last executing test programs: 1m53.247367854s ago: executing program 2 (id=404): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.stat\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) 1m53.241467359s ago: executing program 2 (id=406): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000a00)={r1}) 1m53.214813142s ago: executing program 2 (id=409): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 1m51.408382136s ago: executing program 2 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m51.321084428s ago: executing program 2 (id=437): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$XFS_IOC_GETVERSION(r0, 0x80047601, 0x0) 1m51.081020249s ago: executing program 2 (id=440): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 1m51.025682506s ago: executing program 32 (id=440): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 1.87889417s ago: executing program 4 (id=1733): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xc0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 1.843352105s ago: executing program 4 (id=1737): socket$packet(0x11, 0x2, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.281870859s ago: executing program 1 (id=1744): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="58e21a62", 0x4, 0x89a643c95679b487, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x19}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 1.228029456s ago: executing program 4 (id=1745): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d81482fb16) read(r0, &(0x7f0000002300)=""/99, 0x63) 1.227651704s ago: executing program 4 (id=1746): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001ec0)="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", 0x1c3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc3", 0x2d}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.161533644s ago: executing program 1 (id=1747): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = epoll_create1(0x0) r2 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2}) close_range(r2, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x30000000}) ioctl$TCSBRKP(r0, 0x5425, 0x0) 1.161112653s ago: executing program 4 (id=1748): socket$nl_sock_diag(0x10, 0x3, 0x4) openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x1000, 0x370}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x110, 0xe1, 0xd2, 0x6b, 0x40, 0x112a, 0x5, 0xfe2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x7f, 0xe, 0x0, 0xef, 0xb0, 0x6f, 0x1}}]}}]}}, 0x0) 1.041569761s ago: executing program 1 (id=1749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x29, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x2ca, 0x0, 0x1000}, {"b2"}}}}}}, 0x0) 1.041295263s ago: executing program 1 (id=1750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000006e40)=[{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000000000)="cfb36e6d", 0x4}, {&(0x7f0000000280)="5996948d57f50ebc57527832511e2ffc7063beb66f2d9cd9f69e77a0841f66d5877ba51bb9a27e13e848f77256caef4ee3f9336a14517f91aed5cf1e3a4f63374412758c4c561afc47e47fd80ef2deed11dab45ba32dac6df1cf23736a3299dbd7620676e484e58e4d4fcdd35ba065695ba6aa6134106889247d31140c0f24ec6c71dc2b58d0ef859ec5ab6d", 0x8c}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 962.032252ms ago: executing program 1 (id=1751): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xfdf0, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 809.612096ms ago: executing program 3 (id=1754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000003a80)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, '$^a', 0x14, 0x6, 0xff, @empty, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x7, 0x0, 0xfff7}}}}}}}, 0x0) 751.856201ms ago: executing program 3 (id=1755): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x18, 0x3f}}], 0x1, 0xc0) 726.189596ms ago: executing program 3 (id=1756): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = io_uring_setup(0x612, &(0x7f0000000000)={0x0, 0x599e, 0x2, 0x1, 0x27c}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) keyctl$session_to_parent(0x12) close_range(r0, 0xffffffffffffffff, 0x0) 692.80727ms ago: executing program 0 (id=1757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@arm64={0x0, 0x3, 0x9}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)=@x86={0x5, 0x1, 0x4, 0x0, 0x9, 0x6, 0x24, 0x10, 0x6c, 0x0, 0x7, 0x4, 0x0, 0x9820, 0x80000001, 0x3, 0xfc, 0x5, 0x8, '\x00', 0x9, 0x1b7}) 636.524885ms ago: executing program 3 (id=1758): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 581.543923ms ago: executing program 3 (id=1759): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) 558.01585ms ago: executing program 0 (id=1760): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 550.895627ms ago: executing program 3 (id=1761): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 462.92718ms ago: executing program 0 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 371.54636ms ago: executing program 0 (id=1763): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b15", 0x5b}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000540)=""/74, 0x4a}], 0x2}, 0x10100) 371.194632ms ago: executing program 0 (id=1764): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 261.254585ms ago: executing program 0 (id=1765): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 135.250522ms ago: executing program 1 (id=1766): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 0s ago: executing program 4 (id=1767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b169794bb4a6e4606c3fb19d1d2bdd5c3b90400000000000000c279f13558083906666827d6ffcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c89f268103a2584ab40a68e528329d97afc3612e325c1eb4ab2e156a9744480000000000000200", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f44de419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fde4440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60aa14e1d9ad83bef1c9f736d1804687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e99725cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d70600000001d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) kernel console output (not intermixed with test programs): mode [ 129.618120][ T7386] syzkaller1: entered allmulticast mode [ 129.828673][ T7405] netlink: 'syz.1.566': attribute type 11 has an invalid length. [ 129.863889][ T7409] __nla_validate_parse: 1 callbacks suppressed [ 129.863906][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 129.917399][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 129.923693][ T7412] serio: Serial port ptm0 [ 129.991573][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.152208][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 130.308616][ T7434] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 130.321320][ T843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.395786][ T7439] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.579'. [ 130.475608][ T843] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.480346][ T843] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.485987][ T843] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.489980][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.506180][ T7416] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.514320][ T843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.723893][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026a70400: rx timeout, send abort [ 130.773354][ T6024] usb 5-1: USB disconnect, device number 2 [ 131.032026][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.224262][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012a61c00: rx timeout, send abort [ 131.229783][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026a70400: abort rx timeout. Force session deactivation [ 131.377776][ T7460] capability: warning: `syz.0.588' uses deprecated v2 capabilities in a way that may be insecure [ 131.571556][ T3257] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 131.624278][ T843] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.727613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888012a61c00: abort rx timeout. Force session deactivation [ 131.754397][ T3257] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.758181][ T3257] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.761484][ T3257] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 131.765901][ T3257] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.771730][ T3257] usb 8-1: config 0 descriptor?? [ 131.775416][ T843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.779848][ T843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.784847][ T843] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.790373][ T843] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.795414][ T843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.801939][ T843] usb 9-1: config 0 descriptor?? [ 132.001431][ T6024] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.068358][ T39] net_ratelimit: 2 callbacks suppressed [ 132.068375][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.197819][ T6024] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.202994][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 132.207632][ T6024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.213540][ T6024] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.219173][ T6024] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.223097][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.235844][ T6024] usb 5-1: config 0 descriptor?? [ 132.239565][ T7480] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.255517][ T843] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 132.263136][ T3257] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 132.267804][ T3257] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 132.275322][ T843] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 132.276337][ T3257] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0008/input/input13 [ 132.321865][ T3257] cm6533_jd 0003:0D8C:0022.0008: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 132.444464][ T66] usb 8-1: USB disconnect, device number 7 [ 132.516788][ T29] usb 9-1: USB disconnect, device number 3 [ 132.687146][ T6024] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.690634][ T6024] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.694083][ T6024] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.697107][ T6024] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 132.713925][ T6024] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.932910][ T10] usb 5-1: USB disconnect, device number 3 [ 133.018336][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.601'. [ 133.114661][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.210853][ T7512] ªªªªª6: renamed from wg2 (while UP) [ 133.513363][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 133.516200][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.522387][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.526971][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.530397][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.534231][ T7544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.544011][ T7543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.622134][ T6024] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 133.691166][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 133.695390][ T29] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.699568][ T29] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.703885][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.706922][ T29] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.713548][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.719329][ T29] usb 8-1: config 0 descriptor?? [ 133.753505][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.757452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.771183][ T6024] usb 9-1: Using ep0 maxpacket: 16 [ 133.775441][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 133.782151][ T6024] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 133.785672][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.788599][ T6024] usb 9-1: Product: syz [ 133.790381][ T6024] usb 9-1: Manufacturer: syz [ 133.793110][ T6024] usb 9-1: SerialNumber: syz [ 133.797137][ T6024] usb 9-1: config 0 descriptor?? [ 133.804866][ T6024] hub 9-1:0.0: bad descriptor, ignoring hub [ 133.807277][ T6024] hub 9-1:0.0: probe with driver hub failed with error -5 [ 133.811962][ T6024] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.137634][ T24] usb 9-1: USB disconnect, device number 4 [ 134.145889][ T29] hid_parser_main: 11 callbacks suppressed [ 134.145904][ T29] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 134.150520][ T29] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 134.165098][ T29] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 134.170219][ T29] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 134.181739][ T29] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 134.186163][ T29] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 134.336802][ T29] usb 8-1: USB disconnect, device number 8 [ 134.661170][ T66] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 134.824597][ T66] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.828991][ T66] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.834127][ T66] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.841754][ T66] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 134.845327][ T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 134.848985][ T66] usb 6-1: Product: syz [ 134.853305][ T66] usb 6-1: Manufacturer: syz [ 134.855398][ T66] usb 6-1: SerialNumber: syz [ 134.961534][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 135.071461][ T66] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 135.125386][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.125406][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.125419][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.125430][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.125450][ T29] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.125468][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.127071][ T29] usb 9-1: config 0 descriptor?? [ 135.272368][ T39] usb 6-1: USB disconnect, device number 5 [ 135.275326][ T7620] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.647'. [ 135.278963][ T39] usblp0: removed [ 135.540763][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 135.543342][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 135.545929][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 135.548582][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 135.551671][ T29] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 135.558628][ T29] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 135.694243][ T7639] syzkaller1: entered promiscuous mode [ 135.696405][ T7639] syzkaller1: entered allmulticast mode [ 135.793221][ T66] usb 9-1: USB disconnect, device number 5 [ 136.805421][ T7669] syzkaller1: entered promiscuous mode [ 136.808196][ T7669] syzkaller1: entered allmulticast mode [ 137.131747][ T6024] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 137.179460][ T7686] all (unregistering): Released all slaves [ 137.227827][ T7691] serio: Serial port ptm0 [ 137.273361][ T39] net_ratelimit: 7 callbacks suppressed [ 137.273377][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.298229][ T6024] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.302574][ T6024] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 137.305599][ T6024] usb 5-1: can't read configurations, error -71 [ 137.799784][ T7723] serio: Serial port ptm0 [ 138.311273][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.781450][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.784958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.805076][ T7754] serio: Serial port ptm0 [ 138.865600][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.870682][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.064989][ T7771] bond0: (slave syz_tun): Releasing backup interface [ 139.080446][ T7771] bridge_slave_0: left allmulticast mode [ 139.085814][ T7771] bridge_slave_0: left promiscuous mode [ 139.088068][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.098304][ T7771] bridge_slave_1: left allmulticast mode [ 139.124220][ T7771] bridge_slave_1: left promiscuous mode [ 139.128380][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.149990][ T7771] bond0: (slave bond_slave_0): Releasing backup interface [ 139.163674][ T7771] bond0: (slave bond_slave_1): Releasing backup interface [ 139.189805][ T7771] team0: Port device team_slave_0 removed [ 139.208040][ T7771] team0: Port device team_slave_1 removed [ 139.215923][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.222976][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.235145][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.249310][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.255809][ T7771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.350909][ T7785] serio: Serial port ptm0 [ 139.353177][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.600869][ T7802] serio: Serial port ptm0 [ 139.647110][ T7808] syzkaller1: entered promiscuous mode [ 139.649434][ T7808] syzkaller1: entered allmulticast mode [ 139.815337][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 140.051129][ T66] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 140.153276][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.159181][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.213270][ T7836] serio: Serial port ptm0 [ 140.221133][ T66] usb 9-1: Using ep0 maxpacket: 8 [ 140.225008][ T66] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 140.228776][ T66] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.233397][ T66] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.238053][ T66] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.242569][ T66] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.247229][ T66] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.250990][ T66] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.383408][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.463984][ T66] usb 9-1: usb_control_msg returned -32 [ 140.465948][ T66] usbtmc 9-1:16.0: can't read capabilities [ 140.817554][ T7846] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 140.822676][ T6024] usb 9-1: USB disconnect, device number 6 [ 141.432110][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.621215][ T6024] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 141.761344][ T66] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 141.789607][ T6024] usb 9-1: Using ep0 maxpacket: 8 [ 141.793461][ T6024] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.799041][ T6024] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.802793][ T6024] usb 9-1: config 0 interface 0 has no altsetting 0 [ 141.804904][ T6024] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.808041][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.816021][ T6024] usb 9-1: config 0 descriptor?? [ 141.916381][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.921992][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.927047][ T66] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 141.930650][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.936575][ T66] usb 6-1: config 0 descriptor?? [ 142.233069][ T6024] hid_parser_main: 10 callbacks suppressed [ 142.233091][ T6024] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 142.233116][ T6024] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 142.233135][ T6024] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 142.233154][ T6024] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 142.233174][ T6024] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 142.233859][ T6024] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 142.355389][ T66] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 142.358658][ T66] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 142.368891][ T66] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000E/input/input16 [ 142.384501][ T66] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 142.436503][ T6024] usb 9-1: USB disconnect, device number 7 [ 142.461492][ T29] net_ratelimit: 2 callbacks suppressed [ 142.461504][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.467672][ T7885] loop5: detected capacity change from 0 to 2640 [ 142.474980][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.480369][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.486065][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.490300][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.494025][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.497299][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.500582][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.504844][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.509081][ T7885] ldm_validate_partition_table(): Disk read failed. [ 142.512194][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.515514][ T7885] Buffer I/O error on dev loop5, logical block 0, async page read [ 142.519183][ T7885] Dev loop5: unable to read RDB block 0 [ 142.523447][ T7885] loop5: unable to read partition table [ 142.525851][ T7885] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 142.553099][ T66] usb 6-1: USB disconnect, device number 6 [ 142.660689][ T7891] all (unregistering): Released all slaves [ 143.083213][ T7906] all (unregistering): Released all slaves [ 143.160884][ T7914] syzkaller1: entered promiscuous mode [ 143.164536][ T7914] syzkaller1: entered allmulticast mode [ 143.469284][ T7933] netlink: 56 bytes leftover after parsing attributes in process `syz.1.786'. [ 143.481221][ T6025] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 143.511158][ T4180] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 143.521509][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.634576][ T6025] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.642160][ T6025] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.646419][ T6025] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.657947][ T6025] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 143.664657][ T6025] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 143.669633][ T6025] usb 8-1: Product: syz [ 143.671595][ T6025] usb 8-1: Manufacturer: syz [ 143.674241][ T6025] usb 8-1: SerialNumber: syz [ 143.675714][ T4180] usb 9-1: config 0 has no interfaces? [ 143.678882][ T4180] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 143.682318][ T4180] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.686978][ T4180] usb 9-1: config 0 descriptor?? [ 143.899352][ T6025] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.991606][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.995135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.102574][ T6025] usb 8-1: USB disconnect, device number 9 [ 144.108325][ T6025] usblp0: removed [ 144.502514][ T66] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.541635][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.651199][ T66] usb 5-1: Using ep0 maxpacket: 16 [ 144.657756][ T66] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 144.661706][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.664991][ T66] usb 5-1: Product: syz [ 144.666726][ T66] usb 5-1: Manufacturer: syz [ 144.668703][ T66] usb 5-1: SerialNumber: syz [ 144.674856][ T66] usb 5-1: config 0 descriptor?? [ 145.098335][ T66] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 145.109708][ T66] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.114872][ T66] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 145.118235][ T66] usb 5-1: media controller created [ 145.145155][ T66] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.262582][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.265647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.582868][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.703150][ T66] zl10353_read_register: readreg error (reg=127, ret==0) [ 145.706373][ T66] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 145.709944][ T66] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 145.747045][ T29] usb 5-1: USB disconnect, device number 6 [ 145.771690][ T29] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 146.234167][ T24] usb 9-1: USB disconnect, device number 8 [ 146.309588][ T7977] bond0: (slave syz_tun): Releasing backup interface [ 146.325928][ T7977] bridge_slave_0: left allmulticast mode [ 146.330690][ T7977] bridge_slave_0: left promiscuous mode [ 146.335373][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.341142][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 146.346735][ T7977] bridge_slave_1: left allmulticast mode [ 146.348902][ T7977] bridge_slave_1: left promiscuous mode [ 146.351507][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.378355][ T7977] bond0: (slave bond_slave_0): Releasing backup interface [ 146.393684][ T7977] bond0: (slave bond_slave_1): Releasing backup interface [ 146.417770][ T7977] team0: Port device team_slave_0 removed [ 146.449787][ T7977] team0: Port device team_slave_1 removed [ 146.453036][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.465711][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.467435][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.483381][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.806'. [ 146.487582][ T7995] nbd: device at index 64 is going down [ 146.498459][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.501584][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.513861][ T7977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.635329][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.851149][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 147.003430][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.008124][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.012381][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 147.015045][ T24] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 147.018884][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.026612][ T24] usb 5-1: config 0 descriptor?? [ 147.451291][ T24] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 147.453740][ T24] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 147.458067][ T24] hid-steam 0003:28DE:1102.000F: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 147.521185][ T24] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' connected [ 147.551981][ T24] input: Steam Controller as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:28DE:1102.000F/input/input17 [ 147.575279][ T24] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 147.578475][ T24] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 147.593237][ T24] hid-steam 0003:28DE:1102.0010: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 147.673785][ T39] net_ratelimit: 2 callbacks suppressed [ 147.673804][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.863907][ T843] usb 5-1: USB disconnect, device number 7 [ 147.916967][ T843] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' disconnected [ 148.079736][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 148.108162][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 148.258500][ T8033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.810'. [ 148.349823][ T5972] udevd[5972]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.360884][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 148.382280][ T62] Bluetooth: hci2: command tx timeout [ 148.459937][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 148.475414][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 148.702185][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.451167][ T39] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 149.496597][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 149.508649][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 149.604997][ T39] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.610811][ T39] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.614740][ T39] usb 9-1: config 0 interface 0 has no altsetting 0 [ 149.617226][ T39] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 149.620834][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.628369][ T39] usb 9-1: config 0 descriptor?? [ 149.753445][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.757107][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.760882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.871221][ T6481] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 150.022618][ T6481] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.025804][ T6481] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.028886][ T6481] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.036006][ T6481] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 150.039974][ T6481] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.042574][ T39] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 150.042593][ T39] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0 [ 150.042990][ T39] hid-steam 0003:28DE:1102.0011: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 150.045222][ T6481] usb 8-1: Product: syz [ 150.045234][ T6481] usb 8-1: Manufacturer: syz [ 150.045242][ T6481] usb 8-1: SerialNumber: syz [ 150.050618][ T6481] hub 8-1:1.0: bad descriptor, ignoring hub [ 150.059160][ T6481] hub 8-1:1.0: probe with driver hub failed with error -5 [ 150.111184][ T39] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected [ 150.117079][ T39] input: Steam Controller as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:28DE:1102.0011/input/input20 [ 150.143515][ T39] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 150.152640][ T39] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0 [ 150.159103][ T39] hid-steam 0003:28DE:1102.0012: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 150.242100][ T24] usb 9-1: USB disconnect, device number 9 [ 150.257750][ T6481] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 150.270994][ T24] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected [ 150.783197][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.885233][ T8098] loop5: detected capacity change from 0 to 2640 [ 150.895553][ T8098] buffer_io_error: 332 callbacks suppressed [ 150.895566][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.900821][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.903986][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.906809][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.909338][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.912570][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.915219][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.918071][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.920723][ T8098] ldm_validate_partition_table(): Disk read failed. [ 150.922890][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.925627][ T8098] Buffer I/O error on dev loop5, logical block 0, async page read [ 150.928392][ T8098] Dev loop5: unable to read RDB block 0 [ 150.930998][ T8098] loop5: unable to read partition table [ 150.937817][ T8098] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 151.022863][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.026743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.040058][ T8106] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 151.162709][ T8082] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 151.561636][ T6025] usb 8-1: USB disconnect, device number 10 [ 151.567112][ T6025] usblp0: removed [ 151.822412][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.128443][ T8127] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.848'. [ 152.243999][ T8137] syzkaller1: entered promiscuous mode [ 152.245840][ T8137] syzkaller1: entered allmulticast mode [ 152.781348][ T6481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.784709][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.861422][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.411190][ T4180] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.563341][ T4180] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.567134][ T4180] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 153.572095][ T4180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.575727][ T4180] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.580792][ T4180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 153.587447][ T4180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.595621][ T4180] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.599682][ T4180] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.603161][ T4180] usb 5-1: Product: syz [ 153.605033][ T4180] usb 5-1: Manufacturer: syz [ 153.610549][ T8154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.617949][ T4180] cdc_wdm 5-1:1.0: skipping garbage [ 153.620302][ T4180] cdc_wdm 5-1:1.0: skipping garbage [ 153.627314][ T4180] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 153.629917][ T4180] cdc_wdm 5-1:1.0: Unknown control protocol [ 153.824374][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 153.827208][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 153.834222][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 153.834751][ T4180] usb 5-1: USB disconnect, device number 8 [ 153.837351][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 153.837379][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 153.898141][ T8188] Bluetooth: MGMT ver 1.23 [ 153.902530][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.211365][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 154.363066][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.367090][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.371411][ T39] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.376661][ T39] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.380221][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.389409][ T39] usb 6-1: config 0 descriptor?? [ 154.487794][ T8218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.492662][ T8218] team0: Port device macvlan2 added [ 154.811152][ T39] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 154.830464][ T39] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.844536][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 154.854564][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.892'. [ 154.944021][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.063057][ T66] usb 6-1: USB disconnect, device number 7 [ 155.502922][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.503128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.772242][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.905'. [ 155.829154][ T6481] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 155.845799][ T6481] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 155.991732][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.011135][ T6024] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 156.172867][ T6024] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.176632][ T6024] usb 9-1: config 0 interface 0 has no altsetting 0 [ 156.183702][ T6024] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.187647][ T6024] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.190218][ T6024] usb 9-1: Product: syz [ 156.192250][ T6024] usb 9-1: Manufacturer: syz [ 156.194327][ T6024] usb 9-1: SerialNumber: syz [ 156.198313][ T6024] usb 9-1: config 0 descriptor?? [ 156.214415][ T6024] usb 9-1: selecting invalid altsetting 0 [ 156.407410][ T39] usb 9-1: USB disconnect, device number 10 [ 156.761709][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 156.782602][ T6481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.787992][ T1199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.898973][ T8292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.905156][ T8292] team0: Port device macvlan2 added [ 156.923564][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.926942][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.931263][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.943108][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.947697][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.950825][ T29] usb 5-1: Product: syz [ 156.952689][ T29] usb 5-1: Manufacturer: syz [ 156.954788][ T29] usb 5-1: SerialNumber: syz [ 156.960362][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 156.963100][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 157.173102][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 157.982370][ T5962] Bluetooth: hci4: command 0x1003 tx timeout [ 157.983420][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.062762][ T29] net_ratelimit: 5 callbacks suppressed [ 158.062778][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.069481][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.923'. [ 158.071231][ T8283] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 158.077430][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.923'. [ 158.299549][ T8321] netlink: 104 bytes leftover after parsing attributes in process `syz.4.932'. [ 158.451477][ T29] usb 5-1: USB disconnect, device number 9 [ 158.463703][ T8335] syz_tun: entered allmulticast mode [ 158.465303][ T29] usblp0: removed [ 158.467578][ T8335] syz_tun: left allmulticast mode [ 158.571232][ T6024] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 158.749271][ T6024] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 158.752769][ T6024] usb 6-1: config 0 has no interface number 0 [ 158.755555][ T6024] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.763810][ T6024] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 158.767892][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.771514][ T6024] usb 6-1: Product: syz [ 158.773626][ T6024] usb 6-1: Manufacturer: syz [ 158.775614][ T6024] usb 6-1: SerialNumber: syz [ 158.781409][ T6024] usb 6-1: config 0 descriptor?? [ 158.792074][ T6024] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 158.998938][ T8350] syzkaller1: entered promiscuous mode [ 159.001704][ T6024] usb 6-1: USB disconnect, device number 8 [ 159.004134][ T8350] syzkaller1: entered allmulticast mode [ 159.007697][ T6024] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 159.097142][ T8356] pim6reg1: entered promiscuous mode [ 159.099299][ T8356] pim6reg1: entered allmulticast mode [ 159.112186][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.808090][ T8380] overlay: Unknown parameter '/' [ 159.811659][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.959'. [ 159.831372][ T6481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.834634][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.893311][ T8389] ip6erspan0: entered allmulticast mode [ 159.951149][ T8394] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 159.958039][ T8394] netlink: 'syz.4.966': attribute type 2 has an invalid length. [ 160.058157][ T8396] block nbd1: shutting down sockets [ 160.141822][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.330521][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 160.346981][ T8409] bridge0: entered promiscuous mode [ 160.349872][ T8409] macsec1: entered promiscuous mode [ 160.355765][ T8409] macsec1: entered allmulticast mode [ 160.358123][ T8409] bridge0: entered allmulticast mode [ 160.361314][ T8409] bridge0: port 1(macsec1) entered blocking state [ 160.364794][ T8409] bridge0: port 1(macsec1) entered disabled state [ 160.373372][ T8409] bridge0: left allmulticast mode [ 160.376641][ T8409] bridge0: left promiscuous mode [ 160.621646][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.625120][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.831416][ T3257] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 160.955512][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.961387][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.965300][ T8433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.996500][ T3257] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.999894][ T3257] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 161.004063][ T3257] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.007851][ T3257] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.012241][ T3257] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 161.017163][ T3257] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.023023][ T3257] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.026163][ T3257] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.031372][ T3257] usb 6-1: Product: syz [ 161.032972][ T3257] usb 6-1: Manufacturer: syz [ 161.043835][ T8421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.049819][ T3257] cdc_wdm 6-1:1.0: skipping garbage [ 161.052977][ T3257] cdc_wdm 6-1:1.0: skipping garbage [ 161.061428][ T3257] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 161.064047][ T3257] cdc_wdm 6-1:1.0: Unknown control protocol [ 161.254799][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.257193][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.259891][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.262762][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.267773][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.269983][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.272714][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 161.273451][ T66] usb 6-1: USB disconnect, device number 9 [ 161.274851][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 161.274867][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 161.525655][ T8452] loop6: detected capacity change from 0 to 8 [ 161.577140][ T8454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 161.732560][ T8452] Dev loop6: unable to read RDB block 8 [ 161.734574][ T8452] loop6: unable to read partition table [ 161.741662][ T8452] loop6: partition table beyond EOD, truncated [ 161.743873][ T8452] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 161.745470][ T8455] loop6: detected capacity change from 8 to 7 [ 161.798718][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.803998][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.807844][ C0] buffer_io_error: 341 callbacks suppressed [ 161.807856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.813808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.816914][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.820650][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.824392][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.831502][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.834775][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 161.838311][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.841562][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.148877][ T8483] erspan0: entered promiscuous mode [ 162.152954][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 162.401273][ T3257] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 162.561736][ T6481] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 162.582845][ T3257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.586561][ T3257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.589805][ T3257] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.597078][ T3257] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.601372][ T3257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.608257][ T3257] usb 6-1: config 0 descriptor?? [ 163.030415][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.032904][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.035737][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.038248][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.040789][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.043964][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.046500][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.049474][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.052508][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.055185][ T3257] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 163.064376][ T3257] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.262528][ T3257] net_ratelimit: 10 callbacks suppressed [ 163.262545][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.283345][ T66] usb 6-1: USB disconnect, device number 10 [ 163.592988][ T8500] syzkaller1: entered promiscuous mode [ 163.595434][ T8500] syzkaller1: entered allmulticast mode [ 163.661811][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.665509][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.182646][ T66] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 164.313028][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.397882][ T66] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.401161][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.403760][ T66] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.403786][ T66] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.403826][ T66] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.403844][ T66] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.409263][ T66] usb 8-1: config 0 descriptor?? [ 164.414563][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.438738][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.517404][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.525325][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.529604][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.898874][ T66] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 165.133571][ T53] usb 8-1: USB disconnect, device number 11 [ 165.264183][ T8537] syzkaller1: entered promiscuous mode [ 165.266227][ T8537] syzkaller1: entered allmulticast mode [ 165.314294][ T8539] loop2: detected capacity change from 0 to 1 [ 165.320934][ T8539] Dev loop2: unable to read RDB block 1 [ 165.324066][ T8539] loop2: unable to read partition table [ 165.327158][ T8539] loop2: partition table beyond EOD, truncated [ 165.331130][ T8539] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.936598][ T8569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.536709][ T8595] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1056'. [ 166.551158][ T53] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.649936][ T8602] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.711396][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 166.717956][ T53] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 166.721381][ T53] usb 5-1: config 0 has no interface number 0 [ 166.723743][ T53] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.732176][ T53] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 166.737493][ T53] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.743296][ T53] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.748687][ T53] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 166.752715][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.757397][ T53] usb 5-1: config 0 descriptor?? [ 166.760828][ T8610] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 166.768506][ T53] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 166.869770][ T8618] evm: overlay not supported [ 166.986106][ T843] usb 5-1: USB disconnect, device number 10 [ 166.986169][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 167.002532][ T843] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 167.656363][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 167.656389][ T40] audit: type=1800 audit(1776896765.531:70): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1071" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 167.821162][ T3257] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 167.973506][ T3257] usb 6-1: config 0 has no interfaces? [ 167.975261][ T3257] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 167.978348][ T3257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.984671][ T3257] usb 6-1: config 0 descriptor?? [ 168.020301][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 168.165479][ T8662] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1080'. [ 168.303572][ T12] net_ratelimit: 12 callbacks suppressed [ 168.303591][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.308595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.444053][ T8678] capability: warning: `syz.0.1089' uses 32-bit capabilities (legacy support in use) [ 168.473270][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.631557][ T843] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 168.785439][ T843] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 168.789142][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.795328][ T843] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.801136][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.806182][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.813263][ T843] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 168.817822][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.823101][ T843] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.828520][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.833849][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.839895][ T843] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 168.843463][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.847417][ T843] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.851491][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.855940][ T843] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.862824][ T843] usb 9-1: string descriptor 0 read error: -22 [ 168.864953][ T843] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.868131][ T843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.883185][ T843] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 169.421879][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.425831][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.429723][ T8693] pim6reg1: entered promiscuous mode [ 169.432403][ T8693] pim6reg1: entered allmulticast mode [ 169.501366][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.596501][ T8695] 9pnet: p9_errstr2errno: server reported unknown error LÒ [ 169.871945][ T6024] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 170.031162][ T6024] usb 8-1: Using ep0 maxpacket: 32 [ 170.035618][ T6024] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 170.039421][ T6024] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 170.043159][ T6024] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 170.047210][ T6024] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 170.052832][ T6024] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.057724][ T6024] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 170.061110][ T6024] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 170.061190][ T3257] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.063783][ T6024] usb 8-1: Product: syz [ 170.063798][ T6024] usb 8-1: Manufacturer: syz [ 170.063806][ T6024] usb 8-1: SerialNumber: syz [ 170.065379][ T6024] usb 8-1: config 0 descriptor?? [ 170.074441][ T6024] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 170.080711][ T6024] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 170.222572][ T3257] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 170.225778][ T3257] usb 5-1: config 0 has no interface number 0 [ 170.228200][ T3257] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.234224][ T3257] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 170.237269][ T3257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.240184][ T3257] usb 5-1: Product: syz [ 170.242097][ T3257] usb 5-1: Manufacturer: syz [ 170.244138][ T3257] usb 5-1: SerialNumber: syz [ 170.248598][ T3257] usb 5-1: config 0 descriptor?? [ 170.262414][ T3257] yurex 5-1:0.50: USB YUREX device now attached to Yurex #2 [ 170.280296][ T10] usb 8-1: USB disconnect, device number 12 [ 170.288368][ T10] ldusb 8-1:0.0: LD USB Device #1 now disconnected [ 170.465625][ T6024] usb 5-1: USB disconnect, device number 11 [ 170.473786][ T6024] yurex 5-1:0.50: USB YUREX #2 now disconnected [ 170.551526][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.555354][ T3257] usb 6-1: USB disconnect, device number 11 [ 171.220814][ T8743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.224760][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.240300][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.284329][ T8745] netlink: 'syz.1.1108': attribute type 2 has an invalid length. [ 171.384052][ T66] usb 9-1: USB disconnect, device number 11 [ 171.391128][ T3257] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 171.572584][ T3257] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 171.575744][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.580190][ T3257] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.585302][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.589391][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.595584][ T3257] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 171.598934][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.603385][ T3257] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.608333][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.613353][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.619224][ T3257] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 171.622392][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 171.626966][ T3257] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.632185][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 171.636283][ T3257] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 171.643081][ T3257] usb 8-1: string descriptor 0 read error: -22 [ 171.645390][ T3257] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 171.648857][ T3257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.657512][ T3257] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 171.741335][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 171.891205][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 171.894993][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.900079][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.904601][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.909546][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 171.912885][ T843] usb 8-1: USB disconnect, device number 13 [ 171.913252][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.932715][ T10] usb 5-1: config 0 descriptor?? [ 172.166905][ T8749] Process accounting resumed [ 172.366664][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0017/input/input22 [ 172.441392][ T66] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 172.460198][ T8773] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 172.498733][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0017/input/input23 [ 172.523031][ T8775] overlayfs: failed lookup in lower (newroot/251, name='bus', err=-40): overlapping layers [ 172.541149][ T10] kye 0003:0458:5011.0017: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 172.595818][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.602565][ T10] usb 5-1: USB disconnect, device number 12 [ 172.607348][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.617769][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.629287][ T66] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.633478][ T6025] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 172.637815][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.639312][ T8778] input: syz0 as /devices/virtual/input/input24 [ 172.650760][ T66] usb 6-1: config 0 descriptor?? [ 172.791179][ T6025] usb 9-1: Using ep0 maxpacket: 32 [ 172.795489][ T6025] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 172.799418][ T6025] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 172.803743][ T6025] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.807649][ T6025] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 172.815034][ T6025] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 172.818272][ T6025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.821406][ T6025] usb 9-1: Product: syz [ 172.822992][ T6025] usb 9-1: Manufacturer: syz [ 172.824759][ T6025] usb 9-1: SerialNumber: syz [ 172.836811][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 172.849181][ T6025] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input25 [ 173.071084][ T6025] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 173.075815][ T6025] (id 0x00) [ 173.082982][ T66] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 173.106842][ T3257] kernel write not supported for file bpf-prog (pid: 3257 comm: kworker/1:2) [ 173.172032][ T6025] rc_core: IR keymap rc-imon-pad not found [ 173.177715][ T6025] Registered IR keymap rc-empty [ 173.180044][ T6025] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 173.189226][ T6025] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 173.211758][ T8813] loop8: detected capacity change from 0 to 7 [ 173.224834][ T8813] Dev loop8: unable to read RDB block 7 [ 173.230371][ T8813] loop8: unable to read partition table [ 173.233330][ T8813] loop8: partition table beyond EOD, truncated [ 173.238441][ T8813] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 173.272534][ T6025] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 173.285639][ T6025] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input26 [ 173.323249][ T4180] usb 6-1: USB disconnect, device number 12 [ 173.326994][ T6025] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:12> initialized [ 173.341882][ T46] net_ratelimit: 13 callbacks suppressed [ 173.341902][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.347363][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.451301][ T3257] usb 9-1: USB disconnect, device number 12 [ 173.608794][ T8839] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.665075][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.723303][ T8848] pim6reg1: entered promiscuous mode [ 173.725458][ T8848] pim6reg1: entered allmulticast mode [ 174.291220][ T4180] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 174.441655][ T4180] usb 8-1: Using ep0 maxpacket: 8 [ 174.445864][ T4180] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 174.449580][ T4180] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.454162][ T4180] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.458624][ T4180] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.463578][ T4180] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.469490][ T4180] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.473384][ T4180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.683405][ T4180] usb 8-1: GET_CAPABILITIES returned 0 [ 174.685649][ T4180] usbtmc 8-1:16.0: can't read capabilities [ 174.702744][ T3257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.781155][ T843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 174.784194][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 174.788432][ T843] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 174.885276][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.889472][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.893260][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.896981][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.905350][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.909790][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.913580][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.919699][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.923364][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.927515][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.931376][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.938591][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.942507][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.946769][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.951512][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.955755][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 174.976652][ T8787] usb 8-1: USB disconnect, device number 14 [ 175.182298][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.185263][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.242185][ T3257] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 175.412586][ T3257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.415845][ T3257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.419414][ T3257] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.425446][ T3257] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.429502][ T3257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.435279][ T3257] usb 6-1: config 0 descriptor?? [ 175.741349][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.850097][ T3257] hid_parser_main: 20 callbacks suppressed [ 175.850120][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.856416][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.859907][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.863656][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.867010][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.870254][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.873086][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.875636][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.878081][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.880936][ T3257] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 175.889381][ T3257] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.104225][ T66] usb 6-1: USB disconnect, device number 13 [ 176.654117][ T8883] pim6reg1: entered promiscuous mode [ 176.655924][ T8883] pim6reg1: entered allmulticast mode [ 176.781956][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.810806][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 176.871606][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.873735][ T843] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 176.876683][ T843] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 177.271192][ T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 177.271569][ T164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.277689][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.441226][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 177.445720][ T29] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 177.449571][ T29] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 177.454065][ T29] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.459239][ T29] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 177.465857][ T29] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 177.468796][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.471727][ T29] usb 6-1: Product: syz [ 177.473127][ T29] usb 6-1: Manufacturer: syz [ 177.474712][ T29] usb 6-1: SerialNumber: syz [ 177.482568][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 177.489837][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input27 [ 177.701223][ T29] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 177.704729][ T29] (id 0x00) [ 177.751142][ T29] rc_core: IR keymap rc-imon-pad not found [ 177.753445][ T29] Registered IR keymap rc-empty [ 177.755019][ T29] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 177.758894][ T29] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 177.912567][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 177.917552][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input28 [ 177.924803][ T29] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:14> initialized [ 178.093642][ T8900] imon:vfd_write: invalid payload size [ 178.099030][ T29] usb 6-1: USB disconnect, device number 14 [ 178.716573][ T8936] netlink: 'syz.1.1176': attribute type 30 has an invalid length. [ 178.721606][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 178.799275][ T8940] syzkaller1: entered promiscuous mode [ 178.801519][ T8940] syzkaller1: entered allmulticast mode [ 178.871784][ T29] net_ratelimit: 6 callbacks suppressed [ 178.871806][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.920609][ T8942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1179'. [ 178.938741][ T8942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1179'. [ 178.942961][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.945097][ T843] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 178.947587][ T843] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 179.191553][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.196629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.547530][ T8968] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 181.101793][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.104663][ T843] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 181.107297][ T843] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 181.450893][ T8991] Process accounting resumed [ 182.079032][ T9020] binder: 9019:9020 ioctl c0306201 80000480 returned -14 [ 182.949721][ T9062] sp0: Synchronizing with TNC [ 183.188114][ T5962] Bluetooth: hci4: command 0x1003 tx timeout [ 183.188674][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 183.257709][ T9070] loop5: detected capacity change from 0 to 7 [ 183.263367][ T9070] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 183.267116][ T9070] loop5: partition table partially beyond EOD, truncated [ 183.272865][ T9070] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 183.278201][ T9070] loop5: p2 start 832840281 is beyond EOD, truncated [ 183.303864][ T5956] udevd[5956]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 183.638480][ T9098] sp0: Synchronizing with TNC [ 183.782004][ T6024] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 183.931988][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 183.935739][ T6024] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.939611][ T6024] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.943178][ T6024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.945650][ T6024] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.948715][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.953281][ T6024] usb 6-1: config 0 descriptor?? [ 184.367577][ T6024] hid_parser_main: 5 callbacks suppressed [ 184.367596][ T6024] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 184.373133][ T6024] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 184.375668][ T6024] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 184.378173][ T6024] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 184.380804][ T6024] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 184.384938][ T6024] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 184.568335][ T9092] i2c i2c-2: unsupported multi-msg i2c transaction [ 184.576233][ T843] usb 6-1: USB disconnect, device number 15 [ 185.103556][ T9127] bond0: (slave rose0): refused to change device type [ 185.471156][ T6024] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 185.541270][ T39] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 185.633686][ T6024] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.637280][ T6024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.641257][ T6024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.645097][ T6024] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.651519][ T6024] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.656136][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.659906][ T6024] usb 6-1: Product: syz [ 185.662017][ T6024] usb 6-1: Manufacturer: syz [ 185.669595][ T6024] cdc_wdm 6-1:1.0: skipping garbage [ 185.672233][ T6024] cdc_wdm 6-1:1.0: skipping garbage [ 185.676945][ T6024] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 185.679621][ T6024] cdc_wdm 6-1:1.0: Unknown control protocol [ 185.691174][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 185.696385][ T39] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 185.699778][ T39] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.704844][ T39] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.709096][ T39] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.714107][ T39] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.720312][ T39] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.724102][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.792323][ T9143] loop5: detected capacity change from 0 to 7 [ 185.886699][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 185.887427][ T843] usb 6-1: USB disconnect, device number 16 [ 185.889714][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 185.889737][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 185.937991][ T39] usb 9-1: usb_control_msg returned -32 [ 185.939879][ T39] usbtmc 9-1:16.0: can't read capabilities [ 185.998625][ T9143] Dev loop5: unable to read RDB block 7 [ 186.002786][ T9143] loop5: unable to read partition table [ 186.004494][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 186.005228][ T9143] loop5: partition table beyond EOD, truncated [ 186.009149][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 186.012549][ T9143] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 186.495830][ T39] usb 9-1: USB disconnect, device number 13 [ 186.990309][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1286'. [ 187.045515][ T9187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.661337][ T3257] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 187.665340][ T6481] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 187.811193][ T3257] usb 6-1: Using ep0 maxpacket: 8 [ 187.814907][ T3257] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 187.817668][ T3257] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.821133][ T3257] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.825434][ T3257] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.829433][ T3257] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.835732][ T3257] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.839787][ T3257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.841356][ T6481] usb 8-1: Using ep0 maxpacket: 8 [ 187.846906][ T6481] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.850891][ T6481] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.854870][ T6481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 187.857271][ T6481] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 187.860413][ T6481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.867019][ T6481] usb 8-1: config 0 descriptor?? [ 188.057601][ T3257] usb 6-1: usb_control_msg returned -32 [ 188.061905][ T3257] usbtmc 6-1:16.0: can't read capabilities [ 188.283960][ T6481] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 188.287514][ T6481] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 188.290058][ T6481] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 188.302480][ T6481] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 188.305158][ T6481] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 188.307851][ T6481] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 188.481599][ T9210] i2c i2c-2: unsupported multi-msg i2c transaction [ 188.486673][ T6481] usb 8-1: USB disconnect, device number 15 [ 188.535362][ T9257] syzkaller1: entered promiscuous mode [ 188.537423][ T9257] syzkaller1: entered allmulticast mode [ 188.617930][ T4180] usb 6-1: USB disconnect, device number 17 [ 188.806581][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 189.138483][ T9278] tun0: tun_chr_ioctl cmd 1074025675 [ 189.141463][ T9278] tun0: persist enabled [ 189.145110][ T9278] tun0: tun_chr_ioctl cmd 1074025675 [ 189.148522][ T9278] tun0: persist disabled [ 189.286292][ T9285] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1332'. [ 189.294044][ T9285] openvswitch: netlink: Message has 3 unknown bytes. [ 189.358700][ T9289] block nbd0: not configured, cannot reconfigure [ 189.493054][ T9294] syzkaller1: entered promiscuous mode [ 189.495536][ T9294] syzkaller1: entered allmulticast mode [ 189.951208][ T6025] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 190.101197][ T6025] usb 9-1: Using ep0 maxpacket: 8 [ 190.104939][ T6025] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.108243][ T6025] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.111476][ T6025] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 190.115044][ T6025] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 190.119857][ T6025] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.123997][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.132705][ T6025] hub 9-1:1.0: bad descriptor, ignoring hub [ 190.135234][ T6025] hub 9-1:1.0: probe with driver hub failed with error -5 [ 190.139033][ T6025] cdc_wdm 9-1:1.0: skipping garbage [ 190.142159][ T6025] cdc_wdm 9-1:1.0: skipping garbage [ 190.149717][ T6025] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 190.152376][ T6025] cdc_wdm 9-1:1.0: Unknown control protocol [ 190.162530][ T9327] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 190.165553][ T9327] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 190.631301][ T9347] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.1360'. [ 190.752618][ T9305] cdc_wdm 9-1:1.0: Error autopm - -16 [ 190.752744][ T4180] usb 9-1: USB disconnect, device number 14 [ 190.892839][ T4180] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 191.055091][ T4180] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.064101][ T4180] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 191.077237][ T4180] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 191.082171][ T4180] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 191.086153][ T4180] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.096064][ T9311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.109054][ T4180] hub 9-1:1.0: bad descriptor, ignoring hub [ 191.112358][ T4180] hub 9-1:1.0: probe with driver hub failed with error -5 [ 191.116170][ T4180] cdc_wdm 9-1:1.0: skipping garbage [ 191.118586][ T4180] cdc_wdm 9-1:1.0: skipping garbage [ 191.127068][ T4180] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 191.129818][ T4180] cdc_wdm 9-1:1.0: Unknown control protocol [ 191.148181][ T9366] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 191.157294][ T9366] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 191.169741][ T9366] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 191.178848][ T9370] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1368'. [ 191.180614][ T9366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 191.201152][ T9366] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.206935][ T9370] team0: Port device macvlan2 removed [ 191.250599][ T9370] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 191.273044][ T9370] bond0 (unregistering): Released all slaves [ 191.293863][ T39] syz1: Port: 1 Link DOWN [ 191.306444][ T9372] syzkaller1: entered promiscuous mode [ 191.308827][ T9372] syzkaller1: entered allmulticast mode [ 191.358099][ T13] smbdirect: ib_dev[syz1] removed [ 191.431932][ T4180] usb 9-1: USB disconnect, device number 15 [ 191.495743][ T9382] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1375'. [ 191.642734][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 191.726546][ T9403] syzkaller1: entered promiscuous mode [ 191.728750][ T9403] syzkaller1: entered allmulticast mode [ 191.772285][ T9407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1386'. [ 192.151472][ T4180] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 192.201272][ T9423] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 192.204376][ T9423] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 192.253626][ T9426] kvm: apic: phys broadcast and lowest prio [ 192.323135][ T4180] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.326798][ T4180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.331105][ T4180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.335188][ T4180] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.345691][ T4180] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.349859][ T4180] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.354722][ T4180] usb 5-1: Product: syz [ 192.356680][ T4180] usb 5-1: Manufacturer: syz [ 192.365293][ T4180] cdc_wdm 5-1:1.0: skipping garbage [ 192.368120][ T4180] cdc_wdm 5-1:1.0: skipping garbage [ 192.375088][ T4180] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 192.377535][ T4180] cdc_wdm 5-1:1.0: Unknown control protocol [ 192.512718][ T9442] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.1402'. [ 192.584231][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.586966][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.589910][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.592594][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.595134][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.597710][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.600195][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.602678][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.605335][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.607631][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.609853][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.612267][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.614406][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.616509][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.621055][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.624854][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.627185][ T4180] usb 5-1: USB disconnect, device number 13 [ 192.629247][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 192.631478][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 192.633534][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 192.791205][ T24] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 192.901136][ T843] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 192.946075][ T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 192.949525][ T24] usb 6-1: config 0 has no interface number 0 [ 192.952156][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.956307][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 192.961464][ T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 192.966104][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 192.970801][ T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 192.977408][ T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 192.983116][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.986630][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.992010][ T24] usb 6-1: config 0 descriptor?? [ 192.994946][ T9444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 192.998073][ T9444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.006142][ T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 193.062925][ T843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.067620][ T843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.071574][ T843] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.077417][ T843] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.081630][ T843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.086703][ T843] usb 9-1: config 0 descriptor?? [ 193.160454][ T9455] netlink: 'syz.3.1409': attribute type 4 has an invalid length. [ 193.208726][ T39] usb 6-1: USB disconnect, device number 18 [ 193.225463][ T39] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 193.499416][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.503282][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.506329][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.509447][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.512782][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.516866][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.519781][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.522338][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.524684][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.527230][ T843] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 193.534699][ T843] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 193.772965][ T3257] usb 9-1: USB disconnect, device number 16 [ 194.131435][ T9508] netlink: 'syz.0.1428': attribute type 4 has an invalid length. [ 194.479047][ T9541] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 194.485780][ T9541] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 194.492937][ T9541] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 194.507609][ T9541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 194.522641][ T9546] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1437'. [ 194.557192][ T9546] team0: Port device macvlan2 removed [ 194.572437][ T9546] bond0 (unregistering): Released all slaves [ 194.663562][ T13] smbdirect: ib_dev[syz1] removed [ 194.988564][ T40] audit: type=1326 audit(1776896792.861:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.1.1448" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x0 [ 195.711762][ T4180] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 195.882600][ T4180] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.890900][ T4180] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.894398][ T4180] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.900210][ T4180] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.908393][ T4180] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.912627][ T4180] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.916009][ T4180] usb 8-1: Product: syz [ 195.917774][ T4180] usb 8-1: Manufacturer: syz [ 195.925184][ T4180] cdc_wdm 8-1:1.0: skipping garbage [ 195.927849][ T4180] cdc_wdm 8-1:1.0: skipping garbage [ 195.930762][ T4180] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 195.933446][ T4180] cdc_wdm 8-1:1.0: Unknown control protocol [ 196.142352][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 196.144534][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 196.147412][ T4180] usb 8-1: USB disconnect, device number 16 [ 196.149664][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 196.648194][ T9698] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1489'. [ 197.124076][ T6025] Process accounting resumed [ 197.150178][ T9726] Process accounting resumed [ 197.267663][ T9739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.362604][ T9739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.381748][ T4180] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 197.446808][ T9739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.522779][ T9739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.542802][ T4180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.546695][ T4180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.550269][ T4180] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 197.555350][ T4180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.560919][ T4180] usb 8-1: config 0 descriptor?? [ 197.645700][ T164] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.663117][ T164] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.679798][ T164] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.699210][ T164] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.725704][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 197.742178][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 197.986512][ T4180] kye 0003:0458:5016.001D: control desc unexpectedly large [ 197.993183][ T4180] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5016.001D/input/input30 [ 198.036123][ T4180] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5016.001D/input/input31 [ 198.072931][ T4180] kye 0003:0458:5016.001D: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 198.261622][ T6024] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 198.400479][ T9767] kvm: user requested TSC rate below hardware speed [ 198.411627][ T6024] usb 5-1: Using ep0 maxpacket: 8 [ 198.416682][ T6024] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 198.422829][ T6024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 198.427962][ T6024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.432701][ T6024] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.438572][ T6024] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.444159][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.664137][ T6024] usb 5-1: GET_CAPABILITIES returned 0 [ 198.666236][ T6024] usbtmc 5-1:16.0: can't read capabilities [ 198.891368][ T39] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 199.051313][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 199.055320][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.058792][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.061771][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 199.065412][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 199.069176][ T39] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 199.073880][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.080718][ T39] hub 6-1:1.0: bad descriptor, ignoring hub [ 199.082718][ T39] hub 6-1:1.0: probe with driver hub failed with error -5 [ 199.085220][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 199.087018][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 199.112638][ C3] kye 0003:0458:5016.001D: usb_submit_urb(ctrl) failed: -1 [ 199.119897][ T39] cdc_wdm 6-1:1.0: cdc-wdm2: USB WDM device [ 199.121817][ T39] cdc_wdm 6-1:1.0: Unknown control protocol [ 199.391704][ T39] usb 6-1: USB disconnect, device number 19 [ 199.741162][ T39] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 199.893015][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.896981][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 199.899716][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 199.904299][ T3257] usb 8-1: USB disconnect, device number 17 [ 199.906516][ T39] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 199.914249][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.921945][ T9778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.928631][ T39] hub 6-1:1.0: bad descriptor, ignoring hub [ 199.931372][ T39] hub 6-1:1.0: probe with driver hub failed with error -5 [ 199.936137][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 199.939139][ T39] cdc_wdm 6-1:1.0: skipping garbage [ 199.949884][ T39] cdc_wdm 6-1:1.0: cdc-wdm2: USB WDM device [ 199.952470][ T39] cdc_wdm 6-1:1.0: Unknown control protocol [ 200.231503][ T29] usb 6-1: USB disconnect, device number 20 [ 200.314748][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.316928][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.419028][ T843] Process accounting resumed [ 200.434025][ T9815] Process accounting resumed [ 200.461215][ T3257] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 200.620822][ T3257] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.625711][ T3257] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.630499][ T3257] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.633723][ T3257] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.642347][ T9813] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 200.652572][ T3257] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.704896][ T9827] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1548'. [ 200.857444][ T843] usb 9-1: USB disconnect, device number 17 [ 201.032923][ T6025] usb 5-1: USB disconnect, device number 14 [ 201.119177][ T9837] pim6reg: entered allmulticast mode [ 201.136443][ T9837] pim6reg: left allmulticast mode [ 201.173127][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 201.181382][ T9841] netlink: 'syz.0.1562': attribute type 20 has an invalid length. [ 201.184438][ T9841] netlink: 'syz.0.1562': attribute type 21 has an invalid length. [ 201.397276][ T3257] Process accounting resumed [ 201.415140][ T9850] Process accounting resumed [ 201.461261][ T843] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 201.626571][ T843] usb 8-1: Using ep0 maxpacket: 32 [ 201.639234][ T843] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 201.651416][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.673866][ T843] usb 8-1: config 0 descriptor?? [ 201.712844][ T843] as10x_usb: device has been detected [ 201.715116][ T843] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 201.732742][ T843] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 201.784440][ T843] as10x_usb: error during firmware upload part1 [ 201.786688][ T843] Registered device nBox DVB-T Dongle [ 201.889502][ T9872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.912146][ T843] usb 8-1: USB disconnect, device number 18 [ 201.947029][ T843] Unregistered device nBox DVB-T Dongle [ 201.951863][ T843] as10x_usb: device has been disconnected [ 201.984913][ T9879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.068768][ T9872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.141196][ T9872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.253118][ T9872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.337310][ T46] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.350316][ T46] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.362110][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.373325][ T164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.469721][ T9887] kvm: user requested TSC rate below hardware speed [ 202.817759][ T6133] Process accounting resumed [ 202.838102][ T9908] Process accounting resumed [ 202.901308][ T843] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 202.955065][ T9912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.958609][ T9912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.046451][ T9912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.050815][ T9912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.052556][ T843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.058623][ T843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.061993][ T843] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 203.064727][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.068421][ T843] usb 5-1: config 0 descriptor?? [ 203.156921][ T9912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.161422][ T9912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.245639][ T9912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.249394][ T9912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.355998][ T164] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.359190][ T164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.373244][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.375674][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.384499][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.387505][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.413497][ T164] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.417799][ T164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.497147][ T843] kye 0003:0458:5016.001E: control desc unexpectedly large [ 203.501675][ T843] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.001E/input/input32 [ 203.519664][ T843] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.001E/input/input33 [ 203.583305][ T843] kye 0003:0458:5016.001E: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 204.531269][ C2] kye 0003:0458:5016.001E: usb_submit_urb(ctrl) failed: -1 [ 205.249330][ T9945] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1599'. [ 205.327253][ T843] usb 5-1: USB disconnect, device number 15 [ 205.411742][ T6025] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 205.531477][ T39] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 205.561132][ T6025] usb 6-1: Using ep0 maxpacket: 8 [ 205.565085][ T6025] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.569959][ T6025] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.575325][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 205.578772][ T6025] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 205.587241][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.593848][ T6025] usb 6-1: config 0 descriptor?? [ 205.685843][ T39] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 205.689727][ T39] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 205.693396][ T39] usb 9-1: config 1 interface 0 has no altsetting 0 [ 205.697471][ T39] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 205.700566][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.703597][ T39] usb 9-1: Product: syz [ 205.705002][ T39] usb 9-1: Manufacturer: syz [ 205.706514][ T39] usb 9-1: SerialNumber: syz [ 205.711326][ T9947] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.713974][ T9947] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.791160][ T6559] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 205.942825][ T6559] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.947244][ T6559] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.950700][ T6559] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.954280][ T6559] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.959891][ T9956] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 205.966566][ T6559] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.012731][ T6025] hid_parser_main: 5 callbacks suppressed [ 206.012749][ T6025] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 206.025363][ T6025] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 206.028488][ T6025] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 206.032054][ T6025] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 206.034969][ T6025] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 206.038302][ T6025] mcp2221 0003:04D8:00DD.001F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 206.174016][ T6559] usb 8-1: USB disconnect, device number 19 [ 206.213969][ T66] usb 6-1: USB disconnect, device number 21 [ 206.750008][ T39] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7e:c1:1b:7a:7e:c9 [ 206.799582][ T39] rtl8150 9-1:1.0: eth6: rtl8150 is detected [ 206.812372][ T39] usb 9-1: USB disconnect, device number 18 [ 207.077508][ T9984] io-wq is not configured for unbound workers [ 207.139769][ T9987] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 207.438481][ T9995] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1621'. [ 207.523361][ T6024] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 207.565012][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 207.569309][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 207.682038][ T6024] usb 8-1: Using ep0 maxpacket: 8 [ 207.685919][ T6024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.690714][ T6024] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.694467][ T6024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.699724][ T6024] usb 8-1: config 0 descriptor?? [ 207.771233][ T66] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.908937][ T6024] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 207.931251][ T66] usb 5-1: Using ep0 maxpacket: 8 [ 207.935250][ T66] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 207.938239][ T66] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.941864][ T66] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.945679][ T66] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.949412][ T66] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.954690][ T66] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.958037][ T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.372732][ T6133] usb 8-1: USB disconnect, device number 20 [ 209.036723][ T62] block nbd0: Receive control failed (result -32) [ 209.074664][T10041] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1637'. [ 209.083742][T10041] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 209.991144][ T6133] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 210.153499][ T6133] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.160750][ T6133] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.164983][ T6133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.168305][ T6133] usb 6-1: SerialNumber: syz [ 210.558102][ T66] usb 5-1: USB disconnect, device number 16 [ 210.810873][ T6133] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 210.861314][ T39] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 211.027933][ T39] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 211.031686][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.035343][ T39] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.038584][ T39] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 211.047236][ T39] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 211.050496][ T39] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 211.054970][ T39] usb 9-1: Manufacturer: syz [ 211.061953][ T39] usb 9-1: config 0 descriptor?? [ 211.206758][ T29] usb 6-1: USB disconnect, device number 22 [ 211.212182][ T29] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 211.311972][ T66] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 211.461149][ T66] usb 8-1: Using ep0 maxpacket: 8 [ 211.465094][ T66] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.469345][ T66] usb 8-1: config 0 has no interfaces? [ 211.474584][ T66] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 211.478433][ T66] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 211.481843][ T39] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 211.485299][ T66] usb 8-1: Product: syz [ 211.487332][ T66] usb 8-1: SerialNumber: syz [ 211.490716][ T39] appleir 0003:05AC:8243.0020: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 211.493087][ T66] usb 8-1: config 0 descriptor?? [ 212.018084][ T6024] usb 9-1: USB disconnect, device number 19 [ 212.682631][T10141] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 212.724839][T10141] bond0: entered promiscuous mode [ 212.728788][T10141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.161777][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 213.890620][ T6025] usb 8-1: USB disconnect, device number 21 [ 214.256606][ T40] audit: type=1326 audit(1776896812.131:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.265315][ T40] audit: type=1326 audit(1776896812.131:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.275441][ T40] audit: type=1326 audit(1776896812.131:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.287152][ T40] audit: type=1326 audit(1776896812.131:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.296435][ T40] audit: type=1326 audit(1776896812.131:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.305657][ T40] audit: type=1326 audit(1776896812.161:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.314927][ T40] audit: type=1326 audit(1776896812.161:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.324625][ T40] audit: type=1326 audit(1776896812.161:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.334397][ T40] audit: type=1326 audit(1776896812.161:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.344242][ T40] audit: type=1326 audit(1776896812.161:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.0.1685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 214.508417][ T843] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 214.614539][ T62] block nbd4: Receive control failed (result -107) [ 214.667757][T10198] block nbd4: shutting down sockets [ 214.671239][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 214.672887][ T843] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 214.676564][ T843] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.679732][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.684002][ T843] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.687685][ T843] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.692895][ T843] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.696282][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.470780][T10202] usbtmc 8-1:16.0: simple control status returned 9f [ 215.673451][ T24] usb 8-1: USB disconnect, device number 22 [ 216.281892][T10210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.404784][T10210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.501541][T10210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.588367][T10210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.705578][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.723212][ T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.739181][ T46] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.754898][ T46] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.252543][T10241] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.330579][T10241] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.400489][T10241] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.464640][T10241] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.488481][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'. [ 217.513050][T10249] vxlan1: entered promiscuous mode [ 217.520238][ T164] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.524504][ T164] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.528653][ T164] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.533534][ T164] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.570403][ T164] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.583648][ T164] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.598274][ T164] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.611859][ T46] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.762922][T10256] loop5: detected capacity change from 0 to 7 [ 217.768715][T10256] Dev loop5: unable to read RDB block 7 [ 217.772380][T10256] loop5: unable to read partition table [ 217.774805][T10256] loop5: partition table beyond EOD, truncated [ 217.777742][T10256] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 218.423817][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 218.479279][ T62] block nbd1: Receive control failed (result -107) [ 218.505162][T10279] block nbd1: shutting down sockets [ 219.261401][ T40] kauditd_printk_skb: 470 callbacks suppressed [ 219.261413][ T40] audit: type=1326 audit(1776896817.141:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.273494][ T40] audit: type=1326 audit(1776896817.141:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.300252][ T40] audit: type=1326 audit(1776896817.141:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.309334][ T40] audit: type=1326 audit(1776896817.141:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.318936][ T40] audit: type=1326 audit(1776896817.141:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.327630][ T40] audit: type=1326 audit(1776896817.151:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.336850][ T40] audit: type=1326 audit(1776896817.151:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 219.348294][ T40] audit: type=1326 audit(1776896817.151:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 219.357478][ T40] audit: type=1326 audit(1776896817.151:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 219.367119][ T40] audit: type=1326 audit(1776896817.151:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10287 comm="syz.1.1728" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 228.778865][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 228.778880][ T40] audit: type=1800 audit(1776896826.651:565): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1732" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 228.878568][ T40] audit: type=1326 audit(1776896826.751:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10340 comm="syz.0.1739" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdefcc code=0x0 [ 229.723517][ T6025] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 229.865739][T10379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1755'. [ 229.872540][ T6025] usb 9-1: config 0 has an invalid interface number: 127 but max is 0 [ 229.874025][T10379] ip6gre1: entered promiscuous mode [ 229.877602][T10379] ip6gre1: entered allmulticast mode [ 229.879580][ T6025] usb 9-1: config 0 has no interface number 0 [ 229.884327][ T6025] usb 9-1: config 0 interface 127 has no altsetting 0 [ 229.892587][ T6025] usb 9-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=fe.2d [ 229.895989][ T6025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.899045][ T6025] usb 9-1: Product: syz [ 229.900560][ T6025] usb 9-1: Manufacturer: syz [ 229.902428][ T6025] usb 9-1: SerialNumber: syz [ 229.905624][ T6025] usb 9-1: config 0 descriptor?? [ 230.127859][ T6025] redrat3 9-1:0.127: Couldn't find all endpoints [ 230.132510][ T6025] usb 9-1: USB disconnect, device number 20 [ 230.169154][T10397] futex_wake_op: syz.3.1761 tries to shift op by 144; fix this program [ 230.581587][ T29] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 230.661131][T10407] nbd1: detected capacity change from 0 to 8 [ 230.666835][T10408] block nbd1: shutting down sockets [ 230.672127][T10332] [ 230.673158][T10332] ====================================================== [ 230.675918][T10332] WARNING: possible circular locking dependency detected [ 230.678829][T10332] syzkaller #0 Tainted: G L [ 230.681702][T10332] ------------------------------------------------------ [ 230.684761][T10332] udevd/10332 is trying to acquire lock: [ 230.687321][T10332] ffff888061172068 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 230.691205][T10332] [ 230.691205][T10332] but task is already holding lock: [ 230.694270][T10332] ffff8880277c7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 230.697817][T10332] [ 230.697817][T10332] which lock already depends on the new lock. [ 230.697817][T10332] [ 230.701933][T10332] [ 230.701933][T10332] the existing dependency chain (in reverse order) is: [ 230.705930][T10332] [ 230.705930][T10332] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 230.708982][T10332] __mutex_lock+0x1a4/0x1b10 [ 230.711095][T10332] nbd_queue_rq+0xba/0x1080 [ 230.712988][T10332] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 230.715479][T10332] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 230.718332][T10332] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 230.721591][T10332] blk_mq_run_hw_queue+0x23c/0x670 [ 230.724123][T10332] blk_mq_dispatch_list+0x51d/0x1360 [ 230.726362][T10332] blk_mq_flush_plug_list+0x130/0x600 [ 230.728667][T10332] __blk_flush_plug+0x2c4/0x4b0 [ 230.730861][T10332] __submit_bio+0x584/0x6c0 [ 230.731104][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 230.733346][T10332] submit_bio_noacct_nocheck+0x543/0xbf0 [ 230.733389][T10332] submit_bio_noacct+0xd18/0x2000 [ 230.733421][T10332] submit_bh_wbc+0x681/0x890 [ 230.733453][T10332] block_read_full_folio+0x4c8/0x8e0 [ 230.737934][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.738622][T10332] filemap_read_folio+0xfc/0x3b0 [ 230.738655][T10332] do_read_cache_folio+0x2d7/0x6b0 [ 230.738669][T10332] read_part_sector+0xd1/0x370 [ 230.742527][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.743123][T10332] adfspart_check_ICS+0x91/0x7d0 [ 230.743144][T10332] bdev_disk_changed+0x7a3/0x1250 [ 230.743158][T10332] blkdev_get_whole+0x187/0x290 [ 230.745153][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.748517][T10332] bdev_open+0x2c7/0xe40 [ 230.748544][T10332] blkdev_open+0x34e/0x4f0 [ 230.748558][T10332] do_dentry_open+0x6d8/0x1660 [ 230.748576][T10332] vfs_open+0x82/0x3f0 [ 230.748597][T10332] path_openat+0x208c/0x31a0 [ 230.751601][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.753712][T10332] do_file_open+0x20e/0x430 [ 230.753737][T10332] do_sys_openat2+0x10d/0x1e0 [ 230.753757][T10332] __x64_sys_openat+0x12d/0x210 [ 230.753777][T10332] do_syscall_64+0x10b/0xf80 [ 230.756467][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.759525][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.759554][T10332] [ 230.759554][T10332] -> #5 (set->srcu){.+.+}-{0:0}: [ 230.759579][T10332] __synchronize_srcu+0xa2/0x300 [ 230.796383][ T29] usb 5-1: config 0 descriptor?? [ 230.796865][T10332] blk_mq_quiesce_queue+0x149/0x1c0 [ 230.796890][T10332] elevator_switch+0x17b/0x7e0 [ 230.796904][T10332] elevator_change+0x352/0x530 [ 230.796918][T10332] elevator_set_default+0x29e/0x360 [ 230.796933][T10332] blk_register_queue+0x48e/0x630 [ 230.796945][T10332] __add_disk+0x73f/0xe40 [ 230.796956][T10332] add_disk_fwnode+0x118/0x5c0 [ 230.796967][T10332] nbd_dev_add+0x77a/0xb10 [ 230.796977][T10332] nbd_init+0x291/0x2b0 [ 230.796996][T10332] do_one_initcall+0x121/0x750 [ 230.797011][T10332] kernel_init_freeable+0x6ea/0x7b0 [ 230.797034][T10332] kernel_init+0x1f/0x1e0 [ 230.797047][T10332] ret_from_fork+0x72b/0xd50 [ 230.797060][T10332] ret_from_fork_asm+0x1a/0x30 [ 230.797073][T10332] [ 230.797073][T10332] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 230.797092][T10332] __mutex_lock+0x1a4/0x1b10 [ 230.797107][T10332] elevator_change+0x1bc/0x530 [ 230.797121][T10332] elevator_set_none+0x92/0xf0 [ 230.846968][T10332] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 230.849885][T10332] nbd_start_device+0x1a6/0xbd0 [ 230.852264][T10332] nbd_genl_connect+0xff2/0x1a40 [ 230.854639][T10332] genl_family_rcv_msg_doit+0x214/0x300 [ 230.857456][T10332] genl_rcv_msg+0x560/0x800 [ 230.859961][T10332] netlink_rcv_skb+0x159/0x420 [ 230.862291][T10332] genl_rcv+0x28/0x40 [ 230.864252][T10332] netlink_unicast+0x585/0x850 [ 230.866485][T10332] netlink_sendmsg+0x8b0/0xda0 [ 230.868801][T10332] ____sys_sendmsg+0x9e1/0xb70 [ 230.871094][T10332] ___sys_sendmsg+0x190/0x1e0 [ 230.873460][T10332] __sys_sendmsg+0x170/0x220 [ 230.875997][T10332] __do_fast_syscall_32+0xe7/0x950 [ 230.878609][T10332] do_fast_syscall_32+0x32/0x70 [ 230.880487][T10332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.883101][T10332] [ 230.883101][T10332] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 230.885839][T10332] blk_alloc_queue+0x610/0x790 [ 230.887741][T10332] blk_mq_alloc_queue+0x174/0x290 [ 230.889875][T10332] __blk_mq_alloc_disk+0x29/0x120 [ 230.892208][T10332] nbd_dev_add+0x492/0xb10 [ 230.894015][T10332] nbd_init+0x291/0x2b0 [ 230.895574][T10332] do_one_initcall+0x121/0x750 [ 230.897301][T10332] kernel_init_freeable+0x6ea/0x7b0 [ 230.899146][T10332] kernel_init+0x1f/0x1e0 [ 230.900764][T10332] ret_from_fork+0x72b/0xd50 [ 230.902635][T10332] ret_from_fork_asm+0x1a/0x30 [ 230.904407][T10332] [ 230.904407][T10332] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 230.907019][T10332] fs_reclaim_acquire+0xc4/0x100 [ 230.909079][T10332] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 230.911453][T10332] __alloc_skb+0x140/0x710 [ 230.913068][T10332] tcp_stream_alloc_skb+0x34/0x660 [ 230.914858][T10332] tcp_sendmsg_locked+0x13cd/0x4500 [ 230.916698][T10332] tcp_sendmsg+0x2e/0x50 [ 230.918238][T10332] inet_sendmsg+0xb9/0x140 [ 230.919905][T10332] sock_write_iter+0x4ea/0x5a0 [ 230.922051][T10332] vfs_write+0x6ac/0x1070 [ 230.924249][T10332] ksys_write+0x1f8/0x250 [ 230.926397][T10332] do_syscall_64+0x10b/0xf80 [ 230.928086][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.930216][T10332] [ 230.930216][T10332] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 230.932730][T10332] lock_sock_nested+0x41/0xf0 [ 230.934453][T10332] inet_shutdown+0x67/0x410 [ 230.936130][T10332] nbd_mark_nsock_dead+0xae/0x5c0 [ 230.937985][T10332] recv_work+0x5fb/0x8c0 [ 230.940038][T10332] process_one_work+0xa0e/0x1980 [ 230.942724][T10332] worker_thread+0x5ef/0xe50 [ 230.945357][T10332] kthread+0x370/0x450 [ 230.947539][T10332] ret_from_fork+0x72b/0xd50 [ 230.949799][T10332] ret_from_fork_asm+0x1a/0x30 [ 230.952115][T10332] [ 230.952115][T10332] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 230.955283][T10332] __lock_acquire+0x14b8/0x2630 [ 230.957671][T10332] lock_acquire+0x1b1/0x370 [ 230.959995][T10332] __mutex_lock+0x1a4/0x1b10 [ 230.962675][T10332] nbd_queue_rq+0x428/0x1080 [ 230.965434][T10332] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 230.968150][T10332] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 230.971135][T10332] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 230.973947][T10332] blk_mq_run_hw_queue+0x23c/0x670 [ 230.976440][T10332] blk_mq_dispatch_list+0x51d/0x1360 [ 230.979127][T10332] blk_mq_flush_plug_list+0x130/0x600 [ 230.982284][T10332] __blk_flush_plug+0x2c4/0x4b0 [ 230.984947][T10332] __submit_bio+0x584/0x6c0 [ 230.987151][T10332] submit_bio_noacct_nocheck+0x543/0xbf0 [ 230.989542][T10332] submit_bio_noacct+0xd18/0x2000 [ 230.991609][T10332] submit_bh_wbc+0x681/0x890 [ 230.993569][T10332] block_read_full_folio+0x4c8/0x8e0 [ 230.995811][T10332] filemap_read_folio+0xfc/0x3b0 [ 230.998069][T10332] do_read_cache_folio+0x2d7/0x6b0 [ 231.000712][T10332] read_part_sector+0xd1/0x370 [ 231.003049][T10332] adfspart_check_ICS+0x91/0x7d0 [ 231.005085][T10332] bdev_disk_changed+0x7a3/0x1250 [ 231.006814][T10332] blkdev_get_whole+0x187/0x290 [ 231.008586][T10332] bdev_open+0x2c7/0xe40 [ 231.010156][T10332] blkdev_open+0x34e/0x4f0 [ 231.011786][T10332] do_dentry_open+0x6d8/0x1660 [ 231.013470][T10332] vfs_open+0x82/0x3f0 [ 231.014947][T10332] path_openat+0x208c/0x31a0 [ 231.016601][T10332] do_file_open+0x20e/0x430 [ 231.018244][T10332] do_sys_openat2+0x10d/0x1e0 [ 231.020198][T10332] __x64_sys_openat+0x12d/0x210 [ 231.022190][T10332] do_syscall_64+0x10b/0xf80 [ 231.023934][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.026031][T10332] [ 231.026031][T10332] other info that might help us debug this: [ 231.026031][T10332] [ 231.029415][T10332] Chain exists of: [ 231.029415][T10332] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 231.029415][T10332] [ 231.034126][T10332] Possible unsafe locking scenario: [ 231.034126][T10332] [ 231.037012][T10332] CPU0 CPU1 [ 231.038880][T10332] ---- ---- [ 231.040708][T10332] lock(&cmd->lock); [ 231.042040][T10332] lock(set->srcu); [ 231.044060][T10332] lock(&cmd->lock); [ 231.046087][T10332] lock(&nsock->tx_lock); [ 231.047636][T10332] [ 231.047636][T10332] *** DEADLOCK *** [ 231.047636][T10332] [ 231.050388][T10332] 3 locks held by udevd/10332: [ 231.052331][T10332] #0: ffff8880276ed350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 231.055754][T10332] #1: ffff8880267b1c98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 231.058770][T10332] #2: ffff8880277c7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 231.061611][T10332] [ 231.061611][T10332] stack backtrace: [ 231.063496][T10332] CPU: 2 UID: 0 PID: 10332 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 231.063513][T10332] Tainted: [L]=SOFTLOCKUP [ 231.063516][T10332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.063628][T10332] Call Trace: [ 231.063636][T10332] [ 231.063641][T10332] dump_stack_lvl+0x100/0x190 [ 231.063655][T10332] print_circular_bug.cold+0x178/0x1c7 [ 231.063674][T10332] check_noncircular+0x146/0x160 [ 231.063693][T10332] __lock_acquire+0x14b8/0x2630 [ 231.063726][T10332] lock_acquire+0x1b1/0x370 [ 231.063737][T10332] ? nbd_queue_rq+0x428/0x1080 [ 231.063749][T10332] ? __pfx___might_resched+0x10/0x10 [ 231.063761][T10332] ? preempt_schedule_thunk+0x16/0x30 [ 231.063779][T10332] __mutex_lock+0x1a4/0x1b10 [ 231.063798][T10332] ? nbd_queue_rq+0x428/0x1080 [ 231.063808][T10332] ? nbd_queue_rq+0x428/0x1080 [ 231.063818][T10332] ? is_bpf_text_address+0x8a/0x1a0 [ 231.063834][T10332] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.063851][T10332] ? rcu_is_watching+0x12/0xc0 [ 231.063864][T10332] ? __pfx___mutex_lock+0x10/0x10 [ 231.063881][T10332] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 231.063896][T10332] ? is_bpf_text_address+0x94/0x1a0 [ 231.063910][T10332] ? kernel_text_address+0x8d/0x100 [ 231.063923][T10332] ? arch_stack_walk+0xa6/0xf0 [ 231.063939][T10332] ? nbd_queue_rq+0x428/0x1080 [ 231.063949][T10332] nbd_queue_rq+0x428/0x1080 [ 231.063960][T10332] ? stack_trace_save+0x8e/0xc0 [ 231.063976][T10332] ? __pfx_nbd_queue_rq+0x10/0x10 [ 231.063987][T10332] ? add_lock_to_list+0x99/0x110 [ 231.064001][T10332] ? lockdep_unlock+0x5a/0xc0 [ 231.064015][T10332] ? __lock_acquire+0xd73/0x2630 [ 231.064028][T10332] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 231.064044][T10332] ? sbitmap_get+0x1d7/0x360 [ 231.064059][T10332] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 231.064071][T10332] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 231.064081][T10332] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 231.064100][T10332] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 231.064121][T10332] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 231.064137][T10332] blk_mq_run_hw_queue+0x23c/0x670 [ 231.064153][T10332] ? blk_mq_run_hw_queue+0x22e/0x670 [ 231.064168][T10332] blk_mq_dispatch_list+0x51d/0x1360 [ 231.064180][T10332] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 231.064190][T10332] ? update_io_ticks+0x137/0x2a0 [ 231.064206][T10332] ? __pfx_update_io_ticks+0x10/0x10 [ 231.064223][T10332] blk_mq_flush_plug_list+0x130/0x600 [ 231.064233][T10332] ? trace_block_plug+0x70/0x220 [ 231.064246][T10332] ? blk_add_rq_to_plug+0x30a/0x540 [ 231.064256][T10332] ? __pfx_wbt_track+0x10/0x10 [ 231.064272][T10332] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 231.064283][T10332] ? blk_mq_submit_bio+0x9aa/0x2dd0 [ 231.064294][T10332] __blk_flush_plug+0x2c4/0x4b0 [ 231.064312][T10332] ? __pfx___blk_flush_plug+0x10/0x10 [ 231.064329][T10332] __submit_bio+0x584/0x6c0 [ 231.064344][T10332] ? find_held_lock+0x2b/0x80 [ 231.064358][T10332] ? __pfx___submit_bio+0x10/0x10 [ 231.064374][T10332] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 231.064385][T10332] ? find_held_lock+0x2b/0x80 [ 231.064399][T10332] ? submit_bio_noacct_nocheck+0x543/0xbf0 [ 231.064415][T10332] submit_bio_noacct_nocheck+0x543/0xbf0 [ 231.064433][T10332] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 231.064451][T10332] ? __pfx___might_resched+0x10/0x10 [ 231.064463][T10332] submit_bio_noacct+0xd18/0x2000 [ 231.064480][T10332] submit_bh_wbc+0x681/0x890 [ 231.064497][T10332] block_read_full_folio+0x4c8/0x8e0 [ 231.064515][T10332] ? __pfx_blkdev_get_block+0x10/0x10 [ 231.064525][T10332] ? __pfx_blkdev_read_folio+0x10/0x10 [ 231.064534][T10332] filemap_read_folio+0xfc/0x3b0 [ 231.064551][T10332] ? __pfx_filemap_read_folio+0x10/0x10 [ 231.064568][T10332] do_read_cache_folio+0x2d7/0x6b0 [ 231.064578][T10332] ? __pfx_blkdev_read_folio+0x10/0x10 [ 231.064588][T10332] read_part_sector+0xd1/0x370 [ 231.064604][T10332] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 231.064619][T10332] adfspart_check_ICS+0x91/0x7d0 [ 231.064635][T10332] ? __pfx_seq_buf_printf+0x10/0x10 [ 231.064651][T10332] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 231.064668][T10332] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 231.064684][T10332] bdev_disk_changed+0x7a3/0x1250 [ 231.064701][T10332] ? nbd_open+0x320/0x700 [ 231.064711][T10332] ? __pfx_bdev_disk_changed+0x10/0x10 [ 231.064727][T10332] blkdev_get_whole+0x187/0x290 [ 231.064743][T10332] bdev_open+0x2c7/0xe40 [ 231.064760][T10332] blkdev_open+0x34e/0x4f0 [ 231.064770][T10332] do_dentry_open+0x6d8/0x1660 [ 231.064783][T10332] ? __pfx_blkdev_open+0x10/0x10 [ 231.064795][T10332] vfs_open+0x82/0x3f0 [ 231.064810][T10332] path_openat+0x208c/0x31a0 [ 231.064825][T10332] ? __pfx_path_openat+0x10/0x10 [ 231.064839][T10332] do_file_open+0x20e/0x430 [ 231.064852][T10332] ? __pfx_do_file_open+0x10/0x10 [ 231.064868][T10332] ? alloc_fd+0x476/0x790 [ 231.064881][T10332] ? do_getname+0x191/0x390 [ 231.064896][T10332] do_sys_openat2+0x10d/0x1e0 [ 231.064911][T10332] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.064927][T10332] ? __sys_recvmsg+0x18c/0x220 [ 231.064940][T10332] ? __pfx___sys_recvmsg+0x10/0x10 [ 231.064951][T10332] __x64_sys_openat+0x12d/0x210 [ 231.064967][T10332] ? __pfx___x64_sys_openat+0x10/0x10 [ 231.064983][T10332] ? rcu_is_watching+0x12/0xc0 [ 231.064996][T10332] do_syscall_64+0x10b/0xf80 [ 231.065011][T10332] ? clear_bhb_loop+0x40/0x90 [ 231.065024][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.065037][T10332] RIP: 0033:0x7fb4f68a7407 [ 231.065048][T10332] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 231.065059][T10332] RSP: 002b:00007ffc8b3fc040 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 231.065071][T10332] RAX: ffffffffffffffda RBX: 00007fb4f6f78880 RCX: 00007fb4f68a7407 [ 231.065077][T10332] RDX: 00000000000a0800 RSI: 0000556cc7bc0280 RDI: ffffffffffffff9c [ 231.065084][T10332] RBP: 0000556cc7bbf910 R08: 0000000000000000 R09: 0000000000000000 [ 231.065090][T10332] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556cc7bd4830 [ 231.065096][T10332] R13: 0000556cc7bcd190 R14: 0000000000000000 R15: 0000556cc7bd4830 [ 231.065106][T10332] [ 231.270133][ T29] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 231.272941][ T29] microsoft 0003:045E:07DA.0021: ignoring exceeding usage max [ 231.280381][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 231.283359][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.313191][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0021/input/input34 [ 231.371415][ T5325] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.374709][ T5325] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.378113][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.383114][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.386264][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.389607][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.392654][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.395971][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.398934][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.403069][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.406068][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.409426][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.412408][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.415823][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.416147][ T29] microsoft 0003:045E:07DA.0021: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 231.419252][T10332] ldm_validate_partition_table(): Disk read failed. [ 231.426023][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.429563][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.433074][T10332] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 231.436551][T10332] Buffer I/O error on dev nbd1, logical block 0, async page read [ 231.439604][T10332] Dev nbd1: unable to read RDB block 0 [ 231.443558][T10332] nbd1: unable to read partition table [ 231.445997][T10332] nbd1: partition table beyond EOD, truncated [ 231.464151][T10332] ldm_validate_partition_table(): Disk read failed. [ 231.471323][T10332] Dev nbd1: unable to read RDB block 0 [ 231.474095][T10332] nbd1: unable to read partition table [ 231.476850][T10332] nbd1: partition table beyond EOD, truncated [ 231.505345][T10405] bond0: (slave syz_tun): Releasing backup interface [ 231.562792][ T6024] usb 5-1: USB disconnect, device number 17 [ 233.396160][ T46] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.463282][ T46] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.504529][ T46] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.553128][ T46] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.840401][ T5665] 8021q: adding VLAN 0 to HW filter on device eth6 [ 233.971590][ T5665] 8021q: adding VLAN 0 to HW filter on device eth7 [ 233.993855][ T46] hsr_slave_0: left promiscuous mode [ 233.996647][ T46] hsr_slave_1: left promiscuous mode [ 234.006173][ T46] veth1_macvtap: left promiscuous mode [ 234.007988][ T46] veth0_macvtap: left promiscuous mode [ 234.009864][ T46] veth1_vlan: left promiscuous mode [ 234.011764][ T46] veth0_vlan: left promiscuous mode [ 234.283152][ T5665] 8021q: adding VLAN 0 to HW filter on device eth8 [ 234.431432][ T5665] 8021q: adding VLAN 0 to HW filter on device eth9