last executing test programs: 11m21.6232619s ago: executing program 3 (id=2531): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x15, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 11m21.316363363s ago: executing program 3 (id=2537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x3, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 11m21.244814208s ago: executing program 3 (id=2540): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000003c0)={0x2, 0x0, 0x1e, 0xe0, 0x0, 0xfffffff6, 0x0}) 11m21.138072285s ago: executing program 3 (id=2543): r0 = io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1046}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 11m20.968989329s ago: executing program 3 (id=2548): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)) 11m20.848291785s ago: executing program 3 (id=2550): r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0xfffffffffffffffe, 0x120001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000c40)={0x0, 0x5, 0x7ff, 0x3, 0x6, 0x5, &(0x7f0000000b40)="7754ba6d2262"}) 11m5.755916743s ago: executing program 32 (id=2550): r0 = syz_open_dev$usbfs(&(0x7f0000000b00), 0xfffffffffffffffe, 0x120001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000c40)={0x0, 0x5, 0x7ff, 0x3, 0x6, 0x5, &(0x7f0000000b40)="7754ba6d2262"}) 6.439548619s ago: executing program 5 (id=12467): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) 6.292723881s ago: executing program 5 (id=12468): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x38}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) 6.221545127s ago: executing program 5 (id=12470): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 6.062332353s ago: executing program 5 (id=12471): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0xb0, {0xb0, 0x7, "bd7029438ac774ac0f82bc52b439cc38e48e7f3686c7c6abe19f2ae2e482f6d94fb37999b94d7c0014048d1de6eb80a9b49dacc89e8100bf6a8ea461de42efbe90efb74e8e0bb6fdab94be618cf5f69ae00572640016917a88c715289d325d8c5be6c011ad27d2280ca09e7dd9b1db0ea7762aacd0a5c8e166b60e09bffeea7a71ae7896063648196f4ac249e9e6b2cdd97c373f75598e686e340bf3117a3244af1870c01c5e1acef04a0e74008d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x3, 0x4, 0x21185045, 0x4}) 5.292542316s ago: executing program 2 (id=12480): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x22840) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x7) 5.274527305s ago: executing program 2 (id=12482): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 5.1997258s ago: executing program 2 (id=12483): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000880)={0xc0, 0x9}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 3.42112854s ago: executing program 0 (id=12497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x345, 0x0, 0x2000000}]}) 3.308659989s ago: executing program 0 (id=12499): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) 3.16477759s ago: executing program 5 (id=12500): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 2.99947978s ago: executing program 0 (id=12501): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x1036, r0, 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2.95218314s ago: executing program 0 (id=12502): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.881994746s ago: executing program 0 (id=12503): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.682954013s ago: executing program 0 (id=12506): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) 2.184605945s ago: executing program 4 (id=12510): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) read(r2, &(0x7f0000000140)=""/252, 0xfc) 2.107100737s ago: executing program 2 (id=12511): syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) unshare(0x6020400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 2.059123677s ago: executing program 4 (id=12512): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1.985923395s ago: executing program 2 (id=12514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.570935159s ago: executing program 4 (id=12515): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.023102095s ago: executing program 1 (id=12516): fsopen(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x0) 926.183012ms ago: executing program 4 (id=12517): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1}) 879.646369ms ago: executing program 1 (id=12518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0x1ff}]}) 857.215437ms ago: executing program 4 (id=12519): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 737.49206ms ago: executing program 4 (id=12520): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 709.649282ms ago: executing program 1 (id=12521): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 646.498789ms ago: executing program 1 (id=12522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18}], 0x1, 0x40800) 645.042068ms ago: executing program 1 (id=12523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x1, r2}) 597.208582ms ago: executing program 5 (id=12524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, &(0x7f0000000080)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000040)=@assoc_value={r2, 0xa27}, &(0x7f0000000080)=0x8) 420.212255ms ago: executing program 1 (id=12525): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 2 (id=12526): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): rted: state = BACKUP, mcast_ifn = macvlan1, syncid = 2, id = 0 [ 780.513191][ T5697] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 780.676238][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.688715][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.700412][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 780.715313][ T5697] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.726062][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.746573][ T5697] usb 6-1: config 0 descriptor?? [ 781.221717][ T5697] plantronics 0003:047F:FFFF.00AB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 781.464971][ T5697] usb 6-1: USB disconnect, device number 108 [ 782.103188][ T5697] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 782.284259][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 782.296615][ T5697] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 782.319846][ T5697] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 782.336841][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.359721][ T5697] usb 5-1: Product: syz [ 782.377902][ T5697] usb 5-1: Manufacturer: syz [ 782.382835][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 782.396038][ T5697] usb 5-1: SerialNumber: syz [ 782.403923][ T5711] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 782.424852][ T5697] usb 5-1: config 0 descriptor?? [ 782.453371][ T5697] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 782.576530][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 782.591279][ T5711] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.601684][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 782.611828][ T5711] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.626324][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 782.637616][ T5711] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.654831][ T24] usb 2-1: config 220 has no interface number 2 [ 782.662062][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 782.676309][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.698719][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 782.718610][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 782.732153][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 782.744779][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 782.755266][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.763993][ T24] usb 2-1: Product: syz [ 782.768950][ T24] usb 2-1: Manufacturer: syz [ 782.789740][ T24] usb 2-1: SerialNumber: syz [ 782.910720][ T5711] usb 3-1: usb_control_msg returned -32 [ 782.918536][ T5711] usbtmc 3-1:16.0: can't read capabilities [ 783.028884][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 783.040853][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 783.047847][ T24] usb 2-1: selecting invalid altsetting 0 [ 783.066051][ T24] usb 2-1: selecting invalid altsetting 0 [ 783.072095][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 783.087951][ T24] usb 2-1: USB disconnect, device number 125 [ 783.265418][ T5697] gspca_zc3xx: reg_w_i err -71 [ 783.852736][ T5697] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 783.859748][ T5697] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 783.881578][ T5697] usb 5-1: USB disconnect, device number 2 [ 785.149409][ T5690] usb 3-1: USB disconnect, device number 117 [ 785.193097][ T808] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 785.355091][ T808] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 785.381199][ T808] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 785.393969][ T808] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 785.409697][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.430778][T31654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 785.449148][ T808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 785.658363][ T808] usb 2-1: USB disconnect, device number 126 [ 787.086490][T31706] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11616'. [ 787.673276][ T808] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 787.853532][ T808] usb 6-1: too many configurations: 53, using maximum allowed: 8 [ 787.885576][ T808] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 787.912896][ T808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.920942][ T808] usb 6-1: Product: syz [ 787.932623][ T808] usb 6-1: Manufacturer: syz [ 787.943296][ T808] usb 6-1: SerialNumber: syz [ 788.168753][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 788.183639][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 788.195785][ T808] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 788.206677][ T808] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 788.219154][ T808] usb 6-1: USB disconnect, device number 109 [ 788.742844][T31750] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 788.775348][T31750] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 789.001488][T31758] tipc: Started in network mode [ 789.017879][T31758] tipc: Node identity ac14140f, cluster identity 4711 [ 789.041896][T31758] tipc: New replicast peer: 255.255.255.255 [ 789.085512][T31758] tipc: Enabled bearer , priority 10 [ 789.422879][ T5690] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 789.469721][T31783] syzkaller1: entered promiscuous mode [ 789.487096][T31783] syzkaller1: entered allmulticast mode [ 789.596315][ T5690] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 789.626524][ T5690] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 789.659085][ T5690] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 789.729610][ T5690] usb 3-1: config 220 has no interface number 2 [ 789.741244][ T5690] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 789.792850][ T5690] usb 3-1: config 220 interface 0 has no altsetting 0 [ 789.805956][ T5690] usb 3-1: config 220 interface 76 has no altsetting 0 [ 789.833149][ T5690] usb 3-1: config 220 interface 1 has no altsetting 0 [ 789.869344][ T5690] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 789.902712][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.934128][ T5690] usb 3-1: Product: syz [ 789.942646][ T5690] usb 3-1: Manufacturer: syz [ 789.954290][ T5690] usb 3-1: SerialNumber: syz [ 790.176331][ T10] tipc: Node number set to 2886997007 [ 790.236938][ T5690] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 790.253023][ T5690] uvcvideo 3-1:220.0: No valid video chain found. [ 790.264791][ T5690] usb 3-1: selecting invalid altsetting 0 [ 790.315408][ T5690] usb 3-1: selecting invalid altsetting 0 [ 790.332650][ T5690] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 790.361377][ T5690] usb 3-1: USB disconnect, device number 118 [ 790.522737][ T808] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 790.692626][ T808] usb 2-1: Using ep0 maxpacket: 8 [ 790.702189][ T808] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 790.718645][ T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.744551][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 790.773535][ T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 790.804538][ T808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.853924][ T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 790.882633][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.140053][ T808] usb 2-1: usb_control_msg returned -32 [ 791.146949][ T808] usbtmc 2-1:16.0: can't read capabilities [ 791.520266][T31821] usbtmc 2-1:16.0: control status returned 0 [ 791.553473][ T5690] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 791.718868][T22733] usb 2-1: USB disconnect, device number 127 [ 791.729884][ T5690] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 791.769020][ T5690] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 791.803130][ T5690] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.837668][ T5690] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 791.859319][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 791.877469][ T5690] usb 3-1: Product: syz [ 791.885671][ T5690] usb 3-1: Manufacturer: syz [ 791.896257][ T5690] usb 3-1: SerialNumber: syz [ 792.151884][ T5690] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 792.377144][ T10] usb 3-1: USB disconnect, device number 119 [ 792.439889][T31815] usblp0: removed [ 792.799386][T31848] sctp: [Deprecated]: syz.4.11675 (pid 31848) Use of int in maxseg socket option. [ 792.799386][T31848] Use struct sctp_assoc_value instead [ 792.887144][T31850] netlink: 'syz.1.11676': attribute type 2 has an invalid length. [ 793.302827][ T5690] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 793.428263][T31868] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 793.464594][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.502941][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.522174][T31870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11686'. [ 793.532626][ T5690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.532688][ T5690] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.532711][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.538350][ T5690] usb 2-1: config 0 descriptor?? [ 794.013756][T22733] hid-generic 0000:0000:0000.00AC: unknown main item tag 0x0 [ 794.039160][T22733] hid-generic 0000:0000:0000.00AC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 794.081561][ T5690] plantronics 0003:047F:FFFF.00AD: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 794.404555][ T5690] usb 2-1: USB disconnect, device number 2 [ 794.585191][T31892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11694'. [ 795.297873][T31922] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11706'. [ 795.382695][ T24] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 795.423370][T31926] vxcan0: entered allmulticast mode [ 795.430379][T31926] vxcan0: left allmulticast mode [ 795.553003][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 795.564971][ T24] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 795.580523][ T24] usb 6-1: config 0 has no interface number 0 [ 795.596208][ T24] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 795.608460][T31933] loop8: detected capacity change from 0 to 7 [ 795.633176][T31933] Dev loop8: unable to read RDB block 7 [ 795.642932][ T24] usb 6-1: config 0 interface 85 has no altsetting 0 [ 795.659879][T31933] loop8: unable to read partition table [ 795.679707][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 795.690400][T31933] loop8: partition table beyond EOD, truncated [ 795.708695][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.720530][T31933] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 795.751277][ T24] usb 6-1: Product: syz [ 795.768363][ T24] usb 6-1: Manufacturer: syz [ 795.790767][ T24] usb 6-1: SerialNumber: syz [ 795.825215][ T24] usb 6-1: config 0 descriptor?? [ 796.042997][ T5697] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 796.212674][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 796.224122][ T5697] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 796.244811][ T5697] usb 3-1: config 0 has no interface number 0 [ 796.260589][ T5697] usb 3-1: too many endpoints for config 0 interface 101 altsetting 61: 48, using maximum allowed: 30 [ 796.290271][ T5697] usb 3-1: config 0 interface 101 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 796.319203][ T5697] usb 3-1: config 0 interface 101 has no altsetting 0 [ 796.357352][ T5697] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 796.394239][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.418758][ T5697] usb 3-1: Product: syz [ 796.429861][ T5697] usb 3-1: Manufacturer: syz [ 796.439451][ T5697] usb 3-1: SerialNumber: syz [ 796.469378][ T5697] usb 3-1: config 0 descriptor?? [ 796.477662][ T5690] hid-generic 0000:0000:0000.00AE: unknown main item tag 0x0 [ 796.478263][ T24] appletouch 6-1:0.85: Geyser mode initialized. [ 796.534620][ T24] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input116 [ 796.564797][ T5690] hid-generic 0000:0000:0000.00AE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 796.718203][ T5697] gspca_main: se401-2.14.0 probing 047d:5003 [ 796.796782][ T5690] usb 6-1: USB disconnect, device number 110 [ 796.905013][ T5690] appletouch 6-1:0.85: input: appletouch disconnected [ 797.164984][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.233283][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.322780][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.413131][ T5697] usb 3-1: reset high-speed USB device number 120 using dummy_hcd [ 797.527778][T31972] kvm: apic: phys broadcast and lowest prio [ 797.818631][T31982] ksmbd: Unknown IPC event: 4, ignore. [ 798.038360][ T5697] gspca_se401: read req failed req 0x06 error -71 [ 798.068175][ T5697] se401 3-1:0.101: probe with driver se401 failed with error -71 [ 798.101639][ T5697] usb 3-1: USB disconnect, device number 120 [ 798.110799][ T808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 798.193761][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.220786][T31996] loop8: detected capacity change from 0 to 8 [ 798.232351][T31996] Dev loop8: unable to read RDB block 8 [ 798.239203][T31996] loop8: unable to read partition table [ 798.245569][T31996] loop8: partition table beyond EOD, truncated [ 798.255979][T31996] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 798.276430][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.292853][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.304321][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 798.341113][ T808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 798.362379][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.382018][ T808] usb 5-1: config 0 descriptor?? [ 798.826340][ T808] plantronics 0003:047F:FFFF.00AF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 798.873983][ T5697] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 799.042931][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 799.057023][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 799.085048][ T5697] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 799.097112][ T5697] usb 3-1: can't read configurations, error -71 [ 799.105794][ T808] usb 5-1: USB disconnect, device number 3 [ 799.232824][T22733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.948643][T32042] netlink: 204 bytes leftover after parsing attributes in process `syz.4.11759'. [ 799.972281][T32042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11759'. [ 800.008218][T32043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.142773][ T5697] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 800.273242][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.324428][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 800.337937][ T5697] usb 3-1: config 1 has no interface number 0 [ 800.345102][ T5697] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 800.358049][ T5697] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 800.369197][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.377846][ T5697] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 800.391505][ T5697] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 800.405663][ T5697] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 800.426115][ T5697] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 800.443162][T32056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11764'. [ 800.453114][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.461919][T32056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.469880][ T5697] usb 3-1: Product: syz [ 800.476679][ T5697] usb 3-1: Manufacturer: syz [ 800.494640][ T5697] usb 3-1: SerialNumber: syz [ 800.507966][T32056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.572072][T32031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.804253][T32031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.811798][T32031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 801.032214][T32031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 801.313557][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.454203][T32031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 801.486999][T32031] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 801.507583][ T5697] cdc_ncm 3-1:1.1: bind() failure [ 801.734087][ T5690] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 801.751445][ T10] usb 3-1: USB disconnect, device number 122 [ 801.905527][ T5690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.932688][ T5690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.949478][ T5690] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.982643][ T5690] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 802.003249][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.015033][ T5690] usb 6-1: config 0 descriptor?? [ 802.354576][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.436368][T32102] netlink: 428 bytes leftover after parsing attributes in process `syz.1.11785'. [ 802.447047][T32102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11785'. [ 802.466193][ T5690] plantronics 0003:047F:FFFF.00B0: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 802.962782][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 803.062819][ T5690] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 803.114352][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 803.127052][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 803.140245][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 803.151677][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 803.165343][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.174768][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.185960][ T10] usb 2-1: config 0 descriptor?? [ 803.191878][T32118] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 803.215225][ T5690] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.229893][ T5690] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.239223][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.247804][ T5690] usb 3-1: Product: syz [ 803.252037][ T5690] usb 3-1: Manufacturer: syz [ 803.257043][ T5690] usb 3-1: SerialNumber: syz [ 803.392877][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.402785][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.622476][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.634038][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.643056][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.650526][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.659025][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.667501][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.675624][ T10] plantronics 0003:047F:FFFF.00B1: unknown main item tag 0x0 [ 803.696914][ T10] plantronics 0003:047F:FFFF.00B1: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 803.896065][T22733] usb 2-1: USB disconnect, device number 3 [ 804.288051][ T5690] cdc_ncm 3-1:1.0: failed to get mac address [ 804.304593][ T5690] cdc_ncm 3-1:1.0: bind() failure [ 804.319990][ T5690] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 804.341288][ T5690] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 804.374592][ T5690] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 804.387354][ T5690] usb 3-1: USB disconnect, device number 123 [ 804.433736][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.653759][ T10] usb 6-1: reset high-speed USB device number 111 using dummy_hcd [ 804.725293][T32140] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11802'. [ 804.873531][ T10] usb 6-1: device firmware changed [ 804.915510][T32144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.918637][ T5683] usb 6-1: USB disconnect, device number 111 [ 804.926669][T32144] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.947925][T32144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.020117][T32144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.028883][T32144] tipc: Resetting bearer [ 805.042003][T32144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.058833][T32144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 805.070996][T32144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.084353][T32144] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 805.092703][ T5683] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 805.110034][T32144] veth1_macvtap: left promiscuous mode [ 805.117801][T32144] veth0_macvtap: left promiscuous mode [ 805.125765][T32144] veth0_macvtap: entered promiscuous mode [ 805.136059][T32144] veth1_macvtap: entered promiscuous mode [ 805.155897][T32144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.165174][T32144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.176099][T32144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.187678][T32144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.202171][T32144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 805.211676][T32144] virt_wifi0: entered promiscuous mode [ 805.229494][T32144] erspan0: entered promiscuous mode [ 805.241839][T32144] batman_adv: batadv0: Interface activated: ipvlan0 [ 805.254524][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.275556][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.282795][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.287426][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.309912][ T13] bridge0: port 3(veth0_to_bridge) entered blocking state [ 805.317284][ T13] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 805.319366][ T5683] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 805.349219][ T5683] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 805.357787][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.365020][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.366693][ T5683] usb 6-1: Manufacturer: syz [ 805.401108][ T5683] usb 6-1: config 0 descriptor?? [ 805.418369][T32153] netlink: 51 bytes leftover after parsing attributes in process `syz.2.11807'. [ 805.452445][ T3364] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.463277][ T3364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.475332][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.485444][ T3364] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.495098][ T3364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.518937][T32150] geneve2: entered allmulticast mode [ 805.581212][ T3364] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.610051][ T3364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.639446][ T3364] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.672832][ T3364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.828629][ T5683] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 805.845220][ T5683] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 805.863168][ T5683] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 805.893990][ T5683] pyra 0003:1E7D:2CF6.00B2: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 805.944480][ T5711] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 806.141118][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 806.153427][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.164042][ T5711] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 806.175083][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 806.187325][ T5711] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 806.206327][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.214851][ T5711] usb 5-1: Product: syz [ 806.219174][ T5711] usb 5-1: Manufacturer: syz [ 806.224192][ T5711] usb 5-1: SerialNumber: syz [ 806.228617][ T5683] pyra 0003:1E7D:2CF6.00B2: couldn't init struct pyra_device [ 806.239799][ T5711] usb 5-1: config 0 descriptor?? [ 806.259630][ T5683] pyra 0003:1E7D:2CF6.00B2: couldn't install mouse [ 806.276533][ T5683] pyra 0003:1E7D:2CF6.00B2: probe with driver pyra failed with error -71 [ 806.298244][ T5683] usb 6-1: USB disconnect, device number 112 [ 806.414676][T32174] fido_id[32174]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 806.433706][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.512944][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.632178][T32183] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 806.669871][ T5711] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 806.839885][T32192] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11822'. [ 806.850502][T32192] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11822'. [ 807.152776][ T5690] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 807.283026][ T5711] usb 5-1: USB disconnect, device number 4 [ 807.312961][ T5690] usb 6-1: Using ep0 maxpacket: 16 [ 807.330803][ T5690] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 807.340655][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.349857][ T5690] usb 6-1: Product: syz [ 807.354476][ T5690] usb 6-1: Manufacturer: syz [ 807.359595][ T5690] usb 6-1: SerialNumber: syz [ 807.370651][ T5690] usb 6-1: config 0 descriptor?? [ 807.381708][ T5690] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 807.390806][ T5690] usb 6-1: Detected FT232B [ 807.555343][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.592313][ T5690] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 807.612182][ T5690] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 807.627891][ T5690] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 807.629464][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11826'. [ 807.655028][T32199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11826'. [ 807.669779][ T5690] usb 6-1: USB disconnect, device number 113 [ 807.703042][ T5690] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 807.735077][ T5690] ftdi_sio 6-1:0.0: device disconnected [ 807.976773][T32213] loop7: detected capacity change from 0 to 7 [ 808.011935][ C1] blk_print_req_error: 47 callbacks suppressed [ 808.011954][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.028107][ C1] buffer_io_error: 66 callbacks suppressed [ 808.028125][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.047797][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.057137][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.065744][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.075560][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.088790][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.105787][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.115166][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.124942][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.134173][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.144008][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.153201][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.166675][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.176319][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.184637][T32213] ldm_validate_partition_table(): Disk read failed. [ 808.192487][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.202072][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.212866][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 808.222140][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.238953][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 808.255600][T32213] Dev loop7: unable to read RDB block 0 [ 808.276577][T32213] loop7: unable to read partition table [ 808.284887][T32213] loop7: partition table beyond EOD, truncated [ 808.302638][T32213] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 808.593123][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.621281][T32230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.757444][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.762970][ T5683] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 808.769809][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.877158][T32235] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 808.910311][T32235] gretap1: entered promiscuous mode [ 808.928589][T32235] gretap1: entered allmulticast mode [ 808.974634][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.000196][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.040594][ T5683] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 809.055481][T32244] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11845'. [ 809.072380][ T5683] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 809.101906][ T5683] usb 3-1: Manufacturer: syz [ 809.128085][ T5683] usb 3-1: config 0 descriptor?? [ 809.150312][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.190094][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.215651][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.236620][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.447076][T32246] net_ratelimit: 769 callbacks suppressed [ 809.447096][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.462572][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.473714][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.482063][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.493228][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.501484][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.509636][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.519612][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.537039][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.553925][T32246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.669315][T32266] syz_tun: entered promiscuous mode [ 809.681852][T32266] syz_tun: entered allmulticast mode [ 809.692338][T32266] team0: Port device syz_tun added [ 809.716979][T32266] syz_tun: left promiscuous mode [ 809.724170][T32266] syz_tun: left allmulticast mode [ 809.737181][T32266] team0: Port device syz_tun removed [ 809.769381][T32266] veth0_to_bridge: left allmulticast mode [ 809.787046][T32266] veth0_to_bridge: left promiscuous mode [ 809.809503][T32266] bridge0: port 3(veth0_to_bridge) entered disabled state [ 809.810649][T32270] kvm: user requested TSC rate below hardware speed [ 809.837565][T32266] bridge_slave_0: left allmulticast mode [ 809.854680][T32266] bridge_slave_0: left promiscuous mode [ 809.861728][T32266] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.885354][T32266] bridge_slave_1: left allmulticast mode [ 809.891164][T32266] bridge_slave_1: left promiscuous mode [ 809.898061][T32266] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.918960][T32266] bond0: (slave bond_slave_0): Releasing backup interface [ 809.967111][T32266] bond0: (slave bond_slave_1): Releasing backup interface [ 809.988200][T32266] team_slave_0: left promiscuous mode [ 810.007370][T32266] team_slave_0: left allmulticast mode [ 810.020529][ T5683] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B3/input/input118 [ 810.042066][T32266] team0: Port device team_slave_0 removed [ 810.058391][T32266] team_slave_1: left promiscuous mode [ 810.077322][T32266] team0: Port device team_slave_1 removed [ 810.094999][T32266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.103335][T32266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.114579][T32266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.124172][T32266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.135912][ T5683] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B3/input/input119 [ 810.211219][ T5683] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B3/input/input120 [ 810.306299][ T5683] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B3/input/input121 [ 810.351854][ T5683] uclogic 0003:256C:006D.00B3: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 810.379326][ T5683] usb 3-1: USB disconnect, device number 124 [ 810.766479][T32291] fido_id[32291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 811.589148][T32322] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11878'. [ 811.735011][ T808] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 811.788743][T32331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11882'. [ 811.896171][ T808] usb 2-1: config 3 has an invalid interface number: 3 but max is 1 [ 811.916299][ T808] usb 2-1: config 3 has an invalid interface number: 110 but max is 1 [ 811.940158][ T808] usb 2-1: config 3 has an invalid interface number: 50 but max is 1 [ 811.950024][ T808] usb 2-1: config 3 has 3 interfaces, different from the descriptor's value: 2 [ 811.960234][ T808] usb 2-1: config 3 has no interface number 0 [ 811.968061][ T808] usb 2-1: config 3 has no interface number 1 [ 811.974510][ T808] usb 2-1: config 3 has no interface number 2 [ 811.980686][ T808] usb 2-1: too many endpoints for config 3 interface 110 altsetting 235: 128, using maximum allowed: 30 [ 811.993972][ T808] usb 2-1: config 3 interface 110 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 812.007808][ T808] usb 2-1: config 3 interface 3 has no altsetting 0 [ 812.014640][ T808] usb 2-1: config 3 interface 110 has no altsetting 0 [ 812.021754][ T808] usb 2-1: config 3 interface 50 has no altsetting 0 [ 812.037947][ T808] usb 2-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 812.060880][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.070066][ T808] usb 2-1: Product: syz [ 812.074497][ T808] usb 2-1: Manufacturer: syz [ 812.079409][ T808] usb 2-1: SerialNumber: syz [ 812.371382][ T808] usb 2-1: USB disconnect, device number 4 [ 813.678861][T32391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11905'. [ 814.807273][T32430] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.11921'. [ 814.914168][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 814.915917][ T5683] net_ratelimit: 622 callbacks suppressed [ 814.915936][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.054983][ T5711] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 815.083033][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 815.091087][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.104157][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.117469][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 815.127545][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.136277][ T24] usb 2-1: Product: syz [ 815.140687][ T24] usb 2-1: Manufacturer: syz [ 815.147268][ T24] usb 2-1: SerialNumber: syz [ 815.170020][ T24] usb 2-1: 0:2 : does not exist [ 815.235460][ T5711] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 815.247364][ T5711] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 815.274509][ T5711] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1854, setting to 64 [ 815.286168][ T5711] usb 3-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00 [ 815.303640][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.367970][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 815.410840][ T24] usb 2-1: USB disconnect, device number 5 [ 815.445550][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.562933][ T5697] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 815.571316][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.743020][ T5697] usb 6-1: Using ep0 maxpacket: 16 [ 815.750736][ T5697] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 815.758518][T32453] netlink: 165 bytes leftover after parsing attributes in process `syz.4.11932'. [ 815.759025][ T5697] usb 6-1: config 0 has no interface number 0 [ 815.776022][ T5697] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.787867][ T5697] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 815.804776][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.819470][ T5697] usb 6-1: config 0 descriptor?? [ 815.951248][T32460] syzkaller1: entered promiscuous mode [ 815.958752][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.967169][T32460] syzkaller1: entered allmulticast mode [ 816.246879][ T5697] mcp2221 0003:04D8:00DD.00B4: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input2 [ 816.335987][ T5711] cdc_ncm 3-1:1.0: bind() failure [ 816.369237][ T5711] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 816.382206][ T5711] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 816.394306][ T5711] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 816.407720][ T5711] usb 3-1: USB disconnect, device number 125 [ 816.652872][ T5683] usb 6-1: USB disconnect, device number 114 [ 816.993300][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.058477][T32500] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 817.092898][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 817.126693][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11956'. [ 817.138346][T32504] netlink: 'syz.4.11956': attribute type 30 has an invalid length. [ 817.255022][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 817.258689][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11959'. [ 817.276073][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.295664][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.318200][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 817.332437][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 817.344810][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.361756][ T10] usb 2-1: config 0 descriptor?? [ 817.476153][T32518] input: syz1 as /devices/virtual/input/input122 [ 817.808288][ T10] hid (null): nested delimiters [ 817.814266][ T10] hid (null): nested delimiters [ 817.819475][ T10] hid (null): nested delimiters [ 817.833558][ T10] hid (null): report_id 24797 is invalid [ 817.846341][ T10] hid (null): report_id 2269 is invalid [ 817.902758][T25135] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 817.995117][T32542] dummy0: entered promiscuous mode [ 818.009829][ T5697] usb 2-1: USB disconnect, device number 6 [ 818.030388][T32542] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 818.032898][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.075901][T25135] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 818.079832][T32542] hsr2: entered allmulticast mode [ 818.101626][T25135] usb 3-1: config 1 has no interface number 0 [ 818.111199][T32542] dummy0: entered allmulticast mode [ 818.120786][T25135] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 818.132429][T32542] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 818.172973][T25135] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 818.196152][T25135] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 818.218889][T25135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 818.243651][T25135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x5 has an invalid bInterval 177, changing to 4 [ 818.266915][T25135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 20350, setting to 1023 [ 818.297543][T25135] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.323168][T25135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.341970][T25135] usb 3-1: Product: syz [ 818.351431][T25135] usb 3-1: Manufacturer: syz [ 818.363928][T25135] usb 3-1: SerialNumber: syz [ 818.381841][T32528] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.507237][T32555] Invalid argument reading file caps for ./file0 [ 818.581221][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 818.581244][ T29] audit: type=1326 audit(1779464702.963:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 818.627050][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.649760][T32528] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.683370][ T29] audit: type=1326 audit(1779464702.963:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 818.724016][ T29] audit: type=1326 audit(1779464703.003:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 818.767709][ T29] audit: type=1326 audit(1779464703.003:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 818.802472][ T29] audit: type=1326 audit(1779464703.003:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 818.871090][T32528] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 818.905653][ T29] audit: type=1326 audit(1779464703.003:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 818.990287][ T29] audit: type=1326 audit(1779464703.003:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 819.139314][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.149585][ T29] audit: type=1326 audit(1779464703.003:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 819.212186][ T29] audit: type=1326 audit(1779464703.003:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 819.272651][ T29] audit: type=1326 audit(1779464703.003:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32557 comm="syz.4.11980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f13a579ce59 code=0x7ffc0000 [ 819.319923][T32528] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 819.364638][T32579] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11989'. [ 819.368230][T25135] cdc_ncm 3-1:1.1: bind() failure [ 819.450492][T32582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.462180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.684631][ T5683] usb 3-1: USB disconnect, device number 126 [ 820.192838][ T5711] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 820.207307][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.227998][T32607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12001'. [ 820.355412][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 820.374120][ T5711] usb 5-1: not running at top speed; connect to a high speed hub [ 820.394009][ T5711] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 820.403437][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.411604][ T5711] usb 5-1: Product: syz [ 820.415959][ T5711] usb 5-1: Manufacturer: syz [ 820.420577][ T5711] usb 5-1: SerialNumber: syz [ 820.505845][ T5697] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 820.654639][ T5711] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 820.666101][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 820.687317][ T5697] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 820.706969][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.738231][ T5697] usb 2-1: Product: syz [ 820.744273][ T5697] usb 2-1: Manufacturer: syz [ 820.749115][ T5697] usb 2-1: SerialNumber: syz [ 820.759068][ T5697] usb 2-1: config 0 descriptor?? [ 820.768630][ T5697] usb-storage 2-1:0.0: USB Mass Storage device detected [ 820.794302][ T5697] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 820.824118][ T5697] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 820.824118][ T5697] Please send a copy of this message to and [ 820.973043][T25135] usb 2-1: USB disconnect, device number 7 [ 821.017019][T32627] netlink: 'syz.2.12010': attribute type 1 has an invalid length. [ 821.027390][T32627] netlink: 'syz.2.12010': attribute type 2 has an invalid length. [ 821.079212][T32629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.163227][ T24] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 821.233619][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.280916][ T5711] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 821.300252][ T5711] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 821.325001][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.352278][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 821.369609][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 821.379540][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.396079][ T24] usb 6-1: config 0 descriptor?? [ 821.413760][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 821.420993][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 821.442081][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 821.456098][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 821.464072][ T24] usb 6-1: media controller created [ 821.471076][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 821.498268][ T5683] usb 5-1: USB disconnect, device number 5 [ 821.501783][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 821.540310][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 821.555803][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input123 [ 821.595764][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 821.610951][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 821.620987][T32625] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.12009'. [ 821.634173][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.691112][T25135] usb 6-1: USB disconnect, device number 115 [ 821.719457][T25135] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 822.022702][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 822.057344][ T50] Bluetooth: hci2: adv larger than maximum supported [ 822.194010][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 822.213393][ T24] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 822.223765][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.232327][ T24] usb 2-1: Product: syz [ 822.237336][ T24] usb 2-1: Manufacturer: syz [ 822.242382][ T24] usb 2-1: SerialNumber: syz [ 822.254307][ T24] usb 2-1: config 0 descriptor?? [ 822.269107][ T24] usb 2-1: selecting invalid altsetting 1 [ 822.275556][ T24] technisat-usb2: could not set alternate setting to 0 [ 822.276930][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.332902][ T5711] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 822.472333][ T24] technisat-usb2: firmware version: 0.0 [ 822.479159][ T24] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 822.495346][ T5711] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 822.538409][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.562707][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.581434][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.590532][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.605279][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.620762][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.658499][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.680262][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.692451][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.704595][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.717566][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.733389][T32670] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 822.740057][T32670] syzkaller0: linktype set to 1 [ 822.746008][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.754743][T32670] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 822.762796][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.772114][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.784005][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.792471][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.801945][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.815339][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.827863][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.859111][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.893386][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 822.903201][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 822.934466][ T5711] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 822.944602][ T24] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 822.957322][ T5711] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 822.968938][ T24] usb 2-1: media controller created [ 822.974962][ T24] technisat-usb2: i2c-error: out failed 53 = -22 [ 822.991839][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 823.015946][ T24] dvb-usb: MAC address reading failed. [ 823.028798][ T5711] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 823.042856][ T5711] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 823.064472][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.078584][ T5711] usb 5-1: Product: syz [ 823.086288][ T5711] usb 5-1: Manufacturer: syz [ 823.101329][ T5711] usb 5-1: SerialNumber: syz [ 823.118096][ T5711] usb 5-1: config 0 descriptor?? [ 823.143134][ T5711] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 823.199884][ T24] DVB: Unable to find symbol stv090x_attach() [ 823.216149][ T24] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 823.364581][ T24] rc_core: IR keymap rc-technisat-usb2 not found [ 823.385737][ T24] Registered IR keymap rc-empty [ 823.400143][ T24] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 823.422108][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 823.422483][ T5683] usb 5-1: USB disconnect, device number 6 [ 823.476424][ T24] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input124 [ 823.478629][ T5683] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 823.488104][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.518661][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 823.544425][ T24] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 823.560244][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.573198][ T24] usb 2-1: USB disconnect, device number 8 [ 823.759288][ T24] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 823.794267][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.862397][T32705] binder: 32704:32705 ioctl c0306201 200000000600 returned -14 [ 824.595305][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.626046][T32733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.676148][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.978598][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12066'. [ 824.988542][T32757] netlink: 'syz.0.12066': attribute type 30 has an invalid length. [ 825.032700][ T5683] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 825.039697][T32761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12066'. [ 825.059993][T32761] netlink: 'syz.0.12066': attribute type 30 has an invalid length. [ 825.204344][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 825.218672][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 825.250718][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.274569][ T5683] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 825.295869][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.321595][ T5683] usb 3-1: config 0 descriptor?? [ 825.632800][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.730171][ T304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12072'. [ 825.827811][ T5683] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.00B6/input/input125 [ 825.959023][ T5683] sony 0003:054C:03D5.00B6: input,hidraw0: USB HID v0.be Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 826.040370][ T5683] usb 3-1: USB disconnect, device number 127 [ 826.177752][ T308] fido_id[308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 826.675473][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.832863][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.920393][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12091'. [ 826.942993][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12091'. [ 827.085593][ T352] netlink: 428 bytes leftover after parsing attributes in process `syz.4.12092'. [ 827.118342][ T352] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12092'. [ 827.666758][ T376] syzkaller1: entered promiscuous mode [ 827.686124][ T376] syzkaller1: entered allmulticast mode [ 827.724234][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.743274][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.752146][ T5683] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 827.926934][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 827.947542][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 827.960924][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.969665][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.001058][ T5683] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 828.023551][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.064925][ T5683] usb 2-1: config 0 descriptor?? [ 828.113272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.496696][ T5683] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 828.597555][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.634160][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.704676][ T5683] usb 2-1: USB disconnect, device number 9 [ 828.795133][ T5697] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 829.015088][ T5697] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 829.040945][ T5697] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 829.051038][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.059401][ T5697] usb 5-1: Product: syz [ 829.081759][ T5697] usb 5-1: Manufacturer: syz [ 829.088121][ T5697] usb 5-1: SerialNumber: syz [ 829.188998][ T417] erspan0: entered promiscuous mode [ 829.309841][ T417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 829.311338][ T422] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12122'. [ 829.400053][ T417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.408148][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.408991][ T424] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12123'. [ 829.422811][T25135] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 829.440497][ T417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 829.468714][ T417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 829.504462][ T417] batadv_slave_1: entered promiscuous mode [ 829.510858][ T417] batadv_slave_1: entered allmulticast mode [ 829.519373][ T426] loop7: detected capacity change from 0 to 7 [ 829.534546][ C1] blk_print_req_error: 11 callbacks suppressed [ 829.534567][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.550310][ C1] buffer_io_error: 10 callbacks suppressed [ 829.550328][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.564628][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.574333][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.586625][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.598128][ T5683] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 829.603635][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.606257][T25135] usb 6-1: Using ep0 maxpacket: 32 [ 829.613193][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.626409][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.629823][T25135] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 829.635707][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.653688][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.654891][T25135] usb 6-1: config 0 has no interface number 0 [ 829.662941][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.678510][T25135] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 829.679561][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.691258][T25135] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 829.699308][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.721275][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.730564][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.741082][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.750505][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.758490][ T426] ldm_validate_partition_table(): Disk read failed. [ 829.762452][T25135] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 829.774494][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.774528][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.779667][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 829.795451][T25135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.801143][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.809864][T25135] usb 6-1: Product: syz [ 829.820598][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 829.822372][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 829.839429][ T3364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.849333][ T426] Dev loop7: unable to read RDB block 0 [ 829.857060][ T426] loop7: unable to read partition table [ 829.857179][ T5697] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 829.864440][ T426] loop7: partition table beyond EOD, truncated [ 829.879123][ T426] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 829.895060][ T3364] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 829.907545][ T5697] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 829.908798][T25135] usb 6-1: Manufacturer: syz [ 829.924376][T25135] usb 6-1: SerialNumber: syz [ 829.934710][T25135] usb 6-1: config 0 descriptor?? [ 829.952282][ T4994] ldm_validate_partition_table(): Disk read failed. [ 829.965720][ T5697] usb 5-1: USB disconnect, device number 7 [ 829.977133][ T4994] Dev loop7: unable to read RDB block 0 [ 829.992065][ T4994] loop7: unable to read partition table [ 830.030295][ T4994] loop7: partition table beyond EOD, truncated [ 830.188289][T25135] radio-si470x 6-1:0.35: this is not a si470x device. [ 830.234823][T25135] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 830.362201][ T443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.462782][T25135] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 830.712079][ T5697] usb 6-1: USB disconnect, device number 116 [ 830.745134][ T5697] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 830.916500][ T10] net_ratelimit: 6 callbacks suppressed [ 830.916518][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.934201][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.992846][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.204398][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.582990][ T5697] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 831.634329][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 831.718018][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.764545][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.811666][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 831.833488][ T10] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 831.864518][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 831.871298][ T5697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 831.882713][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.899169][ T10] usb 3-1: Product: syz [ 831.903583][ T10] usb 3-1: Manufacturer: syz [ 831.908325][ T10] usb 3-1: SerialNumber: syz [ 831.961295][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.961519][ T5697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 832.042781][ T5697] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 832.080469][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.133985][ T5697] usb 6-1: config 0 descriptor?? [ 832.161328][ T480] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 832.231275][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 832.246955][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 832.321251][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 832.386341][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 832.448446][ T10] usb 3-1: USB disconnect, device number 2 [ 832.659586][ T5697] hid_parser_main: 4 callbacks suppressed [ 832.659610][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.681946][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.689782][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.699183][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.708207][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.708931][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.724860][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.738969][ T5697] plantronics 0003:047F:FFFF.00B7: unknown main item tag 0x0 [ 832.756071][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.781744][ T510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.827275][ T5697] plantronics 0003:047F:FFFF.00B7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 833.079828][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 833.079845][ T29] audit: type=1326 audit(1779464717.463:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=525 comm="syz.0.12165" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7e0d9ce59 code=0x0 [ 833.215279][ T527] syzkaller1: entered promiscuous mode [ 833.238211][ T527] syzkaller1: entered allmulticast mode [ 833.313811][ T529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 833.350936][ T529] block device autoloading is deprecated and will be removed. [ 833.552984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 833.632809][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 833.771064][ T548] vivid-002: disconnect [ 833.800934][ T547] vivid-002: reconnect [ 834.049579][ T564] input: syz1 as /devices/virtual/input/input126 [ 834.835460][ T10] usb 6-1: USB disconnect, device number 117 [ 835.630229][ T609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.827966][ T613] futex_wake_op: syz.2.12198 tries to shift op by 144; fix this program [ 836.115632][ T5683] net_ratelimit: 18 callbacks suppressed [ 836.115655][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.196521][ T626] netlink: 'syz.0.12204': attribute type 3 has an invalid length. [ 836.216758][ T626] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12204'. [ 836.229144][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 836.397071][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 836.445701][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 836.461437][ T637] syzkaller1: entered promiscuous mode [ 836.470292][ T637] syzkaller1: entered allmulticast mode [ 836.485309][ T10] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 836.496128][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.536307][ T10] usb 3-1: config 0 descriptor?? [ 836.551016][ T619] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 836.798000][ T619] netlink: 'syz.2.12201': attribute type 34 has an invalid length. [ 836.818451][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 836.835374][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 836.856744][ T10] usb 3-1: USB disconnect, device number 3 [ 836.962694][ T5697] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 837.083496][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.122651][ T5697] usb 6-1: Using ep0 maxpacket: 32 [ 837.135992][ T5697] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 837.152944][ T5697] usb 6-1: config 0 has no interface number 0 [ 837.167316][ T5697] usb 6-1: config 0 interface 12 has no altsetting 0 [ 837.174458][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.181997][ T5697] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 837.195459][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.203882][ T5697] usb 6-1: Product: syz [ 837.208056][ T5697] usb 6-1: Manufacturer: syz [ 837.212907][ T5697] usb 6-1: SerialNumber: syz [ 837.220842][ T5697] usb 6-1: config 0 descriptor?? [ 837.315858][ T659] tipc: Enabling of bearer rejected, failed to enable media [ 837.795273][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.912045][ T673] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12222'. [ 838.123054][ T5720] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 838.193829][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.254671][ T5697] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 838.282813][ T5697] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 838.297460][ T5720] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 838.310187][ T5697] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 838.337618][ T5697] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 838.349401][ T5720] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 838.361635][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.365630][ T684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12225'. [ 838.374174][ T5697] usb 6-1: USB disconnect, device number 118 [ 838.390818][ T5720] usb 2-1: Product: syz [ 838.402775][ T5720] usb 2-1: Manufacturer: syz [ 838.421390][ T5720] usb 2-1: SerialNumber: syz [ 838.706309][ T5720] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 838.721741][ T5720] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 838.733656][ T5720] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 838.752861][ T5690] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 838.755776][ T5720] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 838.783921][ T5720] usb 2-1: USB disconnect, device number 10 [ 838.913576][ T5690] usb 5-1: Using ep0 maxpacket: 32 [ 838.921306][ T5690] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 838.936519][ T5690] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 838.945972][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 838.954871][ T5690] usb 5-1: Product: syz [ 838.960170][ T5690] usb 5-1: Manufacturer: syz [ 838.966389][ T5690] usb 5-1: SerialNumber: syz [ 838.974137][ T5690] usb 5-1: config 0 descriptor?? [ 838.980279][ T690] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 838.988788][ T5690] hub 5-1:0.0: bad descriptor, ignoring hub [ 838.995684][ T5690] hub 5-1:0.0: probe with driver hub failed with error -5 [ 839.233977][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.479089][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.652705][ T5690] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 839.808636][ T690] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 839.828264][ T5690] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 839.877749][ T5690] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 839.903758][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.922679][ T5690] usb 2-1: Product: syz [ 839.926985][ T5690] usb 2-1: Manufacturer: syz [ 839.938741][ T5690] usb 2-1: SerialNumber: syz [ 840.037157][ T690] usb 5-1: device firmware changed [ 840.068716][ T5683] usb 5-1: USB disconnect, device number 8 [ 840.115232][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.262942][ T5683] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 840.298676][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.335826][ T5690] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 840.368604][ T5690] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 840.401979][ T5690] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 840.437827][ T5690] usb 2-1: USB disconnect, device number 11 [ 840.462604][ T5683] usb 5-1: Using ep0 maxpacket: 32 [ 840.469946][ T734] tipc: Enabling of bearer rejected, already enabled [ 840.484279][ T5683] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 840.493468][ T734] tipc: New replicast peer: 255.255.255.255 [ 840.537053][ T5683] usb 5-1: string descriptor 0 read error: -22 [ 840.548484][ T5683] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 840.583794][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 840.619728][ T5683] usb 5-1: config 0 descriptor?? [ 840.633731][ T701] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 840.655570][ T5683] hub 5-1:0.0: bad descriptor, ignoring hub [ 840.677915][ T5683] hub 5-1:0.0: probe with driver hub failed with error -5 [ 840.752765][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 841.042916][ T5683] usb 5-1: USB disconnect, device number 9 [ 841.279698][ T746] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12250'. [ 841.393120][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 841.417690][ T756] syzkaller1: entered allmulticast mode [ 841.992914][ T5690] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 842.034579][T25135] net_ratelimit: 133 callbacks suppressed [ 842.034599][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.153221][ T5690] usb 6-1: Using ep0 maxpacket: 8 [ 842.167973][ T5690] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 842.198450][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.213244][ T5690] usb 6-1: Product: syz [ 842.218165][ T5690] usb 6-1: Manufacturer: syz [ 842.223348][ T5690] usb 6-1: SerialNumber: syz [ 842.231442][ T5690] usb 6-1: config 0 descriptor?? [ 842.245303][ T5690] gspca_main: sq930x-2.14.0 probing 2770:930c [ 842.375286][ T807] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.12275'. [ 842.693035][T25135] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 842.855180][T25135] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.872238][T25135] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.883899][T25135] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 842.893557][T25135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 842.901818][T25135] usb 2-1: SerialNumber: syz [ 843.136093][T25135] usb 2-1: 0:2 : does not exist [ 843.203788][T25135] usb 2-1: USB disconnect, device number 12 [ 843.262243][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.324847][ T5690] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 843.342398][ T5690] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 843.360368][ T5690] usb 6-1: USB disconnect, device number 119 [ 843.541811][ T833] bridge_slave_0: left allmulticast mode [ 843.548441][ T833] bridge_slave_0: left promiscuous mode [ 843.556184][ T833] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.572507][ T833] bridge_slave_1: left promiscuous mode [ 843.586277][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.621711][ T833] team0: Port device team_slave_0 removed [ 843.649764][ T833] team0: Port device team_slave_1 removed [ 843.660722][ T833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.680172][ T833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.706822][ T833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.715801][ T833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.731028][ T833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 844.059250][ T848] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.12292'. [ 844.198517][ T5683] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 844.374155][ T5683] usb 3-1: Using ep0 maxpacket: 16 [ 844.381485][ T5683] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 844.392152][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.408611][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 844.423965][ T5683] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 844.439539][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.450223][ T5683] usb 3-1: Product: syz [ 844.455058][ T5683] usb 3-1: Manufacturer: syz [ 844.459797][ T5683] usb 3-1: SerialNumber: syz [ 844.475423][ T5711] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 844.479126][ T5683] usb 3-1: 0:2 : does not exist [ 844.656848][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 844.670023][ T5711] usb 6-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 844.700592][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.703445][ T5711] usb 6-1: config 0 descriptor?? [ 844.723570][ T852] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 845.085313][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.147172][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.157914][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.167725][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.191050][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.198381][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.222308][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.237508][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.249192][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.281706][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.304922][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.322797][ T5711] wacom 0003:056A:5000.00B8: unknown main item tag 0x0 [ 845.365087][ T5711] usb 6-1: USB disconnect, device number 120 [ 845.376505][ T5683] usb 3-1: USB disconnect, device number 4 [ 845.795624][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.902825][ T5683] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 846.087807][ T5683] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.098964][ T5683] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.110259][ T5683] usb 5-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 846.132674][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 846.140932][ T5683] usb 5-1: SerialNumber: syz [ 846.213171][ T5711] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 846.240450][ T937] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12328'. [ 846.370423][ T5683] usb 5-1: 0:2 : does not exist [ 846.387572][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 846.407953][ T5711] usb 6-1: not running at top speed; connect to a high speed hub [ 846.422256][ T947] netlink: 7 bytes leftover after parsing attributes in process `syz.1.12332'. [ 846.434423][ T5711] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.443150][ T5683] usb 5-1: USB disconnect, device number 10 [ 846.452629][ T5711] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 846.474672][ T5711] usb 6-1: string descriptor 0 read error: -22 [ 846.481158][ T5711] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 846.501971][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.519861][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.555888][ T5711] usb 6-1: 0:2 : does not exist [ 847.586673][ T5711] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 847.615348][ T5711] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 847.636540][ T5711] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 847.683565][ T5683] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 847.703842][ T5711] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 847.785879][ T5711] usb 6-1: USB disconnect, device number 121 [ 847.864343][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 847.877031][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 847.896941][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 847.924294][ T5683] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 847.946461][ T5683] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 847.957448][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.969566][ T5683] usb 3-1: config 0 descriptor?? [ 847.993402][ T973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 848.113310][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.436696][ T5683] plantronics 0003:047F:FFFF.00B9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 848.449753][T25135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.563445][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 848.652892][ T5697] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 848.685908][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.727737][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 848.759988][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.801801][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.828414][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 848.849695][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.849726][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 848.870591][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.880832][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 848.880862][ T10] usb 2-1: Manufacturer: syz [ 848.885019][ T10] usb 2-1: config 0 descriptor?? [ 848.890660][ T5697] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 848.911248][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.937241][ T5697] usb 5-1: config 0 descriptor?? [ 848.958663][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.125368][ T1000] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12353'. [ 849.171976][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.228212][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 849.244056][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 849.255816][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 849.271781][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 849.280743][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 849.382029][ T10] appleir 0003:05AC:8243.00BA: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 849.394491][ T5697] playstation 0003:054C:0DF2.00BB: hidraw2: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 849.450753][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.786801][T25135] usb 2-1: USB disconnect, device number 13 [ 849.987973][ T5697] playstation 0003:054C:0DF2.00BB: Failed to retrieve feature with reportID 5: -71 [ 850.020312][ T5697] playstation 0003:054C:0DF2.00BB: Failed to retrieve DualSense calibration info: -71 [ 850.053808][ T5697] playstation 0003:054C:0DF2.00BB: Failed to get calibration data from DualSense [ 850.080094][ T5697] playstation 0003:054C:0DF2.00BB: Failed to create dualsense. [ 850.095578][ T5697] playstation 0003:054C:0DF2.00BB: probe with driver playstation failed with error -71 [ 850.126403][ T5697] usb 5-1: USB disconnect, device number 11 [ 850.215604][ T12] bridge_slave_1: left allmulticast mode [ 850.232972][ T12] bridge_slave_1: left promiscuous mode [ 850.244500][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.257365][ T12] bridge_slave_0: left allmulticast mode [ 850.264060][ T12] bridge_slave_0: left promiscuous mode [ 850.272634][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.560396][ T5683] usb 3-1: USB disconnect, device number 5 [ 850.836467][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.913275][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.924293][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.935181][ T12] bond0 (unregistering): Released all slaves [ 850.992827][ T5690] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 850.993282][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.087866][ T12] tipc: Disabling bearer [ 851.093488][ T12] tipc: Left network mode [ 851.108188][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.123052][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.130518][ T1004] bridge_slave_0: entered allmulticast mode [ 851.139181][ T1004] bridge_slave_0: entered promiscuous mode [ 851.148677][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.159493][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.167407][ T1004] bridge_slave_1: entered allmulticast mode [ 851.178781][ T1004] bridge_slave_1: entered promiscuous mode [ 851.193068][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 851.229109][ T1004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.242095][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.255518][ T5690] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 851.265334][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.276857][ T5690] usb 2-1: config 0 descriptor?? [ 851.277057][ T1004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.362190][ T1004] team0: Port device team_slave_0 added [ 851.374465][ T1004] team0: Port device team_slave_1 added [ 851.409518][ T5631] Bluetooth: hci1: command tx timeout [ 851.468112][ T1004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.475516][ T1004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.501880][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.502991][ T1004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.587332][ T1004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.597820][ T1004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.679531][ T1004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.728522][ T5690] hid_parser_main: 466 callbacks suppressed [ 851.728547][ T5690] mcp2221 0003:04D8:00DD.00BC: unknown main item tag 0x0 [ 851.755495][ T5690] mcp2221 0003:04D8:00DD.00BC: unknown main item tag 0x0 [ 851.763883][ T5690] mcp2221 0003:04D8:00DD.00BC: unknown main item tag 0x0 [ 851.798618][ T5690] mcp2221 0003:04D8:00DD.00BC: unknown main item tag 0x0 [ 851.819765][ T5690] mcp2221 0003:04D8:00DD.00BC: unknown main item tag 0x0 [ 851.850866][ T5690] mcp2221 0003:04D8:00DD.00BC: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 852.021768][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 852.130098][ T1004] hsr_slave_0: entered promiscuous mode [ 852.142184][ T5697] usb 2-1: USB disconnect, device number 14 [ 852.147661][ T1004] hsr_slave_1: entered promiscuous mode [ 852.166150][ T1004] debugfs: 'hsr0' already exists in 'hsr' [ 852.173964][ T1004] Cannot create hsr debugfs directory [ 852.266749][ T12] hsr_slave_0: left promiscuous mode [ 852.276348][ T12] hsr_slave_1: left promiscuous mode [ 852.283612][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.291595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.304894][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.312336][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.324165][ T12] veth1_macvtap: left promiscuous mode [ 852.329766][ T12] veth0_macvtap: left promiscuous mode [ 852.335693][ T12] veth1_vlan: left promiscuous mode [ 852.341146][ T12] veth0_vlan: left promiscuous mode [ 852.610327][ T1095] netlink: 452 bytes leftover after parsing attributes in process `syz.4.12376'. [ 852.621890][ T1095] netlink: 452 bytes leftover after parsing attributes in process `syz.4.12376'. [ 852.632061][ T12] team0 (unregistering): Port device team_slave_1 removed [ 852.667264][ T12] team0 (unregistering): Port device team_slave_0 removed [ 853.474516][ T5631] Bluetooth: hci1: command tx timeout [ 853.929929][ T29] audit: type=1326 audit(1779464738.313:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1140 comm="syz.0.12393" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e0d9ce59 code=0x0 [ 853.967000][ T5690] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 854.140387][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.162668][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.162806][ T5697] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 854.198164][ T5690] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 854.221774][ T5690] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 854.242718][ T5690] usb 2-1: Manufacturer: syz [ 854.256080][ T5690] usb 2-1: config 0 descriptor?? [ 854.377437][ T5697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.388240][ T5697] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 854.397934][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.419209][ T5697] usb 3-1: config 0 descriptor?? [ 854.438905][ T5697] pwc: Askey VC010 type 2 USB webcam detected. [ 854.512858][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.820309][ T1004] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 854.834315][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 854.857065][ T5697] pwc: recv_control_msg error -32 req 02 val 2b00 [ 854.895967][ T1004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.924599][ T1004] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 854.969046][ T1004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.980461][ T1004] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 854.998976][ T1004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 855.008037][ T1004] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 855.030245][ T1004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 855.077966][ T5697] pwc: recv_control_msg error -71 req 02 val 2c00 [ 855.100190][ T5697] pwc: recv_control_msg error -71 req 04 val 1000 [ 855.120130][ T5697] pwc: recv_control_msg error -71 req 04 val 1300 [ 855.133822][ T5697] pwc: recv_control_msg error -71 req 04 val 1400 [ 855.155627][ T5697] pwc: recv_control_msg error -71 req 02 val 2000 [ 855.170832][ T5697] pwc: recv_control_msg error -71 req 02 val 2100 [ 855.185474][ T5697] pwc: recv_control_msg error -71 req 04 val 1500 [ 855.201296][ T5697] pwc: recv_control_msg error -71 req 02 val 2500 [ 855.220958][ T5697] pwc: recv_control_msg error -71 req 02 val 2400 [ 855.242075][ T5697] pwc: recv_control_msg error -71 req 02 val 2600 [ 855.263372][ T5697] pwc: recv_control_msg error -71 req 02 val 2900 [ 855.294464][ T5697] pwc: recv_control_msg error -71 req 02 val 2800 [ 855.297914][ T5690] uclogic 0003:256C:006D.00BD: failed retrieving string descriptor #100: -71 [ 855.313876][ T5697] pwc: recv_control_msg error -71 req 04 val 1100 [ 855.342699][ T5697] pwc: recv_control_msg error -71 req 04 val 1200 [ 855.343807][ T5690] uclogic 0003:256C:006D.00BD: failed retrieving pen parameters: -71 [ 855.376897][ T5697] pwc: Registered as video103. [ 855.390234][ T1004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.397362][ T5690] uclogic 0003:256C:006D.00BD: failed probing pen v1 parameters: -71 [ 855.421114][ T5697] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input127 [ 855.427396][ T5690] uclogic 0003:256C:006D.00BD: failed probing parameters: -71 [ 855.472077][ T5690] uclogic 0003:256C:006D.00BD: probe with driver uclogic failed with error -71 [ 855.482940][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 855.503776][ T1004] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.538158][ T5697] usb 3-1: USB disconnect, device number 6 [ 855.550280][ T5690] usb 2-1: USB disconnect, device number 15 [ 855.558629][ T5631] Bluetooth: hci1: command tx timeout [ 855.577985][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.585231][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.689669][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.697222][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.924534][ T1192] syzkaller1: entered promiscuous mode [ 855.940317][ T1192] syzkaller1: entered allmulticast mode [ 855.976024][ T1004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.113758][T22733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.122017][T22733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.130359][T22733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.241773][ T1004] veth0_vlan: entered promiscuous mode [ 856.266794][ T1004] veth1_vlan: entered promiscuous mode [ 856.371679][ T1214] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12410'. [ 856.382181][ T1004] veth0_macvtap: entered promiscuous mode [ 856.393590][T25135] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 856.403937][ T1004] veth1_macvtap: entered promiscuous mode [ 856.462107][ T1004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.504549][ T1004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.557943][ T769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.567538][T25135] usb 2-1: Using ep0 maxpacket: 32 [ 856.567721][ T769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.585973][T25135] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 856.587314][ T769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.646756][ T769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.652133][T25135] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 856.713209][T25135] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 856.744652][T25135] usb 2-1: Product: syz [ 856.781270][T25135] usb 2-1: Manufacturer: syz [ 856.812177][T25135] usb 2-1: SerialNumber: syz [ 856.860850][ T1231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12413'. [ 856.878815][T25135] usb 2-1: config 0 descriptor?? [ 856.890971][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.914733][ T1205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 856.941162][T25135] hub 2-1:0.0: bad descriptor, ignoring hub [ 856.958788][T22733] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 856.985136][T25135] hub 2-1:0.0: probe with driver hub failed with error -5 [ 857.032929][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.111356][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.126015][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.133938][T22733] usb 5-1: Using ep0 maxpacket: 16 [ 857.164307][T22733] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 857.214407][T22733] usb 5-1: config 0 interface 0 has no altsetting 0 [ 857.237721][T22733] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 857.251860][T22733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.286283][T22733] usb 5-1: config 0 descriptor?? [ 857.633740][ T5631] Bluetooth: hci1: command tx timeout [ 857.719061][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.735905][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.744210][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.751808][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.771738][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.782603][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.801648][T22733] cypress 0003:04B4:DE61.00BE: unknown main item tag 0x0 [ 857.820779][T22733] cypress 0003:04B4:DE61.00BE: item fetching failed at offset 26/33 [ 857.838695][T22733] cypress 0003:04B4:DE61.00BE: parse failed [ 857.852867][T22733] cypress 0003:04B4:DE61.00BE: probe with driver cypress failed with error -22 [ 857.913478][ T1205] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 857.956436][ T5711] usb 5-1: USB disconnect, device number 13 [ 858.097183][ T1205] usb 2-1: device firmware changed [ 858.129719][ T5720] usb 2-1: USB disconnect, device number 16 [ 858.284232][ T5720] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 858.452851][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 858.462193][ T5720] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 858.477195][ T5720] usb 2-1: string descriptor 0 read error: -22 [ 858.492783][ T5720] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 858.521159][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 858.543749][ T5720] usb 2-1: config 0 descriptor?? [ 858.565107][ T1239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 858.572662][ T1230] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 858.585291][ T5720] hub 2-1:0.0: bad descriptor, ignoring hub [ 858.593656][ T5720] hub 2-1:0.0: probe with driver hub failed with error -5 [ 858.744787][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.772676][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.792594][ T1230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 858.822666][ T1230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 858.839885][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.865468][ T1230] usb 3-1: config 0 descriptor?? [ 858.933761][ T5720] usb 2-1: USB disconnect, device number 17 [ 859.153575][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.192683][ T10] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 859.286426][T25135] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 859.301436][ T1230] plantronics 0003:047F:FFFF.00BF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 859.344873][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.373414][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.396519][ T10] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 859.406836][ T10] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 859.415530][ T10] usb 6-1: Manufacturer: syz [ 859.437086][ T10] usb 6-1: config 0 descriptor?? [ 859.455962][T25135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.467899][T25135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.480418][T25135] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 859.501556][T25135] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 859.511966][T25135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.524431][T25135] usb 5-1: config 0 descriptor?? [ 859.692624][ T5720] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 859.852923][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 859.860374][ T5720] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 859.868900][ T5720] usb 2-1: config 0 has no interface number 0 [ 859.878447][ T5720] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 859.888050][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.896314][ T5720] usb 2-1: Product: syz [ 859.900689][ T5720] usb 2-1: Manufacturer: syz [ 859.905400][ T5720] usb 2-1: SerialNumber: syz [ 859.912466][ T5720] usb 2-1: config 0 descriptor?? [ 859.966168][T25135] plantronics 0003:047F:FFFF.00C1: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 860.268091][ T10] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00C0/input/input128 [ 860.328593][ T5720] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 860.340210][ T5720] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.353303][ T10] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00C0/input/input129 [ 860.371190][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00C0/input/input130 [ 860.398791][ T10] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00C0/input/input131 [ 860.420496][ T10] uclogic 0003:256C:006D.00C0: input,hidraw2: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 860.606815][ T5711] usb 6-1: USB disconnect, device number 122 [ 860.717346][ T24] usb 5-1: USB disconnect, device number 14 [ 860.757232][ T5720] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 860.792350][ T5720] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 860.807228][ T5720] usb 2-1: USB disconnect, device number 18 [ 861.423288][ T10] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 861.574978][ T10] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 861.585665][ T5720] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 861.596479][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 861.624856][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 861.642646][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.661128][ T10] usb 6-1: Product: syz [ 861.671286][ T10] usb 6-1: Manufacturer: syz [ 861.681419][ T10] usb 6-1: SerialNumber: syz [ 861.696530][ T10] usb 6-1: config 0 descriptor?? [ 861.713377][ T808] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 861.718898][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 861.785951][ T5720] usb 5-1: Using ep0 maxpacket: 32 [ 861.824859][ T5720] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 861.835920][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.844989][ T5720] usb 5-1: Product: syz [ 861.849379][ T5720] usb 5-1: Manufacturer: syz [ 861.855102][ T5720] usb 5-1: SerialNumber: syz [ 861.862877][ T5720] usb 5-1: config 0 descriptor?? [ 861.873814][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.882196][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.891459][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.923356][ T808] usb 3-1: device firmware changed [ 861.929489][ T5697] usb 3-1: USB disconnect, device number 7 [ 862.079594][ T5720] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 015 [ 862.115226][ T5697] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 862.298144][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 862.308593][ T5697] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.319088][ T5697] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 862.331171][ T5697] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 862.331740][T22733] usb 5-1: USB disconnect, device number 15 [ 862.340662][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.340687][ T5697] usb 3-1: Product: syz [ 862.340701][ T5697] usb 3-1: Manufacturer: syz [ 862.348015][ T1318] i2c i2c-1: failure writing data [ 862.361078][ T5697] usb 3-1: SerialNumber: syz [ 862.743572][ T5697] usb 6-1: USB disconnect, device number 123 [ 862.782301][ T1344] loop7: detected capacity change from 0 to 7 [ 862.800974][ T5720] usb 3-1: USB disconnect, device number 8 [ 862.864183][ C0] blk_print_req_error: 26 callbacks suppressed [ 862.864203][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 862.864880][ T1344] Dev loop7: unable to read RDB block 7 [ 862.870474][ C0] buffer_io_error: 25 callbacks suppressed [ 862.870491][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 862.901040][ T1344] loop7: unable to read partition table [ 862.907187][ T1344] loop7: partition table beyond EOD, truncated [ 862.921654][ T1344] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 863.039424][ T4994] Dev loop7: unable to read RDB block 7 [ 863.045558][ T4994] loop7: unable to read partition table [ 863.051554][ T4994] loop7: partition table beyond EOD, truncated [ 863.463592][T22733] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 863.656321][T22733] usb 5-1: config 1 has an invalid interface number: 62 but max is 1 [ 863.677192][T22733] usb 5-1: config 1 has an invalid interface number: 139 but max is 1 [ 863.701828][T22733] usb 5-1: config 1 has no interface number 0 [ 863.716706][T22733] usb 5-1: config 1 has no interface number 1 [ 863.741697][T22733] usb 5-1: config 1 interface 62 altsetting 227 has an invalid descriptor for endpoint zero, skipping [ 863.781983][T22733] usb 5-1: config 1 interface 139 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 863.798230][T22733] usb 5-1: config 1 interface 62 has no altsetting 0 [ 863.805491][T22733] usb 5-1: config 1 interface 139 has no altsetting 0 [ 863.816421][T22733] usb 5-1: New USB device found, idVendor=2caf, idProduct=13a3, bcdDevice=bd.dc [ 863.827226][T22733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.847640][T22733] usb 5-1: Product: syz [ 863.852124][T22733] usb 5-1: Manufacturer: syz [ 863.862250][T22733] usb 5-1: SerialNumber: syz [ 864.016230][ T1385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.097145][T22733] ftdi_sio 5-1:1.62: FTDI USB Serial Device converter detected [ 864.110918][T22733] ftdi_sio ttyUSB0: unknown device type: 0xbddc [ 864.124821][T22733] rndis_host 5-1:1.139: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 864.137269][T22733] ftdi_sio 5-1:1.139: FTDI USB Serial Device converter detected [ 864.147502][T22733] ftdi_sio ttyUSB1: unknown device type: 0xbddc [ 864.161637][T22733] usb 5-1: USB disconnect, device number 16 [ 864.179708][T22733] ftdi_sio 5-1:1.62: device disconnected [ 864.192889][ T1230] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 864.202475][T22733] ftdi_sio 5-1:1.139: device disconnected [ 864.269403][ T1391] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 864.379645][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.402977][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.414599][ T1230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.429202][ T1230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.443252][ T1230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.458536][ T1230] usb 6-1: config 0 descriptor?? [ 864.742928][ T5697] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 864.913340][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.926384][ T1230] plantronics 0003:047F:FFFF.00C2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 864.941705][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.977620][ T5697] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 865.001024][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.024212][ T5720] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 865.034625][ T5697] usb 2-1: config 0 descriptor?? [ 865.192921][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 865.205274][ T5720] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 865.216897][ T5720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 865.229454][ T5720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 865.243864][ T5720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 865.260566][ T5720] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.275898][ T5720] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 865.286314][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.400791][ T1423] input: syz0 as /devices/virtual/input/input132 [ 865.470812][ T5697] keytouch 0003:0926:3333.00C3: fixing up Keytouch IEC report descriptor [ 865.498500][ T5697] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.00C3/input/input133 [ 865.529457][ T5720] usb 3-1: usb_control_msg returned -32 [ 865.545076][ T5720] usbtmc 3-1:16.0: can't read capabilities [ 865.624893][ T5697] keytouch 0003:0926:3333.00C3: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 865.823054][ T1230] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 865.982667][ T1230] usb 5-1: Using ep0 maxpacket: 16 [ 865.990461][ T1230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 866.001149][ T1230] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 866.009904][ T1230] usb 5-1: config 9 has no interface number 0 [ 866.016702][ T1230] usb 5-1: config 9 interface 57 has no altsetting 0 [ 866.028772][ T1230] usb 5-1: string descriptor 0 read error: -22 [ 866.035680][ T1230] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 866.039621][ T5697] usb 2-1: USB disconnect, device number 19 [ 866.046979][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.396413][ T1434] input input134: cannot allocate more than FF_MAX_EFFECTS effects [ 867.034751][ T1454] input: syz0 as /devices/virtual/input/input135 [ 867.090628][ T1230] video4linux radio48: keene_cmd_set failed (-71) [ 867.114402][ T1230] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 867.133493][ T1230] usb 5-1: USB disconnect, device number 17 [ 867.293152][ T5720] usb 6-1: reset high-speed USB device number 124 using dummy_hcd [ 867.303882][ T5720] usb 6-1: device reset changed ep0 maxpacket size! [ 867.343657][T22733] usb 6-1: USB disconnect, device number 124 [ 867.512811][T22733] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 867.633391][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.641591][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.672654][T22733] usb 6-1: Using ep0 maxpacket: 32 [ 867.687609][T22733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.711585][T22733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.725434][T22733] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 867.738652][T22733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.759213][T22733] usb 6-1: config 0 descriptor?? [ 867.776751][T22733] hub 6-1:0.0: USB hub found [ 867.838389][ T1232] usb 3-1: USB disconnect, device number 9 [ 867.953479][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.987559][T22733] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 868.355447][ T1232] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 868.417566][T22733] hid-generic 0003:046D:C31C.00C4: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 868.537146][ T1232] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 868.569726][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 868.604112][ T1232] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 868.626240][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 868.654538][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 868.683660][ T1232] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 868.692937][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 868.716745][ T1232] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 868.742682][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 868.756727][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 868.771414][ T1232] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 868.779148][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 868.790282][ T1232] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 868.795883][ T5720] usb 6-1: USB disconnect, device number 125 [ 868.812954][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 868.834143][ T1232] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 868.888259][ T1232] usb 3-1: string descriptor 0 read error: -22 [ 868.903403][ T1232] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 868.922860][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.953090][ T1232] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 869.177490][ T5720] usb 3-1: USB disconnect, device number 10 [ 870.034130][ T1517] [ 870.036586][ T1517] ===================================================== [ 870.043683][ T1517] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 870.051167][ T1517] syzkaller #0 Tainted: G L [ 870.057248][ T1517] ----------------------------------------------------- [ 870.064187][ T1517] syz.2.12526/1517 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 870.072628][ T1517] ffff88801dfe1ea0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 870.081544][ T1517] [ 870.081544][ T1517] and this task is already holding: [ 870.089186][ T1517] ffff888025749948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 870.097919][ T1517] which would create a new lock dependency: [ 870.104003][ T1517] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 870.111801][ T1517] [ 870.111801][ T1517] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 870.121365][ T1517] (&client->buffer_lock){..-.}-{3:3} [ 870.121408][ T1517] [ 870.121408][ T1517] ... which became SOFTIRQ-irq-safe at: [ 870.135057][ T1517] lock_acquire+0x106/0x350 [ 870.139673][ T1517] _raw_spin_lock+0x2e/0x40 [ 870.144299][ T1517] evdev_pass_values+0xb9/0xbd0 [ 870.149259][ T1517] evdev_events+0x1e6/0x340 [ 870.154036][ T1517] input_pass_values+0x288/0x890 [ 870.159199][ T1517] input_event_dispose+0x3e5/0x6b0 [ 870.164611][ T1517] input_event+0x84/0xc0 [ 870.169057][ T1517] hidinput_hid_event+0x143a/0x1ec0 [ 870.174374][ T1517] hid_process_event+0x4be/0x620 [ 870.179427][ T1517] hid_report_raw_event+0xed6/0x1850 [ 870.184839][ T1517] __hid_input_report+0x45c/0x590 [ 870.190155][ T1517] hid_irq_in+0x495/0x710 [ 870.194592][ T1517] __usb_hcd_giveback_urb+0x376/0x540 [ 870.200067][ T1517] dummy_timer+0xbc0/0x4650 [ 870.204719][ T1517] __hrtimer_run_queues+0x3c0/0xa20 [ 870.210033][ T1517] hrtimer_run_softirq+0x17a/0x240 [ 870.215646][ T1517] handle_softirqs+0x22a/0x840 [ 870.220487][ T1517] __irq_exit_rcu+0xca/0x220 [ 870.225239][ T1517] irq_exit_rcu+0x9/0x30 [ 870.229735][ T1517] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 870.235536][ T1517] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 870.242224][ T1517] finish_task_switch+0x427/0xbe0 [ 870.247342][ T1517] __schedule+0x1829/0x5740 [ 870.252136][ T1517] schedule+0x164/0x360 [ 870.256657][ T1517] do_nanosleep+0x1c2/0x620 [ 870.261335][ T1517] hrtimer_nanosleep+0x18f/0x3a0 [ 870.266446][ T1517] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 870.272173][ T1517] do_syscall_64+0x15f/0xf80 [ 870.276865][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.283112][ T1517] [ 870.283112][ T1517] to a SOFTIRQ-irq-unsafe lock: [ 870.290126][ T1517] (tasklist_lock){.+.+}-{3:3} [ 870.290152][ T1517] [ 870.290152][ T1517] ... which became SOFTIRQ-irq-unsafe at: [ 870.303105][ T1517] ... [ 870.303116][ T1517] lock_acquire+0x106/0x350 [ 870.310443][ T1517] _raw_read_lock+0x36/0x50 [ 870.315036][ T1517] __do_wait+0xde/0x740 [ 870.319562][ T1517] do_wait+0x1e7/0x510 [ 870.323715][ T1517] kernel_wait+0xd6/0x1c0 [ 870.328244][ T1517] call_usermodehelper_exec_work+0xbe/0x230 [ 870.334211][ T1517] process_scheduled_works+0xb5d/0x1860 [ 870.339833][ T1517] worker_thread+0xa53/0xfc0 [ 870.344512][ T1517] kthread+0x389/0x470 [ 870.348784][ T1517] ret_from_fork+0x514/0xb70 [ 870.353470][ T1517] ret_from_fork_asm+0x1a/0x30 [ 870.358321][ T1517] [ 870.358321][ T1517] other info that might help us debug this: [ 870.358321][ T1517] [ 870.368897][ T1517] Chain exists of: [ 870.368897][ T1517] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 870.368897][ T1517] [ 870.382200][ T1517] Possible interrupt unsafe locking scenario: [ 870.382200][ T1517] [ 870.390598][ T1517] CPU0 CPU1 [ 870.395952][ T1517] ---- ---- [ 870.401478][ T1517] lock(tasklist_lock); [ 870.405719][ T1517] local_irq_disable(); [ 870.412551][ T1517] lock(&client->buffer_lock); [ 870.420295][ T1517] lock(&new->fa_lock); [ 870.427072][ T1517] [ 870.430603][ T1517] lock(&client->buffer_lock); [ 870.435634][ T1517] [ 870.435634][ T1517] *** DEADLOCK *** [ 870.435634][ T1517] [ 870.443867][ T1517] 6 locks held by syz.2.12526/1517: [ 870.449066][ T1517] #0: ffff88802677a410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 870.458214][ T1517] #1: ffff888032a8d6f0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 870.468933][ T1517] #2: ffffffff8eb03e30 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 870.478503][ T1517] #3: ffff888077dcd178 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 870.488084][ T1517] #4: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 870.497924][ T1517] #5: ffff888025749948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 870.507165][ T1517] [ 870.507165][ T1517] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 870.517657][ T1517] -> (&client->buffer_lock){..-.}-{3:3} { [ 870.523768][ T1517] IN-SOFTIRQ-W at: [ 870.527835][ T1517] lock_acquire+0x106/0x350 [ 870.534153][ T1517] _raw_spin_lock+0x2e/0x40 [ 870.540563][ T1517] evdev_pass_values+0xb9/0xbd0 [ 870.547409][ T1517] evdev_events+0x1e6/0x340 [ 870.553727][ T1517] input_pass_values+0x288/0x890 [ 870.560482][ T1517] input_event_dispose+0x3e5/0x6b0 [ 870.567422][ T1517] input_event+0x84/0xc0 [ 870.573665][ T1517] hidinput_hid_event+0x143a/0x1ec0 [ 870.580678][ T1517] hid_process_event+0x4be/0x620 [ 870.587552][ T1517] hid_report_raw_event+0xed6/0x1850 [ 870.594742][ T1517] __hid_input_report+0x45c/0x590 [ 870.601767][ T1517] hid_irq_in+0x495/0x710 [ 870.608008][ T1517] __usb_hcd_giveback_urb+0x376/0x540 [ 870.615292][ T1517] dummy_timer+0xbc0/0x4650 [ 870.621828][ T1517] __hrtimer_run_queues+0x3c0/0xa20 [ 870.628847][ T1517] hrtimer_run_softirq+0x17a/0x240 [ 870.635782][ T1517] handle_softirqs+0x22a/0x840 [ 870.642546][ T1517] __irq_exit_rcu+0xca/0x220 [ 870.648959][ T1517] irq_exit_rcu+0x9/0x30 [ 870.655017][ T1517] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 870.662471][ T1517] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 870.671000][ T1517] finish_task_switch+0x427/0xbe0 [ 870.677855][ T1517] __schedule+0x1829/0x5740 [ 870.684198][ T1517] schedule+0x164/0x360 [ 870.690270][ T1517] do_nanosleep+0x1c2/0x620 [ 870.696607][ T1517] hrtimer_nanosleep+0x18f/0x3a0 [ 870.703384][ T1517] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 870.710862][ T1517] do_syscall_64+0x15f/0xf80 [ 870.717383][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.725408][ T1517] INITIAL USE at: [ 870.729458][ T1517] lock_acquire+0x106/0x350 [ 870.735787][ T1517] _raw_spin_lock+0x2e/0x40 [ 870.742216][ T1517] evdev_pass_values+0xb9/0xbd0 [ 870.749073][ T1517] evdev_events+0x1e6/0x340 [ 870.755311][ T1517] input_pass_values+0x288/0x890 [ 870.762069][ T1517] input_event_dispose+0x330/0x6b0 [ 870.769008][ T1517] input_inject_event+0x1dc/0x330 [ 870.775863][ T1517] evdev_write+0x325/0x4c0 [ 870.782195][ T1517] vfs_write+0x29a/0xb90 [ 870.788242][ T1517] ksys_write+0x150/0x270 [ 870.794609][ T1517] do_syscall_64+0x15f/0xf80 [ 870.801149][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.809260][ T1517] } [ 870.811841][ T1517] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 870.820093][ T1517] -> (&new->fa_lock){....}-{3:3} { [ 870.825492][ T1517] INITIAL USE at: [ 870.829373][ T1517] lock_acquire+0x106/0x350 [ 870.835447][ T1517] _raw_write_lock_irq+0x3d/0x50 [ 870.841962][ T1517] fasync_remove_entry+0xf1/0x1c0 [ 870.848562][ T1517] sock_fasync+0x85/0xf0 [ 870.854372][ T1517] __fput+0x890/0xa60 [ 870.859913][ T1517] task_work_run+0x1d9/0x270 [ 870.866070][ T1517] exit_to_user_mode_loop+0xf3/0x4d0 [ 870.872922][ T1517] do_syscall_64+0x33e/0xf80 [ 870.879179][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.886718][ T1517] INITIAL READ USE at: [ 870.891048][ T1517] lock_acquire+0x106/0x350 [ 870.897553][ T1517] _raw_read_lock_irqsave+0x48/0x60 [ 870.904745][ T1517] kill_fasync+0x199/0x4d0 [ 870.911156][ T1517] pipe_release+0x19c/0x330 [ 870.917658][ T1517] __fput+0x44f/0xa60 [ 870.923637][ T1517] task_work_run+0x1d9/0x270 [ 870.930319][ T1517] exit_to_user_mode_loop+0xf3/0x4d0 [ 870.937713][ T1517] do_syscall_64+0x33e/0xf80 [ 870.944481][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.952374][ T1517] } [ 870.954870][ T1517] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 870.963546][ T1517] ... acquired at: [ 870.967386][ T1517] _raw_read_lock_irqsave+0x48/0x60 [ 870.972841][ T1517] kill_fasync+0x199/0x4d0 [ 870.977426][ T1517] evdev_pass_values+0x627/0xbd0 [ 870.982562][ T1517] evdev_events+0x1e6/0x340 [ 870.987234][ T1517] input_pass_values+0x288/0x890 [ 870.992412][ T1517] input_event_dispose+0x330/0x6b0 [ 870.997954][ T1517] input_inject_event+0x1dc/0x330 [ 871.003178][ T1517] evdev_write+0x325/0x4c0 [ 871.007843][ T1517] vfs_write+0x29a/0xb90 [ 871.012341][ T1517] ksys_write+0x150/0x270 [ 871.016849][ T1517] do_syscall_64+0x15f/0xf80 [ 871.021625][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.027685][ T1517] [ 871.030001][ T1517] [ 871.030001][ T1517] the dependencies between the lock to be acquired [ 871.030010][ T1517] and SOFTIRQ-irq-unsafe lock: [ 871.044118][ T1517] -> (tasklist_lock){.+.+}-{3:3} { [ 871.049354][ T1517] HARDIRQ-ON-R at: [ 871.053499][ T1517] lock_acquire+0x106/0x350 [ 871.059902][ T1517] _raw_read_lock+0x36/0x50 [ 871.066223][ T1517] __do_wait+0xde/0x740 [ 871.072207][ T1517] do_wait+0x1e7/0x510 [ 871.078272][ T1517] kernel_wait+0xd6/0x1c0 [ 871.084420][ T1517] call_usermodehelper_exec_work+0xbe/0x230 [ 871.092474][ T1517] process_scheduled_works+0xb5d/0x1860 [ 871.100010][ T1517] worker_thread+0xa53/0xfc0 [ 871.106504][ T1517] kthread+0x389/0x470 [ 871.112404][ T1517] ret_from_fork+0x514/0xb70 [ 871.119041][ T1517] ret_from_fork_asm+0x1a/0x30 [ 871.125891][ T1517] SOFTIRQ-ON-R at: [ 871.129962][ T1517] lock_acquire+0x106/0x350 [ 871.136312][ T1517] _raw_read_lock+0x36/0x50 [ 871.142655][ T1517] __do_wait+0xde/0x740 [ 871.148647][ T1517] do_wait+0x1e7/0x510 [ 871.154800][ T1517] kernel_wait+0xd6/0x1c0 [ 871.160966][ T1517] call_usermodehelper_exec_work+0xbe/0x230 [ 871.168725][ T1517] process_scheduled_works+0xb5d/0x1860 [ 871.176089][ T1517] worker_thread+0xa53/0xfc0 [ 871.182499][ T1517] kthread+0x389/0x470 [ 871.188544][ T1517] ret_from_fork+0x514/0xb70 [ 871.194950][ T1517] ret_from_fork_asm+0x1a/0x30 [ 871.201531][ T1517] INITIAL USE at: [ 871.205607][ T1517] lock_acquire+0x106/0x350 [ 871.211850][ T1517] _raw_write_lock_irq+0x3d/0x50 [ 871.218635][ T1517] copy_process+0x2b4c/0x4440 [ 871.225063][ T1517] kernel_clone+0x284/0x8f0 [ 871.231658][ T1517] user_mode_thread+0x110/0x180 [ 871.238417][ T1517] rest_init+0x23/0x300 [ 871.244478][ T1517] start_kernel+0x38a/0x3e0 [ 871.250997][ T1517] x86_64_start_reservations+0x24/0x30 [ 871.258540][ T1517] x86_64_start_kernel+0x143/0x1c0 [ 871.265552][ T1517] common_startup_64+0x13e/0x147 [ 871.272306][ T1517] INITIAL READ USE at: [ 871.276715][ T1517] lock_acquire+0x106/0x350 [ 871.283484][ T1517] _raw_read_lock+0x36/0x50 [ 871.290244][ T1517] __do_wait+0xde/0x740 [ 871.296662][ T1517] do_wait+0x1e7/0x510 [ 871.303038][ T1517] kernel_wait+0xd6/0x1c0 [ 871.309747][ T1517] call_usermodehelper_exec_work+0xbe/0x230 [ 871.318007][ T1517] process_scheduled_works+0xb5d/0x1860 [ 871.325917][ T1517] worker_thread+0xa53/0xfc0 [ 871.332855][ T1517] kthread+0x389/0x470 [ 871.339207][ T1517] ret_from_fork+0x514/0xb70 [ 871.345964][ T1517] ret_from_fork_asm+0x1a/0x30 [ 871.352903][ T1517] } [ 871.355480][ T1517] ... key at: [] tasklist_lock+0x18/0x40 [ 871.363286][ T1517] ... acquired at: [ 871.367160][ T1517] _raw_read_lock+0x36/0x50 [ 871.371931][ T1517] send_sigio+0x101/0x370 [ 871.376517][ T1517] dnotify_handle_event+0x169/0x440 [ 871.382527][ T1517] fsnotify+0x1831/0x1ae0 [ 871.387408][ T1517] path_openat+0x15c2/0x3860 [ 871.392166][ T1517] do_file_open+0x23e/0x4a0 [ 871.396835][ T1517] do_sys_openat2+0x113/0x200 [ 871.401848][ T1517] __x64_sys_open+0x11e/0x150 [ 871.406862][ T1517] do_syscall_64+0x15f/0xf80 [ 871.411625][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.417707][ T1517] [ 871.420059][ T1517] -> (&f_owner->lock){....}-{3:3} { [ 871.425592][ T1517] INITIAL USE at: [ 871.429692][ T1517] lock_acquire+0x106/0x350 [ 871.435955][ T1517] _raw_write_lock_irq+0x3d/0x50 [ 871.442547][ T1517] __f_setown+0x67/0x370 [ 871.448433][ T1517] generic_setlease+0xacf/0xfd0 [ 871.454842][ T1517] do_fcntl_add_lease+0x35e/0x470 [ 871.461781][ T1517] fcntl_setlease+0x123/0x180 [ 871.468276][ T1517] do_fcntl+0x8b3/0x1a20 [ 871.474253][ T1517] __se_sys_fcntl+0xc8/0x150 [ 871.480462][ T1517] do_syscall_64+0x15f/0xf80 [ 871.486620][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.494194][ T1517] INITIAL READ USE at: [ 871.498599][ T1517] lock_acquire+0x106/0x350 [ 871.505098][ T1517] _raw_read_lock_irqsave+0x48/0x60 [ 871.512287][ T1517] send_sigio+0x38/0x370 [ 871.518552][ T1517] dnotify_handle_event+0x169/0x440 [ 871.525837][ T1517] fsnotify+0x1831/0x1ae0 [ 871.532428][ T1517] path_openat+0x15c2/0x3860 [ 871.539131][ T1517] do_file_open+0x23e/0x4a0 [ 871.545726][ T1517] do_sys_openat2+0x113/0x200 [ 871.552498][ T1517] __x64_sys_openat+0x138/0x170 [ 871.559968][ T1517] do_syscall_64+0x15f/0xf80 [ 871.566664][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.574650][ T1517] } [ 871.577183][ T1517] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 871.586548][ T1517] ... acquired at: [ 871.590504][ T1517] _raw_read_lock_irqsave+0x48/0x60 [ 871.595888][ T1517] send_sigio+0x38/0x370 [ 871.600314][ T1517] kill_fasync+0x24d/0x4d0 [ 871.605031][ T1517] lease_break_callback+0x26/0x30 [ 871.610496][ T1517] __break_lease+0x81f/0x1ea0 [ 871.615345][ T1517] vfs_mknod+0x52d/0x610 [ 871.620027][ T1517] unix_bind+0x548/0x1230 [ 871.624805][ T1517] __sys_bind+0x2e3/0x410 [ 871.629303][ T1517] __x64_sys_bind+0x7a/0x90 [ 871.634064][ T1517] do_syscall_64+0x15f/0xf80 [ 871.638982][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.645412][ T1517] [ 871.647821][ T1517] [ 871.647821][ T1517] stack backtrace: [ 871.653804][ T1517] CPU: 0 UID: 0 PID: 1517 Comm: syz.2.12526 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.653827][ T1517] Tainted: [L]=SOFTLOCKUP [ 871.653833][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 871.653844][ T1517] Call Trace: [ 871.653853][ T1517] [ 871.653861][ T1517] dump_stack_lvl+0xe8/0x150 [ 871.653883][ T1517] __lock_acquire+0x2a94/0x2cf0 [ 871.653907][ T1517] ? send_sigio+0x38/0x370 [ 871.653927][ T1517] lock_acquire+0x106/0x350 [ 871.653941][ T1517] ? send_sigio+0x38/0x370 [ 871.653960][ T1517] ? kill_fasync+0x199/0x4d0 [ 871.653979][ T1517] ? lock_acquire+0x106/0x350 [ 871.653994][ T1517] ? kill_fasync+0x199/0x4d0 [ 871.654014][ T1517] _raw_read_lock_irqsave+0x48/0x60 [ 871.654035][ T1517] ? send_sigio+0x38/0x370 [ 871.654054][ T1517] send_sigio+0x38/0x370 [ 871.654074][ T1517] kill_fasync+0x24d/0x4d0 [ 871.654093][ T1517] ? kill_fasync+0x53/0x4d0 [ 871.654113][ T1517] lease_break_callback+0x26/0x30 [ 871.654135][ T1517] __break_lease+0x81f/0x1ea0 [ 871.654158][ T1517] ? __pfx___break_lease+0x10/0x10 [ 871.654176][ T1517] ? make_vfsuid+0x49/0xa0 [ 871.654190][ T1517] ? generic_permission+0x2e4/0x690 [ 871.654209][ T1517] ? inode_permission+0x346/0x5f0 [ 871.654224][ T1517] ? bpf_lsm_inode_mknod+0x9/0x20 [ 871.654243][ T1517] ? security_inode_mknod+0xc2/0x330 [ 871.654265][ T1517] vfs_mknod+0x52d/0x610 [ 871.654287][ T1517] unix_bind+0x548/0x1230 [ 871.654306][ T1517] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 871.654328][ T1517] ? __pfx_unix_bind+0x10/0x10 [ 871.654344][ T1517] ? bpf_lsm_socket_bind+0x9/0x20 [ 871.654364][ T1517] __sys_bind+0x2e3/0x410 [ 871.654382][ T1517] ? __pfx___sys_bind+0x10/0x10 [ 871.654402][ T1517] ? rcu_is_watching+0x15/0xb0 [ 871.654422][ T1517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.654438][ T1517] __x64_sys_bind+0x7a/0x90 [ 871.654455][ T1517] do_syscall_64+0x15f/0xf80 [ 871.654475][ T1517] ? trace_irq_disable+0x3b/0x140 [ 871.654497][ T1517] ? clear_bhb_loop+0x40/0x90 [ 871.654513][ T1517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.654528][ T1517] RIP: 0033:0x7fc7f3f9ce59 [ 871.654543][ T1517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.654557][ T1517] RSP: 002b:00007fc7f4eb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 871.654574][ T1517] RAX: ffffffffffffffda RBX: 00007fc7f4215fa0 RCX: 00007fc7f3f9ce59 [ 871.654585][ T1517] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000004 [ 871.654595][ T1517] RBP: 00007fc7f4032d6f R08: 0000000000000000 R09: 0000000000000000 [ 871.654606][ T1517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.654615][ T1517] R13: 00007fc7f4216038 R14: 00007fc7f4215fa0 R15: 00007fc7f433fa48 [ 871.654631][ T1517] [ 871.941701][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.953686][ T1232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.979515][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.986000][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.393826][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.403032][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.003091][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.032975][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.153199][ T769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.161636][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog