last executing test programs: 3m47.077259667s ago: executing program 4 (id=2670): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="201507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0xe, 0x2, "c6be"}, 0x0, 0x0}) 3m44.931507372s ago: executing program 4 (id=2695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 3m44.718115776s ago: executing program 4 (id=2699): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0xfffffffd, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3m44.523118486s ago: executing program 4 (id=2702): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m43.762287857s ago: executing program 4 (id=2710): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="db"]}]}, 0x2c}], 0x1}, 0x0) socket$kcm(0x2, 0x2, 0x84) 3m43.490692618s ago: executing program 4 (id=2713): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0xfffffff9, 0x80000001, 0xb, 0x1fd, 0x1}) 3m43.093147576s ago: executing program 32 (id=2713): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0xfffffff9, 0x80000001, 0xb, 0x1fd, 0x1}) 5.570992811s ago: executing program 2 (id=4869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000980)={0xb, 0x0, [{0x4, 0x200, 0x2, 0x5, 0x400, 0x2}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x1, 0x3, 0x3}, {0xb, 0x6, 0x1, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10003}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39f, 0x2}, {0xb, 0x4, 0x3, 0x5, 0x807, 0x2, 0x2}, {0x40000001, 0x5877c6ba, 0x6, 0x0, 0x5, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x1, 0xa, 0xfffffefb, 0xd0b, 0xd5}, {0x40000000, 0x3ff, 0x5, 0x5, 0x3, 0xffffffff, 0x15}]}) 5.222020681s ago: executing program 2 (id=4875): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.795341913s ago: executing program 0 (id=4879): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) close_range(r1, 0xffffffffffffffff, 0x0) 4.529496196s ago: executing program 0 (id=4881): r0 = userfaultfd(0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 4.358123337s ago: executing program 0 (id=4883): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, r3, 0x0, 0x2, 0x0, 0xffffffc, {0x0, 0x2, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) 4.174906234s ago: executing program 0 (id=4885): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x46e2ce1dfc86f44b, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 2.969477763s ago: executing program 1 (id=4895): writev(0xffffffffffffffff, &(0x7f0000009e80)=[{&(0x7f0000009f00)='O', 0x1}], 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.778266085s ago: executing program 1 (id=4898): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) 2.698151541s ago: executing program 2 (id=4899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x2, 0xdddd1000, 0x0, 0x0, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0x7dfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000300)) 2.659581024s ago: executing program 1 (id=4900): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 2.545323513s ago: executing program 1 (id=4902): migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 2.365683576s ago: executing program 2 (id=4904): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x12b1, &(0x7f0000000200)={0x0, 0x9697, 0x80, 0xa, 0x20c}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 2.186805221s ago: executing program 2 (id=4905): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_012={0x1, 0x0, 0x9, 'a'}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x3, 0xffffffff, 0x9}) 1.972022135s ago: executing program 1 (id=4906): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x1947, 0x0, 0x42}) 1.015064402s ago: executing program 0 (id=4911): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr=0x64010100, @in=@multicast2, 0x0, 0x100, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 918.210365ms ago: executing program 3 (id=4913): r0 = open(&(0x7f0000000140)='./file0\x00', 0x60840, 0x28) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) 857.087374ms ago: executing program 0 (id=4914): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 807.797749ms ago: executing program 5 (id=4915): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000400700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff004c0000000c0a0101000000000000000007000000090002"], 0xe0}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 708.041132ms ago: executing program 3 (id=4916): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) 612.097392ms ago: executing program 5 (id=4917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 514.567418ms ago: executing program 3 (id=4918): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = epoll_create1(0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x8000000e}) epoll_wait(r0, &(0x7f0000001980)=[{}], 0x1, 0x6) 424.636413ms ago: executing program 3 (id=4919): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 396.60912ms ago: executing program 5 (id=4920): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) 323.759351ms ago: executing program 3 (id=4921): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xf, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6}}, 0x40) 301.607572ms ago: executing program 5 (id=4922): r0 = io_uring_setup(0x80070c5, &(0x7f00000002c0)={0x0, 0xf76f, 0x10, 0x1, 0x154}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) close_range(r0, r1, 0x0) 222.384983ms ago: executing program 5 (id=4923): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) open(&(0x7f0000000200)='./file0/file0/..\x00', 0x78e, 0x8) chroot(&(0x7f0000000080)='./file0/file0/..\x00') rmdir(&(0x7f0000000140)='./file0/file0/..\x00') 194.058889ms ago: executing program 2 (id=4924): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f0000000200)={0x7fffffff, 0x0, r2, 0xcccccccc}) 145.26201ms ago: executing program 3 (id=4925): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 123.51704ms ago: executing program 5 (id=4926): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/uts\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 0s ago: executing program 1 (id=4927): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x168}]}) kernel console output (not intermixed with test programs): al 2800 [ 412.751883][ T5972] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.762949][ T984] pwc: recv_control_msg error -71 req 04 val 1100 [ 412.770064][ T5972] usb 6-1: config 0 has no interface number 0 [ 412.776761][ T5972] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 412.795648][ T984] pwc: recv_control_msg error -71 req 04 val 1200 [ 412.808734][ T984] pwc: Registered as video103. [ 412.813869][ T5972] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.828967][ T984] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 412.838986][ T5972] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.857243][ T5972] usb 6-1: config 0 interface 1 has no altsetting 0 [ 412.871835][ T984] usb 4-1: USB disconnect, device number 43 [ 412.884529][ T5972] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 412.899733][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.923238][ T5972] usb 6-1: config 0 descriptor?? [ 413.543704][T14741] loop5: detected capacity change from 0 to 7 [ 413.552411][ T5972] uclogic 0003:145F:0212.0034: failed retrieving string descriptor #100: -71 [ 413.572769][T14741] Dev loop5: unable to read RDB block 7 [ 413.579844][ T5972] uclogic 0003:145F:0212.0034: failed retrieving pen parameters: -71 [ 413.594013][T14741] loop5: unable to read partition table [ 413.608410][ T5972] uclogic 0003:145F:0212.0034: pen probing failed: -71 [ 413.625966][ T5972] uclogic 0003:145F:0212.0034: failed probing parameters: -71 [ 413.634221][T14741] loop5: partition table beyond EOD, truncated [ 413.650942][ T5972] uclogic 0003:145F:0212.0034: probe with driver uclogic failed with error -71 [ 413.664596][T14741] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 413.674821][T14743] input: syz0 as /devices/virtual/input/input57 [ 413.726927][ T5972] usb 6-1: USB disconnect, device number 18 [ 413.744868][T14745] binder: 14744:14745 ioctl c0306201 80000540 returned -14 [ 415.244586][T14789] kvm: user requested TSC rate below hardware speed [ 415.767441][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 415.939468][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 415.950445][ T24] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 415.960481][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.002318][ T24] usb 6-1: config 0 descriptor?? [ 416.034769][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 417.065674][ T24] gspca_vc032x: reg_w err -71 [ 417.072172][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.087876][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.093336][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.123356][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.137373][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.142733][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.168644][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.174006][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.199164][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.204541][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.247524][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.252875][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.267923][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.273284][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.287777][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.293153][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.310540][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.315903][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 417.332281][ T24] gspca_vc032x: Unknown sensor... [ 417.348723][ T24] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 417.374461][ T24] usb 6-1: USB disconnect, device number 19 [ 417.593604][T14849] binder: 14846:14849 ioctl c0306201 80001a80 returned -14 [ 418.408188][T14875] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3791'. [ 418.450901][T14878] netlink: 'syz.0.3793': attribute type 12 has an invalid length. [ 418.466303][T14878] netlink: 'syz.0.3793': attribute type 29 has an invalid length. [ 418.477702][T14878] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3793'. [ 418.486961][T14878] netlink: 'syz.0.3793': attribute type 1 has an invalid length. [ 418.496802][T14878] netlink: 'syz.0.3793': attribute type 2 has an invalid length. [ 418.669696][ T5891] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 418.677677][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 418.703525][ T5891] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.877415][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 418.884676][ T24] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 418.898405][ T24] usb 3-1: config 0 has no interface number 0 [ 418.904904][ T24] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.935478][ T24] usb 3-1: config 0 interface 85 has no altsetting 0 [ 418.964302][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 418.977885][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.997575][ T24] usb 3-1: Product: syz [ 419.001820][ T24] usb 3-1: Manufacturer: syz [ 419.006468][ T24] usb 3-1: SerialNumber: syz [ 419.040483][ T24] usb 3-1: config 0 descriptor?? [ 419.443303][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3801'. [ 419.675138][ T24] appletouch 3-1:0.85: Geyser mode initialized. [ 419.691327][ T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input58 [ 419.954873][ T5891] usb 3-1: USB disconnect, device number 39 [ 420.031783][ T5891] appletouch 3-1:0.85: input: appletouch disconnected [ 420.589301][T14918] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 420.977423][ T5873] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 421.137460][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 421.150610][ T5873] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 421.159187][ T5873] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 421.186081][ T5873] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 421.209937][ T5873] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 421.241092][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 421.258947][ T5873] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 421.272857][ T5873] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 421.290406][ T5873] usb 2-1: Product: syz [ 421.299171][ T5873] usb 2-1: Manufacturer: syz [ 421.303874][ T5873] usb 2-1: SerialNumber: syz [ 421.328200][ T5873] usb 2-1: config 0 descriptor?? [ 421.341655][ T5873] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 421.362774][ T5873] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 421.559305][T14924] ldusb 2-1:0.0: Write buffer overflow, 64804 bytes dropped [ 421.675440][T14924] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 421.708437][ T5873] usb 2-1: USB disconnect, device number 40 [ 421.714606][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 421.743042][ T5873] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 422.555973][T14944] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 424.478702][ T5972] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 424.676665][ T5972] usb 2-1: Using ep0 maxpacket: 8 [ 424.702051][ T5972] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 424.747423][ T5972] usb 2-1: config 179 has no interface number 0 [ 424.754083][ T5972] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 424.792284][ T5972] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 424.835178][ T5972] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.871148][ T5972] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 424.893063][ T5972] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 424.947527][ T5972] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 424.967349][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.999235][T14971] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 425.342409][ T5891] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input59 [ 425.551557][T14975] [U] ×w [ 425.756913][ T5891] usb 2-1: USB disconnect, device number 41 [ 425.756975][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 425.771298][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 426.749086][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3849'. [ 426.788021][T15017] netlink: 'syz.5.3849': attribute type 20 has an invalid length. [ 426.821209][T15017] netlink: 'syz.5.3849': attribute type 21 has an invalid length. [ 426.987433][ T5873] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 427.140444][ T5873] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.161813][ T5873] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.193902][ T5873] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.204217][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.443115][ T5873] usb 3-1: usb_control_msg returned -32 [ 427.455838][ T5873] usbtmc 3-1:16.0: can't read capabilities [ 427.576251][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 427.737513][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 427.744495][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.756288][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 427.770740][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 427.783763][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 427.793691][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.810977][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 427.842413][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 427.858779][ T24] usb 2-1: Manufacturer: syz [ 427.876763][ T24] usb 2-1: config 0 descriptor?? [ 427.951719][ T5891] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 428.127605][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 428.134511][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.146408][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.156360][ T5891] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 428.157876][ T24] rc_core: IR keymap rc-hauppauge not found [ 428.166072][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.181092][ T24] Registered IR keymap rc-empty [ 428.189046][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.197654][ T5891] usb 6-1: config 0 descriptor?? [ 428.207568][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.229146][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 428.244548][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 428.262689][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.289265][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.317509][ T797] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 428.325609][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.347525][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.368017][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.387460][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.408403][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.434638][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.459052][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.487623][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 428.493389][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.506316][ T797] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 428.515664][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.524491][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 428.531772][ T797] usb 4-1: Product: syz [ 428.536269][ T797] usb 4-1: Manufacturer: syz [ 428.541429][ T797] usb 4-1: SerialNumber: syz [ 428.551544][ T797] usb 4-1: config 0 descriptor?? [ 428.564459][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 428.575679][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 428.596779][ T797] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 428.610369][ T24] usb 2-1: USB disconnect, device number 42 [ 428.642638][ T5891] ft260 0003:0403:6030.0036: unknown main item tag 0x7 [ 428.841305][ T5891] ft260 0003:0403:6030.0036: chip code: 0000 0000 [ 429.201076][T15068] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 429.220187][T15069] netlink: 'syz.1.3872': attribute type 13 has an invalid length. [ 429.237533][T15069] netlink: 'syz.1.3872': attribute type 17 has an invalid length. [ 429.288407][ T5891] usb 6-1: USB disconnect, device number 20 [ 429.425666][ T797] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 429.448750][ T797] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 429.462777][ T797] usb 4-1: USB disconnect, device number 44 [ 429.591764][T15069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.763002][ T5891] usb 3-1: USB disconnect, device number 40 [ 430.191892][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3883'. [ 430.202286][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3883'. [ 430.500995][T15102] loop8: detected capacity change from 0 to 8 [ 430.523450][T15102] Dev loop8: unable to read RDB block 8 [ 430.539835][T15102] loop8: unable to read partition table [ 430.547706][ T5891] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 430.555419][T15102] loop8: partition table beyond EOD, truncated [ 430.578220][T15102] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 430.711004][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.767748][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.783839][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 430.808881][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.829307][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.878538][ T5891] usb 2-1: config 0 descriptor?? [ 431.063667][T15119] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.343779][ T5891] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 431.620284][ T5891] usb 2-1: USB disconnect, device number 43 [ 431.762201][T15143] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3904'. [ 431.774777][T15143] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3904'. [ 431.797402][ T5820] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 431.951726][ T5820] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 431.962916][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.978943][ T5820] usb 4-1: Product: syz [ 431.983581][ T5820] usb 4-1: Manufacturer: syz [ 431.997354][ T5820] usb 4-1: SerialNumber: syz [ 432.004917][ T5820] usb 4-1: config 0 descriptor?? [ 432.278174][ T797] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 432.314865][ T5820] usb 4-1: USB disconnect, device number 45 [ 432.444087][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.474070][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.506753][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.538324][ T797] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.569969][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.598813][ T797] usb 3-1: config 0 descriptor?? [ 432.725284][T15165] input: syz1 as /devices/virtual/input/input62 [ 433.129313][ T797] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 433.432079][ T5972] usb 3-1: USB disconnect, device number 41 [ 434.015537][T15188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.542308][T15200] syzkaller1: entered promiscuous mode [ 434.558067][T15200] syzkaller1: entered allmulticast mode [ 435.169565][T15221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3939'. [ 435.270327][T15224] kvm: apic: phys broadcast and lowest prio [ 435.277202][T15224] kvm: apic: phys broadcast and lowest prio [ 435.503425][T15228] binder: 15226:15228 ioctl c0306201 0 returned -14 [ 435.544885][T15228] binder: 15226:15228 ioctl 541b 0 returned -22 [ 435.649172][T15236] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3947'. [ 435.720838][T15236] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3947'. [ 436.001667][T15099] syz.2.3878 (15099) used greatest stack depth: 18720 bytes left [ 436.832071][ T5972] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 436.937697][ T5820] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 436.968195][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 436.968214][ T30] audit: type=1326 audit(1770119645.862:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 437.077251][ T30] audit: type=1326 audit(1770119645.862:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.112692][ T5972] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.123026][ T5972] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 437.147388][ T5972] usb 4-1: config 1 has no interface number 0 [ 437.153582][ T5972] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.167454][ T30] audit: type=1326 audit(1770119645.862:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.189600][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 437.197439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 437.209514][ T5820] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 437.219874][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.237465][ T5972] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 437.267496][ T5972] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 437.267549][ T5820] usb 3-1: Product: syz [ 437.278960][ T30] audit: type=1326 audit(1770119645.862:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 437.307636][ T5820] usb 3-1: Manufacturer: syz [ 437.328037][ T5972] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.337148][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.337577][ T5820] usb 3-1: SerialNumber: syz [ 437.357416][ T5972] usb 4-1: Product: syz [ 437.361643][ T5972] usb 4-1: Manufacturer: syz [ 437.366337][ T5972] usb 4-1: SerialNumber: syz [ 437.387891][ T30] audit: type=1326 audit(1770119645.862:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d539 code=0x7ffc0000 [ 437.431118][T15259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.458483][ T5820] usb 3-1: config 0 descriptor?? [ 437.467431][ T30] audit: type=1326 audit(1770119645.862:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.490692][ T5820] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 437.571831][ T5820] dvb-usb: bulk message failed: -22 (2/0) [ 437.586855][ T30] audit: type=1326 audit(1770119645.862:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.610270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 437.632232][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 437.668733][ T5820] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 437.687485][ T30] audit: type=1326 audit(1770119645.862:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.694100][T15263] dvb-usb: bulk message failed: -22 (3/0) [ 437.745391][ T5820] usb 3-1: media controller created [ 437.774700][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.780540][ T30] audit: type=1326 audit(1770119645.862:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.836285][T15279] netlink: 'syz.0.3963': attribute type 13 has an invalid length. [ 437.850981][T15279] netlink: 'syz.0.3963': attribute type 17 has an invalid length. [ 437.866998][T15259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.899615][ T5820] cxusb: set interface failed [ 437.901759][ T30] audit: type=1326 audit(1770119645.872:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15268 comm="syz.5.3961" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf744d558 code=0x7ffc0000 [ 437.923790][ T5820] dvb-usb: bulk message failed: -22 (1/0) [ 437.994996][T15279] sit0: left promiscuous mode [ 437.999984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 438.012280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 438.071297][ T5820] DVB: Unable to find symbol mt352_attach() [ 438.077473][ T5820] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 438.157881][ T5820] rc_core: IR keymap rc-dvico-portable not found [ 438.171119][ T5820] Registered IR keymap rc-empty [ 438.177613][ T5820] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 438.198656][ T5820] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input64 [ 438.215753][ T5820] dvb-usb: schedule remote query interval to 100 msecs. [ 438.234171][ T5820] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 438.248933][T15279] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.255235][ T5820] usb 3-1: USB disconnect, device number 42 [ 438.256712][T15279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.271145][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.278410][T15279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.309535][ T5972] cdc_ncm 4-1:1.1: bind() failure [ 438.315229][T15279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.369262][ T5820] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 438.512234][ T5972] usb 4-1: USB disconnect, device number 46 [ 438.951927][T15304] loop9: detected capacity change from 0 to 7 [ 438.973286][T10238] Dev loop9: unable to read RDB block 7 [ 438.979182][T10238] loop9: unable to read partition table [ 438.985248][T10238] loop9: partition table beyond EOD, truncated [ 438.998389][T15304] Dev loop9: unable to read RDB block 7 [ 439.018644][T15304] loop9: unable to read partition table [ 439.026062][T15304] loop9: partition table beyond EOD, truncated [ 439.033196][T15304] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.148004][ T5972] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 439.317940][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 439.343017][ T5972] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 439.367016][ T5972] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 439.377409][ T5891] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 439.390134][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 439.409234][ T5972] usb 2-1: Product: syz [ 439.418672][ T5972] usb 2-1: Manufacturer: syz [ 439.433282][ T5972] usb 2-1: SerialNumber: syz [ 439.457980][ T5972] usb 2-1: config 0 descriptor?? [ 439.469848][T15302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 439.482191][ T5972] hub 2-1:0.0: bad descriptor, ignoring hub [ 439.489984][ T5972] hub 2-1:0.0: probe with driver hub failed with error -5 [ 439.529167][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 439.546296][ T5891] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 439.578858][ T5891] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.603400][ T5891] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 439.629954][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.681477][ T5891] usbtmc 4-1:16.0: bulk endpoints not found [ 439.820841][ T5873] usb 2-1: USB disconnect, device number 44 [ 439.937187][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3985'. [ 439.947043][T15330] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 439.956607][T15330] netlink: 'syz.2.3986': attribute type 2 has an invalid length. [ 439.966728][T15330] netlink: 'syz.2.3986': attribute type 1 has an invalid length. [ 439.977232][T15330] netlink: 'syz.2.3986': attribute type 3 has an invalid length. [ 439.987984][ T5891] usb 4-1: USB disconnect, device number 47 [ 440.109449][T15335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3988'. [ 441.015688][T15368] binder: 15367:15368 ioctl c0306201 800003c0 returned -14 [ 442.444873][T15413] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 442.467751][T15413] netlink: 'syz.2.4023': attribute type 2 has an invalid length. [ 442.475731][T15413] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 442.483807][ T5891] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 442.547795][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4023'. [ 442.708501][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.720564][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.748319][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.769253][ T5891] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.804251][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.834160][ T5891] usb 2-1: config 0 descriptor?? [ 442.991540][T15434] input: syz1 as /devices/virtual/input/input65 [ 443.329989][ T5891] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 443.527734][ T5820] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 443.623768][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4035'. [ 443.635308][ T5873] usb 2-1: USB disconnect, device number 45 [ 443.688649][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 443.695778][ T5820] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 443.715655][ T5820] usb 6-1: config 0 has no interface number 0 [ 443.745905][ T5820] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 443.764892][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.776024][ T5820] usb 6-1: Product: syz [ 443.782694][ T5820] usb 6-1: Manufacturer: syz [ 443.787814][ T5820] usb 6-1: SerialNumber: syz [ 443.808434][ T5820] usb 6-1: config 0 descriptor?? [ 443.822039][ T5820] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 444.039645][ T5820] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 444.079525][ T5820] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 444.286787][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91 [ 444.310473][T15467] vivid-002: disconnect [ 444.317859][T15466] vivid-002: reconnect [ 444.491068][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 444.493318][ T5891] usb 6-1: USB disconnect, device number 21 [ 444.541637][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 444.581145][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 444.628886][ T5891] quatech2 6-1:0.51: device disconnected [ 444.823550][T15491] netlink: 'syz.2.4053': attribute type 13 has an invalid length. [ 444.841384][T15491] netlink: 'syz.2.4053': attribute type 17 has an invalid length. [ 444.852938][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.860798][T15492] UHID_CREATE from different security context by process 1580 (syz.0.4054), this is not allowed. [ 444.885776][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.906022][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.916466][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.924366][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.932611][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.949828][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.966617][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.978918][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 444.994785][ T24] hid-generic 0000:0000:0004.003A: unknown main item tag 0x0 [ 445.015940][ T24] hid-generic 0000:0000:0004.003A: hidraw0: HID v0.03 Device [syz1] on syz0 [ 445.127971][T15491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.170454][T15497] fido_id[15497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 445.265818][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.272268][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.577410][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 445.749799][ T24] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 445.767688][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.798737][ T24] usb 6-1: config 0 descriptor?? [ 445.826152][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 446.219672][ T24] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 446.380942][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'. [ 446.404757][T10924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.425614][T10924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.435685][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.622163][T15539] io-wq is not configured for unbound workers [ 446.636293][ T24] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 446.777623][ T984] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 446.844402][ T5972] usb 6-1: USB disconnect, device number 22 [ 446.897925][ T5891] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 446.927388][ T984] usb 3-1: Using ep0 maxpacket: 32 [ 446.928074][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.950025][ T984] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 446.967435][ T984] usb 3-1: config 0 has no interface number 0 [ 446.976182][ T984] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 446.996036][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.015015][ T984] usb 3-1: Product: syz [ 447.022070][ T984] usb 3-1: Manufacturer: syz [ 447.029330][ T984] usb 3-1: SerialNumber: syz [ 447.041235][ T984] usb 3-1: config 0 descriptor?? [ 447.066854][ T5891] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 447.079019][ T984] smsc95xx v2.0.0 [ 447.087449][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.106083][ T5891] usb 4-1: Product: syz [ 447.110547][ T5891] usb 4-1: Manufacturer: syz [ 447.115231][ T5891] usb 4-1: SerialNumber: syz [ 447.152532][ T5891] hub 4-1:24.0: bad descriptor, ignoring hub [ 447.167673][ T5891] hub 4-1:24.0: probe with driver hub failed with error -5 [ 447.257810][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.357574][ T5891] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 447.402117][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.443380][ T5891] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 447.476079][ T5891] usb 4-1: media controller created [ 447.488335][ T984] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 447.527706][ T984] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 447.541136][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.653506][ T5891] DVB: Unable to find symbol dib7000p_attach() [ 447.661198][ T5891] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 447.804721][ T5891] rc_core: IR keymap rc-dib0700-rc5 not found [ 447.820536][ T5891] Registered IR keymap rc-empty [ 447.836420][ T5891] dvb-usb: could not initialize remote control. [ 447.849324][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 447.867808][ T5891] usb 4-1: USB disconnect, device number 48 [ 447.954850][ T984] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 447.997216][ T984] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 448.021077][ T5891] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 448.034802][ T984] usb 3-1: USB disconnect, device number 43 [ 448.909374][T15610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4103'. [ 449.030554][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4106'. [ 449.306388][T15625] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4110'. [ 450.317425][ T5891] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 450.475380][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 450.505798][ T5891] usb 3-1: config 1 has no interface number 0 [ 450.526935][ T5891] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.577583][ T5891] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 450.587162][ T5891] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.639826][ T5891] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.659642][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.680943][ T5891] usb 3-1: Product: syz [ 450.689418][ T5891] usb 3-1: Manufacturer: syz [ 450.727390][ T5891] usb 3-1: SerialNumber: syz [ 450.777470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.409552][ T5972] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 451.537744][ T984] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 451.576756][ T5891] cdc_ncm 3-1:1.1: bind() failure [ 451.597385][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 451.604985][ T5972] usb 4-1: config 0 has no interfaces? [ 451.612819][ T5972] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 451.623950][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.639370][ T5972] usb 4-1: config 0 descriptor?? [ 451.697446][ T984] usb 6-1: Using ep0 maxpacket: 8 [ 451.705635][ T984] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 451.714311][ T984] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.724168][ T984] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.735874][ T984] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.746180][ T984] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.761401][ T984] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.770685][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.789004][ T5972] usb 3-1: USB disconnect, device number 44 [ 451.859364][ T24] usb 4-1: USB disconnect, device number 49 [ 451.991614][ T984] usb 6-1: GET_CAPABILITIES returned 0 [ 451.998160][ T984] usbtmc 6-1:16.0: can't read capabilities [ 452.204529][ T984] usb 6-1: USB disconnect, device number 23 [ 452.534268][T15697] syzkaller1: entered promiscuous mode [ 452.540166][T15697] syzkaller1: entered allmulticast mode [ 453.248834][T15728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4157'. [ 453.692505][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4165'. [ 453.706976][T15745] netlink: 'syz.5.4165': attribute type 1 has an invalid length. [ 453.715218][T15745] netlink: 'syz.5.4165': attribute type 2 has an invalid length. [ 453.835809][ T984] hid_parser_main: 91 callbacks suppressed [ 453.835835][ T984] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 453.898219][ T984] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 454.658255][T15777] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4178'. [ 455.022866][T15788] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4183'. [ 455.147762][T15792] batadv_slave_1: entered promiscuous mode [ 455.171989][T15789] batadv_slave_1: left promiscuous mode [ 455.241054][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 455.241072][ T30] audit: type=1326 audit(1770119664.142:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15793 comm="syz.5.4187" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744d539 code=0x0 [ 455.547549][ T984] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 455.707737][ T984] usb 3-1: Using ep0 maxpacket: 16 [ 455.714929][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.732918][ T984] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 455.742367][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.753623][ T984] usb 3-1: config 0 descriptor?? [ 455.857475][ T5972] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 456.007411][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 456.014564][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.025969][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.037137][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.050316][ T5972] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.059809][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.071780][ T5972] usb 2-1: config 0 descriptor?? [ 456.138700][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.148088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.185453][ T984] mcp2221 0003:04D8:00DD.003C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 456.409779][ T5891] usb 3-1: USB disconnect, device number 45 [ 456.515241][ T5972] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.003D/input/input68 [ 456.619306][ T5972] microsoft 0003:045E:07DA.003D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 456.748541][ T5891] usb 2-1: USB disconnect, device number 46 [ 456.779796][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.789167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.916221][T15821] IPVS: You probably need to specify IP address on multicast interface. [ 456.925898][T15821] IPVS: Error connecting to the multicast addr [ 457.457830][ T5891] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 457.587472][ T24] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 457.611169][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 457.617959][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 457.627257][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.648536][ T5891] usb 6-1: config 0 descriptor?? [ 457.741013][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.753166][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.767218][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.781724][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.008478][ T24] usb 3-1: usb_control_msg returned -32 [ 458.014488][ T24] usbtmc 3-1:16.0: can't read capabilities [ 458.170111][T15859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4214'. [ 458.477464][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 458.628283][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 458.635851][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.647191][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 458.656587][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.672260][ T5891] video4linux radio48: keene_cmd_set failed (-71) [ 458.685322][ T24] usb 2-1: config 0 descriptor?? [ 458.692866][ T5891] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 458.709202][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.718415][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.727179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.735583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.745726][ T5891] usb 6-1: USB disconnect, device number 24 [ 458.870341][T15864] input: syz0 as /devices/virtual/input/input69 [ 459.113257][ T24] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 459.160742][T15868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.336042][ T24] usb 2-1: USB disconnect, device number 47 [ 459.977502][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.010338][T15891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4227'. [ 460.366484][ T5820] usb 3-1: USB disconnect, device number 46 [ 460.407753][ T5972] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 460.588891][ T5972] usb 4-1: Using ep0 maxpacket: 32 [ 460.591415][ T5972] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 460.591451][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.594728][ T5972] usb 4-1: config 0 descriptor?? [ 460.747476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 460.803493][ T5972] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 460.834458][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.869370][ T5972] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 460.893298][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'. [ 460.902562][ T5972] usb 4-1: media controller created [ 460.942792][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.188681][ T5972] DVB: Unable to find symbol dib7000p_attach() [ 461.205240][ T5972] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 461.399354][ T5972] rc_core: IR keymap rc-dib0700-rc5 not found [ 461.419183][ T5972] Registered IR keymap rc-empty [ 461.424582][ T5972] dvb-usb: could not initialize remote control. [ 461.434714][ T5972] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 461.469507][ T5972] usb 4-1: USB disconnect, device number 50 [ 461.557401][ T984] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 461.590415][ T5972] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 461.711525][T15924] syzkaller1: entered promiscuous mode [ 461.717172][T15924] syzkaller1: entered allmulticast mode [ 461.768076][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.782365][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.826056][ T984] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.868105][ T984] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.887737][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.898514][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.906926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.919597][ T984] usb 3-1: config 0 descriptor?? [ 461.942045][T15930] qrtr: Invalid version 0 [ 462.431799][ T984] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 462.549448][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.557884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.704004][ T24] usb 3-1: USB disconnect, device number 47 [ 462.867907][ T984] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 463.031173][ T984] usb 6-1: Using ep0 maxpacket: 16 [ 463.049639][ T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.071035][ T984] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 463.080612][ T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.102672][ T984] usb 6-1: config 0 descriptor?? [ 463.498136][ T5972] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 463.545348][ T984] mcp2221 0003:04D8:00DD.0040: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 463.680897][ T5972] usb 4-1: Using ep0 maxpacket: 16 [ 463.705673][ T5972] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 463.727397][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.735542][ T5972] usb 4-1: Product: syz [ 463.777409][ T5972] usb 4-1: Manufacturer: syz [ 463.791263][ T5820] usb 6-1: USB disconnect, device number 25 [ 463.797364][ T5972] usb 4-1: SerialNumber: syz [ 463.815161][ T5972] usb 4-1: config 0 descriptor?? [ 463.821894][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.822335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.900010][ T5972] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 464.302594][ T5972] gspca_sn9c20x: Write register 1001 failed -71 [ 464.312175][ T5972] gspca_sn9c20x: Device initialization failed [ 464.327588][ T5972] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 464.350664][ T5972] usb 4-1: USB disconnect, device number 51 [ 464.460952][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.469468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.564751][T15987] loop8: detected capacity change from 0 to 7 [ 464.572988][T15987] Dev loop8: unable to read RDB block 7 [ 464.579195][T15987] loop8: unable to read partition table [ 464.595688][T15987] loop8: partition table beyond EOD, truncated [ 464.603447][T15987] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 464.651421][T10238] Dev loop8: unable to read RDB block 7 [ 464.664635][T10238] loop8: unable to read partition table [ 464.676642][T10238] loop8: partition table beyond EOD, truncated [ 464.684599][T15987] Dev loop8: unable to read RDB block 7 [ 464.694952][T15987] loop8: unable to read partition table [ 464.701890][T15987] loop8: partition table beyond EOD, truncated [ 464.708281][T15987] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 464.897451][ T5820] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 465.084944][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 465.101071][ T5820] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 465.120470][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.152033][ T5820] pvrusb2: Hardware description: Terratec Grabster AV400 [ 465.173399][ T5820] pvrusb2: ********** [ 465.177814][ T5820] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 465.213845][ T5820] pvrusb2: Important functionality might not be entirely working. [ 465.227362][ T5820] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 465.258715][ T5820] pvrusb2: ********** [ 465.358506][ T2346] pvrusb2: Invalid write control endpoint [ 465.460573][ T2346] pvrusb2: Invalid write control endpoint [ 465.487361][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 465.507327][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 465.519984][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 465.537389][ T2346] pvrusb2: Device being rendered inoperable [ 465.570410][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 465.587467][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 465.610713][ T2346] pvrusb2: Attached sub-driver cx25840 [ 465.616681][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 465.643258][T15991] pvrusb2: Attempted to execute control transfer when device not ok [ 465.653610][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 465.666103][ T24] usb 3-1: USB disconnect, device number 48 [ 465.968341][ T5820] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 466.160578][ T5820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.171028][ T5820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.183421][ T5820] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.192799][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.201156][ T5820] usb 2-1: Product: syz [ 466.205540][ T5820] usb 2-1: Manufacturer: syz [ 466.210245][ T5820] usb 2-1: SerialNumber: syz [ 466.432064][ T5820] usb 2-1: 0:2 : does not exist [ 466.443308][ T5820] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 466.470512][ T5820] usb 2-1: USB disconnect, device number 48 [ 466.510110][T10238] udevd[10238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.788847][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 466.847343][ T30] audit: type=1326 audit(1770119675.742:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16023 comm="syz.3.4283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7fc00000 [ 466.969707][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 466.990221][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.029542][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.048378][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.095592][T16037] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 467.116285][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.257860][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 467.417393][ T9] usb 3-1: USB disconnect, device number 49 [ 467.440675][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 467.460264][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.493880][ T24] usb 4-1: config 0 descriptor?? [ 467.523856][ T24] cp210x 4-1:0.0: cp210x converter detected [ 467.659485][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.668028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.929474][ T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 467.960404][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 468.175768][ T24] usb 4-1: USB disconnect, device number 52 [ 468.210869][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 468.298936][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.307443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.316926][ T24] cp210x 4-1:0.0: device disconnected [ 468.397573][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 468.557410][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 468.564656][ T9] usb 6-1: config 33 has too many interfaces: 128, using maximum allowed: 32 [ 468.577501][ T9] usb 6-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 468.598222][ T9] usb 6-1: config 33 has 0 interfaces, different from the descriptor's value: 128 [ 468.619023][T16084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.639630][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 468.657397][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.665598][ T9] usb 6-1: Product: syz [ 468.670056][ T9] usb 6-1: Manufacturer: syz [ 468.674768][ T9] usb 6-1: SerialNumber: syz [ 468.907227][ T9] usb 6-1: USB disconnect, device number 26 [ 469.321595][T16108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.331208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.372611][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 469.437513][ T9] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 469.564609][ T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 469.584674][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.593205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.613062][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.632309][ T24] usb 2-1: config 0 descriptor?? [ 469.645488][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 469.647618][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 469.677392][ T9] usb 4-1: config 0 has no interface number 0 [ 469.683637][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 469.688667][T16118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.738421][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 469.762703][T16118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.781843][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 469.815700][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.855100][ T9] usb 4-1: config 0 descriptor?? [ 469.888131][T16101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 469.902019][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 470.055501][ T24] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 470.082100][T16123] bond2: ARP target 1.0.0.0 is already present [ 470.092358][T16123] bond2: option arp_ip_target: invalid value (1) [ 470.115628][T16123] bond2 (unregistering): Released all slaves [ 470.200014][ T984] usb 4-1: USB disconnect, device number 53 [ 470.206106][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 470.456831][ T24] gspca_cpia1: usb_control_msg 02, error -71 [ 470.470497][ T24] gspca_cpia1: usb_control_msg 05, error -71 [ 470.486555][ T24] cpia1 2-1:0.0: unexpected systemstate: 00 [ 470.513932][ T24] usb 2-1: USB disconnect, device number 49 [ 471.124197][T16140] netlink: 63 bytes leftover after parsing attributes in process `syz.1.4329'. [ 471.133551][T16141] loop8: detected capacity change from 0 to 8 [ 471.158381][T16141] Dev loop8: unable to read RDB block 8 [ 471.164038][T16141] loop8: unable to read partition table [ 471.192769][T16141] loop8: partition table beyond EOD, truncated [ 471.217485][T16141] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 472.407561][ T984] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 472.477717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 472.485968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 472.489490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 472.579206][ T984] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 472.613733][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.654230][ T30] audit: type=1326 audit(1770119681.542:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 472.695643][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.716964][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 472.732294][ T30] audit: type=1326 audit(1770119681.542:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f21558 code=0x7ffc0000 [ 472.756608][ T30] audit: type=1326 audit(1770119681.542:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 472.780061][ T984] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 472.807504][ T984] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 472.815938][ T984] usb 4-1: Manufacturer: syz [ 472.831096][ T30] audit: type=1326 audit(1770119681.542:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 472.878481][ T984] usb 4-1: config 0 descriptor?? [ 472.907843][ T30] audit: type=1326 audit(1770119681.542:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f21558 code=0x7ffc0000 [ 472.954457][ T30] audit: type=1326 audit(1770119681.542:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f21558 code=0x7ffc0000 [ 472.980895][ T30] audit: type=1326 audit(1770119681.542:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 473.021353][ T30] audit: type=1326 audit(1770119681.542:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 473.111945][ T30] audit: type=1326 audit(1770119681.542:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f21558 code=0x7ffc0000 [ 473.148561][ T30] audit: type=1326 audit(1770119681.542:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.1.4349" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 473.297477][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 473.344625][ T984] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 473.381460][ T984] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 473.417936][T10924] net_ratelimit: 2 callbacks suppressed [ 473.417957][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.432186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.457839][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 473.480135][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.507782][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 473.527601][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.549349][ T9] usb 2-1: config 0 descriptor?? [ 473.604076][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input73 [ 473.664805][ T984] usb 4-1: USB disconnect, device number 54 [ 473.768152][T16202] fido_id[16202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 473.901806][ T5179] bcm5974 2-1:0.0: could not read from device [ 473.921867][T16205] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 473.929906][ T5179] bcm5974 2-1:0.0: could not read from device [ 473.941377][ T5179] bcm5974 2-1:0.0: could not read from device [ 473.979483][ T5179] bcm5974 2-1:0.0: could not read from device [ 473.986431][ T9] usb 2-1: USB disconnect, device number 50 [ 474.011654][ T5179] bcm5974 2-1:0.0: could not read from device [ 474.058422][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.066880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.134428][T16209] syzkaller1: entered promiscuous mode [ 474.140316][T16209] syzkaller1: entered allmulticast mode [ 474.861353][T16241] loop2: detected capacity change from 0 to 7 [ 474.891566][T16241] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 474.940358][T16241] loop2: p1 start 3909398222 is beyond EOD, truncated [ 474.980943][T16241] loop2: p2 start 3343657203 is beyond EOD, truncated [ 475.016459][T16241] loop2: p3 start 1602108098 is beyond EOD, truncated [ 475.049819][T16241] loop2: p4 start 884671223 is beyond EOD, truncated [ 475.072778][T16241] loop2: p5 start 2750369483 is beyond EOD, truncated [ 475.104250][T16241] loop2: p6 start 3125209029 is beyond EOD, truncated [ 475.117634][T16241] loop2: p7 start 3407020032 is beyond EOD, truncated [ 475.338244][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.346621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.355768][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.364144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.547592][ T5972] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 475.567749][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 475.703672][ T5972] usb 6-1: Using ep0 maxpacket: 16 [ 475.729281][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.750573][ T5972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.764319][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.787501][ T5972] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 475.817466][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.830900][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.876457][ T5972] usb 6-1: config 0 descriptor?? [ 475.881760][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.904170][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.951387][ T9] usb 4-1: config 0 descriptor?? [ 476.040798][T16268] tipc: Started in network mode [ 476.046000][T16268] tipc: Node identity ac14142f, cluster identity 4711 [ 476.054061][T16268] tipc: New replicast peer: 0.0.0.0 [ 476.060910][T16268] tipc: Enabled bearer , priority 10 [ 476.333599][ T5972] mcp2221 0003:04D8:00DD.0042: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 476.396002][ T9] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 476.580821][ T5972] usb 6-1: USB disconnect, device number 27 [ 476.975716][ T5972] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 477.029440][ T5972] hid-generic 0000:0000:0000.0044: hidraw1: HID v0.00 Device [syz1] on syz0 [ 477.087484][ T24] tipc: Node number set to 2886997039 [ 477.897531][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.541710][ T24] usb 4-1: USB disconnect, device number 55 [ 478.707619][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 478.899345][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.921000][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 478.944576][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.991349][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.033533][T16308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 479.047249][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.076875][T16328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.086277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.188687][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.197237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.346035][ T5820] usb 2-1: USB disconnect, device number 51 [ 479.836007][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.844648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.077999][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 480.107546][T16346] netlink: 'syz.1.4416': attribute type 5 has an invalid length. [ 480.115530][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4416'. [ 480.161245][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 480.174604][T16346] netlink: 'syz.1.4416': attribute type 5 has an invalid length. [ 480.197998][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4416'. [ 480.281624][T16351] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.4418'. [ 480.556640][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4420'. [ 480.606390][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4420'. [ 480.785912][T16364] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4424'. [ 480.803221][T16364] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4424'. [ 481.098987][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.107357][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.115812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.124228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.297432][ T5972] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 481.460379][ T5972] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 481.479398][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.543180][ T5972] usb 4-1: config 0 descriptor?? [ 481.790659][ T5972] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 482.002456][ T5972] [drm:udl_init] *ERROR* Selecting channel failed [ 482.070317][ T5972] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 482.077240][ T5972] [drm] Initialized udl on minor 2 [ 482.129840][ T5972] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.156732][ T5972] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 482.175443][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.188510][ T5972] usb 4-1: USB disconnect, device number 56 [ 482.195780][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 482.597519][T16400] netlink: 'syz.2.4440': attribute type 13 has an invalid length. [ 482.731339][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.739164][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.877474][ T797] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 483.052014][ T797] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.078364][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.119027][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 483.133162][T16400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.141392][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.164071][ T797] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.176237][T16400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.185710][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.206873][ T797] usb 2-1: config 0 descriptor?? [ 483.514280][T16418] fuse: Invalid uid '00000000000000001025' [ 483.565133][T16400] veth0_macvtap: left allmulticast mode [ 483.612112][T10928] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.642748][T10928] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.655178][T10928] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.672481][T10928] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.686414][T10928] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.719204][T10928] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.723761][ T797] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 483.779244][T10928] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.831842][T10928] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.016273][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 484.016294][ T30] audit: type=1800 audit(1770119692.912:526): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4453" name="memory.events" dev="tmpfs" ino=4748 res=0 errno=0 [ 484.132366][T16435] netlink: 'syz.3.4455': attribute type 4 has an invalid length. [ 484.179023][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 484.299204][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.307826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.341693][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 484.353807][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 484.368343][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.385049][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.393943][ T9] usb 6-1: Product: syz [ 484.399955][ T9] usb 6-1: Manufacturer: syz [ 484.404844][ T9] usb 6-1: SerialNumber: syz [ 485.451073][ T9] cdc_ncm 6-1:1.0: bind() failure [ 485.515183][ T9] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 485.544492][ T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 485.575825][ T9] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 485.587118][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.595637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.624798][ T9] usb 6-1: USB disconnect, device number 28 [ 485.708317][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 485.751007][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 485.789433][ T797] usb 2-1: USB disconnect, device number 52 [ 486.870262][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.880326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.958218][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.967495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.464412][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4479'. [ 487.481327][T16493] netlink: 'syz.2.4479': attribute type 5 has an invalid length. [ 487.489912][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 487.514657][ T1155] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.531314][ T1155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.542210][T16493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4479'. [ 487.552310][ T1155] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.562254][T16493] netlink: 'syz.2.4479': attribute type 5 has an invalid length. [ 487.571583][ T1155] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.583779][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4479'. [ 487.607458][ T797] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 487.721164][ T36] tipc: Subscription rejected, illegal request [ 487.759452][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.780472][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.793310][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.808628][ T797] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.819813][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.831628][ T797] usb 2-1: config 0 descriptor?? [ 487.857534][ T5820] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 488.023962][ T5820] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 488.059178][ T5820] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 488.082916][ T5820] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 488.093941][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.112760][T16495] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 488.126565][ T5820] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.176148][T16511] Invalid argument reading file caps for ./file0 [ 488.255821][ T797] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd [ 488.315481][ T797] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 488.419199][ T9] usb 6-1: USB disconnect, device number 29 [ 488.570831][ T5891] usb 2-1: USB disconnect, device number 53 [ 488.677503][ T5972] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 488.830656][ T5972] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 488.845502][ T5972] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 488.858017][ T5972] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 488.867951][ T5972] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 488.881040][ T5972] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 488.890298][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.902868][T16517] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 489.120207][ T5972] ath6kl: Failed to submit usb control message: -71 [ 489.158007][ T5972] ath6kl: unable to send the bmi data to the device: -71 [ 489.165281][ T5972] ath6kl: Unable to send get target info: -71 [ 489.210836][ T5972] ath6kl: Failed to init ath6kl core: -71 [ 489.225990][ T5972] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 489.289088][ T5972] usb 4-1: USB disconnect, device number 57 [ 489.631344][T16541] netlink: 'syz.5.4500': attribute type 13 has an invalid length. [ 490.062764][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.071301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.093867][T16541] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.102162][T16541] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.142323][T16541] team_slave_0: left promiscuous mode [ 490.149444][T16541] team_slave_1: left promiscuous mode [ 490.591236][T16541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.705318][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.713757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.730268][T16541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.495704][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.549684][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.626353][T16567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4511'. [ 491.704948][T16596] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4522'. [ 491.722616][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.779500][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.625487][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.633741][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.642231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.650594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.707426][ T5972] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 492.878924][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 492.890914][ T5972] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 492.927422][ T5972] usb 6-1: config 0 has no interface number 0 [ 492.933886][ T5972] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.974653][ T5972] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 493.004552][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.017144][ T5972] usb 6-1: config 0 descriptor?? [ 493.063212][ T5972] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 493.277403][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 493.297367][ T5972] usb 6-1: USB disconnect, device number 30 [ 493.527410][ T5891] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 493.697743][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 493.719290][ T5891] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 493.727635][ T5891] usb 4-1: config 0 has no interface number 0 [ 493.743487][ T5891] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 493.768506][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.776869][ T5891] usb 4-1: Product: syz [ 493.798279][ T5891] usb 4-1: Manufacturer: syz [ 493.808189][ T5891] usb 4-1: SerialNumber: syz [ 493.830587][ T5891] usb 4-1: config 0 descriptor?? [ 493.844991][ T5891] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 494.088635][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 494.137943][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 494.530457][T16666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.539987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.587334][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 494.593419][ T797] usb 4-1: USB disconnect, device number 58 [ 494.621983][ T797] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 494.679539][ T797] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 494.716740][ T797] quatech2 4-1:0.51: device disconnected [ 495.067541][ T797] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 495.217542][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 495.224124][T16693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4564'. [ 495.257855][ T797] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 495.286642][ T797] usb 3-1: config 0 has no interface number 0 [ 495.295660][ T797] usb 3-1: config 0 interface 184 has no altsetting 0 [ 495.318409][ T797] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 495.335491][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.350204][ T797] usb 3-1: Product: syz [ 495.367387][ T797] usb 3-1: Manufacturer: syz [ 495.382595][ T797] usb 3-1: SerialNumber: syz [ 495.411341][ T797] usb 3-1: config 0 descriptor?? [ 495.430665][ T797] smsc75xx v1.0.0 [ 495.819912][ T1078] net_ratelimit: 2 callbacks suppressed [ 495.819934][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.834265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.886329][T16706] syzkaller1: entered promiscuous mode [ 495.903090][T16706] syzkaller1: entered allmulticast mode [ 496.069461][ T797] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.113574][ T797] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 496.364094][ T797] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 496.417666][ T797] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 496.444787][ T797] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 496.461412][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.469949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.518313][ T797] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 496.534034][ T797] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 496.571467][ T797] usb 3-1: USB disconnect, device number 50 [ 497.297445][T15070] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 497.459934][T15070] usb 6-1: Using ep0 maxpacket: 32 [ 497.480830][T15070] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 497.497830][T15070] usb 6-1: config 0 has no interface number 0 [ 497.510345][T15070] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 497.532309][T15070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.565171][T15070] usb 6-1: Product: syz [ 497.572528][T15070] usb 6-1: Manufacturer: syz [ 497.579835][T15070] usb 6-1: SerialNumber: syz [ 497.596109][T15070] usb 6-1: config 0 descriptor?? [ 497.605021][T15070] smsc95xx v2.0.0 [ 497.797569][ T5891] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 497.950015][ T5891] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.965440][ T5891] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 497.997417][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 498.007142][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 498.038059][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 498.055935][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 498.079933][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 498.088511][ T5891] usb 2-1: Product: syz [ 498.093442][ T5891] usb 2-1: Manufacturer: syz [ 498.118363][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 498.124827][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 498.133868][ T5891] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 498.140097][ T5891] cdc_wdm 2-1:1.0: Unknown control protocol [ 498.327703][ C0] cdc_wdm 2-1:1.0: unknown notification 80 received: index 0 len 0 [ 498.378263][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.386662][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.395163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.404209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.530043][ T5820] usb 2-1: USB disconnect, device number 54 [ 498.628498][T15070] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 498.645356][T15070] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 498.656273][T15070] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 498.672724][T15070] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 498.693771][T15070] usb 6-1: USB disconnect, device number 31 [ 498.987490][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 499.169761][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 499.183196][ T9] usb 4-1: config 0 has no interface number 0 [ 499.190636][ T9] usb 4-1: config 0 interface 255 has no altsetting 0 [ 499.202952][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 499.213240][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.226796][ T9] usb 4-1: config 0 descriptor?? [ 499.249354][ T9] cp210x 4-1:0.255: cp210x converter detected [ 499.262013][T10924] tipc: Subscription rejected, illegal request [ 499.420878][T16785] input: syz1 as /devices/virtual/input/input77 [ 499.659089][ T9] cp210x 4-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 499.680562][T16791] blktrace: Concurrent blktraces are not allowed on nullb0 [ 499.893686][ T9] cp210x 4-1:0.255: GPIO initialisation failed: -19 [ 499.921099][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 500.117158][ T9] usb 4-1: USB disconnect, device number 59 [ 500.157112][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 500.179246][ T9] cp210x 4-1:0.255: device disconnected [ 500.195373][T16786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4606'. [ 500.427814][T15070] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 500.589220][T15070] usb 6-1: Using ep0 maxpacket: 16 [ 500.602585][T15070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.625081][T15070] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.665376][T15070] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 500.697634][T15070] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 500.717773][T15070] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.738256][T15070] usb 6-1: config 0 descriptor?? [ 500.836966][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4621'. [ 500.884781][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4621'. [ 501.003789][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 501.015440][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 501.158125][ T797] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 501.194888][T15070] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0047/input/input78 [ 501.303373][T15070] appleir 0003:05AC:8241.0047: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 501.326556][ T797] usb 2-1: Using ep0 maxpacket: 8 [ 501.335378][ T797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.361650][ T797] usb 2-1: config 4 interface 0 has no altsetting 0 [ 501.385224][T15070] usb 6-1: USB disconnect, device number 32 [ 501.399868][ T797] usb 2-1: string descriptor 0 read error: -22 [ 501.417034][ T797] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 501.453121][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.490747][ T797] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 501.507063][ T797] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 501.529759][ T797] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 501.538439][ T797] usb 2-1: media controller created [ 501.558423][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 501.586054][T16837] fido_id[16837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 501.590447][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.609279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.226292][T16855] netlink: 'syz.3.4637': attribute type 13 has an invalid length. [ 502.237069][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.245531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.749425][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.757091][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.841368][ T5820] usb 2-1: USB disconnect, device number 55 [ 503.142033][T16855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.168309][T16878] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 503.186450][T16855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.204843][T16886] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4643'. [ 503.339975][T16878] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.373756][T16878] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.391373][T16878] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.401795][T16878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.422641][T16883] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 503.440003][T16878] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.497937][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.506385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.711341][T16880] usb 3-1: USB disconnect, device number 52 [ 503.728825][ T1155] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.768006][ T1155] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.779383][ T1155] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.810082][ T1155] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.145569][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.154015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.130129][T16931] syzkaller1: entered promiscuous mode [ 505.135933][T16931] syzkaller1: entered allmulticast mode [ 505.258394][ T5820] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 505.437596][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 505.451738][ T5820] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 505.476683][ T5820] usb 4-1: config 0 has no interface number 0 [ 505.508143][ T5820] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 505.529591][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.540203][ T5820] usb 4-1: Product: syz [ 505.544439][ T5820] usb 4-1: Manufacturer: syz [ 505.550693][ T5820] usb 4-1: SerialNumber: syz [ 505.564957][ T5820] usb 4-1: config 0 descriptor?? [ 505.583352][ T5820] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 505.791242][ T5820] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 505.807026][ T5820] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 505.817460][T16870] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 505.977960][T16870] usb 6-1: Using ep0 maxpacket: 16 [ 505.991667][T16870] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.006396][T16870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 506.014756][T16870] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 506.028146][T16870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.049846][T16870] usb 6-1: config 0 descriptor?? [ 506.213009][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 506.222659][ T5820] usb 4-1: USB disconnect, device number 60 [ 506.240164][ T5820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 506.282094][ T5820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 506.311013][ T5820] quatech2 4-1:0.51: device disconnected [ 506.490238][T16870] nzxt-smart2 0003:1E71:2009.0048: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 506.701407][ C0] usb 6-1: input irq status -75 received [ 506.701857][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.711953][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.714124][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.722656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.910103][ T5820] usb 6-1: USB disconnect, device number 33 [ 507.980111][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.988618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.136979][T16989] blktrace: Concurrent blktraces are not allowed on nullb0 [ 508.584361][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4685'. [ 508.764136][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4686'. [ 509.227618][T16870] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 509.257968][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.266344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.345703][T17014] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.377448][T16870] usb 6-1: Using ep0 maxpacket: 8 [ 509.388755][T16870] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 509.419652][T16870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.437630][T16870] usb 6-1: Product: syz [ 509.442910][T16870] usb 6-1: Manufacturer: syz [ 509.451996][T16870] usb 6-1: SerialNumber: syz [ 509.467801][T16870] usb 6-1: config 0 descriptor?? [ 509.478103][T16870] gspca_main: sq930x-2.14.0 probing 2770:930c [ 509.656603][T17025] syzkaller1: entered promiscuous mode [ 509.663865][T17025] syzkaller1: entered allmulticast mode [ 509.730519][ T30] audit: type=1326 audit(1770119718.632:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.4700" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739d539 code=0x0 [ 509.871081][T17031] loop2: detected capacity change from 0 to 7 [ 509.880069][T11096] Dev loop2: unable to read RDB block 7 [ 509.885753][T11096] loop2: unable to read partition table [ 509.892444][T11096] loop2: partition table beyond EOD, truncated [ 509.899870][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.908552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.920627][T17031] Dev loop2: unable to read RDB block 7 [ 509.926385][T17031] loop2: unable to read partition table [ 509.932726][T17031] loop2: partition table beyond EOD, truncated [ 509.939327][T17031] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 510.296222][T16870] gspca_sq930x: ucbus_write failed -71 [ 510.313486][T16870] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 510.326961][T16870] usb 6-1: USB disconnect, device number 34 [ 511.338250][T16869] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 511.517355][T16869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.537730][T16869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.554108][T16869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.568622][T16869] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.585625][T16869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.622191][T16869] usb 6-1: config 0 descriptor?? [ 511.689592][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4720'. [ 511.704240][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4720'. [ 512.124920][T16869] plantronics 0003:047F:FFFF.0049: reserved main item tag 0xd [ 512.173993][T16869] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 512.449929][T16869] usb 6-1: USB disconnect, device number 35 [ 512.457871][T10924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.466603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.836200][T17091] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.4727'. [ 513.147759][T16869] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 513.227381][T16870] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 513.313738][T16869] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.337468][T16869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.348615][T16869] usb 3-1: Product: syz [ 513.352947][T16869] usb 3-1: Manufacturer: syz [ 513.367421][T16884] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 513.375535][T16869] usb 3-1: SerialNumber: syz [ 513.392914][T16869] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 513.411390][T16870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.437892][T16870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.452227][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 513.477101][T16870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.489017][T16870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.503740][T16870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.514447][T16870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.532116][T16870] usb 2-1: config 0 descriptor?? [ 513.537998][T16884] usb 6-1: Using ep0 maxpacket: 16 [ 513.549660][T16884] usb 6-1: config index 0 descriptor too short (expected 67, got 36) [ 513.564659][T16884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.582419][T16884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.594800][T16884] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 513.604810][T16884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.622163][T16884] usb 6-1: config 0 descriptor?? [ 513.738465][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.747204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.968780][T16870] plantronics 0003:047F:FFFF.004A: ignoring exceeding usage max [ 514.002661][T16870] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 514.055676][T16884] apple 0003:05AC:0247.004B: fixing up MacBook JIS keyboard report descriptor [ 514.079598][T16880] usb 3-1: USB disconnect, device number 53 [ 514.094486][T16884] apple 0003:05AC:0247.004B: unexpected long global item [ 514.118652][T16884] apple 0003:05AC:0247.004B: parse failed [ 514.124585][T16884] apple 0003:05AC:0247.004B: probe with driver apple failed with error -22 [ 514.260915][T16884] usb 6-1: USB disconnect, device number 36 [ 514.378774][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.387200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.657797][ T5820] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 514.700972][ T9] usb 3-1: Service connection timeout for: 256 [ 514.710453][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 514.721060][ T9] ath9k_htc: Failed to initialize the device [ 514.729796][T16880] usb 3-1: ath9k_htc: USB layer deinitialized [ 514.817630][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 514.835220][ T5820] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 514.857483][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.865633][ T5820] usb 4-1: Product: syz [ 514.877393][ T5820] usb 4-1: Manufacturer: syz [ 514.882501][ T5820] usb 4-1: SerialNumber: syz [ 514.899392][ T5820] usb 4-1: config 0 descriptor?? [ 514.923703][ T5820] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 515.670935][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.679802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.946168][T16884] usb 4-1: USB disconnect, device number 61 [ 516.098812][ T9] usb 2-1: USB disconnect, device number 56 [ 516.277454][T16870] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 516.451698][T16870] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 516.487391][T16870] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 516.507427][T16870] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.522997][T16870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.541454][T17143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 516.553949][T16870] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.637992][T16880] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 516.690866][T17156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.699616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.798173][T16880] usb 3-1: too many configurations: 238, using maximum allowed: 8 [ 516.819123][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.825527][T16870] usb 6-1: USB disconnect, device number 37 [ 516.851528][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.878078][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.913124][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.937528][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.947545][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.981989][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.992185][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.027354][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.058835][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.077708][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.089354][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.114549][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.124871][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.139286][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.173827][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.197548][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.219628][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.240408][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.268070][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.291977][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.315446][T16880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.335627][T16880] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 517.345645][T16880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.369145][T16880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 517.379903][T16880] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 517.391659][T16880] usb 3-1: Manufacturer: syz [ 517.399827][T16880] usb 3-1: SerialNumber: syz [ 517.639858][T16880] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 517.835431][T17188] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 517.904209][T16880] usb 3-1: USB disconnect, device number 54 [ 517.923885][T16880] usblp0: removed [ 518.226022][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.234547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.340142][T17208] sock: sock_set_timeout: `syz.1.4779' (pid 17208) tries to set negative timeout [ 518.790543][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4786'. [ 518.912431][T17231] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 518.924739][T17231] xt_TPROXY: Can be used only with -p tcp or -p udp [ 519.497869][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.507136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.778818][T17258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4800'. [ 520.137909][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.146445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.745446][T17295] raw_sendmsg: syz.3.4818 forgot to set AF_INET. Fix it! [ 521.203602][T17312] input: syz0 as /devices/virtual/input/input79 [ 521.210568][T17312] input: failed to attach handler leds to device input79, error: -6 [ 521.423219][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.431684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.571610][T16870] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 521.794036][T16870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 521.827873][T16870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 521.879430][T16870] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 521.895597][T16870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.914400][T16870] usb 4-1: Product: syz [ 521.927489][T16870] usb 4-1: Manufacturer: syz [ 521.932218][T16870] usb 4-1: SerialNumber: syz [ 521.988359][T16870] usb 4-1: config 0 descriptor?? [ 521.994318][T17317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.008018][T17317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.228226][T17317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.245879][T17317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 523.083579][T16870] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 523.122603][T16870] usb 4-1: USB disconnect, device number 62 [ 523.197717][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 523.388031][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 523.394974][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.403381][ T9] usb 6-1: config 0 has no interface number 0 [ 523.411712][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 523.421294][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.429494][ T9] usb 6-1: Product: syz [ 523.434037][ T9] usb 6-1: Manufacturer: syz [ 523.438759][ T9] usb 6-1: SerialNumber: syz [ 523.447092][ T9] usb 6-1: config 0 descriptor?? [ 523.459745][ T9] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 523.468948][ T9] usb 6-1: selecting invalid altsetting 1 [ 523.474729][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 523.485925][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 523.497016][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 523.505910][ T9] usb 6-1: media controller created [ 523.525142][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.669596][ T9] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 523.693543][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 523.715120][ T9] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 523.770782][ T9] usb 6-1: USB disconnect, device number 38 [ 523.927444][T16880] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 523.967399][ T5820] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 523.978284][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.986693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.079399][T16880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.090767][T16880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.101043][T16880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.114256][T16880] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.123868][T16880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.136006][ T5820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 524.148025][T16880] usb 2-1: config 0 descriptor?? [ 524.162719][ T5820] usb 4-1: config 1 has no interface number 0 [ 524.169849][ T5820] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 524.181201][ T5820] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 524.192710][ T5820] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 524.202247][ T5820] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 524.213305][ T5820] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 120, setting to 64 [ 524.227590][ T5820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.237112][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.245631][ T5820] usb 4-1: Product: syz [ 524.250089][ T5820] usb 4-1: Manufacturer: syz [ 524.254797][ T5820] usb 4-1: SerialNumber: syz [ 524.266538][T17374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 524.482996][T17374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 524.490914][T17374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 524.570356][T16880] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x6 [ 524.596500][T16880] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 524.699691][T17374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 524.758180][T16880] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 524.917534][T16880] usb 6-1: Using ep0 maxpacket: 8 [ 524.925464][T16880] usb 6-1: config 0 has no interfaces? [ 524.941092][T16880] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.961064][T16880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.970505][T16880] usb 6-1: Product: syz [ 524.974954][T16880] usb 6-1: Manufacturer: syz [ 524.980758][T16880] usb 6-1: SerialNumber: syz [ 524.996227][T16880] usb 6-1: config 0 descriptor?? [ 525.123868][T17374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 525.132584][T17374] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 525.143969][ T5820] cdc_ncm 4-1:1.1: bind() failure [ 525.232645][ T9] usb 6-1: USB disconnect, device number 39 [ 525.258034][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.266428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.353114][T16870] usb 4-1: USB disconnect, device number 63 [ 525.698872][T17399] syzkaller1: entered promiscuous mode [ 525.704617][T17399] syzkaller1: entered allmulticast mode [ 525.903807][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.912663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.356627][T17417] macvlan3: entered promiscuous mode [ 526.405708][T17418] macvlan4: entered promiscuous mode [ 526.538171][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.546538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.672410][T17428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.681937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.700304][ T5820] usb 2-1: USB disconnect, device number 57 [ 527.318027][T16880] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 527.497839][T16880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.515382][T16880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 527.552651][T16880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 527.595317][T16880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 527.637378][T16880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 527.695773][T16880] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 527.705442][T16880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 527.750690][T16880] usb 3-1: Product: syz [ 527.754993][T16880] usb 3-1: Manufacturer: syz [ 527.787732][T16880] usb 3-1: SerialNumber: syz [ 527.807847][T16880] usb 3-1: config 0 descriptor?? [ 528.023238][T16880] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 528.034766][T16880] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 528.224379][T16880] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 528.242159][T16880] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 528.267534][T16880] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 528.433862][T16880] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 528.523571][T17469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4888'. [ 528.620439][T17469] batman_adv: batadv0: Removing interface: macvlan3 [ 528.654482][T17475] sctp: [Deprecated]: syz.5.4890 (pid 17475) Use of int in max_burst socket option. [ 528.654482][T17475] Use struct sctp_assoc_value instead [ 528.678414][T17469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.713363][T17469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.744020][T17469] bond0 (unregistering): Released all slaves [ 528.813340][T17477] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4891'. [ 528.836203][T17477] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4891'. [ 528.838758][T16880] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 528.864233][T16880] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 528.897668][T16880] usb 3-1: USB disconnect, device number 55 [ 529.018094][ T12] net_ratelimit: 2046 callbacks suppressed [ 529.018117][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.032524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.116312][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4894'. [ 529.123872][ T5836] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 529.134803][ T5836] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 529.138101][T17484] netlink: 'syz.5.4894': attribute type 7 has an invalid length. [ 529.157488][T17484] netlink: 'syz.5.4894': attribute type 8 has an invalid length. [ 529.165391][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4894'. [ 529.182671][T17484] gretap0: entered promiscuous mode [ 529.197378][T17484] gretap0: left promiscuous mode [ 530.258642][T16880] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 530.419784][T16880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.471190][ T5820] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 530.507801][T16880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.528746][T16880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.547386][T16880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.577101][T16880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.588924][T16880] usb 3-1: config 0 descriptor?? [ 530.649267][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.681891][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 530.693850][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 530.706049][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.730145][ T5820] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.758528][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.781487][ T5820] usb 2-1: config 0 descriptor?? [ 530.787731][T17512] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 531.021560][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.030077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.068060][T16880] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 531.271115][ T5820] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 531.302711][ T5820] plantronics 0003:047F:FFFF.004E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 531.362470][ T9] usb 3-1: USB disconnect, device number 56 [ 531.503653][ T5820] usb 2-1: USB disconnect, device number 58 [ 531.641764][T17537] binder: 17536:17537 ioctl c0306201 800003c0 returned -14 [ 531.668682][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.677023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.700236][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.708941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.107678][T17555] [ 532.110076][T17555] ===================================================== [ 532.117043][T17555] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 532.124561][T17555] syzkaller #0 Tainted: G L [ 532.130677][T17555] ----------------------------------------------------- [ 532.137733][T17555] syz.3.4925/17555 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 532.145500][T17555] ffffffff8e20c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 532.154292][T17555] [ 532.154292][T17555] and this task is already holding: [ 532.161695][T17555] ffff88807a54f620 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 532.170470][T17555] which would create a new lock dependency: [ 532.176395][T17555] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 532.184062][T17555] [ 532.184062][T17555] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 532.193558][T17555] (&dev->event_lock#2){..-.}-{3:3} [ 532.193615][T17555] [ 532.193615][T17555] ... which became SOFTIRQ-irq-safe at: [ 532.206608][T17555] lock_acquire+0x106/0x330 [ 532.211383][T17555] _raw_spin_lock_irqsave+0x40/0x60 [ 532.216878][T17555] input_event+0x76/0xe0 [ 532.221317][T17555] atp_complete_geyser_3_4+0x114e/0x1d90 [ 532.227335][T17555] __usb_hcd_giveback_urb+0x376/0x540 [ 532.233193][T17555] dummy_timer+0xbbd/0x45d0 [ 532.237840][T17555] __hrtimer_run_queues+0x527/0xc30 [ 532.243357][T17555] hrtimer_run_softirq+0x182/0x5a0 [ 532.248792][T17555] handle_softirqs+0x22a/0x7c0 [ 532.253690][T17555] __irq_exit_rcu+0x5f/0x150 [ 532.258397][T17555] irq_exit_rcu+0x9/0x30 [ 532.262780][T17555] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 532.268544][T17555] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.274732][T17555] _raw_spin_unlock_irqrestore+0x47/0x80 [ 532.280506][T17555] dummy_urb_enqueue+0x58a/0x780 [ 532.285660][T17555] usb_hcd_submit_urb+0x328/0x1b70 [ 532.290890][T17555] atp_open+0x63/0xc0 [ 532.294982][T17555] input_open_device+0x1f8/0x3b0 [ 532.300058][T17555] mousedev_open_device+0xcc/0x150 [ 532.305294][T17555] mousedev_open+0x2ef/0x4a0 [ 532.310090][T17555] chrdev_open+0x4cd/0x5e0 [ 532.314728][T17555] do_dentry_open+0x7ce/0x1420 [ 532.319692][T17555] vfs_open+0x3b/0x340 [ 532.323885][T17555] path_openat+0x3486/0x3e20 [ 532.328679][T17555] do_filp_open+0x22d/0x490 [ 532.333299][T17555] do_sys_openat2+0x12f/0x220 [ 532.338111][T17555] __x64_sys_openat+0x138/0x170 [ 532.343078][T17555] do_syscall_64+0xe2/0xf80 [ 532.347786][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.353873][T17555] [ 532.353873][T17555] to a SOFTIRQ-irq-unsafe lock: [ 532.360907][T17555] (tasklist_lock){.+.+}-{3:3} [ 532.360937][T17555] [ 532.360937][T17555] ... which became SOFTIRQ-irq-unsafe at: [ 532.373606][T17555] ... [ 532.373617][T17555] lock_acquire+0x106/0x330 [ 532.380838][T17555] _raw_read_lock+0x36/0x50 [ 532.385450][T17555] __do_wait+0xde/0x740 [ 532.389723][T17555] do_wait+0x1e7/0x4f0 [ 532.393905][T17555] kernel_wait+0xd6/0x1c0 [ 532.398344][T17555] call_usermodehelper_exec_work+0xbe/0x230 [ 532.404350][T17555] process_scheduled_works+0xaec/0x17a0 [ 532.410029][T17555] worker_thread+0xda6/0x1360 [ 532.414864][T17555] kthread+0x726/0x8b0 [ 532.419150][T17555] ret_from_fork+0x51b/0xa40 [ 532.423866][T17555] ret_from_fork_asm+0x1a/0x30 [ 532.428749][T17555] [ 532.428749][T17555] other info that might help us debug this: [ 532.428749][T17555] [ 532.439002][T17555] Chain exists of: [ 532.439002][T17555] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 532.439002][T17555] [ 532.452095][T17555] Possible interrupt unsafe locking scenario: [ 532.452095][T17555] [ 532.460441][T17555] CPU0 CPU1 [ 532.465931][T17555] ---- ---- [ 532.471330][T17555] lock(tasklist_lock); [ 532.475609][T17555] local_irq_disable(); [ 532.482499][T17555] lock(&dev->event_lock#2); [ 532.489826][T17555] lock(&f_owner->lock); [ 532.496717][T17555] [ 532.500318][T17555] lock(&dev->event_lock#2); [ 532.505233][T17555] [ 532.505233][T17555] *** DEADLOCK *** [ 532.505233][T17555] [ 532.513412][T17555] 2 locks held by syz.3.4925/17555: [ 532.518634][T17555] #0: ffff88802a033b60 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 532.527262][T17555] #1: ffff88807a54f620 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 532.536448][T17555] [ 532.536448][T17555] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 532.546883][T17555] -> (&dev->event_lock#2){..-.}-{3:3} { [ 532.552748][T17555] IN-SOFTIRQ-W at: [ 532.557035][T17555] lock_acquire+0x106/0x330 [ 532.563746][T17555] _raw_spin_lock_irqsave+0x40/0x60 [ 532.571322][T17555] input_event+0x76/0xe0 [ 532.577849][T17555] atp_complete_geyser_3_4+0x114e/0x1d90 [ 532.585760][T17555] __usb_hcd_giveback_urb+0x376/0x540 [ 532.593397][T17555] dummy_timer+0xbbd/0x45d0 [ 532.600135][T17555] __hrtimer_run_queues+0x527/0xc30 [ 532.607548][T17555] hrtimer_run_softirq+0x182/0x5a0 [ 532.614881][T17555] handle_softirqs+0x22a/0x7c0 [ 532.621858][T17555] __irq_exit_rcu+0x5f/0x150 [ 532.628659][T17555] irq_exit_rcu+0x9/0x30 [ 532.635213][T17555] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 532.643067][T17555] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.651260][T17555] _raw_spin_unlock_irqrestore+0x47/0x80 [ 532.659123][T17555] dummy_urb_enqueue+0x58a/0x780 [ 532.666341][T17555] usb_hcd_submit_urb+0x328/0x1b70 [ 532.673680][T17555] atp_open+0x63/0xc0 [ 532.679967][T17555] input_open_device+0x1f8/0x3b0 [ 532.687326][T17555] mousedev_open_device+0xcc/0x150 [ 532.694673][T17555] mousedev_open+0x2ef/0x4a0 [ 532.701484][T17555] chrdev_open+0x4cd/0x5e0 [ 532.708160][T17555] do_dentry_open+0x7ce/0x1420 [ 532.715160][T17555] vfs_open+0x3b/0x340 [ 532.721438][T17555] path_openat+0x3486/0x3e20 [ 532.728427][T17555] do_filp_open+0x22d/0x490 [ 532.735156][T17555] do_sys_openat2+0x12f/0x220 [ 532.742037][T17555] __x64_sys_openat+0x138/0x170 [ 532.749093][T17555] do_syscall_64+0xe2/0xf80 [ 532.755829][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.763916][T17555] INITIAL USE at: [ 532.768129][T17555] lock_acquire+0x106/0x330 [ 532.774752][T17555] _raw_spin_lock_irqsave+0x40/0x60 [ 532.782169][T17555] input_inject_event+0xa5/0x340 [ 532.789400][T17555] kbd_led_trigger_activate+0xbc/0x100 [ 532.797370][T17555] led_trigger_set+0x535/0x960 [ 532.805578][T17555] led_trigger_set_default+0x260/0x2a0 [ 532.815041][T17555] led_classdev_register_ext+0x787/0x9c0 [ 532.823241][T17555] input_leds_connect+0x517/0x790 [ 532.830475][T17555] input_register_device+0xd00/0x1160 [ 532.838219][T17555] atkbd_connect+0x731/0xa50 [ 532.844941][T17555] serio_driver_probe+0x82/0xd0 [ 532.851936][T17555] really_probe+0x267/0xaf0 [ 532.858639][T17555] __driver_probe_device+0x18c/0x320 [ 532.866032][T17555] driver_probe_device+0x4f/0x240 [ 532.873174][T17555] __driver_attach+0x349/0x640 [ 532.880052][T17555] bus_for_each_dev+0x23b/0x2c0 [ 532.887102][T17555] serio_handle_event+0x232/0x10d0 [ 532.894338][T17555] process_scheduled_works+0xaec/0x17a0 [ 532.902001][T17555] worker_thread+0xda6/0x1360 [ 532.908902][T17555] kthread+0x726/0x8b0 [ 532.915118][T17555] ret_from_fork+0x51b/0xa40 [ 532.921849][T17555] ret_from_fork_asm+0x1a/0x30 [ 532.928747][T17555] } [ 532.931539][T17555] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 532.940859][T17555] -> (&client->buffer_lock){....}-{3:3} { [ 532.946817][T17555] INITIAL USE at: [ 532.950929][T17555] lock_acquire+0x106/0x330 [ 532.957391][T17555] _raw_spin_lock_irqsave+0x40/0x60 [ 532.964548][T17555] evdev_ioctl_handler+0x1a49/0x1fe0 [ 532.971784][T17555] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 532.979296][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 532.986461][T17555] do_fast_syscall_32+0x33/0x70 [ 532.993266][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.001563][T17555] } [ 533.004262][T17555] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 533.012627][T17555] ... acquired at: [ 533.016632][T17555] _raw_spin_lock+0x2e/0x40 [ 533.021353][T17555] evdev_pass_values+0xb9/0xbd0 [ 533.026418][T17555] evdev_events+0x1e6/0x340 [ 533.031121][T17555] input_pass_values+0x288/0x890 [ 533.036282][T17555] input_event_dispose+0x330/0x6b0 [ 533.041642][T17555] input_inject_event+0x1dd/0x340 [ 533.046874][T17555] evdev_write+0x325/0x4c0 [ 533.051506][T17555] vfs_write+0x29a/0xb90 [ 533.055978][T17555] ksys_write+0x150/0x270 [ 533.060513][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.065950][T17555] do_fast_syscall_32+0x33/0x70 [ 533.070994][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.077524][T17555] [ 533.079870][T17555] -> (&new->fa_lock){....}-{3:3} { [ 533.085114][T17555] INITIAL USE at: [ 533.089114][T17555] lock_acquire+0x106/0x330 [ 533.095389][T17555] _raw_write_lock_irq+0x3d/0x50 [ 533.102101][T17555] fasync_remove_entry+0xf1/0x1c0 [ 533.108907][T17555] pipe_fasync+0xa9/0x1e0 [ 533.115011][T17555] __fput+0x8a5/0xa70 [ 533.120874][T17555] task_work_run+0x1d9/0x270 [ 533.127243][T17555] exit_to_user_mode_loop+0xed/0x480 [ 533.134326][T17555] __do_fast_syscall_32+0x38e/0x540 [ 533.141295][T17555] do_fast_syscall_32+0x33/0x70 [ 533.147915][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.156004][T17555] INITIAL READ USE at: [ 533.160438][T17555] lock_acquire+0x106/0x330 [ 533.167146][T17555] _raw_read_lock_irqsave+0x48/0x60 [ 533.174548][T17555] kill_fasync+0x199/0x4d0 [ 533.181225][T17555] pipe_release+0x19c/0x330 [ 533.187935][T17555] __fput+0x44f/0xa70 [ 533.194120][T17555] task_work_run+0x1d9/0x270 [ 533.200902][T17555] exit_to_user_mode_loop+0xed/0x480 [ 533.208391][T17555] __do_fast_syscall_32+0x38e/0x540 [ 533.215787][T17555] do_fast_syscall_32+0x33/0x70 [ 533.222843][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.231371][T17555] } [ 533.234117][T17555] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 533.243012][T17555] ... acquired at: [ 533.246944][T17555] _raw_read_lock_irqsave+0x48/0x60 [ 533.252388][T17555] kill_fasync+0x199/0x4d0 [ 533.257035][T17555] evdev_pass_values+0x627/0xbd0 [ 533.262195][T17555] evdev_events+0x1e6/0x340 [ 533.267366][T17555] input_pass_values+0x288/0x890 [ 533.272983][T17555] input_event_dispose+0x330/0x6b0 [ 533.278421][T17555] input_inject_event+0x1dd/0x340 [ 533.283689][T17555] evdev_write+0x325/0x4c0 [ 533.288359][T17555] vfs_write+0x29a/0xb90 [ 533.292919][T17555] ksys_write+0x150/0x270 [ 533.297463][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.302880][T17555] do_fast_syscall_32+0x33/0x70 [ 533.307941][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.314491][T17555] [ 533.316866][T17555] -> (&f_owner->lock){....}-{3:3} { [ 533.322115][T17555] INITIAL USE at: [ 533.326057][T17555] lock_acquire+0x106/0x330 [ 533.332174][T17555] _raw_write_lock_irq+0x3d/0x50 [ 533.338985][T17555] __f_setown+0x67/0x370 [ 533.344832][T17555] fcntl_dirnotify+0x3f9/0x6a0 [ 533.351233][T17555] do_fcntl+0x77e/0x1a20 [ 533.357091][T17555] do_compat_fcntl64+0x51e/0x7e0 [ 533.363789][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.370638][T17555] do_fast_syscall_32+0x33/0x70 [ 533.377091][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.385010][T17555] INITIAL READ USE at: [ 533.389396][T17555] lock_acquire+0x106/0x330 [ 533.395948][T17555] _raw_read_lock_irqsave+0x48/0x60 [ 533.403500][T17555] send_sigio+0x38/0x370 [ 533.409986][T17555] kill_fasync+0x24d/0x4d0 [ 533.416448][T17555] lease_break_callback+0x26/0x30 [ 533.423614][T17555] __break_lease+0x741/0x1b80 [ 533.430375][T17555] do_dentry_open+0x73a/0x1420 [ 533.437164][T17555] vfs_open+0x3b/0x340 [ 533.443339][T17555] dentry_open+0x61/0xa0 [ 533.449603][T17555] pidfs_alloc_file+0x18d/0x290 [ 533.456470][T17555] pidfd_prepare+0x14e/0x1b0 [ 533.463078][T17555] __se_sys_pidfd_open+0xd5/0x260 [ 533.470136][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.477357][T17555] do_fast_syscall_32+0x33/0x70 [ 533.484284][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.492762][T17555] } [ 533.495297][T17555] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 533.504405][T17555] ... acquired at: [ 533.508252][T17555] _raw_read_lock_irqsave+0x48/0x60 [ 533.513660][T17555] send_sigio+0x38/0x370 [ 533.518111][T17555] kill_fasync+0x24d/0x4d0 [ 533.522757][T17555] lease_break_callback+0x26/0x30 [ 533.528016][T17555] __break_lease+0x741/0x1b80 [ 533.532916][T17555] do_dentry_open+0x73a/0x1420 [ 533.537881][T17555] vfs_open+0x3b/0x340 [ 533.542165][T17555] dentry_open+0x61/0xa0 [ 533.546597][T17555] pidfs_alloc_file+0x18d/0x290 [ 533.551672][T17555] pidfd_prepare+0x14e/0x1b0 [ 533.556494][T17555] __se_sys_pidfd_open+0xd5/0x260 [ 533.561738][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.567150][T17555] do_fast_syscall_32+0x33/0x70 [ 533.572204][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.578730][T17555] [ 533.581774][T17555] [ 533.581774][T17555] the dependencies between the lock to be acquired [ 533.581784][T17555] and SOFTIRQ-irq-unsafe lock: [ 533.595337][T17555] -> (tasklist_lock){.+.+}-{3:3} { [ 533.600491][T17555] HARDIRQ-ON-R at: [ 533.604493][T17555] lock_acquire+0x106/0x330 [ 533.610715][T17555] _raw_read_lock+0x36/0x50 [ 533.616978][T17555] __do_wait+0xde/0x740 [ 533.622820][T17555] do_wait+0x1e7/0x4f0 [ 533.628649][T17555] kernel_wait+0xd6/0x1c0 [ 533.634657][T17555] call_usermodehelper_exec_work+0xbe/0x230 [ 533.642258][T17555] process_scheduled_works+0xaec/0x17a0 [ 533.649485][T17555] worker_thread+0xda6/0x1360 [ 533.655848][T17555] kthread+0x726/0x8b0 [ 533.661618][T17555] ret_from_fork+0x51b/0xa40 [ 533.667922][T17555] ret_from_fork_asm+0x1a/0x30 [ 533.674373][T17555] SOFTIRQ-ON-R at: [ 533.678378][T17555] lock_acquire+0x106/0x330 [ 533.684559][T17555] _raw_read_lock+0x36/0x50 [ 533.690738][T17555] __do_wait+0xde/0x740 [ 533.696689][T17555] do_wait+0x1e7/0x4f0 [ 533.702472][T17555] kernel_wait+0xd6/0x1c0 [ 533.708588][T17555] call_usermodehelper_exec_work+0xbe/0x230 [ 533.716264][T17555] process_scheduled_works+0xaec/0x17a0 [ 533.723484][T17555] worker_thread+0xda6/0x1360 [ 533.729929][T17555] kthread+0x726/0x8b0 [ 533.735673][T17555] ret_from_fork+0x51b/0xa40 [ 533.741955][T17555] ret_from_fork_asm+0x1a/0x30 [ 533.748574][T17555] INITIAL USE at: [ 533.752496][T17555] lock_acquire+0x106/0x330 [ 533.758704][T17555] _raw_write_lock_irq+0x3d/0x50 [ 533.765238][T17555] copy_process+0x2199/0x3980 [ 533.771500][T17555] kernel_clone+0x248/0x870 [ 533.777597][T17555] user_mode_thread+0x110/0x180 [ 533.784056][T17555] rest_init+0x23/0x300 [ 533.789808][T17555] start_kernel+0x380/0x3d0 [ 533.795993][T17555] x86_64_start_reservations+0x24/0x30 [ 533.803057][T17555] x86_64_start_kernel+0x143/0x1c0 [ 533.809771][T17555] common_startup_64+0x13e/0x147 [ 533.816306][T17555] INITIAL READ USE at: [ 533.820661][T17555] lock_acquire+0x106/0x330 [ 533.827187][T17555] _raw_read_lock+0x36/0x50 [ 533.833717][T17555] __do_wait+0xde/0x740 [ 533.839949][T17555] do_wait+0x1e7/0x4f0 [ 533.846069][T17555] kernel_wait+0xd6/0x1c0 [ 533.852442][T17555] call_usermodehelper_exec_work+0xbe/0x230 [ 533.860372][T17555] process_scheduled_works+0xaec/0x17a0 [ 533.867953][T17555] worker_thread+0xda6/0x1360 [ 533.874666][T17555] kthread+0x726/0x8b0 [ 533.880858][T17555] ret_from_fork+0x51b/0xa40 [ 533.887484][T17555] ret_from_fork_asm+0x1a/0x30 [ 533.894295][T17555] } [ 533.896827][T17555] ... key at: [] tasklist_lock+0x18/0x40 [ 533.904588][T17555] ... acquired at: [ 533.908444][T17555] _raw_read_lock+0x36/0x50 [ 533.913179][T17555] send_sigurg+0x12b/0x420 [ 533.917796][T17555] sk_send_sigurg+0x6c/0x2e0 [ 533.922669][T17555] queue_oob+0x42c/0x4f0 [ 533.927105][T17555] unix_stream_sendmsg+0xcb1/0xe80 [ 533.932418][T17555] ____sys_sendmsg+0xa68/0xad0 [ 533.937383][T17555] ___sys_sendmsg+0x2a5/0x360 [ 533.942264][T17555] __sys_sendmmsg+0x2e7/0x4e0 [ 533.947136][T17555] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 533.952886][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.958284][T17555] do_fast_syscall_32+0x33/0x70 [ 533.963335][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.969950][T17555] [ 533.972300][T17555] [ 533.972300][T17555] stack backtrace: [ 533.978222][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.3.4925 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.978252][T17555] Tainted: [L]=SOFTLOCKUP [ 533.978258][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 533.978276][T17555] Call Trace: [ 533.978285][T17555] [ 533.978294][T17555] dump_stack_lvl+0xe8/0x150 [ 533.978319][T17555] __lock_acquire+0x2a94/0x2cf0 [ 533.978353][T17555] ? send_sigurg+0x12b/0x420 [ 533.978375][T17555] lock_acquire+0x106/0x330 [ 533.978397][T17555] ? send_sigurg+0x12b/0x420 [ 533.978424][T17555] _raw_read_lock+0x36/0x50 [ 533.978439][T17555] ? send_sigurg+0x12b/0x420 [ 533.978460][T17555] send_sigurg+0x12b/0x420 [ 533.978492][T17555] sk_send_sigurg+0x6c/0x2e0 [ 533.978509][T17555] queue_oob+0x42c/0x4f0 [ 533.978527][T17555] ? __pfx_queue_oob+0x10/0x10 [ 533.978544][T17555] ? __lock_acquire+0x6b5/0x2cf0 [ 533.978567][T17555] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 533.978589][T17555] unix_stream_sendmsg+0xcb1/0xe80 [ 533.978606][T17555] ? finish_task_switch+0x2fd/0x920 [ 533.978628][T17555] ? rcu_is_watching+0x15/0xb0 [ 533.978646][T17555] ? __might_fault+0xaf/0x130 [ 533.978671][T17555] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 533.978687][T17555] ? __import_iovec+0x5d4/0x7e0 [ 533.978713][T17555] ? aa_sock_msg_perm+0xda/0x1b0 [ 533.978735][T17555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.978753][T17555] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 533.978768][T17555] ____sys_sendmsg+0xa68/0xad0 [ 533.978794][T17555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.978818][T17555] ? futex_unqueue+0x22/0x240 [ 533.978839][T17555] ? futex_unqueue+0x22/0x240 [ 533.978863][T17555] ___sys_sendmsg+0x2a5/0x360 [ 533.978885][T17555] ? __lock_acquire+0x6b5/0x2cf0 [ 533.978909][T17555] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.978931][T17555] ? __pfx___futex_wait+0x10/0x10 [ 533.978950][T17555] ? __pfx_futex_wake_mark+0x10/0x10 [ 533.978976][T17555] ? __fget_files+0x2a/0x420 [ 533.978999][T17555] ? __fget_files+0x3a0/0x420 [ 533.979020][T17555] __sys_sendmmsg+0x2e7/0x4e0 [ 533.979045][T17555] ? __pfx___sys_sendmmsg+0x10/0x10 [ 533.979066][T17555] ? do_futex+0x333/0x420 [ 533.979098][T17555] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 533.979129][T17555] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 533.979152][T17555] __do_fast_syscall_32+0x1d2/0x540 [ 533.979171][T17555] ? do_fast_syscall_32+0x33/0x70 [ 533.979189][T17555] ? irqentry_exit+0x10e/0x620 [ 533.979207][T17555] do_fast_syscall_32+0x33/0x70 [ 533.979226][T17555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.979251][T17555] RIP: 0023:0xf745d539 [ 533.979267][T17555] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 533.979282][T17555] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 533.979301][T17555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 533.979313][T17555] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 533.979324][T17555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.979333][T17555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.979343][T17555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.979359][T17555] [ 534.303368][T10928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.311801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.325630][ T5836] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 534.334005][ T5836] Bluetooth: hci4: Injecting HCI hardware error event [ 534.340925][ T5836] Bluetooth: hci4: hardware error 0x00 [ 536.138219][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.146483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.387706][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 536.778115][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.786633][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.418427][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.426886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.337821][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.346207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.267737][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.276089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.817834][T10920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.826126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog