last executing test programs: 12m32.075147139s ago: executing program 32 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0xc008aec1, 0x0) 11m26.90275321s ago: executing program 33 (id=922): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 11m23.776106737s ago: executing program 34 (id=940): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffe4d, 0x2000, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 11m5.759127687s ago: executing program 35 (id=1016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000005ac0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "d7fb65c7"}, @local, @main=@item_4={0x3, 0x0, 0xb, "8a0200a1"}]}}, 0x0}, 0x0) 9m21.597593472s ago: executing program 36 (id=1753): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 8m24.868012293s ago: executing program 5 (id=2166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000600)={"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"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"}) 8m24.591259725s ago: executing program 5 (id=2169): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8m21.902067061s ago: executing program 5 (id=2186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x2, 0xfe, 0xfffff034}, {0x80000006}]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080007000600000014000000450a0fc0006600000b02"], 0xfce) 8m21.533520018s ago: executing program 5 (id=2188): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 8m21.293301537s ago: executing program 5 (id=2189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001010040"]) 8m20.861045294s ago: executing program 5 (id=2193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8m20.295342533s ago: executing program 37 (id=2193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m55.551520094s ago: executing program 6 (id=2333): r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x27ca, 0x40, 0x9, 0x0, 0x0) 7m55.248648717s ago: executing program 6 (id=2337): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) request_key(0x0, 0x0, &(0x7f0000000200)='&\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m54.924877488s ago: executing program 6 (id=2340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 7m54.552282052s ago: executing program 6 (id=2344): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 7m53.472355002s ago: executing program 6 (id=2356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 7m52.953702449s ago: executing program 6 (id=2359): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="91", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 7m52.355438668s ago: executing program 38 (id=2359): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="91", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 6m58.100978429s ago: executing program 3 (id=2666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0x0, 0x0, 0xfc}) 6m57.545904183s ago: executing program 3 (id=2670): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xa7, 0x26, 0x4c, 0x20, 0x18c5, 0x12, 0x2b9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x6e, 0x0, 0x0, 0xff, 0x13, 0xf8, 0xca}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000700)=ANY=[]}]}) gettid() 6m54.19085375s ago: executing program 3 (id=2685): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 6m51.820790294s ago: executing program 3 (id=2700): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 6m51.614912914s ago: executing program 3 (id=2701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) 6m51.197116996s ago: executing program 3 (id=2703): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) 6m50.338981853s ago: executing program 39 (id=2703): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) 2m52.504883946s ago: executing program 1 (id=3952): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r0) unshare(0x22020600) r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) unshare(0x2c020400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) 2m52.045432593s ago: executing program 1 (id=3959): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xfffd, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m51.706203133s ago: executing program 1 (id=3963): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/145, 0x91}, 0x9}], 0x1, 0x40002000, 0x0) 2m50.344151583s ago: executing program 1 (id=3972): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 2m50.005013839s ago: executing program 1 (id=3974): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.683872185s ago: executing program 1 (id=3977): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 2m48.658917344s ago: executing program 40 (id=3977): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 2m12.708991597s ago: executing program 2 (id=4163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}}, 0x0) 2m12.035130151s ago: executing program 2 (id=4169): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) 2m10.72260207s ago: executing program 2 (id=4175): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x9, 0x10, "0062ba7d8200000000f7ffffff00"}) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x4945, 0x0, 0x2, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) 2m10.387110262s ago: executing program 2 (id=4176): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m9.300869971s ago: executing program 2 (id=4192): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x5e20, 0x0, @empty, 0xffffff5c}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 2m8.755870047s ago: executing program 2 (id=4182): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x145}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) 2m7.795488262s ago: executing program 41 (id=4182): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @loopback, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x145}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) 7.943901383s ago: executing program 7 (id=4745): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x28800d, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 7.623375049s ago: executing program 9 (id=4748): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 7.622241645s ago: executing program 4 (id=4749): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) 7.601011721s ago: executing program 7 (id=4750): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.185762683s ago: executing program 7 (id=4753): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000330f9d72fa"]) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.058163655s ago: executing program 4 (id=4754): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0x10, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x89, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x805, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x8, 0xf9a2, 0x80000001, 0x97, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x40007fff, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100007, 0x8000, 0x3fd, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x0, 0x2, 0x2, 0xb, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xf66, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0x101, 0x5, 0x7fffffff, 0x7, 0x3, 0xa1c, 0x81, 0x6, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0x10, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x80000001, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r1, 0x27e2, 0xda80, 0x24, 0x0, 0x0) 6.740068616s ago: executing program 4 (id=4756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.71860514s ago: executing program 7 (id=4757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0xee, 0x100000000000023b) 5.774435096s ago: executing program 8 (id=4760): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r3], &(0x7f0000000040)}) 5.677005135s ago: executing program 9 (id=4761): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="2bb51e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="000e460000002ece"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.202165922s ago: executing program 8 (id=4763): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10}, 0x400, "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"}, 0x418}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 4.687026616s ago: executing program 4 (id=4764): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x51) futex(&(0x7f0000000100), 0x9, 0x0, 0x0, 0x0, 0x1) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 3.694487404s ago: executing program 0 (id=4766): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x143a81) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x41e43, 0x14) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setrlimit(0x0, &(0x7f0000000080)) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x5, 0x7449}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240e15f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 3.002358601s ago: executing program 8 (id=4767): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) 2.95500927s ago: executing program 4 (id=4768): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf910000000000007b080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.464260728s ago: executing program 9 (id=4769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.333914141s ago: executing program 0 (id=4770): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff]}}) 2.333190324s ago: executing program 8 (id=4771): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x4bf7, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.124913057s ago: executing program 9 (id=4772): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x401, @private1, 0x3}, 0x1c) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.01864782s ago: executing program 0 (id=4773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000) 1.902377868s ago: executing program 8 (id=4774): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1.690433579s ago: executing program 0 (id=4775): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.44396689s ago: executing program 0 (id=4776): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 926.19503ms ago: executing program 7 (id=4777): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, {0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x10001, 0x12006606}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffd, 0x0, {0x0, 0x8000000000000000, 0x4, 0xffff, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x2000, 0x0, 0x0, 0xee01, 0x7, 0x4}}}}, 0x0, 0x0}) 857.389213ms ago: executing program 4 (id=4778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x4008c001) 418.139634ms ago: executing program 7 (id=4779): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1dc, 0x1090, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x3, [0x6, 0x1]}, {0x80000000, 0x0, 0x3, [0xfffffff7, 0x9]}, 0x2, [0x5, 0x80000000]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 233.044236ms ago: executing program 9 (id=4780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', '', [], 0xa, "c3efb4b60ec6"}, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r2, r1, 0x0, 0x80004700) 142.394004ms ago: executing program 0 (id=4781): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x5, 0x4000000, 0x2, [0x0, 0x0, 0x0, 0x0], [0xbc2], [0x805, 0x1001000, 0x0, 0x3], [0x0, 0x1, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) 62.489528ms ago: executing program 8 (id=4782): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 9 (id=4783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c000200080003003688"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000100039042abd7000eafefffff7ff02e4", @ANYRES32=r4, @ANYBLOB="03000000c31006006000128008000100736974005400028008000100", @ANYRES32=r3, @ANYBLOB="08000100ac1414bb0500040080000000060012004e22000008000200ac14142d05000a000100000008001400ff0f00000500050016000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): (1749727965.073:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 731.786196][ T30] audit: type=1326 audit(1749727965.073:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 731.836132][ T30] audit: type=1326 audit(1749727965.073:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 732.517815][ T5904] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 732.709624][ T5904] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 732.789141][ T5904] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 732.837289][ T5904] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 732.910163][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.060479][T19016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 733.109406][ T5904] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 733.341207][ T30] kauditd_printk_skb: 2969 callbacks suppressed [ 733.341228][ T30] audit: type=1326 audit(1749727966.933:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.495863][ T30] audit: type=1326 audit(1749727966.983:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.517805][ T5904] usb 1-1: USB disconnect, device number 29 [ 733.618831][ T30] audit: type=1326 audit(1749727966.983:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.665909][ T30] audit: type=1326 audit(1749727966.983:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.747943][ T30] audit: type=1326 audit(1749727966.983:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.815087][ T30] audit: type=1326 audit(1749727966.983:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.866746][ T30] audit: type=1326 audit(1749727966.983:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 733.977935][ T30] audit: type=1326 audit(1749727966.983:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 734.050900][ T30] audit: type=1326 audit(1749727966.983:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 734.168923][ T30] audit: type=1326 audit(1749727966.983:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18996 comm="syz.9.3940" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x50000 [ 737.153076][ T9] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 737.335016][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 737.405975][ T9] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 737.430895][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 737.498416][ T9] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 737.533734][ T1342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.568255][ T9] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 737.612221][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 737.648580][ T9] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 737.664867][ T9] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 737.665056][T19117] syzkaller1: entered promiscuous mode [ 737.676971][ T9] usb 10-1: Product: syz [ 737.708315][ T9] usb 10-1: Manufacturer: syz [ 737.710543][T19117] syzkaller1: entered allmulticast mode [ 737.713156][ T9] usb 10-1: SerialNumber: syz [ 737.728889][ T9] usb 10-1: config 0 descriptor?? [ 737.744077][ T9] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 737.792430][ T9] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 737.901248][ T1342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.228548][T19111] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 738.242892][ T8230] usb 10-1: USB disconnect, device number 31 [ 738.249060][ C1] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 738.341019][ T8230] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 738.479566][ T1342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.628005][ T8231] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 738.778228][ T1342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.808255][ T8231] usb 1-1: Using ep0 maxpacket: 32 [ 738.838024][ T9] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 738.849092][ T8231] usb 1-1: config 4 has an invalid interface number: 194 but max is 0 [ 738.889335][ T8231] usb 1-1: config 4 has no interface number 0 [ 738.928807][ T8231] usb 1-1: config 4 interface 194 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 739.014198][ T8231] usb 1-1: config 4 interface 194 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 739.036755][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.098150][ T8231] usb 1-1: config 4 interface 194 altsetting 7 endpoint 0x4 has invalid maxpacket 25352, setting to 1024 [ 739.117884][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.171624][ T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 739.196675][ T8231] usb 1-1: config 4 interface 194 has no altsetting 0 [ 739.238087][ T8231] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=a1.41 [ 739.250641][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.307774][ T8231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.350386][ T1342] bridge_slave_1: left allmulticast mode [ 739.352102][ T8231] usb 1-1: Product: syz [ 739.359358][ T9] usb 8-1: config 0 descriptor?? [ 739.375380][ T1342] bridge_slave_1: left promiscuous mode [ 739.397862][ T8231] usb 1-1: Manufacturer: syz [ 739.407350][ T8231] usb 1-1: SerialNumber: syz [ 739.425230][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.545954][ T1342] bridge_slave_0: left allmulticast mode [ 739.605652][ T1342] bridge_slave_0: left promiscuous mode [ 739.667599][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.739628][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 739.751220][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 739.764309][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 739.774049][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 739.788343][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 739.889957][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 739.896998][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 739.973673][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 740.003228][ T8231] usb 1-1: probing VID:PID(0424:012C) [ 740.031658][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 740.061474][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 740.063813][ T8231] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 03 [ 740.090746][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 740.117887][ T8231] usb 1-1: vub300 ignoring EndPoint(0) 03 [ 740.123691][ T8231] usb 1-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 740.147029][ T9] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 740.157806][ T8231] usb 1-1: vub300 ignoring EndPoint(1) 04 [ 740.163595][ T8231] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 740.217448][ T9] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 740.352720][ T8231] vub300 1-1:4.194: probe with driver vub300 failed with error -22 [ 740.359970][ T9] cp2112 0003:10C4:EA90.0036: Part Number: 0x82 Device Version: 0xFE [ 740.498022][ T8231] usb 1-1: USB disconnect, device number 30 [ 740.868563][ T9] cp2112 0003:10C4:EA90.0036: error reading lock byte: -71 [ 740.912058][ T9] usb 8-1: USB disconnect, device number 44 [ 741.518158][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 741.713052][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 741.723621][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.732896][ T1342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.742315][ T9] usb 1-1: Product: syz [ 741.748351][ T1342] bond0 (unregistering): Released all slaves [ 741.758533][ T9] usb 1-1: Manufacturer: syz [ 741.763164][ T9] usb 1-1: SerialNumber: syz [ 741.818306][ T5843] Bluetooth: hci3: command tx timeout [ 741.825397][ T9] usb 1-1: config 0 descriptor?? [ 741.903009][ T1342] tipc: Left network mode [ 742.294144][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 742.314606][T19161] netlink: 'syz.0.3987': attribute type 10 has an invalid length. [ 742.322834][ T9] usb 1-1: Please update to version 0.2 or newer [ 742.382732][ T9] usb 1-1: Firmware: build [ 742.406797][T19161] veth0_vlan: entered allmulticast mode [ 742.674558][ T9] usb 1-1: USB disconnect, device number 31 [ 742.748270][ T1342] hsr_slave_0: left promiscuous mode [ 742.791531][ T1342] hsr_slave_1: left promiscuous mode [ 742.818752][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.826785][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.853786][ T1342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.874295][ T1342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.924853][ T1342] veth1_macvtap: left promiscuous mode [ 742.945494][ T1342] veth0_macvtap: left promiscuous mode [ 742.968201][ T1342] veth1_vlan: left promiscuous mode [ 742.973609][ T1342] veth0_vlan: left promiscuous mode [ 743.115145][ T5904] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 743.332475][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 743.356880][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.379138][ T5904] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 743.428193][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.450740][ T5904] usb 3-1: config 0 descriptor?? [ 743.908222][ T5843] Bluetooth: hci3: command tx timeout [ 744.337798][ T5904] hid-generic 0003:04F3:0754.0037: failed to start in urb: -90 [ 744.422768][ T5904] hid-generic 0003:04F3:0754.0037: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.2-1/input0 [ 744.551402][ T5904] usb 3-1: USB disconnect, device number 47 [ 744.922640][T19222] fido_id[19222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 745.980402][ T5843] Bluetooth: hci3: command tx timeout [ 747.353461][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.362220][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.998012][ T8234] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 748.057831][ T5843] Bluetooth: hci3: command tx timeout [ 748.175830][T19147] chnl_net:caif_netlink_parms(): no params data found [ 748.251815][ T8234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.289995][ T8234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.353423][ T8234] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 748.404690][ T8234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.439316][ T8234] usb 3-1: config 0 descriptor?? [ 748.909272][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 748.927165][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 748.955467][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 748.988821][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 748.995805][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 749.045996][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 749.091942][T19147] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.111114][ T8234] cp2112 0003:10C4:EA90.0038: unknown main item tag 0x0 [ 749.131557][T19147] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.172282][T19147] bridge_slave_0: entered allmulticast mode [ 749.179508][ T8234] cp2112 0003:10C4:EA90.0038: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 749.208989][T19147] bridge_slave_0: entered promiscuous mode [ 749.228512][T19147] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.267998][T19147] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.278584][T19147] bridge_slave_1: entered allmulticast mode [ 749.285127][ T8234] cp2112 0003:10C4:EA90.0038: Part Number: 0x82 Device Version: 0xFE [ 749.309018][T19147] bridge_slave_1: entered promiscuous mode [ 749.622352][T19147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.711484][T19147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.887575][ T8234] cp2112 0003:10C4:EA90.0038: error reading lock byte: -71 [ 749.997668][ T8234] usb 3-1: USB disconnect, device number 48 [ 750.010489][T19147] team0: Port device team_slave_0 added [ 750.076453][T19147] team0: Port device team_slave_1 added [ 750.362249][T19147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.408740][T19147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.491307][T19147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.560217][T19147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.599804][T19147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.697847][T19147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.076811][T19147] hsr_slave_0: entered promiscuous mode [ 751.099998][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 751.100017][ T30] audit: type=1326 audit(1749727984.743:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19330 comm="syz.0.4023" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f32539 code=0x0 [ 751.129299][T19147] hsr_slave_1: entered promiscuous mode [ 752.357064][ T5843] Bluetooth: hci4: Unexpected advertising set terminated event [ 752.638101][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 752.827859][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 752.884434][ T9] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 752.925345][ T9] usb 3-1: config 0 has no interface number 0 [ 752.962171][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 752.991778][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.008381][ T9] usb 3-1: Product: syz [ 753.012645][ T9] usb 3-1: Manufacturer: syz [ 753.017263][ T9] usb 3-1: SerialNumber: syz [ 753.048456][ T9] usb 3-1: config 0 descriptor?? [ 753.483097][T19364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.495724][T19364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.638123][ T9] usb 3-1: USB disconnect, device number 49 [ 753.666318][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.704409][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4041'. [ 753.742482][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4041'. [ 753.759813][T19392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4041'. [ 753.772983][T19392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4041'. [ 753.817168][T19394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4042'. [ 754.533821][T19147] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 754.593916][T19147] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 754.594880][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4048'. [ 754.616954][T19410] netlink: 'syz.7.4048': attribute type 5 has an invalid length. [ 754.625376][T19410] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4048'. [ 754.646049][T19410] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 754.674427][T19410] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 754.713832][T19410] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 754.757791][T19410] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 754.788251][T19410] geneve2: entered promiscuous mode [ 754.794268][T19410] geneve2: entered allmulticast mode [ 754.818677][T19147] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 754.879827][T19147] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.047468][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 755.477171][T19147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.549212][T19147] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.611534][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.618790][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.695922][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.703209][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.022073][T19147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.260619][T19147] veth0_vlan: entered promiscuous mode [ 756.325834][T19147] veth1_vlan: entered promiscuous mode [ 756.399522][T19147] veth0_macvtap: entered promiscuous mode [ 756.423857][T19147] veth1_macvtap: entered promiscuous mode [ 756.470729][T19147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.516958][T19147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.527911][ T8234] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 756.552249][T19147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.562911][T19147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.572246][T19147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.581177][T19147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.720090][ T8234] usb 8-1: Using ep0 maxpacket: 32 [ 756.743501][ T8234] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.770445][ T8234] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.781305][ T8234] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 756.794572][ T7144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.812788][ T8234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.837916][ T7144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.862046][ T8234] usb 8-1: config 0 descriptor?? [ 756.932342][ T1342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.962408][ T1342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.353370][ T8234] savu 0003:1E7D:2D5A.0039: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 757.573068][T19469] netlink: 'syz.4.3979': attribute type 5 has an invalid length. [ 757.648250][ T8234] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 757.651645][ T5911] usb 8-1: USB disconnect, device number 45 [ 757.836638][ T8234] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.883565][ T8234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 757.930081][ T8234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 757.958547][ T8234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 757.991996][ T8234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.027056][ T8234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.067117][ T8234] usb 3-1: config 0 descriptor?? [ 758.553807][ T8234] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 758.620627][ T8234] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 759.105419][ T5843] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 759.115452][ T5843] Bluetooth: hci1: Injecting HCI hardware error event [ 759.128298][ T5843] Bluetooth: hci1: hardware error 0x00 [ 759.537967][T19523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4083'. [ 759.572386][T19523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4083'. [ 759.589446][ T9] usb 3-1: USB disconnect, device number 50 [ 759.628731][ T8232] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 759.638951][T19523] syz_tun: entered promiscuous mode [ 759.657122][T19523] gretap0: entered promiscuous mode [ 759.660816][ T8231] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 759.822948][ T8232] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 759.843561][ T8231] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.857854][ T8232] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 759.879725][ T8231] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 759.894486][ T8232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 759.915542][ T8232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 759.943970][ T8231] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 759.961736][ T8232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 759.980884][ T8231] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.007177][ T8231] usb 10-1: Product: syz [ 760.018809][ T8232] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 760.092648][ T8231] usb 10-1: Manufacturer: syz [ 760.145762][ T8231] usb 10-1: SerialNumber: syz [ 760.152102][ T8232] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 760.210970][ T8232] usb 1-1: Product: syz [ 760.238888][ T8231] cdc_mbim 10-1:1.0: skipping garbage [ 760.272703][ T8232] usb 1-1: Manufacturer: syz [ 760.323158][ T8232] cdc_wdm 1-1:1.0: skipping garbage [ 760.336652][ T8232] cdc_wdm 1-1:1.0: skipping garbage [ 760.430540][ T8232] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 760.450356][ T8232] cdc_wdm 1-1:1.0: Unknown control protocol [ 760.466042][T19519] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 760.702654][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.709341][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.718744][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.725403][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.732046][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.738665][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.744901][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.751492][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.757910][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.764524][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.770994][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.777633][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.788311][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.794958][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.808628][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.815280][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.822004][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.828656][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.835458][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 760.842069][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 760.884056][T15538] usb 1-1: USB disconnect, device number 32 [ 760.884140][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 761.105015][T19519] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 761.138581][ T8231] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 761.187116][ T8231] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 761.258563][ T5843] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 761.321062][ T8231] wwan wwan0: port wwan0mbim0 attached [ 761.399100][ T8231] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 1a:aa:30:1e:92:4d [ 761.516166][ T8231] usb 10-1: USB disconnect, device number 32 [ 761.545573][ T8231] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 761.749842][ T8231] wwan wwan0: port wwan0mbim0 disconnected [ 762.654879][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4095'. [ 762.681449][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4095'. [ 762.708170][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4095'. [ 763.566726][ T8231] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 763.757109][ T8231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 763.818939][ T8231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.853688][ T8231] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 763.901399][ T8231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.941929][ T8231] usb 5-1: config 0 descriptor?? [ 764.052793][ T8232] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 764.227778][ T8232] usb 1-1: Using ep0 maxpacket: 8 [ 764.265502][ T8232] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 764.299172][ T8232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.318568][ T8232] usb 1-1: Product: syz [ 764.329571][ T8232] usb 1-1: Manufacturer: syz [ 764.356618][ T8232] usb 1-1: SerialNumber: syz [ 764.397808][ T8232] usb 1-1: config 0 descriptor?? [ 764.416368][ T8231] hid-generic 0003:04F3:0754.003B: failed to start in urb: -90 [ 764.448393][ T8231] hid-generic 0003:04F3:0754.003B: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.4-1/input0 [ 764.671710][ T8232] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 764.785742][ T8231] usb 5-1: USB disconnect, device number 17 [ 765.082991][ T5843] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 765.895478][ T8232] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 765.939233][T19653] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 765.947658][ T8232] usb 1-1: USB disconnect, device number 33 [ 765.978042][T19653] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 766.044090][T19653] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 768.413135][T19713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4128'. [ 769.783447][T19756] netlink: 2044 bytes leftover after parsing attributes in process `syz.9.4137'. [ 769.833754][T19756] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4137'. [ 771.282420][ T8231] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 771.493820][ T8231] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 771.506535][ T8231] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 771.530272][ T8231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 771.593573][ T8231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 771.645718][ T8231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 771.689280][ T8231] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 771.731116][ T8231] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 771.771518][ T8231] usb 5-1: Product: syz [ 771.796242][ T8231] usb 5-1: Manufacturer: syz [ 771.832185][ T8231] cdc_wdm 5-1:1.0: skipping garbage [ 771.862722][ T8231] cdc_wdm 5-1:1.0: skipping garbage [ 771.902359][ T8231] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 771.924289][ T8231] cdc_wdm 5-1:1.0: Unknown control protocol [ 772.125405][ T8234] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 772.213803][ C1] wdm_int_callback: 162 callbacks suppressed [ 772.213820][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.226411][ C1] wdm_int_callback: 162 callbacks suppressed [ 772.226423][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.248069][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.254739][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.261832][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.268478][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.274850][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.281564][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.287815][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.294443][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.301285][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.307905][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.314535][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.321170][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.327533][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.334122][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.340352][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.346940][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.353174][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 772.359760][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 772.414316][ T8232] usb 5-1: USB disconnect, device number 18 [ 772.414373][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 772.468604][ T8234] usb 8-1: Using ep0 maxpacket: 32 [ 772.475781][ T8234] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 772.489166][ T8234] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.531752][ T8234] usb 8-1: config 0 descriptor?? [ 772.759968][ T8234] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 772.816661][ T8234] usb 8-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 772.852706][ T8234] usb 8-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 774.195629][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'. [ 774.245473][T19863] netlink: 'syz.2.4163': attribute type 5 has an invalid length. [ 774.267328][T19863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4163'. [ 774.337867][ T9] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 774.374048][T19863] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 774.398302][T19863] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 774.421877][T19863] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 774.455143][T19863] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 774.488429][T19863] geneve2: entered promiscuous mode [ 774.499822][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 774.516270][T19863] geneve2: entered allmulticast mode [ 774.538013][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.550523][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.583040][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 774.601839][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 774.611604][ T9] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 774.621696][ T9] usb 10-1: Manufacturer: syz [ 774.638725][ T9] usb 10-1: config 0 descriptor?? [ 775.130630][ T9] appleir 0003:05AC:8243.003C: unknown main item tag 0x0 [ 775.163774][ T9] appleir 0003:05AC:8243.003C: No inputs registered, leaving [ 775.210444][ T9] appleir 0003:05AC:8243.003C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 775.258118][ T5911] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 775.438461][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 775.456750][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.504572][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.537776][ T5911] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 775.553106][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.579109][ T5911] usb 1-1: config 0 descriptor?? [ 776.054303][ T5911] gt683r_led 0003:1770:FF00.003D: ignoring exceeding usage max [ 776.123242][ T5911] gt683r_led 0003:1770:FF00.003D: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 776.191677][ T30] audit: type=1800 audit(1749728009.833:4625): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4174" name=789995D6C0BDB87AA869C4E6FA9FA1BD9345CE1D269273DD143925C7DE0233B8FE809BED212020BD dev="tmpfs" ino=150 res=0 errno=0 [ 776.345042][ T30] audit: type=1804 audit(1749728009.883:4626): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4174" name=789995D6C0BDB87AA869C4E6FA9FA1BD9345CE1D269273DD143925C7DE0233B8FE809BED212020BD dev="tmpfs" ino=150 res=1 errno=0 [ 776.413321][T19889] input: syz0 as /devices/virtual/input/input53 [ 776.612356][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4177'. [ 776.677361][ T5911] usb 1-1: USB disconnect, device number 34 [ 776.738871][ T9] gt683r_led 0003:1770:FF00.003D: failed to send set report request: -19 [ 776.765053][ T9] gt683r_led 0003:1770:FF00.003D: failed to send set report request: -19 [ 777.595368][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4181'. [ 777.663833][T19943] netlink: 'syz.9.4181': attribute type 5 has an invalid length. [ 777.690969][ T9] usb 10-1: USB disconnect, device number 33 [ 777.704319][T19943] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4181'. [ 777.924100][T19943] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 777.937975][T19943] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 777.946834][T19943] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 777.956660][T19943] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 777.966067][T19943] geneve2: entered promiscuous mode [ 777.994894][T19943] geneve2: entered allmulticast mode [ 780.674242][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.688664][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.707172][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.727956][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.742934][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.048861][T19987] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.056189][T19987] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.848201][T19987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.904466][T19987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.137321][T20005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4194'. [ 782.222467][T19987] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.238343][T19987] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.247503][T19987] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.270356][T19987] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.554268][T19987] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 782.580841][T19987] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 782.600895][T19987] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 782.621279][T19987] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 782.643421][T19987] geneve2: left promiscuous mode [ 782.670651][T19987] geneve2: left allmulticast mode [ 782.703372][T19980] pimreg: entered allmulticast mode [ 782.858861][ T5843] Bluetooth: hci4: command tx timeout [ 783.358457][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4197'. [ 783.911234][T20046] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.4202'. [ 783.925375][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4202'. [ 784.360731][T19992] chnl_net:caif_netlink_parms(): no params data found [ 784.937876][ T5843] Bluetooth: hci4: command tx timeout [ 784.967392][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 785.028547][T20071] netlink: 'syz.4.4207': attribute type 5 has an invalid length. [ 785.036658][T20071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4207'. [ 785.076404][T19992] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.104000][T19992] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.113215][T19992] bridge_slave_0: entered allmulticast mode [ 785.121188][T19992] bridge_slave_0: entered promiscuous mode [ 785.136750][T20071] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 785.145701][T20071] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 785.154972][T20071] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 785.164037][T20071] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 785.173806][T20071] geneve2: entered promiscuous mode [ 785.180076][T20071] geneve2: entered allmulticast mode [ 785.199076][T19992] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.221913][T19992] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.244664][T19992] bridge_slave_1: entered allmulticast mode [ 785.268920][T20079] binder: 20077:20079 ioctl 4018620d 0 returned -22 [ 785.279302][T19992] bridge_slave_1: entered promiscuous mode [ 785.347419][T20080] binder: 20077:20080 ioctl c018620c 0 returned -14 [ 785.411377][T19992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.438467][T19992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.638485][T19992] team0: Port device team_slave_0 added [ 785.664733][T19992] team0: Port device team_slave_1 added [ 785.770074][T19992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.790651][T19992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.867543][T19992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.902016][T19992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.916540][T19992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.015222][T19992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.186426][T20104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4214'. [ 786.398863][T19992] hsr_slave_0: entered promiscuous mode [ 786.405840][T19992] hsr_slave_1: entered promiscuous mode [ 786.448125][T19992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.455762][T19992] Cannot create hsr debugfs directory [ 787.018967][ T5843] Bluetooth: hci4: command tx timeout [ 787.066105][T20130] netlink: 'syz.7.4221': attribute type 5 has an invalid length. [ 787.262063][T20135] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 787.408919][T20141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 788.077909][ T5911] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 788.276461][ T5911] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 788.294793][ T5911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.315413][ T5911] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.325772][ T5911] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 788.341770][ T5911] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 788.387871][ T5911] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 788.426256][ T5911] usb 10-1: Manufacturer: syz [ 788.484066][ T5911] usb 10-1: config 0 descriptor?? [ 788.686341][ T5925] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 788.877969][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 788.894132][ T5925] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 788.921443][T20179] netlink: 'syz.0.4233': attribute type 6 has an invalid length. [ 788.927749][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.937309][ T5925] usb 5-1: Product: syz [ 788.944983][T20179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4233'. [ 788.974356][ T5911] appleir 0003:05AC:8243.003E: unknown main item tag 0x0 [ 788.986840][ T5925] usb 5-1: Manufacturer: syz [ 789.002278][ T5911] appleir 0003:05AC:8243.003E: No inputs registered, leaving [ 789.009999][ T5925] usb 5-1: SerialNumber: syz [ 789.030890][ T5925] usb 5-1: config 0 descriptor?? [ 789.052735][ T5911] appleir 0003:05AC:8243.003E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 789.098091][ T5843] Bluetooth: hci4: command tx timeout [ 789.144058][T19992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 789.222884][T19992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 789.260234][ T5925] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 789.286215][T19992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 789.405175][T19992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 789.486669][ T5925] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 789.545148][ T5925] usb 5-1: USB disconnect, device number 19 [ 789.842644][T19992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.895948][T15538] usb 10-1: USB disconnect, device number 34 [ 789.905309][T19992] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.981310][ T1342] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.988560][ T1342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.006894][ T1342] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.014128][ T1342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.251485][T19992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.401986][T19992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.558469][ T8231] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 790.626318][T19992] veth0_vlan: entered promiscuous mode [ 790.657030][T19992] veth1_vlan: entered promiscuous mode [ 790.748007][ T8231] usb 1-1: Using ep0 maxpacket: 32 [ 790.777631][ T8231] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 790.788831][T19992] veth0_macvtap: entered promiscuous mode [ 790.810823][ T8231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.840681][T19992] veth1_macvtap: entered promiscuous mode [ 790.872645][ T8231] usb 1-1: config 0 descriptor?? [ 790.956863][T19992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.999902][T19992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.041243][T19992] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.060517][T19992] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.091448][T19992] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.110175][T19992] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.111995][ T8231] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 791.327413][T20226] netlink: 251 bytes leftover after parsing attributes in process `syz.4.4242'. [ 791.358408][T20226] netlink: 251 bytes leftover after parsing attributes in process `syz.4.4242'. [ 791.459863][ T7149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.491363][ T7149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.606667][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.634780][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.788159][ T5911] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 791.880713][T20235] team0: Device gtp0 is of different type [ 791.959428][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 791.977349][ T5911] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 791.992614][ T5911] usb 5-1: config 0 has no interface number 0 [ 792.001304][ T5911] usb 5-1: config 0 interface 180 has no altsetting 0 [ 792.029875][ T5911] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 792.075057][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.107972][ T5911] usb 5-1: Product: syz [ 792.122684][ T5911] usb 5-1: Manufacturer: syz [ 792.142855][ T5911] usb 5-1: SerialNumber: syz [ 792.163771][ T5911] usb 5-1: config 0 descriptor?? [ 792.558233][ T5911] viperboard 5-1:0.180: version 0.f2 found at bus 005 address 020 [ 792.630250][ T5911] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 792.648507][T17728] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 792.657933][ T5911] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 792.763029][ T5911] usb 5-1: USB disconnect, device number 20 [ 792.850938][T17728] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 792.904109][T17728] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 792.953730][T17728] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 792.983250][T17728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.003454][T17728] usb 9-1: Product: syz [ 793.013871][T17728] usb 9-1: Manufacturer: syz [ 793.021827][T17728] usb 9-1: SerialNumber: syz [ 793.050545][T20248] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 794.145333][T17728] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 794.191300][T17728] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 794.237746][T17728] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 794.358095][T17728] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 794.696002][T20291] fuse: Invalid uid '00000000000000000001' [ 794.794502][T17728] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 794.888983][ T5911] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 794.963144][T17728] usb 9-1: USB disconnect, device number 10 [ 795.066770][T17728] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 795.120550][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 795.146585][ T5911] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 795.185829][ T5911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.203642][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 795.215484][ T5911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.245995][ T5911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.294642][ T5911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.349991][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.632223][ T5911] usb 5-1: GET_CAPABILITIES returned 0 [ 795.672117][ T5911] usbtmc 5-1:16.0: can't read capabilities [ 795.911210][ T8232] usb 5-1: USB disconnect, device number 21 [ 798.062560][T20337] netlink: 'syz.4.4269': attribute type 5 has an invalid length. [ 798.357274][T20347] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 798.478434][ T8232] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 798.659763][ T8232] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.725883][ T8232] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.800679][ T8232] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 798.831639][ T8232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.844610][ T8232] usb 9-1: config 0 descriptor?? [ 799.360584][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.367649][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.437125][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.454512][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.468250][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.485558][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.502886][ T8232] cp2112 0003:10C4:EA90.003F: unknown main item tag 0x0 [ 799.562645][ T8232] cp2112 0003:10C4:EA90.003F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 799.670913][ T8232] cp2112 0003:10C4:EA90.003F: Part Number: 0x82 Device Version: 0x01 [ 799.930379][ T5911] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 800.109856][ T5911] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.137755][ T5911] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.160581][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.178847][ T5911] usb 10-1: config 0 descriptor?? [ 800.199051][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 800.273767][ T8232] cp2112 0003:10C4:EA90.003F: error reading lock byte: -71 [ 800.323089][ T8232] usb 9-1: USB disconnect, device number 11 [ 800.616433][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 800.671918][ T5911] pwc: recv_control_msg error -32 req 02 val 2700 [ 800.711819][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 800.735759][ T5911] pwc: recv_control_msg error -32 req 04 val 1000 [ 800.760108][ T5911] pwc: recv_control_msg error -32 req 04 val 1300 [ 800.985570][ T5911] pwc: recv_control_msg error -71 req 02 val 2000 [ 801.018023][ T5911] pwc: recv_control_msg error -71 req 02 val 2100 [ 801.068427][ T5911] pwc: recv_control_msg error -71 req 04 val 1500 [ 801.098915][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 801.126419][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 801.169428][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 801.202301][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 801.241912][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 801.263291][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 801.302426][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 801.330835][ T5911] pwc: Registered as video103. [ 801.360899][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input54 [ 801.429083][ T5911] usb 10-1: USB disconnect, device number 35 [ 801.738919][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4289'. [ 802.987473][T20457] vivid-000: disconnect [ 803.017107][T20455] vivid-000: reconnect [ 803.666978][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4302'. [ 803.688460][T20474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.732651][T20474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.082853][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4306'. [ 804.480811][T20500] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4309'. [ 804.774528][T20511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4311'. [ 806.513401][T20554] netlink: 186232 bytes leftover after parsing attributes in process `syz.4.4324'. [ 808.726794][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4338'. [ 808.752184][T20603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.772611][T20603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.796452][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.803120][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.815809][T20603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.858912][ T8230] net_ratelimit: 10 callbacks suppressed [ 808.858935][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.875145][T20603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.898711][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.818095][T20652] xt_limit: Overflow, try lower: 330673899/4200216962 [ 810.938180][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.018055][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.342090][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.428363][ T8232] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 811.598053][ T8232] usb 10-1: Using ep0 maxpacket: 16 [ 811.617394][ T8232] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.650321][ T8232] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 811.723252][ T8232] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 811.781261][ T8232] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 811.819606][ T8232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.866104][ T8232] usb 10-1: Product: syz [ 811.894872][ T8232] usb 10-1: Manufacturer: syz [ 811.920104][ T8232] usb 10-1: SerialNumber: syz [ 811.982614][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.733569][ T8232] usb 10-1: USB disconnect, device number 36 [ 812.882742][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.026421][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.317455][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.955507][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.062117][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.257852][ T5925] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 814.379822][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.437904][ T5925] usb 10-1: Using ep0 maxpacket: 32 [ 814.474437][ T5925] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 814.514738][ T5925] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 814.544570][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.606848][ T5925] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 814.634929][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 814.700852][ T5925] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 814.754980][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 814.823667][ T5925] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 814.862889][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.902430][T20739] kernel read not supported for file /file1 (pid: 20739 comm: syz.8.4374) [ 814.924868][ T5925] usb 10-1: config 0 descriptor?? [ 814.970615][ T30] audit: type=1800 audit(1749728048.593:4627): pid=20739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4374" name="file1" dev="mqueue" ino=96663 res=0 errno=0 [ 815.106447][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.194046][ T5925] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 815.293131][ T5925] usb 10-1: USB disconnect, device number 37 [ 815.324904][ T5925] usblp0: removed [ 815.447288][ T5911] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 815.533869][T20753] loop6: detected capacity change from 0 to 63 [ 815.550687][ T5852] buffer_io_error: 82 callbacks suppressed [ 815.550706][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.566817][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.577430][T20753] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.586482][T20753] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.602921][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.627353][T20753] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.636567][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.653539][ T5852] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.653887][ T5911] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 815.674455][T20753] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.693026][T20753] Buffer I/O error on dev loop6, logical block 0, async page read [ 815.703545][ T5911] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 815.797936][ T5925] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 815.812720][ T5911] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 815.882802][ T5911] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 815.910249][ T5911] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 815.945801][ T5911] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 815.955418][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 815.974663][ T5911] usb 9-1: Product: syz [ 815.985410][ T5911] usb 9-1: Manufacturer: syz [ 816.007833][ T5925] usb 10-1: Using ep0 maxpacket: 32 [ 816.031429][ T5925] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 816.046266][ T5925] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 816.078312][ T5911] cdc_wdm 9-1:1.0: skipping garbage [ 816.090338][ T5925] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 816.105520][ T5911] cdc_wdm 9-1:1.0: skipping garbage [ 816.115165][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 816.129984][ T5911] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 816.136384][ T5911] cdc_wdm 9-1:1.0: Unknown control protocol [ 816.145797][ T5925] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 816.148395][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.160838][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 816.182572][ T5925] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 816.192949][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.215868][ T5925] usb 10-1: config 0 descriptor?? [ 816.744385][ C1] wdm_int_callback: 236 callbacks suppressed [ 816.744403][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.757015][ C1] wdm_int_callback: 236 callbacks suppressed [ 816.757027][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.769302][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.775718][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.782320][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.788709][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.795305][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.801565][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.808153][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.814433][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.821039][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.827270][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.833875][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.840851][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.847451][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.853799][ T5838] usb 9-1: USB disconnect, device number 12 [ 816.855958][T20746] cdc_wdm 9-1:1.0: Tx URB error: -19 [ 816.860171][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 816.872619][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 816.878711][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 816.887674][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.904110][T20769] cdc_wdm 9-1:1.0: Tx URB error: -19 [ 816.935330][ T5925] usblp 10-1:0.0: usblp1: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 816.994264][ T5925] usb 10-1: USB disconnect, device number 38 [ 817.023821][ T5925] usblp1: removed [ 817.098510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.178247][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.418866][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.225445][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.899998][T20817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 818.907267][T20817] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 818.918946][T20820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 819.116298][T20817] vhci_hcd vhci_hcd.0: Device attached [ 819.135491][T20820] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 819.142085][T20820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 819.187909][T20820] vhci_hcd vhci_hcd.0: Device attached [ 819.288197][ T5911] vhci_hcd: vhci_device speed not set [ 819.289998][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.315873][T20824] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 819.322550][T20824] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 819.336286][T20827] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(5) [ 819.342845][T20827] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 819.417763][ T5911] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 819.451966][T20824] vhci_hcd vhci_hcd.0: Device attached [ 819.480755][T20827] vhci_hcd vhci_hcd.0: Device attached [ 819.559887][T20817] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(15) [ 819.566577][T20817] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 819.679142][T20820] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18) [ 819.685804][T20820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 819.699186][T20827] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(13) [ 819.705863][T20827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 819.770985][T20826] vhci_hcd: connection closed [ 819.773812][T20821] vhci_hcd: connection closed [ 819.777763][T20818] vhci_hcd: connection reset by peer [ 819.780069][T20817] vhci_hcd vhci_hcd.0: Device attached [ 819.786658][T20833] vhci_hcd: connection closed [ 819.822732][ T7152] vhci_hcd: stop threads [ 819.822770][T20830] vhci_hcd: connection closed [ 819.837254][T20820] vhci_hcd vhci_hcd.0: Device attached [ 819.867758][T20836] vhci_hcd: connection closed [ 819.878971][T20827] vhci_hcd vhci_hcd.0: Device attached [ 819.887722][T20842] vhci_hcd: connection closed [ 819.899730][ T7152] vhci_hcd: release socket [ 819.958301][ T7152] vhci_hcd: disconnect device [ 819.974833][ T7152] vhci_hcd: stop threads [ 820.013851][ T7152] vhci_hcd: release socket [ 820.177843][ T7152] vhci_hcd: disconnect device [ 820.303565][ T7152] vhci_hcd: stop threads [ 820.308232][ T7152] vhci_hcd: release socket [ 820.324248][ T7152] vhci_hcd: disconnect device [ 820.347982][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.375228][ T7152] vhci_hcd: stop threads [ 820.406925][ T7152] vhci_hcd: release socket [ 820.448372][ T7152] vhci_hcd: disconnect device [ 820.558032][ T7152] vhci_hcd: stop threads [ 820.588144][T17728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.614723][ T7152] vhci_hcd: release socket [ 820.648324][ T7152] vhci_hcd: disconnect device [ 820.677963][ T7152] vhci_hcd: stop threads [ 820.682288][ T7152] vhci_hcd: release socket [ 820.698316][ T7152] vhci_hcd: disconnect device [ 820.730413][ T7152] vhci_hcd: stop threads [ 820.743733][ T7152] vhci_hcd: release socket [ 820.756072][ T7152] vhci_hcd: disconnect device [ 821.420371][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.580570][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.485504][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.499567][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.183519][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.237882][T17728] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 824.480343][T17728] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.538220][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.556614][T17728] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 824.629163][ T5911] vhci_hcd: vhci_device speed not set [ 824.647949][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.667744][T17728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 824.737920][T17728] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 824.807196][T17728] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 824.826746][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.949036][T17728] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 825.007728][T17728] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 825.094532][T17728] usb 10-1: Product: syz [ 825.112576][T17728] usb 10-1: Manufacturer: syz [ 825.140226][T17728] usb 10-1: SerialNumber: syz [ 825.180696][T17728] usb 10-1: config 0 descriptor?? [ 825.348347][ T5925] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 825.449165][T17728] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 825.476465][T17728] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 825.520970][ T5925] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 825.572476][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.593588][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.599368][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.631363][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 825.649517][T17728] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 825.669994][T17728] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 825.699612][ T5925] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 825.713293][T17728] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 825.733776][ T5925] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 825.774033][ T5925] usb 5-1: Manufacturer: syz [ 825.847255][ T5925] usb 5-1: config 0 descriptor?? [ 825.853135][T17728] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 825.960671][ T8230] usb usb34-port8: attempt power cycle [ 826.002312][T20936] loop6: detected capacity change from 0 to 63 [ 826.063767][T20936] buffer_io_error: 1754 callbacks suppressed [ 826.063783][T20936] Buffer I/O error on dev loop6, logical block 0, async page read [ 826.091199][T20936] Buffer I/O error on dev loop6, logical block 1, async page read [ 826.101189][T20936] Buffer I/O error on dev loop6, logical block 2, async page read [ 826.110409][T20936] Buffer I/O error on dev loop6, logical block 3, async page read [ 826.119010][ T5844] Buffer I/O error on dev loop6, logical block 0, async page read [ 826.132227][ T5844] Buffer I/O error on dev loop6, logical block 1, async page read [ 826.143799][ T5844] Buffer I/O error on dev loop6, logical block 2, async page read [ 826.165975][ T5844] Buffer I/O error on dev loop6, logical block 3, async page read [ 826.203513][T20936] Buffer I/O error on dev loop6, logical block 0, async page read [ 826.227831][T20936] Buffer I/O error on dev loop6, logical block 1, async page read [ 826.341267][ T5925] appleir 0003:05AC:8243.0040: unknown main item tag 0x0 [ 826.374054][ T5925] appleir 0003:05AC:8243.0040: No inputs registered, leaving [ 826.483411][ T5925] appleir 0003:05AC:8243.0040: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 826.579006][ T8230] usb usb34-port8: unable to enumerate USB device [ 826.662974][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.900530][T17728] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 826.937268][T17728] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 827.010422][T17728] usb 10-1: USB disconnect, device number 39 [ 827.221707][ T30] audit: type=1326 audit(1749728060.853:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.304929][ T30] audit: type=1326 audit(1749728060.853:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.366299][ T30] audit: type=1326 audit(1749728060.863:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.390392][ T30] audit: type=1326 audit(1749728060.863:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.417914][ T30] audit: type=1326 audit(1749728060.863:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.445422][ T30] audit: type=1326 audit(1749728060.863:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.487798][ T30] audit: type=1326 audit(1749728060.863:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.577811][ T30] audit: type=1326 audit(1749728060.863:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20946 comm="syz.0.4419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32539 code=0x7ffc0000 [ 827.659991][T17728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.756992][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.768822][T20961] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 828.673769][ T5925] usb 5-1: USB disconnect, device number 22 [ 828.706257][T20977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.786649][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.233940][T20992] input: syz0 as /devices/virtual/input/input55 [ 829.852095][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.890820][T21005] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 829.897421][T21005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 829.933917][T21009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 829.938372][T21005] vhci_hcd vhci_hcd.0: Device attached [ 830.028523][T21005] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(5) [ 830.035122][T21005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 830.096028][T21005] vhci_hcd vhci_hcd.0: Device attached [ 830.114988][T21009] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(10) [ 830.121676][T21009] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 830.129339][ T8232] vhci_hcd: vhci_device speed not set [ 830.155762][T21005] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(9) [ 830.162350][T21005] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 830.209167][ T8232] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 830.216553][T21009] vhci_hcd vhci_hcd.0: Device attached [ 830.237096][T21005] vhci_hcd vhci_hcd.0: Device attached [ 830.246462][T21022] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(15) [ 830.253115][T21022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 830.293612][T21026] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(12) [ 830.300305][T21026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 830.320769][T21022] vhci_hcd vhci_hcd.0: Device attached [ 830.356577][T21005] vhci_hcd vhci_hcd.0: pdev(7) rhport(7) sockfd(19) [ 830.363256][T21005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 830.381897][T21026] vhci_hcd vhci_hcd.0: Device attached [ 830.405107][T21031] gtp0: entered promiscuous mode [ 830.447495][T21005] vhci_hcd vhci_hcd.0: Device attached [ 830.514226][T21018] vhci_hcd: connection closed [ 830.514502][T21023] vhci_hcd: connection closed [ 830.530640][T21006] vhci_hcd: connection reset by peer [ 830.534556][T21016] vhci_hcd: connection closed [ 830.535604][T21014] vhci_hcd: connection closed [ 830.560561][ T13] vhci_hcd: stop threads [ 830.592704][ T13] vhci_hcd: release socket [ 830.593387][T21027] vhci_hcd: connection closed [ 830.605149][ T13] vhci_hcd: disconnect device [ 830.642693][ T13] vhci_hcd: stop threads [ 830.651544][ T13] vhci_hcd: release socket [ 830.674153][ T13] vhci_hcd: disconnect device [ 830.703089][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.706716][ T13] vhci_hcd: stop threads [ 830.728763][T21032] vhci_hcd: connection closed [ 830.761583][ T13] vhci_hcd: release socket [ 830.821671][ T13] vhci_hcd: disconnect device [ 830.858234][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.876785][ T13] vhci_hcd: stop threads [ 830.887795][ T13] vhci_hcd: release socket [ 830.907869][ T13] vhci_hcd: disconnect device [ 830.923216][ T13] vhci_hcd: stop threads [ 830.932952][ T13] vhci_hcd: release socket [ 830.950480][ T13] vhci_hcd: disconnect device [ 830.979807][ T13] vhci_hcd: stop threads [ 830.987791][ T13] vhci_hcd: release socket [ 831.006413][ T13] vhci_hcd: disconnect device [ 831.022282][ T13] vhci_hcd: stop threads [ 831.026591][ T13] vhci_hcd: release socket [ 831.064054][ T13] vhci_hcd: disconnect device [ 831.515343][T21052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.567258][T21052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.946052][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.504147][T21043] netlink: 'syz.8.4439': attribute type 2 has an invalid length. [ 832.787562][T21083] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 833.021645][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.220069][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 833.426609][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 833.456895][ T5911] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 833.474232][ T5911] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 833.491292][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 833.500480][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 833.536774][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 833.578650][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 833.602360][ T5911] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 833.622002][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.656348][ T5911] usb 5-1: config 0 descriptor?? [ 833.738550][T17728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.924051][ T5911] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 834.015651][ T5911] usb 5-1: USB disconnect, device number 23 [ 834.065801][ T5911] usblp0: removed [ 834.067844][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.200530][T21123] netlink: 'syz.8.4460': attribute type 1 has an invalid length. [ 834.300208][T21125] bond0: (slave bond_slave_0): Releasing backup interface [ 834.342620][T21125] bond1: (slave bond_slave_0): Enslaving as a backup interface with an up link [ 834.379553][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.391777][ T8234] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 834.420302][ T8231] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 834.488131][ T8231] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 834.507637][ T8234] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 834.554269][ T8231] usb 1-1: USB disconnect, device number 35 [ 834.567601][ T8234] usb 8-1: USB disconnect, device number 46 [ 834.588029][ T5911] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 834.760611][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 834.768396][ T5911] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 834.792835][ T5911] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 834.807765][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 834.827232][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 834.849435][ T5911] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 834.888084][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 834.927840][ T5911] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 834.959847][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.997056][ T5911] usb 5-1: config 0 descriptor?? [ 835.098777][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.227192][ T5911] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 835.328074][ T8232] vhci_hcd: vhci_device speed not set [ 835.494612][ C0] usblp0: nonzero read bulk status received: -71 [ 835.503366][ T5911] usb 5-1: USB disconnect, device number 24 [ 835.710902][T21087] usblp0: removed [ 836.144345][ T8231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.609034][ T5925] usb usb48-port8: attempt power cycle [ 836.694108][T21170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.766088][T21170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.779150][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.834057][T21170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.843471][T21171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.906127][T21171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.938463][T21171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.946951][T21171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.252714][ T5925] usb usb48-port8: unable to enumerate USB device [ 837.840354][T21192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.903184][T21188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.608808][ T5911] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 838.837735][ T5911] usb 10-1: Using ep0 maxpacket: 32 [ 838.896690][ T5911] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 838.946056][ T5911] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 839.020289][ T5911] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 839.067736][ T5911] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 839.123646][ T5911] usb 10-1: config 0 interface 0 has no altsetting 0 [ 839.137783][T21069] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 839.145512][ T5911] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 839.175287][ T5911] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 839.229335][ T5911] usb 10-1: Product: syz [ 839.240003][ T5911] usb 10-1: Manufacturer: syz [ 839.254816][ T5911] usb 10-1: SerialNumber: syz [ 839.283912][ T5911] usb 10-1: config 0 descriptor?? [ 839.340495][ T5911] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 839.362840][T21069] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 839.402322][T21069] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.408557][ T5911] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 839.465164][T21069] usb 9-1: Product: syz [ 839.489556][T21069] usb 9-1: Manufacturer: syz [ 839.521333][T21069] usb 9-1: SerialNumber: syz [ 839.563851][T21069] usb 9-1: config 0 descriptor?? [ 839.599099][T21069] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 840.299087][ T8231] net_ratelimit: 84 callbacks suppressed [ 840.299103][ T8231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.216727][T21069] gspca_sunplus: reg_r err -71 [ 841.230148][T21069] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 841.304824][T21069] usb 9-1: USB disconnect, device number 13 [ 841.338755][ T8231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.178005][ T5911] usb 10-1: USB disconnect, device number 40 [ 842.184140][ C0] ldusb 10-1:0.0: usb_submit_urb failed (-19) [ 842.286539][ T5911] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 842.378426][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.871009][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.424501][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.980702][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.469622][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.546043][T21305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.694966][T21305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.509177][ T8231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.576526][ T5925] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 845.769611][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.821478][ T5925] usb 5-1: config 0 has no interfaces? [ 845.850218][ T5925] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 845.898122][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.936536][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.993866][ T5925] usb 5-1: config 0 descriptor?? [ 846.516796][ T5925] usb 5-1: USB disconnect, device number 25 [ 846.544299][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.582844][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.618323][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.938056][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.086501][T21395] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4519'. [ 849.487778][ T5904] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 849.659898][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.707772][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 849.717241][ T5904] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 849.779449][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.844253][ T5904] usb 1-1: config 0 descriptor?? [ 850.182501][ T5904] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 850.187769][ T8232] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 850.358891][ T8232] usb 10-1: Using ep0 maxpacket: 16 [ 850.393343][ T8232] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 850.419693][ T8232] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 850.443640][ T8232] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.472725][ T8232] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.503665][ T8232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.525644][ T8232] usb 10-1: Product: syz [ 850.541517][ T8232] usb 10-1: Manufacturer: syz [ 850.554109][ T8232] usb 10-1: SerialNumber: syz [ 850.701378][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.806655][ T8232] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 850.825194][ T8232] usb 10-1: unit 1 not found! [ 850.929978][ T8232] usb 10-1: USB disconnect, device number 41 [ 851.120014][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.630713][ T5904] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 851.666186][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.679114][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.691492][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.719553][ T5904] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 851.732648][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 851.740604][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.753569][ T5904] asix 1-1:0.0: probe with driver asix failed with error -71 [ 851.761839][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 851.858178][ T5904] usb 1-1: USB disconnect, device number 36 [ 851.978451][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.427937][T21428] netlink: 'syz.4.4525': attribute type 2 has an invalid length. [ 852.778680][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.045491][T21463] syzkaller1: entered promiscuous mode [ 853.076428][T21463] syzkaller1: entered allmulticast mode [ 853.313258][T21446] chnl_net:caif_netlink_parms(): no params data found [ 853.579780][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.674087][ T1144] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.820981][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.907945][ T5843] Bluetooth: hci4: command tx timeout [ 853.963283][ T1144] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.449920][ T1144] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.501771][T21446] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.521319][T21446] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.550689][T21446] bridge_slave_0: entered allmulticast mode [ 854.638924][T21446] bridge_slave_0: entered promiscuous mode [ 854.806215][ T1144] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.856228][T21446] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.864821][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.909341][T21446] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.921367][T21446] bridge_slave_1: entered allmulticast mode [ 854.954653][T21446] bridge_slave_1: entered promiscuous mode [ 855.019744][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.065392][ T8232] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 855.223021][T21446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.253874][ T8232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 855.291881][ T8232] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 855.296205][T21446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.331261][ T8232] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 855.361651][ T8232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.430823][T21500] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 855.486333][ T8232] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 855.905042][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.919621][T21446] team0: Port device team_slave_0 added [ 855.925700][T21069] usb 5-1: USB disconnect, device number 26 [ 855.997809][ T5843] Bluetooth: hci4: command tx timeout [ 856.056482][T21446] team0: Port device team_slave_1 added [ 856.359324][T21506] syz.7.4542 (21506): drop_caches: 2 [ 856.544041][T21446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.587838][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.674644][T21446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.732277][ T1144] bridge_slave_1: left allmulticast mode [ 856.766413][ T1144] bridge_slave_1: left promiscuous mode [ 856.800393][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.945804][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.961386][ T1144] bridge_slave_0: left allmulticast mode [ 856.996201][ T1144] bridge_slave_0: left promiscuous mode [ 857.052082][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.989651][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.058416][ T5843] Bluetooth: hci4: command tx timeout [ 858.058563][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.355402][ T30] audit: type=1326 audit(1749728091.993:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21552 comm="syz.4.4550" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 858.448321][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.459574][ T1144] bond0 (unregistering): Released all slaves [ 858.476717][ T1144] bond1 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.489084][ T1144] bond1 (unregistering): Released all slaves [ 858.505720][T21446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.514285][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.542382][T21446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.767023][T21446] hsr_slave_0: entered promiscuous mode [ 858.774948][T21446] hsr_slave_1: entered promiscuous mode [ 858.783448][T21446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.791497][T21446] Cannot create hsr debugfs directory [ 859.036625][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.331849][ T1144] hsr_slave_0: left promiscuous mode [ 859.355823][ T1144] hsr_slave_1: left promiscuous mode [ 859.449884][ T1144] veth1_macvtap: left promiscuous mode [ 859.455538][ T1144] veth0_macvtap: left promiscuous mode [ 859.480253][ T1144] veth1_vlan: left promiscuous mode [ 859.495889][ T1144] veth0_vlan: left promiscuous mode [ 860.098318][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.147294][ T5837] Bluetooth: hci4: command tx timeout [ 861.112483][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.238645][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.283132][T21609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4563'. [ 862.061507][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 862.305067][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.640213][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 862.915600][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 863.179040][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.344566][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.138157][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.389996][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.475974][ T8232] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 864.508390][ T8232] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 865.424402][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.672786][T21613] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4563'. [ 866.017796][ T5925] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 866.221029][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.241623][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 866.286810][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 866.324463][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.386873][ T5925] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 866.397611][T21695] syz.9.4578 (21695): drop_caches: 2 [ 866.403635][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.436890][ T5925] usb 5-1: Product: syz [ 866.464309][ T5925] usb 5-1: Manufacturer: syz [ 866.464530][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.473822][ T5925] usb 5-1: SerialNumber: syz [ 866.518469][ T5925] usb 5-1: config 0 descriptor?? [ 866.872144][ T8232] usb 5-1: USB disconnect, device number 27 [ 867.142344][T21715] netlink: 'syz.0.4583': attribute type 1 has an invalid length. [ 867.178269][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.270949][T21715] bond1: (slave gretap1): making interface the new active one [ 867.291472][T21715] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 867.433914][T21446] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 867.497590][T21446] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 867.524927][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.547278][T21446] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 867.675550][T21446] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 868.245203][T21755] bond0: entered promiscuous mode [ 868.245641][T21751] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 868.255340][T21755] bond_slave_0: entered promiscuous mode [ 868.274844][T21755] bond_slave_1: entered promiscuous mode [ 868.293751][T21749] syz.0.4590 (21749): drop_caches: 2 [ 868.409498][T21446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.500513][T21446] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.544843][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.552117][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.560274][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.633074][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.640365][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.161985][T21446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.277821][ T8234] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 869.342388][T21446] veth0_vlan: entered promiscuous mode [ 869.391663][T21446] veth1_vlan: entered promiscuous mode [ 869.472221][ T8234] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 869.502475][ T8234] usb 1-1: config 1 interface 0 has no altsetting 0 [ 869.524117][T21446] veth0_macvtap: entered promiscuous mode [ 869.524730][ T8234] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 869.540638][T21446] veth1_macvtap: entered promiscuous mode [ 869.580840][ T8234] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 869.593901][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.601064][T21446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.622671][ T8234] usb 1-1: Product: syz [ 869.626904][ T8234] usb 1-1: Manufacturer: syz [ 869.650808][ T8234] usb 1-1: SerialNumber: syz [ 869.690405][T21446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.761294][T21446] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.778489][T21446] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.787325][T21446] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.802714][T21446] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.035068][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.085087][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.193310][ T7149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.229036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.235878][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.237281][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.243508][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.259319][ T7149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.343331][ T8234] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 870.611052][ T9] usb 1-1: USB disconnect, device number 37 [ 870.630485][ T9] usblp0: removed [ 870.652020][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.701111][ T8234] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 870.738095][ T5904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 870.811253][T21816] kvm: Disabled LAPIC found during irq injection [ 870.870608][ T8234] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 870.895217][ T8234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 870.910653][ T5904] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 870.926526][ T8234] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 870.936611][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.936647][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.936671][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 870.948683][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 870.948716][ T5904] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 870.965921][ T8234] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 871.010324][ T5904] usb 5-1: Manufacturer: syz [ 871.054972][ T5904] usb 5-1: config 0 descriptor?? [ 871.065709][ T8234] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 871.081605][ T8234] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.098503][ T8234] usb 10-1: config 0 descriptor?? [ 871.541632][ T5904] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 871.569777][ T8234] plantronics 0003:047F:FFFF.0043: ignoring exceeding usage max [ 871.598904][ T5904] appleir 0003:05AC:8243.0042: No inputs registered, leaving [ 871.647302][ T8234] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 871.666761][ T5904] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 871.679347][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.711452][ T8234] plantronics 0003:047F:FFFF.0043: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 872.050071][T21840] syzkaller0: entered promiscuous mode [ 872.071618][T21840] syzkaller0: entered allmulticast mode [ 872.153224][ T8234] usb 10-1: USB disconnect, device number 42 [ 872.716911][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.779166][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.266192][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.368135][T21069] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 873.559767][T21069] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.594433][T21069] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 873.612474][T21069] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 873.622887][T21069] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.635224][T21069] usb 9-1: Product: syz [ 873.650145][T21069] usb 9-1: Manufacturer: syz [ 873.655249][ T8234] usb 5-1: USB disconnect, device number 28 [ 873.662171][T21069] usb 9-1: SerialNumber: syz [ 873.739967][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.927930][T21867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.943809][T21867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.967288][T21069] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 874.025622][T21069] usb 9-1: USB disconnect, device number 14 [ 874.548328][T21069] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 874.768586][T21069] usb 9-1: Using ep0 maxpacket: 8 [ 874.779949][T21069] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 874.798990][T21069] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 874.815782][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.842175][T21069] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 874.870844][T21069] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 874.904488][T21069] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 874.938809][T21069] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.974943][T21069] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 875.011765][T21069] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.253588][T21069] usb 9-1: usb_control_msg returned -32 [ 875.262821][T21069] usbtmc 9-1:16.0: can't read capabilities [ 875.342433][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.477555][ T8236] usb 9-1: USB disconnect, device number 15 [ 875.835299][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.305736][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.869748][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.932198][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4628'. [ 877.141288][T21922] binder: 21921:21922 ioctl c0306201 800000c0 returned -14 [ 877.905604][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.311325][T21937] netlink: 'syz.4.4634': attribute type 5 has an invalid length. [ 878.319289][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4634'. [ 878.950486][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.091286][ T30] audit: type=1326 audit(1749728112.723:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21944 comm="syz.4.4637" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 879.340734][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.000335][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.241476][T21979] netlink: 'syz.0.4643': attribute type 4 has an invalid length. [ 880.437922][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 880.458058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.476633][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.484844][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.628193][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 880.649891][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.677904][T21991] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 880.705876][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.732119][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 880.748295][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.768836][ T9] usb 5-1: Product: syz [ 880.805347][ T9] usb 5-1: Manufacturer: syz [ 880.817685][ T9] usb 5-1: SerialNumber: syz [ 880.945069][T22000] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4650'. [ 881.034387][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.070335][ T9] usb 5-1: 0:2 : does not exist [ 881.118066][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 881.204207][ T9] usb 5-1: USB disconnect, device number 29 [ 881.241407][T22008] all: renamed from lo [ 881.377134][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.080088][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.229319][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4658'. [ 883.104525][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.498329][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.201910][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.368172][ T8232] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 884.550106][ T8232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.594652][ T8232] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 884.614348][ T8232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.641623][ T8232] usb 5-1: config 0 descriptor?? [ 884.870759][ T8232] usbhid 5-1:0.0: can't add hid device: -71 [ 884.880942][ T8232] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 884.920994][ T8232] usb 5-1: USB disconnect, device number 30 [ 885.277802][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.407759][ T8232] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 885.581838][ T8232] usb 5-1: Using ep0 maxpacket: 32 [ 885.598333][ T5904] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 885.605544][ T8232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.635611][ T8232] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 885.645114][ T8232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.703510][ T8232] usb 5-1: config 0 descriptor?? [ 885.744013][ T8232] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 885.797697][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 885.812405][ T8232] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 885.828591][ T5904] usb 1-1: config 4 has an invalid interface number: 194 but max is 0 [ 885.836831][ T5904] usb 1-1: config 4 has no interface number 0 [ 885.907853][ T5904] usb 1-1: config 4 interface 194 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 885.928910][ T5904] usb 1-1: config 4 interface 194 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 885.947708][ T5904] usb 1-1: config 4 interface 194 has no altsetting 0 [ 885.967931][ T5904] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=a1.41 [ 885.986720][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.997491][ T5904] usb 1-1: Product: syz [ 886.027797][ T5904] usb 1-1: Manufacturer: syz [ 886.032606][ T5904] usb 1-1: SerialNumber: syz [ 886.077719][ T8236] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 886.240697][ T8236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.267147][ T8236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.285025][ T8236] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 886.296996][ T8236] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.331016][T22074] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 886.373178][ T8236] usb 9-1: config 0 descriptor?? [ 886.388320][ T8232] usb 5-1: USB disconnect, device number 31 [ 886.394381][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 886.400966][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.430873][ T8232] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 886.466592][ T5904] usb 1-1: probing VID:PID(0424:012C) [ 886.482209][ T5904] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 03 [ 886.495306][ T5904] usb 1-1: vub300 ignoring EndPoint(0) 03 [ 886.529720][ T5904] usb 1-1: vub300 testing UNKNOWN EndPoint(1) 04 [ 886.536137][ T5904] usb 1-1: vub300 ignoring EndPoint(1) 04 [ 886.557783][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.566220][ T5904] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 886.629572][ T5904] vub300 1-1:4.194: probe with driver vub300 failed with error -22 [ 886.655908][ T5904] usb 1-1: USB disconnect, device number 38 [ 886.881914][ T8236] cp2112 0003:10C4:EA90.0044: unknown main item tag 0x0 [ 886.893764][ T8236] cp2112 0003:10C4:EA90.0044: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 887.056484][ T8236] cp2112 0003:10C4:EA90.0044: Part Number: 0x82 Device Version: 0xFE [ 887.431396][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.545160][T22157] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4685'. [ 887.778510][ T8236] cp2112 0003:10C4:EA90.0044: error reading lock byte: -71 [ 887.884128][ T8236] usb 9-1: USB disconnect, device number 16 [ 888.469523][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.588121][ T5911] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 888.767776][ T5911] usb 10-1: Using ep0 maxpacket: 8 [ 888.776549][ T5911] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 888.800174][T22181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4692'. [ 888.819422][ T5911] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 888.858417][ T5911] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 888.905035][ T5911] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.970258][ T5911] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 888.994712][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.062820][ T5911] usbtmc 10-1:16.0: bulk endpoints not found [ 889.322059][ T5911] usb 10-1: USB disconnect, device number 43 [ 889.506038][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.579901][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.058630][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.565894][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.700287][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.730514][ T7146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.740587][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.751345][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.387001][T22259] netlink: 2036 bytes leftover after parsing attributes in process `syz.9.4711'. [ 892.460329][T22259] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4711'. [ 892.618122][ T5904] net_ratelimit: 1 callbacks suppressed [ 892.618145][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.631923][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.320841][T22270] netlink: 'syz.7.4713': attribute type 4 has an invalid length. [ 893.372336][T22273] netlink: 'syz.7.4713': attribute type 4 has an invalid length. [ 893.725449][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.128321][T22284] kvm: pic: non byte write [ 894.138544][T22284] kvm: pic: non byte write [ 894.152424][T22284] kvm: pic: non byte write [ 894.165984][T22284] kvm: pic: non byte write [ 894.175932][T22284] kvm: pic: non byte write [ 894.205605][T22284] kvm: pic: non byte write [ 894.234004][T22284] kvm: pic: non byte write [ 894.340812][T22284] kvm: pic: non byte write [ 894.568932][T22284] kvm: pic: non byte write [ 894.578238][T22284] kvm: pic: non byte write [ 894.777961][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.674381][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.697800][T21069] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 895.822165][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.910682][T21069] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 895.957929][T21069] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 896.001703][T21069] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 896.064497][T21069] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 896.121249][T21069] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 896.180054][T21069] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 896.231610][T21069] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 896.278692][T21069] usb 10-1: Product: syz [ 896.297254][T21069] usb 10-1: Manufacturer: syz [ 896.349183][T21069] cdc_wdm 10-1:1.0: skipping garbage [ 896.392603][T21069] cdc_wdm 10-1:1.0: skipping garbage [ 896.423737][T21069] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 896.458761][T21069] cdc_wdm 10-1:1.0: Unknown control protocol [ 896.466355][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.505894][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.514972][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.821249][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.828026][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.837773][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.844503][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.850928][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.857649][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.864167][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.870887][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.877407][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.884124][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.890716][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.897443][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.903842][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.910554][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.917677][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.924410][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.931209][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.937931][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.944505][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 896.951234][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 896.957754][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.968004][T21069] usb 10-1: USB disconnect, device number 44 [ 896.974068][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 897.982230][T21069] net_ratelimit: 9 callbacks suppressed [ 897.982246][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.309762][T22367] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4741'. [ 898.710275][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.773706][T22374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4744'. [ 899.023423][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.579460][ T8232] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 899.810779][ T8232] usb 10-1: config 0 has no interfaces? [ 899.816451][ T8232] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.873415][ T8232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.930289][ T8232] usb 10-1: config 0 descriptor?? [ 900.066221][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.169810][ T8232] usb 10-1: USB disconnect, device number 45 [ 901.107756][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.478163][ T8232] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 901.688875][ T8232] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 901.747837][ T8232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.754141][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4762'. [ 901.840004][ T8232] usb 10-1: config 0 descriptor?? [ 901.852491][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.155372][T21069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.178631][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.608087][ T8232] usb 10-1: Cannot set autoneg [ 903.658007][ T8232] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 903.710347][ T8232] usb 10-1: USB disconnect, device number 46 [ 904.224597][ T8232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.865203][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.258509][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.659437][T22421] syz.7.4757 (22421): drop_caches: 1 [ 906.063108][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.298470][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.830853][T22519] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000083: 0000 [#1] SMP KASAN PTI [ 906.842825][T22519] KASAN: null-ptr-deref in range [0x0000000000000418-0x000000000000041f] [ 906.851262][T22519] CPU: 1 UID: 0 PID: 22519 Comm: syz.9.4783 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 906.863334][T22519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.873399][T22519] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 906.879226][T22519] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6b ba 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c ba 30 f8 4d 8b 24 24 e8 b3 e3 [ 906.898858][T22519] RSP: 0018:ffffc9000f4366f0 EFLAGS: 00010202 [ 906.904941][T22519] RAX: 0000000000000083 RBX: ffff8880314f6120 RCX: 0000000000000002 [ 906.912924][T22519] RDX: ffff88806ab21e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 906.920902][T22519] RBP: ffff8880314f6137 R08: 0000000000000000 R09: ffffffff89d42e76 [ 906.928967][T22519] R10: ffffc9000f4369c0 R11: fffff52001e86d3e R12: 0000000000000418 [ 906.936946][T22519] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100629ec26 [ 906.944926][T22519] FS: 0000000000000000(0000) GS:ffff888125d52000(0063) knlGS:00000000f504eb40 [ 906.953865][T22519] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 906.960459][T22519] CR2: 000000002de1dffc CR3: 0000000064328000 CR4: 00000000003526f0 [ 906.968443][T22519] Call Trace: [ 906.971737][T22519] [ 906.974683][T22519] nexthop_get_nhc_lookup+0x1af/0x400 [ 906.980079][T22519] fib_table_lookup+0xf26/0x16e0 [ 906.985035][T22519] fib_lookup+0x1c5/0x440 [ 906.989390][T22519] ? fib_lookup+0x76/0x440 [ 906.993817][T22519] ip_route_output_key_hash_rcu+0x2fb/0x23a0 [ 906.999813][T22519] ? ip_route_output_key_hash+0xde/0x2e0 [ 907.005459][T22519] ? ip_route_output_key_hash+0xde/0x2e0 [ 907.011105][T22519] ip_route_output_key_hash+0x1b9/0x2e0 [ 907.016664][T22519] ? ipip6_tunnel_create+0x112/0x2c0 [ 907.021963][T22519] ? ipip6_newlink+0x306/0x5a0 [ 907.026746][T22519] ? rtnl_newlink_create+0x30d/0xb00 [ 907.032060][T22519] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 907.038154][T22519] ? netlink_sendmsg+0x805/0xb30 [ 907.043117][T22519] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 907.049639][T22519] ? make_kuid+0x1d9/0x680 [ 907.054075][T22519] ? __pfx_make_kuid+0x10/0x10 [ 907.058858][T22519] ip_route_output_flow+0x2a/0x150 [ 907.063989][T22519] ipip6_tunnel_bind_dev+0x214/0x610 [ 907.069294][T22519] ? __pfx_ipip6_tunnel_bind_dev+0x10/0x10 [ 907.075113][T22519] ? ipip6_tunnel_init+0x9d/0x570 [ 907.080149][T22519] ipip6_tunnel_init+0xa5/0x570 [ 907.085017][T22519] register_netdevice+0x6bc/0x1ae0 [ 907.090149][T22519] ? __pfx_register_netdevice+0x10/0x10 [ 907.095704][T22519] ? __asan_memset+0x22/0x50 [ 907.100306][T22519] ? ipip6_tunnel_create+0x79/0x2c0 [ 907.105518][T22519] ipip6_tunnel_create+0x112/0x2c0 [ 907.110643][T22519] ipip6_newlink+0x306/0x5a0 [ 907.115252][T22519] ? __pfx_ipip6_newlink+0x10/0x10 [ 907.120381][T22519] ? __pfx_ipip6_newlink+0x10/0x10 [ 907.125503][T22519] rtnl_newlink_create+0x30d/0xb00 [ 907.130624][T22519] ? __pfx_aa_get_newest_label+0x10/0x10 [ 907.136271][T22519] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 907.141914][T22519] ? rtnl_newlink+0x8db/0x1c70 [ 907.146683][T22519] ? __pfx___mutex_lock+0x10/0x10 [ 907.151718][T22519] ? ns_capable+0x8a/0xf0 [ 907.156061][T22519] rtnl_newlink+0x16d6/0x1c70 [ 907.160752][T22519] ? __pfx_rtnl_newlink+0x10/0x10 [ 907.165784][T22519] ? __lock_acquire+0xab9/0xd20 [ 907.170650][T22519] ? __lock_acquire+0xab9/0xd20 [ 907.175514][T22519] ? is_bpf_text_address+0x26/0x2b0 [ 907.180727][T22519] ? is_bpf_text_address+0x292/0x2b0 [ 907.186024][T22519] ? is_bpf_text_address+0x26/0x2b0 [ 907.191246][T22519] ? kernel_text_address+0xa5/0xe0 [ 907.196370][T22519] ? __lock_acquire+0xab9/0xd20 [ 907.201244][T22519] ? __pfx_rtnl_newlink+0x10/0x10 [ 907.206274][T22519] rtnetlink_rcv_msg+0x7cc/0xb70 [ 907.211222][T22519] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 907.216346][T22519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 907.221813][T22519] netlink_rcv_skb+0x208/0x470 [ 907.226584][T22519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 907.232051][T22519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 907.237348][T22519] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.242555][T22519] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.247768][T22519] netlink_unicast+0x75b/0x8d0 [ 907.252545][T22519] netlink_sendmsg+0x805/0xb30 [ 907.257322][T22519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.262617][T22519] ? __import_iovec+0x5d4/0x7f0 [ 907.267488][T22519] ? aa_sock_msg_perm+0x94/0x160 [ 907.272436][T22519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.277736][T22519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.283031][T22519] __sock_sendmsg+0x219/0x270 [ 907.287729][T22519] ____sys_sendmsg+0x505/0x830 [ 907.292519][T22519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.297814][T22519] ? __pfx_futex_wake_mark+0x10/0x10 [ 907.303113][T22519] ___sys_sendmsg+0x21f/0x2a0 [ 907.307799][T22519] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.313021][T22519] ? __fget_files+0x2a/0x420 [ 907.317619][T22519] ? __fget_files+0x3a0/0x420 [ 907.322307][T22519] __sys_sendmsg+0x164/0x220 [ 907.326905][T22519] ? __pfx___sys_sendmsg+0x10/0x10 [ 907.332027][T22519] ? rcu_is_watching+0x15/0xb0 [ 907.336804][T22519] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 907.343407][T22519] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.348618][T22519] __do_fast_syscall_32+0xb6/0x2b0 [ 907.353740][T22519] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.358957][T22519] do_fast_syscall_32+0x34/0x80 [ 907.363813][T22519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 907.370151][T22519] RIP: 0023:0xf705e539 [ 907.374224][T22519] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 907.393845][T22519] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 907.402271][T22519] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 907.410255][T22519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.418235][T22519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 907.426208][T22519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 907.434186][T22519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 907.442167][T22519] [ 907.445189][T22519] Modules linked in: [ 907.449137][ C1] vkms_vblank_simulate: vblank timer overrun [ 907.457120][T22519] ---[ end trace 0000000000000000 ]--- [ 907.477912][ T8236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.501529][T22522] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4783'. [ 907.516479][T22519] RIP: 0010:fib_lookup_good_nhc+0x85/0x3d0 [ 907.535945][T22519] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6b ba 30 f8 41 bc 18 04 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c ba 30 f8 4d 8b 24 24 e8 b3 e3 [ 907.614344][T22519] RSP: 0018:ffffc9000f4366f0 EFLAGS: 00010202 [ 907.628558][T22519] RAX: 0000000000000083 RBX: ffff8880314f6120 RCX: 0000000000000002 [ 907.636686][T22519] RDX: ffff88806ab21e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.644828][T22519] RBP: ffff8880314f6137 R08: 0000000000000000 R09: ffffffff89d42e76 [ 907.653095][T22519] R10: ffffc9000f4369c0 R11: fffff52001e86d3e R12: 0000000000000418 [ 907.661452][T22519] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100629ec26 [ 907.674777][T22519] FS: 0000000000000000(0000) GS:ffff888125c52000(0063) knlGS:00000000f504eb40 [ 907.691936][T22519] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 907.699125][T22519] CR2: 00000000f74381e8 CR3: 0000000064328000 CR4: 00000000003526f0 [ 907.707150][T22519] DR0: 0000040000000000 DR1: 000000000000000c DR2: 0000000000000006 [ 907.716583][T22519] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 907.725112][T22519] Kernel panic - not syncing: Fatal exception [ 907.731495][T22519] Kernel Offset: disabled [ 907.735820][T22519] Rebooting in 86400 seconds..