last executing test programs: 4m15.112775275s ago: executing program 3 (id=17252): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r1, 0x0, 0xffffffff, 0x1000000000004}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r1, 0x0, 0xfdfffffffffffffd, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) 4m15.035946316s ago: executing program 3 (id=17254): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb28e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 4m14.834593997s ago: executing program 3 (id=17255): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 4m11.201670325s ago: executing program 3 (id=17288): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m10.303601397s ago: executing program 3 (id=17294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000) 4m6.132782444s ago: executing program 3 (id=17324): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0xffffffffffffffff, 0xffffd000) 4m5.491442428s ago: executing program 32 (id=17324): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0xffffffffffffffff, 0xffffd000) 51.908546764s ago: executing program 5 (id=19566): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 51.629734949s ago: executing program 5 (id=19570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 51.477422345s ago: executing program 5 (id=19573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x81) r1 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 51.320576396s ago: executing program 5 (id=19575): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 50.386228281s ago: executing program 5 (id=19586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x9, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1}, {0xf000, 0xddccb000, 0xa, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x8000000, 0x0, 0x0, 0x8, 0x4, 0x5, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x2, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0xf000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x3, 0x1a, 0x0, 0xfc, 0x86, 0xfe}, {0x1000, 0x80a0000, 0xe, 0x0, 0x0, 0x1, 0xff, 0x80, 0x0, 0x4, 0x0, 0x7}, {0x0, 0x80a0000, 0x0, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x1000}, {0x1, 0x9}, 0x60050011, 0x0, 0x0, 0x10, 0x3, 0x4001, 0x900, [0x0, 0x4, 0x40000fffd, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)=ANY=[]) 50.034228657s ago: executing program 5 (id=19589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0xa, 0x2f7c343a1feef19c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.720891926s ago: executing program 33 (id=19589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0xa, 0x2f7c343a1feef19c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.913078076s ago: executing program 6 (id=20030): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe", 0x15}], 0x1}, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 4.710203093s ago: executing program 6 (id=20033): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0xfffffffd, 0xffffffff, 0x7f}) 2.853931343s ago: executing program 0 (id=20049): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000", 0x2, 0x20000080, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={r2, 0x1}, 0x8) 2.782906573s ago: executing program 0 (id=20051): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0844123, &(0x7f0000000180)=0x4) 2.715520442s ago: executing program 0 (id=20053): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.699940997s ago: executing program 1 (id=20054): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600054e2300000000000000000000810000000000000001000000fdffffff00000100000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfedeff"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 2.609044742s ago: executing program 1 (id=20055): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 2.496579241s ago: executing program 1 (id=20056): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.360935702s ago: executing program 1 (id=20057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='yeah', 0x4) shutdown(r0, 0x1) 2.165789357s ago: executing program 1 (id=20059): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="528d4948f6", 0x5}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x2140) 1.912514705s ago: executing program 1 (id=20060): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1, 0x0, 0x0, 0xe0, 0x94, 0x4}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/65}, {&(0x7f0000000300)=""/214}, {&(0x7f00000001c0)=""/116}, {&(0x7f0000000400)=""/41}], 0x10000000000000d9) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 1.710280548s ago: executing program 0 (id=20061): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) faccessat(r0, &(0x7f0000000080)='./bus\x00', 0x1) 1.644776433s ago: executing program 0 (id=20062): io_uring_setup(0x5909, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x3, 0xf2}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 1.55249478s ago: executing program 6 (id=20063): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 1.515236102s ago: executing program 2 (id=20064): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r1, 0x3) 1.46765878s ago: executing program 2 (id=20065): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000b, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x57}) 1.421342728s ago: executing program 6 (id=20066): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 1.16369165s ago: executing program 2 (id=20067): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0xf16, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffd61, 0x10008895, 0x0, 0x0) 1.095219798s ago: executing program 4 (id=20068): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000001808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040051) 1.09458652s ago: executing program 6 (id=20069): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3) 830.987183ms ago: executing program 4 (id=20070): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b00010067656e65766500000c000280632b0c226bb396"], 0x3c}}, 0x0) 612.496962ms ago: executing program 0 (id=20071): pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="13023a", 0x3, 0x3ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @struct={0x8, 0x0, 0x0, 0x4, 0x1, 0xfffffff7}]}, {0x0, [0x61, 0x61, 0x0, 0x5f, 0x61, 0x0, 0x0, 0x5f]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e23, 0x33, @loopback, 0xe68}}, 0x0, 0x0, 0x5, 0x0, "2cb4dc53455d71aa67000b90023847db64bee2d8e7d5f49448ab9c35260cda343fa3d3af413189d2726a972603a87c9554f79e73defc23d4cbd98dd5f567bb406037b4251506748db4d6497b639e5f38"}, 0xd8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 375.2847ms ago: executing program 4 (id=20072): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) shutdown(0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') 305.652852ms ago: executing program 4 (id=20073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) dup3(r1, r0, 0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f80)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x288250cf285dac68}]}}]}, 0x3c}}, 0x20044084) 240.329594ms ago: executing program 2 (id=20074): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0x8) 239.42485ms ago: executing program 4 (id=20075): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721", 0x9c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000040}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000200)=""/83, 0x74}], 0x2}, 0x0) 196.898479ms ago: executing program 2 (id=20076): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x8, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) 106.045568ms ago: executing program 4 (id=20077): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmmsg$inet6(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="bac3d8f7d7e36174630ccbe8d8cc13e3948d4c2b09c921419ae7fe0e7186d9556e21539741094481bcb0c003d093a754f48ac2a88f0abbfb1e95bae40fccfbf2a1c8576d942fc917bbc249c8e61e9cf85050705384d1877d715d421aa6b16b5513d09794ebb7de723142dc89561a9f1f4180657c8671fb0ea7338ccfb2bdecde9c7a267662719ef724eac59a82454a30a67f99ce0bf2cb0d0e67e4b50c9f19229e0ebf429e63e406bab9381e19e7d4ff2323863b63f335bbafe09be3d13cce97d590a5464abd345ab3", 0xc9}, {&(0x7f0000000fc0)="99a1c2298faf3c8776bd67573ba2eeb652576e1cf270d189960fb4cbdba36bfb5002a8c9adb4c73598263f4da3e50546155d45f5ac2cc55e58a8b001f6b8272ac9190a8af260a374ae44b166cd94701e16bc0127fd7f9f31a97494eb90f55df45e8b567d7d8580d75d328de05ccb82a1b81ac3f5d507cbb8b79ed4186483dc959df36d655c85e039705a36e06edb1999067006812072e3a2794a54a941a585e35d05675c338f3a9cf403a57e3e9aa42bc718439c42e84ec0df4587118a8c298b9d58b072034c79c7c7b8a3e0b2f544e2679d4d748af26b2946e8d17a4b7becdbedf2a6379831f69d559289d9022d56fb2f06b75c0de947e9792f704cf13793a06d2140b68a201ec2799169e85b0bdf11ef2b750ae35f2e9db1de4a1e64886fb6c7860b6684e4aa8a399e8e18f80ef9a0fde1ab8865c6986a2c39072244bbed6121550fcaabbc5df4791f2b459923c9b3e72e2ae1e0ec78c794ee6a7542a3f88b567f5dc3461db0821c438fe25580cde1d5740b3c91a351b8e8211641a06a281816bf87c888095070c7402b56850f555ec342bc2728347cb71cd2cf99ed39c3f2661a539a0e6d9dec6c9b8cee903fb4f669375ad67e87277ca53984612fff9d74be6f6c37260590ddcb9a40a5a645703858984b513b5aba0df791d05ea2fcbe2a0003969ec5fa46efface6543d88d95928d5948ba072fc6e1543404ba1cdfb7ac16cf25f8dc7366ce5a753d17807e07455e59ffdd31b097803418888dd220a56256395c1c8a7d2e3a8f7deb5885483d7b55e0a8a974442749ee1da548d2312c1387d1e0ceabec01fc5d61f5b702df9ebe9df0ede45a5003a8b1ae7adf5497cf6354a957ba911d73ef84fc45a618305a4be3c59b503417a74692d10e6a86c07c1de37d3db8f159d8eade286eb927a5b13d755bb434f44d67a9197842220ead391f78ceccaf88cba92afccd389c2d5d57d9ae6741511aad9f466101871ce3ed331282c0b4d85bfe5f85af3219e02db1a1568f8264413ef2bd487b9fb3a52983da0d2bc5fda8d61c942a682d723e3abb96c59a0785b710a99dc03a4f77a7e95d71f398f4b67c4a42cbbae5fab34355c10a7ec4596b68e12a334513e286c8a4a909a49e0ecb0229aa785f39d7f83b8317030dffa4aee60ff5a6742261f736d472242b6efc1741db6ae17cdc77f6a775282d5c193e2eeeb8f3d67b2ccdaee6ee95800be0dea7770579137c3a1a97d5ea34a8be8fcab43b1abfba24cdcf1aa92f87e721d2ee2b2035dea2e0e420e90778806079ff8f06a37e8ac30424e54ab3751406d39385265ff15241e1c844bedb45d861214ea2b0ad9b01923d1967437a4026e9ae590c2b886fca2fbb8af0e3dc9cb1cf09878efc467badb747a6c573b94b55c9b815174bec4a8f638589a7f638b57fe19e50e7ed26dc53d4b0fd37c75f78feadfcdfeea29324ae96095bc63d08e69d54db2bf3ca350371bf70f36a5ce243f336c9ed3191926d7108ffdf54882d0d14e1613de960075de3b86ff00a369a3841410311954274e056e4a14387a4d0c46904b185b6b61f70a14c36b1e03213862cd5432b3f370a611ec130f06ae52e64f6dbde65e0bbd8279cf94794c2a769f69096fef8ebe73eb848f94aa2b927a0f26d033c027a989f645c2890fe8968bc38a593e74be05eb19080862166199d4d9213d3a4c3806980b0f4faf38f42231272143cb5caa65d41ca0ef0173a5f0d5cab9a71cc73f45c5fa01610c28c995a6a9c19cfb387c546ed9f53989570157f9a5ffc933f13ca4c4039b2387cfdcbc904e6ee9f5a6c1d9675f1867dd07e36d4f4bdd0d75c64213fbc41c4f4f70ae3e221f61ab0d79be0cb263463f66ea30d4b8994e549c54b5172cf852bb9849e92f9b1b1e8220d273b913723f20e219d63497056cf07db0b964d531d7d161ff0ba2e8e2e355d9da53c3201613c5c3230642487d491ab999d97a718359563d413773289d86e9a79ed31e3e583a0fb331e8dfe2b80f99d96a3a6d1f6335fbd1bab99f0fb12169971391abc740a45d90408f430dee46601ad2679ce16a566fbb3ef14008ce3131fb3826af86ffac370340d26180e461bd2cb807fe177018533bee654093ce492bb43bb9f15913e42f7f5e276a0d3eafd92ce428d68c5776358bc7bbbc8f4af66cf26c4392a3d927b9301c1bba60fdd4710edfc1cca327683c39738c2b1151aa77e306890aaae87717f7ee7eebf7fd3c5243865972646d4ebab9d3417c796df5e9d5fdd973ebd5fe8b0432b94cbae31938672f414616e8af7a30c5864c2c16e03cbe7c9ad297101b38772e62ec3152b821188907071367221ad509c8d46687a0a5a99cb2e2a158a3d9443299ba5409ebacfd7624d3841c83b0fec3d5527376dc2fdae2ce51bb24c180000a3506ab56517c71e28f0392d16567c8ae53a08b70bb9a92dec5d8430356697ec1dd4436582bef184933e43200bf30b05f7b5900e9edc1acab767bd9ac0fbcfd5780df4fba9e7cfbebe543f79ed67d3f57f4b32d9787de5ddaea13ff946fe84bed618085b08820a93a62ebada318d6e2344e5ce19231afdda93595e9541679bfef7461e5caf8c74f225c4f04ac597330c1741585c98a278abfdac85c69a6c801bb2b4b22693729db0292ad7776f9765ae0ef599b19dd0edf2908b8952f408c821422d5980914660300809696a35f6aa9155c950b930dc59ac685c96a599688f505de816db4dc4d0a6eb3dfeaf4044c133d6224d5628c1c7f612f4855c33d75cad4f86c57d06749d08447939392f6338f1bbd2de98ebc2b46d5b5af19b697289adef0ac2dc48b75346c59476b9c5993baa64505e1cd31c37deb57623c6c007262a92f6e011083b72bd71885ef1f97d167b6f68090712425908d87ac849bfc66bdbeab029173f7a2a0b577db8e45f42b173d3d6a4ec6e28368dfe9f9eb49ea2c27b4a5cf41435f6e67d5a75d0601a75268152008203ef6bcf2f923b562e8dbc8d1582b81543592b70bb396572fd29f229fcd67ba8618c629962ea536769f203982769b50477f9adbee90f5abd00d6b8a001e4f34273271077c8c1b3b7f0dbb57492801449237e5414bf448ea26a904406c468257ef639eb23ae3d29fb5d98f087edc8a2d17ee9ae34bc0b74621054d6e3b51112473481d25b67b66eeb3aedb6d51e207ee70a1bfc4a45ddcd9063bc17c3253a36723de7a3511e74efa901f65adc64460990fcd6a3f49a2ceeb7ec02d0f3647fba2d4ed306e99fa38d3aab0afa7ebaccda1e6e1eda6181f911a7dea03c515115f26735d0e9a81769dbaded4bf72fcf48163c26aa5fadc9cb41bfa9a8aaa7ba30da6b92f14fc19de5180f915be94a9e8e47fc2cebbe298e83d1b4439560b10c60b4918ec13f091f5d795fb8fbaeb1ff14dfd7b1e397f54091a42e99f76027dc0d37cf2892f68852436ef0ff6771b697470350f2ff9b039d8db1fd7d880fc28cd4d970e1c6f700116bc9553dd71160b8781a4b1168d69c4cd814a16bf4fe9e95e362546e4fd7a1c44794c756181df826e36a92d97be202647020d9213098482be7713818e775a8b2a173732acc4c68210d5111c001b84a3d5c729fe945b88eb3879360b9be9d9a078fb14bebc45f7d43ea453833c2710e2e18dcc66a0f42ec3a8cab720931d347bddceaad115029e9405bd8cfb0ec24306dabe095728787a2931fa7320f43e23e6340ef077fb1ced43ab011ec73cd640c32264409090f7265ba07984f0e6f44c702094b1a740a013b9bbc8accd108eb4a609c155ebefbad2285d6b9cc46d91a24f4df2f59cd3bb9dc7139014c041e7874e2c714ce0a748df20997ca063f5ecfca95d8e3df8b3916244444e91cca0d36b33a77ddc77e2f000d3734217bd874013986a0407e936f8d25084ae8da4d1c0dc0b11f05949d0fb81edc1925deb9e9f2aac3172810b5d6a52ac83f3194b76cfb34ec4144de036ed211d0468c474aab2466876658d037dacca5575558124a67f25aa57bf1c19fc1a8148f55327aba051ed8c59c0317b320e4610cb973b58d057c19258a6d4e6929134e2376cd15b6533d43a45d54e18ccd63ebe89cafa309b3387d6a51f8dc0a4fa43353f5de60c07ab703afbf61ef14038d2c319425076de9d1c6c014b12abab05c52518d24bf9dbbb103b43c4a03a9b62a7c6a9c12e076a687e3ef359ed90177e3730d4ca4933e53df1659fad6a529f4bf2c815194f6f1fe885e4e668d2775ebea2385f9d677dd09165610b3d696c32de1ff22160cd35f6f6a41cb2bcfd975f4966a334019106c44a45f041f0f05fc0fc54f65df6a18de54ed90377415a599c49832fea2b0125aae6d0da0b69781b515ce8b8aea929eb02147713f9c08c3c435796289b9a9c7622109b6a1394248dabcb9cef7fae80bf59c088249e57624484b690f497ef18b9d03ad2ebb98fd971ab691355c75878e166e9d7a9f17fc3e27445b17737cfd6961a74d3f0c1b9de4a069cce81d992d11223189e61b8c86cbfe56f0c8b8dc072e3841308ea3abc1c37be39a9cae2a5cd5acc1eb1faf95d1bc8a3058bd9b11cf212459e4ea24df3d1d8ad04b1e241e391861a360123c9e04dfb49b5979331aa0a26636c68a679a810231762786e010c5a880c95477f325119591704f66d5dce252ad79945e21fb849c152fd007a3348c1e2fe5b8872718ee19798a02cee72fe5a976ad1f82691b54a0deb0e9dd76e8be7b209162a7857d7d16b1b62305c0ac666a12b15ace117f1b9c32515b81ad7194f7e46fe1bad5a7cee05792db96e81dd8a1f5e847cc9a71f62bfaee76324f7a12a9f899379a70ff770106edc7627be9bcd2393ad525e1f7e73318f4eab26dcc8f47d05401f2bbfddd3ca5487d5b3d4f13e717410a4e831fa439ece3b7fd822b929533b45a561811f92bec8f32be137b3f1328e904907c03775e8aee1c405a4bb5d8d55cd64e3c1dbb476d2f039f13027ef99219a60fd29d8d18e342c78a0e59210d8c38fd879e19c43bb38dc9791404cf626331cd09b33d29bb4cbbedb902e7bd59f8345d8494bfd48514f9a2dd5448c8cb710ffb1282fdbe180e38b7841f7b26d7a8fe0c6ee9f642c98bc9d36ed64d5f9c8436e8725b5c14404393b5461ccc7fc6da7df326f9e0589190c9bc8ec1c681013b89cfe6dae4accbf01ce240755235b6f6e2787e41af1790ef932074d4008d6d5766a6d85108812d16d479514d0d876cf381ac14c2eabbac699156736c1793f168da0aa32cfe46b7f95f177555255b088420c45333f943ec8556f3017b74b72f98e1e315ef16a814e27dc48f339b0a5582c664a4a779429ea2e50590bd57b4177f229ce26ad9025cb1391720384014a12b1b00c29c58698c6fd40b806715875a4fbdc7a13260dc3f1f4d2a77a371d97b244e517c9e85fab3eca47888cbd109e1b3dc1f8263d1dd5f556017c6fc", 0xf08}], 0x2}}], 0x1, 0x40) 105.352928ms ago: executing program 2 (id=20078): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0xc, 0xb3, {0xb3, 0x8, "9bd6cf07485e201372a32831c598ececf1244859f629ba83ac1ec191be100070f05d56c9d80a0389197808ed473e36a84dfc14fdf7e2b323577e57c83a4ee4d4df56608d2a9c8374d0d5f9da65295189f06b5f884fbde18ea368d138aff187fff848cea1bf6173d38bf36c3f824609bcc08ff420a7a0c0ff9ac7516a2f187863fd2dec5d055b45cad3393ba9baa5c10ae70ba93b3ff73317be67e1dcde4e5558eaff287f9a7bb7a28e37113ca5a9c888ac"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x5f, "6ceaf20be652d4c3f3c0adfe0743144c23ff5b6df5d39f81676db2e7cda3c668ff12395cccc10a23194fe992055fce45e0452e6c429958254a8623f426867f52163c1fc0fa28912c15ace5b9068401498e7d7f7c572bb87e791132ad9892ca"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x48}, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\f\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000300)={0x20, 0x82, 0x1, "b9"}, &(0x7f0000000340)={0x20, 0x83, 0x1, "b6"}, &(0x7f0000000380)={0x20, 0x84, 0x2, 'R,'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, '!>A'}}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) 0s ago: executing program 6 (id=20079): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 1284.635639][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1284.642935][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1284.650164][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1284.657390][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1284.664589][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1284.671575][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1284.680634][ T5891] usb 3-1: USB disconnect, device number 115 [ 1284.698757][ T5891] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1284.783365][T16619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.063710][T16635] input: syz0 as /devices/virtual/input/input222 [ 1285.524965][T30036] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1285.709551][T30036] usb 5-1: Using ep0 maxpacket: 32 [ 1285.728010][T30036] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1285.743225][T30036] usb 5-1: config 0 has no interface number 0 [ 1285.755352][T30036] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1285.801007][T30036] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1285.820795][T30036] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1285.830312][T30036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.848706][T30036] usb 5-1: Product: syz [ 1285.861269][T30036] usb 5-1: Manufacturer: syz [ 1285.875457][T30036] usb 5-1: SerialNumber: syz [ 1285.906613][T30036] usb 5-1: config 0 descriptor?? [ 1286.556971][T29958] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1286.564829][T30036] appletouch 5-1:0.85: Geyser mode initialized. [ 1286.574342][T30036] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input223 [ 1286.607529][T16698] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18835'. [ 1286.743806][T29958] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1286.775132][T29958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.785181][ T9] usb 5-1: USB disconnect, device number 27 [ 1286.821303][T29958] usb 6-1: config 0 descriptor?? [ 1286.843926][T29958] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1286.857766][ T9] appletouch 5-1:0.85: input: appletouch disconnected [ 1286.985021][ T5891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1287.167343][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.189211][ T5891] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1287.204575][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1287.214212][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.222719][ T5891] usb 2-1: Product: syz [ 1287.227501][ T5891] usb 2-1: Manufacturer: syz [ 1287.232142][ T5891] usb 2-1: SerialNumber: syz [ 1287.249545][T29958] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1287.251309][ T5891] cdc_mbim 2-1:1.0: skipping garbage [ 1287.456458][T16700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1287.666249][T29958] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1287.883670][T29958] usb 6-1: USB disconnect, device number 27 [ 1288.085441][T16700] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1288.100573][ T5891] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 1288.304052][ T5891] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1288.319114][ T5891] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1288.340080][ T5891] wwan wwan0: port wwan0mbim0 attached [ 1288.372335][ T5891] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 5a:0a:e5:8f:3c:65 [ 1288.413950][ T5891] usb 2-1: USB disconnect, device number 20 [ 1288.442610][ T5891] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1288.550451][ T5891] wwan wwan0: port wwan0mbim0 disconnected [ 1288.694988][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1288.745161][T16746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18857'. [ 1288.865176][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1288.874716][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1288.895468][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1288.912869][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.927906][ T9] usb 1-1: Product: syz [ 1288.935902][ T9] usb 1-1: Manufacturer: syz [ 1288.940682][ T9] usb 1-1: SerialNumber: syz [ 1288.970144][ T9] usb 1-1: config 0 descriptor?? [ 1289.040373][T16750] dvmrp0: left allmulticast mode [ 1289.533848][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18865'. [ 1289.541831][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1289.573982][T16764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18865'. [ 1289.816242][ T9] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1289.846723][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 1290.068172][T29958] usb 1-1: USB disconnect, device number 11 [ 1290.475154][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1290.644985][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1290.660040][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.681762][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.685106][T29958] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1290.692793][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1290.709069][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.725358][ T9] usb 5-1: config 0 descriptor?? [ 1290.795764][ T5891] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1290.864996][T29958] usb 6-1: Using ep0 maxpacket: 32 [ 1290.877376][T29958] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1290.897125][T29958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.928107][T29958] usb 6-1: config 0 descriptor?? [ 1290.990505][ T5891] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1291.000726][ T5891] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1291.009762][ T5891] usb 3-1: Product: syz [ 1291.014069][ T5891] usb 3-1: Manufacturer: syz [ 1291.018810][ T5891] usb 3-1: SerialNumber: syz [ 1291.036931][ T5891] usb 3-1: config 0 descriptor?? [ 1291.056734][ T5891] ch341 3-1:0.0: ch341-uart converter detected [ 1291.143378][T29958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1291.170837][T29958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1291.206716][ T9] mcp2221 0003:04D8:00DD.00D3: unknown main item tag 0x0 [ 1291.211578][T29958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1291.227431][ T9] mcp2221 0003:04D8:00DD.00D3: unknown main item tag 0x0 [ 1291.238470][T29958] usb 6-1: media controller created [ 1291.268947][T29958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1291.273553][ T9] mcp2221 0003:04D8:00DD.00D3: unknown main item tag 0x0 [ 1291.300925][ T9] mcp2221 0003:04D8:00DD.00D3: unknown main item tag 0x0 [ 1291.308228][ T9] mcp2221 0003:04D8:00DD.00D3: unknown main item tag 0x0 [ 1291.318183][ T9] mcp2221 0003:04D8:00DD.00D3: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1291.362024][T29958] az6027: usb out operation failed. (-71) [ 1291.375289][T29958] az6027: usb out operation failed. (-71) [ 1291.381065][T29958] stb0899_attach: Driver disabled by Kconfig [ 1291.405214][T29958] az6027: no front-end attached [ 1291.405214][T29958] [ 1291.433582][T29958] az6027: usb out operation failed. (-71) [ 1291.436594][ T9] usb 5-1: USB disconnect, device number 28 [ 1291.461881][T29958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1291.495697][T29958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input224 [ 1291.543642][T29958] dvb-usb: schedule remote query interval to 400 msecs. [ 1291.583102][T29958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1291.610054][T29958] usb 6-1: USB disconnect, device number 28 [ 1291.693681][T29958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1292.060606][ T5891] ch341-uart ttyUSB0: failed to read break control: -71 [ 1292.075246][ T5891] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1292.147778][ T5891] usb 3-1: USB disconnect, device number 116 [ 1292.186499][ T5891] ch341 3-1:0.0: device disconnected [ 1292.228910][T16828] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1292.805328][T16838] ip6tnl5: entered promiscuous mode [ 1292.830066][T16838] ip6tnl5: entered allmulticast mode [ 1294.036007][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1294.099624][T16882] veth0: entered promiscuous mode [ 1294.108209][T16881] veth0: left promiscuous mode [ 1294.206825][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1294.216245][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.238405][ T9] usb 6-1: config 0 descriptor?? [ 1295.075246][ T9] usb 6-1: Cannot set autoneg [ 1295.098007][ T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1295.150700][ T9] usb 6-1: USB disconnect, device number 29 [ 1295.436562][T29958] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1295.597164][T29958] usb 2-1: config 0 has no interfaces? [ 1295.612934][T29958] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1295.627404][T29958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.646899][T29958] usb 2-1: config 0 descriptor?? [ 1295.887262][T29958] usb 2-1: USB disconnect, device number 21 [ 1296.360953][T16970] xt_hashlimit: max too large, truncated to 1048576 [ 1296.915320][ T5904] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1297.075260][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 1297.084199][ T5904] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1297.097940][ T5904] usb 6-1: config 0 has no interface number 0 [ 1297.112652][ T5904] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1297.130106][ T5904] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 1297.139755][ T5904] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 1297.161696][ T5904] usb 6-1: Product: syz [ 1297.169672][ T5904] usb 6-1: Manufacturer: syz [ 1297.174459][ T5904] usb 6-1: SerialNumber: syz [ 1297.187073][ T5904] usb 6-1: config 0 descriptor?? [ 1297.385033][T29958] psmouse serio6: Failed to reset mouse on : -5 [ 1297.475073][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1297.555884][ T5891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1297.635064][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1297.641991][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1297.650812][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1297.659715][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1297.668825][ T9] usb 5-1: config 1 has no interface number 0 [ 1297.675098][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1297.686393][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1297.699701][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1297.709058][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.719046][ T5891] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1297.727831][ T5891] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1297.739283][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1297.749994][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1297.765553][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1297.772026][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1297.785287][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1297.794373][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1297.802749][ T5891] usb 2-1: Product: syz [ 1297.807169][ T5891] usb 2-1: Manufacturer: syz [ 1297.820052][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 1297.825980][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 1297.838378][ T5891] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1297.844376][ T5891] cdc_wdm 2-1:1.0: Unknown control protocol [ 1297.969355][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1298.213475][ T5904] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1298.221374][ T5904] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1298.229180][ T5904] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1298.237216][ T5904] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1298.255222][ T5904] usb 6-1: USB disconnect, device number 30 [ 1298.255780][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1298.385893][ T9] usb 5-1: USB disconnect, device number 29 [ 1298.394710][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1298.427792][ T43] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.438568][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1298.439108][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1298.445897][ C0] wdm_int_callback: 283 callbacks suppressed [ 1298.445922][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1298.452281][ T43] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1298.457301][ C0] wdm_int_callback: 283 callbacks suppressed [ 1298.457321][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1298.457529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.464613][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.474014][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1298.505668][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1298.512048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1298.519096][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1298.522078][ T43] usb 1-1: config 0 descriptor?? [ 1298.525728][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1298.526161][ T5904] usb 2-1: USB disconnect, device number 22 [ 1298.531234][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1298.531258][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1298.531276][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1298.985759][ T43] betop 0003:11C0:5506.00D4: unknown main item tag 0x0 [ 1298.996132][ T43] betop 0003:11C0:5506.00D4: unknown main item tag 0x0 [ 1299.003240][ T43] betop 0003:11C0:5506.00D4: unknown main item tag 0x0 [ 1299.012036][ T43] betop 0003:11C0:5506.00D4: unknown main item tag 0x0 [ 1299.015160][T17025] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.18977'. [ 1299.019521][ T43] betop 0003:11C0:5506.00D4: unknown main item tag 0x0 [ 1299.055929][ T43] betop 0003:11C0:5506.00D4: hidraw0: USB HID v8.80 Device [HID 11c0:5506] on usb-dummy_hcd.0-1/input0 [ 1299.070191][ T43] betop 0003:11C0:5506.00D4: no inputs found [ 1299.215383][ T43] usb 1-1: USB disconnect, device number 12 [ 1300.064974][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1300.246964][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.247002][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.247028][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1300.247073][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1300.247100][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.249987][ T43] usb 2-1: config 0 descriptor?? [ 1300.671239][ T43] plantronics 0003:047F:FFFF.00D5: reserved main item tag 0xe [ 1300.671290][ T43] plantronics 0003:047F:FFFF.00D5: unknown main item tag 0x0 [ 1300.689313][ T43] plantronics 0003:047F:FFFF.00D5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1300.939715][ T43] usb 2-1: USB disconnect, device number 23 [ 1301.011353][T17080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.256491][T29958] misc userio: Buffer overflowed, userio client isn't keeping up [ 1302.153959][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19014'. [ 1302.329355][T29958] input: PS/2 Generic Mouse as /devices/serio6/input/input225 [ 1302.545003][T29958] psmouse serio6: Failed to enable mouse on [ 1303.122518][T17135] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1303.804349][T29958] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1303.995360][T29958] usb 6-1: Using ep0 maxpacket: 32 [ 1304.012516][T29958] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1304.045276][T29958] usb 6-1: config 0 has no interface number 0 [ 1304.072027][T29958] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1304.127330][T29958] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1304.145393][T29958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.171772][T29958] usb 6-1: Product: syz [ 1304.179850][T29958] usb 6-1: Manufacturer: syz [ 1304.190048][T29958] usb 6-1: SerialNumber: syz [ 1304.210692][T29958] usb 6-1: config 0 descriptor?? [ 1304.227738][T29958] smsc75xx v1.0.0 [ 1304.240850][T29958] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1304.263899][T29958] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 1304.294477][T17163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1304.610741][T17148] netlink: 'syz.5.19030': attribute type 4 has an invalid length. [ 1304.661138][T29958] usb 6-1: USB disconnect, device number 31 [ 1305.520372][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.526859][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.685076][T29958] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1306.865930][T29958] usb 3-1: Using ep0 maxpacket: 8 [ 1306.880304][T29958] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1306.898373][T29958] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1306.922397][T29958] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1306.946157][T29958] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.960066][T29958] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1306.970171][T29958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.075229][ T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1307.174992][T30036] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1307.196702][T29958] usb 3-1: GET_CAPABILITIES returned 0 [ 1307.207326][T29958] usbtmc 3-1:16.0: can't read capabilities [ 1307.235389][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1307.245975][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.263083][ T43] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1307.275680][ T43] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1307.296753][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1307.306138][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.314329][ T43] usb 2-1: Product: syz [ 1307.321853][ T43] usb 2-1: Manufacturer: syz [ 1307.326925][ T43] usb 2-1: SerialNumber: syz [ 1307.337021][T17229] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1307.367729][T30036] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1307.376894][T30036] usb 5-1: config 0 has no interface number 0 [ 1307.383190][T30036] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1307.399128][T30036] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1307.419316][T30036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.428404][T30036] usb 5-1: Product: syz [ 1307.439179][ T24] usb 3-1: USB disconnect, device number 117 [ 1307.448426][T30036] usb 5-1: Manufacturer: syz [ 1307.456858][T30036] usb 5-1: SerialNumber: syz [ 1307.482665][T30036] usb 5-1: config 0 descriptor?? [ 1307.682121][T17243] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1308.035183][ T5904] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1308.185006][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1308.192338][ T5904] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.324992][ T5904] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.344982][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1308.351678][ T5904] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1308.367045][ T43] cdc_ncm 2-1:1.0: bind() failure [ 1308.387494][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.415618][ T5904] usb 1-1: config 0 descriptor?? [ 1308.419057][ T43] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1308.472590][ T43] usb 2-1: USB disconnect, device number 24 [ 1308.509513][T17256] binder: 17255:17256 ioctl 4018620d 0 returned -22 [ 1308.517566][T30036] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1308.565862][T30036] usb 5-1: USB disconnect, device number 30 [ 1308.852827][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.877989][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.890423][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.925022][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.931980][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.965075][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.972028][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.981659][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.988757][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1308.997055][ T5904] apple 0003:05AC:0247.00D6: unknown main item tag 0x0 [ 1309.022306][ T5904] apple 0003:05AC:0247.00D6: unexpected long global item [ 1309.033325][ T5904] apple 0003:05AC:0247.00D6: parse failed [ 1309.067075][ T5904] apple 0003:05AC:0247.00D6: probe with driver apple failed with error -22 [ 1309.109541][ T5904] usb 1-1: USB disconnect, device number 13 [ 1309.165723][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 1309.165744][ T30] audit: type=1800 audit(1761267794.298:5630): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19078" name="nullb0" dev="devtmpfs" ino=6448 res=0 errno=0 [ 1309.193162][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.405202][T30036] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1309.476013][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1309.565108][ T5904] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1309.575131][T30036] usb 3-1: Using ep0 maxpacket: 8 [ 1309.584270][T30036] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1309.609001][T30036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1309.644497][T30036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1309.665789][T30036] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1309.680395][ T43] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 1309.697247][ T43] usb 5-1: config 0 has no interface number 0 [ 1309.717040][ T43] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1309.728044][ T5904] usb 2-1: config 0 has an invalid interface number: 129 but max is 0 [ 1309.728069][T30036] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1309.737264][ T5904] usb 2-1: config 0 has no interface number 0 [ 1309.750083][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.760508][ T43] usb 5-1: Product: syz [ 1309.764721][ T43] usb 5-1: Manufacturer: syz [ 1309.769563][T30036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.779986][ T5904] usb 2-1: config 0 interface 129 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1309.785194][ T43] usb 5-1: SerialNumber: syz [ 1309.794943][ T5904] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 1309.814555][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.828954][ T5904] usb 2-1: Product: syz [ 1309.843530][ T5904] usb 2-1: Manufacturer: syz [ 1309.848937][ T5904] usb 2-1: SerialNumber: syz [ 1309.859784][ T43] usb 5-1: config 0 descriptor?? [ 1309.883371][ T43] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1309.900937][ T5904] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1309.911856][ T43] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 1309.920067][ T5904] r8152-cfgselector 2-1: config 0 descriptor?? [ 1309.925557][ T5904] r8152 2-1:0.129: Expected endpoints are not found [ 1309.993498][ T30] audit: type=1326 audit(1761267795.128:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.029972][T30036] usb 3-1: GET_CAPABILITIES returned 0 [ 1310.037291][ T30] audit: type=1326 audit(1761267795.158:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.059749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.059902][T30036] usbtmc 3-1:16.0: can't read capabilities [ 1310.109545][ T30] audit: type=1326 audit(1761267795.158:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.175512][ T5904] r8152-cfgselector 2-1: USB disconnect, device number 25 [ 1310.192282][ T30] audit: type=1326 audit(1761267795.158:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.216130][ T30] audit: type=1326 audit(1761267795.158:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.245868][ T30] audit: type=1326 audit(1761267795.158:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9158efc9 code=0x7ffc0000 [ 1310.272105][ T30] audit: type=1326 audit(1761267795.158:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.294563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.309107][T17268] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 1310.320465][ T9] usb 3-1: USB disconnect, device number 118 [ 1310.344266][ T30] audit: type=1326 audit(1761267795.158:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9158efc9 code=0x7ffc0000 [ 1310.389970][ T30] audit: type=1326 audit(1761267795.168:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17287 comm="syz.5.19088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fce9152b099 code=0x7ffc0000 [ 1310.418219][ T24] usb 5-1: USB disconnect, device number 31 [ 1311.185675][T17320] netlink: 116 bytes leftover after parsing attributes in process `syz.4.19102'. [ 1311.337837][T17325] dlm: non-version read from control device 4 [ 1312.136651][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1312.315252][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1312.323515][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1312.342701][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1312.352135][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1312.361829][ T9] usb 3-1: config 1 has no interface number 0 [ 1312.368629][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.388438][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1312.436086][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1312.454616][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.515010][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1312.713373][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1313.179510][ T24] usb 3-1: USB disconnect, device number 119 [ 1313.200173][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1314.212320][T17413] bond_slave_1: entered promiscuous mode [ 1314.240452][T17413] bond_slave_1: left promiscuous mode [ 1315.074986][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1315.226985][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1315.234758][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.246902][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1315.258223][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1315.269400][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1315.279739][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1315.294553][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1315.309100][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1315.349649][ T24] usb 1-1: Manufacturer: syz [ 1315.367128][ T24] usb 1-1: config 0 descriptor?? [ 1315.685660][ T24] rc_core: IR keymap rc-hauppauge not found [ 1315.692295][ T24] Registered IR keymap rc-empty [ 1315.697790][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.725353][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.758732][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1315.796616][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input226 [ 1315.855879][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.877186][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.905580][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.945079][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.965563][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1315.985197][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.015493][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.032766][T17460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.046393][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.068541][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.105084][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.135126][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1316.177651][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1316.195399][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1316.217370][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1316.263097][ T24] usb 1-1: USB disconnect, device number 14 [ 1316.392555][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1316.419531][ T9] usb 3-1: config 1 has no interface number 0 [ 1316.443961][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1316.476738][ T9] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1316.520232][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1316.547468][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.585438][ T9] usb 3-1: Product: syz [ 1316.595403][ T9] usb 3-1: Manufacturer: syz [ 1316.611938][ T9] usb 3-1: SerialNumber: syz [ 1316.645046][T17458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1316.695144][T17458] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1316.773117][ T9] usb 3-1: Expected 3 endpoints, found: 2 [ 1317.087466][T30036] usb 3-1: USB disconnect, device number 120 [ 1317.195636][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1317.348719][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1317.370781][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.402548][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.445291][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1317.478847][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.486539][ T24] usb 6-1: config 0 descriptor?? [ 1317.749508][T17521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.942087][ T24] hid_parser_main: 839 callbacks suppressed [ 1317.942114][ T24] ft260 0003:0403:6030.00D7: unknown main item tag 0x0 [ 1317.977345][T17533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19193'. [ 1318.102402][ T24] ft260 0003:0403:6030.00D7: chip code: 0000 0000 [ 1318.303224][ T24] ft260 0003:0403:6030.00D7: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1318.441063][T17553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1318.506865][ T24] ft260 0003:0403:6030.00D7: failed to retrieve status: -71, no wakeup [ 1318.525396][ T24] ft260 0003:0403:6030.00D7: failed to retrieve status: -71 [ 1318.543657][ T24] ft260 0003:0403:6030.00D7: failed to reset I2C controller: -71 [ 1318.595777][ T24] usb 6-1: USB disconnect, device number 32 [ 1318.796105][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.805060][ T5904] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1318.957364][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.975206][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1318.993306][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.013889][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.043707][ T5904] usb 5-1: Product: syz [ 1319.056782][ T5904] usb 5-1: Manufacturer: syz [ 1319.063880][ T5904] usb 5-1: SerialNumber: syz [ 1319.225938][T17587] tun0: tun_chr_ioctl cmd 1074025675 [ 1319.231418][T17587] tun0: persist enabled [ 1319.236787][T17587] tun0: tun_chr_ioctl cmd 1074025675 [ 1319.242305][T17587] tun0: persist enabled [ 1319.293785][T17589] netlink: 6 bytes leftover after parsing attributes in process `syz.0.19217'. [ 1319.310425][ T5904] usb 5-1: 0:2 : does not exist [ 1319.322811][T17589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1319.327032][ T5904] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1319.380093][ T5904] usb 5-1: USB disconnect, device number 32 [ 1319.405196][ T5891] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1319.436678][T22179] udevd[22179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.569299][ T5891] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1319.579802][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.585178][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1319.588792][ T5891] usb 6-1: Product: syz [ 1319.606240][ T5891] usb 6-1: Manufacturer: syz [ 1319.615351][ T5891] usb 6-1: SerialNumber: syz [ 1319.623086][ T5891] usb 6-1: config 0 descriptor?? [ 1319.746952][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.774714][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.795030][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1319.804117][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.816147][ T24] usb 2-1: config 0 descriptor?? [ 1319.835287][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.238565][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.252151][ T5891] mos7840 6-1:0.0: required endpoints missing [ 1320.274394][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.285831][ T5891] usb 6-1: USB disconnect, device number 33 [ 1320.303548][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.323944][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.344563][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.369422][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.400173][ T24] cp2112 0003:10C4:EA90.00D8: unknown main item tag 0x0 [ 1320.432206][ T24] cp2112 0003:10C4:EA90.00D8: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1320.539209][ T24] cp2112 0003:10C4:EA90.00D8: Part Number: 0x00 Device Version: 0x00 [ 1320.556842][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.735034][ T43] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1320.878466][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.895396][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1320.908145][ T43] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1320.938009][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.956738][ T24] cp2112 0003:10C4:EA90.00D8: error setting SMBus config [ 1320.988673][ T43] usb 3-1: Product: syz [ 1320.994476][ T24] cp2112 0003:10C4:EA90.00D8: probe with driver cp2112 failed with error -71 [ 1321.016655][ T43] usb 3-1: Manufacturer: syz [ 1321.021324][ T43] usb 3-1: SerialNumber: syz [ 1321.086469][ T43] usb 3-1: config 0 descriptor?? [ 1321.092288][ T24] usb 2-1: USB disconnect, device number 26 [ 1321.112451][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1321.210936][T17626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.334223][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 1321.334246][ T30] audit: type=1326 audit(1761267806.468:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17628 comm="syz.5.19230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce9158efc9 code=0x0 [ 1321.336438][T17609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19224'. [ 1321.688833][ T30] audit: type=1326 audit(1761267806.828:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.19233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae18efc9 code=0x7ffc0000 [ 1321.760522][ T30] audit: type=1326 audit(1761267806.858:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.19233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae18efc9 code=0x7ffc0000 [ 1321.784228][ T30] audit: type=1326 audit(1761267806.868:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.19233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa9ae18efc9 code=0x7ffc0000 [ 1321.807511][ T30] audit: type=1326 audit(1761267806.878:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.19233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae18efc9 code=0x7ffc0000 [ 1321.831637][ T30] audit: type=1326 audit(1761267806.878:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.19233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa9ae18efc9 code=0x7ffc0000 [ 1321.859250][ T30] audit: type=1326 audit(1761267806.878:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.19233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ae18efc9 code=0x0 [ 1321.916647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.015079][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1322.129685][ T43] gspca_stk1135: reg_w 0x7 err -71 [ 1322.136162][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.155462][ T43] gspca_stk1135: Sensor write failed [ 1322.166996][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1322.167997][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.187422][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1322.199979][ T43] gspca_stk1135: Sensor write failed [ 1322.215025][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1322.215394][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.229535][ T43] gspca_stk1135: Sensor read failed [ 1322.235138][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.236519][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1322.241832][ T43] gspca_stk1135: Sensor read failed [ 1322.257042][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 1322.263813][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.270971][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1322.283883][ T43] gspca_stk1135: Sensor read failed [ 1322.289482][ T9] usb 1-1: Product: syz [ 1322.292753][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.300952][ T9] usb 1-1: Manufacturer: syz [ 1322.306940][ T43] gspca_stk1135: Sensor read failed [ 1322.309730][ T9] usb 1-1: SerialNumber: syz [ 1322.333772][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.336402][ T9] usb 1-1: config 0 descriptor?? [ 1322.349091][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1322.349663][ T43] gspca_stk1135: Sensor write failed [ 1322.355610][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1322.376659][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1322.389171][ T9] usb 1-1: selecting invalid altsetting 0 [ 1322.389944][ T43] gspca_stk1135: Sensor write failed [ 1322.409261][ T43] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1322.446250][ T43] usb 3-1: USB disconnect, device number 121 [ 1322.503711][T17655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.516525][T17655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.957243][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.966212][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1323.035218][T17641] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 1323.049142][T17641] usb 1-1: device reset changed ep0 maxpacket size! [ 1323.067952][ T9] usb 1-1: USB disconnect, device number 15 [ 1323.076239][ T5891] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1323.125217][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1323.142067][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.163223][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.183775][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1323.203264][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.228165][ T43] usb 2-1: config 0 descriptor?? [ 1323.255093][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 1323.268720][ T5891] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1323.277228][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1323.295140][ T5891] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1323.310529][ T5891] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1323.325501][ T5891] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1323.344915][ T5891] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.375733][ T5891] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1323.385397][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.465091][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1323.484594][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1323.497998][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1323.515272][ T9] usb 1-1: can't read configurations, error -71 [ 1323.595551][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.667972][ T43] ft260 0003:0403:6030.00D9: unknown main item tag 0x7 [ 1323.858412][ T43] ft260 0003:0403:6030.00D9: chip code: 6424 8183 [ 1323.995320][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.278792][ T5891] usb 2-1: USB disconnect, device number 27 [ 1324.393406][ T5907] usb 3-1: USB disconnect, device number 122 [ 1324.788205][T17706] netlink: 104 bytes leftover after parsing attributes in process `syz.4.19259'. [ 1325.033650][T17718] tmpfs: Unknown parameter 'óÐåÝõZåÐmHœSuLVÏŒGÿéUË9ËQ1' [ 1325.045057][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.145007][ T43] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1325.308344][ T43] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1325.335344][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.375306][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.386617][ T43] usb 2-1: config 0 descriptor?? [ 1325.431271][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19272'. [ 1325.809028][ T43] chicony 0003:04F2:1236.00DA: unknown main item tag 0x0 [ 1325.822739][ T43] chicony 0003:04F2:1236.00DA: unknown main item tag 0x0 [ 1325.831311][ T43] chicony 0003:04F2:1236.00DA: unknown main item tag 0x0 [ 1325.840477][ T43] chicony 0003:04F2:1236.00DA: unknown main item tag 0x0 [ 1325.848953][ T43] chicony 0003:04F2:1236.00DA: unknown main item tag 0x0 [ 1325.873134][ T43] chicony 0003:04F2:1236.00DA: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 1325.885057][T29958] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1326.019767][ T43] usb 2-1: USB disconnect, device number 28 [ 1326.045000][T29958] usb 1-1: Using ep0 maxpacket: 16 [ 1326.055818][T29958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.072210][T29958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.084146][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.092683][T29958] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1326.102309][T29958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.122053][T29958] usb 1-1: config 0 descriptor?? [ 1326.571224][T29958] hid (null): bogus close delimiter [ 1326.588224][T29958] hid (null): unknown global tag 0xc [ 1326.604092][T29958] hid (null): invalid report_count -776623640 [ 1326.613716][T29958] hid (null): invalid report_count -606263203 [ 1326.620325][T29958] hid (null): invalid report_size 16434 [ 1326.628707][T29958] hid (null): bogus close delimiter [ 1326.635500][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.647544][T29958] hid (null): invalid report_size 1457780112 [ 1326.660047][T29958] hid (null): unknown global tag 0xd [ 1326.683637][T17776] xt_connbytes: Forcing CT accounting to be enabled [ 1326.729547][T29958] topre 0003:0853:0148.00DB: unknown main item tag 0x0 [ 1326.762169][T29958] topre 0003:0853:0148.00DB: unknown main item tag 0x0 [ 1326.788010][T29958] topre 0003:0853:0148.00DB: unknown main item tag 0x0 [ 1326.807002][T29958] topre 0003:0853:0148.00DB: unknown main item tag 0x0 [ 1326.827212][T29958] topre 0003:0853:0148.00DB: unexpected long global item [ 1326.838059][T29958] topre 0003:0853:0148.00DB: probe with driver topre failed with error -22 [ 1326.861219][T29958] usb 1-1: USB disconnect, device number 18 [ 1327.117856][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.515505][T29958] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1327.684015][T29958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.697544][T29958] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1327.709539][T29958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.720414][T29958] usb 6-1: config 0 descriptor?? [ 1328.148149][T29958] keytouch 0003:0926:3333.00DC: fixing up Keytouch IEC report descriptor [ 1328.165668][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.190812][T29958] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00DC/input/input228 [ 1328.400886][T29958] keytouch 0003:0926:3333.00DC: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1328.444010][T17851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.555767][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19327'. [ 1328.579096][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19327'. [ 1328.827392][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1328.882885][T17866] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.19331'. [ 1328.940935][T29958] usb 6-1: USB disconnect, device number 34 [ 1328.986977][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1329.032264][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1329.043326][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1329.070014][ T9] usb 5-1: SerialNumber: syz [ 1329.195570][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.320177][T17880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.328677][T17880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.475102][ T5891] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1329.649119][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.665201][ T5907] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1329.677734][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.705714][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.705786][ T5891] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1329.705814][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.714407][ T5891] usb 1-1: config 0 descriptor?? [ 1329.752663][ T9] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1329.887798][ T5907] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1329.887861][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.891464][ T5907] usb 3-1: config 0 descriptor?? [ 1329.906772][ T5907] cp210x 3-1:0.0: cp210x converter detected [ 1330.125894][T29958] usb 5-1: USB disconnect, device number 33 [ 1330.127992][T29958] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 1330.183475][ T5891] hid_parser_main: 186 callbacks suppressed [ 1330.183502][ T5891] cm6533_jd 0003:0D8C:0022.00DD: unknown main item tag 0x0 [ 1330.183541][ T5891] cm6533_jd 0003:0D8C:0022.00DD: unknown main item tag 0x0 [ 1330.183596][ T5891] cm6533_jd 0003:0D8C:0022.00DD: unknown main item tag 0x0 [ 1330.183629][ T5891] cm6533_jd 0003:0D8C:0022.00DD: unknown main item tag 0x0 [ 1330.183659][ T5891] cm6533_jd 0003:0D8C:0022.00DD: unknown main item tag 0x0 [ 1330.198626][ T43] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1330.200424][ T5891] cm6533_jd 0003:0D8C:0022.00DD: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1330.235568][T30036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.313419][ T5907] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1330.347409][ T43] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1330.347443][ T43] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1330.347479][ T43] usb 2-1: config 150 has no interface number 0 [ 1330.347521][ T43] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1330.350112][ T43] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1330.350161][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.350186][ T43] usb 2-1: Product: syz [ 1330.350205][ T43] usb 2-1: Manufacturer: syz [ 1330.350223][ T43] usb 2-1: SerialNumber: syz [ 1330.447464][T29958] usb 1-1: USB disconnect, device number 19 [ 1330.543427][ T5907] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1330.566569][ T43] xr_serial 2-1:150.204: skipping garbage [ 1330.566624][ T43] xr_serial 2-1:150.204: xr_serial converter detected [ 1330.748040][T29958] usb 3-1: USB disconnect, device number 123 [ 1330.762077][T29958] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1330.784047][T29958] cp210x 3-1:0.0: device disconnected [ 1330.970412][ T5907] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1331.138211][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 1331.148491][ T5907] usb 5-1: config 0 has an invalid interface number: 38 but max is 0 [ 1331.165259][ T5907] usb 5-1: config 0 has no interface number 0 [ 1331.171898][ T5907] usb 5-1: config 0 interface 38 has no altsetting 0 [ 1331.188758][ T5907] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1331.208170][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.220739][ T5907] usb 5-1: Product: syz [ 1331.225243][ T5907] usb 5-1: Manufacturer: syz [ 1331.229879][ T5907] usb 5-1: SerialNumber: syz [ 1331.250549][ T5907] usb 5-1: config 0 descriptor?? [ 1331.262148][ T5907] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1331.278090][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.315109][T29958] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1331.381801][ T43] xr_serial ttyUSB1: Failed to set reg 0x0e: -71 [ 1331.390445][ T43] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1331.415326][ T43] usb 2-1: USB disconnect, device number 29 [ 1331.437828][ T43] xr_serial 2-1:150.204: device disconnected [ 1331.475703][T29958] usb 1-1: Using ep0 maxpacket: 16 [ 1331.496719][T29958] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1331.515405][T29958] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1331.545081][T29958] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.574942][T29958] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1331.589945][T29958] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1331.600293][T29958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.615843][T29958] usb 1-1: Product: syz [ 1331.621883][T29958] usb 1-1: Manufacturer: syz [ 1331.627549][T29958] usb 1-1: SerialNumber: syz [ 1331.757482][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.854479][T29958] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1332.119558][ T5907] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input229 [ 1332.215091][T29958] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1332.315659][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.343011][ T5907] usb 5-1: USB disconnect, device number 34 [ 1332.374095][T17971] vivid-000: disconnect [ 1332.399414][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.420882][T29958] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1332.430331][T29958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.440454][T29958] usb 3-1: Product: syz [ 1332.444678][T29958] usb 3-1: Manufacturer: syz [ 1332.450295][T29958] usb 3-1: SerialNumber: syz [ 1332.458120][T29958] usb 3-1: config 0 descriptor?? [ 1332.479023][ T5891] usb 1-1: USB disconnect, device number 20 [ 1332.491908][ T5891] usblp0: removed [ 1332.715325][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.871573][T29958] usb 3-1: Firmware: major: 213, minor: 124, hardware type: UNKNOWN (48) [ 1333.082900][T29958] usb 3-1: Read permanent extended address 78:d9:cf:80:c4:56:f3:e4 from device [ 1333.105666][T29958] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1333.115707][T29958] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1333.137452][T17966] vivid-000: reconnect [ 1333.312907][T29958] usb 3-1: USB disconnect, device number 124 [ 1333.910425][T18014] netlink: 'syz.0.19383': attribute type 1 has an invalid length. [ 1333.962177][T18014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1334.257389][T29958] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1334.402831][ T43] net_ratelimit: 1 callbacks suppressed [ 1334.402853][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.445596][T29958] usb 5-1: Using ep0 maxpacket: 8 [ 1334.463236][T29958] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1334.480331][T29958] usb 5-1: config 0 has no interface number 0 [ 1334.502753][T29958] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1334.537310][T29958] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1334.547375][T29958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.597795][T29958] usb 5-1: config 0 descriptor?? [ 1334.625832][T29958] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1334.836502][T29958] usb 5-1: USB disconnect, device number 35 [ 1335.405458][ T5907] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1335.451730][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.519631][T18053] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19398'. [ 1335.565958][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 1335.577769][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.593890][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1335.608454][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.658382][ T5907] usb 3-1: config 0 descriptor?? [ 1335.679721][ T5907] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1335.755579][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.481021][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.665027][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1336.837131][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.847763][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1336.861609][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1336.871382][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.883176][ T5907] gspca_vc032x: reg_w err -71 [ 1336.890420][ T5907] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1336.899777][ T9] usb 5-1: config 0 descriptor?? [ 1336.913732][ T5907] usb 3-1: USB disconnect, device number 125 [ 1336.965086][ T5891] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1337.115172][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 1337.129714][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.142326][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.152681][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1337.161594][T18099] kvm: emulating exchange as write [ 1337.162885][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.193924][ T5891] usb 6-1: config 0 descriptor?? [ 1337.202144][ T5891] hub 6-1:0.0: USB hub found [ 1337.323687][ T9] kovaplus 0003:1E7D:2D50.00DE: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 1337.403833][ T5891] hub 6-1:0.0: 1 port detected [ 1337.521274][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.029054][ T5891] hub 6-1:0.0: activate --> -90 [ 1338.126452][ T9] kovaplus 0003:1E7D:2D50.00DE: couldn't init struct kovaplus_device [ 1338.145156][ T9] kovaplus 0003:1E7D:2D50.00DE: couldn't install mouse [ 1338.159411][ T9] kovaplus 0003:1E7D:2D50.00DE: probe with driver kovaplus failed with error -71 [ 1338.164801][T18120] ip6gre2: entered promiscuous mode [ 1338.173985][T18120] ip6gre2: entered allmulticast mode [ 1338.186048][ T9] usb 5-1: USB disconnect, device number 36 [ 1338.305024][ T5904] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1338.430833][ T5891] usb 6-1-port1: config error [ 1338.431116][T29958] usb 6-1: USB disconnect, device number 35 [ 1338.456934][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.468305][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.479228][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1338.494233][ T5904] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.503491][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.514216][ T5904] usb 1-1: config 0 descriptor?? [ 1338.560492][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.796584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.813797][T18132] netlink: 'syz.4.19428': attribute type 1 has an invalid length. [ 1338.856873][T18132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1338.880127][T18135] bond6: (slave geneve2): making interface the new active one [ 1338.891327][T18135] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1338.900178][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.911425][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.926524][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.945401][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.971623][ T5904] plantronics 0003:047F:FFFF.00DF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1339.435389][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.616490][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.641406][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.087298][ T5904] usb 1-1: USB disconnect, device number 21 [ 1341.372332][T18219] trusted_key: syz.4.19465 sent an empty control message without MSG_MORE. [ 1341.686863][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.695283][T29958] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1341.835445][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.865603][T29958] usb 3-1: Using ep0 maxpacket: 32 [ 1341.875969][T29958] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1341.885258][T29958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.893288][T29958] usb 3-1: Product: syz [ 1341.898016][T29958] usb 3-1: Manufacturer: syz [ 1341.902869][T29958] usb 3-1: SerialNumber: syz [ 1341.924191][T29958] usb 3-1: config 0 descriptor?? [ 1341.939945][T29958] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1342.172321][ T30] audit: type=1326 audit(1761267827.308:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18233 comm="syz.1.19471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efee478efc9 code=0x0 [ 1342.555208][T18255] input: syz0 as /devices/virtual/input/input231 [ 1342.665463][ T5904] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1342.723743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.758606][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.845304][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 1342.872077][T18263] input: syz0 as /devices/virtual/input/input232 [ 1342.876141][ T5904] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1342.903743][ T5904] usb 6-1: config 0 has no interface number 0 [ 1342.923224][ T5904] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1342.943844][ T5904] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1342.964637][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.984235][ T5904] usb 6-1: Product: syz [ 1342.992017][ T5904] usb 6-1: Manufacturer: syz [ 1343.001345][ T5904] usb 6-1: SerialNumber: syz [ 1343.017741][T18269] netlink: 35 bytes leftover after parsing attributes in process `syz.1.19483'. [ 1343.019257][ T5904] usb 6-1: config 0 descriptor?? [ 1343.035286][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19483'. [ 1343.157182][T29958] gspca_topro: reg_w err -71 [ 1343.183461][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19485'. [ 1343.193739][T18273] netlink: 'syz.4.19485': attribute type 19 has an invalid length. [ 1343.202299][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19485'. [ 1343.207134][T29958] gspca_topro: Sensor soi763a [ 1343.213449][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19485'. [ 1343.223509][T29958] usb 3-1: USB disconnect, device number 126 [ 1343.232379][T18273] netlink: 'syz.4.19485': attribute type 19 has an invalid length. [ 1343.240798][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19485'. [ 1343.850682][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.287150][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1344.306128][ T5904] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1344.316352][ T5904] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1344.323709][ T5904] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1344.333720][ T5904] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1344.350711][ T5904] usb 6-1: USB disconnect, device number 36 [ 1344.467585][ T9] usb 5-1: config 0 has no interfaces? [ 1344.478560][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1344.489255][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.498202][ T9] usb 5-1: Product: syz [ 1344.502632][ T9] usb 5-1: Manufacturer: syz [ 1344.508943][ T9] usb 5-1: SerialNumber: syz [ 1344.524798][ T9] usb 5-1: config 0 descriptor?? [ 1344.669020][T18315] input: syz0 as /devices/virtual/input/input233 [ 1344.736618][T18294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.752557][T18294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.763649][ T9] usb 5-1: USB disconnect, device number 37 [ 1344.815398][T29958] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1344.875736][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.884329][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.908609][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.919611][T18320] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1344.974987][T29958] usb 2-1: Using ep0 maxpacket: 8 [ 1344.983331][T29958] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1344.993272][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031a6a400: rx timeout, send abort [ 1344.996048][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028e19000: rx timeout, send abort [ 1345.013624][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031a6a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1345.015879][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028e19000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1345.069813][T29958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1345.132752][T29958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1345.154913][T29958] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1345.188819][T29958] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1345.215600][T29958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.470159][T29958] usb 2-1: GET_CAPABILITIES returned 0 [ 1345.482363][T29958] usbtmc 2-1:16.0: can't read capabilities [ 1345.695357][T29958] usb 2-1: USB disconnect, device number 30 [ 1345.919600][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.035041][ T30] audit: type=1326 audit(1761267831.168:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18356 comm="syz.4.19521" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9ae18efc9 code=0x0 [ 1346.067538][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.478633][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.967782][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.929640][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.966628][T18422] KVM: debugfs: duplicate directory 18422-4 [ 1347.999955][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.017147][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.034964][ T9] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1348.196143][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1348.218679][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1348.247300][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.292053][ T9] usb 6-1: config 0 descriptor?? [ 1348.340586][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1348.551093][T18437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.712055][T29958] hid-generic 0000:0000:0000.00E0: unknown main item tag 0x0 [ 1348.733672][T29958] hid-generic 0000:0000:0000.00E0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1348.925824][ T5904] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1349.085279][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1349.093744][ T5904] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1349.102614][ T5904] usb 3-1: config 0 has no interface number 0 [ 1349.109552][ T5904] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.121908][ T5904] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.132858][ T5904] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1349.143681][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.175502][ T5904] usb 3-1: config 0 descriptor?? [ 1349.482238][T18455] hsr0: entered promiscuous mode [ 1349.492497][T18455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19560'. [ 1349.505097][T18455] hsr_slave_0: left promiscuous mode [ 1349.511574][T18455] hsr_slave_1: left promiscuous mode [ 1349.534717][T18455] hsr0 (unregistering): left promiscuous mode [ 1349.544990][ T5907] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1349.568611][ T9] gspca_sonixj: reg_w1 err -71 [ 1349.586248][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1349.617657][ T9] usb 6-1: USB disconnect, device number 37 [ 1349.775277][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 1349.782953][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.810172][ T5907] usb 2-1: config 0 has no interfaces? [ 1349.835304][ T5904] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.00E1/input/input234 [ 1349.858602][ T5907] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1349.871703][ T5907] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1349.895158][ T5907] usb 2-1: Product: syz [ 1349.900940][ T5907] usb 2-1: Manufacturer: syz [ 1349.911058][ T5907] usb 2-1: SerialNumber: syz [ 1349.926372][ T5907] usb 2-1: config 0 descriptor?? [ 1349.952621][ T5904] uclogic 0003:28BD:0094.00E1: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 1350.039239][ T5904] usb 3-1: USB disconnect, device number 127 [ 1350.086662][ T43] net_ratelimit: 1 callbacks suppressed [ 1350.086682][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.233661][T18462] fido_id[18462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1350.258772][ T9] usb 2-1: USB disconnect, device number 31 [ 1350.319178][ T2410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.976797][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1351.115564][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.144943][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1351.162404][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1351.174925][ T9] usb 1-1: config 0 has no interface number 0 [ 1351.181463][ T9] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1351.193834][ T9] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1351.207982][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 1351.217747][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.226153][ T9] usb 1-1: Product: syz [ 1351.235069][T29958] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1351.240655][ T9] usb 1-1: Manufacturer: syz [ 1351.254906][ T9] usb 1-1: SerialNumber: syz [ 1351.262557][ T9] usb 1-1: config 0 descriptor?? [ 1351.273301][T18502] netlink: 'syz.4.19579': attribute type 22 has an invalid length. [ 1351.283454][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19579'. [ 1351.302118][T18502] netlink: 'syz.4.19579': attribute type 22 has an invalid length. [ 1351.302271][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.311261][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19579'. [ 1351.320012][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.338761][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.348300][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.385041][T29958] usb 3-1: Using ep0 maxpacket: 32 [ 1351.392161][T29958] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1351.401285][T29958] usb 3-1: config 0 has no interface number 0 [ 1351.408376][T29958] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1351.422582][T29958] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1351.432699][T29958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.441792][T29958] usb 3-1: Product: syz [ 1351.446549][T29958] usb 3-1: Manufacturer: syz [ 1351.451294][T29958] usb 3-1: SerialNumber: syz [ 1351.460235][T29958] usb 3-1: config 0 descriptor?? [ 1351.471893][T29958] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1351.482859][T29958] em28xx 3-1:0.132: Video interface 132 found: [ 1351.498564][ T9] iowarrior 1-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 1351.760440][ T43] usb 1-1: USB disconnect, device number 22 [ 1351.766911][ C1] iowarrior 1-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19 [ 1351.877011][T29958] em28xx 3-1:0.132: chip ID is em2884 [ 1352.180380][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.219979][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.328786][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.504634][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.631095][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.696353][T29958] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1352.707790][T29958] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 1352.714402][T29958] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1352.728738][ T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1352.805508][T29958] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1352.824463][T29958] em28xx 3-1:0.132: analog set to bulk mode. [ 1352.839634][ T24] em28xx 3-1:0.132: Registering V4L2 extension [ 1352.873343][T29958] usb 3-1: USB disconnect, device number 2 [ 1352.889482][T29958] em28xx 3-1:0.132: Disconnecting em28xx [ 1352.895405][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1352.910061][ T43] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 1352.947901][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.968765][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.992880][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.043235][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.045138][ T12] bridge_slave_1: left allmulticast mode [ 1353.082663][ T12] bridge_slave_1: left promiscuous mode [ 1353.083712][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.117122][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.140031][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.161765][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.180228][ T2321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1353.187371][ T12] bridge_slave_0: left allmulticast mode [ 1353.195507][T30036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.205789][ T2321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1353.216866][ T12] bridge_slave_0: left promiscuous mode [ 1353.222727][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.230933][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.232010][T15465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.250653][ T2321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1353.265181][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1353.285118][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1353.295587][ T2321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1353.312459][ T43] usb 5-1: SerialNumber: syz [ 1353.317344][ T2321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1353.336427][ T43] usb 5-1: config 0 descriptor?? [ 1353.357774][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.359955][ T43] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input235 [ 1353.410382][ T24] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1353.417781][ T24] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1353.427820][ T24] em28xx 3-1:0.132: No AC97 audio processor [ 1353.473175][ T24] usb 3-1: Decoder not found [ 1353.478546][ T24] em28xx 3-1:0.132: failed to create media graph [ 1353.495498][ T24] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1353.504730][ T24] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1353.516299][T15900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.539260][T29958] em28xx 3-1:0.132: Closing input extension [ 1353.565995][ T5184] bcm5974 5-1:0.0: could not read from device [ 1353.594585][T29958] em28xx 3-1:0.132: Freeing device [ 1353.605707][ T43] usb 5-1: USB disconnect, device number 38 [ 1353.615563][ T5184] bcm5974 5-1:0.0: could not read from device [ 1354.239727][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.504599][ T12] bridge0 (unregistering): left promiscuous mode [ 1354.907894][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.919368][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.930439][ T12] bond0 (unregistering): Released all slaves [ 1355.075851][ T12] bond1 (unregistering): Released all slaves [ 1355.114321][ T5907] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1355.276387][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 1355.278141][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.290789][ T5907] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1355.321586][ T5907] usb 3-1: config 0 has no interface number 0 [ 1355.343819][ T5907] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1355.360534][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.385794][ T5907] usb 3-1: Product: syz [ 1355.390570][ T5907] usb 3-1: Manufacturer: syz [ 1355.410416][ T5907] usb 3-1: SerialNumber: syz [ 1355.432259][ T5907] usb 3-1: config 0 descriptor?? [ 1355.438180][ T2321] Bluetooth: hci0: command tx timeout [ 1355.472418][ T5907] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1355.698082][ T5907] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1355.778288][ T12] veth1_to_team: left promiscuous mode [ 1355.822674][ T12] hsr_slave_0: left promiscuous mode [ 1355.836885][ T12] hsr_slave_1: left promiscuous mode [ 1355.843409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.845556][ T5907] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1355.860773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.879751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.883401][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 1355.895338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.038763][ T12] veth1_macvtap: left promiscuous mode [ 1356.044409][ T12] veth0_macvtap: left promiscuous mode [ 1356.059663][ T12] veth1_vlan: left promiscuous mode [ 1356.069861][ T12] veth0_vlan: left promiscuous mode [ 1356.075770][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.319374][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.762070][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1356.771380][ T9] usb 3-1: USB disconnect, device number 3 [ 1356.802485][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1356.844236][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1356.892129][ T9] quatech2 3-1:0.51: device disconnected [ 1357.358488][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.515519][ T2321] Bluetooth: hci0: command tx timeout [ 1357.906635][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1358.275664][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1358.396548][T17185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.417210][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.116738][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.195535][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1359.207871][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19638'. [ 1359.374537][T18701] kvm: kvm [18700]: vcpu0, guest rIP: 0xeeee8000 Unhandled WRMSR(0x40000006) = 0x0 [ 1359.385395][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1359.409594][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1359.433200][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.437584][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.453816][ T9] usb 1-1: Product: syz [ 1359.462561][ T9] usb 1-1: Manufacturer: syz [ 1359.467489][ T9] usb 1-1: SerialNumber: syz [ 1359.494394][ T9] usb 1-1: config 0 descriptor?? [ 1359.605304][ T2321] Bluetooth: hci0: command tx timeout [ 1359.885586][T18705] syzkaller1: entered promiscuous mode [ 1359.892832][T18705] syzkaller1: entered allmulticast mode [ 1359.902850][T18695] netlink: 'syz.0.19636': attribute type 25 has an invalid length. [ 1359.911926][T18695] netlink: 184 bytes leftover after parsing attributes in process `syz.0.19636'. [ 1359.936006][ T9] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1359.968029][ T9] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1359.975607][ T9] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P ff) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1359.975607][ T9] Please send a copy of this message to and [ 1360.078962][ T9] usb 1-1: USB disconnect, device number 23 [ 1360.362607][T18540] chnl_net:caif_netlink_parms(): no params data found [ 1360.477750][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.555264][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.568168][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.775385][ T43] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1360.945661][T18540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.953442][T18540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.986004][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.005265][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1361.015027][T18540] bridge_slave_0: entered allmulticast mode [ 1361.034794][T18540] bridge_slave_0: entered promiscuous mode [ 1361.043818][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1361.061950][T18540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.075315][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1361.087184][T18540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.094447][ T43] usb 2-1: SerialNumber: syz [ 1361.110300][T18540] bridge_slave_1: entered allmulticast mode [ 1361.157585][T18540] bridge_slave_1: entered promiscuous mode [ 1361.197511][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.317371][T18540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.338692][ T43] usb 2-1: 0:2 : does not exist [ 1361.350303][T18540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.445253][ T43] usb 2-1: USB disconnect, device number 32 [ 1361.521673][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.524140][T22179] udevd[22179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1361.608715][T18540] team0: Port device team_slave_0 added [ 1361.641644][T18540] team0: Port device team_slave_1 added [ 1361.679113][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19655'. [ 1361.692329][ T2321] Bluetooth: hci0: command tx timeout [ 1361.729255][T18540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1361.736481][T18540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.762957][T18540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.776655][T18540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.783647][T18540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1361.819696][T18540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.907413][T18540] hsr_slave_0: entered promiscuous mode [ 1361.929270][T18540] hsr_slave_1: entered promiscuous mode [ 1361.949490][T18540] debugfs: 'hsr0' already exists in 'hsr' [ 1361.962336][T18540] Cannot create hsr debugfs directory [ 1362.510849][T18540] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1362.539281][T18540] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1362.556425][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.597463][T18540] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1362.677258][T18540] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1362.944512][T18540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.033148][T18540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.076204][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.083400][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.117488][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.124697][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.303741][T18540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1363.457756][T18540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.597505][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.620929][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.660195][T18540] veth0_vlan: entered promiscuous mode [ 1363.729454][T18540] veth1_vlan: entered promiscuous mode [ 1363.873587][T18540] veth0_macvtap: entered promiscuous mode [ 1363.928478][T18540] veth1_macvtap: entered promiscuous mode [ 1364.036358][T18540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.060462][T18540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.121563][T17185] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.168220][T17185] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.235851][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.307027][T17185] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.345697][T17185] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.635670][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.711606][T17185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.744902][T17185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.905883][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.948942][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.678934][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.765048][ T5904] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1365.935115][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 1365.947517][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 185, changing to 11 [ 1365.967433][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49152, setting to 1024 [ 1365.999549][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1366.033645][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.076870][ T5904] usb 1-1: config 0 descriptor?? [ 1366.110794][ T5904] hub 1-1:0.0: USB hub found [ 1366.172889][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19686'. [ 1366.289875][ T5904] hub 1-1:0.0: 1 port detected [ 1366.425154][ T5891] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1366.601007][ T5891] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1366.626867][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1366.658458][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1366.682622][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1366.714481][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1366.716838][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.728608][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.769092][ T5891] usb 2-1: config 0 descriptor?? [ 1366.781325][T18866] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1366.959928][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.969220][T17185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.979744][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.156253][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1367.168265][ T5904] usb 1-1: USB disconnect, device number 24 [ 1367.209484][ T5891] plantronics 0003:047F:FFFF.00E2: reserved main item tag 0xd [ 1367.246134][ T5891] plantronics 0003:047F:FFFF.00E2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1367.488366][ T5904] usb 2-1: USB disconnect, device number 33 [ 1367.595718][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.763614][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.950226][T18902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.795847][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.814709][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.067674][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1369.224967][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1369.246454][ T5904] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1369.271924][ T5904] usb 3-1: config 0 has no interface number 0 [ 1369.289520][ T5904] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1369.302829][ T5904] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1369.312535][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.355762][ T5904] usb 3-1: Product: syz [ 1369.359990][ T5904] usb 3-1: Manufacturer: syz [ 1369.364611][ T5904] usb 3-1: SerialNumber: syz [ 1369.412094][ T5904] usb 3-1: config 0 descriptor?? [ 1369.458224][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1369.625903][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1369.655403][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.685144][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1369.705206][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.729463][ T9] usb 2-1: config 0 descriptor?? [ 1369.768930][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1369.836550][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.998973][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.661043][ T5904] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 1370.682607][ T5904] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1370.724026][ T5904] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1370.764974][ T5904] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1370.843564][ T5904] usb 3-1: USB disconnect, device number 4 [ 1370.875633][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.962062][ T9] gspca_vc032x: reg_w err -71 [ 1370.983248][ T9] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1371.020411][ T9] usb 2-1: USB disconnect, device number 34 [ 1371.729679][T18996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.818616][ T5907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1371.916136][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.988271][T19008] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1372.005177][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 1372.012842][ T5907] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1372.022426][ T5907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1372.040923][T19009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19744'. [ 1372.060637][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1372.087766][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1372.098097][ T5907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1372.111384][ T5907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1372.152038][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.332516][T19016] kvm: MWAIT instruction emulated as NOP! [ 1372.403860][ T5907] usb 3-1: usb_control_msg returned -32 [ 1372.410529][ T5907] usbtmc 3-1:16.0: can't read capabilities [ 1372.718256][ T2411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.956345][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.121521][T19032] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1373.339041][ T5907] usb 3-1: USB disconnect, device number 5 [ 1373.996236][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.081397][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.636767][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.645155][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.014968][T29958] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1375.131021][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19769'. [ 1375.142567][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.205687][T29958] usb 2-1: Using ep0 maxpacket: 8 [ 1375.229465][T29958] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1375.265341][T29958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1375.304895][T29958] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1375.345371][T29958] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.427697][T29958] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1375.465330][T29958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.701511][T29958] usb 2-1: GET_CAPABILITIES returned 0 [ 1375.711310][T29958] usbtmc 2-1:16.0: can't read capabilities [ 1375.772638][T19099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1375.813741][ T5904] IPVS: starting estimator thread 0... [ 1375.904765][T19075] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1375.922131][T29958] usb 2-1: USB disconnect, device number 35 [ 1375.945149][T19102] IPVS: using max 28 ests per chain, 67200 per kthread [ 1376.169515][ T43] net_ratelimit: 1 callbacks suppressed [ 1376.169535][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.245077][ T5904] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1376.415127][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 1376.424664][ T5904] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1376.448005][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.475742][ T5904] usb 1-1: Product: syz [ 1376.486225][ T5904] usb 1-1: Manufacturer: syz [ 1376.496545][ T5904] usb 1-1: SerialNumber: syz [ 1376.508070][ T5904] usb 1-1: config 0 descriptor?? [ 1376.590704][T19134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19785'. [ 1376.602749][T19134] bridge_slave_1: left allmulticast mode [ 1376.609720][T19134] bridge_slave_1: left promiscuous mode [ 1376.616256][T19134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.627329][T19134] bridge_slave_0: left allmulticast mode [ 1376.633030][T19134] bridge_slave_0: left promiscuous mode [ 1376.640523][T19134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.729306][ T5904] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1377.275605][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.936538][ T5904] usb write operation failed. (-71) [ 1377.946846][ T5904] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1377.972451][ T5904] dvbdev: DVB: registering new adapter (Terratec H7) [ 1378.013808][ T5904] usb 1-1: media controller created [ 1378.033767][ T5904] usb read operation failed. (-71) [ 1378.045324][T15900] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1378.056084][ T5904] usb write operation failed. (-71) [ 1378.074025][ T5904] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1378.137494][ T5904] usb 1-1: USB disconnect, device number 25 [ 1378.241514][T15900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.325930][T15900] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1378.335937][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.353692][T19187] netlink: 176 bytes leftover after parsing attributes in process `syz.6.19802'. [ 1378.364972][T15900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.373018][T15900] usb 3-1: Product: syz [ 1378.415520][T15900] usb 3-1: Manufacturer: syz [ 1378.431696][T15900] usb 3-1: SerialNumber: syz [ 1378.477189][ T2410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.869732][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19810'. [ 1379.363902][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.410897][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.461247][T19233] dummy0: Caught tx_queue_len zero misconfig [ 1379.487961][T15900] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1379.501222][T15900] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1379.519074][T15900] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1379.724689][T15900] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1379.779887][T15900] usb 3-1: USB disconnect, device number 6 [ 1379.788615][T15900] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1379.985494][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1380.147199][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1380.175016][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.197599][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1380.235203][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.269330][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1380.289175][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1380.318031][ T24] usb 2-1: Product: syz [ 1380.328283][ T24] usb 2-1: Manufacturer: syz [ 1380.380097][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1380.394392][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 1380.458560][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1380.475249][T15900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.495066][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 1380.591931][ C1] cdc_wdm 2-1:1.0: unknown notification 255 received: index 255 len 0 [ 1380.621396][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19826'. [ 1380.663253][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19826'. [ 1380.817410][ T24] usb 2-1: USB disconnect, device number 36 [ 1381.169841][T19284] kvm: user requested TSC rate below hardware speed [ 1381.446841][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19838'. [ 1381.460765][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19838'. [ 1381.515329][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.523841][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.679760][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.967816][ T30] audit: type=1326 audit(1761267867.108:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19319 comm="syz.4.19850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9ae18efc9 code=0x0 [ 1382.099830][T19332] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1382.392263][T19343] vlan2: entered allmulticast mode [ 1382.405119][T19343] dummy0: entered allmulticast mode [ 1382.492558][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19857'. [ 1382.563565][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.883333][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19863'. [ 1382.939628][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19863'. [ 1383.598678][T15900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.237815][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.445139][ T5904] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1384.453292][ T30] audit: type=1326 audit(1761267869.588:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19411 comm="syz.6.19886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbee7d8efc9 code=0x0 [ 1384.477236][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.589613][T19417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1384.639964][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1384.651420][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1384.669065][ T5904] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1384.678906][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.690534][ T5904] usb 1-1: Product: syz [ 1384.699587][ T5904] usb 1-1: Manufacturer: syz [ 1384.708522][ T5904] usb 1-1: SerialNumber: syz [ 1384.722069][ T5904] usb 1-1: config 0 descriptor?? [ 1384.738312][T19404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1384.748034][T19404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1384.934942][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1384.968995][T19404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1384.985580][T19404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1385.096004][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1385.103764][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.119008][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1385.133774][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.146519][ T24] usb 3-1: config 0 descriptor?? [ 1385.414608][ T5904] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1385.516063][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.590722][ T30] audit: type=1326 audit(1761267870.728:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19446 comm="syz.6.19902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee7d8efc9 code=0x7fc00000 [ 1385.613284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1385.954988][ T5907] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1386.033180][ T5904] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1386.054160][ T5904] usb 1-1: USB disconnect, device number 26 [ 1386.114994][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 1386.123749][ T5907] usb 2-1: config 0 has an invalid interface number: 249 but max is 0 [ 1386.132473][ T5907] usb 2-1: config 0 has no interface number 0 [ 1386.139229][ T5907] usb 2-1: config 0 interface 249 has no altsetting 0 [ 1386.163868][ T5907] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1 [ 1386.185201][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.193516][ T5907] usb 2-1: Product: syz [ 1386.198965][ T5907] usb 2-1: Manufacturer: syz [ 1386.203842][ T30] audit: type=1326 audit(1761267871.338:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19446 comm="syz.6.19902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbee7d8efc9 code=0x7fc00000 [ 1386.226334][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.232586][ T5907] usb 2-1: SerialNumber: syz [ 1386.248700][ T5907] usb 2-1: config 0 descriptor?? [ 1386.480509][T29958] usb 2-1: USB disconnect, device number 37 [ 1386.557452][T15900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.634129][T19484] loop6: detected capacity change from 0 to 7 [ 1386.643136][T19484] Dev loop6: unable to read RDB block 7 [ 1386.652684][T19484] loop6: AHDI p1 p2 p3 [ 1386.657429][T19484] loop6: partition table partially beyond EOD, truncated [ 1386.666194][T19484] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1386.673113][T19484] loop6: p2 size 108 extends beyond EOD, truncated [ 1386.773704][T22179] udevd[22179]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1386.985419][ T5907] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1387.144947][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 1387.153965][ T5907] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1387.177371][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.198599][ T5907] usb 5-1: config 0 descriptor?? [ 1387.226242][ T5907] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 1387.275945][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.435310][ T5907] usb 5-1: USB disconnect, device number 39 [ 1387.605364][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.037247][T19522] sctp: [Deprecated]: syz.4.19932 (pid 19522) Use of int in max_burst socket option. [ 1388.037247][T19522] Use struct sctp_assoc_value instead [ 1388.635946][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.732241][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.741302][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.828200][T19549] netlink: 'syz.4.19945': attribute type 11 has an invalid length. [ 1389.356328][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.687169][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.705577][ T2409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.248604][T19575] syz_tun: entered promiscuous mode [ 1390.256187][ T24] usbhid 3-1:0.0: can't add hid device: -32 [ 1390.262253][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1390.280989][T19575] syz_tun: left promiscuous mode [ 1390.715499][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.921839][ T30] audit: type=1326 audit(1761267876.058:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19583 comm="syz.1.19958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efee478efc9 code=0x0 [ 1391.756964][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.886258][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19964'. [ 1392.186008][T19609] netlink: 'syz.4.19968': attribute type 1 has an invalid length. [ 1392.282710][T19609] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1392.292534][T19609] bond7: (slave bond8): making interface the new active one [ 1392.302380][T19609] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1392.398986][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.438564][T19615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1392.797016][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.863134][T19635] binder: 19633:19635 ioctl c0306201 2000000001c0 returned -14 [ 1393.474029][T19657] loop6: detected capacity change from 0 to 7 [ 1393.483223][T18540] Dev loop6: unable to read RDB block 7 [ 1393.491096][T18540] loop6: unable to read partition table [ 1393.502638][T18540] loop6: partition table beyond EOD, truncated [ 1393.513245][T19657] Dev loop6: unable to read RDB block 7 [ 1393.519773][T19657] loop6: unable to read partition table [ 1393.545386][T19657] loop6: partition table beyond EOD, truncated [ 1393.555628][T19657] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1393.836544][T19670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1393.839018][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.477431][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.875355][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.902770][ T2410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.656652][T19718] loop7: detected capacity change from 0 to 16384 [ 1395.756852][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.935094][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.044427][T19722] loop7: detected capacity change from 16384 to 16297 [ 1396.955647][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.014982][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1397.175210][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1397.187442][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1397.205012][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1397.217165][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1397.231415][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1397.248086][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1397.257737][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.512345][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 1397.518407][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1397.528647][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.721852][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.731415][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.740549][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.749663][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.761799][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.770925][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.780020][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.791592][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.800757][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.809901][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.821713][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.830881][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.840018][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.849144][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.880886][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.890057][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1397.909560][ T9] usb 1-1: USB disconnect, device number 27 [ 1398.035459][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.979526][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20043'. [ 1398.993466][T19791] delete_channel: no stack [ 1399.131434][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.305007][ T5907] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1399.460747][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.478332][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1399.499473][ T5907] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1399.519033][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.542304][ T5907] usb 5-1: config 0 descriptor?? [ 1399.569877][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1399.589313][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 1399.607287][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1399.623672][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1399.631512][ T5907] usb 5-1: media controller created [ 1399.638981][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.641076][T19820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20056'. [ 1399.663272][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 1399.676306][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1399.697293][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input238 [ 1399.730795][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 1399.748489][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1399.852111][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.905221][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1399.921522][ T5907] dvb-usb: error while querying for an remote control event. [ 1400.122325][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1400.135441][ T5907] dvb-usb: error while querying for an remote control event. [ 1400.161314][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.187720][ T2410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.207199][T19825] veth1_vlan (unregistering): left allmulticast mode [ 1400.235504][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.317506][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1400.323647][ T5904] dvb-usb: error while querying for an remote control event. [ 1400.485181][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1400.491403][ T5904] dvb-usb: error while querying for an remote control event. [ 1400.508402][ T5907] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1400.675246][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1400.682379][ T5904] dvb-usb: error while querying for an remote control event. [ 1400.698837][ T5907] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1400.718164][ T5907] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1400.743557][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1400.753241][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1400.765666][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1400.783170][ T5907] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1400.804226][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1400.823477][ T5907] usb 2-1: Product: syz [ 1400.833367][ T5907] usb 2-1: Manufacturer: syz [ 1400.845246][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 1400.855642][ T5907] cdc_wdm 2-1:1.0: skipping garbage [ 1400.860918][ T5907] cdc_wdm 2-1:1.0: skipping garbage [ 1400.874993][ T5904] dvb-usb: error while querying for an remote control event. [ 1400.893155][ T5907] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1400.904917][ T5907] cdc_wdm 2-1:1.0: Unknown control protocol [ 1401.007896][ T5904] usb 5-1: USB disconnect, device number 40 [ 1401.092831][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1401.206829][T29958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.512762][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20070'. [ 1401.580043][ T154] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.600532][ T154] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.629808][T19861] geneve3: entered promiscuous mode [ 1401.637387][T19861] geneve3: entered allmulticast mode [ 1401.658387][ T154] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.672569][ T154] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.680824][ T43] usb 2-1: USB disconnect, device number 38 [ 1401.691618][ T154] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1401.701129][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.963458][T19872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1402.039347][T19876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.048164][T19876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.157092][T19879] [ 1402.159485][T19879] ===================================================== [ 1402.166470][T19879] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1402.173951][T19879] syzkaller #0 Not tainted [ 1402.178366][T19879] ----------------------------------------------------- [ 1402.185305][T19879] syz.6.20079/19879 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1402.193129][T19879] ffff888024213be8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1402.201862][T19879] [ 1402.201862][T19879] and this task is already holding: [ 1402.209234][T19879] ffff88802684a028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1402.219015][T19879] which would create a new lock dependency: [ 1402.224906][T19879] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1402.233023][T19879] [ 1402.233023][T19879] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1402.242483][T19879] (&client->buffer_lock){..-.}-{3:3} [ 1402.242515][T19879] [ 1402.242515][T19879] ... which became SOFTIRQ-irq-safe at: [ 1402.255591][T19879] lock_acquire+0x120/0x360 [ 1402.260206][T19879] _raw_spin_lock+0x2e/0x40 [ 1402.264810][T19879] evdev_pass_values+0xb9/0xbd0 [ 1402.269763][T19879] evdev_events+0x1e6/0x340 [ 1402.274366][T19879] input_pass_values+0x288/0x890 [ 1402.279399][T19879] input_event_dispose+0x3e5/0x6b0 [ 1402.284641][T19879] input_event+0x89/0xe0 [ 1402.288993][T19879] hidinput_hid_event+0x145e/0x1dd0 [ 1402.294292][T19879] hid_process_event+0x4be/0x620 [ 1402.299337][T19879] hid_report_raw_event+0xe91/0x16d0 [ 1402.304778][T19879] hid_input_report+0x43e/0x520 [ 1402.309749][T19879] hid_irq_in+0x47e/0x6d0 [ 1402.314196][T19879] __usb_hcd_giveback_urb+0x376/0x540 [ 1402.319665][T19879] dummy_timer+0x85f/0x44c0 [ 1402.324276][T19879] __hrtimer_run_queues+0x52c/0xc60 [ 1402.329571][T19879] hrtimer_run_softirq+0x187/0x2b0 [ 1402.334782][T19879] handle_softirqs+0x286/0x870 [ 1402.339646][T19879] __irq_exit_rcu+0xca/0x1f0 [ 1402.344328][T19879] irq_exit_rcu+0x9/0x30 [ 1402.348668][T19879] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1402.354401][T19879] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1402.360737][T19879] raw_ioctl+0x2272/0x3c90 [ 1402.365262][T19879] __se_sys_ioctl+0xfc/0x170 [ 1402.369989][T19879] do_syscall_64+0xfa/0xfa0 [ 1402.374595][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.380590][T19879] [ 1402.380590][T19879] to a SOFTIRQ-irq-unsafe lock: [ 1402.387617][T19879] (tasklist_lock){.+.+}-{3:3} [ 1402.387648][T19879] [ 1402.387648][T19879] ... which became SOFTIRQ-irq-unsafe at: [ 1402.400391][T19879] ... [ 1402.400401][T19879] lock_acquire+0x120/0x360 [ 1402.407589][T19879] _raw_read_lock+0x36/0x50 [ 1402.412235][T19879] __do_wait+0xde/0x740 [ 1402.416537][T19879] do_wait+0x1f8/0x510 [ 1402.420709][T19879] kernel_wait+0xab/0x170 [ 1402.425141][T19879] call_usermodehelper_exec_work+0xbe/0x230 [ 1402.431131][T19879] process_scheduled_works+0xae1/0x17b0 [ 1402.436773][T19879] worker_thread+0x8a0/0xda0 [ 1402.441458][T19879] kthread+0x711/0x8a0 [ 1402.445627][T19879] ret_from_fork+0x4bc/0x870 [ 1402.450310][T19879] ret_from_fork_asm+0x1a/0x30 [ 1402.455176][T19879] [ 1402.455176][T19879] other info that might help us debug this: [ 1402.455176][T19879] [ 1402.465414][T19879] Chain exists of: [ 1402.465414][T19879] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1402.465414][T19879] [ 1402.478560][T19879] Possible interrupt unsafe locking scenario: [ 1402.478560][T19879] [ 1402.486891][T19879] CPU0 CPU1 [ 1402.492291][T19879] ---- ---- [ 1402.497658][T19879] lock(tasklist_lock); [ 1402.501910][T19879] local_irq_disable(); [ 1402.508677][T19879] lock(&client->buffer_lock); [ 1402.516058][T19879] lock(&new->fa_lock); [ 1402.522829][T19879] [ 1402.526299][T19879] lock(&client->buffer_lock); [ 1402.531337][T19879] [ 1402.531337][T19879] *** DEADLOCK *** [ 1402.531337][T19879] [ 1402.539499][T19879] 7 locks held by syz.6.20079/19879: [ 1402.544790][T19879] #0: ffff88823bee2118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1402.553959][T19879] #1: ffff88801e3c5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1402.564093][T19879] #2: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1402.573791][T19879] #3: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1402.583386][T19879] #4: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1402.592567][T19879] #5: ffff88802684a028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1402.602812][T19879] #6: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1402.611909][T19879] [ 1402.611909][T19879] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1402.622324][T19879] -> (&client->buffer_lock){..-.}-{3:3} { [ 1402.628077][T19879] IN-SOFTIRQ-W at: [ 1402.632066][T19879] lock_acquire+0x120/0x360 [ 1402.638232][T19879] _raw_spin_lock+0x2e/0x40 [ 1402.644397][T19879] evdev_pass_values+0xb9/0xbd0 [ 1402.650912][T19879] evdev_events+0x1e6/0x340 [ 1402.657078][T19879] input_pass_values+0x288/0x890 [ 1402.663679][T19879] input_event_dispose+0x3e5/0x6b0 [ 1402.670464][T19879] input_event+0x89/0xe0 [ 1402.676393][T19879] hidinput_hid_event+0x145e/0x1dd0 [ 1402.683271][T19879] hid_process_event+0x4be/0x620 [ 1402.689896][T19879] hid_report_raw_event+0xe91/0x16d0 [ 1402.696852][T19879] hid_input_report+0x43e/0x520 [ 1402.703370][T19879] hid_irq_in+0x47e/0x6d0 [ 1402.709365][T19879] __usb_hcd_giveback_urb+0x376/0x540 [ 1402.716405][T19879] dummy_timer+0x85f/0x44c0 [ 1402.722573][T19879] __hrtimer_run_queues+0x52c/0xc60 [ 1402.729444][T19879] hrtimer_run_softirq+0x187/0x2b0 [ 1402.736215][T19879] handle_softirqs+0x286/0x870 [ 1402.742671][T19879] __irq_exit_rcu+0xca/0x1f0 [ 1402.748920][T19879] irq_exit_rcu+0x9/0x30 [ 1402.754823][T19879] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1402.762134][T19879] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1402.769772][T19879] raw_ioctl+0x2272/0x3c90 [ 1402.775895][T19879] __se_sys_ioctl+0xfc/0x170 [ 1402.782149][T19879] do_syscall_64+0xfa/0xfa0 [ 1402.788318][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.795877][T19879] INITIAL USE at: [ 1402.799779][T19879] lock_acquire+0x120/0x360 [ 1402.805853][T19879] _raw_spin_lock+0x2e/0x40 [ 1402.811934][T19879] evdev_handle_get_val+0x70/0x9f0 [ 1402.818624][T19879] evdev_ioctl_handler+0x1202/0x1f10 [ 1402.825489][T19879] __se_sys_ioctl+0xfc/0x170 [ 1402.831660][T19879] do_syscall_64+0xfa/0xfa0 [ 1402.837776][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.845242][T19879] } [ 1402.847748][T19879] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1402.855917][T19879] [ 1402.855917][T19879] the dependencies between the lock to be acquired [ 1402.855929][T19879] and SOFTIRQ-irq-unsafe lock: [ 1402.869461][T19879] -> (tasklist_lock){.+.+}-{3:3} { [ 1402.874798][T19879] HARDIRQ-ON-R at: [ 1402.879002][T19879] lock_acquire+0x120/0x360 [ 1402.885510][T19879] _raw_read_lock+0x36/0x50 [ 1402.892036][T19879] __do_wait+0xde/0x740 [ 1402.898230][T19879] do_wait+0x1f8/0x510 [ 1402.904343][T19879] kernel_wait+0xab/0x170 [ 1402.910690][T19879] call_usermodehelper_exec_work+0xbe/0x230 [ 1402.918600][T19879] process_scheduled_works+0xae1/0x17b0 [ 1402.926160][T19879] worker_thread+0x8a0/0xda0 [ 1402.932770][T19879] kthread+0x711/0x8a0 [ 1402.938855][T19879] ret_from_fork+0x4bc/0x870 [ 1402.945461][T19879] ret_from_fork_asm+0x1a/0x30 [ 1402.952250][T19879] SOFTIRQ-ON-R at: [ 1402.956430][T19879] lock_acquire+0x120/0x360 [ 1402.962950][T19879] _raw_read_lock+0x36/0x50 [ 1402.969475][T19879] __do_wait+0xde/0x740 [ 1402.975650][T19879] do_wait+0x1f8/0x510 [ 1402.981729][T19879] kernel_wait+0xab/0x170 [ 1402.988071][T19879] call_usermodehelper_exec_work+0xbe/0x230 [ 1402.995973][T19879] process_scheduled_works+0xae1/0x17b0 [ 1403.003529][T19879] worker_thread+0x8a0/0xda0 [ 1403.010135][T19879] kthread+0x711/0x8a0 [ 1403.016215][T19879] ret_from_fork+0x4bc/0x870 [ 1403.022811][T19879] ret_from_fork_asm+0x1a/0x30 [ 1403.029591][T19879] INITIAL USE at: [ 1403.033702][T19879] lock_acquire+0x120/0x360 [ 1403.040120][T19879] _raw_write_lock_irq+0xa2/0xf0 [ 1403.046983][T19879] copy_process+0x224f/0x3c00 [ 1403.053583][T19879] kernel_clone+0x21e/0x840 [ 1403.060008][T19879] user_mode_thread+0xdd/0x140 [ 1403.066696][T19879] rest_init+0x23/0x300 [ 1403.072768][T19879] start_kernel+0x3ae/0x410 [ 1403.079211][T19879] x86_64_start_reservations+0x24/0x30 [ 1403.086622][T19879] x86_64_start_kernel+0x143/0x1c0 [ 1403.093669][T19879] common_startup_64+0x13e/0x147 [ 1403.100548][T19879] INITIAL READ USE at: [ 1403.105074][T19879] lock_acquire+0x120/0x360 [ 1403.111945][T19879] _raw_read_lock+0x36/0x50 [ 1403.118806][T19879] __do_wait+0xde/0x740 [ 1403.125326][T19879] do_wait+0x1f8/0x510 [ 1403.131765][T19879] kernel_wait+0xab/0x170 [ 1403.138456][T19879] call_usermodehelper_exec_work+0xbe/0x230 [ 1403.146703][T19879] process_scheduled_works+0xae1/0x17b0 [ 1403.154598][T19879] worker_thread+0x8a0/0xda0 [ 1403.161550][T19879] kthread+0x711/0x8a0 [ 1403.167986][T19879] ret_from_fork+0x4bc/0x870 [ 1403.174940][T19879] ret_from_fork_asm+0x1a/0x30 [ 1403.182055][T19879] } [ 1403.184728][T19879] ... key at: [] tasklist_lock+0x18/0x40 [ 1403.192632][T19879] ... acquired at: [ 1403.196619][T19879] lock_acquire+0x120/0x360 [ 1403.201306][T19879] _raw_read_lock+0x36/0x50 [ 1403.206010][T19879] send_sigurg+0x12b/0x420 [ 1403.210643][T19879] sk_send_sigurg+0x6c/0x2e0 [ 1403.215447][T19879] queue_oob+0x420/0x4f0 [ 1403.219872][T19879] unix_stream_sendmsg+0xc3f/0xdf0 [ 1403.225187][T19879] __sock_sendmsg+0x21c/0x270 [ 1403.230048][T19879] ____sys_sendmsg+0x52d/0x830 [ 1403.234989][T19879] ___sys_sendmsg+0x21f/0x2a0 [ 1403.239846][T19879] __sys_sendmmsg+0x227/0x430 [ 1403.244705][T19879] __x64_sys_sendmmsg+0xa0/0xc0 [ 1403.249738][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.254425][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.260501][T19879] [ 1403.262827][T19879] -> (&f_owner->lock){....}-{3:3} { [ 1403.268149][T19879] INITIAL USE at: [ 1403.272135][T19879] lock_acquire+0x120/0x360 [ 1403.278385][T19879] _raw_write_lock_irq+0xa2/0xf0 [ 1403.285070][T19879] __f_setown+0x67/0x370 [ 1403.291059][T19879] generic_setlease+0xd60/0x1240 [ 1403.297751][T19879] fcntl_setlease+0x3a2/0x4c0 [ 1403.304182][T19879] do_fcntl+0x6a9/0x1910 [ 1403.310172][T19879] __se_sys_fcntl+0xc8/0x150 [ 1403.316511][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.322764][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.330400][T19879] INITIAL READ USE at: [ 1403.334825][T19879] lock_acquire+0x120/0x360 [ 1403.341506][T19879] _raw_read_lock_irqsave+0xaf/0x100 [ 1403.348976][T19879] send_sigio+0x38/0x370 [ 1403.355398][T19879] dnotify_handle_event+0x169/0x440 [ 1403.362784][T19879] fsnotify+0x1814/0x1a80 [ 1403.369292][T19879] vfs_set_acl+0xa43/0xb00 [ 1403.375895][T19879] filename_setxattr+0x2e0/0x600 [ 1403.383012][T19879] path_setxattrat+0x364/0x3a0 [ 1403.389958][T19879] __x64_sys_setxattr+0xbc/0xe0 [ 1403.396996][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.403688][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.411764][T19879] } [ 1403.414354][T19879] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1403.423298][T19879] ... acquired at: [ 1403.427194][T19879] lock_acquire+0x120/0x360 [ 1403.431962][T19879] _raw_read_lock_irqsave+0xaf/0x100 [ 1403.437461][T19879] send_sigio+0x38/0x370 [ 1403.441899][T19879] kill_fasync+0x24d/0x4d0 [ 1403.446501][T19879] lease_break_callback+0x26/0x30 [ 1403.451726][T19879] __break_lease+0x6a5/0x1620 [ 1403.456588][T19879] do_dentry_open+0x8b7/0x13f0 [ 1403.461538][T19879] vfs_open+0x3b/0x340 [ 1403.465808][T19879] path_openat+0x2ee5/0x3830 [ 1403.470579][T19879] do_filp_open+0x1fa/0x410 [ 1403.475263][T19879] do_sys_openat2+0x121/0x1c0 [ 1403.480159][T19879] __x64_sys_openat+0x138/0x170 [ 1403.485194][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.489902][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.495987][T19879] [ 1403.498323][T19879] -> (&new->fa_lock){....}-{3:3} { [ 1403.503466][T19879] INITIAL USE at: [ 1403.507369][T19879] lock_acquire+0x120/0x360 [ 1403.513443][T19879] _raw_write_lock_irq+0xa2/0xf0 [ 1403.519980][T19879] fasync_remove_entry+0xf1/0x1c0 [ 1403.526582][T19879] lease_modify+0x1ca/0x3c0 [ 1403.532657][T19879] locks_remove_file+0x4bf/0xea0 [ 1403.539169][T19879] __fput+0x3ab/0xa70 [ 1403.544718][T19879] task_work_run+0x1d4/0x260 [ 1403.550898][T19879] exit_to_user_mode_loop+0xe9/0x130 [ 1403.557763][T19879] do_syscall_64+0x2bd/0xfa0 [ 1403.563933][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.571397][T19879] INITIAL READ USE at: [ 1403.575735][T19879] lock_acquire+0x120/0x360 [ 1403.582237][T19879] _raw_read_lock_irqsave+0xaf/0x100 [ 1403.589531][T19879] kill_fasync+0x199/0x4d0 [ 1403.595955][T19879] fuse_dev_do_write+0x200c/0x4710 [ 1403.603072][T19879] fuse_dev_write+0x155/0x1e0 [ 1403.609758][T19879] vfs_write+0x5c9/0xb30 [ 1403.616016][T19879] ksys_write+0x145/0x250 [ 1403.622355][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.628869][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.636765][T19879] } [ 1403.639270][T19879] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1403.647960][T19879] ... acquired at: [ 1403.651762][T19879] lock_acquire+0x120/0x360 [ 1403.656442][T19879] _raw_read_lock_irqsave+0xaf/0x100 [ 1403.661909][T19879] kill_fasync+0x199/0x4d0 [ 1403.666508][T19879] evdev_pass_values+0x627/0xbd0 [ 1403.671627][T19879] evdev_events+0x1e6/0x340 [ 1403.676312][T19879] input_pass_values+0x288/0x890 [ 1403.681430][T19879] input_event_dispose+0x330/0x6b0 [ 1403.686727][T19879] input_inject_event+0x1dd/0x340 [ 1403.691935][T19879] evdev_write+0x2fc/0x480 [ 1403.696619][T19879] vfs_write+0x27e/0xb30 [ 1403.701047][T19879] ksys_write+0x145/0x250 [ 1403.705563][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.710252][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.716330][T19879] [ 1403.718655][T19879] [ 1403.718655][T19879] stack backtrace: [ 1403.724546][T19879] CPU: 0 UID: 0 PID: 19879 Comm: syz.6.20079 Not tainted syzkaller #0 PREEMPT(full) [ 1403.724569][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1403.724583][T19879] Call Trace: [ 1403.724591][T19879] [ 1403.724600][T19879] dump_stack_lvl+0x189/0x250 [ 1403.724630][T19879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1403.724654][T19879] ? __pfx__printk+0x10/0x10 [ 1403.724677][T19879] validate_chain+0x1f05/0x2140 [ 1403.724709][T19879] __lock_acquire+0xab9/0xd20 [ 1403.724728][T19879] ? kill_fasync+0x199/0x4d0 [ 1403.724750][T19879] lock_acquire+0x120/0x360 [ 1403.724766][T19879] ? kill_fasync+0x199/0x4d0 [ 1403.724792][T19879] _raw_read_lock_irqsave+0xaf/0x100 [ 1403.724819][T19879] ? kill_fasync+0x199/0x4d0 [ 1403.724842][T19879] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1403.724864][T19879] ? do_raw_spin_lock+0x121/0x290 [ 1403.724894][T19879] kill_fasync+0x199/0x4d0 [ 1403.724915][T19879] ? kill_fasync+0x53/0x4d0 [ 1403.724938][T19879] evdev_pass_values+0x627/0xbd0 [ 1403.724962][T19879] ? evdev_pass_values+0x5c1/0xbd0 [ 1403.724986][T19879] evdev_events+0x1e6/0x340 [ 1403.725005][T19879] ? evdev_events+0x79/0x340 [ 1403.725026][T19879] ? input_pass_values+0x8d/0x890 [ 1403.725045][T19879] input_pass_values+0x288/0x890 [ 1403.725068][T19879] ? input_handle_event+0x70c/0xf30 [ 1403.725097][T19879] input_event_dispose+0x330/0x6b0 [ 1403.725125][T19879] input_inject_event+0x1dd/0x340 [ 1403.725154][T19879] ? input_inject_event+0xb6/0x340 [ 1403.725182][T19879] evdev_write+0x2fc/0x480 [ 1403.725205][T19879] ? __pfx_evdev_write+0x10/0x10 [ 1403.725228][T19879] ? bpf_lsm_file_permission+0x9/0x20 [ 1403.725249][T19879] ? security_file_permission+0x75/0x290 [ 1403.725272][T19879] ? rw_verify_area+0x255/0x4d0 [ 1403.725303][T19879] ? __lock_acquire+0xab9/0xd20 [ 1403.725320][T19879] ? __pfx_evdev_write+0x10/0x10 [ 1403.725341][T19879] vfs_write+0x27e/0xb30 [ 1403.725371][T19879] ? __pfx_vfs_write+0x10/0x10 [ 1403.725397][T19879] ? __fget_files+0x2a/0x420 [ 1403.725416][T19879] ? __fget_files+0x2a/0x420 [ 1403.725432][T19879] ? __fget_files+0x3a0/0x420 [ 1403.725448][T19879] ? __fget_files+0x2a/0x420 [ 1403.725469][T19879] ksys_write+0x145/0x250 [ 1403.725496][T19879] ? __pfx_ksys_write+0x10/0x10 [ 1403.725523][T19879] ? do_syscall_64+0xbe/0xfa0 [ 1403.725549][T19879] do_syscall_64+0xfa/0xfa0 [ 1403.725574][T19879] ? lockdep_hardirqs_on+0x9c/0x150 [ 1403.725596][T19879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.725614][T19879] ? clear_bhb_loop+0x60/0xb0 [ 1403.725634][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.725652][T19879] RIP: 0033:0x7fbee7d8efc9 [ 1403.725670][T19879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.725686][T19879] RSP: 002b:00007fbee8c00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1403.725706][T19879] RAX: ffffffffffffffda RBX: 00007fbee7fe5fa0 RCX: 00007fbee7d8efc9 [ 1403.725721][T19879] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 1403.725732][T19879] RBP: 00007fbee7e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1403.725744][T19879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.725756][T19879] R13: 00007fbee7fe6038 R14: 00007fbee7fe5fa0 R15: 00007fbee810fa28 [ 1403.725776][T19879] [ 1403.731618][ T2411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.060194][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.365258][ T2411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.995474][ T2411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.835791][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.115728][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.123922][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog