last executing test programs: 8m31.067982853s ago: executing program 3 (id=5003): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x20000010}) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x4004040) 8m30.984907021s ago: executing program 3 (id=5004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 8m30.906647449s ago: executing program 3 (id=5005): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000008, 0x32, 0xffffffffffffffff, 0xffffe000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x200, 0x0, 'queue1\x00'}) poll(&(0x7f0000000080)=[{r0, 0x81}], 0x1, 0x2000009d) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 8m29.921416061s ago: executing program 3 (id=5017): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 8m28.946690975s ago: executing program 3 (id=5029): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x19) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2a00184, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) 8m28.581530716s ago: executing program 3 (id=5037): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004842, 0x0) r0 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x10000000000000, 0x0}) io_uring_enter(r0, 0x567, 0x20, 0x0, 0x0, 0x0) 8m28.351501736s ago: executing program 32 (id=5037): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004842, 0x0) r0 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x10000000000000, 0x0}) io_uring_enter(r0, 0x567, 0x20, 0x0, 0x0, 0x0) 7m54.792450485s ago: executing program 4 (id=5395): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 7m54.717009525s ago: executing program 4 (id=5396): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x120, 0x0) 7m53.793987182s ago: executing program 4 (id=5402): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000340)={0x0, 0x0, 0x0, r2, 0xeeeeeeee}) 7m53.749908456s ago: executing program 4 (id=5403): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 7m52.825472448s ago: executing program 4 (id=5417): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x28000101, 0x2, 0x4, 0x0, 0xe3}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x800}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7m52.325464655s ago: executing program 0 (id=5422): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 7m52.261946192s ago: executing program 4 (id=5423): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) 7m51.815111011s ago: executing program 33 (id=5423): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) 7m51.807619283s ago: executing program 0 (id=5427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@private0, 0xfffd, 0x1, 0x0, 0x0, 0xa}, {0x80000000000202, 0x6, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0xc37e, 0x1}, {0x40000000058, 0x7, 0x8, 0xc7e}, 0x80000004, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x1004d3, 0x33}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x5, 0x67a01bcf906970c1, 0x7f, 0x7, 0xfffffffd}}, 0xe8) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40000) 7m51.726225434s ago: executing program 0 (id=5430): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x88582) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x3, 0x0, 0x0, 0x1d, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108000027875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x3a7, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8c082) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x202, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000005e4400000000080000000000000014a2648f00", "2809e8dbe108038997bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acecffffffffffffff00", "0000000000000008000000000000b6050087402816d3fda370e78fa58200", [0xc00, 0x3]}}) 7m51.609690582s ago: executing program 0 (id=5432): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 7m50.686947463s ago: executing program 0 (id=5435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x80000000000cd}]}) 7m49.660967215s ago: executing program 0 (id=5439): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 7m49.114098013s ago: executing program 34 (id=5439): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 4.032715833s ago: executing program 2 (id=10801): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1001, 0x24ff87199961d6af, 0xdcf, 0x4004, 0xb, 0xdc1, 0x0, 0x0, 0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x5, 0x0, 0x15, 0x80000001, 0x0, 0x1, 0x9e9, 0x80, 0xb877, 0x8000, 0x7, 0xffffffffffffffff, 0xee01, 0x3d, 0x86}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.906376544s ago: executing program 2 (id=10802): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.450806764s ago: executing program 5 (id=10806): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 3.286890558s ago: executing program 5 (id=10809): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000025, {0x0, 0xf0}, 0xfe}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 2.822985471s ago: executing program 6 (id=10817): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.822666242s ago: executing program 7 (id=10818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x26) 2.770361654s ago: executing program 6 (id=10820): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2.709057205s ago: executing program 7 (id=10821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0xd000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x100000, 0x1000, &(0x7f00003dc000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2.682440736s ago: executing program 6 (id=10822): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x400, 0x8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.604434358s ago: executing program 7 (id=10824): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) sendmsg$can_j1939(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x2, {0x1, 0x1}, {0x2, 0x0, 0x2}, 0x0, 0xff}, {0x3, 0x3, {0x2, 0x1, 0x1}, {0x1, 0xf0}, 0x0, 0x2}, {0x3, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x5}, 0x0, 0xff}], 0x60) 2.597620952s ago: executing program 6 (id=10825): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000020400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x16, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @dev, @void, {@llc_tr={0x11, {@snap={0xab, 0xaa, "16", "61c224", 0xf9}}}}}, 0x0) 2.492730253s ago: executing program 7 (id=10826): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x2000}) 2.492471401s ago: executing program 6 (id=10827): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) exit(0xffff) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000940)=""/131, 0x83}], 0x1) 2.321390817s ago: executing program 7 (id=10829): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) 2.220797055s ago: executing program 7 (id=10831): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x60, 0x10, 0x1, "da"}, 0x0, 0x0, 0x0, 0x0}) 1.623786842s ago: executing program 6 (id=10833): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000140)={0x20, 0x11, 0x6, "c9e024c4ed98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000280)={0x20, 0xb, 0x4, "93b7f1ef"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.291033629s ago: executing program 1 (id=10840): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r2 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r2, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000640)={{0xd, 0x2, 0x81, 0x5, 'syz1\x00', 0x9}, 0x0, [0x380, 0xe8af, 0x5, 0xcc0, 0xdbd8, 0x101, 0x480, 0xa6da, 0x2, 0x1, 0x9, 0x3, 0xb, 0xfffffff7, 0x8, 0x10, 0x20000005, 0x1000, 0x40f, 0x80, 0x962, 0x2, 0x3, 0x3, 0x7fffffff, 0x9c, 0x80000001, 0x589, 0x60e3, 0x3, 0x8, 0x10000, 0x7, 0x9, 0x7430, 0xffffdeba, 0x15, 0x8609, 0x81, 0x3, 0x6, 0x5, 0x8001, 0xb, 0x8000, 0x1, 0x1, 0x0, 0xffff1684, 0x2, 0x0, 0x4, 0x1000, 0xe96, 0x4, 0x7ff, 0x7, 0x6, 0x50a, 0x0, 0x125, 0x7ff, 0x1000, 0xffffffff, 0x4, 0x5, 0x7a, 0x2, 0xd, 0x2, 0x5, 0x7, 0xaf, 0x7, 0x7, 0x9, 0x8000, 0x3ff, 0x4, 0x7, 0xd, 0x7, 0xa, 0x3, 0x0, 0x40, 0x2, 0x6, 0x7ff, 0x3, 0x3b9, 0x6, 0x4, 0x6, 0x487d, 0x8000, 0x1, 0x8, 0x3, 0x3, 0x4, 0xc, 0xe, 0xfffffffe, 0x200007, 0x9, 0xc, 0x4, 0x1, 0x9, 0x3ce, 0xa, 0x8, 0xb, 0x5d, 0x2, 0x7, 0xffffbf90, 0x0, 0x820, 0x2, 0x0, 0x7, 0xa, 0x809, 0xc960, 0x73938332, 0x3]}) 1.255617398s ago: executing program 1 (id=10841): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 780.852103ms ago: executing program 2 (id=10842): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 762.392457ms ago: executing program 2 (id=10843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x1000200001ee0000, 0x1}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 669.296736ms ago: executing program 5 (id=10844): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x1000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) 647.39464ms ago: executing program 2 (id=10845): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) 480.99266ms ago: executing program 5 (id=10846): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 464.924839ms ago: executing program 5 (id=10847): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x84, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 359.591129ms ago: executing program 1 (id=10848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x7, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x0, 0x2e, 0x20000000, 0x4}, 0x9c) 267.119778ms ago: executing program 1 (id=10849): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 148.872965ms ago: executing program 5 (id=10850): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x40000002, 0x0, 0x1, 0x1}) 148.621595ms ago: executing program 1 (id=10851): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 62.434991ms ago: executing program 1 (id=10852): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) syz_usb_disconnect(r0) 0s ago: executing program 2 (id=10853): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): tsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 809.592471][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 809.605099][ T5901] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 809.625161][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 809.643578][ T5901] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 809.681929][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 809.707363][ T5901] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 809.728989][ T5901] usb 3-1: string descriptor 0 read error: -22 [ 809.735447][ T5901] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 809.746287][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.772716][ T5901] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 810.095801][ T5901] usb 3-1: USB disconnect, device number 127 [ 810.102530][T28412] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 810.213318][ T30] audit: type=1804 audit(1768256471.338:776): pid=28415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.9378" name="/newroot/657/file1" dev="tmpfs" ino=3376 res=1 errno=0 [ 811.022418][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 811.199991][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 811.222220][ T5901] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 811.252037][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.275327][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 811.284940][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 811.301958][ T5901] usb 3-1: Product: syz [ 811.316039][ T5901] usb 3-1: Manufacturer: syz [ 811.328118][ T5901] usb 3-1: SerialNumber: syz [ 811.569400][ T5901] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 811.605925][ T30] audit: type=1326 audit(1768256472.728:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28472 comm="syz.5.9401" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf702d539 code=0x0 [ 811.723478][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.866708][T28480] vivid-002: disconnect [ 811.909652][T28477] vivid-002: reconnect [ 812.098000][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9405'. [ 812.687178][ T3097] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 812.848701][ T3097] usb 2-1: unable to get BOS descriptor or descriptor too short [ 812.863048][ T3097] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 812.882614][ T3097] usb 2-1: can't read configurations, error -71 [ 813.060620][T28507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 813.163979][ T30] audit: type=1326 audit(1768256474.298:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28511 comm="syz.5.9415" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 813.772629][ T24] usb 3-1: USB disconnect, device number 2 [ 813.797077][ T24] usblp0: removed [ 814.747371][T28574] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 814.773448][T28574] kvm: apic: phys broadcast and lowest prio [ 814.779381][T28574] kvm: Disabled LAPIC found during irq injection [ 815.115719][T28590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 815.549186][T28619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9460'. [ 815.549197][T28622] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 815.586199][T28622] bond1: (slave lo): Enslaving as an active interface with an up link [ 815.608774][T28622] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 815.829264][ T30] audit: type=1326 audit(1768256476.958:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28627 comm="syz.1.9462" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 817.011372][ T5938] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 817.217955][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 817.235400][ T5938] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 817.246767][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.257374][ T5938] usb 6-1: config 0 descriptor?? [ 817.572407][ T3097] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 817.731956][ T3097] usb 3-1: Using ep0 maxpacket: 8 [ 817.740957][ T3097] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 817.749840][ T3097] usb 3-1: config 0 has no interface number 0 [ 817.756586][ T3097] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 817.769021][ T3097] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 817.782224][ T3097] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 817.793890][ T3097] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.809563][ T3097] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 817.820952][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.832932][ T3097] usb 3-1: Product: syz [ 817.837107][ T3097] usb 3-1: Manufacturer: syz [ 817.842108][ T3097] usb 3-1: SerialNumber: syz [ 817.853074][ T3097] usb 3-1: config 0 descriptor?? [ 817.873724][ T5938] usb 6-1: language id specifier not provided by device, defaulting to English [ 818.074977][ T5938] letsketch 0003:6161:4D15.008A: Device info: Њ [ 818.075415][ T3097] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 818.276027][ T5938] letsketch 0003:6161:4D15.008A: Device info: 劸 [ 818.305259][ T3097] usb 3-1: USB disconnect, device number 3 [ 818.442171][T17532] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 818.506924][ T5938] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 818.515946][ T5938] letsketch 0003:6161:4D15.008A: probe with driver letsketch failed with error -71 [ 818.528565][ T5938] usb 6-1: USB disconnect, device number 70 [ 818.601947][T17532] usb 2-1: Using ep0 maxpacket: 32 [ 818.609381][T17532] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 818.619081][T17532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.628881][T17532] usb 2-1: config 0 descriptor?? [ 818.638639][T17532] as10x_usb: device has been detected [ 818.644870][T17532] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 818.656571][T17532] usb 2-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 818.706654][T17532] as10x_usb: error during firmware upload part1 [ 818.715001][T17532] Registered device nBox DVB-T Dongle [ 818.762124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 818.883782][T28690] input: syz0 as /devices/virtual/input/input140 [ 818.987531][ T24] usb 2-1: USB disconnect, device number 120 [ 819.028203][ T24] Unregistered device nBox DVB-T Dongle [ 819.053884][ T24] as10x_usb: device has been disconnected [ 819.432251][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 819.588188][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 819.600662][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.610405][ T24] usb 3-1: Product: syz [ 819.615074][ T24] usb 3-1: Manufacturer: syz [ 819.619666][ T24] usb 3-1: SerialNumber: syz [ 819.831988][ T10] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 819.985505][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 819.995015][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.003070][ T10] usb 6-1: Product: syz [ 820.007247][ T10] usb 6-1: Manufacturer: syz [ 820.011835][ T10] usb 6-1: SerialNumber: syz [ 820.018639][ T10] usb 6-1: config 0 descriptor?? [ 820.034677][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 820.049188][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 820.132321][ T3097] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 820.262340][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 820.274937][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 820.285307][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 820.297364][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 820.305463][ T3097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.319808][ T3097] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 820.330538][ T24] usb 3-1: USB disconnect, device number 4 [ 820.353043][ T3097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.380452][ T3097] usb 2-1: config 0 descriptor?? [ 820.798264][ T3097] holtek 0003:1241:5015.008B: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 820.825127][ T3097] holtek 0003:1241:5015.008B: no inputs found [ 821.062350][ T3097] usb 2-1: USB disconnect, device number 121 [ 821.247211][ T10] usb 6-1: f81604_read: reg: 100e failed: -EPROTO [ 821.272430][T28736] binder: 28735:28736 ioctl c0306201 800003c0 returned -14 [ 821.320968][ T10] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 821.329210][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.349039][ T10] usb 6-1: USB disconnect, device number 71 [ 821.373666][ T10] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 821.419117][ T5495] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 821.443291][ T5495] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 821.459543][ T10] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 821.927590][T28760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9514'. [ 822.009657][T28765] input: syz0 as /devices/virtual/input/input141 [ 822.633499][T28796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9525'. [ 823.032125][ T3097] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 823.161469][ T30] audit: type=1326 audit(1768256484.288:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28816 comm="syz.7.9532" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x0 [ 823.212323][ T3097] usb 3-1: Using ep0 maxpacket: 32 [ 823.221471][ T3097] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 823.230560][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.238750][ T3097] usb 3-1: Product: syz [ 823.245956][ T3097] usb 3-1: Manufacturer: syz [ 823.250571][ T3097] usb 3-1: SerialNumber: syz [ 823.262833][ T3097] usb 3-1: config 0 descriptor?? [ 823.271157][ T3097] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 824.352243][ T5918] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 824.496056][ T3097] gspca_topro: reg_w err -71 [ 824.542518][ T3097] gspca_topro: Sensor soi763a [ 824.586951][ T3097] usb 3-1: USB disconnect, device number 5 [ 824.619550][ T5918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 824.655263][ T5918] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 824.713090][ T5918] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 824.726499][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.755130][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.764022][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.787163][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.788291][T28832] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 824.807410][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.815812][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.826134][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.834346][T28849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.996545][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 825.394247][T28870] syzkaller1: entered promiscuous mode [ 825.400209][T28870] syzkaller1: entered allmulticast mode [ 825.739146][T17532] usb 2-1: USB disconnect, device number 122 [ 826.452041][ T3097] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 826.585967][T28924] net_ratelimit: 38 callbacks suppressed [ 826.585979][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.600416][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.609820][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.611984][ T3097] usb 3-1: Using ep0 maxpacket: 32 [ 826.625703][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.627648][ T3097] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 826.642779][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.651132][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.660221][ T3097] usb 3-1: config 0 has no interface number 0 [ 826.660658][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.668003][ T3097] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 826.689182][ T3097] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 826.702059][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.720419][ T3097] usb 3-1: Product: syz [ 826.724845][ T3097] usb 3-1: Manufacturer: syz [ 826.729448][ T3097] usb 3-1: SerialNumber: syz [ 826.732517][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.749463][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.755554][ T3097] usb 3-1: config 0 descriptor?? [ 826.769343][T28924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.781289][ T3097] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 827.588494][ T3097] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input142 [ 827.781783][ T30] audit: type=1326 audit(1768256488.828:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 827.835644][ T30] audit: type=1326 audit(1768256488.868:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 827.892103][ T30] audit: type=1326 audit(1768256488.868:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 827.934203][T28949] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 827.943590][ T30] audit: type=1326 audit(1768256488.878:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 827.991992][ T30] audit: type=1326 audit(1768256488.878:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.027264][ T30] audit: type=1326 audit(1768256488.878:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.054917][ T3097] usb 3-1: USB disconnect, device number 6 [ 828.056648][ T30] audit: type=1326 audit(1768256488.878:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.135616][ T30] audit: type=1326 audit(1768256488.878:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.207760][ T30] audit: type=1326 audit(1768256488.878:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.230135][ T30] audit: type=1326 audit(1768256488.878:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.314291][ T30] audit: type=1326 audit(1768256488.878:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.337490][T28957] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.9590'. [ 828.395849][ T30] audit: type=1326 audit(1768256488.878:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.452447][ T30] audit: type=1326 audit(1768256488.878:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.507467][ T30] audit: type=1326 audit(1768256488.878:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.5.9587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 828.701671][T28972] netlink: 'syz.7.9596': attribute type 10 has an invalid length. [ 828.877955][T28972] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 828.900073][T28982] syzkaller1: entered promiscuous mode [ 828.923951][T28982] syzkaller1: entered allmulticast mode [ 829.237945][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9603'. [ 829.257427][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9603'. [ 829.273393][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9603'. [ 832.244211][ T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 832.318403][T29093] netlink: 'syz.2.9643': attribute type 12 has an invalid length. [ 832.330035][T29093] netlink: 'syz.2.9643': attribute type 29 has an invalid length. [ 832.338480][T29093] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9643'. [ 832.347750][T29093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9643'. [ 832.423158][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 832.434408][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.445883][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.457960][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 832.474597][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 832.484226][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 832.507850][ T24] usb 2-1: Manufacturer: syz [ 832.528160][ T24] usb 2-1: config 0 descriptor?? [ 832.954732][ T24] appleir 0003:05AC:8243.008C: unknown main item tag 0x0 [ 832.966050][ T24] appleir 0003:05AC:8243.008C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 833.233762][ T5938] usb 2-1: USB disconnect, device number 123 [ 833.848980][T29109] veth1_to_bridge: entered allmulticast mode [ 833.857632][T29109] veth1_to_bridge: left allmulticast mode [ 834.028518][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9654'. [ 834.039553][T29121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9654'. [ 834.432043][ T5894] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 834.582238][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 834.589833][ T5894] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 834.599098][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 834.619087][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 834.629724][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 834.640401][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.653932][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 834.665750][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.908543][ T5894] usb 3-1: GET_CAPABILITIES returned 0 [ 834.915370][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 835.200886][T29155] kernel read not supported for file /file0 (pid: 29155 comm: syz.1.9667) [ 835.229619][ T30] audit: type=1800 audit(1768256496.358:795): pid=29155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9667" name="file0" dev="mqueue" ino=146573 res=0 errno=0 [ 835.276497][T29132] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 835.276653][ T10] usb 3-1: USB disconnect, device number 7 [ 835.642138][ T5894] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 835.802273][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 835.823774][ T5894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 835.835292][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 835.846398][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 835.859602][ T5894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 835.882143][ T5894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 835.891312][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.004981][T29174] batman_adv: batadv0: Adding interface: ip6gretap1 [ 836.013388][T29174] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 836.066533][T29174] batman_adv: batadv0: Interface activated: ip6gretap1 [ 836.166859][ T5894] usb 2-1: GET_CAPABILITIES returned 0 [ 836.177549][ T5894] usbtmc 2-1:16.0: can't read capabilities [ 836.374472][T29188] net_ratelimit: 68 callbacks suppressed [ 836.374489][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.391324][ T5894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 836.399529][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.408592][T29188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.439345][T29187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.449681][T29187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.483470][ T24] usb 2-1: USB disconnect, device number 124 [ 836.553583][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 836.563342][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 836.588512][ T5894] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 836.607980][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.616818][ T5894] usb 3-1: Product: syz [ 836.620996][ T5894] usb 3-1: Manufacturer: syz [ 836.626347][ T5894] usb 3-1: SerialNumber: syz [ 836.636191][ T5894] usb 3-1: config 0 descriptor?? [ 836.782260][ T5938] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 836.895665][T29205] netlink: 'syz.7.9690': attribute type 1 has an invalid length. [ 836.908022][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9689'. [ 836.923772][T29208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9689'. [ 836.951995][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 836.960330][ T5938] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 836.981273][ T5938] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 836.993836][T29205] ip6gre1: entered promiscuous mode [ 836.999491][T29205] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 837.010695][ T5938] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.022660][T29205] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 837.032429][ T5938] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.056524][T29205] bond2: (slave ip6gre1): making interface the new active one [ 837.066004][ T5938] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.076578][T29205] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 837.085647][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.095419][ T5894] gs_usb 3-1:0.0: Configuring for 82 interfaces [ 837.262609][T29219] binder: 29218:29219 ioctl c0306201 800003c0 returned -14 [ 837.342766][ T5938] usb 6-1: GET_CAPABILITIES returned 0 [ 837.348698][ T5938] usbtmc 6-1:16.0: can't read capabilities [ 837.555310][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.564414][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.573489][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.582549][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.591973][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.601043][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.610359][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.619419][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.628468][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.637515][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.646565][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.655598][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.664644][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.673702][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.682756][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 837.691791][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 837.735696][ T10] usb 6-1: USB disconnect, device number 72 [ 837.743288][T29230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9697'. [ 837.750048][ T5894] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 837.755441][T29230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9697'. [ 837.818987][T29233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.829863][T29233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.838598][T29233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.902479][T29236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.910731][T29236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.969979][ T5894] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 838.000329][ T5894] usb 3-1: USB disconnect, device number 8 [ 838.136291][T29243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9705'. [ 838.145334][T29243] netlink: 'syz.6.9705': attribute type 11 has an invalid length. [ 838.154596][T29243] netlink: 'syz.6.9705': attribute type 14 has an invalid length. [ 838.171019][T29243] vxlan2: entered promiscuous mode [ 838.478227][T29258] netlink: 'syz.7.9713': attribute type 3 has an invalid length. [ 838.494233][T29258] netlink: 'syz.7.9713': attribute type 3 has an invalid length. [ 839.099753][T29286] ip6gre1: entered promiscuous mode [ 839.105046][T29286] ip6gre1: entered allmulticast mode [ 839.219892][ T30] audit: type=1804 audit(1768256500.348:796): pid=29293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9727" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=146932 res=1 errno=0 [ 839.222050][ T3097] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 839.492125][ T3097] usb 2-1: Using ep0 maxpacket: 16 [ 839.508694][ T3097] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.520860][ T3097] usb 2-1: config 0 interface 0 has no altsetting 0 [ 839.531185][ T3097] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 839.541135][ T3097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.554742][ T3097] usb 2-1: config 0 descriptor?? [ 839.695681][ T5938] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 839.871707][ T5938] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 839.884201][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.901543][ T5938] usb 6-1: Product: syz [ 839.906058][ T5938] usb 6-1: Manufacturer: syz [ 839.910661][ T5938] usb 6-1: SerialNumber: syz [ 839.928089][ T5938] usb 6-1: config 0 descriptor?? [ 839.937087][ T5938] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 840.040062][ T3097] nzxt-smart2 0003:1E71:2009.008D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 840.484944][ T10] usb 2-1: USB disconnect, device number 125 [ 840.762930][ T3097] usb 6-1: USB disconnect, device number 73 [ 841.534292][T29364] lo: left promiscuous mode [ 841.547049][T29364] lo: left allmulticast mode [ 841.552967][T29364] tunl0: left promiscuous mode [ 841.558631][T29364] tunl0: left allmulticast mode [ 841.565764][T29364] gre0: left promiscuous mode [ 841.570468][T29364] gre0: left allmulticast mode [ 841.578728][T29364] gretap0: left promiscuous mode [ 841.584379][T29364] gretap0: left allmulticast mode [ 841.591418][T29364] erspan0: left promiscuous mode [ 841.596734][T29364] erspan0: left allmulticast mode [ 841.606012][T29364] ip_vti0: left promiscuous mode [ 841.610968][T29364] ip_vti0: left allmulticast mode [ 841.627835][T29364] ip6_vti0: left promiscuous mode [ 841.682007][T29364] ip6_vti0: left allmulticast mode [ 841.710133][T29370] input: syz1 as /devices/virtual/input/input144 [ 841.713027][T29364] sit0: left promiscuous mode [ 841.789574][T29364] sit0: left allmulticast mode [ 841.801038][T29364] ip6tnl0: left promiscuous mode [ 841.807659][T29364] ip6tnl0: left allmulticast mode [ 841.818330][T29364] ip6gre0: left promiscuous mode [ 841.823329][T29364] ip6gre0: left allmulticast mode [ 841.830116][T29364] ip6gretap0: left promiscuous mode [ 841.835854][T29364] ip6gretap0: left allmulticast mode [ 841.843537][T29364] bridge0: left promiscuous mode [ 841.849027][T29364] bridge0: left allmulticast mode [ 841.858179][T29364] vcan0: left promiscuous mode [ 841.864326][T29364] vcan0: left allmulticast mode [ 841.900966][T29364] bond0: left allmulticast mode [ 841.991557][T29364] bond_slave_0: left allmulticast mode [ 842.011524][T29364] bond_slave_1: left allmulticast mode [ 842.033730][T29364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.054091][T29364] team0: left promiscuous mode [ 842.058872][T29364] team_slave_0: left promiscuous mode [ 842.103650][T29364] team_slave_1: left promiscuous mode [ 842.112100][T29364] team0: left allmulticast mode [ 842.244027][T29364] team_slave_0: left allmulticast mode [ 842.277318][T29364] team_slave_1: left allmulticast mode [ 842.330408][T29364] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.338335][T29364] dummy0: left promiscuous mode [ 842.502004][T29364] dummy0: left allmulticast mode [ 842.513081][T29364] nlmon0: left promiscuous mode [ 842.518020][T29364] nlmon0: left allmulticast mode [ 842.543626][T29364] caif0: left promiscuous mode [ 842.555087][T29364] caif0: left allmulticast mode [ 842.565229][T29364] net_ratelimit: 3 callbacks suppressed [ 842.565243][T29364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 842.611197][T29383] syz_tun: entered allmulticast mode [ 842.630686][T29381] syz_tun: left allmulticast mode [ 842.652703][ T3097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 842.854945][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.484861][ T5894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.824163][T29433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 843.882733][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.894517][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.045593][T29439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 844.112250][ T5908] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 844.284772][ T5908] usb 6-1: Using ep0 maxpacket: 32 [ 844.298883][ T5908] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 844.308072][ T5908] usb 6-1: config 0 has no interface number 0 [ 844.318475][ T5908] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.333517][ T5908] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 844.342976][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.351041][ T5908] usb 6-1: Product: syz [ 844.357065][ T5908] usb 6-1: Manufacturer: syz [ 844.361727][ T5908] usb 6-1: SerialNumber: syz [ 844.375341][ T5908] usb 6-1: config 0 descriptor?? [ 844.385259][ T5908] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 844.395238][ T5908] em28xx 6-1:0.132: Video interface 132 found: [ 844.602639][T17532] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.800165][ T5908] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 844.949826][T29465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 845.013052][ T5908] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 845.042011][ T5908] em28xx 6-1:0.132: board has no eeprom [ 845.102217][ T5908] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 845.117587][T29474] veth3: entered allmulticast mode [ 845.120343][ T5908] em28xx 6-1:0.132: analog set to bulk mode. [ 845.130101][T17532] em28xx 6-1:0.132: Registering V4L2 extension [ 845.153456][ T5908] usb 6-1: USB disconnect, device number 74 [ 845.181294][ T5908] em28xx 6-1:0.132: Disconnecting em28xx [ 845.292345][T18619] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 845.300120][T17532] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 845.307841][T17532] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 845.315262][T17532] em28xx 6-1:0.132: No AC97 audio processor [ 845.359800][T17532] usb 6-1: Decoder not found [ 845.366125][T17532] em28xx 6-1:0.132: failed to create media graph [ 845.372830][T17532] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 845.388979][T17532] em28xx 6-1:0.132: Remote control support is not available for this card. [ 845.400186][ T5908] em28xx 6-1:0.132: Closing input extension [ 845.413405][ T5908] em28xx 6-1:0.132: Freeing device [ 845.453710][T18619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.477775][T18619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.513411][T18619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 845.545130][T18619] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 845.563582][T18619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.581162][T18619] usb 3-1: config 0 descriptor?? [ 845.696378][ T30] audit: type=1326 audit(1768256506.828:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29481 comm="syz.5.9807" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 846.059003][T18619] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 846.185221][T29499] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9814'. [ 846.290700][T29501] input: syz1 as /devices/virtual/input/input146 [ 847.466527][T29536] bond0: (slave lo): Releasing backup interface [ 847.474190][T29536] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 847.500925][T29536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.802052][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 848.053467][ T3097] usb 3-1: USB disconnect, device number 9 [ 848.392317][T29566] input: syz0 as /devices/virtual/input/input147 [ 848.981997][T17532] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 849.245479][T17532] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 849.256170][T17532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.264591][T17532] usb 6-1: Product: syz [ 849.268899][T17532] usb 6-1: Manufacturer: syz [ 849.284991][T17532] usb 6-1: SerialNumber: syz [ 849.303010][T17532] usb 6-1: config 0 descriptor?? [ 849.329960][T17532] ch341 6-1:0.0: ch341-uart converter detected [ 849.448770][T29593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 850.021980][ T5918] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 850.187640][ T5918] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 850.213695][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.225588][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.235524][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 850.250196][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 850.259474][ T5918] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 850.267836][ T5918] usb 2-1: Manufacturer: syz [ 850.275887][ T5918] usb 2-1: config 0 descriptor?? [ 850.339838][T17532] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 850.371945][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 850.533974][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 850.556072][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 850.572131][ T10] usb 3-1: config 0 has no interface number 0 [ 850.578954][T17532] usb 6-1: USB disconnect, device number 75 [ 850.587361][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 850.598107][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.609249][T17532] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 850.624794][ T10] usb 3-1: Product: syz [ 850.631272][T17532] ch341 6-1:0.0: device disconnected [ 850.638648][ T10] usb 3-1: Manufacturer: syz [ 850.648839][ T10] usb 3-1: SerialNumber: syz [ 850.664353][ T10] usb 3-1: config 0 descriptor?? [ 850.677899][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 850.696164][ T5918] appleir 0003:05AC:8243.008F: unknown main item tag 0x0 [ 850.716584][ T5918] appleir 0003:05AC:8243.008F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 850.884954][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 850.906256][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 851.298627][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 851.306628][ T10] usb 3-1: USB disconnect, device number 10 [ 851.336169][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 851.365383][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 851.391527][ T10] quatech2 3-1:0.51: device disconnected [ 851.837574][ T5918] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 851.905944][T29657] input: syz1 as /devices/virtual/input/input148 [ 852.003181][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 852.014995][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.041326][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 852.063953][ T5918] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 852.073640][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.105075][ T5918] usb 6-1: config 0 descriptor?? [ 852.142460][T18619] usb 2-1: reset high-speed USB device number 126 using dummy_hcd [ 852.507192][T29680] netlink: 'syz.6.9889': attribute type 33 has an invalid length. [ 852.516576][T29680] netlink: 152 bytes leftover after parsing attributes in process `syz.6.9889'. [ 852.531262][T29680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9889'. [ 852.765069][T29689] loop9: detected capacity change from 0 to 7 [ 852.775236][T29689] Dev loop9: unable to read RDB block 7 [ 852.780921][T29689] loop9: unable to read partition table [ 852.787175][T29689] loop9: partition table beyond EOD, truncated [ 852.816465][T29689] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 852.904286][ T5918] usbhid 6-1:0.0: can't add hid device: -71 [ 852.919186][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 852.933190][ T3097] usb 2-1: USB disconnect, device number 126 [ 852.947127][ T5918] usb 6-1: USB disconnect, device number 76 [ 853.468750][T29703] netlink: 'syz.1.9899': attribute type 1 has an invalid length. [ 853.501818][T29703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 853.611974][T17532] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 853.771932][T17532] usb 3-1: Using ep0 maxpacket: 8 [ 853.792730][T17532] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 853.801778][T17532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.831920][T17532] usb 3-1: Product: syz [ 853.836096][T17532] usb 3-1: Manufacturer: syz [ 853.840712][T17532] usb 3-1: SerialNumber: syz [ 853.857927][T17532] usb 3-1: config 0 descriptor?? [ 853.866345][T29715] pim6reg1: entered promiscuous mode [ 853.876617][T29715] pim6reg1: entered allmulticast mode [ 853.885407][T17532] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 854.043575][T29719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9906'. [ 854.057771][T29720] bond1: (slave lo): Releasing backup interface [ 854.068252][T29720] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 854.105020][T29720] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 854.122458][ T3097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.137263][T29719] tipc: Started in network mode [ 854.143826][T29719] tipc: Node identity ac14140f, cluster identity 4711 [ 854.153270][T29719] tipc: New replicast peer: 255.255.255.255 [ 854.162360][ T3097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 854.170786][T29719] tipc: Enabled bearer , priority 10 [ 854.322174][T29729] netlink: 'syz.1.9910': attribute type 33 has an invalid length. [ 854.330267][T29729] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9910'. [ 854.355997][T29729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9910'. [ 855.013301][ T3097] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 855.041372][T29746] ALSA: seq fatal error: cannot create timer (-16) [ 855.111496][T17532] gspca_sonixj: reg_w1 err -71 [ 855.120045][T17532] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 855.155620][T17532] usb 3-1: USB disconnect, device number 11 [ 855.223688][ T3097] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 855.227244][T29750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 855.231712][ T3097] usb 6-1: config 1 has no interface number 0 [ 855.247489][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 855.287477][ T3097] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 855.297610][ T5918] tipc: Node number set to 2886997007 [ 855.321662][ T3097] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 855.366916][ T3097] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 855.439867][ T3097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.470000][ T3097] usb 6-1: Product: syz [ 855.489494][ T3097] usb 6-1: Manufacturer: syz [ 855.508278][ T3097] usb 6-1: SerialNumber: syz [ 855.510133][T29759] netlink: 'syz.7.9923': attribute type 11 has an invalid length. [ 855.525369][T29740] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 855.536788][T29740] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 855.550823][ T3097] usb 6-1: Expected 3 endpoints, found: 2 [ 855.618478][T29761] netlink: 'syz.7.9925': attribute type 33 has an invalid length. [ 855.626643][T29761] netlink: 152 bytes leftover after parsing attributes in process `syz.7.9925'. [ 855.641029][T29761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9925'. [ 856.003869][T18619] usb 6-1: USB disconnect, device number 77 [ 856.862267][T18619] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 857.018281][T18619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.027452][T18619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.036165][T18619] usb 3-1: Product: syz [ 857.040604][T18619] usb 3-1: Manufacturer: syz [ 857.047577][T18619] usb 3-1: SerialNumber: syz [ 857.277347][T29817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.299592][T29817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.322205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.330668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.386022][T29817] ip6gre0: left promiscuous mode [ 857.410860][T29817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 857.563086][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.073424][T18619] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 858.093111][T18619] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 858.122416][ T5894] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 858.274529][ T5894] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.285883][T18619] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 858.302202][ T5894] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.317381][T18619] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 858.333127][ T5894] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 858.351924][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 858.360518][ T5894] usb 6-1: SerialNumber: syz [ 858.370585][T18619] usb 3-1: USB disconnect, device number 12 [ 858.383705][T18619] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 858.476611][T17532] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 858.602467][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.619910][ T5894] usb 6-1: 0:2 : does not exist [ 858.628866][ T5894] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 858.649078][ T5894] usb 6-1: USB disconnect, device number 78 [ 858.676690][T17532] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 858.681274][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.695657][T17532] usb 2-1: config 1 has no interface number 0 [ 858.720633][T17532] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 858.742160][T17532] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 858.774248][T17532] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 858.783450][T17532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.791461][T17532] usb 2-1: Product: syz [ 858.795806][T17532] usb 2-1: Manufacturer: syz [ 858.800406][T17532] usb 2-1: SerialNumber: syz [ 858.816453][T29840] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 858.824367][T29840] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 858.835257][T17532] usb 2-1: Expected 3 endpoints, found: 2 [ 859.084218][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.094072][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.149442][T17532] usb 2-1: USB disconnect, device number 127 [ 859.342353][ T5894] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 859.505390][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 859.543677][ T5894] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 859.557116][ T5894] usb 3-1: config 0 has no interface number 0 [ 859.577580][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 859.588979][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 859.603087][ T5894] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 859.614543][ T5894] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 859.652199][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 859.674524][ T5894] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.701921][ T5894] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.720193][ T5894] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 859.732624][ T5894] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 859.744320][ T5894] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 859.788035][ T5894] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 859.797160][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.814023][ T5894] usb 3-1: Product: syz [ 859.818194][ T5894] usb 3-1: Manufacturer: syz [ 859.823929][ T5894] usb 3-1: SerialNumber: syz [ 859.832809][ T5894] usb 3-1: config 0 descriptor?? [ 859.840477][T29860] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 859.849618][T29860] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 859.859893][ T5894] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 859.878572][ T5894] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 859.920768][ T5894] scsi host1: microtekX6 [ 860.119210][T17532] usb 3-1: USB disconnect, device number 13 [ 860.166838][T29891] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.9978'. [ 860.253372][T29894] net_ratelimit: 4 callbacks suppressed [ 860.253390][T29894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.684734][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.061780][ T30] audit: type=1326 audit(1768256522.188:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29923 comm="syz.7.9993" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01539 code=0x0 [ 861.400226][T29941] input: syz1 as /devices/virtual/input/input149 [ 861.725352][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.736329][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.745452][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.754857][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.124094][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.351577][T29983] syzkaller1: entered promiscuous mode [ 862.357329][T29983] syzkaller1: entered allmulticast mode [ 862.769677][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.808221][T29999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10026'. [ 863.023083][T30009] netlink: 'syz.7.10032': attribute type 9 has an invalid length. [ 863.031034][T30009] netlink: 'syz.7.10032': attribute type 11 has an invalid length. [ 863.039348][T30009] netlink: 'syz.7.10032': attribute type 12 has an invalid length. [ 863.048641][T30009] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.10032'. [ 863.257914][T30021] vivid-000: disconnect [ 863.393352][T30019] vivid-000: reconnect [ 863.774432][ T3097] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 863.805601][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.933066][ T3097] usb 3-1: Using ep0 maxpacket: 16 [ 863.940553][ T3097] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.954280][ T3097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.968036][ T3097] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.978437][ T3097] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 863.988745][ T3097] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.008379][ T3097] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 864.017560][ T3097] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 864.025580][ T3097] usb 3-1: Manufacturer: syz [ 864.040983][ T3097] usb 3-1: config 0 descriptor?? [ 864.282190][T17532] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 864.321991][ T3097] rc_core: IR keymap rc-hauppauge not found [ 864.327955][ T3097] Registered IR keymap rc-empty [ 864.333642][T30043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.338533][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.372640][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.393326][T30045] binder: 30044:30045 unknown command 0 [ 864.397074][ T3097] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 864.399159][T30045] binder: 30044:30045 ioctl c0306201 80000080 returned -22 [ 864.428823][ T3097] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input150 [ 864.442006][T17532] usb 6-1: Using ep0 maxpacket: 16 [ 864.449436][T17532] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 864.458753][T17532] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.469746][T17532] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 864.469926][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.481837][T17532] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.496635][T17532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.512338][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.512707][T17532] usb 6-1: Product: syz [ 864.525233][T17532] usb 6-1: Manufacturer: syz [ 864.529836][T17532] usb 6-1: SerialNumber: syz [ 864.532026][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.562056][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.594052][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.613188][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.633371][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.652024][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.672043][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.692447][ T3097] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 864.717847][ T3097] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 864.727726][ T3097] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 864.951361][T17532] usb 6-1: 0:2 : does not exist [ 865.385134][ T3097] usb 3-1: USB disconnect, device number 14 [ 865.763417][T17532] usb 6-1: USB disconnect, device number 79 [ 865.872012][ T3097] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 865.882659][ T5918] net_ratelimit: 4 callbacks suppressed [ 865.882671][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.023564][ T3097] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.033812][ T3097] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 866.045081][ T3097] usb 3-1: config 1 interface 2 has no altsetting 0 [ 866.055542][ T3097] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.064626][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.073560][ T3097] usb 3-1: Product: syz [ 866.077723][ T3097] usb 3-1: Manufacturer: syz [ 866.083632][ T3097] usb 3-1: SerialNumber: syz [ 866.297607][ T3097] usb 3-1: selecting invalid altsetting 0 [ 866.332712][ T3097] usb 3-1: USB disconnect, device number 15 [ 866.359843][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.617560][T30093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10066'. [ 866.644609][T30093] netlink: 'syz.5.10066': attribute type 7 has an invalid length. [ 866.922580][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.410410][ T1324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.423271][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.433022][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.553905][T30121] input: syz0 as /devices/virtual/input/input151 [ 867.887989][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.951960][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 868.000736][T30133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10084'. [ 868.018165][T30133] vxlan1: entered promiscuous mode [ 868.108347][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 868.119476][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.131225][ T10] usb 3-1: config 0 descriptor?? [ 868.139302][ T10] cp210x 3-1:0.0: cp210x converter detected [ 868.455218][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.542655][ T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 868.551403][ T10] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 868.571244][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 868.777318][ T10] usb 3-1: USB disconnect, device number 16 [ 868.805284][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 868.832557][ T10] cp210x 3-1:0.0: device disconnected [ 868.912029][ T3097] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 869.084314][ T3097] usb 6-1: Using ep0 maxpacket: 16 [ 869.106071][ T3097] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.129595][ T3097] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.146340][ T3097] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 869.171036][ T3097] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.179721][ T3097] usb 6-1: Product: syz [ 869.184243][ T3097] usb 6-1: Manufacturer: syz [ 869.189177][ T3097] usb 6-1: SerialNumber: syz [ 869.203316][ T3097] usb 6-1: config 0 descriptor?? [ 869.322430][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.482310][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.622244][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 869.772177][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 869.779137][ T5918] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 869.788566][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.804729][ T5918] pvrusb2: Hardware description: Terratec Grabster AV400 [ 869.811772][ T5918] pvrusb2: ********** [ 869.816017][ T5918] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 869.826685][ T5918] pvrusb2: Important functionality might not be entirely working. [ 869.834973][ T5918] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 869.846492][ T5918] pvrusb2: ********** [ 869.978855][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.985801][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.006299][ T2343] pvrusb2: Invalid write control endpoint [ 870.048585][ T2343] pvrusb2: Invalid write control endpoint [ 870.055453][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 870.065941][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 870.075170][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 870.087031][ T2343] pvrusb2: Device being rendered inoperable [ 870.093965][ T2343] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 870.101005][ T2343] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 870.110069][ T2343] pvrusb2: Attached sub-driver cx25840 [ 870.117096][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 870.127766][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 870.220181][ T5918] usb 3-1: USB disconnect, device number 17 [ 870.535194][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.602317][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 870.922127][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.931946][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 871.083903][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.095218][ T5918] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 871.104333][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.111934][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 871.114949][ T5918] usb 2-1: config 0 descriptor?? [ 871.271946][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 871.278861][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 871.287398][ T10] usb 3-1: config 0 has no interface number 0 [ 871.293577][ T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 871.309610][ T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 871.318736][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.327672][ T10] usb 3-1: Product: syz [ 871.331842][ T10] usb 3-1: Manufacturer: syz [ 871.337857][ T10] usb 3-1: SerialNumber: syz [ 871.345041][ T10] usb 3-1: config 0 descriptor?? [ 871.346240][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 871.360058][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 871.371185][ T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 871.373621][ T5918] usb 2-1: USB disconnect, device number 2 [ 871.381634][ T10] em28xx 3-1:0.132: Video interface 132 found: [ 871.563228][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.687883][ T5918] usb 6-1: USB disconnect, device number 80 [ 871.763879][ T10] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 871.872304][T18619] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 871.972921][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 871.987049][ T10] em28xx 3-1:0.132: board has no eeprom [ 872.031960][T18619] usb 2-1: Using ep0 maxpacket: 32 [ 872.040359][T18619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.054353][ T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 872.059073][T18619] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 872.072145][ T10] em28xx 3-1:0.132: analog set to bulk mode. [ 872.082092][T17532] em28xx 3-1:0.132: Registering V4L2 extension [ 872.089903][T18619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.111052][ T10] usb 3-1: USB disconnect, device number 18 [ 872.135922][T18619] usb 2-1: config 0 descriptor?? [ 872.139214][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 872.384260][T17532] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 872.386596][T18619] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 872.396913][T17532] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 872.408153][T17532] em28xx 3-1:0.132: No AC97 audio processor [ 872.418508][T17532] usb 3-1: Decoder not found [ 872.443703][T18619] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 872.451914][T17532] em28xx 3-1:0.132: failed to create media graph [ 872.462181][T17532] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 872.490521][T17532] em28xx 3-1:0.132: Remote control support is not available for this card. [ 872.524137][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.525937][ T10] em28xx 3-1:0.132: Closing input extension [ 872.534983][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.546974][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.583896][ T10] em28xx 3-1:0.132: Freeing device [ 872.599219][T30253] binder: 30252:30253 ioctl c0306201 80000b40 returned -14 [ 873.401169][ T3097] usb 2-1: USB disconnect, device number 3 [ 873.416329][ T3097] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 873.562114][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.803864][T30296] binder: 30294:30296 ioctl c0306201 800002c0 returned -14 [ 873.972276][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.072090][ T5918] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 874.111268][T30306] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10157'. [ 874.188739][ T30] audit: type=1326 audit(1768256535.318:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30310 comm="syz.2.10160" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f47539 code=0x0 [ 874.242190][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 874.248673][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.258929][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 874.268040][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.279300][ T5918] usb 6-1: config 0 descriptor?? [ 874.288087][ T5918] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 874.602537][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.493176][ T5918] gspca_vc032x: reg_w err -71 [ 875.497958][ T5918] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 875.508785][ T5918] usb 6-1: USB disconnect, device number 81 [ 875.642080][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.070501][ T30] audit: type=1326 audit(1768256537.198:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30326 comm="syz.6.10166" exe="/root/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x0 [ 876.241157][T30340] gre0: left promiscuous mode [ 876.248511][T30340] gre0: left allmulticast mode [ 876.290852][T30340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.391954][ T5894] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 876.559661][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 876.568413][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 876.593168][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 876.620101][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 876.644251][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 876.665053][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.686660][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.706874][ T5894] usb 3-1: config 0 descriptor?? [ 876.723740][T30334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 876.743708][ T5894] hub 3-1:0.0: USB hub found [ 876.966357][ T5894] hub 3-1:0.0: 1 port detected [ 877.017132][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.258095][T30367] input: syz0 as /devices/virtual/input/input152 [ 877.692768][T30391] dvmrp5: entered allmulticast mode [ 877.708298][T30391] syz_tun: entered allmulticast mode [ 877.715058][T30391] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 877.722975][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.731444][T30391] dvmrp5: left allmulticast mode [ 878.026014][T30390] syz_tun: left allmulticast mode [ 878.068326][ T5918] usb 3-1: USB disconnect, device number 19 [ 878.287176][ T6036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.296590][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.305269][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.688126][T30421] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.10203'. [ 878.712008][T30421] netlink: Conntrack attr has 4 unknown bytes [ 878.925104][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.332631][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.543944][T30455] netlink: 'syz.5.10218': attribute type 1 has an invalid length. [ 879.551925][T30455] netlink: 'syz.5.10218': attribute type 6 has an invalid length. [ 879.559797][T30455] netlink: 'syz.5.10218': attribute type 3 has an invalid length. [ 879.592643][ T3097] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 879.751928][ T3097] usb 3-1: Using ep0 maxpacket: 32 [ 879.758598][ T3097] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.766701][ T3097] usb 3-1: config 0 has no interface number 0 [ 879.773018][ T3097] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.783920][ T3097] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.793724][ T3097] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 879.803028][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.816283][ T3097] usb 3-1: config 0 descriptor?? [ 880.444911][ T3097] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0090/input/input153 [ 880.535697][ T3097] uclogic 0003:28BD:0094.0090: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 880.675951][ T3097] usb 3-1: USB disconnect, device number 20 [ 880.863178][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056fda000: rx timeout, send abort [ 880.871944][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056fda000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 881.407659][ T3097] net_ratelimit: 3 callbacks suppressed [ 881.407678][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.544813][T30493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10232'. [ 882.088965][ T3097] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 882.252445][ T3097] usb 6-1: Using ep0 maxpacket: 16 [ 882.263821][ T3097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.291921][ T3097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.303321][ T3097] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 882.318188][ T3097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.331549][ T3097] usb 6-1: config 0 descriptor?? [ 882.446555][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.460084][ T30] audit: type=1326 audit(1768256543.568:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 882.524241][ T30] audit: type=1326 audit(1768256543.568:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 882.651918][ T30] audit: type=1326 audit(1768256543.568:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 882.711938][ T30] audit: type=1326 audit(1768256543.568:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 882.762483][ T30] audit: type=1326 audit(1768256543.568:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 882.845890][ T30] audit: type=1326 audit(1768256543.588:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 882.949918][ T30] audit: type=1326 audit(1768256543.588:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 883.021918][ T30] audit: type=1326 audit(1768256543.588:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 883.082511][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.091829][ T30] audit: type=1326 audit(1768256543.588:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f01558 code=0x7ffc0000 [ 883.144939][ T30] audit: type=1326 audit(1768256543.588:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30533 comm="syz.7.10253" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f01539 code=0x7ffc0000 [ 883.434585][ T3097] letsketch 0003:6161:4D15.0091: Device info:   [ 883.499418][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.682009][ T3097] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 883.689924][ T3097] letsketch 0003:6161:4D15.0091: probe with driver letsketch failed with error -71 [ 883.750987][ T3097] usb 6-1: USB disconnect, device number 82 [ 884.042545][T19250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.054077][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.074794][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.280488][T30564] vivid-000: disconnect [ 884.332284][ T10] vivid-000: reconnect [ 885.082284][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.137499][ T3097] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 885.156149][ T3097] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on syz0 [ 885.621943][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 885.676989][T30610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.685706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.749127][T30613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10286'. [ 885.781955][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 885.788565][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 885.807646][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 885.819633][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.828471][ T10] usb 3-1: Product: syz [ 885.833065][ T10] usb 3-1: Manufacturer: syz [ 885.837747][ T10] usb 3-1: SerialNumber: syz [ 885.846806][ T10] usb 3-1: config 0 descriptor?? [ 885.857843][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 886.212121][ T3097] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 886.363585][ T3097] usb 2-1: Using ep0 maxpacket: 32 [ 886.371293][ T3097] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 886.380646][ T3097] usb 2-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 886.390025][ T3097] usb 2-1: Manufacturer: syz [ 886.397033][ T3097] usb 2-1: config 0 descriptor?? [ 886.731255][ T3097] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 886.747095][ T3097] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 886.769577][ T3097] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 886.784958][ T3097] usb 2-1: media controller created [ 886.835677][ T3097] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 886.865213][ T10] gspca_zc3xx: reg_w_i err -71 [ 886.941424][ T3097] az6027: usb out operation failed. (-71) [ 886.949821][ T3097] az6027: usb out operation failed. (-71) [ 886.960973][ T3097] stb0899_attach: Driver disabled by Kconfig [ 886.968148][ T3097] az6027: no front-end attached [ 886.968148][ T3097] [ 886.981447][ T3097] az6027: usb out operation failed. (-71) [ 886.991065][ T3097] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 887.031669][ T3097] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input154 [ 887.076895][ T3097] dvb-usb: schedule remote query interval to 400 msecs. [ 887.094467][ T3097] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 887.123307][ T3097] usb 2-1: USB disconnect, device number 4 [ 887.173863][ T5894] net_ratelimit: 2 callbacks suppressed [ 887.173879][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.261673][ T3097] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 887.452225][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 887.460421][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 887.494287][ T10] usb 3-1: USB disconnect, device number 21 [ 887.857957][T30662] input: syz0 as /devices/virtual/input/input155 [ 887.931953][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 888.112165][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 888.119785][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.133448][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 888.144115][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.154907][ T10] usb 6-1: config 0 descriptor?? [ 888.202346][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.475355][T30687] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 888.537361][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.600288][ T10] mcp2221 0003:04D8:00DD.0093: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 888.828998][ T10] usb 6-1: USB disconnect, device number 83 [ 889.101200][T30708] input: syz0 as /devices/virtual/input/input156 [ 889.162518][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.242438][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.196960][T30746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10345'. [ 890.206042][T30746] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10345'. [ 890.283087][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.342625][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 890.511953][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 890.530436][ T5894] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 890.538913][ T5894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 890.549595][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 890.563309][ T5894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 890.592015][ T5894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.605418][ T5894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 890.615056][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.972699][T30776] syzkaller0: mtu greater than device maximum [ 891.124538][T30783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10363'. [ 891.330286][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.719062][T30801] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 891.725050][T30803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.802291][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 891.934130][ T3097] usb 2-1: USB disconnect, device number 5 [ 891.984396][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.997801][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.013071][ T5894] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 892.025513][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 892.040962][ T5894] usb 3-1: SerialNumber: syz [ 892.112594][T30819] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10377'. [ 892.121735][T30819] netlink: 'syz.5.10377': attribute type 7 has an invalid length. [ 892.133580][T30819] netlink: 'syz.5.10377': attribute type 8 has an invalid length. [ 892.141411][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10377'. [ 892.203447][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.265807][ T5894] usb 3-1: 0:2 : does not exist [ 892.284071][ T5894] usb 3-1: USB disconnect, device number 22 [ 892.316583][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.366076][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.741995][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 892.928313][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.959022][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.975811][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 892.987484][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.102470][ T5938] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 893.261933][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 893.269246][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.281647][ T5938] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 893.296142][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.300169][ T30] kauditd_printk_skb: 170 callbacks suppressed [ 893.300184][ T30] audit: type=1326 audit(1768256554.428:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30845 comm="syz.6.10388" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 893.319108][ T10] usb 2-1: usb_control_msg returned -32 [ 893.338841][ T5938] usb 3-1: config 0 descriptor?? [ 893.365226][ T10] usbtmc 2-1:16.0: can't read capabilities [ 893.403332][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.794520][ T5938] mcp2221 0003:04D8:00DD.0094: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 894.010330][ T5894] usb 3-1: USB disconnect, device number 23 [ 894.138501][T30870] kvm: user requested TSC rate below hardware speed [ 894.444927][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.721979][ T5894] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 894.925292][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 894.937949][ T5894] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 894.956531][ T5894] usb 6-1: config 0 has no interface number 0 [ 894.966656][ T5894] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 894.994281][ T5894] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 895.026882][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.055727][ T5894] usb 6-1: Product: syz [ 895.059905][ T5894] usb 6-1: Manufacturer: syz [ 895.082090][ T5894] usb 6-1: SerialNumber: syz [ 895.093075][ T5894] usb 6-1: config 0 descriptor?? [ 895.109996][T30884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 895.244385][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.369952][T30884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 895.377354][ T5938] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 895.482341][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.542049][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 895.554197][ T5938] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 895.571974][ T5938] usb 3-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 895.591964][ T5938] usb 3-1: Manufacturer: syz [ 895.602803][ T5938] usb 3-1: config 0 descriptor?? [ 895.693866][ T10] usb 2-1: USB disconnect, device number 6 [ 895.816551][ T5938] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 895.834888][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 895.854274][ T5938] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 895.880224][ T5938] usb 3-1: media controller created [ 895.914833][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 896.021576][ T5938] az6027: usb out operation failed. (-71) [ 896.062522][ T5938] az6027: usb out operation failed. (-71) [ 896.068292][ T5938] stb0899_attach: Driver disabled by Kconfig [ 896.085797][ T5938] az6027: no front-end attached [ 896.085797][ T5938] [ 896.099309][ T5938] az6027: usb out operation failed. (-71) [ 896.113533][ T5938] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 896.133948][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input157 [ 896.166150][ T5938] dvb-usb: schedule remote query interval to 400 msecs. [ 896.181943][ T5938] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 896.215006][ T5938] usb 3-1: USB disconnect, device number 24 [ 896.372741][ T5938] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 896.405203][ T5894] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 896.432460][ T5894] asix 6-1:0.188: probe with driver asix failed with error -71 [ 896.463691][ T5894] usb 6-1: USB disconnect, device number 84 [ 896.522790][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.565639][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.702176][ T3097] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 897.873964][ T3097] usb 3-1: Using ep0 maxpacket: 16 [ 897.881352][ T3097] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.894268][ T3097] usb 3-1: config 0 interface 0 has no altsetting 0 [ 897.901295][ T3097] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 897.910661][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.921828][ T3097] usb 3-1: config 0 descriptor?? [ 898.124056][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.180996][T30983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.262756][T30986] netlink: 'syz.6.10446': attribute type 3 has an invalid length. [ 898.271000][T30986] netlink: 'syz.6.10446': attribute type 3 has an invalid length. [ 898.283618][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.367416][ T3097] nzxt-smart2 0003:1E71:2009.0095: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 898.604066][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.769130][T17532] usb 3-1: USB disconnect, device number 25 [ 899.642199][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.968271][T31032] syzkaller1: entered promiscuous mode [ 899.973924][T31032] syzkaller1: entered allmulticast mode [ 900.042152][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 900.244306][T31043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10470'. [ 900.317972][ T30] audit: type=1326 audit(1768256561.448:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31046 comm="syz.5.10472" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 900.341929][ T5894] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 900.496656][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 900.509193][ T5894] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 900.521226][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.537236][ T5894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 900.546930][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 900.551920][ T30] audit: type=1326 audit(1768256561.688:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.555449][ T5894] usb 3-1: Product: syz [ 900.577185][ T30] audit: type=1326 audit(1768256561.688:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.577231][ T30] audit: type=1326 audit(1768256561.688:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.577273][ T30] audit: type=1326 audit(1768256561.688:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.577316][ T30] audit: type=1326 audit(1768256561.688:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.577364][ T30] audit: type=1326 audit(1768256561.688:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.577576][ T30] audit: type=1326 audit(1768256561.718:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.583252][ T5894] usb 3-1: Manufacturer: syz [ 900.648995][ T30] audit: type=1326 audit(1768256561.788:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.747869][ T5894] usb 3-1: SerialNumber: syz [ 900.756920][ T30] audit: type=1326 audit(1768256561.888:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.1.10476" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 900.757993][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.038812][ T5894] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 901.318122][ T5894] usb 3-1: USB disconnect, device number 26 [ 901.332663][ T5894] usblp0: removed [ 901.351056][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.414543][T31088] bridge1: entered promiscuous mode [ 901.419764][T31088] bridge1: entered allmulticast mode [ 901.427506][T31088] team0: Port device bridge1 added [ 901.446154][T31088] bridge0: port 1(team0) entered blocking state [ 901.454047][T31088] bridge0: port 1(team0) entered disabled state [ 901.460511][T31088] team0: entered allmulticast mode [ 901.467923][T31088] team0: entered promiscuous mode [ 901.818863][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.232132][ T5918] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 902.402753][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 902.426232][ T5918] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 902.452669][ T5918] usb 6-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 902.471145][ T5918] usb 6-1: Manufacturer: syz [ 902.489678][ T5918] usb 6-1: config 0 descriptor?? [ 902.724620][ T5918] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 902.755041][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.793709][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 902.800886][ T5918] usb 6-1: media controller created [ 902.845674][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.863563][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.916047][ T5918] az6027: usb out operation failed. (-71) [ 902.924998][ T5918] az6027: usb out operation failed. (-71) [ 902.931210][ T5918] stb0899_attach: Driver disabled by Kconfig [ 902.937475][ T5918] az6027: no front-end attached [ 902.937475][ T5918] [ 902.945233][ T5918] az6027: usb out operation failed. (-71) [ 902.951203][ T5918] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 902.972958][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input158 [ 902.993731][ T5918] dvb-usb: schedule remote query interval to 400 msecs. [ 903.000860][ T5918] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 903.037278][ T5918] usb 6-1: USB disconnect, device number 85 [ 903.149296][ T5918] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 903.222679][T31129] pim6reg1: entered promiscuous mode [ 903.228010][T31129] pim6reg1: entered allmulticast mode [ 903.677065][T31151] input: syz0 as /devices/virtual/input/input159 [ 903.692010][T17532] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 903.778483][T31155] input: syz1 as /devices/virtual/input/input160 [ 903.862000][T17532] usb 3-1: Using ep0 maxpacket: 16 [ 903.873277][T17532] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 903.887215][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.895311][T17532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 903.914095][T17532] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 903.925251][T17532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.951935][T17532] usb 3-1: Product: syz [ 903.956271][T17532] usb 3-1: Manufacturer: syz [ 903.960872][T17532] usb 3-1: SerialNumber: syz [ 903.977055][T17532] usb 3-1: config 0 descriptor?? [ 904.000192][T17532] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 904.009990][T17532] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 904.049120][T31161] netlink: 'syz.5.10516': attribute type 3 has an invalid length. [ 904.057383][T31161] netlink: 208 bytes leftover after parsing attributes in process `syz.5.10516'. [ 904.069453][T31161] netlink: 'syz.5.10516': attribute type 3 has an invalid length. [ 904.077519][T31161] netlink: 208 bytes leftover after parsing attributes in process `syz.5.10516'. [ 904.362411][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.609875][T17532] em28xx 3-1:0.0: unknown em28xx chip ID (190) [ 904.811770][T17532] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 904.922490][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.020583][T17532] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 905.036696][T17532] em28xx 3-1:0.0: No AC97 audio processor [ 905.052160][T17532] usb 3-1: USB disconnect, device number 27 [ 905.059310][T17532] em28xx 3-1:0.0: Disconnecting em28xx [ 905.074756][T17532] em28xx 3-1:0.0: Freeing device [ 905.090135][T31174] syzkaller1: entered promiscuous mode [ 905.096209][T31174] syzkaller1: entered allmulticast mode [ 905.941917][T17532] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 905.962224][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.152509][T17532] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 906.193715][T17532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 906.212655][T17532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 906.224420][T17532] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 906.238562][T17532] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 906.250056][T17532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.272545][T17532] usb 2-1: config 0 descriptor?? [ 906.281486][T31203] bridge1: entered promiscuous mode [ 906.291740][T31203] bridge1: entered allmulticast mode [ 906.298306][T31194] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 906.318640][T31203] team0: Port device bridge1 added [ 906.332496][T31206] bridge0: port 1(team0) entered blocking state [ 906.367481][T31206] bridge0: port 1(team0) entered disabled state [ 906.382414][T31206] team0: entered allmulticast mode [ 906.394179][T31206] team0: entered promiscuous mode [ 906.653325][ T5938] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 906.712898][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10541'. [ 906.729412][T31224] vxlan0: entered promiscuous mode [ 906.740553][ T3904] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.759150][ T3904] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.766433][T17532] plantronics 0003:047F:FFFF.0096: reserved main item tag 0xd [ 906.772099][ T3904] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.784930][ T3904] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.791203][T17532] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 906.822239][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 906.829424][ T5938] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 906.839061][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.849579][ T5938] usb 6-1: config 0 has no interface number 0 [ 906.856097][ T5938] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 906.866195][ T5938] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 906.876581][ T5938] usb 6-1: config 0 interface 98 has no altsetting 0 [ 906.886014][ T5938] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 906.895292][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.903336][ T5938] usb 6-1: Product: syz [ 906.907646][ T5938] usb 6-1: Manufacturer: syz [ 906.914185][ T5938] usb 6-1: SerialNumber: syz [ 906.921474][ T5938] usb 6-1: config 0 descriptor?? [ 906.929358][T31208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 906.936733][T31208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 907.002683][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.057185][T17532] usb 2-1: USB disconnect, device number 7 [ 907.153742][T31208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 907.161108][T31208] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 907.410168][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.726892][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.042385][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.212554][ T5938] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 908.236429][ T5938] asix 6-1:0.98: probe with driver asix failed with error -71 [ 908.266091][ T5938] usb 6-1: USB disconnect, device number 86 [ 908.682354][ T5918] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 908.836011][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.848035][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.859749][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.873482][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 908.883861][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.909783][ T5918] usb 2-1: config 0 descriptor?? [ 909.085206][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.349950][ T5918] plantronics 0003:047F:FFFF.0097: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 909.742027][ T5938] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 909.896750][ T5938] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 909.912778][ T5938] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 909.923317][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.934609][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.945038][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.958252][ T5938] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 909.967656][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.978768][ T5938] usb 6-1: config 0 descriptor?? [ 910.124266][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.168451][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 910.168467][ T30] audit: type=1804 audit(1768256571.298:997): pid=31323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.10583" name="file1" dev="ramfs" ino=157937 res=1 errno=0 [ 910.450334][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.464729][ T5938] input: HID 28bd:0909 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.0098/input/input163 [ 910.579081][ T5938] uclogic 0003:28BD:0909.0098: input,hidraw1: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0 [ 910.636870][ T30] audit: type=1326 audit(1768256571.768:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31306 comm="syz.5.10576" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 910.888834][T31331] loop6: detected capacity change from 0 to 2640 [ 910.903682][ T5839] buffer_io_error: 5 callbacks suppressed [ 910.903697][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.921636][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.934681][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.943428][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.958189][T31332] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.958709][T31330] Buffer I/O error on dev loop6, logical block 37, async page read [ 910.968262][ T5839] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.983696][T31332] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.991716][T31332] Buffer I/O error on dev loop6, logical block 0, async page read [ 910.999813][T31330] Buffer I/O error on dev loop6, logical block 37, async page read [ 911.008163][ T5839] ldm_validate_partition_table(): Disk read failed. [ 911.016597][ T5839] Dev loop6: unable to read RDB block 0 [ 911.030071][ T5839] loop6: unable to read partition table [ 911.054789][T31331] ldm_validate_partition_table(): Disk read failed. [ 911.061688][T31331] Dev loop6: unable to read RDB block 0 [ 911.076018][T31331] loop6: unable to read partition table [ 911.094722][T31331] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 911.162764][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.237099][ T5200] ldm_validate_partition_table(): Disk read failed. [ 911.243973][ T5200] Dev loop6: unable to read RDB block 0 [ 911.249679][ T5200] loop6: unable to read partition table [ 911.457841][ T5200] ldm_validate_partition_table(): Disk read failed. [ 911.471958][ T5200] Dev loop6: unable to read RDB block 0 [ 911.477959][ T5200] loop6: unable to read partition table [ 911.534159][ T5200] ldm_validate_partition_table(): Disk read failed. [ 911.548839][ T5200] Dev loop6: unable to read RDB block 0 [ 911.570869][ T5200] loop6: unable to read partition table [ 911.752077][ T10] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 911.773168][ T5938] usb 2-1: USB disconnect, device number 8 [ 912.134792][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10595'. [ 912.147675][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10595'. [ 912.203582][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.922121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.930357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.939443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.947802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.245786][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.279875][T31390] vivid-000: disconnect [ 913.290236][T31390] vivid-000: reconnect [ 913.303431][T17532] usb 6-1: USB disconnect, device number 87 [ 913.483940][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.922229][T18619] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 914.126649][T18619] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 914.147362][T18619] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 914.164125][T18619] usb 3-1: config 1 interface 0 has no altsetting 0 [ 914.171025][ T30] audit: type=1326 audit(1768256575.298:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31411 comm="syz.7.10621" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01539 code=0x0 [ 914.174178][T18619] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 914.212425][T17532] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 914.220997][T18619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.254617][T18619] usb 3-1: Product: syz [ 914.263621][T18619] usb 3-1: Manufacturer: syz [ 914.272673][T18619] usb 3-1: SerialNumber: syz [ 914.284150][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.305161][T31401] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 914.335893][T31401] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 914.394555][T17532] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.404880][T17532] usb 6-1: config 0 has no interfaces? [ 914.413180][T17532] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 914.424282][T17532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.432806][T17532] usb 6-1: Product: syz [ 914.437371][T17532] usb 6-1: Manufacturer: syz [ 914.442189][T17532] usb 6-1: SerialNumber: syz [ 914.452778][T17532] usb 6-1: config 0 descriptor?? [ 914.680925][T17532] usb 6-1: USB disconnect, device number 88 [ 915.322342][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.394489][T18619] rtl8150 3-1:1.0: eth13: rtl8150 is detected [ 915.732236][T17532] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 915.779319][ T5938] usb 3-1: USB disconnect, device number 28 [ 915.924720][T17532] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.953119][T17532] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.997313][T17532] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.028672][T17532] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.046932][T17532] usb 6-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 916.066234][T17532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.086476][T17532] usb 6-1: Product: syz [ 916.090656][T17532] usb 6-1: Manufacturer: syz [ 916.112051][T17532] usb 6-1: SerialNumber: syz [ 916.364323][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.539116][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.332806][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.370257][T17532] cdc_ncm 6-1:1.0: bind() failure [ 917.393742][T17532] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 917.406840][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.416215][T17532] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 917.428744][T17532] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 917.456488][T17532] usb 6-1: USB disconnect, device number 89 [ 918.316971][T31516] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 918.341382][T31516] bond3: (slave lo): Enslaving as a backup interface with an up link [ 918.357694][T31516] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 918.442359][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.482514][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.577514][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.856698][T31559] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 919.863247][T31559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 919.890091][T31559] vhci_hcd vhci_hcd.0: Device attached [ 919.919182][T31561] vhci_hcd: connection closed [ 919.919542][ T12] vhci_hcd vhci_hcd.6: stop threads [ 919.955293][ T12] vhci_hcd vhci_hcd.6: release socket [ 919.960723][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 920.298348][T31578] netlink: 'syz.5.10679': attribute type 1 has an invalid length. [ 920.345389][T31578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.365171][T31580] bond1: (slave geneve2): making interface the new active one [ 920.375096][T31580] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 920.441995][ T3097] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 920.523044][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.616599][ T3097] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 920.633200][ T3097] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 920.651246][ T3097] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.702909][ T3097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.731342][T31573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 920.751000][T31573] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 920.778807][ T3097] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 920.983502][ T3097] usb 3-1: USB disconnect, device number 29 [ 921.112282][T31602] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10687'. [ 921.121382][T31602] netlink: 'syz.7.10687': attribute type 15 has an invalid length. [ 921.129719][T31602] netlink: 'syz.7.10687': attribute type 18 has an invalid length. [ 921.542178][ T3097] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 921.562613][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.732391][ T3097] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 921.741118][ T3097] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 921.776324][ T3097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.842162][ T3097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.891938][ T3097] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.932213][ T3097] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 921.951476][ T3097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.994696][ T3097] usb 2-1: config 0 descriptor?? [ 922.602216][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.610362][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.662083][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10703'. [ 922.676528][ T3097] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0099/input/input164 [ 922.688513][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10703'. [ 922.819660][ T3097] uclogic 0003:28BD:0909.0099: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 923.157131][ T30] audit: type=1326 audit(1768256584.288:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31648 comm="syz.7.10707" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f01539 code=0x0 [ 923.242880][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 923.663339][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.724155][ T30] audit: type=1326 audit(1768256584.858:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31666 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 923.921930][ T3097] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 924.470221][ T30] audit: type=1326 audit(1768256585.598:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31666 comm="syz.6.10715" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7fc00000 [ 924.682194][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.642638][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.725122][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.930278][T31716] input: syz0 as /devices/virtual/input/input165 [ 925.954781][T18619] usb 2-1: USB disconnect, device number 9 [ 926.676376][T31744] loop9: detected capacity change from 0 to 7 [ 926.683831][T31744] Dev loop9: unable to read RDB block 7 [ 926.689446][T31744] loop9: AHDI p2 [ 926.695864][T31744] loop9: partition table partially beyond EOD, truncated [ 926.763487][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.922285][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.512584][ T3097] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 927.671146][T31782] netlink: 'syz.1.10761': attribute type 4 has an invalid length. [ 927.681048][T31782] netlink: 'syz.1.10761': attribute type 4 has an invalid length. [ 927.683470][ T3097] usb 3-1: Using ep0 maxpacket: 32 [ 927.697707][ T3097] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 927.706495][ T3097] usb 3-1: config 0 has no interface number 0 [ 927.712939][ T3097] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 927.733969][ T3097] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 927.743510][ T3097] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.751558][ T3097] usb 3-1: Product: syz [ 927.756502][ T3097] usb 3-1: Manufacturer: syz [ 927.761467][ T3097] usb 3-1: SerialNumber: syz [ 927.770503][ T3097] usb 3-1: config 0 descriptor?? [ 927.786760][ T3097] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 927.797054][ T3097] em28xx 3-1:0.132: Video interface 132 found: [ 927.804581][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.208423][ T3097] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 928.623327][ T3097] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 928.658889][ T3097] em28xx 3-1:0.132: board has no eeprom [ 928.682101][T17532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.843883][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.883198][ T3097] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 928.891734][ T3097] em28xx 3-1:0.132: analog set to bulk mode. [ 928.898018][ T5887] em28xx 3-1:0.132: Registering V4L2 extension [ 928.923825][ T3097] usb 3-1: USB disconnect, device number 30 [ 928.951352][ T3097] em28xx 3-1:0.132: Disconnecting em28xx [ 929.120577][ T5887] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 929.128351][ T5887] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 929.137912][ T5887] em28xx 3-1:0.132: No AC97 audio processor [ 929.149517][ T5887] usb 3-1: Decoder not found [ 929.156694][ T5887] em28xx 3-1:0.132: failed to create media graph [ 929.165885][ T5887] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 929.174881][ T5887] em28xx 3-1:0.132: Remote control support is not available for this card. [ 929.185093][ T3097] em28xx 3-1:0.132: Closing input extension [ 929.198243][ T3097] em28xx 3-1:0.132: Freeing device [ 929.276746][T31834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.882842][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.791907][T17532] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 930.922788][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.961889][T17532] usb 3-1: Using ep0 maxpacket: 32 [ 930.978965][T17532] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 930.988226][T17532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.027326][T17532] usb 3-1: Product: syz [ 931.031637][T17532] usb 3-1: Manufacturer: syz [ 931.043032][T17532] usb 3-1: SerialNumber: syz [ 931.054745][T17532] usb 3-1: config 0 descriptor?? [ 931.275671][T17532] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 031 [ 931.418278][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.427358][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.475744][T31881] m920x_read = error: -19 [ 931.670731][T31920] Invalid argument reading file caps for ./file0 [ 931.725953][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.965051][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.990591][T31961] input: syz0 as /devices/virtual/input/input166 [ 933.005572][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.554010][T17532] usb 3-1: USB disconnect, device number 31 [ 933.598104][T31970] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10842'. [ 933.608555][T31970] netlink: Unknown conntrack attr (0) [ 934.042726][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.409772][T31994] [ 934.412125][T31994] ===================================================== [ 934.419045][T31994] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 934.426488][T31994] syzkaller #0 Tainted: G L [ 934.432449][T31994] ----------------------------------------------------- [ 934.439368][T31994] syz.2.10853/31994 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 934.447149][T31994] ffff8880784b6be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 934.455830][T31994] [ 934.455830][T31994] and this task is already holding: [ 934.463171][T31994] ffff8880794e1028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 934.472894][T31994] which would create a new lock dependency: [ 934.478768][T31994] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 934.486836][T31994] [ 934.486836][T31994] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 934.496272][T31994] (&client->buffer_lock){..-.}-{3:3} [ 934.496299][T31994] [ 934.496299][T31994] ... which became SOFTIRQ-irq-safe at: [ 934.509330][T31994] lock_acquire+0x107/0x340 [ 934.513913][T31994] _raw_spin_lock+0x2e/0x40 [ 934.518501][T31994] evdev_pass_values+0xb9/0xbd0 [ 934.523429][T31994] evdev_events+0x1e6/0x340 [ 934.528010][T31994] input_pass_values+0x288/0x890 [ 934.533018][T31994] input_event_dispose+0x3e5/0x6b0 [ 934.538207][T31994] input_event+0x89/0xe0 [ 934.542528][T31994] hidinput_hid_event+0x145e/0x1e50 [ 934.547808][T31994] hid_process_event+0x4be/0x620 [ 934.552821][T31994] hid_report_raw_event+0xe91/0x1720 [ 934.558181][T31994] hid_input_report+0x44b/0x580 [ 934.563108][T31994] hid_irq_in+0x47e/0x6d0 [ 934.567509][T31994] __usb_hcd_giveback_urb+0x376/0x540 [ 934.572961][T31994] dummy_timer+0x85f/0x45b0 [ 934.577547][T31994] __hrtimer_run_queues+0x51c/0xc30 [ 934.582822][T31994] hrtimer_run_softirq+0x187/0x2b0 [ 934.588008][T31994] handle_softirqs+0x22b/0x7c0 [ 934.592853][T31994] __irq_exit_rcu+0x60/0x150 [ 934.597530][T31994] irq_exit_rcu+0x9/0x30 [ 934.601848][T31994] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 934.607561][T31994] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 934.613616][T31994] lock_acquire+0x222/0x340 [ 934.618196][T31994] page_table_check_clear+0x164/0x5f0 [ 934.623644][T31994] unmap_page_range+0x3257/0x4170 [ 934.628746][T31994] unmap_vmas+0x399/0x580 [ 934.633149][T31994] exit_mmap+0x239/0xb10 [ 934.637472][T31994] __mmput+0x118/0x430 [ 934.641613][T31994] exit_mm+0x169/0x230 [ 934.645760][T31994] do_exit+0x627/0x22f0 [ 934.649991][T31994] do_group_exit+0x21c/0x2d0 [ 934.654659][T31994] __x64_sys_exit_group+0x3f/0x40 [ 934.659762][T31994] __pfx_syscall_get_nr+0x0/0x10 [ 934.664782][T31994] do_syscall_64+0xec/0xf80 [ 934.669359][T31994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.675325][T31994] [ 934.675325][T31994] to a SOFTIRQ-irq-unsafe lock: [ 934.682322][T31994] (tasklist_lock){.+.+}-{3:3} [ 934.682350][T31994] [ 934.682350][T31994] ... which became SOFTIRQ-irq-unsafe at: [ 934.694946][T31994] ... [ 934.694955][T31994] lock_acquire+0x107/0x340 [ 934.702089][T31994] _raw_read_lock+0x36/0x50 [ 934.706662][T31994] __do_wait+0xde/0x740 [ 934.710897][T31994] do_wait+0x1e8/0x4f0 [ 934.715041][T31994] kernel_wait+0xab/0x170 [ 934.719447][T31994] call_usermodehelper_exec_work+0xbe/0x230 [ 934.725413][T31994] process_scheduled_works+0xad1/0x1770 [ 934.731036][T31994] worker_thread+0x8a0/0xda0 [ 934.735701][T31994] kthread+0x711/0x8a0 [ 934.739849][T31994] ret_from_fork+0x510/0xa50 [ 934.744512][T31994] ret_from_fork_asm+0x1a/0x30 [ 934.749352][T31994] [ 934.749352][T31994] other info that might help us debug this: [ 934.749352][T31994] [ 934.759559][T31994] Chain exists of: [ 934.759559][T31994] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 934.759559][T31994] [ 934.772673][T31994] Possible interrupt unsafe locking scenario: [ 934.772673][T31994] [ 934.780980][T31994] CPU0 CPU1 [ 934.786327][T31994] ---- ---- [ 934.791675][T31994] lock(tasklist_lock); [ 934.795910][T31994] local_irq_disable(); [ 934.802652][T31994] lock(&client->buffer_lock); [ 934.810010][T31994] lock(&new->fa_lock); [ 934.816755][T31994] [ 934.820189][T31994] lock(&client->buffer_lock); [ 934.825201][T31994] [ 934.825201][T31994] *** DEADLOCK *** [ 934.825201][T31994] [ 934.833328][T31994] 7 locks held by syz.2.10853/31994: [ 934.838592][T31994] #0: ffff88802a16a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 934.847725][T31994] #1: ffff888142aee230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 934.857823][T31994] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 934.867474][T31994] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 934.877033][T31994] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 934.886160][T31994] #5: ffff8880794e1028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 934.896329][T31994] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 934.905378][T31994] [ 934.905378][T31994] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 934.915770][T31994] -> (&client->buffer_lock){..-.}-{3:3} { [ 934.921502][T31994] IN-SOFTIRQ-W at: [ 934.925481][T31994] lock_acquire+0x107/0x340 [ 934.931623][T31994] _raw_spin_lock+0x2e/0x40 [ 934.937772][T31994] evdev_pass_values+0xb9/0xbd0 [ 934.944261][T31994] evdev_events+0x1e6/0x340 [ 934.950401][T31994] input_pass_values+0x288/0x890 [ 934.956973][T31994] input_event_dispose+0x3e5/0x6b0 [ 934.963730][T31994] input_event+0x89/0xe0 [ 934.969612][T31994] hidinput_hid_event+0x145e/0x1e50 [ 934.976460][T31994] hid_process_event+0x4be/0x620 [ 934.983043][T31994] hid_report_raw_event+0xe91/0x1720 [ 934.989972][T31994] hid_input_report+0x44b/0x580 [ 934.996462][T31994] hid_irq_in+0x47e/0x6d0 [ 935.002428][T31994] __usb_hcd_giveback_urb+0x376/0x540 [ 935.009443][T31994] dummy_timer+0x85f/0x45b0 [ 935.015589][T31994] __hrtimer_run_queues+0x51c/0xc30 [ 935.022429][T31994] hrtimer_run_softirq+0x187/0x2b0 [ 935.029185][T31994] handle_softirqs+0x22b/0x7c0 [ 935.035586][T31994] __irq_exit_rcu+0x60/0x150 [ 935.041813][T31994] irq_exit_rcu+0x9/0x30 [ 935.047697][T31994] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 935.054968][T31994] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.062586][T31994] lock_acquire+0x222/0x340 [ 935.068724][T31994] page_table_check_clear+0x164/0x5f0 [ 935.075729][T31994] unmap_page_range+0x3257/0x4170 [ 935.082389][T31994] unmap_vmas+0x399/0x580 [ 935.088354][T31994] exit_mmap+0x239/0xb10 [ 935.094238][T31994] __mmput+0x118/0x430 [ 935.099942][T31994] exit_mm+0x169/0x230 [ 935.105652][T31994] do_exit+0x627/0x22f0 [ 935.111450][T31994] do_group_exit+0x21c/0x2d0 [ 935.117684][T31994] __x64_sys_exit_group+0x3f/0x40 [ 935.124348][T31994] __pfx_syscall_get_nr+0x0/0x10 [ 935.130929][T31994] do_syscall_64+0xec/0xf80 [ 935.137067][T31994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.144595][T31994] INITIAL USE at: [ 935.148474][T31994] lock_acquire+0x107/0x340 [ 935.154526][T31994] _raw_spin_lock+0x2e/0x40 [ 935.160587][T31994] evdev_pass_values+0xb9/0xbd0 [ 935.166985][T31994] evdev_events+0x1e6/0x340 [ 935.173035][T31994] input_pass_values+0x288/0x890 [ 935.179519][T31994] input_event_dispose+0x330/0x6b0 [ 935.186183][T31994] input_inject_event+0x1dd/0x340 [ 935.192761][T31994] evdev_write+0x2fc/0x480 [ 935.198728][T31994] vfs_write+0x27e/0xb30 [ 935.204518][T31994] ksys_write+0x145/0x250 [ 935.210399][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 935.217147][T31994] do_fast_syscall_32+0x34/0x80 [ 935.223548][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.231426][T31994] } [ 935.233905][T31994] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 935.242054][T31994] [ 935.242054][T31994] the dependencies between the lock to be acquired [ 935.242065][T31994] and SOFTIRQ-irq-unsafe lock: [ 935.255550][T31994] -> (tasklist_lock){.+.+}-{3:3} { [ 935.260839][T31994] HARDIRQ-ON-R at: [ 935.264978][T31994] lock_acquire+0x107/0x340 [ 935.271463][T31994] _raw_read_lock+0x36/0x50 [ 935.277947][T31994] __do_wait+0xde/0x740 [ 935.284092][T31994] do_wait+0x1e8/0x4f0 [ 935.290146][T31994] kernel_wait+0xab/0x170 [ 935.296464][T31994] call_usermodehelper_exec_work+0xbe/0x230 [ 935.304339][T31994] process_scheduled_works+0xad1/0x1770 [ 935.311868][T31994] worker_thread+0x8a0/0xda0 [ 935.318439][T31994] kthread+0x711/0x8a0 [ 935.324490][T31994] ret_from_fork+0x510/0xa50 [ 935.331060][T31994] ret_from_fork_asm+0x1a/0x30 [ 935.337813][T31994] SOFTIRQ-ON-R at: [ 935.341953][T31994] lock_acquire+0x107/0x340 [ 935.348440][T31994] _raw_read_lock+0x36/0x50 [ 935.354924][T31994] __do_wait+0xde/0x740 [ 935.361074][T31994] do_wait+0x1e8/0x4f0 [ 935.367139][T31994] kernel_wait+0xab/0x170 [ 935.373463][T31994] call_usermodehelper_exec_work+0xbe/0x230 [ 935.381336][T31994] process_scheduled_works+0xad1/0x1770 [ 935.388862][T31994] worker_thread+0x8a0/0xda0 [ 935.395435][T31994] kthread+0x711/0x8a0 [ 935.401489][T31994] ret_from_fork+0x510/0xa50 [ 935.408071][T31994] ret_from_fork_asm+0x1a/0x30 [ 935.414822][T31994] INITIAL USE at: [ 935.418874][T31994] lock_acquire+0x107/0x340 [ 935.425270][T31994] _raw_write_lock_irq+0x3d/0x50 [ 935.432104][T31994] copy_process+0x2185/0x3950 [ 935.438676][T31994] kernel_clone+0x21e/0x820 [ 935.445078][T31994] user_mode_thread+0xdd/0x140 [ 935.451744][T31994] rest_init+0x23/0x300 [ 935.457800][T31994] start_kernel+0x381/0x3d0 [ 935.464203][T31994] x86_64_start_reservations+0x24/0x30 [ 935.471561][T31994] x86_64_start_kernel+0x143/0x1c0 [ 935.478574][T31994] common_startup_64+0x13e/0x147 [ 935.485412][T31994] INITIAL READ USE at: [ 935.489901][T31994] lock_acquire+0x107/0x340 [ 935.496733][T31994] _raw_read_lock+0x36/0x50 [ 935.503565][T31994] __do_wait+0xde/0x740 [ 935.510056][T31994] do_wait+0x1e8/0x4f0 [ 935.516460][T31994] kernel_wait+0xab/0x170 [ 935.523127][T31994] call_usermodehelper_exec_work+0xbe/0x230 [ 935.531348][T31994] process_scheduled_works+0xad1/0x1770 [ 935.539223][T31994] worker_thread+0x8a0/0xda0 [ 935.546143][T31994] kthread+0x711/0x8a0 [ 935.552549][T31994] ret_from_fork+0x510/0xa50 [ 935.559465][T31994] ret_from_fork_asm+0x1a/0x30 [ 935.566568][T31994] } [ 935.569220][T31994] ... key at: [] tasklist_lock+0x18/0x40 [ 935.577099][T31994] ... acquired at: [ 935.581054][T31994] _raw_read_lock+0x36/0x50 [ 935.585713][T31994] send_sigio+0x101/0x370 [ 935.590207][T31994] dnotify_handle_event+0x169/0x440 [ 935.595562][T31994] fsnotify+0x180b/0x1ab0 [ 935.600056][T31994] path_openat+0x1aa1/0x3dd0 [ 935.604799][T31994] do_filp_open+0x1fa/0x410 [ 935.609460][T31994] do_sys_openat2+0x121/0x200 [ 935.614300][T31994] __ia32_compat_sys_openat+0x131/0x160 [ 935.620009][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 935.625366][T31994] do_fast_syscall_32+0x34/0x80 [ 935.630375][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.636865][T31994] [ 935.639170][T31994] -> (&f_owner->lock){....}-{3:3} { [ 935.644461][T31994] INITIAL USE at: [ 935.648430][T31994] lock_acquire+0x107/0x340 [ 935.654662][T31994] _raw_write_lock_irq+0x3d/0x50 [ 935.661324][T31994] __f_setown+0x67/0x370 [ 935.667295][T31994] fcntl_dirnotify+0x3fa/0x6a0 [ 935.673778][T31994] do_fcntl+0x745/0x1a50 [ 935.679750][T31994] do_compat_fcntl64+0x477/0x720 [ 935.686416][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 935.693337][T31994] do_fast_syscall_32+0x34/0x80 [ 935.699911][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.707962][T31994] INITIAL READ USE at: [ 935.712361][T31994] lock_acquire+0x107/0x340 [ 935.719020][T31994] _raw_read_lock_irqsave+0x48/0x60 [ 935.726372][T31994] send_sigio+0x38/0x370 [ 935.732779][T31994] dnotify_handle_event+0x169/0x440 [ 935.740131][T31994] fsnotify+0x180b/0x1ab0 [ 935.746625][T31994] vfs_readv+0x703/0x850 [ 935.753030][T31994] __ia32_compat_sys_preadv2+0x227/0x320 [ 935.760826][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 935.768183][T31994] do_fast_syscall_32+0x34/0x80 [ 935.775193][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.783684][T31994] } [ 935.786255][T31994] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 935.795173][T31994] ... acquired at: [ 935.799041][T31994] _raw_read_lock_irqsave+0x48/0x60 [ 935.804405][T31994] send_sigio+0x38/0x370 [ 935.808824][T31994] kill_fasync+0x24d/0x4d0 [ 935.813413][T31994] lease_break_callback+0x26/0x30 [ 935.818600][T31994] __break_lease+0x6e3/0x1490 [ 935.823437][T31994] do_dentry_open+0x73a/0x1420 [ 935.828364][T31994] vfs_open+0x3b/0x340 [ 935.832597][T31994] path_openat+0x340e/0x3dd0 [ 935.837346][T31994] do_filp_open+0x1fa/0x410 [ 935.842004][T31994] do_sys_openat2+0x121/0x200 [ 935.846847][T31994] __ia32_compat_sys_openat+0x131/0x160 [ 935.852565][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 935.857926][T31994] do_fast_syscall_32+0x34/0x80 [ 935.862937][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.869434][T31994] [ 935.871753][T31994] -> (&new->fa_lock){....}-{3:3} { [ 935.876869][T31994] INITIAL USE at: [ 935.880750][T31994] lock_acquire+0x107/0x340 [ 935.886806][T31994] _raw_write_lock_irq+0x3d/0x50 [ 935.893297][T31994] fasync_remove_entry+0xf1/0x1c0 [ 935.899879][T31994] sock_fasync+0x85/0xf0 [ 935.905680][T31994] __fput+0x8a2/0xa70 [ 935.911215][T31994] task_work_run+0x1d4/0x260 [ 935.917356][T31994] exit_to_user_mode_loop+0xef/0x4e0 [ 935.924190][T31994] __do_fast_syscall_32+0x398/0x570 [ 935.930941][T31994] do_fast_syscall_32+0x34/0x80 [ 935.937343][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 935.945220][T31994] INITIAL READ USE at: [ 935.949532][T31994] lock_acquire+0x107/0x340 [ 935.956016][T31994] _raw_read_lock_irqsave+0x48/0x60 [ 935.963200][T31994] kill_fasync+0x199/0x4d0 [ 935.969608][T31994] anon_pipe_read+0xf06/0x1040 [ 935.976359][T31994] do_iter_readv_writev+0x623/0x8c0 [ 935.983539][T31994] vfs_readv+0x253/0x850 [ 935.989767][T31994] do_readv+0x14d/0x2d0 [ 935.995911][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 936.003096][T31994] do_fast_syscall_32+0x34/0x80 [ 936.009931][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.018244][T31994] } [ 936.020725][T31994] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 936.029389][T31994] ... acquired at: [ 936.033172][T31994] _raw_read_lock_irqsave+0x48/0x60 [ 936.038530][T31994] kill_fasync+0x199/0x4d0 [ 936.043113][T31994] evdev_pass_values+0x627/0xbd0 [ 936.048215][T31994] evdev_events+0x1e6/0x340 [ 936.052880][T31994] input_pass_values+0x288/0x890 [ 936.057976][T31994] input_event_dispose+0x330/0x6b0 [ 936.063254][T31994] input_inject_event+0x1dd/0x340 [ 936.068443][T31994] evdev_write+0x2fc/0x480 [ 936.073018][T31994] vfs_write+0x27e/0xb30 [ 936.077417][T31994] ksys_write+0x145/0x250 [ 936.081900][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 936.087260][T31994] do_fast_syscall_32+0x34/0x80 [ 936.092273][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.098768][T31994] [ 936.101077][T31994] [ 936.101077][T31994] stack backtrace: [ 936.106951][T31994] CPU: 0 UID: 0 PID: 31994 Comm: syz.2.10853 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.106977][T31994] Tainted: [L]=SOFTLOCKUP [ 936.106984][T31994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 936.106995][T31994] Call Trace: [ 936.107004][T31994] [ 936.107012][T31994] dump_stack_lvl+0xe8/0x150 [ 936.107034][T31994] __lock_acquire+0x2a95/0x2cf0 [ 936.107059][T31994] ? kill_fasync+0x199/0x4d0 [ 936.107083][T31994] lock_acquire+0x107/0x340 [ 936.107098][T31994] ? kill_fasync+0x199/0x4d0 [ 936.107123][T31994] ? do_raw_spin_lock+0x121/0x290 [ 936.107145][T31994] ? evdev_pass_values+0xb9/0xbd0 [ 936.107165][T31994] _raw_read_lock_irqsave+0x48/0x60 [ 936.107181][T31994] ? kill_fasync+0x199/0x4d0 [ 936.107204][T31994] kill_fasync+0x199/0x4d0 [ 936.107228][T31994] ? kill_fasync+0x53/0x4d0 [ 936.107252][T31994] evdev_pass_values+0x627/0xbd0 [ 936.107272][T31994] ? evdev_pass_values+0x641/0xbd0 [ 936.107291][T31994] evdev_events+0x1e6/0x340 [ 936.107307][T31994] ? evdev_events+0x79/0x340 [ 936.107323][T31994] ? input_pass_values+0x8d/0x890 [ 936.107339][T31994] input_pass_values+0x288/0x890 [ 936.107357][T31994] ? input_handle_event+0x70c/0xf30 [ 936.107380][T31994] input_event_dispose+0x330/0x6b0 [ 936.107405][T31994] input_inject_event+0x1dd/0x340 [ 936.107427][T31994] ? input_inject_event+0xb6/0x340 [ 936.107450][T31994] evdev_write+0x2fc/0x480 [ 936.107469][T31994] ? __pfx_evdev_write+0x10/0x10 [ 936.107487][T31994] ? bpf_lsm_file_permission+0x9/0x20 [ 936.107505][T31994] ? security_file_permission+0x75/0x290 [ 936.107523][T31994] ? rw_verify_area+0x255/0x4d0 [ 936.107548][T31994] ? __pfx_evdev_write+0x10/0x10 [ 936.107566][T31994] vfs_write+0x27e/0xb30 [ 936.107583][T31994] ? __pfx_vfs_write+0x10/0x10 [ 936.107599][T31994] ? __fget_files+0x2a/0x420 [ 936.107625][T31994] ? __fget_files+0x2a/0x420 [ 936.107645][T31994] ? __fget_files+0x3a0/0x420 [ 936.107665][T31994] ? __fget_files+0x2a/0x420 [ 936.107687][T31994] ksys_write+0x145/0x250 [ 936.107703][T31994] ? __pfx_ksys_write+0x10/0x10 [ 936.107722][T31994] __do_fast_syscall_32+0x1dc/0x570 [ 936.107742][T31994] ? lockdep_hardirqs_on+0x7b/0x110 [ 936.107759][T31994] ? do_fast_syscall_32+0x34/0x80 [ 936.107778][T31994] ? irqentry_exit+0x10f/0x670 [ 936.107796][T31994] do_fast_syscall_32+0x34/0x80 [ 936.107815][T31994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.107836][T31994] RIP: 0023:0xf7f47539 [ 936.107851][T31994] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 936.107867][T31994] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 936.107885][T31994] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 936.107898][T31994] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.107909][T31994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.107919][T31994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 936.107930][T31994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.107946][T31994] [ 936.132167][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 936.139912][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.426504][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.433294][ T3097] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 936.451976][ T10] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 936.451997][ T10] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 936.523787][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.532562][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.540966][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.549144][T17532] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 936.558005][T31995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.581912][ T3097] usb 2-1: Using ep0 maxpacket: 32 [ 936.588139][ T3097] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 936.598589][ T3097] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 936.610606][ T3097] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 936.621655][ T3097] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 936.636328][ T3097] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 936.647231][ T3097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.656276][ T3097] usb 2-1: Product: syz [ 936.660418][ T3097] usb 2-1: Manufacturer: syz [ 936.665256][ T3097] usb 2-1: SerialNumber: syz [ 936.673511][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 936.681253][ T3097] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input167 [ 936.721895][T17532] usb 6-1: Using ep0 maxpacket: 32 [ 936.728266][T17532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.739429][T17532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.749292][T17532] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 936.763087][T17532] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 936.772180][T17532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.781393][T17532] usb 6-1: config 0 descriptor?? [ 936.891890][ T3097] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 936.900189][ T3097] (id 0x00) [ 936.941950][ T3097] rc_core: IR keymap rc-imon-pad not found [ 936.947831][ T3097] Registered IR keymap rc-empty [ 936.962227][ T3097] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 936.973971][ T3097] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 937.092849][ T3097] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 937.104269][ T3097] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input168 [ 937.117031][ T3097] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:10> initialized [ 937.175573][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.206142][T17532] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.009A/input/input169 [ 937.227020][T17532] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.009A/input/input170 [ 937.248763][T17532] kye 0003:0458:5011.009A: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 937.405906][T31992] imon:send_packet: packet tx failed (-71) [ 937.412062][T17532] usb 2-1: USB disconnect, device number 10 [ 937.442989][T31992] imon:vfd_write: send packet #0 failed [ 937.621149][ T10] usb 6-1: USB disconnect, device number 90 [ 938.215030][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.162833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.243868][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.284123][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.323185][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.648001][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.656748][ T3097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.682625][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.212497][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.366075][T18619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.404175][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog