last executing test programs: 33m46.214890386s ago: executing program 4 (id=217): syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800) 33m46.125296787s ago: executing program 4 (id=220): io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 33m46.115153782s ago: executing program 4 (id=223): getgid() 33m46.114389038s ago: executing program 4 (id=226): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs', 0x800, 0x0) 33m45.26903754s ago: executing program 4 (id=228): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 33m44.15169045s ago: executing program 4 (id=233): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 2.939750297s ago: executing program 0 (id=38654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cf70048cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) 2.678479223s ago: executing program 1 (id=38658): openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 2.629256037s ago: executing program 0 (id=38659): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 2.559965686s ago: executing program 1 (id=38661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x560, 0x0, 0x3}]}) 2.337704589s ago: executing program 1 (id=38665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xf0}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8000, 0x8, 0x8, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x5}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8e}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0xf8, 0x0, '\x00', 0xf1}, {0xa, 0x5, 0x2f, '\x00', 0xff}, {0x8}]}}) 1.957397534s ago: executing program 1 (id=38668): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x0, 0x91, 0x8000, 0x4, 0xa, 0xa4, 0xffb, 0x7, 0x8, 0xc3, 0x4, 0xd4200003, 0x3, 0x6, 0x6, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x6, 0x0, 0x7, 0x5, 0x100000, 0x767, 0xc, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x80001c00, 0xb, 0x5, 0xa, 0x8, 0x8000100, 0x1fc00000, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0xfffffffd, 0x7e, 0x6, 0xa, 0xcd22, 0xf, 0xff, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x17ffff, 0x4007, 0xfd, 0x9, 0x2af, 0xf7, 0x5, 0x3, 0x6, 0x9, 0x10, 0x9, 0x6, 0xe, 0x4, 0x100002, 0x8, 0x80000752, 0x8, 0x3, 0x24, 0x10001, 0x312, 0x1, 0x6, 0x6, 0x9, 0x8, 0xfdffffff, 0x2, 0x41, 0x1084, 0x100, 0x5, 0x252, 0x81, 0x1, 0x13, 0x80, 0x5, 0x0, 0xb, 0x2, 0xd9a, 0xd, 0x2e2, 0xffffdffc, 0x43, 0x5, 0x5, 0x8, 0x3, 0x4, 0x2, 0x41a, 0x8, 0x9, 0x4, 0x401, 0x66d1, 0x9, 0x9, 0x8, 0x7, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.639285722s ago: executing program 0 (id=38673): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x1}, 0x8) 1.511779374s ago: executing program 2 (id=38676): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000001240)={0x0, 0x0, {0x0, 0x1, 0x20000000, 0x0, 0x1}, 0x5e}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 1.504707891s ago: executing program 0 (id=38677): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x20000044, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 1.232091405s ago: executing program 2 (id=38681): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x3, 0x100, 0x0, 0x2}, &(0x7f0000000200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 1.110507664s ago: executing program 0 (id=38684): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x63) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x4, r2}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 987.518257ms ago: executing program 2 (id=38687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xb, 0x1, 0x9}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29e, 0x0, 0xe}]}) 899.350231ms ago: executing program 0 (id=38689): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write(r0, &(0x7f0000001780)="fc9fd3d3786d179e33251aa5ec70bcf9aff7a946dd0d9162c836f64317173e6d0ef0c53f680136e6461a8303c696c8b6f0bf14c1dabbb1f83b54beba48b165c9a4c2ebaf9b78366eddb07b0c601e999affd57d1e159c3f0df2397ff2a02cda6663b3a0fdeaa09f63bfdbd69f226ac89dc95d9071ac942e70473ae9cb503a398db501ff2c2dc8053f01284389349172b0cc0c51902763b20b673cca76248067431b829ca36389413ad9c2daa3d5041ddd89415a8b601ddf45b14f4eb6f33de5020d0404d9a3739d5430598012ec40483bd012d21a55c0fccea6b1b1ffa1fbf4ee747129ba8d586a3f9681865b51d0c2d12ba062a8ae134a87b239aa91b100e73b56e5007838a39974d224cebbb2787162d525beec9be84214535225fa90c10a117abe25eba93085837e1d7b945afa17f6669e907abe47436dc72a7aa8db1cf8a0583da26f75508069afe8006ede95d34366c385c61c52b1f127cf7a66e1fe2b1cb9fa6c29cd70d97c77eea8b358b90041e3cf32480e85b39de5f889446fdf4cd48260aa0996b83b6b9272dbd7673c6d8119dace0367beea5f13cab94cbae693115057c3e0ce23c8536eeb9b1a0c4092c3e914583af89162088c983c0ce7cccf17f0521fdff7d115e18a9a41003a3b41b04db63b2a440b69764935d144b934b8f504562c5788803a13331ec649103a97d3b7dfb69db33287f557add72eec9e5dd42cecc335b02accd75b1cc8a186415c288dca0e39e674329b16e017ee94478bdc96b4cbca7429277fab8a15385598ce92250550570f70b8730ab77f1146b2c7cb3fa349fbb5abdc211e2d313d87fda490729384b24d88e03079518c8065ecd1d0e33996fe3433f0e416427467d69ef7da1362404a375fd3a2b36d32bfca96270f32a90e9b4a456bfab869fb4fda37963c93962285c548b077c0502d2389cd0511440489697b9e2cc8108ed71a6a538192e6cd75d87c0e30bb8ceedd3b47e6a6f6778a1242da97f422e463375f77af69997480c3cb7425425d1b7465923b73c8f7b14ce369f3494a6a9e8dbf06d62be4850256e754ba3b8ca250fd94eaca787db35654821a26f56c60b83251ad33097be61586782353906f7d26aad2bbdf6b446a2c91a4b1ac84c863f597f2042edd835bee69ce218a70f7ce305d89b6334a8742034ec0deaf79b04ef59113d1e20983f36ba14bf80fff328f5bc8bee23e6f38fb76720cbc55e7fcb355470c3ef8d64fa7f6a22632e7764844373c3d0429e0af7199394ee97bbce352bf2e028cb9e28d8eadc224cce28eb233243211d76cd2d8ef7a360697d545b1605fc1bf0cb95d106cd4c9cba5bc2d8f54978af5b91895703a8c53f74349568aa8aa35a135f548288ac6a9d320c88e35da1b6da7a73fc384ebf91f8a5a84af91d4d0f64ccdcea8f5e2d17f504a28dda95d3558d979ec693d35dcc537b677838ffb8dec17a12a5d3b67c7ae8e7bab89fdf9f8f43e387902216b3834666ff56871fa1768ab0cf6201c922068bce8bd15fa1299c7dbab38e7d287b21bc057a1c5842becf7a69af0ca1d3f22b9ec7410376f07fccdc0ff6f3fdeb0e02ed6fc22dbd68dab236a45249a97c6c584acf230888213936c36a18683b2e65cc16c9a5b0ef5f4ce4c74939df772d477ea905d5a332fee0a3f3f493e81aecc32f7bdd978bfafd161557098d410634a82ffe8541fb6762bb1ec4124f88a2ef4a56bc7ffd9ac11a6970bf2cb570f70849ccd9e2ea21cf83d15dcf46bcc1d575a34d5451e653489ed4317bd81ded5ff18821ca550a234265125fe1ad59ad4ba39e75ae9cce954a5b9ec0c7244cc6efc2402529eb4c4a73f1ce96a285f87d154b2f2daf16913a0abe15c3054b6e8e29b95ecfc00da9537c58d6e7dfbe680bf17cdde03d2af310780999f58cdb2d71d6cd5de996f7b932d67d42881e171126e7d7493a5d312697d97273a4d7af308ea26f33758522a8c9259fd387dde49b16904c4586a365977f9ec78aa8571657e09dfa14f2be2f70a53dc25515802a7dd253a762338c83fd70a82257f1d102253c274196d7eefcdd9aa4e0a9a1f38ae080d0bd9bd8fbb3e3b1c69cb73bd2b39fb47322496cb9dae7522f149e2d4101cac068109bdebb719ea856fb86b1868ae4d59ab041c58a227ac1868ad2054ee2954b6c57a4e88b37b9654958613e40ad333ab408f03b200a5f978a93d44e1c58ada3ca88878fa95e70a4e50e9518aa01da7b05c1a5cc6fabaf8487ac74f04d793796cce95b47756848a260c9684ba4bca8f75a1e94d2e4efa8ddb65b5f179d2ba1b1452499b154fe6fe2229f5c040220ccf4dd6452221207f9b6776901c7986f4f529565f289dc84792fe8d7166e38ad56acdfb252c1552f36f710c853f8630a94c519191bc108284bc8f7ec91cf8f2f371fb645d2f0facd87746127ef23f1c7f6231725448447a12a9b037fa2d04655d499fd4d15e6a82ecc7bd2ffd38a95eb1bdad2d8ee50366f9bd6a16c0955668ae141fdbf9f44d48114d1a7379f7ab61a62ffc25ddfcda321ae65beac90390edc33ab801487937dcd3310c7f46735408025e61a0e6facab1d9520b1e404836ad1d994ac0455616283704038c66c645f66d3bfe0b90efa1e460ef8135bede0c85b669798551b259c7f9b9b17831949e90e59e49af884436fb374f339452c263bd9e281738559b39c9138e3e3e125fe99faadd2300c81f148b331f4749d3c0702f6ed791bf435b29785e7f588bfbef62ca0a95819ada29ffc484fbef0bacdd0c3808c7b9266f2b2c8b16b22463a74afe690462ef6ff802032216550f6e4ccc6d32256a8825aaad9b6e07a502ad70770c4d16c64d632d3c94c3f9e6b336da82a90edcbb9d4f7db9c8fa714d9a90671998fd45d34e95ff31bc8d201bcf40f39707ceb568a415935ceba80bc4356684e93c3ff5d14592bfd7357617f09bd8f3049e8e044a908536b2987926fb4454001559535a231a547e300d2f13bd73bbf87e2ff444c6e70328e992c89079582e5512cd35da6d2ef3d3da65d55d4d4e378b159e72c391dfd9b23b44dcf4b0f870d83487ed97dbd0a0b04f3020d462de28909c0007475a3a3d5c8e1acf837c990e98d79803a8dba62774bab1ad02848bee0fb63a2c5a80376be80978f9515f60a5fc25afc7541c1a02c1857a138a39db1924e76c0b38523835921a2382be7dcc9f8ac55261284fc1e74e4875e300053274145402e2b8e3c27390428e87326af2397560b3535b2d4c2e0c8e3c4cb600cb63ac5f0b8c6f4038acc50ede9504662e4e3233b38730e7dbf85ed7d6fe51bbfc2f94894e998895a617f02a59223ed51f98109c63504bb1781f6b3a189136911205ea577d07677aff1348cb791f7d2e31ecb3a4e0d62440ecc4ff031cacafec632232e600916f936f776d0bb639076acd94abe01ea0d02432c5d37dec1e2f00ce39b90fe2a487e29c15f6c7786824d7ef44eed6926d424666ca2dfd727abe04b157eca45d4f6c2260f7d9ce82aa66b3fdbc83ae461fcaa42fc0af1f04b04984f4b36760e34eef6b546f9efb4f8ea2c978ed790d8716e95b520054a6a557a205c79f60fbf5c038ba0e044277c0d36259912d63761f0c78397e9c9d8f06138222759e168299bb1a1454bc59381953fedb6373adabc910ee5fb030afc930f4eb13d57a1aa066d9f1b90c85a5fa45dea354696ca7a1d76460d6f9d35385ed5208f20bfa1bbaab400be901f5d9343489ded021791e8255c3dbb610fe450558993b4c6e2483ba72953fc8557f20ebab2770e453e80b6e25f562b5252f4ea281ce29a242c099496e22eb61a969786bf6131a7354cf4e12623cc8a1361a4604f78b269892e7c31ecad63429498eb4bfc602f41633076ab9da37bc9b1633d13fa3e0f8b4eb89d2212009b1aa7de2fbf4fbf86042f4cde7ef4e7a2ac00c05bfcf1b23f180f1088a7914cf712399af8f6f7528d43b145f76f8fe9d9cdee282bff425c258ed48a1e49da2798cafa566a515895873e3c772c4c649edd735171642d44ba48cdaf4885a1ab602622694424bd34cef72b7b360406d018e28b3a05bcd1bdd46e4d5c97ec1a9838f4823498a16e20d20bdfb2b815bcf0d066e58170d831680eb89aa33ced9290ec4031362d60d239a5cff699ba0573742a37c1bc1b457f7e9fde36d14e7715a08ae8b09cd1659a8c4bfa4493b525dfc9abad4638115a390fd2ca42c783e27cc1ac9b7c7b57ee6bf2374b95784468ca3f4ee1621ee4891d06c76ef573866ee6a4b4aca2b12833e8879aa4ac549966af0c2f12ee370505fe8132af82f7baedcc993d55cc7d503cc373840fae0c5e0de1ce65615d7edc7ac01ea342d85930103d3476bc0fcd6bc50429f8b7556aacb4f2abd6d1dbb6f5585a9c6d3dd68962ed2a81538592ca5b6119163ee6d04c76d95e2319f5eb527e9e8f02aeef53956135b352e3a4937b7e3d38eef3fa075032cf5e0b5fbc9c6bfe71a1df68f42339a4203f48a281bc21571459d697fc6ed1ee179a339fc24b444119f3e178570d5e3b641be10345c89a166ae9cd68c514ddabb8948bf698484dc219b46fbcdb1b043570c093ca5a3d5595b49d71adcfcc5a696c17c8ff580c7c6fa843e585ec1287c0801fe3934b76ca10f333df7dd5b423f44d41460ad00f05a6125c057a34d8c86e2dfd912ad53d84ce8bc55fb2d9e4dffcac03f065c7793e21c07c3c35ed88dc889fea9f31a805e65a1877304de4a618dfebbdd0b0406d630a7fbf322974061e07ced70346f189b9e6b4981a22615d2357e1d20223ff8663264852cb4556f5e0c51e6aab1a2c2f764b6585e19fe2a0998cd0c5ad3ca192cb977d7f850472de816e7ca985942ab6e2d65fca3756a730aa55f094de2625d33d857469142f65abb7679fc30a59c23b8f68fe4eb2d8a3c23352423424d39e7fce46e828be3ba621acc9b650dd7088cce0ef204a867b8c9dd319f261a10aafebbe2dd71cac3a387309480c0cf419308e29dd31e1e9b58c85cc9d44043a2b64f7821f8061d3adb4a6f29b09fddc2ebb7cd06b309ea80fbec89dee4de7994e611d4edef79ba829f5a168c2696da09bd242c12c8db2b377db65dd3542cf3980a3c6ea7f771f3eaf33583c77c680627d63019596f30749e6c5d8af74a6caf62625388ecfd535cac9b5690801147b1f67f07ce69fe9cbd6daf36343feb6ecd01c67ab0bf11b742924784be0a9ca154c593c7f0e80ab97784c69ed7b46612880677fe1bc3b20fc37753d2093978071e853c8f02e9eae9aa7fb0fa21280b5b2dd003514ba1de7f0fd922c493379059527d96709fe0b7fd71cb83306647c17b1b09a0ce4cb5280ffa38a9ec631f3593b1422b6d132d287bdb4a8991a5120e23f9cc65474df43d1135a30c2dab120a925177fe3ff0dfcf95dcaa8b28242bb2f95f46466f93eea2fa05b832ac30e0ebed1b1f38bc6b3036c793977f6501ad4da325d08985eb279606348af8a53266d45366274f76dd7ddb3469d1453575c89c90c9b427c68a7a7f2f8717ebf8e46cd7247f5db53aa071a8534e8a4ae8555a41514d0e6d12e9eb71c2601c453cfebd3d9561e88125e0524684bc20dda812bcc67aac58cc69f798e3fedc0ec4277e54a1d747f71e129c860d34b1e98c26078856992a5e7ea2c1676f169effee0f07730fb60dcf92fbb601fa3c990e042b5c6043eb2c1d97c22a17b7b04db9f86b474e1259d55db40ffbb2b2cc8564acb492c228827614a05f466b73b9bdd1a444071e0e3ec996f01e3ddcd9283fc0e02f63cf364ddf8a5ffb245f615b", 0x1000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 739.270054ms ago: executing program 2 (id=38692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 532.398948ms ago: executing program 2 (id=38695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0xfffd, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x11, 0x0, 0x11, 0x0, @multicast2, @loopback}}}}, 0x3e) 504.987584ms ago: executing program 3 (id=38696): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 485.021163ms ago: executing program 5 (id=38697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cd", 0x5) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x2, 'q'}], 0x10}}], 0x2, 0x20004041) 435.080532ms ago: executing program 3 (id=38698): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000000)={0x0, 0x0, 0x6}) 415.680505ms ago: executing program 5 (id=38699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xd6, 0xb, 0x4, 0x0, 0x4, 0xd, 0xd3, 0xb, 0xc0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x6, 0x0, 0xc0, 0x9, 0xe, '\x00', 0x1, 0xb01f}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, {[0x7, 0xa151, 0x7, 0x21, 0x6, 0x2, 0x9, 0x5]}}) 361.380565ms ago: executing program 3 (id=38700): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="0300"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 340.011332ms ago: executing program 2 (id=38701): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 284.730265ms ago: executing program 3 (id=38702): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020100c0fa"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 250.428202ms ago: executing program 5 (id=38703): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x2) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 210.332557ms ago: executing program 3 (id=38704): r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1733, 0x6323, 0x20, 0x0, 0x0) 173.179905ms ago: executing program 5 (id=38705): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@op={0x10, 0x117, 0x3, 0x9d5811fc04cc277d}, @iv={0x10}], 0x20}], 0x1, 0x24044001) 169.797589ms ago: executing program 1 (id=38706): pipe2$watch_queue(&(0x7f00000006c0), 0x80) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x351a, 0x100, 0x0, 0x0, 0x0) 122.164071ms ago: executing program 5 (id=38707): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x5, {0x0, 0x0, 0x2}, 0x7b6bb023daaa2cd6}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000280)={0x0}, 0x3f, 0x0, 0x0, 0x40014}, 0x4081) 58.812302ms ago: executing program 5 (id=38708): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 13.113519ms ago: executing program 3 (id=38709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 0s ago: executing program 1 (id=38710): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 1.387648][ T2797] usb 2-1: USB disconnect, device number 33 [ 2001.624171][T20344] input: syz0 as /devices/virtual/input/input282 [ 2001.688385][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2001.728319][T31723] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 2001.900118][T31723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2001.921332][T31723] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2001.951364][T31723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.981020][T31723] usb 6-1: config 0 descriptor?? [ 2001.986757][T20330] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2002.008058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.016691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.165975][T20367] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.37450'. [ 2002.425686][T31723] elan 0003:04F3:0755.00A4: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 2002.614727][T21318] usb 6-1: USB disconnect, device number 83 [ 2002.690179][T20398] bridge0: left promiscuous mode [ 2002.698956][T20398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2002.706899][T20398] 8021q: adding VLAN 0 to HW filter on device team0 [ 2002.715306][T20401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37455'. [ 2002.727856][T20398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2003.048072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.056651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.428473][T31723] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2003.590965][T31723] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2003.613892][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.626266][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.638234][T31723] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.678070][T31723] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2003.687126][T31723] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.734608][T31723] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2003.744089][T31723] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2003.792793][T31723] usb 6-1: Product: syz [ 2003.797084][T31723] usb 6-1: Manufacturer: syz [ 2003.808414][T31723] cdc_wdm 6-1:1.0: skipping garbage [ 2003.813670][T31723] cdc_wdm 6-1:1.0: skipping garbage [ 2003.852827][T31723] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2003.879101][T31723] cdc_wdm 6-1:1.0: Unknown control protocol [ 2004.084616][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37475'. [ 2004.218388][T31723] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2004.379907][T31723] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2004.399628][T31723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2004.411802][T31723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2004.421931][T31723] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2004.436258][T31723] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2004.445718][T31723] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2004.453945][T31723] usb 2-1: Manufacturer: syz [ 2004.461803][T31723] usb 2-1: config 0 descriptor?? [ 2004.563421][ T186] usb 6-1: USB disconnect, device number 84 [ 2004.874000][T31723] appleir 0003:05AC:8243.00A5: unknown main item tag 0x0 [ 2004.886566][T31723] appleir 0003:05AC:8243.00A5: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2004.938131][ T186] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2005.128259][ T186] usb 6-1: Using ep0 maxpacket: 8 [ 2005.135876][ T186] usb 6-1: config 16 has an invalid interface number: 13 but max is 0 [ 2005.138907][T21318] usb 2-1: USB disconnect, device number 34 [ 2005.152899][ T186] usb 6-1: config 16 has no interface number 0 [ 2005.159229][ T186] usb 6-1: config 16 interface 13 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2005.171800][ T186] usb 6-1: config 16 interface 13 altsetting 3 endpoint 0x3 has invalid maxpacket 34933, setting to 64 [ 2005.184368][ T186] usb 6-1: config 16 interface 13 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2005.198562][ T186] usb 6-1: config 16 interface 13 has no altsetting 0 [ 2005.209640][ T186] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=de.8f [ 2005.219354][ T186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.227337][ T186] usb 6-1: Product: syz [ 2005.231770][ T186] usb 6-1: Manufacturer: syz [ 2005.236377][ T186] usb 6-1: SerialNumber: syz [ 2005.244689][T20494] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2005.503840][ T186] usb 6-1: USB disconnect, device number 85 [ 2006.006489][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37490'. [ 2006.168163][ C1] net_ratelimit: 7 callbacks suppressed [ 2006.168184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.182780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.408411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.759150][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.766587][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x2 [ 2006.774612][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.801238][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.811402][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.818774][T31723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.830981][T20774] netlink: 'syz.5.37502': attribute type 13 has an invalid length. [ 2006.831102][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.846788][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.856318][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.864977][T21318] hid-generic 00A0:0006:0003.00A6: unknown main item tag 0x0 [ 2006.886123][T21318] hid-generic 00A0:0006:0003.00A6: hidraw0: HID v0.05 Device [syz0] on syz0 [ 2007.064634][T20876] fido_id[20876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2007.208369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.218313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.248123][T21318] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2007.410241][T21318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.431623][T21318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2007.441171][T21318] usb 3-1: config 1 has no interface number 0 [ 2007.447816][T21318] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.460041][T17301] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2007.460142][T21318] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2007.479999][T21318] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2007.495257][T17301] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2007.514293][T21318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2007.527057][T17301] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2007.532837][T20898] netlink: 'syz.5.37506': attribute type 1 has an invalid length. [ 2007.543521][T21318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.544551][T20898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.37506'. [ 2007.564018][T21318] usb 3-1: Product: syz [ 2007.570322][T21318] usb 3-1: Manufacturer: syz [ 2007.575082][T21318] usb 3-1: SerialNumber: syz [ 2007.621397][T20898] bond12: option mode: invalid value (48) [ 2007.633373][T20898] bond12 (unregistering): Released all slaves [ 2008.248057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.256578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.403704][T21318] cdc_ncm 3-1:1.1: bind() failure [ 2008.468073][T31935] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2008.619732][T31935] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2008.649046][T31935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2008.661509][T21318] usb 3-1: USB disconnect, device number 32 [ 2008.671397][T31935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2008.681976][T31935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2008.702414][T31935] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2008.712270][T31935] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2008.721147][T31935] usb 6-1: Manufacturer: syz [ 2008.731069][T31935] usb 6-1: config 0 descriptor?? [ 2009.151042][T31935] appleir 0003:05AC:8243.00A7: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2009.288079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.297362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.423730][T31935] usb 6-1: USB disconnect, device number 86 [ 2009.498093][T31723] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2009.658146][T31723] usb 3-1: Using ep0 maxpacket: 32 [ 2009.664846][T31723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.676190][T31723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2009.686369][T31723] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2009.695584][T31723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.705798][T31723] usb 3-1: config 0 descriptor?? [ 2009.713789][T31723] hub 3-1:0.0: USB hub found [ 2009.916374][T31723] hub 3-1:0.0: 1 port detected [ 2010.119064][T31723] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 2010.125923][T31723] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 2010.137604][T31723] usbhid 3-1:0.0: can't add hid device: -71 [ 2010.143989][T31723] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2010.179150][T31723] usb 3-1: USB disconnect, device number 33 [ 2010.511453][T31935] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2010.678731][T31935] usb 2-1: Using ep0 maxpacket: 8 [ 2010.691947][T31935] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2010.701556][T31935] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 2010.710544][T31935] usb 2-1: config 0 has no interface number 0 [ 2010.717067][T31935] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2010.731192][T31935] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2010.743031][T31935] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2010.756792][T31935] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2010.767005][T31935] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 2010.776389][T31935] usb 2-1: Product: syz [ 2010.783724][T31935] usb 2-1: config 0 descriptor?? [ 2010.812679][T21250] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2010.964997][T21397] loop2: detected capacity change from 0 to 7 [ 2010.980169][T11412] Dev loop2: unable to read RDB block 7 [ 2010.986484][T11412] loop2: unable to read partition table [ 2010.992773][T11412] loop2: partition table beyond EOD, truncated [ 2011.000520][T21397] Dev loop2: unable to read RDB block 7 [ 2011.007840][T21397] loop2: unable to read partition table [ 2011.015026][T21397] loop2: partition table beyond EOD, truncated [ 2011.041967][T21397] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2011.368059][ C1] net_ratelimit: 5 callbacks suppressed [ 2011.368077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.383176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.466265][T31935] usb 2-1: USB disconnect, device number 35 [ 2011.931418][ T2797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2012.408031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2012.417455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2012.428437][T21718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.37559'. [ 2012.582257][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2012.582272][ T30] audit: type=1326 audit(1764834031.845:12796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21719 comm="syz.5.37560" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 2013.354951][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.37576'. [ 2013.367080][T21768] netlink: 72 bytes leftover after parsing attributes in process `syz.5.37576'. [ 2013.378632][T21318] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2013.422045][T21771] binder: 21770:21771 ioctl c0306201 80000540 returned -14 [ 2013.448146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.457320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.538612][T21318] usb 3-1: Using ep0 maxpacket: 16 [ 2013.545963][T21318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2013.557530][T21318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2013.568492][T21318] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2013.586383][T21318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.605085][T21318] usb 3-1: config 0 descriptor?? [ 2014.027343][T21318] kye 0003:0458:5016.00A8: control desc unexpectedly large [ 2014.040550][T21318] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.00A8/input/input285 [ 2014.066191][T21318] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.00A8/input/input286 [ 2014.191587][T21318] kye 0003:0458:5016.00A8: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 2014.488821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.496998][ T3475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.497573][T21318] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2014.505501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.568824][ T30] audit: type=1800 audit(1764834033.835:12797): pid=21917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37586" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 2014.708131][T21318] usb 6-1: Using ep0 maxpacket: 32 [ 2014.719571][T21318] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2014.730951][T21318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.740446][T21318] usb 6-1: Product: syz [ 2014.745077][T21318] usb 6-1: Manufacturer: syz [ 2014.750914][T21318] usb 6-1: SerialNumber: syz [ 2014.772805][T21318] usb 6-1: config 0 descriptor?? [ 2014.783152][T21318] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2015.153250][ C1] kye 0003:0458:5016.00A8: usb_submit_urb(ctrl) failed: -1 [ 2015.793824][T21318] gspca_ov534_9: reg_w failed -71 [ 2015.810370][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37600'. [ 2015.839188][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37600'. [ 2015.954080][T31935] usb 3-1: USB disconnect, device number 34 [ 2016.098907][T21318] gspca_ov534_9: Unknown sensor 0000 [ 2016.099009][T21318] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2016.142994][T21318] usb 6-1: USB disconnect, device number 87 [ 2016.568066][ C1] net_ratelimit: 4 callbacks suppressed [ 2016.568087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2016.582806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2016.758150][ T2797] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 2016.799811][T22025] kvm: user requested TSC rate below hardware speed [ 2016.939548][ T2797] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2016.968268][ T2797] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2016.998100][ T2797] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2017.017879][ T2797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.020010][T21318] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 2017.049287][T22009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2017.056616][T22009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2017.087894][ T2797] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2017.212945][T21318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2017.250587][T21318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2017.278172][T21318] usb 6-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 2017.287799][T21318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.307806][T21318] usb 6-1: config 0 descriptor?? [ 2017.321126][T22026] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2017.345447][ T30] audit: type=1326 audit(1764834036.605:12798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22058 comm="syz.0.37622" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 2017.389100][T21321] usb 2-1: USB disconnect, device number 36 [ 2017.534403][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37623'. [ 2017.552533][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37623'. [ 2017.608046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.616639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.760798][T21318] glorious 0003:22D4:1503.00A9: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.5-1/input0 [ 2017.972242][ T186] usb 6-1: USB disconnect, device number 88 [ 2018.019362][T31723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.038141][ T2797] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2018.191976][ T2797] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 2018.209043][ T2797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.217379][ T2797] usb 3-1: Product: syz [ 2018.222477][T22111] CUSE: info not properly terminated [ 2018.228431][ T2797] usb 3-1: Manufacturer: syz [ 2018.233098][ T2797] usb 3-1: SerialNumber: syz [ 2018.244267][ T2797] usb 3-1: config 0 descriptor?? [ 2018.648053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.658421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.746922][ T2797] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 2018.753496][T22136] netlink: 6 bytes leftover after parsing attributes in process `syz.0.37636'. [ 2018.768540][ T2797] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 2018.781529][T22136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2018.860729][ T2797] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 2018.911183][ T2797] usb 3-1: USB disconnect, device number 35 [ 2019.688055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.698115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2020.302178][T22531] kernel read not supported for file /freezer.self_freezing (pid: 22531 comm: syz.0.37668) [ 2020.353932][ T30] audit: type=1800 audit(1764834039.605:12799): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.37668" name="freezer.self_freezing" dev="mqueue" ino=345239 res=0 errno=0 [ 2020.510215][T22540] input: syz1 as /devices/virtual/input/input287 [ 2020.528293][ T2797] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2020.692898][ T2797] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2020.718223][ T2797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.730349][ T2797] usb 6-1: Product: syz [ 2020.734555][ T2797] usb 6-1: Manufacturer: syz [ 2020.761033][ T2797] usb 6-1: SerialNumber: syz [ 2020.791873][ T2797] usb 6-1: config 0 descriptor?? [ 2020.811115][T22554] vivid-000: disconnect [ 2020.829091][T22553] vivid-000: reconnect [ 2021.019936][ T2797] usb 6-1: USB disconnect, device number 89 [ 2021.376053][T22600] loop5: detected capacity change from 0 to 4647 [ 2021.403787][T11412] Buffer I/O error on dev loop5, logical block 580, async page read [ 2021.413499][T22600] loop5: detected capacity change from 4647 to 5919 [ 2021.440213][T11412] Buffer I/O error on dev loop5, logical block 739, async page read [ 2021.768072][ C1] net_ratelimit: 8 callbacks suppressed [ 2021.768090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2021.784191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2021.846375][T11419] Buffer I/O error on dev loop5, logical block 739, async page read [ 2022.068127][T21310] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2022.168999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.240465][T21310] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2022.252087][T21310] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2022.281136][T21310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2022.298901][T21310] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2022.331287][T21310] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2022.379913][T21310] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2022.400289][T21310] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2022.438244][T21310] usb 6-1: Product: syz [ 2022.448258][T21310] usb 6-1: Manufacturer: syz [ 2022.473631][T21310] cdc_wdm 6-1:1.0: skipping garbage [ 2022.486241][T21310] cdc_wdm 6-1:1.0: skipping garbage [ 2022.510104][T21310] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2022.523496][T21310] cdc_wdm 6-1:1.0: Unknown control protocol [ 2022.665615][T22681] tipc: Resetting bearer [ 2022.672381][T22681] erspan0: left promiscuous mode [ 2022.691988][T22681] bridge0: left promiscuous mode [ 2022.700257][T22681] 8021q: adding VLAN 0 to HW filter on device .` [ 2022.708571][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37698'. [ 2022.719839][T22681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2022.739700][T22682] bridge0: port 2(syz_tun) entered disabled state [ 2022.769388][T22682] syz_tun (unregistering): left allmulticast mode [ 2022.775854][T22682] syz_tun (unregistering): left promiscuous mode [ 2022.782642][T22682] bridge0: port 2(syz_tun) entered disabled state [ 2022.798692][T21318] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2022.808147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.816806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.948557][T21318] usb 2-1: Using ep0 maxpacket: 32 [ 2022.958593][T21318] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2022.970308][T21318] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2022.976956][T21318] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2023.007099][T21318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.026086][T21318] usb 2-1: config 0 descriptor?? [ 2023.127093][T31935] usb 6-1: USB disconnect, device number 90 [ 2023.358418][T21310] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2023.397306][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.37705'. [ 2023.519990][T21310] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2023.531782][T21310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2023.543718][T21310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2023.553841][T21310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2023.567002][T21310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2023.576782][T21310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.588433][T21310] usb 3-1: config 0 descriptor?? [ 2023.809381][T21318] corsair-psu 0003:1B1C:1C09.00AA: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 2023.848047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.857548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.011058][T21318] corsair-psu 0003:1B1C:1C09.00AA: unable to initialize device (-95) [ 2024.020496][T21310] plantronics 0003:047F:FFFF.00AB: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2024.063845][T21318] corsair-psu 0003:1B1C:1C09.00AA: probe with driver corsair-psu failed with error -95 [ 2024.102414][T21310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.244974][T21318] usb 2-1: USB disconnect, device number 37 [ 2024.596873][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.37712'. [ 2024.888078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.255006][ T2797] usb 3-1: USB disconnect, device number 36 [ 2025.284054][T23112] loop9: detected capacity change from 0 to 7 [ 2025.333542][T23112] Dev loop9: unable to read RDB block 7 [ 2025.343376][T23112] loop9: AHDI p1 p2 [ 2025.347471][T23112] loop9: partition table partially beyond EOD, truncated [ 2025.356251][T23112] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 2025.416803][T11412] udevd[11412]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2025.934160][T23357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.37735'. [ 2026.082655][T23368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.37738'. [ 2026.409384][T21310] IPVS: starting estimator thread 0... [ 2026.552517][T23487] IPVS: using max 33 ests per chain, 79200 per kthread [ 2026.968038][ C1] net_ratelimit: 154 callbacks suppressed [ 2026.968058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.983564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2027.132893][ T2797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2027.143706][T23628] netlink: 63 bytes leftover after parsing attributes in process `syz.3.37752'. [ 2027.424426][ T30] audit: type=1326 audit(1764834046.685:12800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.492934][ T30] audit: type=1326 audit(1764834046.685:12801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.526577][ T30] audit: type=1326 audit(1764834046.685:12802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.578294][ T2797] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2027.609288][ T30] audit: type=1326 audit(1764834046.685:12803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.668585][ T30] audit: type=1326 audit(1764834046.685:12804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.738103][ T2797] usb 6-1: Using ep0 maxpacket: 16 [ 2027.746731][ T30] audit: type=1326 audit(1764834046.685:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.770499][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.784156][T23652] loop5: detected capacity change from 0 to 4711 [ 2027.793783][ T2797] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2027.812071][ T30] audit: type=1326 audit(1764834046.685:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.834804][ T2797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.836425][T11412] Buffer I/O error on dev loop5, logical block 588, async page read [ 2027.846598][T23660] loop5: detected capacity change from 4711 to 6511 [ 2027.868854][ T2797] usb 6-1: config 0 descriptor?? [ 2027.888834][ T30] audit: type=1326 audit(1764834046.685:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.914318][ T30] audit: type=1326 audit(1764834046.745:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.938040][ T30] audit: type=1326 audit(1764834046.745:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23639 comm="syz.3.37755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2027.970162][T11412] Buffer I/O error on dev loop5, logical block 813, async page read [ 2028.008064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.016722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.059390][T31935] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 2028.229849][T31935] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2028.237898][T31935] usb 2-1: config 0 has no interface number 0 [ 2028.244544][T31935] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2028.257015][T31935] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2028.269326][T31935] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2028.290761][ T2797] mcp2221 0003:04D8:00DD.00AC: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2028.317725][T31935] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2028.349795][T31935] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2028.359536][T31935] usb 2-1: Product: syz [ 2028.363711][T31935] usb 2-1: SerialNumber: syz [ 2028.383934][T31935] usb 2-1: config 0 descriptor?? [ 2028.405143][T31935] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 2028.440148][T31935] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input290 [ 2028.521314][ T2797] usb 6-1: USB disconnect, device number 91 [ 2028.661929][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2029.048055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.057836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.171902][ C1] cm109_urb_ctl_callback: 148 callbacks suppressed [ 2029.171924][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2029.172237][ T186] usb 2-1: USB disconnect, device number 38 [ 2029.178476][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2029.380243][ T186] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2030.088067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.096995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.109408][T23869] input: syz0 as /devices/virtual/input/input291 [ 2030.179055][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.470575][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.37784'. [ 2030.848585][T31935] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2030.873785][T24024] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.37794'. [ 2031.008093][T31935] usb 2-1: Using ep0 maxpacket: 16 [ 2031.026306][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.057576][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.068791][T31935] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2031.078545][T31935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.130465][T31935] usb 2-1: config 0 descriptor?? [ 2031.227022][T24046] loop5: detected capacity change from 0 to 7 [ 2031.254410][T24046] Dev loop5: unable to read RDB block 7 [ 2031.270162][T24046] loop5: AHDI p3 [ 2031.273882][T24046] loop5: partition table partially beyond EOD, truncated [ 2031.606190][T31935] kye 0003:0458:5016.00AD: control desc unexpectedly large [ 2031.656549][T31935] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.00AD/input/input292 [ 2031.774236][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37811'. [ 2031.800614][T31935] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.00AD/input/input293 [ 2031.868345][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37811'. [ 2031.905302][T24088] netlink: 104 bytes leftover after parsing attributes in process `syz.3.37811'. [ 2031.928476][T24088] netlink: 104 bytes leftover after parsing attributes in process `syz.3.37811'. [ 2031.949417][T31935] kye 0003:0458:5016.00AD: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 2032.017222][T31935] usb 2-1: USB disconnect, device number 39 [ 2032.168063][ C1] net_ratelimit: 8 callbacks suppressed [ 2032.168086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2032.182881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2032.192431][T24130] fido_id[24130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2032.447280][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 2032.447296][ T30] audit: type=1326 audit(1764834051.705:12928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 2032.581285][ T30] audit: type=1326 audit(1764834051.745:12929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 2032.675309][ T30] audit: type=1326 audit(1764834051.745:12930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2032.708708][ T30] audit: type=1326 audit(1764834051.745:12931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 2032.794564][ T30] audit: type=1326 audit(1764834051.745:12932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2032.820297][ T30] audit: type=1326 audit(1764834051.745:12933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 2032.845146][ T30] audit: type=1326 audit(1764834051.745:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2032.868371][ T30] audit: type=1326 audit(1764834051.745:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff1558 code=0x7ffc0000 [ 2032.891873][ T30] audit: type=1326 audit(1764834051.745:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2032.919604][ T30] audit: type=1326 audit(1764834051.745:12937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24105 comm="syz.2.37814" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2032.968022][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2033.208042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.216183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.224982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.321093][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.37828'. [ 2033.332736][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.37828'. [ 2033.343608][T24371] netlink: 104 bytes leftover after parsing attributes in process `syz.5.37828'. [ 2033.358429][T24371] netlink: 104 bytes leftover after parsing attributes in process `syz.5.37828'. [ 2033.798625][T31935] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2033.988097][T31935] usb 6-1: Using ep0 maxpacket: 8 [ 2033.994913][T31935] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2034.003349][T31935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2034.014015][T31935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2034.018005][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2034.024011][T31935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2034.041661][T31935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2034.054852][T31935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2034.064041][T31935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.098545][T21318] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2034.248132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.256874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.266806][T21318] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2034.276151][T21318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.285565][T31935] usb 6-1: usb_control_msg returned -32 [ 2034.292060][T31935] usbtmc 6-1:16.0: can't read capabilities [ 2034.300090][T21318] usb 3-1: config 0 descriptor?? [ 2034.740744][T31935] usb 6-1: USB disconnect, device number 92 [ 2034.813823][T24559] input: syz1 as /devices/virtual/input/input294 [ 2034.914758][T21318] usb 3-1: Cannot set autoneg [ 2034.928684][T21318] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2034.957491][T21318] usb 3-1: USB disconnect, device number 37 [ 2035.048002][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2035.655020][ T5208] Dev loop4: unable to read RDB block 1 [ 2035.683067][ T5208] loop4: unable to read partition table [ 2035.710254][ T5208] loop4: partition table beyond EOD, truncated [ 2035.739604][T17301] tipc: Subscription rejected, illegal request [ 2036.320370][ T2797] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2036.411490][T24665] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2036.508216][ T2797] usb 3-1: Using ep0 maxpacket: 16 [ 2036.525972][ T2797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.551919][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2036.578000][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2036.619582][ T2797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2036.657614][ T2797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2036.684739][ T186] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2036.719952][ T2797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2036.730399][ T2797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2036.739968][ T2797] usb 3-1: Manufacturer: syz [ 2036.755704][ T2797] usb 3-1: config 0 descriptor?? [ 2036.838656][T24689] sctp: [Deprecated]: syz.3.37881 (pid 24689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2036.838656][T24689] Use struct sctp_sack_info instead [ 2036.880520][ T186] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2036.910732][ T186] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2036.921132][ T186] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2036.930458][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2036.944200][T24664] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2036.978091][ T186] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2037.108290][ T2797] rc_core: IR keymap rc-hauppauge not found [ 2037.114243][ T2797] Registered IR keymap rc-empty [ 2037.149293][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.170884][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.200782][ T2797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2037.245920][ T2797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input295 [ 2037.321291][ C0] mceusb 3-1:0.0: long-range (0x14) receiver active [ 2037.334063][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.368046][ C1] net_ratelimit: 10 callbacks suppressed [ 2037.368065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.382883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.404841][T31935] usb 6-1: USB disconnect, device number 93 [ 2037.418605][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.459278][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.491694][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.533537][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.540960][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.547545][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.565993][T24738] __nla_validate_parse: 1 callbacks suppressed [ 2037.566012][T24738] netlink: 56 bytes leftover after parsing attributes in process `syz.1.37888'. [ 2037.584617][T24738] netlink: 56 bytes leftover after parsing attributes in process `syz.1.37888'. [ 2037.588410][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.638106][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.668237][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.688627][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.708292][ T2797] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2037.741571][ T2797] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2037.757685][ T2797] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 2037.778770][ T2797] usb 3-1: USB disconnect, device number 38 [ 2038.168006][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2038.208202][ T186] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2038.380436][ T186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.392038][ T186] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2038.401982][ T186] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2038.408081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2038.411417][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.420156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2038.436842][ T186] usb 6-1: config 0 descriptor?? [ 2038.588142][ T2797] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2038.748043][ T2797] usb 3-1: Using ep0 maxpacket: 32 [ 2038.755021][ T2797] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2038.766876][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2038.778985][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2038.789009][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2038.800130][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2038.813539][ T2797] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2038.822859][ T2797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.831085][ T2797] usb 3-1: Product: syz [ 2038.835343][ T2797] usb 3-1: Manufacturer: syz [ 2038.840084][ T2797] usb 3-1: SerialNumber: syz [ 2038.847869][ T2797] usb 3-1: config 0 descriptor?? [ 2038.856332][ T186] hid_parser_main: 4 callbacks suppressed [ 2038.856352][ T186] cm6533_jd 0003:0D8C:0022.00AE: unknown main item tag 0x0 [ 2038.869754][ T186] cm6533_jd 0003:0D8C:0022.00AE: unknown main item tag 0x0 [ 2038.884204][ T186] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.00AE/input/input297 [ 2038.913477][ T186] cm6533_jd 0003:0D8C:0022.00AE: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 2039.098873][T21318] usb 6-1: USB disconnect, device number 94 [ 2039.208014][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2039.285906][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2039.295602][T21310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.304362][ T2797] input input296: Device does not respond to id packet M [ 2039.306832][T24836] lo: entered promiscuous mode [ 2039.314095][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 2039.320972][T24836] lo: entered allmulticast mode [ 2039.324191][ T2797] input input296: Device does not respond to id packet P [ 2039.332998][T24836] tunl0: entered promiscuous mode [ 2039.340317][T24836] tunl0: entered allmulticast mode [ 2039.356950][T24836] gre0: entered promiscuous mode [ 2039.362186][T24836] gre0: entered allmulticast mode [ 2039.370529][T24836] gretap0: entered promiscuous mode [ 2039.375757][T24836] gretap0: entered allmulticast mode [ 2039.383930][T24836] erspan0: entered promiscuous mode [ 2039.389985][T24836] erspan0: entered allmulticast mode [ 2039.397018][T24836] ip_vti0: entered promiscuous mode [ 2039.402634][T24836] ip_vti0: entered allmulticast mode [ 2039.416374][T24836] ip6_vti0: entered promiscuous mode [ 2039.421865][T24836] ip6_vti0: entered allmulticast mode [ 2039.427733][T24836] sit0: entered promiscuous mode [ 2039.433463][T24836] sit0: entered allmulticast mode [ 2039.439647][T24836] ip6tnl0: entered promiscuous mode [ 2039.444858][T24836] ip6tnl0: entered allmulticast mode [ 2039.450379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.459032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.468843][T24836] ip6gre0: entered promiscuous mode [ 2039.474074][T24836] ip6gre0: entered allmulticast mode [ 2039.480219][T24836] ip6gretap0: entered promiscuous mode [ 2039.485712][T24836] ip6gretap0: entered allmulticast mode [ 2039.492561][T24836] bridge0: entered promiscuous mode [ 2039.497792][T24836] bridge0: entered allmulticast mode [ 2039.537134][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2039.553267][ T2797] input input296: Device does not respond to id packet N [ 2039.562818][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2039.570634][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2039.577425][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2039.584418][ T2797] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 2039.600028][ T2797] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input296 [ 2039.632708][ T2797] usb 3-1: USB disconnect, device number 39 [ 2040.247991][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2041.131973][T25143] loop9: detected capacity change from 0 to 7 [ 2041.161413][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.187717][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.218421][T25147] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.254092][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.280508][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.300552][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.315892][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.335222][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.370148][T25143] ldm_validate_partition_table(): Disk read failed. [ 2041.400786][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.422255][T25143] Buffer I/O error on dev loop9, logical block 0, async page read [ 2041.459666][T25143] Dev loop9: unable to read RDB block 0 [ 2041.475753][T25143] loop9: unable to read partition table [ 2041.489706][T25158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2041.495984][T25143] loop9: partition table beyond EOD, truncated [ 2041.505736][T25143] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 2041.505736][T25143] ) failed (rc=-5) [ 2041.845513][T25175] loop6: detected capacity change from 0 to 524288000 [ 2042.368344][ T2797] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2042.528175][ T2797] usb 6-1: Using ep0 maxpacket: 32 [ 2042.535412][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2042.547579][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2042.558128][ T2797] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2042.567191][ T2797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.568080][ C1] net_ratelimit: 9 callbacks suppressed [ 2042.568095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.587261][ T2797] usb 6-1: config 0 descriptor?? [ 2042.590577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2043.034316][ T2797] savu 0003:1E7D:2D5A.00AF: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 2043.270118][T21310] usb 6-1: USB disconnect, device number 95 [ 2043.342463][T31935] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 2043.367991][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2043.510175][T31935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2043.520019][T31935] usb 2-1: config 1 has no interface number 0 [ 2043.526241][T31935] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2043.537639][T31935] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2043.549288][T31935] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2043.559652][T31935] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2043.588823][T31935] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 2043.604965][T31935] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2043.614257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2043.623799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2043.633204][T31935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.646680][T31935] usb 2-1: Product: syz [ 2043.651841][T31935] usb 2-1: Manufacturer: syz [ 2043.656641][T31935] usb 2-1: SerialNumber: syz [ 2043.674885][T25225] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2043.923443][T25225] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2043.947038][T25225] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2044.008103][T21310] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 2044.160914][T25225] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2044.180548][T21310] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2044.197441][T21310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.209598][T21310] usb 3-1: Product: syz [ 2044.218965][T21310] usb 3-1: Manufacturer: syz [ 2044.223602][T21310] usb 3-1: SerialNumber: syz [ 2044.252880][T21310] usb 3-1: config 0 descriptor?? [ 2044.407994][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2044.618877][T25225] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2044.638233][T25225] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2044.648049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.657078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.669711][T31935] cdc_ncm 2-1:1.1: bind() failure [ 2044.693438][T21310] airspy 3-1:0.0: Board ID: 00 [ 2044.707892][T21310] airspy 3-1:0.0: Firmware version: [ 2044.970352][ T2797] usb 2-1: USB disconnect, device number 40 [ 2045.141619][T25530] sctp: [Deprecated]: syz.5.37976 (pid 25530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2045.141619][T25530] Use struct sctp_sack_info instead [ 2045.301856][T21310] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 2045.335718][T21310] airspy 3-1:0.0: Registered as swradio24 [ 2045.350962][T21310] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2045.368319][T31723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.409020][T21310] usb 3-1: USB disconnect, device number 40 [ 2045.448402][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2046.746926][T25726] loop2: detected capacity change from 0 to 7 [ 2046.756025][T11412] Dev loop2: unable to read RDB block 7 [ 2046.762604][T11412] loop2: unable to read partition table [ 2046.769003][T11412] loop2: partition table beyond EOD, truncated [ 2046.776549][T25726] Dev loop2: unable to read RDB block 7 [ 2046.786319][T25726] loop2: unable to read partition table [ 2046.794414][T25726] loop2: partition table beyond EOD, truncated [ 2046.805548][T25726] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2046.834461][ T5208] Dev loop2: unable to read RDB block 7 [ 2046.840799][ T5208] loop2: unable to read partition table [ 2046.846797][ T5208] loop2: partition table beyond EOD, truncated [ 2047.268154][T21310] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2047.433413][T21310] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2047.444456][T21310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.468424][T21310] usb 3-1: config 0 descriptor?? [ 2047.483901][T21310] cp210x 3-1:0.0: cp210x converter detected [ 2047.768673][ C1] net_ratelimit: 7 callbacks suppressed [ 2047.768692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.782510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.791755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.891195][T21310] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2048.048787][T25891] dummy0: mtu less than device minimum [ 2048.131386][T21310] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2048.154576][T21310] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2048.200956][T21310] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2048.234118][T21310] usb 3-1: USB disconnect, device number 41 [ 2048.276537][T21310] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2048.301369][T21310] cp210x 3-1:0.0: device disconnected [ 2048.415441][T31723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2048.488255][T21318] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2048.568074][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2048.658881][T21318] usb 6-1: Using ep0 maxpacket: 16 [ 2048.666564][T21318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.677727][T21318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2048.690671][T21318] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2048.700539][T21318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.718664][T21318] usb 6-1: Product: syz [ 2048.722873][T21318] usb 6-1: Manufacturer: syz [ 2048.727496][T21318] usb 6-1: SerialNumber: syz [ 2048.808052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2048.817352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2048.832055][T25942] loop9: detected capacity change from 0 to 7 [ 2048.840541][T11419] Dev loop9: unable to read RDB block 7 [ 2048.846132][T11419] loop9: AHDI p2 [ 2048.851351][T11419] loop9: partition table partially beyond EOD, truncated [ 2048.861127][T25942] Dev loop9: unable to read RDB block 7 [ 2048.868766][T25942] loop9: AHDI p2 [ 2048.872474][T25942] loop9: partition table partially beyond EOD, truncated [ 2049.165218][T21318] usb 6-1: 0:2 : does not exist [ 2049.187192][T25958] input: syz1 as /devices/virtual/input/input299 [ 2049.575550][T21318] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2049.608056][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2049.638336][T21318] usb 6-1: USB disconnect, device number 96 [ 2049.743149][T11412] udevd[11412]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2049.848046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.718384][ T2797] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2050.869934][ T2797] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2050.881140][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.900811][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.917973][ T2797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2050.932964][ T2797] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2050.942534][ T2797] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2050.950970][ T2797] usb 6-1: Manufacturer: syz [ 2050.966755][ T2797] usb 6-1: config 0 descriptor?? [ 2051.401306][ T2797] appleir 0003:05AC:8243.00B0: unknown main item tag 0x0 [ 2051.429504][ T2797] appleir 0003:05AC:8243.00B0: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2051.689829][T21318] usb 6-1: USB disconnect, device number 97 [ 2052.259216][T26180] batadv_slave_1: entered promiscuous mode [ 2052.266647][T26179] batadv_slave_1: left promiscuous mode [ 2052.273983][T21318] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2052.458051][T21318] usb 2-1: Using ep0 maxpacket: 16 [ 2052.473493][T21318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.498416][T21318] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2052.507846][T21318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.535546][T21318] usb 2-1: config 0 descriptor?? [ 2052.578472][ T2797] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 2052.666792][T31935] hid-generic 0000:0000:0000.00B1: unknown main item tag 0x0 [ 2052.708895][T31935] hid-generic 0000:0000:0000.00B1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2052.761711][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2052.790859][ T2797] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2052.828217][ T2797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.861168][ T2797] usb 6-1: config 0 descriptor?? [ 2052.876356][T26183] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2052.898682][ T2994] net_ratelimit: 9 callbacks suppressed [ 2052.898701][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.968081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.977435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2053.007188][T21318] mcp2221 0003:04D8:00DD.00B2: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2053.187740][T26163] i2c i2c-1: Invalid block write size 155 [ 2053.212520][T21318] usb 2-1: USB disconnect, device number 41 [ 2053.308396][ T2797] elan 0003:04F3:0755.00B3: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 2053.510308][ T2797] usb 6-1: USB disconnect, device number 98 [ 2053.528932][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2053.768066][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2053.866155][T26271] binder: 26270:26271 ioctl c0306201 80001a80 returned -14 [ 2054.008034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.016796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.358053][ T2797] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2054.498758][T21310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.518038][ T2797] usb 6-1: Using ep0 maxpacket: 16 [ 2054.524870][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.536456][ T2797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2054.563242][ T2797] usb 6-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 2054.572689][ T2797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.588781][ T2797] usb 6-1: config 0 descriptor?? [ 2054.818001][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2054.838044][T31935] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2055.004482][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.016543][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.019122][ T2797] logitech-hidpp-device 0003:046D:C091.00B4: item fetching failed at offset 1/5 [ 2055.027193][T31935] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2055.049036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.049701][ T2797] logitech-hidpp-device 0003:046D:C091.00B4: hidpp_probe:parse failed [ 2055.063229][T31935] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2055.067292][ T2797] logitech-hidpp-device 0003:046D:C091.00B4: probe with driver logitech-hidpp-device failed with error -22 [ 2055.080583][T31935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.114185][T31935] usb 2-1: config 0 descriptor?? [ 2055.203447][T26353] netlink: 92 bytes leftover after parsing attributes in process `syz.0.38100'. [ 2055.287486][ T2797] usb 6-1: USB disconnect, device number 99 [ 2055.568437][T31935] plantronics 0003:047F:FFFF.00B5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2056.006231][T31935] usb 2-1: USB disconnect, device number 42 [ 2056.108628][T21310] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2056.268021][T21310] usb 6-1: Using ep0 maxpacket: 32 [ 2056.275800][T21310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2056.287107][T21310] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2056.312775][T21310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.344954][T21310] usb 6-1: config 0 descriptor?? [ 2056.366193][T21310] dvb-usb: found a 'TeVii S662' in warm state. [ 2056.374412][T21310] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2056.389219][T21310] dvb-usb: bulk message failed: -22 (2/0) [ 2056.401827][T21310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2056.413563][T21310] dvbdev: DVB: registering new adapter (TeVii S662) [ 2056.423112][T21310] usb 6-1: media controller created [ 2056.429631][T21310] dvb-usb: bulk message failed: -22 (6/0) [ 2056.439291][T21310] dw2102: i2c transfer failed. [ 2056.444098][T21310] dvb-usb: bulk message failed: -22 (6/0) [ 2056.451247][T21310] dw2102: i2c transfer failed. [ 2056.456041][T21310] dvb-usb: bulk message failed: -22 (6/0) [ 2056.464621][T21310] dw2102: i2c transfer failed. [ 2056.469720][T21310] dvb-usb: bulk message failed: -22 (6/0) [ 2056.475720][T21310] dw2102: i2c transfer failed. [ 2056.481404][T21310] dvb-usb: bulk message failed: -22 (6/0) [ 2056.488863][T21310] dw2102: i2c transfer failed. [ 2056.493867][T21310] dvb-usb: bulk message failed: -22 (6/0) [ 2056.502026][T21310] dw2102: i2c transfer failed. [ 2056.506812][T21310] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2056.532449][T21310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2056.617471][T21310] dvb-usb: bulk message failed: -22 (3/0) [ 2056.634721][T21310] dw2102: command 0x0e transfer failed. [ 2056.654349][T21310] dvb-usb: bulk message failed: -22 (3/0) [ 2056.675077][T21310] dw2102: command 0x0e transfer failed. [ 2056.989693][T21310] dvb-usb: bulk message failed: -22 (3/0) [ 2056.995566][T21310] dw2102: command 0x0e transfer failed. [ 2057.004366][T21310] dvb-usb: bulk message failed: -22 (3/0) [ 2057.013639][T21310] dw2102: command 0x0e transfer failed. [ 2057.021374][T21310] dvb-usb: bulk message failed: -22 (1/0) [ 2057.027130][T21310] dw2102: command 0x51 transfer failed. [ 2057.033320][T21310] dvb-usb: bulk message failed: -22 (5/0) [ 2057.040837][T21310] dw2102: i2c probe for address 0x68 failed. [ 2057.047064][T21310] dvb-usb: bulk message failed: -22 (5/0) [ 2057.057216][T21310] dw2102: i2c probe for address 0x69 failed. [ 2057.072523][T21310] dvb-usb: bulk message failed: -22 (5/0) [ 2057.112546][T21310] dw2102: i2c probe for address 0x6a failed. [ 2057.138040][T21310] dw2102: probing for demodulator failed. Is the external power switched on? [ 2057.186182][T21310] dvb-usb: no frontend was attached by 'TeVii S662' [ 2057.363831][T21310] rc_core: IR keymap rc-tt-1500 not found [ 2057.398054][T21310] Registered IR keymap rc-empty [ 2057.404144][T21310] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2057.447640][T21310] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input300 [ 2057.497956][T21310] dvb-usb: schedule remote query interval to 250 msecs. [ 2057.504949][T21310] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2057.530555][T21310] dvb-usb: TeVii S662 successfully initialized and connected. [ 2057.589315][T21318] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 2057.607841][T21310] usb 6-1: USB disconnect, device number 100 [ 2057.692932][T21310] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2057.718597][T31935] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 2057.761565][T21318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.788233][T21318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2057.819857][T21318] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2057.831641][T21318] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2057.842619][T21318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.885864][T26493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2057.928005][ C0] net_ratelimit: 8 callbacks suppressed [ 2057.928022][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2057.961483][T31935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2057.974210][T21318] hub 2-1:1.0: bad descriptor, ignoring hub [ 2057.985352][T31935] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2057.995788][T21318] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2058.009252][ T3941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.027287][T31935] usb 3-1: can't read configurations, error -71 [ 2058.038875][T21318] cdc_wdm 2-1:1.0: skipping garbage [ 2058.054108][T21318] cdc_wdm 2-1:1.0: skipping garbage [ 2058.080551][T21318] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2058.092676][T21318] cdc_wdm 2-1:1.0: Unknown control protocol [ 2058.153494][T26759] netlink: 'syz.0.38137': attribute type 5 has an invalid length. [ 2058.168057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.177099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.754657][T26493] usb 2-1: reset full-speed USB device number 43 using dummy_hcd [ 2058.857727][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38151'. [ 2058.903362][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38152'. [ 2058.957080][T26768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2058.969361][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2059.005302][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2059.011960][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2059.018136][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2059.208072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.216903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.288690][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.358799][T31935] usb 2-1: USB disconnect, device number 43 [ 2059.512341][ T30] kauditd_printk_skb: 438 callbacks suppressed [ 2059.512359][ T30] audit: type=1326 audit(1764834078.775:13376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2059.718021][ T30] audit: type=1326 audit(1764834078.775:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2059.929579][ T30] audit: type=1326 audit(1764834078.775:13378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2059.979731][ T30] audit: type=1326 audit(1764834078.775:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.018005][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2060.069552][ T30] audit: type=1326 audit(1764834078.775:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.129384][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.147676][ T30] audit: type=1326 audit(1764834078.775:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.175225][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.191190][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.228111][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.243457][ T30] audit: type=1326 audit(1764834078.775:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.268111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.271938][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.287687][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.296454][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.308480][ T30] audit: type=1326 audit(1764834078.775:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.340038][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.348369][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.378555][ T2797] hid-generic 0100:0000:0000.00B6: unknown main item tag 0x0 [ 2060.386262][ T30] audit: type=1326 audit(1764834078.775:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.430787][ T2797] hid-generic 0100:0000:0000.00B6: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2060.528279][ T30] audit: type=1326 audit(1764834078.775:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27130 comm="syz.5.38156" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70dd558 code=0x7ffc0000 [ 2060.601852][T27146] fido_id[27146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2061.488689][T27397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38178'. [ 2061.514639][T27401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38179'. [ 2061.934859][T27456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.38187'. [ 2062.358248][T31935] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2062.529689][T31935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.542393][T31935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2062.554614][T31935] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2062.564742][T31935] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2062.583308][T31935] usb 3-1: Manufacturer: syz [ 2062.655202][T31935] usb 3-1: config 0 descriptor?? [ 2063.128238][ C0] net_ratelimit: 8 callbacks suppressed [ 2063.128258][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2063.368093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.376691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.394871][T27598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38202'. [ 2063.542399][T31935] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B7/input/input301 [ 2063.608359][T21310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.627131][T31935] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B7/input/input302 [ 2063.646006][T31935] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B7/input/input303 [ 2063.670850][T31935] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00B7/input/input304 [ 2063.694674][T31935] uclogic 0003:256C:006D.00B7: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 2063.768406][T15615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.898138][T31935] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2063.923997][ T2797] usb 3-1: USB disconnect, device number 44 [ 2064.033489][T27628] fido_id[27628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2064.090504][T31935] usb 6-1: Using ep0 maxpacket: 32 [ 2064.097522][T31935] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2064.116028][T31935] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2064.126288][T31935] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2064.135448][T31935] usb 6-1: Product: syz [ 2064.140632][T31935] usb 6-1: Manufacturer: syz [ 2064.145602][T31935] usb 6-1: SerialNumber: syz [ 2064.158428][T31935] usb 6-1: config 0 descriptor?? [ 2064.164216][T27608] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2064.167992][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2064.408404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2064.417344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2064.538555][ T2797] usb 6-1: USB disconnect, device number 101 [ 2065.048525][ T2994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.058964][T31935] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2065.112451][T27910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38223'. [ 2065.122279][T27910] netlink: 'syz.3.38223': attribute type 7 has an invalid length. [ 2065.132328][T27910] netlink: 'syz.3.38223': attribute type 8 has an invalid length. [ 2065.140776][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38223'. [ 2065.148786][T21318] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2065.156364][T27910] erspan0: entered promiscuous mode [ 2065.165722][T27910] gretap0: entered promiscuous mode [ 2065.172102][T27910] erspan0: left promiscuous mode [ 2065.177800][T27910] gretap0: left promiscuous mode [ 2065.207983][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2065.229844][T31935] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2065.239082][T31935] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2065.249488][T31935] usb 3-1: config 220 has an invalid descriptor of length 34, skipping remainder of the config [ 2065.260443][T31935] usb 3-1: config 220 has no interface number 2 [ 2065.266765][T31935] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2065.282339][T31935] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2065.289777][T31935] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2065.297139][T31935] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2065.307854][T31935] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2065.318043][T21318] usb 2-1: Using ep0 maxpacket: 16 [ 2065.324413][T31935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.333660][T21318] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 2065.342663][T21318] usb 2-1: config 0 has no interface number 0 [ 2065.349492][T31935] usb 3-1: Product: syz [ 2065.353765][T31935] usb 3-1: Manufacturer: syz [ 2065.358456][T21318] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2065.373220][T31935] usb 3-1: SerialNumber: syz [ 2065.382411][T21318] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2065.403654][T21318] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2065.414064][T21318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2065.422233][T21318] usb 2-1: Product: syz [ 2065.427015][T21318] usb 2-1: Manufacturer: syz [ 2065.432471][T21318] usb 2-1: SerialNumber: syz [ 2065.443426][T21318] usb 2-1: config 0 descriptor?? [ 2065.450548][T27800] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2065.458668][T27800] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2065.610200][T31935] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2065.625001][T31935] uvcvideo 3-1:220.0: No valid video chain found. [ 2065.631863][T31935] usb 3-1: selecting invalid altsetting 0 [ 2065.658966][T31935] usb 3-1: selecting invalid altsetting 0 [ 2065.664757][T31935] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 2065.676667][T31935] usb 3-1: USB disconnect, device number 45 [ 2065.705453][T27800] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2065.713541][T27800] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2066.276791][T27952] netlink: 67 bytes leftover after parsing attributes in process `syz.2.38231'. [ 2066.286256][T27953] netlink: 80 bytes leftover after parsing attributes in process `syz.0.38230'. [ 2066.339847][T21318] asix 2-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x80 [ 2066.561005][ T2797] usb 2-1: USB disconnect, device number 44 [ 2067.008207][ T2797] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2067.158064][ T2797] usb 3-1: Using ep0 maxpacket: 32 [ 2067.165131][ T2797] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2067.175964][ T2797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.200898][ T2797] usb 3-1: config 0 descriptor?? [ 2067.414294][ T2797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2067.429583][ T2797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2067.431002][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38248'. [ 2067.447744][ T2797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2067.456073][ T2797] usb 3-1: media controller created [ 2067.489876][ T2797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2067.625763][ T2797] az6027: usb out operation failed. (-71) [ 2067.649198][ T2797] az6027: usb out operation failed. (-71) [ 2067.655109][ T2797] stb0899_attach: Driver disabled by Kconfig [ 2067.667072][ T2797] az6027: no front-end attached [ 2067.667072][ T2797] [ 2067.677452][ T2797] az6027: usb out operation failed. (-71) [ 2067.685977][ T2797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2067.706128][ T2797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input305 [ 2067.729186][ T2797] dvb-usb: schedule remote query interval to 400 msecs. [ 2067.744897][ T2797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2067.763118][ T2797] usb 3-1: USB disconnect, device number 46 [ 2067.835890][ T2797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2068.248602][ T2797] net_ratelimit: 9 callbacks suppressed [ 2068.248620][ T2797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.327993][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2068.568098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.578005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.888528][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2069.367986][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2069.372375][T28099] pimreg: entered allmulticast mode [ 2069.608081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2069.617457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.169807][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.408070][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2070.868512][T21318] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2071.029888][T21318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.040085][T21318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2071.049985][T21318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2071.061348][T21318] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2071.070795][T21318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.088627][T28131] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2071.102673][T21318] hub 3-1:1.0: bad descriptor, ignoring hub [ 2071.115908][T21318] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2071.127561][T21318] cdc_wdm 3-1:1.0: skipping garbage [ 2071.133982][T21318] cdc_wdm 3-1:1.0: skipping garbage [ 2071.148525][T21318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2071.154498][T21318] cdc_wdm 3-1:1.0: Unknown control protocol [ 2071.568210][T31935] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2071.719548][T31935] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2071.728446][T31935] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2071.739338][T31935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2071.748809][T31935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2071.760028][T31935] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2071.773007][T31935] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2071.782424][T31935] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2071.790477][T31935] usb 2-1: Product: syz [ 2071.794777][T31935] usb 2-1: Manufacturer: syz [ 2071.805018][T31935] cdc_wdm 2-1:1.0: skipping garbage [ 2071.810328][T31935] cdc_wdm 2-1:1.0: skipping garbage [ 2071.997187][T28172] sctp: [Deprecated]: syz.3.38296 (pid 28172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2071.997187][T28172] Use struct sctp_sack_info instead [ 2072.038938][T28131] usb 3-1: reset full-speed USB device number 47 using dummy_hcd [ 2072.062137][ T30] kauditd_printk_skb: 663 callbacks suppressed [ 2072.062153][ T30] audit: type=1326 audit(1764834091.325:14049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28174 comm="syz.3.38297" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d539 code=0x0 [ 2072.199830][T28159] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2072.211875][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2072.218517][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2072.224699][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2072.236598][T31935] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 2072.243717][T31935] cdc_wdm 2-1:1.0: Unknown control protocol [ 2072.331453][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2072.338093][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2072.344423][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2072.351037][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2072.357151][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2072.528744][T31935] usb 3-1: USB disconnect, device number 47 [ 2072.817580][T28200] netlink: 'syz.0.38301': attribute type 7 has an invalid length. [ 2072.825736][T28200] netlink: 'syz.0.38301': attribute type 8 has an invalid length. [ 2072.834096][T28200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38301'. [ 2073.065580][ T30] audit: type=1326 audit(1764834092.325:14050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28208 comm="syz.3.38305" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0 [ 2073.527977][ C0] net_ratelimit: 14 callbacks suppressed [ 2073.527997][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2073.667337][T28227] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2073.768092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2073.776822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.241788][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38321'. [ 2074.256052][T28246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38321'. [ 2074.328488][T21310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.392906][T21310] usb 2-1: USB disconnect, device number 45 [ 2074.567973][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2074.808110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.817139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.408243][T21310] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2075.568226][ T2797] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2075.576035][T21310] usb 6-1: Using ep0 maxpacket: 32 [ 2075.585475][T21310] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.596209][T21310] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2075.608013][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2075.615176][T21310] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2075.626560][T21310] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2075.641795][T21310] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2075.651477][T21310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.659701][T21310] usb 6-1: Product: syz [ 2075.663902][T21310] usb 6-1: Manufacturer: syz [ 2075.668579][T21310] usb 6-1: SerialNumber: syz [ 2075.679829][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2075.692244][T21310] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input306 [ 2075.740094][ T2797] usb 3-1: config 0 has no interfaces? [ 2075.747844][ T2797] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2075.757301][ T2797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.765423][ T2797] usb 3-1: Product: syz [ 2075.770018][ T2797] usb 3-1: Manufacturer: syz [ 2075.774639][ T2797] usb 3-1: SerialNumber: syz [ 2075.781953][ T2797] usb 3-1: config 0 descriptor?? [ 2075.848099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.856908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2075.898180][T21310] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2075.906587][T21310] (id 0x00) [ 2075.958011][T21310] rc_core: IR keymap rc-imon-pad not found [ 2075.963903][T21310] Registered IR keymap rc-empty [ 2075.969021][T21310] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2075.979961][T21310] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2076.041501][ T2797] usb 3-1: USB disconnect, device number 48 [ 2076.111041][T21310] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 2076.123515][T21310] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input307 [ 2076.140452][T21310] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:102> initialized [ 2076.313131][T21318] usb 6-1: USB disconnect, device number 102 [ 2076.631036][T28463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38346'. [ 2076.884442][T28471] netlink: 27 bytes leftover after parsing attributes in process `syz.1.38350'. [ 2077.348281][ T2797] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2077.530018][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.541095][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.548052][T21318] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2077.551007][ T2797] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2077.567630][ T2797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.580726][ T2797] usb 3-1: config 0 descriptor?? [ 2077.709882][T21318] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2077.719482][T21318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.729910][T21318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2077.739058][T21318] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.751923][T21318] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2077.762153][T21318] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2077.770540][T21318] usb 2-1: Product: syz [ 2077.774723][T21318] usb 2-1: Manufacturer: syz [ 2077.790396][T21318] cdc_wdm 2-1:1.0: skipping garbage [ 2077.795651][T21318] cdc_wdm 2-1:1.0: skipping garbage [ 2077.802640][T21318] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2077.809541][T21318] cdc_wdm 2-1:1.0: Unknown control protocol [ 2078.010140][ T2797] keytouch 0003:0926:3333.00B8: fixing up Keytouch IEC report descriptor [ 2078.035405][ T2797] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.00B8/input/input308 [ 2078.236226][ T2797] keytouch 0003:0926:3333.00B8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2078.301677][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 2078.302029][T21310] usb 2-1: USB disconnect, device number 46 [ 2078.311549][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2078.321275][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2078.327373][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2078.341465][ T2797] usb 3-1: USB disconnect, device number 49 [ 2078.538273][T28538] fido_id[28538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2078.728045][ C0] net_ratelimit: 9 callbacks suppressed [ 2078.728063][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2078.968063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.977400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.224402][T28900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38376'. [ 2079.275974][T28902] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 2079.765530][T29030] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2079.777985][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2080.008114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.016606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.078516][T21318] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2080.240065][T21318] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2080.249261][T21318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.260198][T21318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2080.269658][T21318] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.282951][T21318] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2080.292650][T21318] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2080.300846][T21318] usb 6-1: Product: syz [ 2080.305056][T21318] usb 6-1: Manufacturer: syz [ 2080.314400][T21318] cdc_wdm 6-1:1.0: skipping garbage [ 2080.320287][T21318] cdc_wdm 6-1:1.0: skipping garbage [ 2080.326629][T21318] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2080.333136][T21318] cdc_wdm 6-1:1.0: Unknown control protocol [ 2080.658488][ T2797] usb 6-1: USB disconnect, device number 103 [ 2080.808071][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2080.969651][ T3020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.048087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.178166][ T2797] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 2081.342095][ T2797] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 2081.351788][ T2797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.360325][ T2797] usb 6-1: Product: syz [ 2081.364560][ T2797] usb 6-1: Manufacturer: syz [ 2081.370030][ T2797] usb 6-1: SerialNumber: syz [ 2081.387407][ T2797] usb 6-1: config 0 descriptor?? [ 2081.401661][ T2797] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 2081.615509][ T2797] pwc: Failed to set LED on/off time (-71) [ 2081.625993][ T2797] pwc: send_video_command error -71 [ 2081.634973][ T2797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2081.644971][T29303] sctp: [Deprecated]: syz.1.38405 (pid 29303) Use of int in max_burst socket option deprecated. [ 2081.644971][T29303] Use struct sctp_assoc_value instead [ 2081.652493][T29305] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 2081.661898][ T2797] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 2081.690995][ T2797] usb 6-1: USB disconnect, device number 104 [ 2082.465736][T29452] netlink: 'syz.5.38423': attribute type 63 has an invalid length. [ 2082.475028][T29452] netlink: 'syz.5.38423': attribute type 63 has an invalid length. [ 2082.538780][T21318] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2082.639168][T21310] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2082.708137][T21318] usb 3-1: Using ep0 maxpacket: 32 [ 2082.743857][T21318] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 2082.788267][T21318] usb 3-1: config 0 has no interface number 0 [ 2082.794412][T21318] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2082.807133][T21318] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2082.817090][T21318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.825469][T21318] usb 3-1: Product: syz [ 2082.825613][T21310] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2082.830620][T21318] usb 3-1: Manufacturer: syz [ 2082.844465][T21318] usb 3-1: SerialNumber: syz [ 2082.855189][T21310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2082.867335][T21310] usb 2-1: Product: syz [ 2082.871884][T29564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38427'. [ 2082.874388][T21318] usb 3-1: config 0 descriptor?? [ 2082.881449][T21310] usb 2-1: Manufacturer: syz [ 2082.891491][T29564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38427'. [ 2082.900202][T29344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2082.906698][T21310] usb 2-1: SerialNumber: syz [ 2082.918121][T29564] netlink: 104 bytes leftover after parsing attributes in process `syz.5.38427'. [ 2082.927251][T29564] netlink: 104 bytes leftover after parsing attributes in process `syz.5.38427'. [ 2082.999321][T21310] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2083.029343][ T2797] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2083.121651][T29344] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2083.329414][T31935] usb 2-1: USB disconnect, device number 47 [ 2083.590008][T29603] sg_write: process 2914 (syz.3.38437) changed security contexts after opening file descriptor, this is not allowed. [ 2083.679338][T21321] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2083.740788][T21318] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2083.839699][T21321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.851118][T21321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.861722][T21321] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 2083.871489][T21321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.887141][T21321] usb 6-1: config 0 descriptor?? [ 2083.928243][ C0] net_ratelimit: 9 callbacks suppressed [ 2083.928262][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2083.951518][T21318] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2083.965373][T21318] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2083.976803][T21318] asix 3-1:0.188: probe with driver asix failed with error -71 [ 2083.990578][T21318] usb 3-1: USB disconnect, device number 50 [ 2084.168076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.176775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.180860][ T2797] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2084.194150][ T2797] ath9k_htc: Failed to initialize the device [ 2084.203510][T31935] usb 2-1: ath9k_htc: USB layer deinitialized [ 2084.302613][T21321] hid (null): usage index exceeded [ 2084.311197][T21321] logitech-djreceiver 0003:046D:C532.00B9: ignoring exceeding usage max [ 2084.323086][T21321] logitech-djreceiver 0003:046D:C532.00B9: ignoring exceeding usage max [ 2084.331595][T21321] logitech-djreceiver 0003:046D:C532.00B9: usage index exceeded [ 2084.340195][T21321] logitech-djreceiver 0003:046D:C532.00B9: item 0 1 2 2 parsing failed [ 2084.349253][T21321] logitech-djreceiver 0003:046D:C532.00B9: logi_dj_probe: parse failed [ 2084.357593][T21321] logitech-djreceiver 0003:046D:C532.00B9: probe with driver logitech-djreceiver failed with error -22 [ 2084.533338][T21310] usb 6-1: USB disconnect, device number 105 [ 2084.548513][T31935] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2084.579105][T31723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.709908][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2084.738068][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2084.747834][T31935] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2084.760621][T31935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.772733][T31935] usb 2-1: config 0 descriptor?? [ 2084.885960][T29654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.895568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.967975][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2085.208100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2085.217039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2085.394216][T29681] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2085.840590][T31935] usb 2-1: USB disconnect, device number 48 [ 2086.248248][ T2797] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2086.419186][ T2797] usb 3-1: Using ep0 maxpacket: 32 [ 2086.424468][T29941] netlink: 116 bytes leftover after parsing attributes in process `syz.1.38472'. [ 2086.432994][ T2797] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2086.453569][ T2797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.489893][ T2797] usb 3-1: config 0 descriptor?? [ 2086.502352][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38473'. [ 2086.523890][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38473'. [ 2086.722192][ T2797] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2086.759736][ T2797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2086.773833][ T2797] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2086.825405][ T2797] usb 3-1: media controller created [ 2086.877785][ T2797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2086.974306][ T2797] az6027: usb out operation failed. (-71) [ 2087.029001][ T2797] az6027: usb out operation failed. (-71) [ 2087.038670][ T2797] stb0899_attach: Driver disabled by Kconfig [ 2087.044685][ T2797] az6027: no front-end attached [ 2087.044685][ T2797] [ 2087.052876][ T2797] az6027: usb out operation failed. (-71) [ 2087.061225][ T2797] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2087.086845][ T2797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input309 [ 2087.136322][ T2797] dvb-usb: schedule remote query interval to 400 msecs. [ 2087.162119][ T2797] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2087.192069][ T2797] usb 3-1: USB disconnect, device number 51 [ 2087.348568][ T2797] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2087.808120][T31935] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2087.858322][T21321] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2087.970426][T31935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2087.990644][T31935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.002832][T31935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2088.013278][T31935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.023612][T21321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.040048][T31935] usb 6-1: config 0 descriptor?? [ 2088.057650][T21321] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2088.089437][T21321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2088.108387][T21321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.127562][T21321] usb 3-1: Product: syz [ 2088.139655][T21321] usb 3-1: Manufacturer: syz [ 2088.149919][T21321] usb 3-1: SerialNumber: syz [ 2088.174238][T21321] cdc_mbim 3-1:1.0: skipping garbage [ 2088.289590][T31935] usbhid 6-1:0.0: can't add hid device: -71 [ 2088.304434][T31935] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2088.334115][T31935] usb 6-1: USB disconnect, device number 106 [ 2088.414335][T30219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2089.061299][T30219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2089.108514][T21321] cdc_mbim 3-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 2089.116450][T21321] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 2089.128017][ C0] net_ratelimit: 12 callbacks suppressed [ 2089.128036][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2089.323301][T21321] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 2089.349239][T31723] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2089.349983][T21321] wwan wwan0: port wwan0mbim0 attached [ 2089.368072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.376496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.424609][T21321] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 6a:4a:f2:72:73:1a [ 2089.478307][T21321] usb 3-1: USB disconnect, device number 52 [ 2089.484969][T21321] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 2089.558825][T31723] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2089.590354][T31723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.599936][T21321] wwan wwan0: port wwan0mbim0 disconnected [ 2089.611902][T31723] usb 6-1: Product: syz [ 2089.616094][T31723] usb 6-1: Manufacturer: syz [ 2089.638724][T31723] usb 6-1: SerialNumber: syz [ 2089.691315][T31723] usb 6-1: config 0 descriptor?? [ 2089.719432][T31723] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2090.177967][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2090.408099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.417473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2090.522904][T31723] gspca_sunplus: reg_r err -71 [ 2090.534550][T31723] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2090.552904][T31723] usb 6-1: USB disconnect, device number 107 [ 2090.659125][ T2797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.208011][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2091.328309][T31935] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2091.448057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.456674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.498175][T31935] usb 2-1: Using ep0 maxpacket: 8 [ 2091.505550][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2091.524063][T31935] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2091.541633][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38539'. [ 2091.562591][T31935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.603959][T31935] usb 2-1: config 0 descriptor?? [ 2091.744297][T30445] netlink: 'syz.2.38541': attribute type 11 has an invalid length. [ 2091.864625][T31935] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2092.016739][T30558] veth0_to_bridge: entered promiscuous mode [ 2092.031747][T30557] veth0_to_bridge: left promiscuous mode [ 2092.175844][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38549'. [ 2092.404966][T31935] usb 2-1: USB disconnect, device number 49 [ 2092.512242][T30690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38553'. [ 2092.779468][T30902] input: syz0 as /devices/virtual/input/input310 [ 2092.876024][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38559'. [ 2092.963856][T30911] input: syz1 as /devices/virtual/input/input311 [ 2092.978697][T30911] input: failed to attach handler leds to device input311, error: -6 [ 2093.748107][T31723] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2093.910561][ T2797] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2093.918487][T31723] usb 6-1: Using ep0 maxpacket: 8 [ 2093.931577][T31723] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2093.944072][T31723] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2093.960144][T31723] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2093.978613][T31723] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2093.993011][T31723] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2094.007384][T31723] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2094.027615][T31723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.070683][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.086248][ T2797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2094.097427][ T2797] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 2094.111886][ T2797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.129146][ T2797] usb 3-1: config 0 descriptor?? [ 2094.231847][T30981] netlink: 64 bytes leftover after parsing attributes in process `syz.1.38582'. [ 2094.259412][T31723] usb 6-1: GET_CAPABILITIES returned 0 [ 2094.267328][T31723] usbtmc 6-1:16.0: can't read capabilities [ 2094.327969][ C0] net_ratelimit: 11 callbacks suppressed [ 2094.327987][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2094.484290][T31723] usb 6-1: USB disconnect, device number 108 [ 2094.501218][T30999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.516961][T30999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.525966][T30999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.566531][ T2797] hid (null): usage index exceeded [ 2094.574743][ T2797] logitech-djreceiver 0003:046D:C532.00BB: ignoring exceeding usage max [ 2094.578167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.585238][ T2797] logitech-djreceiver 0003:046D:C532.00BB: ignoring exceeding usage max [ 2094.592760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.600671][ T2797] logitech-djreceiver 0003:046D:C532.00BB: usage index exceeded [ 2094.616254][ T2797] logitech-djreceiver 0003:046D:C532.00BB: item 0 1 2 2 parsing failed [ 2094.625366][ T2797] logitech-djreceiver 0003:046D:C532.00BB: logi_dj_probe: parse failed [ 2094.634082][ T2797] logitech-djreceiver 0003:046D:C532.00BB: probe with driver logitech-djreceiver failed with error -22 [ 2094.716627][T31017] netlink: 276 bytes leftover after parsing attributes in process `syz.1.38589'. [ 2094.730702][T31017] netlink: 276 bytes leftover after parsing attributes in process `syz.1.38589'. [ 2094.758476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.840245][ T2797] usb 3-1: USB disconnect, device number 53 [ 2094.978100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2095.265407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2095.275511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2095.848696][T21318] usb 6-1: new low-speed USB device number 109 using dummy_hcd [ 2096.009689][T21318] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2096.017440][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2096.049515][T21318] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2096.054400][ T30] audit: type=1326 audit(1764834115.315:14051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31058 comm="syz.1.38598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7fc00000 [ 2096.068946][T31935] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2096.114336][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2096.168398][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2096.201572][T21318] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2096.222980][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2096.246431][T21318] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2096.274202][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2096.299652][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2096.321389][T21318] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2096.332902][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2096.348454][T31935] usb 3-1: Using ep0 maxpacket: 8 [ 2096.357741][T31935] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2096.373316][T21318] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2096.388399][T31935] usb 3-1: config 179 has no interface number 0 [ 2096.402628][T31935] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2096.418735][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2096.445343][T31935] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2096.461075][T21318] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2096.488898][T31935] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2096.510518][T21318] usb 6-1: string descriptor 0 read error: -22 [ 2096.519317][T21318] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2096.540282][T31935] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2096.553786][T21318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.567359][T31935] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2096.598362][T21318] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2096.616198][T31935] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2096.635915][T31935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.661507][T31182] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2096.812986][ T2797] usb 6-1: USB disconnect, device number 109 [ 2097.009380][T31935] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input312 [ 2097.023190][T31170] adutux: No device or device unplugged -19 [ 2097.429906][T31723] usb 3-1: USB disconnect, device number 54 [ 2097.429995][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2097.447188][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 2097.894695][T31371] netlink: 'syz.5.38624': attribute type 10 has an invalid length. [ 2097.911980][T31371] netlink: 'syz.5.38624': attribute type 10 has an invalid length. [ 2097.927701][T31371] dummy0: left promiscuous mode [ 2097.949284][T31371] dummy0: left allmulticast mode [ 2098.007611][T31371] team0: Port device dummy0 removed [ 2098.403642][T31390] netlink: 20 bytes leftover after parsing attributes in process `syz.5.38633'. [ 2098.973719][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.980324][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.453683][T31432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38649'. [ 2099.518131][T31723] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2099.528101][ C0] net_ratelimit: 230 callbacks suppressed [ 2099.528120][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2099.608602][ T1098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.700815][T31723] usb 6-1: Using ep0 maxpacket: 16 [ 2099.708943][T31723] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.733650][T31723] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 2099.758054][T31723] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.768033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.776469][ T186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.784639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.803735][T31723] usb 6-1: config 0 descriptor?? [ 2099.858318][T31452] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.38656'. [ 2099.989604][T31461] bond0: entered promiscuous mode [ 2099.996309][T31461] bond0: left promiscuous mode [ 2100.213897][T31474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.223640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.268623][T31474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.288358][T15615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.318168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.547638][T31723] usbhid 6-1:0.0: can't add hid device: -71 [ 2100.579182][T31723] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2100.635989][T31723] usb 6-1: USB disconnect, device number 110 [ 2100.685878][T31598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38669'. [ 2100.695749][T31598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38669'. [ 2100.805858][ T30] audit: type=1326 audit(1764834120.065:14052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2100.831607][ T30] audit: type=1326 audit(1764834120.065:14053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2100.855623][ T30] audit: type=1326 audit(1764834120.095:14054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2100.879714][ T30] audit: type=1326 audit(1764834120.095:14055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2100.909168][T31935] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2101.003147][ T30] audit: type=1326 audit(1764834120.095:14056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2101.062200][ T30] audit: type=1326 audit(1764834120.115:14057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2101.093004][T31935] usb 2-1: Using ep0 maxpacket: 8 [ 2101.154941][ T30] audit: type=1326 audit(1764834120.195:14058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2101.180306][ T30] audit: type=1326 audit(1764834120.195:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31604 comm="syz.3.38670" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2101.204682][T31935] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2101.232771][T31935] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2101.258532][T31935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.297135][T31935] usb 2-1: config 0 descriptor?? [ 2101.398305][T31737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.38683'. [ 2101.452314][T31739] lo: entered allmulticast mode [ 2101.459693][T31739] lo: left allmulticast mode [ 2101.558888][T31935] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2101.764438][T31935] usb 2-1: USB disconnect, device number 50 [ 2102.173407][T31889] netlink: 146712 bytes leftover after parsing attributes in process `syz.3.38700'. [ 2102.458339][T31723] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2102.491862][T31908] [ 2102.494225][T31908] ===================================================== [ 2102.501150][T31908] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2102.508589][T31908] syzkaller #0 Not tainted [ 2102.513005][T31908] ----------------------------------------------------- [ 2102.519936][T31908] syz.5.38708/31908 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2102.527747][T31908] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 2102.536502][T31908] [ 2102.536502][T31908] and this task is already holding: [ 2102.543878][T31908] ffff8880531b84a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 2102.552583][T31908] which would create a new lock dependency: [ 2102.558462][T31908] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2102.566026][T31908] [ 2102.566026][T31908] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2102.575458][T31908] (&client->buffer_lock){..-.}-{3:3} [ 2102.575483][T31908] [ 2102.575483][T31908] ... which became SOFTIRQ-irq-safe at: [ 2102.588512][T31908] lock_acquire+0x117/0x340 [ 2102.593097][T31908] _raw_spin_lock+0x2e/0x40 [ 2102.597673][T31908] evdev_pass_values+0xb9/0xbd0 [ 2102.602599][T31908] evdev_events+0x1e6/0x340 [ 2102.607182][T31908] input_pass_values+0x288/0x890 [ 2102.612190][T31908] input_event_dispose+0x3e5/0x6b0 [ 2102.617468][T31908] input_inject_event+0x1dd/0x340 [ 2102.622563][T31908] led_trigger_event+0x138/0x210 [ 2102.627581][T31908] kbd_bh+0x1c6/0x2e0 [ 2102.631633][T31908] tasklet_action_common+0x358/0x550 [ 2102.636988][T31908] handle_softirqs+0x27d/0x850 [ 2102.641823][T31908] __irq_exit_rcu+0xca/0x1f0 [ 2102.646489][T31908] irq_exit_rcu+0x9/0x30 [ 2102.650801][T31908] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2102.656516][T31908] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2102.662568][T31908] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2102.668367][T31908] evdev_write+0x2fc/0x480 [ 2102.672858][T31908] vfs_write+0x27e/0xb30 [ 2102.677175][T31908] ksys_write+0x145/0x250 [ 2102.681578][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2102.686847][T31908] do_fast_syscall_32+0x34/0x80 [ 2102.691767][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2102.698168][T31908] [ 2102.698168][T31908] to a SOFTIRQ-irq-unsafe lock: [ 2102.705179][T31908] (tasklist_lock){.+.+}-{3:3} [ 2102.705203][T31908] [ 2102.705203][T31908] ... which became SOFTIRQ-irq-unsafe at: [ 2102.717810][T31908] ... [ 2102.717818][T31908] lock_acquire+0x117/0x340 [ 2102.724981][T31908] _raw_read_lock+0x36/0x50 [ 2102.729562][T31908] __do_wait+0xde/0x740 [ 2102.733794][T31908] do_wait+0x1e8/0x4f0 [ 2102.737934][T31908] kernel_wait+0xab/0x170 [ 2102.742342][T31908] call_usermodehelper_exec_work+0xbe/0x230 [ 2102.748320][T31908] process_scheduled_works+0xad1/0x1770 [ 2102.753957][T31908] worker_thread+0x8a0/0xda0 [ 2102.758617][T31908] kthread+0x711/0x8a0 [ 2102.762760][T31908] ret_from_fork+0x599/0xb30 [ 2102.767426][T31908] ret_from_fork_asm+0x1a/0x30 [ 2102.772269][T31908] [ 2102.772269][T31908] other info that might help us debug this: [ 2102.772269][T31908] [ 2102.782480][T31908] Chain exists of: [ 2102.782480][T31908] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 2102.782480][T31908] [ 2102.795675][T31908] Possible interrupt unsafe locking scenario: [ 2102.795675][T31908] [ 2102.803978][T31908] CPU0 CPU1 [ 2102.809331][T31908] ---- ---- [ 2102.814682][T31908] lock(tasklist_lock); [ 2102.818913][T31908] local_irq_disable(); [ 2102.825651][T31908] lock(&client->buffer_lock); [ 2102.833008][T31908] lock(&f_owner->lock); [ 2102.839842][T31908] [ 2102.843277][T31908] lock(&client->buffer_lock); [ 2102.848298][T31908] [ 2102.848298][T31908] *** DEADLOCK *** [ 2102.848298][T31908] [ 2102.856449][T31908] 2 locks held by syz.5.38708/31908: [ 2102.861719][T31908] #0: ffff8880288178a0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 2102.870244][T31908] #1: ffff8880531b84a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 2102.879366][T31908] [ 2102.879366][T31908] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2102.889771][T31908] -> (&client->buffer_lock){..-.}-{3:3} { [ 2102.895663][T31908] IN-SOFTIRQ-W at: [ 2102.899800][T31908] lock_acquire+0x117/0x340 [ 2102.906292][T31908] _raw_spin_lock+0x2e/0x40 [ 2102.912785][T31908] evdev_pass_values+0xb9/0xbd0 [ 2102.919627][T31908] evdev_events+0x1e6/0x340 [ 2102.926114][T31908] input_pass_values+0x288/0x890 [ 2102.933034][T31908] input_event_dispose+0x3e5/0x6b0 [ 2102.940128][T31908] input_inject_event+0x1dd/0x340 [ 2102.947142][T31908] led_trigger_event+0x138/0x210 [ 2102.954062][T31908] kbd_bh+0x1c6/0x2e0 [ 2102.960034][T31908] tasklet_action_common+0x358/0x550 [ 2102.967309][T31908] handle_softirqs+0x27d/0x850 [ 2102.974057][T31908] __irq_exit_rcu+0xca/0x1f0 [ 2102.980629][T31908] irq_exit_rcu+0x9/0x30 [ 2102.986851][T31908] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2102.994471][T31908] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2103.002437][T31908] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2103.010144][T31908] evdev_write+0x2fc/0x480 [ 2103.016547][T31908] vfs_write+0x27e/0xb30 [ 2103.022775][T31908] ksys_write+0x145/0x250 [ 2103.029088][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.036267][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.043098][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.051409][T31908] INITIAL USE at: [ 2103.055473][T31908] lock_acquire+0x117/0x340 [ 2103.061874][T31908] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2103.068968][T31908] evdev_ioctl_handler+0x1095/0x1f10 [ 2103.076152][T31908] __ia32_compat_sys_ioctl+0x543/0x840 [ 2103.083511][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.090606][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.097351][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.105579][T31908] } [ 2103.108240][T31908] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2103.116562][T31908] -> (&new->fa_lock){....}-{3:3} { [ 2103.121761][T31908] INITIAL USE at: [ 2103.125727][T31908] lock_acquire+0x117/0x340 [ 2103.131952][T31908] _raw_write_lock_irq+0xa2/0xf0 [ 2103.138627][T31908] fasync_remove_entry+0xf1/0x1c0 [ 2103.145374][T31908] tun_chr_fasync+0x87/0x1a0 [ 2103.151685][T31908] __fput+0x8a2/0xa70 [ 2103.157390][T31908] task_work_run+0x1d4/0x260 [ 2103.163704][T31908] exit_to_user_mode_loop+0xff/0x4f0 [ 2103.170716][T31908] __do_fast_syscall_32+0x3cb/0x570 [ 2103.177636][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.184209][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.192267][T31908] INITIAL READ USE at: [ 2103.196665][T31908] lock_acquire+0x117/0x340 [ 2103.203324][T31908] _raw_read_lock_irqsave+0xaf/0x100 [ 2103.210772][T31908] kill_fasync+0x199/0x4d0 [ 2103.217348][T31908] pipe_release+0x19c/0x330 [ 2103.224009][T31908] __fput+0x44c/0xa70 [ 2103.230146][T31908] task_work_run+0x1d4/0x260 [ 2103.236900][T31908] exit_to_user_mode_loop+0xff/0x4f0 [ 2103.244357][T31908] __do_fast_syscall_32+0x3cb/0x570 [ 2103.251712][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.258741][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.267315][T31908] } [ 2103.269884][T31908] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2103.278631][T31908] ... acquired at: [ 2103.282504][T31908] _raw_read_lock_irqsave+0xaf/0x100 [ 2103.287954][T31908] kill_fasync+0x199/0x4d0 [ 2103.292539][T31908] evdev_pass_values+0x627/0xbd0 [ 2103.297636][T31908] evdev_events+0x1e6/0x340 [ 2103.302298][T31908] input_pass_values+0x288/0x890 [ 2103.307401][T31908] input_event_dispose+0x330/0x6b0 [ 2103.312845][T31908] input_inject_event+0x1dd/0x340 [ 2103.318036][T31908] evdev_write+0x2fc/0x480 [ 2103.322613][T31908] vfs_write+0x27e/0xb30 [ 2103.327014][T31908] ksys_write+0x145/0x250 [ 2103.331501][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.336855][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.341860][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.348347][T31908] [ 2103.350663][T31908] -> (&f_owner->lock){....}-{3:3} { [ 2103.355859][T31908] INITIAL USE at: [ 2103.359733][T31908] lock_acquire+0x117/0x340 [ 2103.365787][T31908] _raw_write_lock_irq+0xa2/0xf0 [ 2103.372280][T31908] __f_setown+0x67/0x370 [ 2103.378068][T31908] fcntl_dirnotify+0x3fa/0x6a0 [ 2103.384378][T31908] do_fcntl+0x745/0x1a50 [ 2103.390178][T31908] do_compat_fcntl64+0x477/0x720 [ 2103.396664][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.403411][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.409812][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.417687][T31908] INITIAL READ USE at: [ 2103.421998][T31908] lock_acquire+0x117/0x340 [ 2103.428483][T31908] _raw_read_lock_irq+0xaa/0xf0 [ 2103.435317][T31908] do_fcntl+0x9e7/0x1a50 [ 2103.441540][T31908] do_compat_fcntl64+0x477/0x720 [ 2103.448461][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.455649][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.462484][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.470797][T31908] } [ 2103.473279][T31908] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2103.482109][T31908] ... acquired at: [ 2103.485897][T31908] _raw_read_lock_irqsave+0xaf/0x100 [ 2103.491342][T31908] send_sigio+0x38/0x370 [ 2103.495743][T31908] kill_fasync+0x24d/0x4d0 [ 2103.500316][T31908] lease_break_callback+0x26/0x30 [ 2103.505498][T31908] __break_lease+0x730/0x1620 [ 2103.510332][T31908] do_dentry_open+0x73a/0x1420 [ 2103.515251][T31908] vfs_open+0x3b/0x340 [ 2103.519477][T31908] path_openat+0x340e/0x3dd0 [ 2103.524228][T31908] do_filp_open+0x1fa/0x410 [ 2103.528890][T31908] do_sys_openat2+0x121/0x200 [ 2103.533720][T31908] __ia32_compat_sys_openat+0x131/0x160 [ 2103.539421][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.544775][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.549783][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.556274][T31908] [ 2103.558583][T31908] [ 2103.558583][T31908] the dependencies between the lock to be acquired [ 2103.558591][T31908] and SOFTIRQ-irq-unsafe lock: [ 2103.572065][T31908] -> (tasklist_lock){.+.+}-{3:3} { [ 2103.577193][T31908] HARDIRQ-ON-R at: [ 2103.581154][T31908] lock_acquire+0x117/0x340 [ 2103.587291][T31908] _raw_read_lock+0x36/0x50 [ 2103.593436][T31908] __do_wait+0xde/0x740 [ 2103.599228][T31908] do_wait+0x1e8/0x4f0 [ 2103.604934][T31908] kernel_wait+0xab/0x170 [ 2103.610898][T31908] call_usermodehelper_exec_work+0xbe/0x230 [ 2103.618432][T31908] process_scheduled_works+0xad1/0x1770 [ 2103.625618][T31908] worker_thread+0x8a0/0xda0 [ 2103.631842][T31908] kthread+0x711/0x8a0 [ 2103.637544][T31908] ret_from_fork+0x599/0xb30 [ 2103.643859][T31908] ret_from_fork_asm+0x1a/0x30 [ 2103.650260][T31908] SOFTIRQ-ON-R at: [ 2103.654237][T31908] lock_acquire+0x117/0x340 [ 2103.660372][T31908] _raw_read_lock+0x36/0x50 [ 2103.666511][T31908] __do_wait+0xde/0x740 [ 2103.672306][T31908] do_wait+0x1e8/0x4f0 [ 2103.678011][T31908] kernel_wait+0xab/0x170 [ 2103.683976][T31908] call_usermodehelper_exec_work+0xbe/0x230 [ 2103.691508][T31908] process_scheduled_works+0xad1/0x1770 [ 2103.698701][T31908] worker_thread+0x8a0/0xda0 [ 2103.704941][T31908] kthread+0x711/0x8a0 [ 2103.710658][T31908] ret_from_fork+0x599/0xb30 [ 2103.716893][T31908] ret_from_fork_asm+0x1a/0x30 [ 2103.723302][T31908] INITIAL USE at: [ 2103.727182][T31908] lock_acquire+0x117/0x340 [ 2103.733232][T31908] _raw_write_lock_irq+0xa2/0xf0 [ 2103.739724][T31908] copy_process+0x2185/0x3950 [ 2103.745953][T31908] kernel_clone+0x21e/0x820 [ 2103.752005][T31908] user_mode_thread+0xdd/0x140 [ 2103.758322][T31908] rest_init+0x23/0x300 [ 2103.764127][T31908] start_kernel+0x3ae/0x410 [ 2103.770186][T31908] x86_64_start_reservations+0x24/0x30 [ 2103.777198][T31908] x86_64_start_kernel+0x143/0x1c0 [ 2103.783859][T31908] common_startup_64+0x13e/0x147 [ 2103.790350][T31908] INITIAL READ USE at: [ 2103.794664][T31908] lock_acquire+0x117/0x340 [ 2103.801153][T31908] _raw_read_lock+0x36/0x50 [ 2103.807645][T31908] __do_wait+0xde/0x740 [ 2103.813791][T31908] do_wait+0x1e8/0x4f0 [ 2103.819869][T31908] kernel_wait+0xab/0x170 [ 2103.826185][T31908] call_usermodehelper_exec_work+0xbe/0x230 [ 2103.834064][T31908] process_scheduled_works+0xad1/0x1770 [ 2103.841604][T31908] worker_thread+0x8a0/0xda0 [ 2103.848268][T31908] kthread+0x711/0x8a0 [ 2103.854409][T31908] ret_from_fork+0x599/0xb30 [ 2103.860988][T31908] ret_from_fork_asm+0x1a/0x30 [ 2103.867735][T31908] } [ 2103.870217][T31908] ... key at: [] tasklist_lock+0x18/0x40 [ 2103.877929][T31908] ... acquired at: [ 2103.881721][T31908] _raw_read_lock+0x36/0x50 [ 2103.886386][T31908] send_sigurg+0x12b/0x420 [ 2103.890959][T31908] sk_send_sigurg+0x6c/0x2e0 [ 2103.895711][T31908] queue_oob+0x420/0x4f0 [ 2103.900119][T31908] unix_stream_sendmsg+0xc32/0xde0 [ 2103.905390][T31908] __sock_sendmsg+0x21c/0x270 [ 2103.910230][T31908] ____sys_sendmsg+0x52d/0x820 [ 2103.915182][T31908] ___sys_sendmsg+0x21f/0x2a0 [ 2103.920026][T31908] __sys_sendmmsg+0x28e/0x430 [ 2103.924859][T31908] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2103.930567][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.935923][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.941020][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.947511][T31908] [ 2103.949822][T31908] [ 2103.949822][T31908] stack backtrace: [ 2103.955704][T31908] CPU: 0 UID: 0 PID: 31908 Comm: syz.5.38708 Not tainted syzkaller #0 PREEMPT(full) [ 2103.955721][T31908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2103.955731][T31908] Call Trace: [ 2103.955738][T31908] [ 2103.955745][T31908] dump_stack_lvl+0x189/0x250 [ 2103.955764][T31908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2103.955778][T31908] ? __pfx__printk+0x10/0x10 [ 2103.955797][T31908] __lock_acquire+0x2a95/0x2cf0 [ 2103.955818][T31908] ? send_sigurg+0x12b/0x420 [ 2103.955832][T31908] lock_acquire+0x117/0x340 [ 2103.955844][T31908] ? send_sigurg+0x12b/0x420 [ 2103.955859][T31908] ? _raw_read_lock_irqsave+0xbb/0x100 [ 2103.955881][T31908] _raw_read_lock+0x36/0x50 [ 2103.955898][T31908] ? send_sigurg+0x12b/0x420 [ 2103.955911][T31908] send_sigurg+0x12b/0x420 [ 2103.955926][T31908] sk_send_sigurg+0x6c/0x2e0 [ 2103.955945][T31908] queue_oob+0x420/0x4f0 [ 2103.955959][T31908] ? __pfx_queue_oob+0x10/0x10 [ 2103.955973][T31908] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2103.955993][T31908] unix_stream_sendmsg+0xc32/0xde0 [ 2103.956008][T31908] ? trace_sched_exit_tp+0x36/0xf0 [ 2103.956026][T31908] ? __schedule+0x14d2/0x5000 [ 2103.956045][T31908] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 2103.956058][T31908] ? __asan_memset+0x22/0x50 [ 2103.956073][T31908] ? __import_iovec+0x5d4/0x7f0 [ 2103.956091][T31908] ? aa_sock_msg_perm+0xda/0x1b0 [ 2103.956107][T31908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2103.956123][T31908] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 2103.956136][T31908] __sock_sendmsg+0x21c/0x270 [ 2103.956154][T31908] ____sys_sendmsg+0x52d/0x820 [ 2103.956171][T31908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2103.956187][T31908] ? futex_unqueue+0x22/0x240 [ 2103.956206][T31908] ? futex_unqueue+0x22/0x240 [ 2103.956224][T31908] ___sys_sendmsg+0x21f/0x2a0 [ 2103.956240][T31908] ? __pfx____sys_sendmsg+0x10/0x10 [ 2103.956255][T31908] ? __pfx___futex_wait+0x10/0x10 [ 2103.956269][T31908] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2103.956294][T31908] ? __fget_files+0x2a/0x420 [ 2103.956306][T31908] ? __fget_files+0x3a0/0x420 [ 2103.956320][T31908] __sys_sendmmsg+0x28e/0x430 [ 2103.956337][T31908] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2103.956354][T31908] ? __pfx_do_futex+0x10/0x10 [ 2103.956371][T31908] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2103.956387][T31908] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2103.956405][T31908] __do_fast_syscall_32+0x1f7/0x570 [ 2103.956420][T31908] ? rcu_is_watching+0x15/0xb0 [ 2103.956435][T31908] ? do_fast_syscall_32+0x34/0x80 [ 2103.956449][T31908] do_fast_syscall_32+0x34/0x80 [ 2103.956462][T31908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2103.956478][T31908] RIP: 0023:0xf70dd539 [ 2103.956491][T31908] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2103.956503][T31908] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2103.956518][T31908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006c40 [ 2103.956528][T31908] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 2103.956537][T31908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2103.956544][T31908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2103.956552][T31908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2103.956565][T31908] [ 2104.388243][T31723] usb 3-1: Using ep0 maxpacket: 8 [ 2104.395179][T31723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2104.418309][T31723] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2104.434788][T31723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.445006][T31723] usb 3-1: config 0 descriptor?? [ 2104.656704][T31723] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2104.728394][ T3020] net_ratelimit: 18 callbacks suppressed [ 2104.728411][ T3020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.860125][T31723] usb 3-1: USB disconnect, device number 55 [ 2104.866089][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 2104.968117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.976576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.288227][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2106.008150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.016672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.338017][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2107.048095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.056583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.368200][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2110.168081][ C1] net_ratelimit: 8 callbacks suppressed [ 2110.168101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.182515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.488054][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2110.495602][ T3837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.504047][T21310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.208096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.216607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.528123][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 2112.248124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.256521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog