.766973][ T5836] Bluetooth: hci5: urb ffff88802889db00 submission failed (90) [ 217.895100][ T5913] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 217.895692][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.925192][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.964028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.990000][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.010313][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.037962][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 218.056388][ T9603] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.077855][ T5913] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 218.088315][ T5913] usb 5-1: Manufacturer: syz [ 218.110780][ T5913] usb 5-1: config 0 descriptor?? [ 218.539727][ T5913] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 218.592392][ T5913] appleir 0003:05AC:8243.0025: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 218.686123][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.224791][ T9638] usb 2-1: string descriptor 0 read error: -71 [ 219.394860][ T62] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 219.556216][ T62] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.574445][ T62] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.607660][ T62] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.629940][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.638921][ T6367] usb 2-1: USB disconnect, device number 21 [ 219.670595][ T9635] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 219.685636][ T62] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.949557][ T985] usb 7-1: USB disconnect, device number 3 [ 219.965053][ C0] net_ratelimit: 4 callbacks suppressed [ 219.965069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.981762][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.170141][ T5913] usb 4-1: USB disconnect, device number 21 [ 220.427125][ T9670] input: syz0 as /devices/virtual/input/input41 [ 220.486851][ T5913] usb 5-1: USB disconnect, device number 22 [ 220.606958][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.615371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.993483][ T9687] bridge1: entered promiscuous mode [ 221.009386][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.053568][ T9687] bridge1: entered allmulticast mode [ 221.098412][ T9687] team0: Port device bridge1 added [ 221.187355][ T9689] bridge0: port 3(team0) entered blocking state [ 221.233143][ T9689] bridge0: port 3(team0) entered disabled state [ 221.259416][ T9689] team0: entered allmulticast mode [ 221.268053][ T9689] team_slave_0: entered allmulticast mode [ 221.277840][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 221.285042][ T9689] team_slave_1: entered allmulticast mode [ 221.310431][ T9689] team0: left allmulticast mode [ 221.335453][ T9689] team_slave_0: left allmulticast mode [ 221.348828][ T9689] team_slave_1: left allmulticast mode [ 221.374000][ T9666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1363'. [ 221.612811][ T9697] binder: 9696:9697 ioctl c0306201 80000040 returned -11 [ 221.797175][ T30] audit: type=1326 audit(1770488213.856:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.5.1375" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746d539 code=0x0 [ 222.048069][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.364225][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.372618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.088347][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.154442][ T6500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.219059][ T9739] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1394'. [ 223.303964][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 223.540868][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.573902][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.599696][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.641026][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.651585][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.707369][ T24] usb 4-1: config 0 descriptor?? [ 223.754199][ T5825] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 223.935626][ T5825] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 223.946718][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.962424][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 223.983648][ T5825] usb 6-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 224.000048][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.041843][ T5825] usb 6-1: config 0 descriptor?? [ 224.124256][ T985] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 224.165963][ T24] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 224.294605][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.342345][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.374335][ T985] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 224.403539][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.461833][ T985] usb 5-1: config 0 descriptor?? [ 224.511559][ T5825] wacom 0003:056A:037B.0027: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 224.532893][ T5825] wacom 0003:056A:037B.0027: hidraw1: USB HID v0.00 Device [HID 056a:037b] on usb-dummy_hcd.5-1/input0 [ 224.565540][ T5825] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:037B.0027/input/input43 [ 224.702800][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.714989][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.746484][ C1] plantronics 0003:047F:FFFF.0026: hid_field_extract() called with n (132) > 32! (syz.1.1404) [ 224.876872][ T5825] usb 6-1: USB disconnect, device number 6 [ 224.906304][ T985] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 224.940290][ T985] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 224.955602][ T9774] input: syz1 as /devices/virtual/input/input46 [ 224.971993][ T24] usb 4-1: USB disconnect, device number 22 [ 224.976053][ T985] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0028/input/input47 [ 225.089770][ T5913] net_ratelimit: 7 callbacks suppressed [ 225.089786][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.103855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.167126][ T985] cm6533_jd 0003:0D8C:0022.0028: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 225.244723][ T985] usb 5-1: USB disconnect, device number 23 [ 225.247661][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.336936][ T9780] fido_id[9780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 225.588872][ T9787] tipc: Started in network mode [ 225.597644][ T9787] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 225.607465][ T9787] tipc: Enabled bearer , priority 10 [ 225.726299][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.734744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.887237][ T30] audit: type=1326 audit(1770488217.946:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.6.1417" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 226.283753][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.487737][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 226.647035][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 226.725344][ T5882] tipc: Node number set to 10136234 [ 226.815734][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.829033][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.843591][ T9834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.867289][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 226.882047][ T9834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.891409][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 226.900606][ T24] usb 6-1: Manufacturer: syz [ 226.913152][ T24] usb 6-1: config 0 descriptor?? [ 226.990508][ T9838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.323883][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.902290][ T24] uclogic 0003:256C:006D.0029: interface is invalid, ignoring [ 228.137797][ T5882] usb 6-1: USB disconnect, device number 7 [ 229.063596][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 229.228058][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 229.248021][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.303324][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.363524][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.403760][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.440532][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.503196][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.541405][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.590654][ T24] usb 4-1: Manufacturer: syz [ 229.614636][ T24] usb 4-1: config 0 descriptor?? [ 229.662965][ T30] audit: type=1326 audit(1770488221.716:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9900 comm="syz.6.1459" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 229.946172][ T24] rc_core: IR keymap rc-hauppauge not found [ 229.983542][ T24] Registered IR keymap rc-empty [ 229.988813][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.044694][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.065201][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 230.097441][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 230.144314][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.173639][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.205177][ T6502] net_ratelimit: 1498 callbacks suppressed [ 230.205196][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.213623][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.219461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.243797][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.294011][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.333776][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.353635][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.369335][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.382279][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.444419][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.463634][ T24] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 230.486160][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 230.513511][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 231.165050][ T985] usb 4-1: USB disconnect, device number 23 [ 231.243241][ T9937] dvmrp0: entered allmulticast mode [ 231.276798][ T9934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.333786][ T9934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.343113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.420025][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.484707][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.493020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.448589][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.628474][ T9973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.019523][ T9989] input: syz1 as /devices/virtual/input/input49 [ 233.950520][T10006] input: syz1 as /devices/virtual/input/input50 [ 234.613522][ T5825] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 234.707211][T10034] dvmrp0: entered allmulticast mode [ 234.788149][ T5825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.813552][ T5825] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 234.833841][ T5825] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.851360][ T5825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 234.866428][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 234.886854][ T5825] usb 5-1: Product: syz [ 234.891093][ T5825] usb 5-1: Manufacturer: syz [ 234.893745][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 234.906051][ T5825] usb 5-1: SerialNumber: syz [ 235.055616][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 235.071322][ T24] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 235.084291][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 235.102546][ T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 235.111913][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.123216][ T24] usb 7-1: Product: syz [ 235.147337][ T24] usb 7-1: Manufacturer: syz [ 235.156737][ T24] usb 7-1: SerialNumber: syz [ 235.187214][ T5825] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 235.325013][ T6492] net_ratelimit: 1272 callbacks suppressed [ 235.325031][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.339440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.410425][ T985] usb 5-1: USB disconnect, device number 24 [ 235.441110][ T985] usblp0: removed [ 235.478359][T10028] netlink: 'syz.6.1513': attribute type 2 has an invalid length. [ 235.488330][T10028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.521389][ T24] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input51 [ 235.552760][ T24] usb 7-1: USB disconnect, device number 4 [ 235.588218][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.622900][ T24] appletouch 7-1:1.0: input: appletouch disconnected [ 235.967759][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.976186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.297949][T10075] loop5: detected capacity change from 0 to 4096 [ 236.626015][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.647668][T10078] vivid-001: disconnect [ 236.677150][T10077] vivid-001: reconnect [ 237.091525][T10064] netlink: 'syz.1.1526': attribute type 12 has an invalid length. [ 237.111719][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 237.114333][T10064] netlink: 'syz.1.1526': attribute type 29 has an invalid length. [ 237.149425][T10064] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1526'. [ 237.183533][T10064] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1526'. [ 237.219435][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1534'. [ 237.248030][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.256516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.648697][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.290259][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 238.299772][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 238.569778][T10131] syzkaller1: entered promiscuous mode [ 238.576891][T10131] syzkaller1: entered allmulticast mode [ 239.281176][T10155] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 239.290371][T10155] netlink: 'syz.4.1563': attribute type 6 has an invalid length. [ 239.299219][T10155] netlink: 'syz.4.1563': attribute type 3 has an invalid length. [ 239.975067][T10174] netlink: 'syz.4.1571': attribute type 12 has an invalid length. [ 239.993577][T10174] netlink: 'syz.4.1571': attribute type 29 has an invalid length. [ 240.017226][T10174] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1571'. [ 240.038995][T10174] netlink: 'syz.4.1571': attribute type 2 has an invalid length. [ 240.061936][T10174] netlink: 'syz.4.1571': attribute type 3 has an invalid length. [ 240.091897][T10174] netlink: 15 bytes leftover after parsing attributes in process `syz.4.1571'. [ 240.754484][T10191] loop8: detected capacity change from 0 to 8 [ 240.774840][ T6367] net_ratelimit: 4 callbacks suppressed [ 240.774857][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.811091][ T6104] Dev loop8: unable to read RDB block 8 [ 240.833081][ T6104] loop8: unable to read partition table [ 240.839937][T10195] ======================================================= [ 240.839937][T10195] WARNING: The mand mount option has been deprecated and [ 240.839937][T10195] and is ignored by this kernel. Remove the mand [ 240.839937][T10195] option from the mount to silence this warning. [ 240.839937][T10195] ======================================================= [ 240.875534][ T6104] loop8: partition table beyond EOD, truncated [ 240.888755][ T985] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 240.910838][T10191] Dev loop8: unable to read RDB block 8 [ 240.937444][T10191] loop8: unable to read partition table [ 240.943364][T10191] loop8: partition table beyond EOD, truncated [ 240.993946][T10191] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 241.083912][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.083934][ T985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.092410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.136223][ T985] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 241.213527][ T985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.243242][ T985] usb 6-1: config 0 descriptor?? [ 241.711746][ T985] holtek 0003:1241:5015.002A: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 241.727645][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.736161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.763496][ T985] holtek 0003:1241:5015.002A: no inputs found [ 241.820322][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.978570][ T985] usb 6-1: USB disconnect, device number 8 [ 242.392308][T10225] input: syz0 as /devices/virtual/input/input52 [ 242.849656][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.004335][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.012691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.145619][ T5882] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 243.152845][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'. [ 243.326159][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.337473][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.361187][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.393616][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.412954][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.444775][ T5882] usb 2-1: config 0 descriptor?? [ 243.470202][ T30] audit: type=1326 audit(1770488235.526:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.3.1604" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f81539 code=0x0 [ 243.914253][ T5882] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 243.927270][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.765890][ T24] usb 2-1: USB disconnect, device number 22 [ 244.805159][T10305] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1621'. [ 245.023855][ T5913] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 245.206670][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.246431][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 245.270665][ T5913] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.289703][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.310805][ T5913] usb 7-1: config 0 descriptor?? [ 245.571374][T10304] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1620'. [ 245.587889][ T5882] usb 7-1: USB disconnect, device number 5 [ 246.044026][ T5882] net_ratelimit: 4 callbacks suppressed [ 246.044044][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.454150][T10355] input: syz0 as /devices/virtual/input/input54 [ 246.516508][ T5882] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 246.696927][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.714968][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.733547][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.752540][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.762373][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.782144][ T5882] usb 5-1: config 0 descriptor?? [ 246.845450][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.853857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.937263][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 247.095457][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.254269][ T5882] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 247.484689][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.493077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.094456][ T5825] usb 5-1: USB disconnect, device number 25 [ 248.123940][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.766393][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.774852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.172795][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.934074][ T62] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 250.106116][ T62] usb 2-1: Using ep0 maxpacket: 8 [ 250.118699][ T62] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.143684][ T62] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 250.177190][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.207430][ T62] usb 2-1: config 0 descriptor?? [ 250.221112][ T62] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 251.063709][ T5825] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 251.230785][ T5825] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 251.243989][ T5882] net_ratelimit: 3 callbacks suppressed [ 251.244006][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.276627][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.314404][ T5825] usb 5-1: Product: syz [ 251.318796][ T5825] usb 5-1: Manufacturer: syz [ 251.349149][ T5825] usb 5-1: SerialNumber: syz [ 251.384473][ T5825] usb 5-1: config 0 descriptor?? [ 251.439398][ T62] gspca_vc032x: reg_w err -71 [ 251.441035][ T5825] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 251.447634][ T62] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 251.465311][ T62] usb 2-1: USB disconnect, device number 23 [ 251.675374][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1691'. [ 252.284240][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.301672][ T5913] usb 5-1: USB disconnect, device number 26 [ 252.604301][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.612653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.755948][ T62] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 252.923913][ T62] usb 2-1: Using ep0 maxpacket: 8 [ 252.957651][ T62] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.978223][ T62] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.013498][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.046483][ T62] usb 2-1: config 0 descriptor?? [ 253.085744][ T62] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 253.255245][ T6502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.263614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.323723][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.649152][ T30] audit: type=1326 audit(1770488245.706:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10507 comm="syz.6.1703" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 253.743911][ T5825] usb 2-1: USB disconnect, device number 24 [ 254.366133][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.524382][ T3504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.532795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.392864][T10558] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1722'. [ 255.632519][ T30] audit: type=1326 audit(1770488247.686:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.3.1728" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f81539 code=0x0 [ 255.778381][ T30] audit: type=1326 audit(1770488247.836:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.1729" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x0 [ 255.807672][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.814405][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.284183][ T5825] net_ratelimit: 1 callbacks suppressed [ 256.284202][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.298201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.444293][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.584109][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 256.595845][T10591] loop8: detected capacity change from 0 to 8 [ 256.632451][ T6104] Dev loop8: unable to read RDB block 8 [ 256.640343][ T6104] loop8: unable to read partition table [ 256.655240][ T6104] loop8: partition table beyond EOD, truncated [ 256.663869][T10591] Dev loop8: unable to read RDB block 8 [ 256.695301][T10591] loop8: unable to read partition table [ 256.714413][T10591] loop8: partition table beyond EOD, truncated [ 256.728790][T10591] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 257.149221][ T62] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 257.348323][ T62] usb 4-1: config 118 interface 0 has no altsetting 0 [ 257.371095][ T62] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 257.403913][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.432017][ T62] usb 4-1: Product: syz [ 257.473709][ T62] usb 4-1: Manufacturer: syz [ 257.483891][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.500114][ T62] usb 4-1: SerialNumber: syz [ 257.900642][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 257.924972][ T5913] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 258.028661][ T62] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 258.058759][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.066304][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 258.084466][T10618] bond0: entered promiscuous mode [ 258.089851][T10618] bond_slave_0: entered promiscuous mode [ 258.123302][T10618] bond_slave_1: entered promiscuous mode [ 258.129555][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.151345][ T5913] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.171349][ T5913] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.185622][T10618] bond0: left promiscuous mode [ 258.186308][ T62] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 258.190513][T10618] bond_slave_0: left promiscuous mode [ 258.212691][ T62] usb 4-1: media controller created [ 258.219166][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 258.226377][ T24] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 258.232691][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 258.248366][ T24] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.268486][T10618] bond_slave_1: left promiscuous mode [ 258.278409][ T5913] usb 2-1: Product: syz [ 258.282609][ T5913] usb 2-1: Manufacturer: syz [ 258.285400][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.296321][ T5913] usb 2-1: SerialNumber: syz [ 258.364200][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.372680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.480255][ T62] DVB: Unable to find symbol mt352_attach() [ 258.500593][ T62] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 258.525735][ T62] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 258.544340][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.563262][ T5913] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 258.566104][ T62] dvb-usb: schedule remote query interval to 100 msecs. [ 258.581444][ T62] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 258.790308][ T5913] usb 2-1: USB disconnect, device number 25 [ 258.802677][ T5913] usblp0: removed [ 258.811579][ T62] dvb_usb_m920x 4-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 258.823499][ T24] m920x_read = error: -71 [ 258.828223][ T24] dvb-usb: error while querying for an remote control event. [ 258.864270][ T62] usb 4-1: USB disconnect, device number 24 [ 258.972504][ T24] m920x_read = error: -19 [ 258.982457][ T24] dvb-usb: error while querying for an remote control event. [ 259.005110][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.013564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.133701][ T62] m920x_read = error: -19 [ 259.138245][ T62] dvb-usb: error while querying for an remote control event. [ 259.180928][T10638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.263568][ T62] m920x_read = error: -19 [ 259.267974][ T62] dvb-usb: error while querying for an remote control event. [ 259.383596][ T62] m920x_read = error: -19 [ 259.401825][ T62] dvb-usb: error while querying for an remote control event. [ 259.523645][ T62] m920x_read = error: -19 [ 259.528207][ T62] dvb-usb: error while querying for an remote control event. [ 259.653557][ T5882] m920x_read = error: -19 [ 259.657944][ T5882] dvb-usb: error while querying for an remote control event. [ 259.783735][ T62] m920x_read = error: -19 [ 259.788307][ T62] dvb-usb: error while querying for an remote control event. [ 259.823588][ T5882] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 259.913712][ T62] m920x_read = error: -19 [ 259.921506][ T62] dvb-usb: error while querying for an remote control event. [ 259.994077][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 260.006944][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.018503][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.031636][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 260.044914][ T62] m920x_read = error: -19 [ 260.051742][ T62] dvb-usb: error while querying for an remote control event. [ 260.062877][ T5882] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 260.072231][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.087809][ T5882] usb 6-1: config 0 descriptor?? [ 260.173598][ T62] m920x_read = error: -19 [ 260.178041][ T62] dvb-usb: error while querying for an remote control event. [ 260.282791][T10673] loop5: detected capacity change from 0 to 4095 [ 260.298857][ T62] m920x_read = error: -19 [ 260.316572][ T62] dvb-usb: error while querying for an remote control event. [ 260.415857][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a9e6400: rx timeout, send abort [ 260.426319][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a9e6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 260.444879][ T6367] m920x_read = error: -19 [ 260.449390][ T6367] dvb-usb: error while querying for an remote control event. [ 260.533517][ T62] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 260.567515][ T5882] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002E/input/input57 [ 260.580910][ T6367] m920x_read = error: -19 [ 260.589732][ T6367] dvb-usb: error while querying for an remote control event. [ 260.678601][ T5882] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002E/input/input58 [ 260.703695][ T62] usb 4-1: Using ep0 maxpacket: 8 [ 260.713571][ T6367] m920x_read = error: -19 [ 260.724157][ T6367] dvb-usb: error while querying for an remote control event. [ 260.731917][ T62] usb 4-1: config 0 has no interfaces? [ 260.739111][ T62] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.759318][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.769386][ T5882] kye 0003:0458:5011.002E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 260.787016][ T62] usb 4-1: config 0 descriptor?? [ 260.870829][ T5882] m920x_read = error: -19 [ 260.897674][ T5882] dvb-usb: error while querying for an remote control event. [ 260.927574][ T5825] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 261.023570][ T5882] m920x_read = error: -19 [ 261.027959][ T5882] dvb-usb: error while querying for an remote control event. [ 261.104028][ T5825] usb 5-1: Using ep0 maxpacket: 8 [ 261.148157][ T5825] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 261.177603][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.186737][ T10] usb 4-1: USB disconnect, device number 25 [ 261.220249][ T5825] usb 5-1: Product: syz [ 261.247301][ T5825] usb 5-1: Manufacturer: syz [ 261.291986][ T5825] usb 5-1: SerialNumber: syz [ 261.334236][ T5825] usb 5-1: config 0 descriptor?? [ 261.374029][ T5882] m920x_read = error: -19 [ 261.387731][ T5882] dvb-usb: error while querying for an remote control event. [ 261.419832][ T5825] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 261.534499][ T5882] m920x_read = error: -19 [ 261.540051][ T5882] dvb-usb: error while querying for an remote control event. [ 261.617191][ C0] kye 0003:0458:5011.002E: usb_submit_urb(ctrl) failed: -1 [ 261.644852][ T6367] net_ratelimit: 335 callbacks suppressed [ 261.644870][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.695366][ T6367] m920x_read = error: -19 [ 261.700850][ T6367] dvb-usb: error while querying for an remote control event. [ 261.823744][ T6367] m920x_read = error: -19 [ 261.828176][ T6367] dvb-usb: error while querying for an remote control event. [ 261.955648][ T6367] m920x_read = error: -19 [ 261.960038][ T6367] dvb-usb: error while querying for an remote control event. [ 262.054020][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.062418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.073613][ T6367] m920x_read = error: -19 [ 262.078040][ T6367] dvb-usb: error while querying for an remote control event. [ 262.205373][ T6367] m920x_read = error: -19 [ 262.220253][ T6367] dvb-usb: error while querying for an remote control event. [ 262.334093][ T6367] m920x_read = error: -19 [ 262.338484][ T6367] dvb-usb: error while querying for an remote control event. [ 262.399375][ T62] usb 6-1: USB disconnect, device number 9 [ 262.490428][ T5882] m920x_read = error: -19 [ 262.514744][ T5882] dvb-usb: error while querying for an remote control event. [ 262.633761][ T6367] m920x_read = error: -19 [ 262.642793][ T6367] dvb-usb: error while querying for an remote control event. [ 262.651573][ T5825] gspca_sonixj: reg_w1 err -71 [ 262.662620][ T5825] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 262.686543][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.693015][ T5825] usb 5-1: USB disconnect, device number 27 [ 262.777082][ T6367] m920x_read = error: -19 [ 262.781473][ T6367] dvb-usb: error while querying for an remote control event. [ 262.791471][ T5882] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 262.845476][T10732] netlink: 'syz.5.1796': attribute type 1 has an invalid length. [ 262.875283][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1797'. [ 262.923909][ T62] m920x_read = error: -19 [ 262.928459][ T62] dvb-usb: error while querying for an remote control event. [ 262.940737][T10734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.965391][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.974382][T10732] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.986949][T10732] bond3: (slave bond4): making interface the new active one [ 262.987975][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.995436][T10732] bond3: (slave bond4): Enslaving as an active interface with an up link [ 263.043651][ T62] m920x_read = error: -19 [ 263.058893][ T62] dvb-usb: error while querying for an remote control event. [ 263.076966][T10740] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 263.089009][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.122270][ T5882] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.140128][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.175088][ T5882] usb 4-1: config 0 descriptor?? [ 263.226730][ T6367] m920x_read = error: -19 [ 263.231236][ T6367] dvb-usb: error while querying for an remote control event. [ 263.333585][ T5825] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.353560][ T6367] m920x_read = error: -19 [ 263.357943][ T6367] dvb-usb: error while querying for an remote control event. [ 263.475365][ T62] m920x_read = error: -19 [ 263.497336][ T62] dvb-usb: error while querying for an remote control event. [ 263.515751][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.537488][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.561340][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.575586][ T5913] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 263.590499][ T5825] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.602419][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.614560][ T5825] usb 2-1: config 0 descriptor?? [ 263.618046][ T5882] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x6 [ 263.637554][ T62] m920x_read = error: -19 [ 263.643887][ T62] dvb-usb: error while querying for an remote control event. [ 263.664027][ T5882] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 263.724433][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.743553][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 263.754267][ T24] m920x_read = error: -19 [ 263.758207][ T5913] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 263.763549][ T24] dvb-usb: error while querying for an remote control event. [ 263.773514][ T5913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 263.795978][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 263.817045][ T5913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 263.839160][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 263.850548][ T985] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 263.858625][ T5913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.872511][ T5913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.881770][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.894612][ T24] m920x_read = error: -19 [ 263.901452][ T24] dvb-usb: error while querying for an remote control event. [ 263.970566][T10762] capability: warning: `syz.5.1809' uses 32-bit capabilities (legacy support in use) [ 264.023667][ T24] m920x_read = error: -19 [ 264.025710][ T985] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.028131][ T24] dvb-usb: error while querying for an remote control event. [ 264.049117][ T985] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 264.063050][ T985] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 264.083992][ T5825] plantronics 0003:047F:FFFF.0030: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 264.111380][ T5913] usb 5-1: usb_control_msg returned -32 [ 264.124338][ T5913] usbtmc 5-1:16.0: can't read capabilities [ 264.133193][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.133796][ T985] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.141584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.161645][ T62] m920x_read = error: -19 [ 264.166221][ T62] dvb-usb: error while querying for an remote control event. [ 264.174655][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.177023][ T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.182921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.222814][ T985] usb 7-1: Product: syz [ 264.235629][ T985] usb 7-1: Manufacturer: syz [ 264.250198][T10769] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.1810'. [ 264.260078][ T985] usb 7-1: SerialNumber: syz [ 264.263640][T10769] netlink: Conntrack attr has 4 unknown bytes [ 264.276640][T10760] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 264.323807][ T62] m920x_read = error: -19 [ 264.328187][ T62] dvb-usb: error while querying for an remote control event. [ 264.453682][ T62] m920x_read = error: -19 [ 264.461640][ T62] dvb-usb: error while querying for an remote control event. [ 264.492147][T10760] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 264.500109][T10760] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 264.573679][ T62] m920x_read = error: -19 [ 264.578144][ T62] dvb-usb: error while querying for an remote control event. [ 264.694165][ T62] m920x_read = error: -19 [ 264.698645][ T62] dvb-usb: error while querying for an remote control event. [ 264.813641][ T62] m920x_read = error: -19 [ 264.818130][ T62] dvb-usb: error while querying for an remote control event. [ 264.933587][ T62] m920x_read = error: -19 [ 264.938096][ T62] dvb-usb: error while querying for an remote control event. [ 265.021408][ T5882] usb 2-1: USB disconnect, device number 26 [ 265.053901][ T24] m920x_read = error: -19 [ 265.058412][ T24] dvb-usb: error while querying for an remote control event. [ 265.112701][T10760] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 265.120333][T10760] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 265.173574][ T24] m920x_read = error: -19 [ 265.178090][ T24] dvb-usb: error while querying for an remote control event. [ 265.294130][ T5882] m920x_read = error: -19 [ 265.298590][ T5882] dvb-usb: error while querying for an remote control event. [ 265.329687][ T985] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 265.336525][ T985] cdc_ncm 7-1:1.0: setting rx_max = 16384 [ 265.413909][ T5882] m920x_read = error: -19 [ 265.418314][ T5882] dvb-usb: error while querying for an remote control event. [ 265.530428][ T985] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 265.536463][ T5882] m920x_read = error: -19 [ 265.550536][ T5882] dvb-usb: error while querying for an remote control event. [ 265.579538][ T985] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 265.633118][ T985] usb 7-1: USB disconnect, device number 6 [ 265.655381][ T985] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 265.673930][ T24] m920x_read = error: -19 [ 265.680459][ T24] dvb-usb: error while querying for an remote control event. [ 265.698470][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 265.741298][T10787] ip6gre1: entered promiscuous mode [ 265.747307][T10787] ip6gre1: entered allmulticast mode [ 265.777660][T10789] pim6reg1: entered promiscuous mode [ 265.787660][T10789] pim6reg1: entered allmulticast mode [ 265.804806][ T62] usb 4-1: USB disconnect, device number 26 [ 265.834017][ T5882] m920x_read = error: -19 [ 265.838570][ T5882] dvb-usb: error while querying for an remote control event. [ 265.964582][ T5882] m920x_read = error: -19 [ 265.969036][ T5882] dvb-usb: error while querying for an remote control event. [ 266.093832][ T5882] m920x_read = error: -19 [ 266.101346][ T5882] dvb-usb: error while querying for an remote control event. [ 266.223573][ T5882] m920x_read = error: -19 [ 266.235381][ T5882] dvb-usb: error while querying for an remote control event. [ 266.303555][ T62] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 266.363755][ T5882] m920x_read = error: -19 [ 266.374686][ T5882] dvb-usb: error while querying for an remote control event. [ 266.415511][ T985] usb 5-1: USB disconnect, device number 28 [ 266.465657][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 266.484375][ T62] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 266.492504][ T62] usb 4-1: config 0 has no interface number 0 [ 266.524047][ T24] m920x_read = error: -19 [ 266.529534][ T24] dvb-usb: error while querying for an remote control event. [ 266.573894][ T62] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.603548][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.615316][ T62] usb 4-1: Product: syz [ 266.619519][ T62] usb 4-1: Manufacturer: syz [ 266.654033][ T62] usb 4-1: SerialNumber: syz [ 266.672919][ T62] usb 4-1: config 0 descriptor?? [ 266.678873][ T5882] m920x_read = error: -19 [ 266.685598][ T5882] dvb-usb: error while querying for an remote control event. [ 266.712178][ T62] smsc95xx v2.0.0 [ 266.798969][ T5882] m920x_read = error: -19 [ 266.825164][ T5882] dvb-usb: error while querying for an remote control event. [ 266.853844][ T5882] net_ratelimit: 4 callbacks suppressed [ 266.853860][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.963618][ T5882] m920x_read = error: -19 [ 266.968224][ T5882] dvb-usb: error while querying for an remote control event. [ 267.083556][ T985] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 267.083767][ T5882] m920x_read = error: -19 [ 267.100686][ T5882] dvb-usb: error while querying for an remote control event. [ 267.125241][T10828] input: syz0 as /devices/virtual/input/input59 [ 267.135615][ T62] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 267.170715][ T62] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 267.244337][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.252873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.274518][ T6367] m920x_read = error: -19 [ 267.275113][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 267.282523][ T6367] dvb-usb: error while querying for an remote control event. [ 267.299648][ T985] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.311346][ T985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.321288][ T985] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 267.332117][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.352634][ T985] usb 5-1: config 0 descriptor?? [ 267.423554][ T5910] m920x_read = error: -19 [ 267.427966][ T5910] dvb-usb: error while querying for an remote control event. [ 267.573558][ T5910] m920x_read = error: -19 [ 267.578055][ T5910] dvb-usb: error while querying for an remote control event. [ 267.655922][ T5914] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 267.817416][ T985] nzxt-smart2 0003:1E71:2009.0031: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 267.857174][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.869131][ T62] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 267.872498][ T5914] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 267.893012][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.893680][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.901687][ T6367] m920x_read = error: -19 [ 267.915603][ T5914] usb 6-1: config 0 descriptor?? [ 267.933765][ T62] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 267.942140][ T6367] dvb-usb: error while querying for an remote control event. [ 267.993133][ T62] usb 4-1: USB disconnect, device number 27 [ 268.093928][ T6367] m920x_read = error: -19 [ 268.098326][ T6367] dvb-usb: error while querying for an remote control event. [ 268.135126][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 268.160688][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 268.189742][ T5914] usb 6-1: USB disconnect, device number 10 [ 268.244807][ T62] m920x_read = error: -19 [ 268.249627][ T62] dvb-usb: error while querying for an remote control event. [ 268.293369][ T30] audit: type=1326 audit(1770488260.346:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.6.1841" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d539 code=0x0 [ 268.362447][ T62] usb 5-1: USB disconnect, device number 29 [ 268.389524][ T6367] m920x_read = error: -19 [ 268.401497][ T6367] dvb-usb: error while querying for an remote control event. [ 268.533552][ T6367] m920x_read = error: -19 [ 268.538282][ T6367] dvb-usb: error while querying for an remote control event. [ 268.663520][ T5914] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 268.694006][ T62] m920x_read = error: -19 [ 268.698388][ T62] dvb-usb: error while querying for an remote control event. [ 268.823662][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 268.833614][ T62] m920x_read = error: -19 [ 268.837018][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.837987][ T62] dvb-usb: error while querying for an remote control event. [ 268.861566][ T5914] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 268.872187][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.888950][ T5914] usb 6-1: config 0 descriptor?? [ 268.926162][ T5914] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 268.926859][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.946272][ T6367] m920x_read = error: -19 [ 268.951187][ T6367] dvb-usb: error while querying for an remote control event. [ 268.971055][ T5914] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 269.083653][ T62] m920x_read = error: -19 [ 269.088131][ T62] dvb-usb: error while querying for an remote control event. [ 269.286770][T10883] netlink: 'syz.1.1847': attribute type 9 has an invalid length. [ 269.313956][T10883] netlink: 'syz.1.1847': attribute type 11 has an invalid length. [ 269.321822][T10883] netlink: 'syz.1.1847': attribute type 12 has an invalid length. [ 269.362668][T10883] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1847'. [ 269.386081][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'. [ 269.390375][ T5913] usb 6-1: USB disconnect, device number 11 [ 269.403585][ T62] m920x_read = error: -19 [ 269.403888][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.409937][ T62] dvb-usb: error while querying for an remote control event. [ 269.422134][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 269.434563][ T5913] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 269.463971][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 269.604253][ T62] m920x_read = error: -19 [ 269.622578][ T62] dvb-usb: error while querying for an remote control event. [ 269.753564][ T6367] m920x_read = error: -19 [ 269.761940][ T6367] dvb-usb: error while querying for an remote control event. [ 269.800058][ T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 269.889876][ T6492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.898291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.906447][ T6498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.915133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.934393][ T6367] m920x_read = error: -19 [ 269.959141][ T6367] dvb-usb: error while querying for an remote control event. [ 269.982750][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.997794][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 270.036324][ T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.073974][ T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.139602][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 270.151130][ T6367] m920x_read = error: -19 [ 270.173634][ T6367] dvb-usb: error while querying for an remote control event. [ 270.198360][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 270.219890][ T62] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 270.231111][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.284473][ T6367] m920x_read = error: -19 [ 270.290653][ T6367] dvb-usb: error while querying for an remote control event. [ 270.299542][ T62] hub 7-1:1.0: bad descriptor, ignoring hub [ 270.317160][ T62] hub 7-1:1.0: probe with driver hub failed with error -5 [ 270.348009][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 270.353261][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 270.402954][ T62] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 270.421104][ T62] cdc_wdm 7-1:1.0: Unknown control protocol [ 270.445184][ T5910] m920x_read = error: -19 [ 270.449718][ T5910] dvb-usb: error while querying for an remote control event. [ 270.594628][ T62] m920x_read = error: -19 [ 270.612062][ T62] dvb-usb: error while querying for an remote control event. [ 270.733929][ T62] m920x_read = error: -19 [ 270.748116][ T62] dvb-usb: error while querying for an remote control event. [ 270.885181][ T62] m920x_read = error: -19 [ 270.891040][ T62] dvb-usb: error while querying for an remote control event. [ 271.043722][ T5910] m920x_read = error: -19 [ 271.051172][ T5910] dvb-usb: error while querying for an remote control event. [ 271.184081][ T62] m920x_read = error: -19 [ 271.188500][ T62] dvb-usb: error while querying for an remote control event. [ 271.281545][T10933] veth3: entered allmulticast mode [ 271.333575][ T62] m920x_read = error: -19 [ 271.338505][ T62] dvb-usb: error while querying for an remote control event. [ 271.464856][ T62] m920x_read = error: -19 [ 271.469298][ T62] dvb-usb: error while querying for an remote control event. [ 271.483992][ T5914] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 271.564192][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.568553][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 271.598951][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 271.623580][ T62] m920x_read = error: -19 [ 271.627979][ T62] dvb-usb: error while querying for an remote control event. [ 271.693522][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 271.721771][ T5914] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 271.760864][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.772582][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.795204][ T5910] m920x_read = error: -19 [ 271.807559][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.809987][ T5910] dvb-usb: error while querying for an remote control event. [ 271.827527][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.854901][ T5913] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 271.865281][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.900729][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.923034][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.936770][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.971095][ T5914] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 271.976485][ T62] m920x_read = error: -19 [ 271.983624][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 271.992728][ T5914] usb 6-1: SerialNumber: syz [ 272.001261][ T5914] usb 6-1: config 0 descriptor?? [ 272.012833][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input60 [ 272.033476][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 272.042120][ T5913] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 272.051962][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.063464][ T62] dvb-usb: error while querying for an remote control event. [ 272.073836][ T5910] net_ratelimit: 3 callbacks suppressed [ 272.073851][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.075528][ T5913] usb 5-1: config 0 descriptor?? [ 272.117079][ T5913] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 272.183738][ T62] m920x_read = error: -19 [ 272.188189][ T62] dvb-usb: error while querying for an remote control event. [ 272.254618][ T5180] bcm5974 6-1:0.0: could not read from device [ 272.271965][ T5180] bcm5974 6-1:0.0: could not read from device [ 272.313562][ T5180] bcm5974 6-1:0.0: could not read from device [ 272.314295][ T62] m920x_read = error: -19 [ 272.332281][ T5914] usb 6-1: USB disconnect, device number 12 [ 272.340116][ T62] dvb-usb: error while querying for an remote control event. [ 272.493578][ T62] m920x_read = error: -19 [ 272.498233][ T62] dvb-usb: error while querying for an remote control event. [ 272.545143][ T6367] usb 7-1: USB disconnect, device number 7 [ 272.683866][ T62] m920x_read = error: -19 [ 272.713132][ T62] dvb-usb: error while querying for an remote control event. [ 272.776951][ T6498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.844571][ T6367] m920x_read = error: -19 [ 272.854699][ T6367] dvb-usb: error while querying for an remote control event. [ 272.924013][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.932627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.973682][ T6367] m920x_read = error: -19 [ 272.978112][ T6367] dvb-usb: error while querying for an remote control event. [ 272.999983][ T6498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.067887][ T6498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.084274][ T6367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.123585][ T62] m920x_read = error: -19 [ 273.128040][ T62] dvb-usb: error while querying for an remote control event. [ 273.170828][ T6498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.243583][ T6367] m920x_read = error: -19 [ 273.254223][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 273.259912][ T6367] dvb-usb: error while querying for an remote control event. [ 273.341966][ T6498] bridge_slave_1: left allmulticast mode [ 273.348895][ T6498] bridge_slave_1: left promiscuous mode [ 273.355090][ T5913] gspca_vc032x: reg_w err -71 [ 273.361144][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.366933][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.372244][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.378008][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.386518][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.391972][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.394483][ T6367] m920x_read = error: -19 [ 273.397349][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.402242][ T6367] dvb-usb: error while querying for an remote control event. [ 273.407219][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407233][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407242][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407251][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407260][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407269][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407277][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407286][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407295][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407303][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407312][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407320][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 273.407329][ T5913] gspca_vc032x: Unknown sensor... [ 273.407408][ T5913] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 273.425654][ T6498] bridge_slave_0: left allmulticast mode [ 273.452856][ T5913] usb 5-1: USB disconnect, device number 30 [ 273.499480][ T6498] bridge_slave_0: left promiscuous mode [ 273.517126][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.575221][ T5910] m920x_read = error: -19 [ 273.579705][ T5910] dvb-usb: error while querying for an remote control event. [ 273.693887][ T5910] m920x_read = error: -19 [ 273.698285][ T5910] dvb-usb: error while querying for an remote control event. [ 273.828488][ T5910] m920x_read = error: -19 [ 273.832864][ T5910] dvb-usb: error while querying for an remote control event. [ 273.855024][ T6498] dvmrp0 (unregistering): left allmulticast mode [ 273.953700][ T5910] m920x_read = error: -19 [ 273.958137][ T5910] dvb-usb: error while querying for an remote control event. [ 273.966067][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 273.973615][ C0] ------------[ cut here ]------------ [ 273.975628][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 273.979525][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci4 [ 273.994184][ C0] WARNING: kernel/workqueue.c:2252 at __queue_work+0xd1f/0xf90, CPU#0: kworker/u8:7/3504 [ 274.004278][ C0] Modules linked in: [ 274.008456][ C0] CPU: 0 UID: 0 PID: 3504 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.019647][ C0] Tainted: [L]=SOFTLOCKUP [ 274.023960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 274.034004][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 274.040252][ C0] RIP: 0010:__queue_work+0xd4a/0xf90 [ 274.045527][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 37 88 a0 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e c1 [ 274.065141][ C0] RSP: 0000:ffffc90000007c30 EFLAGS: 00010086 [ 274.071201][ C0] RAX: 1ffff1100b9d9951 RBX: 0000000000000008 RCX: ffff888031173d00 [ 274.079162][ C0] RDX: ffff8880591fc978 RSI: ffffffff8a8b7c40 RDI: ffffffff8ff20bf0 [ 274.087128][ C0] RBP: 0000000000000100 R08: ffffffff8fef2077 R09: 1ffffffff1fde40e [ 274.095091][ C0] R10: dffffc0000000000 R11: ffffffff818c47d0 R12: dffffc0000000000 [ 274.103049][ C0] R13: ffff88805cecca88 R14: ffffffff8ff20bf0 R15: ffff8880591fc978 [ 274.111012][ C0] FS: 0000000000000000(0000) GS:ffff8881256f3000(0000) knlGS:0000000000000000 [ 274.119932][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.126586][ C0] CR2: 0000000030d11ff8 CR3: 000000000e346000 CR4: 00000000003526f0 [ 274.134596][ C0] Call Trace: [ 274.137864][ C0] [ 274.140702][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.145726][ C0] call_timer_fn+0x192/0x5a0 [ 274.150576][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 274.156368][ C0] ? call_timer_fn+0xd4/0x5a0 [ 274.161040][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 274.166148][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 274.171247][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 274.177040][ C0] __run_timer_base+0x67e/0x8b0 [ 274.181911][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 274.187308][ C0] run_timer_softirq+0xb7/0x170 [ 274.192179][ C0] handle_softirqs+0x22a/0x7c0 [ 274.196950][ C0] ? do_softirq+0x76/0xd0 [ 274.201293][ C0] ? cfg80211_inform_single_bss_data+0x13b9/0x1ab0 [ 274.207789][ C0] do_softirq+0x76/0xd0 [ 274.211948][ C0] [ 274.214864][ C0] [ 274.217776][ C0] __local_bh_enable_ip+0xf8/0x130 [ 274.222884][ C0] cfg80211_inform_single_bss_data+0x13b9/0x1ab0 [ 274.229726][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 274.234830][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 274.241524][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 274.246456][ C0] ? cfg80211_inform_bss_data+0x22c/0x3c20 [ 274.252258][ C0] cfg80211_inform_bss_data+0x23f/0x3c20 [ 274.257986][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 274.264079][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.269096][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 274.275511][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 274.281312][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x710 [ 274.287391][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 274.293199][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 274.298834][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 274.305243][ C0] ? sta_info_get+0x4f/0x300 [ 274.309827][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 274.316065][ C0] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2c80 [ 274.322223][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.327150][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 274.333383][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 274.339888][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 274.345780][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.350720][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.355760][ C0] ? kcov_remote_start+0x17f/0x7a0 [ 274.360869][ C0] ieee80211_iface_work+0x85e/0x12b0 [ 274.366245][ C0] cfg80211_wiphy_work+0x2ab/0x450 [ 274.371446][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 274.377173][ C0] process_scheduled_works+0xaec/0x17a0 [ 274.382734][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.388799][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.393833][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.399191][ C0] ? schedule+0x90/0x360 [ 274.403429][ C0] worker_thread+0xda6/0x1360 [ 274.408115][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 274.413142][ C0] kthread+0x726/0x8b0 [ 274.417201][ C0] ? __pfx_worker_thread+0x10/0x10 [ 274.422392][ C0] ? __pfx_kthread+0x10/0x10 [ 274.426989][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.432202][ C0] ? __pfx_kthread+0x10/0x10 [ 274.436796][ C0] ret_from_fork+0x51b/0xa40 [ 274.441383][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.446482][ C0] ? __switch_to+0xc82/0x1410 [ 274.451155][ C0] ? __pfx_kthread+0x10/0x10 [ 274.455734][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.460506][ C0] [ 274.463512][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.470785][ C0] CPU: 0 UID: 0 PID: 3504 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.481794][ C0] Tainted: [L]=SOFTLOCKUP [ 274.486104][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 274.496247][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 274.502481][ C0] Call Trace: [ 274.505765][ C0] [ 274.508614][ C0] vpanic+0x1e0/0x670 [ 274.512595][ C0] panic+0xc5/0xd0 [ 274.516304][ C0] ? __pfx_panic+0x10/0x10 [ 274.520713][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 274.525640][ C0] __warn+0x315/0x4a0 [ 274.529640][ C0] ? __queue_work+0xd1f/0xf90 [ 274.534301][ C0] ? __queue_work+0xd1f/0xf90 [ 274.538986][ C0] __report_bug+0x29a/0x540 [ 274.543481][ C0] ? __queue_work+0xd1f/0xf90 [ 274.548142][ C0] ? __pfx___report_bug+0x10/0x10 [ 274.553150][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 274.558514][ C0] ? register_lock_class+0x31/0x2e0 [ 274.563795][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.568731][ C0] report_bug_entry+0x19a/0x290 [ 274.573575][ C0] ? __queue_work+0xd4a/0xf90 [ 274.578234][ C0] ? __queue_work+0xd4f/0xf90 [ 274.582892][ C0] handle_bug+0xca/0x200 [ 274.587134][ C0] exc_invalid_op+0x1a/0x50 [ 274.591642][ C0] asm_exc_invalid_op+0x1a/0x20 [ 274.596485][ C0] RIP: 0010:__queue_work+0xd4a/0xf90 [ 274.601933][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 37 88 a0 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e c1 [ 274.621538][ C0] RSP: 0000:ffffc90000007c30 EFLAGS: 00010086 [ 274.627682][ C0] RAX: 1ffff1100b9d9951 RBX: 0000000000000008 RCX: ffff888031173d00 [ 274.635641][ C0] RDX: ffff8880591fc978 RSI: ffffffff8a8b7c40 RDI: ffffffff8ff20bf0 [ 274.643632][ C0] RBP: 0000000000000100 R08: ffffffff8fef2077 R09: 1ffffffff1fde40e [ 274.651698][ C0] R10: dffffc0000000000 R11: ffffffff818c47d0 R12: dffffc0000000000 [ 274.659663][ C0] R13: ffff88805cecca88 R14: ffffffff8ff20bf0 R15: ffff8880591fc978 [ 274.667655][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 274.673544][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 274.678830][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.683850][ C0] call_timer_fn+0x192/0x5a0 [ 274.688539][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 274.694418][ C0] ? call_timer_fn+0xd4/0x5a0 [ 274.699099][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 274.704213][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 274.709312][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 274.715105][ C0] __run_timer_base+0x67e/0x8b0 [ 274.720011][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 274.725386][ C0] run_timer_softirq+0xb7/0x170 [ 274.730230][ C0] handle_softirqs+0x22a/0x7c0 [ 274.734988][ C0] ? do_softirq+0x76/0xd0 [ 274.739306][ C0] ? cfg80211_inform_single_bss_data+0x13b9/0x1ab0 [ 274.745800][ C0] do_softirq+0x76/0xd0 [ 274.750031][ C0] [ 274.752946][ C0] [ 274.755872][ C0] __local_bh_enable_ip+0xf8/0x130 [ 274.760965][ C0] cfg80211_inform_single_bss_data+0x13b9/0x1ab0 [ 274.767288][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 274.772398][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 274.779081][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 274.784099][ C0] ? cfg80211_inform_bss_data+0x22c/0x3c20 [ 274.789902][ C0] cfg80211_inform_bss_data+0x23f/0x3c20 [ 274.795550][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 274.801724][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.806660][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 274.813073][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 274.818873][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x710 [ 274.824936][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 274.830744][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 274.836372][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 274.842533][ C0] ? sta_info_get+0x4f/0x300 [ 274.847116][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 274.853353][ C0] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2c80 [ 274.859524][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.864454][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c80 [ 274.870695][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 274.877212][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 274.883129][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 274.888087][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.893385][ C0] ? kcov_remote_start+0x17f/0x7a0 [ 274.898600][ C0] ieee80211_iface_work+0x85e/0x12b0 [ 274.903986][ C0] cfg80211_wiphy_work+0x2ab/0x450 [ 274.909184][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 274.915346][ C0] process_scheduled_works+0xaec/0x17a0 [ 274.920997][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.927055][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.932075][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.937443][ C0] ? schedule+0x90/0x360 [ 274.941728][ C0] worker_thread+0xda6/0x1360 [ 274.946459][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 274.951518][ C0] kthread+0x726/0x8b0 [ 274.955694][ C0] ? __pfx_worker_thread+0x10/0x10 [ 274.960824][ C0] ? __pfx_kthread+0x10/0x10 [ 274.965421][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.970614][ C0] ? __pfx_kthread+0x10/0x10 [ 274.975304][ C0] ret_from_fork+0x51b/0xa40 [ 274.979927][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 274.985044][ C0] ? __switch_to+0xc82/0x1410 [ 274.989726][ C0] ? __pfx_kthread+0x10/0x10 [ 274.994318][ C0] ret_from_fork_asm+0x1a/0x30 [ 274.999121][ C0] [ 275.002564][ C0] Kernel Offset: disabled [ 275.006889][ C0] Rebooting in 86400 seconds..