last executing test programs: 1m55.765496572s ago: executing program 3 (id=5716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m55.504491206s ago: executing program 3 (id=5719): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x41}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m55.389971s ago: executing program 3 (id=5720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m55.119567698s ago: executing program 3 (id=5723): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 1m54.102965612s ago: executing program 3 (id=5735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000780)="9bfc", 0x2}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) 1m53.857689085s ago: executing program 3 (id=5740): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m53.587902226s ago: executing program 32 (id=5740): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 46.047194599s ago: executing program 0 (id=6324): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 45.725421536s ago: executing program 0 (id=6329): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a44000000001010902"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0) 42.523484259s ago: executing program 0 (id=6356): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000180)=0x11) 42.330311466s ago: executing program 0 (id=6359): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 41.358112835s ago: executing program 0 (id=6370): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f0000006680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(r0, 0x0, 0x0) 40.99427096s ago: executing program 0 (id=6373): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 40.632676869s ago: executing program 33 (id=6373): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 39.504889357s ago: executing program 4 (id=6390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x90002, 0x0, {[0x8fc0, 0x8000, 0x7, 0xf, 0x1, 0x4, 0x52, 0x7]}}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)=@arm64) 39.23217096s ago: executing program 4 (id=6393): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470000c00028008000200", @ANYBLOB='\b\x00'], 0x40}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 38.027295939s ago: executing program 4 (id=6401): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0x80000000, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0xd7}) 37.728112108s ago: executing program 4 (id=6403): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 36.714531515s ago: executing program 4 (id=6407): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc00", 0x2) splice(r2, 0x0, r1, 0x0, 0x1100000000f336, 0x8) 34.311563638s ago: executing program 4 (id=6418): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 33.595248295s ago: executing program 34 (id=6418): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.173344351s ago: executing program 5 (id=6650): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x141743, 0x0) fcntl$setlease(r1, 0x400, 0x0) 4.180189756s ago: executing program 5 (id=6657): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3.991905186s ago: executing program 5 (id=6659): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lremovexattr(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x7cc5c281160b411a, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.853351711s ago: executing program 1 (id=6671): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000754000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000088a000/0x1000)=nil) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 2.584784364s ago: executing program 6 (id=6672): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000080)={@hyper}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000200)={@host, 0x5}) 2.50443857s ago: executing program 6 (id=6673): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 2.348362549s ago: executing program 5 (id=6674): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x5, 0x0, 0x2}]}, 0x8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x0) 2.219801501s ago: executing program 6 (id=6675): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e20, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x2, 0xcb, 0x12d5e, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x54}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x200, 0x20008001, 0x1}}, 0x44) 2.20518037s ago: executing program 7 (id=6676): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x87) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0xee01, 0x0) 2.171230438s ago: executing program 5 (id=6677): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x101001a, &(0x7f0000000580)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}}, 0xfa, 0x0, 0x0) 1.929506655s ago: executing program 5 (id=6678): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 1.924001201s ago: executing program 6 (id=6679): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 1.915473858s ago: executing program 7 (id=6680): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) readv(r1, &(0x7f0000003a00)=[{&(0x7f0000003b00)=""/4096, 0x1000}], 0x1) 1.836020008s ago: executing program 1 (id=6681): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x40, 0x1, 0x3}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.602386783s ago: executing program 1 (id=6682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 1.581836286s ago: executing program 7 (id=6683): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.5336723s ago: executing program 6 (id=6684): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x1c2, &(0x7f0000003140)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb0800460001b4000000020011"], 0x0) 1.446829641s ago: executing program 1 (id=6685): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}}, 0xb8}}, 0x0) 1.388197463s ago: executing program 7 (id=6686): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x14885, 0x10000, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.2895642s ago: executing program 6 (id=6687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.284162097s ago: executing program 1 (id=6688): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) 1.223318279s ago: executing program 7 (id=6689): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4400330040000000080211000000080211000001505050505050"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 1.061274066s ago: executing program 1 (id=6691): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1.012709622s ago: executing program 7 (id=6692): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) 652.395206ms ago: executing program 2 (id=6694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x82, 0x2}]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) 487.22792ms ago: executing program 2 (id=6695): pipe(&(0x7f0000000100)={0xffffffffffffffff}) utimensat(r0, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 348.191579ms ago: executing program 2 (id=6696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xfffffffffffffd2a, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @restrict={0xb}]}}, 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 224.576385ms ago: executing program 2 (id=6697): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/228, 0xe4}], 0x1) 164.07776ms ago: executing program 2 (id=6698): r0 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x3, 0x10100, 0xeffffffe}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x2def, 0x8d9a, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=6699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0xff, 0x7, 0x7, 0x0, 0x6, 0x0, 0x3, 0x4, 0xfb, 0xd, 0x5, 0x0, 0x0, 0x2, 0xa, 0x7, 0x5, 0x2f, 0x0, '\x00', 0x1, 0x8}) kernel console output (not intermixed with test programs): r dequeue, screwing up backlog [ 584.509479][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 584.521635][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.590551][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.037232][T19205] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.049499][T19205] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.058917][T19205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.069752][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.078915][T19205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.087806][T19205] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.635443][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.729728][T19232] input: syz0 as /devices/virtual/input/input84 [ 585.788694][T19210] chnl_net:caif_netlink_parms(): no params data found [ 585.958030][T19210] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.965633][T19210] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.974588][T19210] bridge_slave_0: entered allmulticast mode [ 585.983573][T19210] bridge_slave_0: entered promiscuous mode [ 585.997005][T19210] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.006022][T19210] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.014579][T19210] bridge_slave_1: entered allmulticast mode [ 586.024030][T19210] bridge_slave_1: entered promiscuous mode [ 586.095628][T19210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.109984][T19210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.246837][T19210] team0: Port device team_slave_0 added [ 586.267965][T19210] team0: Port device team_slave_1 added [ 586.371896][T19210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.392381][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.444007][T19210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.496507][T19210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.504684][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.564225][T19210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.941555][T19210] hsr_slave_0: entered promiscuous mode [ 586.996783][T19210] hsr_slave_1: entered promiscuous mode [ 587.014340][T19210] debugfs: 'hsr0' already exists in 'hsr' [ 587.035635][T19210] Cannot create hsr debugfs directory [ 587.149366][T19205] Bluetooth: hci3: command tx timeout [ 587.789733][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 587.809320][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 587.849956][T19210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 587.882885][T19210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 587.906092][T19210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 587.933544][T19210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 587.988466][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 587.996225][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.017589][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 588.080460][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.087688][T19210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.112830][ T24] usb 3-1: config 0 descriptor?? [ 588.153542][T19210] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.191674][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.199606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.236253][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.244388][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.455259][T19210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.573179][ T24] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 588.748355][T19210] veth0_vlan: entered promiscuous mode [ 588.782388][T19210] veth1_vlan: entered promiscuous mode [ 588.806495][ T24] usb 3-1: USB disconnect, device number 51 [ 589.077576][T19210] veth0_macvtap: entered promiscuous mode [ 589.120111][T19210] veth1_macvtap: entered promiscuous mode [ 589.144811][T19210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.177493][T19307] kvm: user requested TSC rate below hardware speed [ 589.184112][T19210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.230073][T19205] Bluetooth: hci3: command tx timeout [ 589.236011][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.241778][T19309] netlink: 'syz.4.5783': attribute type 11 has an invalid length. [ 589.247646][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.283816][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.294448][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.610221][T17399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.621372][T17399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.677794][T17399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.687572][T17399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.754115][T16808] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 589.790661][ T24] net_ratelimit: 4 callbacks suppressed [ 589.790685][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.829303][T14622] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 589.911216][T16808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.939768][T16808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.960257][T16808] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.989681][T16808] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.998939][T16808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.010372][T14622] usb 5-1: Using ep0 maxpacket: 16 [ 590.019962][T16808] usb 2-1: config 0 descriptor?? [ 590.022147][T14622] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 590.058623][T14622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.068762][T14622] usb 5-1: Product: syz [ 590.078183][T14622] usb 5-1: Manufacturer: syz [ 590.084670][T14622] usb 5-1: SerialNumber: syz [ 590.093453][T14622] usb 5-1: config 0 descriptor?? [ 590.103737][T14622] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 590.114266][T14622] usb 5-1: Detected FT232H [ 590.271770][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.332768][T14622] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 590.451120][T16808] plantronics 0003:047F:FFFF.0047: reserved main item tag 0xd [ 590.485765][T16808] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 590.744787][T16808] usb 2-1: USB disconnect, device number 55 [ 590.775250][T14622] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 590.832565][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.020712][ T5898] usb 5-1: USB disconnect, device number 62 [ 591.039736][ T5898] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 591.070893][ T5898] ftdi_sio 5-1:0.0: device disconnected [ 591.153661][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.309944][T19205] Bluetooth: hci3: command tx timeout [ 591.506122][ T30] audit: type=1326 audit(1769793893.353:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19345 comm="syz.1.5797" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 591.530157][ T5898] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 591.689332][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 591.699705][ T5898] usb 3-1: config 0 has no interfaces? [ 591.721544][ T5898] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 591.731914][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.752937][ T5898] usb 3-1: config 0 descriptor?? [ 591.869518][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.978965][T16808] usb 3-1: USB disconnect, device number 52 [ 592.529506][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 592.724642][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 592.735170][ T10] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 592.759658][ T10] usb 6-1: config 0 has no interface number 0 [ 592.778650][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 592.802204][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.819784][ T10] usb 6-1: Product: syz [ 592.828375][ T10] usb 6-1: Manufacturer: syz [ 592.840200][ T10] usb 6-1: SerialNumber: syz [ 592.858351][ T10] usb 6-1: config 0 descriptor?? [ 592.909318][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.092327][ T10] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 593.104338][ T10] usb 6-1: USB disconnect, device number 2 [ 593.392589][T19205] Bluetooth: hci3: command tx timeout [ 593.954103][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.193014][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.651665][T19431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5833'. [ 594.890588][T19437] syzkaller1: entered promiscuous mode [ 594.914831][T19437] syzkaller1: entered allmulticast mode [ 594.997526][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.029544][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.038200][T17401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.089121][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 596.255896][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 596.269844][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 596.306431][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.315415][ T10] usb 2-1: Product: syz [ 596.337786][ T10] usb 2-1: Manufacturer: syz [ 596.347573][ T10] usb 2-1: SerialNumber: syz [ 596.358335][ T10] usb 2-1: config 0 descriptor?? [ 596.395598][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 596.512383][T19485] pim6reg1: entered promiscuous mode [ 596.518384][T19485] pim6reg1: entered allmulticast mode [ 596.571770][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.600329][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.631731][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.645013][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.655204][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.665065][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.674769][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 596.689816][T19487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.217271][ T10] gspca_sq930x: ucbus_write failed -71 [ 597.224048][ T10] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 597.259563][ T10] usb 2-1: USB disconnect, device number 56 [ 598.085590][T19514] binder: 19511:19514 ioctl c0306201 80000540 returned -14 [ 598.882126][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 599.049237][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 599.061329][ T10] usb 6-1: config 0 has no interfaces? [ 599.066904][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 599.100567][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.123331][ T10] usb 6-1: config 0 descriptor?? [ 599.382384][ T5834] usb 6-1: USB disconnect, device number 3 [ 599.394866][T19551] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.403299][T19551] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.582243][T19551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.624451][T19551] hsr0: left promiscuous mode [ 599.760187][ T5834] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 599.811937][T17399] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.848080][T17399] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.870978][T17399] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.914205][T17399] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.920984][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.935157][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.001561][ T5834] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 600.011526][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.029910][ T5834] usb 2-1: config 0 descriptor?? [ 600.190305][ T24] net_ratelimit: 1196 callbacks suppressed [ 600.190340][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.205929][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.216605][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.226523][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.269825][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.447218][ T5834] cp2112 0003:10C4:EA90.0048: unknown main item tag 0x0 [ 600.481566][ T5834] cp2112 0003:10C4:EA90.0048: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 600.645696][ T5834] cp2112 0003:10C4:EA90.0048: Part Number: 0x82 Device Version: 0xFE [ 601.049625][ T5834] cp2112 0003:10C4:EA90.0048: error setting SMBus config [ 601.083730][ T5834] cp2112 0003:10C4:EA90.0048: probe with driver cp2112 failed with error -71 [ 601.154645][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.157378][ T5834] usb 2-1: USB disconnect, device number 57 [ 601.320490][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.485262][ T5834] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 601.506697][ T5834] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 601.830480][T19586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5895'. [ 602.048397][T19592] batadv_slave_1: entered promiscuous mode [ 602.070599][T19590] batadv_slave_1: left promiscuous mode [ 602.269806][ T5898] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 602.352983][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.461544][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 602.480749][ T5898] usb 2-1: config 0 has no interfaces? [ 602.489826][ T5898] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 602.519136][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.580049][ T5898] usb 2-1: config 0 descriptor?? [ 602.859137][ T5834] usb 2-1: USB disconnect, device number 58 [ 603.021237][T19615] netlink: 'syz.0.5906': attribute type 4 has an invalid length. [ 603.045698][T19615] netlink: 3581 bytes leftover after parsing attributes in process `syz.0.5906'. [ 603.316172][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.391034][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.605914][T19629] loop9: detected capacity change from 0 to 7 [ 603.646609][T19629] Dev loop9: unable to read RDB block 7 [ 603.663330][T19629] loop9: unable to read partition table [ 603.679296][T19629] loop9: partition table beyond EOD, truncated [ 603.685826][T19629] loop_reread_partitions: partition scan of loop9 (­) failed (rc=-5) [ 604.859177][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 605.019195][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 605.041643][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 605.050477][ T10] usb 3-1: config 0 has no interface number 0 [ 605.073957][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 605.099367][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.118570][ T10] usb 3-1: Product: syz [ 605.132582][ T10] usb 3-1: Manufacturer: syz [ 605.147685][ T10] usb 3-1: SerialNumber: syz [ 605.168616][ T10] usb 3-1: config 0 descriptor?? [ 605.188507][T19679] loop3: detected capacity change from 0 to 7 [ 605.190563][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 605.221563][T19679] Dev loop3: unable to read RDB block 7 [ 605.227392][T19679] loop3: AHDI p3 p4 [ 605.246679][T19679] loop3: partition table partially beyond EOD, truncated [ 605.275696][T19679] loop3: p3 start 1702000233 is beyond EOD, truncated [ 605.414118][T19683] veth0_to_bridge: entered promiscuous mode [ 605.421841][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 605.469601][ T5834] net_ratelimit: 1 callbacks suppressed [ 605.469623][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.484951][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 605.504715][T19682] veth0_to_bridge: left promiscuous mode [ 605.634416][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.645950][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.655295][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.951005][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 605.961728][ T10] usb 3-1: USB disconnect, device number 53 [ 605.978413][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 606.026421][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 606.077509][ T10] quatech2 3-1:0.51: device disconnected [ 606.270606][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.365868][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.750553][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.149374][ T5834] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 607.309926][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 607.353359][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.383418][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.409237][ T5834] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 607.422948][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.451334][ T5834] usb 2-1: config 0 descriptor?? [ 607.473209][ T5834] hub 2-1:0.0: USB hub found [ 607.680391][ T5834] hub 2-1:0.0: 1 port detected [ 607.742953][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5950'. [ 607.789945][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.099711][ T5834] usb 2-1: USB disconnect, device number 59 [ 608.829963][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.333543][T19742] CUSE: info not properly terminated [ 609.341926][T19741] syzkaller1: entered promiscuous mode [ 609.361512][T19741] syzkaller1: entered allmulticast mode [ 609.390249][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.029565][ T129] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 610.219425][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 610.232635][ T129] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 610.253214][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.265174][ T129] usb 6-1: Product: syz [ 610.270185][ T129] usb 6-1: Manufacturer: syz [ 610.275263][ T129] usb 6-1: SerialNumber: syz [ 610.286731][ T129] usb 6-1: config 0 descriptor?? [ 610.299833][ T129] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 610.732199][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 610.922171][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 610.940225][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 610.958970][ T10] usb 3-1: config 0 has no interface number 0 [ 610.975751][ T129] gspca_stk1135: reg_w 0x3 err -71 [ 610.995889][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 611.009152][ T5834] net_ratelimit: 1 callbacks suppressed [ 611.009179][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.010202][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.056361][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 611.088821][ T129] gspca_stk1135: Sensor write failed [ 611.094777][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 611.116541][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.129047][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 611.142535][ T129] gspca_stk1135: Sensor write failed [ 611.148143][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.185991][ T129] gspca_stk1135: Sensor read failed [ 611.194638][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 611.219319][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.226181][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.249480][ T129] gspca_stk1135: Sensor read failed [ 611.254759][ T129] gspca_stk1135: Detected sensor type unknown (0x0) [ 611.271164][ T10] usb 3-1: config 0 descriptor?? [ 611.289107][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.296043][ T129] gspca_stk1135: Sensor read failed [ 611.324427][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 611.335161][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.359517][ T129] gspca_stk1135: Sensor read failed [ 611.366258][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.373973][ T129] gspca_stk1135: Sensor write failed [ 611.380271][ T129] gspca_stk1135: serial bus timeout: status=0x00 [ 611.387431][ T129] gspca_stk1135: Sensor write failed [ 611.390224][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.401468][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.409802][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.420020][ T5834] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 611.425987][ T129] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 611.430521][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.445809][ T129] usb 6-1: USB disconnect, device number 4 [ 611.537951][ T10] usb 3-1: USB disconnect, device number 54 [ 611.544737][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 611.578255][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 611.602450][ T5834] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 611.616401][ T5834] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 611.641383][ T5834] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 611.659143][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.677653][ T5834] usb 2-1: Product: syz [ 611.687547][ T5834] usb 2-1: Manufacturer: syz [ 611.699511][ T5834] usb 2-1: SerialNumber: syz [ 611.715814][ T5834] usb 2-1: config 0 descriptor?? [ 611.910190][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 611.963871][T19791] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 611.983732][T19791] xt_TPROXY: Can be used only with -p tcp or -p udp [ 612.081333][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 612.098204][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 612.117151][ T10] usb 3-1: config 0 has no interface number 0 [ 612.127572][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.158731][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 612.184628][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.196828][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.211676][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 612.222443][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.243650][ T10] usb 3-1: config 0 descriptor?? [ 612.261006][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 612.335448][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5991'. [ 612.346029][T19801] netlink: 'syz.4.5991': attribute type 1 has an invalid length. [ 612.357505][T19801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5991'. [ 612.371454][ T5834] mos7840 2-1:0.0: required endpoints missing [ 612.384560][ T5834] usb 2-1: USB disconnect, device number 60 [ 612.440831][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.469708][T19762] ldusb: No device or device unplugged -19 [ 612.489978][ T10] usb 3-1: USB disconnect, device number 55 [ 612.510375][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 612.519454][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.309359][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 613.565110][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.590316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.731316][ T5898] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 614.889267][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.894608][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.945183][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.987064][ T5898] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 615.014569][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.056921][ T5898] usb 3-1: config 0 descriptor?? [ 615.389992][T19864] syz.0.6019: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.428808][T19864] CPU: 1 UID: 0 PID: 19864 Comm: syz.0.6019 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.428842][T19864] Tainted: [L]=SOFTLOCKUP [ 615.428850][T19864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 615.428862][T19864] Call Trace: [ 615.428871][T19864] [ 615.428880][T19864] dump_stack_lvl+0xe8/0x150 [ 615.428914][T19864] warn_alloc+0x249/0x340 [ 615.428938][T19864] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.428972][T19864] ? __pfx_warn_alloc+0x10/0x10 [ 615.429004][T19864] ? kasan_save_track+0x4f/0x80 [ 615.429020][T19864] ? kasan_save_track+0x3e/0x80 [ 615.429034][T19864] ? __kasan_kmalloc+0x93/0xb0 [ 615.429050][T19864] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 615.429067][T19864] ? xskq_create+0x56/0x170 [ 615.429084][T19864] ? xsk_setsockopt+0x54c/0x990 [ 615.429107][T19864] ? do_sock_setsockopt+0x17c/0x1b0 [ 615.429128][T19864] ? __ia32_sys_setsockopt+0x13d/0x1b0 [ 615.429147][T19864] ? __do_fast_syscall_32+0x1d2/0x540 [ 615.429171][T19864] __vmalloc_node_range_noprof+0x132/0x1730 [ 615.429223][T19864] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.429250][T19864] ? __kasan_kmalloc+0x93/0xb0 [ 615.429274][T19864] vmalloc_user_noprof+0xad/0xe0 [ 615.429295][T19864] ? xskq_create+0xbf/0x170 [ 615.429313][T19864] xskq_create+0xbf/0x170 [ 615.429333][T19864] xsk_init_queue+0xad/0x110 [ 615.429362][T19864] xsk_setsockopt+0x54c/0x990 [ 615.429393][T19864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 615.429420][T19864] ? __pfx_aa_sk_perm+0x10/0x10 [ 615.429446][T19864] ? aa_sock_opt_perm+0xff/0x1a0 [ 615.429471][T19864] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 615.429490][T19864] ? __pfx_xsk_setsockopt+0x10/0x10 [ 615.429518][T19864] do_sock_setsockopt+0x17c/0x1b0 [ 615.429546][T19864] __ia32_sys_setsockopt+0x13d/0x1b0 [ 615.429577][T19864] __do_fast_syscall_32+0x1d2/0x540 [ 615.429598][T19864] ? do_fast_syscall_32+0x33/0x70 [ 615.429619][T19864] ? irqentry_exit+0x10e/0x620 [ 615.429644][T19864] do_fast_syscall_32+0x33/0x70 [ 615.429665][T19864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.429686][T19864] RIP: 0023:0xf740d539 [ 615.429705][T19864] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 615.429721][T19864] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 615.429743][T19864] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 615.429756][T19864] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 615.429768][T19864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.429792][T19864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 615.429805][T19864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.429835][T19864] [ 615.489702][ T129] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 615.609330][T19864] Mem-Info: [ 615.640404][ T5898] cm6533_jd 0003:0D8C:0022.004A: unknown main item tag 0x0 [ 615.741286][T19864] active_anon:6687 inactive_anon:0 isolated_anon:0 [ 615.741286][T19864] active_file:996 inactive_file:3863 isolated_file:0 [ 615.741286][T19864] unevictable:768 dirty:390 writeback:0 [ 615.741286][T19864] slab_reclaimable:11136 slab_unreclaimable:109206 [ 615.741286][T19864] mapped:30347 shmem:1356 pagetables:1603 [ 615.741286][T19864] sec_pagetables:0 bounce:0 [ 615.741286][T19864] kernel_misc_reclaimable:0 [ 615.741286][T19864] free:1342004 free_pcp:20727 free_cma:0 [ 615.801570][T19864] Node 0 active_anon:26748kB inactive_anon:0kB active_file:3844kB inactive_file:15320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121268kB dirty:1552kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12892kB pagetables:6292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 615.835055][ T5898] cm6533_jd 0003:0D8C:0022.004A: unknown main item tag 0x0 [ 615.873780][ T5898] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.004A/input/input86 [ 615.894289][T19864] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 615.942663][ T5898] cm6533_jd 0003:0D8C:0022.004A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 616.002233][ T5898] usb 3-1: USB disconnect, device number 56 [ 616.008353][T19864] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.029699][ T7427] udevd[7427]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 616.047176][T19864] lowmem_reserve[]: [ 616.056302][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 616.084577][ T129] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.099126][T19864] 0 2494 2495 2495 2495 [ 616.104284][T19864] Node 0 DMA32 free:1467964kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26748kB inactive_anon:0kB active_file:3844kB inactive_file:15420kB unevictable:1536kB writepending:1552kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:47924kB local_pcp:20472kB free_cma:0kB [ 616.128335][ T129] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.149171][T19864] lowmem_reserve[]: 0 0 1 1 1 [ 616.160217][ T129] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 616.167228][T19864] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.202121][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.204816][ T129] usb 5-1: config 0 descriptor?? [ 616.216759][T19864] lowmem_reserve[]: 0 0 0 0 0 [ 616.223777][T19864] Node 1 Normal free:3886740kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:132kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35204kB local_pcp:23400kB free_cma:0kB [ 616.259903][T19864] lowmem_reserve[]: 0 0 [ 616.279778][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 616.289241][T19864] 0 0 0 [ 616.295875][T19864] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 616.332839][T19864] Node 0 DMA32: 4731*4kB (UME) 3898*8kB (UME) 2424*16kB (UM) 680*32kB (UME) 405*64kB (UME) 308*128kB (UME) 225*256kB (UME) 87*512kB (UME) 48*1024kB (UME) 9*2048kB (M) 274*4096kB (UM) = 1468028kB [ 616.353458][T19864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 616.368170][T19864] Node 1 Normal: 4*4kB (ME) 8*8kB (UME) 10*16kB (UME) 57*32kB (UME) 74*64kB (UME) 20*128kB (UME) 3*256kB (UME) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (UM) = 3886992kB [ 616.387717][T19864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.398797][T19864] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 616.409872][T19864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.420666][T19864] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 616.431004][T19864] 6551 total pagecache pages [ 616.435706][T19864] 0 pages in swap cache [ 616.440381][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 616.449574][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.451359][T19875] fido_id[19875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 616.461517][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.485517][T19864] Free swap = 124996kB [ 616.504862][T19864] Total swap = 124996kB [ 616.512656][T19864] 2097051 pages RAM [ 616.516805][T19864] 0 pages HighMem/MovableOnly [ 616.530648][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 616.558012][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 616.578562][T19864] 426622 pages reserved [ 616.585883][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.596233][T19864] 0 pages cma reserved [ 616.621386][ T10] usb 6-1: config 0 descriptor?? [ 616.734358][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.759885][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.781495][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x6 [ 616.792457][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.802956][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.810985][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.818622][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.826197][ T129] hid-rmi 0003:06CB:81A7.004B: unknown main item tag 0x0 [ 616.834143][ T129] hid-rmi 0003:06CB:81A7.004B: unbalanced collection at end of report description [ 616.861824][ T129] hid-rmi 0003:06CB:81A7.004B: parse failed [ 616.868298][ T129] hid-rmi 0003:06CB:81A7.004B: probe with driver hid-rmi failed with error -22 [ 616.994585][ T24] net_ratelimit: 2 callbacks suppressed [ 616.994616][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.055415][ T24] usb 5-1: USB disconnect, device number 63 [ 617.056108][ T10] hid (null): unknown global tag 0xd [ 617.076105][ T10] hid (null): unknown global tag 0xe [ 617.082575][ T10] hid (null): report_id 11427 is invalid [ 617.088742][ T10] hid (null): unknown global tag 0xe [ 617.094499][ T10] hid (null): invalid report_count 546983283 [ 617.102529][ T10] hid (null): bogus close delimiter [ 617.107832][ T10] hid (null): invalid report_size 3640 [ 617.118553][ T10] cougar 0003:060B:500A.004C: unexpected long global item [ 617.126939][ T10] cougar 0003:060B:500A.004C: parse failed [ 617.133164][ T10] cougar 0003:060B:500A.004C: probe with driver cougar failed with error -22 [ 617.152285][ T3014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.161566][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.170246][T17399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.178706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.188302][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.333597][T16808] usb 6-1: USB disconnect, device number 5 [ 617.767111][ T129] IPVS: starting estimator thread 0... [ 617.849159][T16808] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 617.879355][T19898] IPVS: using max 28 ests per chain, 67200 per kthread [ 618.042120][T16808] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 618.069186][T16808] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.099078][T16808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.132530][T16808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.292269][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.373466][T16808] usb 3-1: usb_control_msg returned -32 [ 618.401027][T16808] usbtmc 3-1:16.0: can't read capabilities [ 618.670223][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.679379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.775493][T19914] input: syz0 as /devices/virtual/input/input87 [ 619.032571][ T10] usb 3-1: USB disconnect, device number 57 [ 619.279141][ T129] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 619.309880][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.499438][ T129] usb 2-1: Using ep0 maxpacket: 16 [ 619.516848][ T129] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 619.553571][ T129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 619.567623][ T129] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 619.587463][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.615062][ T129] usb 2-1: config 0 descriptor?? [ 619.900423][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'. [ 619.949833][T19943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6050'. [ 619.976426][ T5919] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 620.081607][ T129] hid (null): global environment stack underflow [ 620.119178][ T129] hid (null): unknown global tag 0xd [ 620.124716][ T129] hid (null): unknown global tag 0x86 [ 620.162518][ T129] hid (null): unknown global tag 0x90 [ 620.179137][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 620.179370][ T129] hid (null): report_id 4131346620 is invalid [ 620.198028][ T129] hid (null): unknown global tag 0xe [ 620.200020][ T5919] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 620.204555][ T129] hid (null): unknown global tag 0xd [ 620.220997][ T129] hid (null): global environment stack overflow [ 620.228975][ T129] hid (null): unknown global tag 0xe [ 620.242021][ T129] hid (null): unknown global tag 0xd [ 620.261939][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.287315][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.301307][ T5919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.303920][ T129] usb 2-1: USB disconnect, device number 61 [ 620.339900][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.369236][ T5919] usb 5-1: Product: syz [ 620.388301][ T5919] usb 5-1: Manufacturer: syz [ 620.416485][ T5919] usb 5-1: SerialNumber: syz [ 620.679461][T16808] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 620.842455][T16808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.856216][T16808] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 620.866317][T16808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.876340][ T5919] usb 5-1: 0:2 : does not exist [ 620.883222][T16808] usb 3-1: config 0 descriptor?? [ 621.298718][T16808] keytouch 0003:0926:3333.004E: fixing up Keytouch IEC report descriptor [ 621.316891][T16808] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004E/input/input88 [ 621.435621][T16808] keytouch 0003:0926:3333.004E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 621.495397][ T5919] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 621.585252][ T5919] usb 5-1: USB disconnect, device number 64 [ 621.615346][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.912226][ T129] usb 3-1: USB disconnect, device number 58 [ 622.444686][T16808] net_ratelimit: 4 callbacks suppressed [ 622.444709][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.529891][T19958] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 622.761560][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.770568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.926867][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.935832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.017088][T19974] geneve2: entered promiscuous mode [ 623.038249][ T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 52944 - 0 [ 623.080531][ T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 52944 - 0 [ 623.114062][ T60] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 52944 - 0 [ 623.166297][ T60] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 52944 - 0 [ 623.471047][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.954802][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6070'. [ 624.012127][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6070'. [ 624.511989][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.769324][T16808] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 624.845588][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.854368][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.931031][T16808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.945250][T16808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 624.963042][T16808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.980281][T16808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.997982][T16808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.008955][T16808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.016511][T20000] syzkaller1: entered promiscuous mode [ 625.035034][T16808] usb 3-1: config 0 descriptor?? [ 625.042771][T19996] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 625.051474][T20000] syzkaller1: entered allmulticast mode [ 625.438507][T20011] syzkaller1: entered promiscuous mode [ 625.465690][T20011] syzkaller1: entered allmulticast mode [ 625.492436][T16808] hid_parser_main: 83 callbacks suppressed [ 625.492463][T16808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 625.507146][T16808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 625.516483][T16808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 625.524650][T16808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 625.533004][T16808] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 625.551372][T16808] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 625.564171][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.799765][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.879774][T16808] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 626.039234][T16808] usb 6-1: Using ep0 maxpacket: 16 [ 626.048383][T16808] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 626.057138][T16808] usb 6-1: config 0 has no interface number 0 [ 626.067113][T16808] usb 6-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 626.077282][T16808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.086359][T16808] usb 6-1: Product: syz [ 626.090860][T16808] usb 6-1: Manufacturer: syz [ 626.095580][T16808] usb 6-1: SerialNumber: syz [ 626.103509][T16808] usb 6-1: config 0 descriptor?? [ 626.118379][T16808] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 626.149814][ T129] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 626.331415][ T129] usb 2-1: Using ep0 maxpacket: 8 [ 626.345415][ T129] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 626.364604][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 626.395587][ T129] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.411618][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.427834][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.443311][ T129] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 626.459459][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 626.486004][ T129] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.519960][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.549963][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.563852][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'. [ 626.576501][ T129] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 626.584281][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6090'. [ 626.595300][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 626.607491][ T129] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.622284][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.634169][ T129] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 626.654069][ T129] usb 2-1: string descriptor 0 read error: -22 [ 626.661639][ T129] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 626.671939][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.731158][ T129] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 626.937673][T16808] gspca_stv06xx: I2C: Read error writing address: -71 [ 626.965183][T16808] usb 6-1: USB disconnect, device number 6 [ 627.034925][ T129] usb 2-1: USB disconnect, device number 62 [ 627.550898][T14622] usb 3-1: USB disconnect, device number 59 [ 627.632303][T16808] net_ratelimit: 7 callbacks suppressed [ 627.632331][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.919144][T14622] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 628.019115][T16808] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 628.081194][T14622] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 628.111829][T14622] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 628.137785][T14622] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 628.154998][T14622] usb 6-1: config 220 has no interface number 2 [ 628.162904][T14622] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 628.176658][T14622] usb 6-1: config 220 interface 0 has no altsetting 0 [ 628.184576][T14622] usb 6-1: config 220 interface 76 has no altsetting 0 [ 628.192458][T14622] usb 6-1: config 220 interface 1 has no altsetting 0 [ 628.195190][T16808] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 628.204149][T14622] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 628.210265][T16808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.222707][T14622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.232577][T16808] usb 5-1: config 0 descriptor?? [ 628.242189][T20085] syzkaller1: entered promiscuous mode [ 628.248081][T14622] usb 6-1: Product: syz [ 628.251893][T20085] syzkaller1: entered allmulticast mode [ 628.262043][T14622] usb 6-1: Manufacturer: syz [ 628.283623][T14622] usb 6-1: SerialNumber: syz [ 628.351824][T20089] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6115'. [ 628.484035][T16808] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 628.547801][T14622] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 628.561647][T14622] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 628.571048][T14622] uvcvideo 6-1:220.0: No valid video chain found. [ 628.577927][T14622] usb 6-1: selecting invalid altsetting 0 [ 628.594916][T14622] usb 6-1: selecting invalid altsetting 0 [ 628.606261][T14622] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 628.620397][T14622] usb 6-1: USB disconnect, device number 7 [ 628.670301][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.678728][T17401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.687770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.694170][T16808] [drm:udl_init] *ERROR* Selecting channel failed [ 628.703181][ T5834] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 628.745893][T16808] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 628.758104][T16808] [drm] Initialized udl on minor 2 [ 628.765418][T16808] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 628.776024][T16808] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 628.784787][ T5919] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 628.799323][T16808] usb 5-1: USB disconnect, device number 65 [ 628.805906][ T5919] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 628.830037][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.838960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.872032][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 628.880201][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.892219][ T5834] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 628.909392][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.922066][ T5834] usb 2-1: config 0 descriptor?? [ 629.354965][ T5834] mcp2221 0003:04D8:00DD.0050: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 629.392047][T20100] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6120'. [ 629.517889][T20100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.545812][T20100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.556768][ T5834] usb 2-1: USB disconnect, device number 63 [ 629.571532][T20100] bond0 (unregistering): (slave bond1): Releasing backup interface [ 629.613662][T20100] bond0 (unregistering): Released all slaves [ 629.730034][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.859427][T20110] input: syz1 as /devices/virtual/input/input90 [ 630.751521][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.806264][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.869379][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.074131][ T5198] Dev loop6: unable to read RDB block 1 [ 632.089400][ T5198] loop6: unable to read partition table [ 632.095435][ T5198] loop6: partition table beyond EOD, truncated [ 632.176261][T20184] input: syz1 as /devices/virtual/input/input91 [ 632.829448][T16808] net_ratelimit: 1 callbacks suppressed [ 632.829471][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.900143][T20197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6148'. [ 633.069614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.871827][T16808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.289176][T16808] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 634.429695][T17401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.438359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.474289][T16808] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.484718][T16808] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 634.489413][T14622] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 634.494895][T16808] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.524168][T16808] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 634.536901][T16808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 634.555567][T16808] usb 6-1: Product: syz [ 634.565762][T16808] usb 6-1: Manufacturer: syz [ 634.575934][T16808] usb 6-1: SerialNumber: syz [ 634.679194][T14622] usb 3-1: Using ep0 maxpacket: 8 [ 634.693672][T14622] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 634.717132][T14622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 634.739095][T14622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.759424][T14622] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.805806][T14622] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 634.832378][T14622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.834429][T16808] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 634.909659][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.918301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.926487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.073436][T17413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.083116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.102127][ T129] usb 6-1: USB disconnect, device number 8 [ 635.109425][T14622] usb 3-1: GET_CAPABILITIES returned 0 [ 635.122759][ T129] usblp0: removed [ 635.128587][T14622] usbtmc 3-1:16.0: can't read capabilities [ 635.211831][T16808] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 635.320616][ T5919] usb 3-1: USB disconnect, device number 60 [ 635.374321][T16808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.386496][T16808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.397970][T16808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 635.412343][T16808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 635.422317][T16808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.433408][T16808] usb 5-1: config 0 descriptor?? [ 635.675212][T20264] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 635.928240][T16808] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 636.009261][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 636.183430][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.195917][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.206013][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 636.225438][ T5834] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 636.235807][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.264560][ T5834] usb 6-1: config 0 descriptor?? [ 636.710649][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.739068][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.757241][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.777274][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.786430][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.794509][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.802846][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.811239][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.818954][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.826907][ T5834] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 636.857473][ T5834] plantronics 0003:047F:FFFF.0052: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 637.226748][ T24] usb 6-1: USB disconnect, device number 9 [ 637.972963][T20307] kernel profiling enabled (shift: 63) [ 637.980890][T20307] profiling shift: 63 too large [ 638.001433][T16808] usb 5-1: USB disconnect, device number 66 [ 638.029742][ T5919] net_ratelimit: 2 callbacks suppressed [ 638.029763][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.113092][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.122261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.139139][ T129] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 638.311609][ T129] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 638.327870][ T129] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 638.358881][ T129] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 638.386254][ T129] usb 6-1: config 0 interface 0 has no altsetting 0 [ 638.400042][ T129] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 638.410002][ T129] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 638.419407][ T129] usb 6-1: Product: syz [ 638.424017][ T129] usb 6-1: Manufacturer: syz [ 638.430183][ T129] usb 6-1: SerialNumber: syz [ 638.447790][ T129] usb 6-1: config 0 descriptor?? [ 638.455786][T20306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 638.474044][ T129] usb 6-1: selecting invalid altsetting 0 [ 638.702188][T20306] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 638.757853][T16808] usb 6-1: USB disconnect, device number 10 [ 638.757906][ C0] usb 6-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 638.773631][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 639.013441][T20326] kvm: requested 162590 ns i8254 timer period limited to 200000 ns [ 639.071480][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.180147][T20330] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 639.710896][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 639.889984][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 639.897664][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.923110][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 639.944174][ T24] usb 2-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67 [ 639.955828][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.964546][ T24] usb 2-1: Product: syz [ 639.969487][ T24] usb 2-1: Manufacturer: syz [ 639.974205][ T24] usb 2-1: SerialNumber: syz [ 639.990841][ T24] usb 2-1: config 0 descriptor?? [ 640.022669][ T24] gspca_main: spca501-2.14.0 probing 0733:0402 [ 640.111133][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.196468][T17401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.206165][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.392838][T20369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.822785][T20377] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 640.833802][T17403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.889277][T20377] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 641.036358][ T24] gspca_spca501: reg write: error -71 [ 641.043758][ T24] spca501 2-1:0.0: Reg write failed for 0x00,0xce,0x04 [ 641.058069][ T24] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 641.087704][ T24] usb 2-1: USB disconnect, device number 64 [ 641.347011][T14622] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 641.479842][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 641.670829][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 641.681299][ T24] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 641.704418][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 641.720264][ T24] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 641.732907][ T24] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 641.777756][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.800449][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 641.816857][ T24] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 641.828264][ T24] usb 5-1: Product: syz [ 641.832800][ T24] usb 5-1: Manufacturer: syz [ 641.837856][ T24] usb 5-1: SerialNumber: syz [ 641.858441][ T24] usb 5-1: config 0 descriptor?? [ 641.867065][ T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 641.893118][ T24] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 641.931993][T14622] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 642.099346][T14622] usb 2-1: Using ep0 maxpacket: 32 [ 642.130542][T14622] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 642.138853][T14622] usb 2-1: config 0 has no interface number 0 [ 642.145293][T14622] usb 2-1: config 0 interface 184 has no altsetting 0 [ 642.161826][T14622] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 642.171148][T14622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.180574][T20389] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 642.180793][ T129] usb 5-1: USB disconnect, device number 67 [ 642.188539][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 642.204036][T14622] usb 2-1: Product: syz [ 642.212100][T14622] usb 2-1: Manufacturer: syz [ 642.217210][T14622] usb 2-1: SerialNumber: syz [ 642.246278][ T129] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 642.254559][T14622] usb 2-1: config 0 descriptor?? [ 642.272159][T14622] smsc75xx v1.0.0 [ 642.891142][T14622] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 642.910033][T14622] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 643.142240][T14622] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 643.156747][T14622] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 643.283859][ T5919] net_ratelimit: 3 callbacks suppressed [ 643.283881][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.298619][T14622] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 643.315120][T14622] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 643.389330][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 643.530055][T14622] usb 2-1: USB disconnect, device number 65 [ 643.574596][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 643.618861][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.650824][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.661440][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 643.692564][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 643.702434][ T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 643.711396][ T24] usb 5-1: Manufacturer: syz [ 643.720512][ T24] usb 5-1: config 0 descriptor?? [ 643.874004][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.882847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.059283][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 644.152797][T20440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6245'. [ 644.166550][ T24] hid_parser_main: 6 callbacks suppressed [ 644.166577][ T24] appleir 0003:05AC:8243.0054: unknown main item tag 0x0 [ 644.219794][ T24] appleir 0003:05AC:8243.0054: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 644.350973][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.510269][ T24] usb 5-1: USB disconnect, device number 68 [ 644.877884][T20456] gretap0: entered promiscuous mode [ 644.898286][T20456] macsec1: entered promiscuous mode [ 644.922625][T20456] macsec1: entered allmulticast mode [ 644.949410][T20456] gretap0: entered allmulticast mode [ 645.389452][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.950357][T17403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.958869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.429971][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.591320][T17403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.600268][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.806203][T20502] input: syz1 as /devices/virtual/input/input93 [ 647.209237][ T129] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 647.229211][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 647.359318][ T129] usb 6-1: Using ep0 maxpacket: 8 [ 647.371072][ T129] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 647.395837][ T129] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.429555][ T129] pvrusb2: Hardware description: Terratec Grabster AV400 [ 647.437712][ T129] pvrusb2: ********** [ 647.442852][ T129] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 647.460377][ T129] pvrusb2: Important functionality might not be entirely working. [ 647.479199][ T129] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 647.492179][ T129] pvrusb2: ********** [ 647.631923][ T2344] pvrusb2: Invalid write control endpoint [ 647.754242][ T2344] pvrusb2: Invalid write control endpoint [ 647.760766][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 647.776454][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 647.790667][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 647.810432][ T2344] pvrusb2: Device being rendered inoperable [ 647.822162][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 647.837084][T20507] pvrusb2: Attempted to execute control transfer when device not ok [ 647.854756][T20523] batadv_slave_0: entered promiscuous mode [ 647.856082][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 647.881564][T20521] batadv_slave_0: left promiscuous mode [ 647.883900][ T10] usb 6-1: USB disconnect, device number 11 [ 647.927075][ T2344] pvrusb2: Attached sub-driver cx25840 [ 647.935266][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.946146][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 648.545355][ T24] net_ratelimit: 1 callbacks suppressed [ 648.545376][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.730220][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6293'. [ 648.754629][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6293'. [ 648.809137][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 648.981789][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.003137][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.027023][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.059662][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.073480][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.090683][ T129] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 649.100941][ T24] usb 6-1: config 0 descriptor?? [ 649.210326][T20561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6300'. [ 649.251256][ T129] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.269938][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 649.302581][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 649.319571][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.336886][ T129] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.347154][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.360914][ T129] usb 2-1: config 0 descriptor?? [ 649.439162][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 649.535453][ T24] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 649.560813][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.602023][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 649.619513][ T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 649.629645][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 649.646351][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.656278][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.666253][ T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 649.677719][ T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 649.692005][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.701659][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 649.711383][ T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 649.720896][ T10] usb 3-1: Product: syz [ 649.725631][ T10] usb 3-1: Manufacturer: syz [ 649.749345][ T10] usb 3-1: SerialNumber: syz [ 649.758014][ T10] usb 3-1: config 0 descriptor?? [ 649.766221][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 649.793691][ T129] plantronics 0003:047F:FFFF.0056: ignoring exceeding usage max [ 649.833150][T14622] usb 6-1: USB disconnect, device number 12 [ 649.841362][ T10] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 649.854005][ T129] plantronics 0003:047F:FFFF.0056: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 650.024793][ T129] usb 3-1: USB disconnect, device number 61 [ 650.037129][ T129] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 650.038754][ T24] usb 2-1: USB disconnect, device number 66 [ 650.590051][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.036786][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6312'. [ 651.529140][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 651.680456][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.710527][T17410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.719450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.741058][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 651.782908][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 651.850515][ T24] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 651.912005][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.953730][ T24] usb 6-1: Product: syz [ 651.958607][ T24] usb 6-1: Manufacturer: syz [ 651.993038][ T24] usb 6-1: SerialNumber: syz [ 652.037656][ T24] usb 6-1: config 0 descriptor?? [ 652.069684][T20595] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 652.077141][T20595] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 652.315768][T20595] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 652.340970][T20595] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 652.350843][T17403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.360471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.591829][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6327'. [ 652.603100][T20627] netlink: 'syz.1.6327': attribute type 5 has an invalid length. [ 652.615106][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6327'. [ 652.643825][T20628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6327'. [ 652.656686][T17403] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.656929][T20628] netlink: 'syz.1.6327': attribute type 5 has an invalid length. [ 652.674438][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6327'. [ 652.674766][T17403] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.703223][T17403] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.713221][T17403] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.773024][T20632] syzkaller1: entered promiscuous mode [ 652.779652][T20632] syzkaller1: entered allmulticast mode [ 652.795905][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 652.994482][ T24] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 653.034579][ T24] usb 6-1: USB disconnect, device number 13 [ 653.449210][T14622] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 653.601314][T14622] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 653.818622][ T24] net_ratelimit: 59 callbacks suppressed [ 653.818645][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.848844][T14622] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 653.869124][T14622] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 653.907806][T14622] usb 2-1: config 0 interface 0 has no altsetting 0 [ 654.069436][T14622] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 654.078572][T14622] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 654.116208][T14622] usb 2-1: Product: syz [ 654.122380][T14622] usb 2-1: Manufacturer: syz [ 654.127285][T14622] usb 2-1: SerialNumber: syz [ 654.152805][T14622] usb 2-1: config 0 descriptor?? [ 654.161032][T20646] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 654.194516][T14622] usb 2-1: selecting invalid altsetting 0 [ 654.255875][T20661] netlink: 'syz.4.6343': attribute type 30 has an invalid length. [ 654.591398][ T24] usb 2-1: USB disconnect, device number 67 [ 654.591570][ C0] usb 2-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 654.606879][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 654.623730][T20646] usb 2-1: cannot submit urb 0, error -19: no device [ 654.645521][T20646] usb 2-1: cannot submit urb 0, error -19: no device [ 654.829530][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.390935][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.399813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.871568][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.911997][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.414702][T17403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.566546][T17403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.630061][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.705552][T17403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.795800][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6376'. [ 657.835162][T20739] netlink: 'syz.2.6376': attribute type 7 has an invalid length. [ 657.871033][T20739] netlink: 'syz.2.6376': attribute type 8 has an invalid length. [ 657.916399][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6376'. [ 657.984374][T17403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.036425][T20739] gretap0: entered promiscuous mode [ 658.044880][T20739] gretap0: left promiscuous mode [ 658.061662][T20742] netlink: 'syz.5.6378': attribute type 34 has an invalid length. [ 658.100428][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 658.121035][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 658.145000][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 658.169501][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 658.183792][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 658.596388][T20760] netlink: 'syz.1.6384': attribute type 1 has an invalid length. [ 658.670582][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.725383][T17403] bridge_slave_1: left allmulticast mode [ 658.734971][T20768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.745458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.764101][T17403] bridge_slave_1: left promiscuous mode [ 658.787282][T17403] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.830505][T17403] bridge_slave_0: left allmulticast mode [ 658.836406][T17403] bridge_slave_0: left promiscuous mode [ 658.849513][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.032581][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 659.071967][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.139424][T20779] input: syz1 as /devices/virtual/input/input94 [ 659.146267][T20779] input: failed to attach handler leds to device input94, error: -6 [ 659.252634][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6393'. [ 659.390572][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.722806][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.029604][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.119110][T17403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.138336][T17403] bond_slave_0: left promiscuous mode [ 660.163202][T17403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.180305][T17403] bond_slave_1: left promiscuous mode [ 660.193660][T17403] bond0 (unregistering): Released all slaves [ 660.269964][ T5842] Bluetooth: hci0: command tx timeout [ 660.423403][T17403] tipc: Disabling bearer [ 660.440863][T17403] tipc: Left network mode [ 660.552810][T20802] Non-string source [ 660.760681][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.923676][T20750] chnl_net:caif_netlink_parms(): no params data found [ 661.769212][T17403] hsr_slave_0: left promiscuous mode [ 661.791188][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.819055][T17403] hsr_slave_1: left promiscuous mode [ 661.837233][T17403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.866361][T17403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.902121][T17403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.929636][T17403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.967404][T17403] batman_adv: batadv0: Interface deactivated: macsec1 [ 661.986778][T17403] batman_adv: batadv0: Removing interface: macsec1 [ 662.054343][T17403] team_slave_0: left promiscuous mode [ 662.061913][T17403] team_slave_1: left promiscuous mode [ 662.090905][T17403] batadv_slave_0: left promiscuous mode [ 662.102477][T17403] veth1_macvtap: left promiscuous mode [ 662.112598][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.122868][T17403] veth0_macvtap: left promiscuous mode [ 662.128701][T17403] veth1_vlan: left promiscuous mode [ 662.139943][T17403] veth0_vlan: left promiscuous mode [ 662.310090][T20849] cifs: Unknown parameter 'fd' [ 662.349293][ T5842] Bluetooth: hci0: command tx timeout [ 662.684243][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6415'. [ 662.714645][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6412'. [ 662.724941][T20847] netlink: 'syz.5.6412': attribute type 5 has an invalid length. [ 662.733466][T20847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6412'. [ 662.833601][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.232456][T17403] team0 (unregistering): Port device team_slave_1 removed [ 663.282138][T17403] team0 (unregistering): Port device team_slave_0 removed [ 663.869477][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.982186][T20847] geneve2: entered promiscuous mode [ 664.047580][T20847] geneve2: entered allmulticast mode [ 664.152793][T17410] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 664.186991][T17410] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 664.231961][T20750] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.268120][T20750] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.289585][T20750] bridge_slave_0: entered allmulticast mode [ 664.333662][T20750] bridge_slave_0: entered promiscuous mode [ 664.383535][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.402325][T20750] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.431061][T20750] bridge_slave_1: entered allmulticast mode [ 664.432071][ T5842] Bluetooth: hci0: command tx timeout [ 664.461080][T20750] bridge_slave_1: entered promiscuous mode [ 664.533841][T17410] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 664.677770][T17401] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 664.877931][T20750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.911855][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.937965][T20750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.124697][T20859] netlink: 'syz.2.6416': attribute type 4 has an invalid length. [ 665.145618][T17403] IPVS: stop unused estimator thread 0... [ 665.154005][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.169958][T19205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 665.179505][T20859] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6416'. [ 665.192759][T19205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 665.205470][T19205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 665.214392][T19205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 665.238251][T19205] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.259081][T20883] netlink: 'syz.1.6422': attribute type 1 has an invalid length. [ 665.267145][T20883] netlink: 'syz.1.6422': attribute type 6 has an invalid length. [ 665.333553][T20883] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6422'. [ 665.343671][T20750] team0: Port device team_slave_0 added [ 665.347063][T20750] team0: Port device team_slave_1 added [ 665.450265][T20750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.457941][T20750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.485810][T20750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.598586][T20750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.606826][T20750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.635543][T20750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.915316][T20750] hsr_slave_0: entered promiscuous mode [ 665.925228][T20750] hsr_slave_1: entered promiscuous mode [ 665.949273][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.513113][T19205] Bluetooth: hci0: command tx timeout [ 666.545658][T20884] chnl_net:caif_netlink_parms(): no params data found [ 666.989267][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.010105][T20750] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 667.052493][T20884] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.085336][T20884] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.109366][T20884] bridge_slave_0: entered allmulticast mode [ 667.129695][T20884] bridge_slave_0: entered promiscuous mode [ 667.211989][T20750] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 667.259246][T20884] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.267078][T20884] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.299411][T20884] bridge_slave_1: entered allmulticast mode [ 667.313151][T19205] Bluetooth: hci2: command tx timeout [ 667.332038][T20884] bridge_slave_1: entered promiscuous mode [ 667.369935][T20750] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 667.441823][T20750] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.521972][T20884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.588579][T20884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.927742][T20884] team0: Port device team_slave_0 added [ 668.021585][T20884] team0: Port device team_slave_1 added [ 668.033911][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.190702][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.206497][T20884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.254643][T20884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.288229][T20884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.320806][T20956] input: syz0 as /devices/virtual/input/input95 [ 668.341147][T20884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.348239][T20884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.388510][T20884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.602885][T20884] hsr_slave_0: entered promiscuous mode [ 668.611754][T20884] hsr_slave_1: entered promiscuous mode [ 668.622612][T20884] debugfs: 'hsr0' already exists in 'hsr' [ 668.628608][T20884] Cannot create hsr debugfs directory [ 668.777837][T20750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.849111][ T5834] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 668.878431][T20750] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.924035][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.932137][T17401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.019190][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 669.038241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.046398][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.070569][ T5834] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 669.095950][ T5834] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 669.105758][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.149659][ T5834] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 669.158177][ T5834] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 669.185089][ T5834] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 669.213213][ T5834] usb 3-1: config 0 has no interface number 0 [ 669.221368][T20980] netlink: 'syz.1.6447': attribute type 12 has an invalid length. [ 669.222467][ T5834] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 669.243185][T20980] netlink: 'syz.1.6447': attribute type 29 has an invalid length. [ 669.243214][T20980] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6447'. [ 669.314513][ T5834] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 669.352602][T20884] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.360146][ T5834] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 669.383352][ T5834] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.384653][T20884] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.407876][T19205] Bluetooth: hci2: command tx timeout [ 669.413712][ T5834] usb 3-1: config 0 interface 125 has no altsetting 0 [ 669.435210][ T5834] usb 3-1: config 0 interface 125 has no altsetting 2 [ 669.458784][T20884] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.464585][ T5834] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 669.484463][T20884] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 669.486878][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.501917][ T5834] usb 3-1: Product: syz [ 669.529673][ T5834] usb 3-1: Manufacturer: syz [ 669.531464][T20750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.535640][ T5834] usb 3-1: SerialNumber: syz [ 669.557446][ T5834] usb 3-1: config 0 descriptor?? [ 669.594517][ T5834] usb 3-1: selecting invalid altsetting 2 [ 669.630073][T14622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.772969][T20750] veth0_vlan: entered promiscuous mode [ 669.857993][T20750] veth1_vlan: entered promiscuous mode [ 669.974690][T20884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.026202][T20750] veth0_macvtap: entered promiscuous mode [ 670.057676][T20884] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.081371][T20750] veth1_macvtap: entered promiscuous mode [ 670.104528][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.112162][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.115088][T21000] input: syz0 as /devices/virtual/input/input96 [ 670.121935][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.159901][T17410] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.167321][T17410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.314477][T20750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.375087][T20750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.401838][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6454'. [ 670.447104][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.464182][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.504483][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.533153][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.704246][T20884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.776911][T17410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.787747][T17410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.848500][ T5834] usb 3-1: USB disconnect, device number 62 [ 670.860905][ T129] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 670.897239][T17410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.907720][T17410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.918450][T20884] veth0_vlan: entered promiscuous mode [ 670.952932][T20884] veth1_vlan: entered promiscuous mode [ 671.019739][T21015] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6458'. [ 671.021388][ T129] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 671.054495][T20884] veth0_macvtap: entered promiscuous mode [ 671.061335][ T129] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 671.093174][T20884] veth1_macvtap: entered promiscuous mode [ 671.102341][ T129] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 671.135322][ T129] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 671.162655][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.171378][T20884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.178841][ T129] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 671.224039][ T129] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 671.235555][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.247175][T20884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.254737][ T129] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 671.279145][T20151] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.290010][ T129] usb 6-1: Product: syz [ 671.294330][ T129] usb 6-1: Manufacturer: syz [ 671.303009][T20151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.326317][ T129] cdc_wdm 6-1:1.0: skipping garbage [ 671.333442][T20151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.343429][ T129] cdc_wdm 6-1:1.0: skipping garbage [ 671.353197][ T129] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 671.360455][T20151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.370371][ T129] cdc_wdm 6-1:1.0: Unknown control protocol [ 671.470975][T19205] Bluetooth: hci2: command tx timeout [ 671.529864][ T5834] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 671.664618][T17405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.694167][T17405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.722225][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 671.734684][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.753589][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.764028][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 671.775180][T17405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.785578][T17405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.801655][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.822293][ T5834] usb 2-1: config 0 descriptor?? [ 672.195085][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.267518][ T5919] usb 6-1: USB disconnect, device number 14 [ 672.285922][ T5834] savu 0003:1E7D:2D5A.0057: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 672.463586][ T39] usb 2-1: USB disconnect, device number 68 [ 672.994686][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6465'. [ 673.006227][T21041] netlink: 'syz.7.6465': attribute type 5 has an invalid length. [ 673.014787][T21041] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6465'. [ 673.040132][T21041] geneve0: entered promiscuous mode [ 673.045627][T21041] geneve0: entered allmulticast mode [ 673.232460][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.565316][T19205] Bluetooth: hci2: command tx timeout [ 674.270644][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.280035][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.309802][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.696551][ T5834] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 675.751747][T21110] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6490'. [ 675.870516][T21115] netlink: 50 bytes leftover after parsing attributes in process `syz.7.6492'. [ 675.885629][ T5834] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 675.900779][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.918850][ T5834] usb 3-1: config 0 descriptor?? [ 675.942852][ T5834] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 676.039811][ T30] audit: type=1326 audit(1769793977.893:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="syz.1.6493" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf743d539 code=0x0 [ 676.349451][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.359141][ T5834] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 676.799361][ T5834] gspca_cpia1: usb_control_msg 02, error -71 [ 676.819175][ T5834] gspca_cpia1: usb_control_msg 05, error -71 [ 676.839118][ T5834] cpia1 3-1:0.0: unexpected systemstate: 00 [ 676.857351][ T5834] usb 3-1: USB disconnect, device number 63 [ 677.309508][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.391943][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.499924][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.898055][T21199] sctp: [Deprecated]: syz.5.6528 (pid 21199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 678.898055][T21199] Use struct sctp_sack_info instead [ 678.969692][ T129] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 679.159302][ T129] usb 3-1: Using ep0 maxpacket: 8 [ 679.181660][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.194901][ T129] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 679.230189][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.241211][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.282864][ T129] usb 3-1: config 0 descriptor?? [ 679.331753][ T129] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 679.468722][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6534'. [ 679.550011][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.359824][ T129] gspca_vc032x: reg_r err -71 [ 680.365201][ T129] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 680.379311][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.406375][ T129] usb 3-1: USB disconnect, device number 64 [ 680.589859][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.280322][T21271] syzkaller1: entered promiscuous mode [ 681.285973][T21271] syzkaller1: entered allmulticast mode [ 681.632696][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.264506][T21305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.274471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.669972][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.796603][T21327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.222410][ T129] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 683.365416][T21340] binder: 21339:21340 ioctl c0306201 800003c0 returned -14 [ 683.389595][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.404541][ T129] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 683.426619][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.466586][ T129] usb 2-1: Product: syz [ 683.496003][ T129] usb 2-1: Manufacturer: syz [ 683.507949][ T129] usb 2-1: SerialNumber: syz [ 683.532567][ T129] usb 2-1: config 0 descriptor?? [ 683.715718][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.904332][ T5919] usb 2-1: USB disconnect, device number 69 [ 684.704325][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6576'. [ 684.751974][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.052025][T21390] loop2: detected capacity change from 0 to 7 [ 685.065782][ T6037] Dev loop2: unable to read RDB block 7 [ 685.073625][ T6037] loop2: unable to read partition table [ 685.093321][ T6037] loop2: partition table beyond EOD, truncated [ 685.120099][T21390] Dev loop2: unable to read RDB block 7 [ 685.133464][T21390] loop2: unable to read partition table [ 685.159717][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.167670][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.169560][T21390] loop2: partition table beyond EOD, truncated [ 685.186538][T21390] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 685.273419][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.299989][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.307897][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.323002][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.361089][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.380291][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.409095][ T5919] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 685.424065][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.440745][ T5834] hid-generic 00A0:0006:0003.0058: unknown main item tag 0x0 [ 685.479798][ T5834] hid-generic 00A0:0006:0003.0058: hidraw0: HID v0.05 Device [syz1] on syz0 [ 685.571416][ T5919] usb 8-1: config 0 has no interfaces? [ 685.579878][ T5919] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 685.637856][ T5919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.660554][ T5919] usb 8-1: config 0 descriptor?? [ 685.789866][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.905246][ T5919] usb 8-1: USB disconnect, device number 2 [ 686.279665][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.289510][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.429716][ T129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.493187][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6593'. [ 686.551748][T21417] macvlan3: entered promiscuous mode [ 686.557591][T21417] bond0: entered promiscuous mode [ 686.580585][T21417] bond_slave_0: entered promiscuous mode [ 686.629636][T21417] bond_slave_1: entered promiscuous mode [ 686.662358][T21417] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 686.830424][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.113278][ T30] audit: type=1326 audit(1769793988.963:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21432 comm="syz.7.6601" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x0 [ 687.717133][T21447] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 687.869691][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.887382][ T30] audit: type=1326 audit(1769793989.733:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21451 comm="syz.1.6609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 687.913089][ T5898] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 687.923361][ T30] audit: type=1326 audit(1769793989.733:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21451 comm="syz.1.6609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 687.948932][ T30] audit: type=1326 audit(1769793989.773:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21451 comm="syz.1.6609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 687.976636][ T30] audit: type=1326 audit(1769793989.773:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21451 comm="syz.1.6609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 688.000581][ T30] audit: type=1326 audit(1769793989.773:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21451 comm="syz.1.6609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x7ffc0000 [ 688.102158][ T5898] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 688.113301][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.125731][ T5898] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 688.135823][ T5898] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 688.145423][ T5898] usb 6-1: Manufacturer: syz [ 688.163268][ T5898] usb 6-1: config 0 descriptor?? [ 688.273260][ T5898] rc_core: IR keymap rc-hauppauge not found [ 688.281456][ T5898] Registered IR keymap rc-empty [ 688.290465][ T5898] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 688.304535][ T5898] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input97 [ 688.482693][ T5898] usb 6-1: USB disconnect, device number 15 [ 688.838648][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.910124][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.469559][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.523693][T21491] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6625'. [ 689.900317][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 689.960081][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.059972][ T24] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 690.083538][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.103621][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.115352][ T5834] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 690.139694][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.165493][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.190741][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.217373][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.231017][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.241979][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.254802][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.290483][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.314403][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.329531][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.349378][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.358503][ T5834] usb 2-1: config 1 has no interface number 0 [ 690.366022][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.385291][ T5834] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.404807][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.418076][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.436646][ T5834] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 690.455440][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.462933][ T5834] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 690.476549][ T5834] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.487562][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.506295][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.515796][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.527555][ T5834] usb 2-1: Product: syz [ 690.532187][ T5834] usb 2-1: Manufacturer: syz [ 690.538180][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.545232][ T5834] usb 2-1: SerialNumber: syz [ 690.552444][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.565150][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.568689][T21504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 690.576647][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.592247][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 690.601812][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 690.614778][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.625456][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 690.635797][ T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 690.669327][ T24] usb 6-1: Product: syz [ 690.674875][ T24] usb 6-1: Manufacturer: syz [ 690.689758][ T24] usb 6-1: SerialNumber: syz [ 690.701856][ T24] usb 6-1: config 0 descriptor?? [ 690.715716][ T24] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 690.729118][ T10] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 690.901082][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.929093][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 690.949321][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 690.962642][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 690.986098][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.000296][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.007183][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.037807][ T10] usb 3-1: Product: syz [ 691.043573][T21504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 691.059544][ T10] usb 3-1: Manufacturer: syz [ 691.064568][ T10] usb 3-1: SerialNumber: syz [ 691.070649][ T24] usb 6-1: USB disconnect, device number 16 [ 691.081693][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 691.083193][T21517] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 691.116050][ T10] cdc_mbim 3-1:1.0: skipping garbage [ 691.330853][T21517] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 691.381287][T21517] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 691.472336][ T5834] cdc_ncm 2-1:1.1: bind() failure [ 691.722469][ T5898] usb 2-1: USB disconnect, device number 70 [ 692.033370][T21517] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 692.040305][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.049463][T21517] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 692.074081][ T10] cdc_mbim 3-1:1.0: setting tx_max = 48 [ 692.087407][ T10] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 692.103246][ T10] wwan wwan0: port wwan0mbim0 attached [ 692.122659][ T10] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, aa:c4:80:f4:62:57 [ 692.398195][ T10] usb 3-1: USB disconnect, device number 65 [ 692.438687][ T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 692.509648][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.070071][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.252605][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 694.089125][ T5834] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 694.109824][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.249069][ T5834] usb 8-1: Using ep0 maxpacket: 8 [ 694.281338][ T5834] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 694.303893][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.322227][ T5834] usb 8-1: Product: syz [ 694.330284][ T5834] usb 8-1: Manufacturer: syz [ 694.336377][ T5834] usb 8-1: SerialNumber: syz [ 694.357996][ T5834] usb 8-1: config 0 descriptor?? [ 694.589743][ T5834] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 695.154872][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.189580][ T5898] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 695.351993][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 695.375544][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 695.390781][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.405710][ T5834] usb write operation failed. (-71) [ 695.424584][ T5834] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 695.437251][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 695.460853][ T5834] dvbdev: DVB: registering new adapter (Terratec H7) [ 695.488382][ T5834] usb 8-1: media controller created [ 695.488589][ T5898] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 695.508708][ T5834] usb read operation failed. (-71) [ 695.509261][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.521037][ T5834] usb write operation failed. (-71) [ 695.549719][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.565944][T21624] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6670'. [ 695.576077][ T5898] usb 3-1: config 0 descriptor?? [ 695.577041][ T5834] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 695.592341][T21607] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 695.604847][ T5834] usb 8-1: USB disconnect, device number 3 [ 695.731298][T21597] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6659'. [ 696.018223][ T5898] plantronics 0003:047F:FFFF.0059: reserved main item tag 0xd [ 696.066912][ T5898] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 696.190176][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.230566][ T5898] IPVS: starting estimator thread 0... [ 696.257252][T21639] fuse: Invalid uid '00000000000000001025' [ 696.370009][T21637] IPVS: using max 28 ests per chain, 67200 per kthread [ 696.481597][ T39] usb 3-1: USB disconnect, device number 66 [ 696.511247][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.534228][T21645] loop9: detected capacity change from 0 to 7 [ 696.560051][ T7426] Dev loop9: unable to read RDB block 7 [ 696.565900][ T7426] loop9: unable to read partition table [ 696.572624][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.606240][ T7426] loop9: partition table beyond EOD, truncated [ 696.634533][T21645] Dev loop9: unable to read RDB block 7 [ 696.645221][T21645] loop9: unable to read partition table [ 696.663988][T21645] loop9: partition table beyond EOD, truncated [ 696.673923][T21645] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 696.765729][T21655] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6682'. [ 696.819097][ T5834] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 696.848193][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6683'. [ 696.858566][T21657] netlink: 'syz.7.6683': attribute type 20 has an invalid length. [ 696.868273][T21657] netlink: 'syz.7.6683': attribute type 21 has an invalid length. [ 696.946265][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6685'. [ 696.999055][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 697.015296][ T5834] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 697.034410][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.076959][ T5834] usb 6-1: Product: syz [ 697.091098][ T5834] usb 6-1: Manufacturer: syz [ 697.119045][ T5834] usb 6-1: SerialNumber: syz [ 697.135298][ T5834] usb 6-1: config 0 descriptor?? [ 697.229820][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.530968][T21679] kvm: kvm [21678]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x8001 [ 697.569829][ T39] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 697.593253][ T5834] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 697.614543][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 697.625676][ T5834] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 697.634838][ T5834] usb 6-1: media controller created [ 697.672969][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.705304][T21681] syzkaller1: entered promiscuous mode [ 697.711342][T21681] syzkaller1: entered allmulticast mode [ 697.749256][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 697.757667][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 697.768214][ T39] usb 2-1: config 4 interface 0 has no altsetting 0 [ 697.779752][ T39] usb 2-1: string descriptor 0 read error: -22 [ 697.786145][ T39] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 697.801708][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.837717][ T39] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 697.867264][ T39] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 697.893263][ T39] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 697.906322][ T39] usb 2-1: media controller created [ 697.928529][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.229858][ T5834] zl10353_read_register: readreg error (reg=127, ret==0) [ 698.239441][ T5834] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 698.264130][ T5834] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 698.275325][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.279225][T21675] ------------[ cut here ]------------ [ 698.289557][T21675] usb 6-1: BOGUS control dir, pipe 80001180 doesn't match bRequestType c0 [ 698.298226][T21675] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.1.6691/21675 [ 698.309244][T21675] Modules linked in: [ 698.314892][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.1.6691 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 698.327188][T21675] Tainted: [L]=SOFTLOCKUP [ 698.329165][ T5834] usb 6-1: USB disconnect, device number 17 [ 698.334111][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 698.348390][T21675] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 698.356162][T21675] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 698.377390][T21675] RSP: 0018:ffffc90011b4f748 EFLAGS: 00010246 [ 698.385338][T21675] RAX: 0000000000000000 RBX: ffff88803413ee00 RCX: 0000000080001180 [ 698.394593][T21675] RDX: ffff88807d485dc0 RSI: ffffffff8c5dcd60 RDI: ffffffff8ffc2fa0 [ 698.403162][T21675] RBP: 1ffff1100d100cbc R08: 00000000000000c0 R09: 0000000000000000 [ 698.411926][T21675] R10: ffffc90011b4f840 R11: fffff52002369f14 R12: ffff888068e73100 [ 698.420439][T21675] R13: ffff8880688065e0 R14: 0000000080001180 R15: ffff88807d485dc0 [ 698.428540][T21675] FS: 0000000000000000(0000) GS:ffff8881256f5000(0063) knlGS:00000000f5466b40 [ 698.437824][T21675] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 698.447469][T21675] CR2: 0000000034c1cff8 CR3: 0000000059e2e000 CR4: 00000000003526f0 [ 698.459101][T21675] Call Trace: [ 698.462479][T21675] [ 698.465451][T21675] ? __init_swait_queue_head+0xa9/0x150 [ 698.471617][T21675] usb_start_wait_urb+0x12b/0x510 [ 698.476723][T21675] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 698.482376][T21675] usb_control_msg+0x232/0x3e0 [ 698.487402][T21675] dtv5100_i2c_msg+0x231/0x2f0 [ 698.492504][T21675] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 698.497617][T21675] __i2c_transfer+0x79a/0x1ee0 [ 698.502776][T21675] ? i2c_transfer+0xc8/0x2d0 [ 698.507433][T21675] i2c_transfer+0x1cc/0x2d0 [ 698.512196][T21675] i2cdev_ioctl_rdwr+0x460/0x740 [ 698.517323][T21675] compat_i2cdev_ioctl+0x59f/0x5c0 [ 698.523069][T21675] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 698.529423][T21675] ? __fget_files+0x3a0/0x420 [ 698.534161][T21675] ? __fget_files+0x2a/0x420 [ 698.538805][T21675] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 698.544564][T21675] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 698.550268][T21675] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 698.556790][T21675] ? kmem_cache_free+0x195/0x610 [ 698.562509][T21675] ? __se_sys_futex_time32+0x3ab/0x440 [ 698.568439][T21675] ? rcu_is_watching+0x15/0xb0 [ 698.573417][T21675] __do_fast_syscall_32+0x1d2/0x540 [ 698.578930][T21675] ? lockdep_hardirqs_on+0x7a/0x110 [ 698.584315][T21675] ? do_fast_syscall_32+0x33/0x70 [ 698.590387][T21675] ? asm_int80_emulation+0x1a/0x20 [ 698.595868][T21675] ? do_int80_emulation+0x20e/0x400 [ 698.601476][T21675] do_fast_syscall_32+0x33/0x70 [ 698.606611][T21675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.613211][T21675] RIP: 0023:0xf743d539 [ 698.617518][T21675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 698.639057][T21675] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 698.647845][T21675] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 698.656669][T21675] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.665173][T21675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.673478][T21675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 698.681683][T21675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.690357][T21675] [ 698.693515][T21675] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 698.700988][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.1.6691 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.712141][T21675] Tainted: [L]=SOFTLOCKUP [ 698.716656][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 698.726988][T21675] Call Trace: [ 698.730472][T21675] [ 698.733454][T21675] vpanic+0x1e0/0x670 [ 698.737823][T21675] panic+0xc5/0xd0 [ 698.741788][T21675] ? __pfx_panic+0x10/0x10 [ 698.746413][T21675] __warn+0x315/0x4a0 [ 698.750760][T21675] ? usb_submit_urb+0x1052/0x18b0 [ 698.755985][T21675] ? usb_submit_urb+0x1052/0x18b0 [ 698.761129][T21675] __report_bug+0x29a/0x540 [ 698.765910][T21675] ? unwind_get_return_address+0x4d/0x90 [ 698.771839][T21675] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 698.778646][T21675] ? usb_submit_urb+0x1052/0x18b0 [ 698.783880][T21675] ? __pfx___report_bug+0x10/0x10 [ 698.788919][T21675] ? __pfx_stack_trace_save+0x10/0x10 [ 698.794305][T21675] ? stack_depot_save_flags+0x33/0x810 [ 698.799867][T21675] report_bug_entry+0x19a/0x290 [ 698.804743][T21675] ? usb_submit_urb+0x1114/0x18b0 [ 698.809944][T21675] ? usb_submit_urb+0x1119/0x18b0 [ 698.815145][T21675] handle_bug+0xca/0x200 [ 698.819398][T21675] exc_invalid_op+0x1a/0x50 [ 698.823908][T21675] asm_exc_invalid_op+0x1a/0x20 [ 698.828777][T21675] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 698.834609][T21675] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 698.855224][T21675] RSP: 0018:ffffc90011b4f748 EFLAGS: 00010246 [ 698.861655][T21675] RAX: 0000000000000000 RBX: ffff88803413ee00 RCX: 0000000080001180 [ 698.870220][T21675] RDX: ffff88807d485dc0 RSI: ffffffff8c5dcd60 RDI: ffffffff8ffc2fa0 [ 698.878388][T21675] RBP: 1ffff1100d100cbc R08: 00000000000000c0 R09: 0000000000000000 [ 698.886385][T21675] R10: ffffc90011b4f840 R11: fffff52002369f14 R12: ffff888068e73100 [ 698.894396][T21675] R13: ffff8880688065e0 R14: 0000000080001180 R15: ffff88807d485dc0 [ 698.902500][T21675] ? usb_submit_urb+0x10a3/0x18b0 [ 698.907568][T21675] ? __init_swait_queue_head+0xa9/0x150 [ 698.913304][T21675] usb_start_wait_urb+0x12b/0x510 [ 698.918349][T21675] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 698.923921][T21675] usb_control_msg+0x232/0x3e0 [ 698.929308][T21675] dtv5100_i2c_msg+0x231/0x2f0 [ 698.934098][T21675] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 698.939169][T21675] __i2c_transfer+0x79a/0x1ee0 [ 698.944180][T21675] ? i2c_transfer+0xc8/0x2d0 [ 698.949044][T21675] i2c_transfer+0x1cc/0x2d0 [ 698.953582][T21675] i2cdev_ioctl_rdwr+0x460/0x740 [ 698.958578][T21675] compat_i2cdev_ioctl+0x59f/0x5c0 [ 698.963719][T21675] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 698.969524][T21675] ? __fget_files+0x3a0/0x420 [ 698.974527][T21675] ? __fget_files+0x2a/0x420 [ 698.979323][T21675] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 698.984885][T21675] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 698.990622][T21675] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 698.996699][T21675] ? kmem_cache_free+0x195/0x610 [ 699.001735][T21675] ? __se_sys_futex_time32+0x3ab/0x440 [ 699.007429][T21675] ? rcu_is_watching+0x15/0xb0 [ 699.012336][T21675] __do_fast_syscall_32+0x1d2/0x540 [ 699.017645][T21675] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.023110][T21675] ? do_fast_syscall_32+0x33/0x70 [ 699.028305][T21675] ? asm_int80_emulation+0x1a/0x20 [ 699.033864][T21675] ? do_int80_emulation+0x20e/0x400 [ 699.039544][T21675] do_fast_syscall_32+0x33/0x70 [ 699.044608][T21675] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.051400][T21675] RIP: 0023:0xf743d539 [ 699.056012][T21675] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 699.077399][T21675] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 699.085923][T21675] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 699.094099][T21675] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.102274][T21675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.110289][T21675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.118288][T21675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.126552][T21675] [ 699.130398][T21675] Kernel Offset: disabled [ 699.134739][T21675] Rebooting in 86400 seconds..