last executing test programs: 6.142141701s ago: executing program 4 (id=7609): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x2, "112000"}, @main=@item_4={0x3, 0x0, 0x8, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000080)={0x21, 0x200, 0xfffffffd, 0x2, 0x0, 0x80043}) 4.410603192s ago: executing program 4 (id=7618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) 4.219959194s ago: executing program 2 (id=7621): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x7ffffdbd}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4.141190925s ago: executing program 4 (id=7622): r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.995603637s ago: executing program 2 (id=7623): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x69, @string={0x69, 0x3, "f7d589081fb71a3c151a32c1b4a870ab1284429683a07f86bd6143f4b0481d425bbcc7edc9a6452f479d3b75814ef5908f996b31b93c9785d1bade896056fa8b8c21d39b5de28fe482c818968a996217601660030981edd1ac806ee8c2c7881b2c573c4fc63780"}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.401926787s ago: executing program 4 (id=7630): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) 3.146404495s ago: executing program 1 (id=7635): sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.409504419s ago: executing program 4 (id=7638): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b1d, &(0x7f0000000040)) 2.16588811s ago: executing program 4 (id=7641): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001240)=ANY=[@ANYBLOB="120100000200df402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000006009306241a00000e0905810300020000000904010000020d00000904010102020d000009c382020000000000090503020004"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10f, 0x10, 0x10, 0x10, 0x10, 0x14, 0x10, 0x10, 0xc, 0x11, 0x10, 0x113}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.124988795s ago: executing program 1 (id=7652): r0 = epoll_create1(0x80000) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x1}) 2.042554066s ago: executing program 1 (id=7643): r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) 1.228991029s ago: executing program 0 (id=7647): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 1.153145408s ago: executing program 3 (id=7648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) close(r0) 1.052479192s ago: executing program 1 (id=7649): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.025764488s ago: executing program 0 (id=7650): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 990.423913ms ago: executing program 3 (id=7651): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 958.612622ms ago: executing program 1 (id=7653): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 825.216073ms ago: executing program 3 (id=7654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x5}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 825.008817ms ago: executing program 0 (id=7655): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x8100024d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) 824.744096ms ago: executing program 1 (id=7656): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 607.986002ms ago: executing program 0 (id=7657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x3) 607.800772ms ago: executing program 2 (id=7658): ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x100000000, 0x0, 0x3}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sendfile(r0, r0, 0x0, 0x1) 544.806266ms ago: executing program 2 (id=7659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2012, r2, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 472.691603ms ago: executing program 3 (id=7660): r0 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f000064a000/0x3000)=nil, 0x3000}, 0x1}) 292.229983ms ago: executing program 3 (id=7661): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 205.072851ms ago: executing program 2 (id=7662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 133.381516ms ago: executing program 0 (id=7663): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0x134, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xeb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @private1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd537}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 80.134077ms ago: executing program 3 (id=7664): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x33d, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 63.877743ms ago: executing program 2 (id=7665): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7fff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x4}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xc86, 0x5f, 0xa, 0x0, 0xffff2d37, 0xd4, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0x3, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x7, 0xa, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x2000, 0x4, 0x6, 0x400008c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x9, 0xfffffdfa, 0x7fdfffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x3ff, 0x2, 0x60002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa5, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x7, 0x7, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0x1000, 0xffffffff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 0 (id=7666): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 7 [ 535.626964][ C0] blk_print_req_error: 10 callbacks suppressed [ 535.626976][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.642367][ C0] buffer_io_error: 11 callbacks suppressed [ 535.642384][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.661978][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.671242][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.680267][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.689492][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.715895][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.725180][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.733394][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.742672][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.764133][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.773399][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.783258][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.792491][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.800483][T21012] ldm_validate_partition_table(): Disk read failed. [ 535.816390][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.825631][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.846541][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.855770][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.863805][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 535.864152][ C0] syz_tun: tun_net_xmit 42 [ 535.878600][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 535.887869][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.898668][T21012] Dev loop9: unable to read RDB block 0 [ 535.908649][T21012] loop9: unable to read partition table [ 535.917759][T21012] loop9: partition table beyond EOD, truncated [ 535.926449][T21012] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 536.023728][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 536.043827][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 536.061083][ T24] usb 1-1: config 0 has no interface number 0 [ 536.070063][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 536.081583][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.089967][ T24] usb 1-1: Product: syz [ 536.095974][ T24] usb 1-1: Manufacturer: syz [ 536.100706][ T24] usb 1-1: SerialNumber: syz [ 536.111245][ T24] usb 1-1: config 0 descriptor?? [ 536.124419][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 536.340817][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 536.392517][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 536.660685][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6681'. [ 536.733958][ T5713] net_ratelimit: 3 callbacks suppressed [ 536.733973][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.764014][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 536.773019][T17608] usb 1-1: USB disconnect, device number 46 [ 536.790809][T17608] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 536.818538][T17608] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 536.847285][T17608] quatech2 1-1:0.51: device disconnected [ 536.894114][ C0] syz_tun: tun_net_xmit 42 [ 537.073975][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6688'. [ 537.154123][ T5693] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 537.313763][ T5693] usb 3-1: Using ep0 maxpacket: 16 [ 537.329569][ T5693] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 537.358768][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 537.373713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.405715][ T5693] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 537.420700][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.432192][ T5693] usb 3-1: Product: syz [ 537.451119][ T5693] usb 3-1: Manufacturer: syz [ 537.459943][ T5693] usb 3-1: SerialNumber: syz [ 537.486876][ T5693] usb 3-1: config 0 descriptor?? [ 537.506428][ T5693] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 537.535205][ T5693] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 537.693896][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.722956][T21090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.731800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.774240][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.893783][T17608] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 537.933723][ C0] syz_tun: tun_net_xmit 42 [ 538.058522][T17608] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 538.073435][T17608] usb 2-1: config 0 has no interface number 0 [ 538.092079][T17608] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 538.113152][T17608] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 538.117206][ T5693] em28xx 3-1:0.0: chip ID is em2884 [ 538.139704][T17608] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.142272][T21108] batadv_slave_1: entered promiscuous mode [ 538.160294][T21108] batadv_slave_1: left promiscuous mode [ 538.163217][T17608] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 538.175914][T17608] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 538.184380][T17608] usb 2-1: Product: syz [ 538.188814][T17608] usb 2-1: SerialNumber: syz [ 538.215246][T17608] usb 2-1: config 0 descriptor?? [ 538.235832][T17608] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 538.268077][T17608] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input65 [ 538.313791][ T5700] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 538.334146][ T5693] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 538.350482][ T5693] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 538.367703][ T5693] em28xx 3-1:0.0: No AC97 audio processor [ 538.406937][ T5693] usb 3-1: USB disconnect, device number 36 [ 538.413991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.431194][ T5693] em28xx 3-1:0.0: Disconnecting em28xx [ 538.459488][T21112] loop9: detected capacity change from 0 to 524287936 [ 538.470905][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 538.472285][T15807] usb 2-1: USB disconnect, device number 60 [ 538.478165][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 538.520208][ T5693] em28xx 3-1:0.0: Freeing device [ 538.526730][ T5700] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 538.549574][T15807] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 538.558070][ T5700] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 538.609640][ T5700] usb 4-1: config 0 has no interface number 0 [ 538.617851][ T5700] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 538.639386][ T5700] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 538.649865][ T5700] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 538.660150][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.680893][ T5700] usb 4-1: config 0 descriptor?? [ 538.769078][T21117] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6710'. [ 538.778778][T21117] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6710'. [ 538.797522][T21117] netlink: 'syz.0.6710': attribute type 5 has an invalid length. [ 538.805835][T21117] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6710'. [ 538.824980][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.929609][T17608] hid_parser_main: 2 callbacks suppressed [ 538.929629][T17608] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 538.966608][T17608] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz0] on syz0 [ 538.973868][ C0] syz_tun: tun_net_xmit 42 [ 539.193852][ T5713] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 539.303523][ T5700] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input66 [ 539.348686][ T5700] input: failed to attach handler kbd to device input66, error: -5 [ 539.365510][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 539.380042][ T5713] usb 1-1: config 0 has no interfaces? [ 539.389275][ T5713] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 539.405293][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.413536][ T5713] usb 1-1: Product: syz [ 539.420664][ T5713] usb 1-1: Manufacturer: syz [ 539.425639][T17608] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 539.435991][ T5713] usb 1-1: SerialNumber: syz [ 539.444481][ T5713] usb 1-1: config 0 descriptor?? [ 539.453685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.520024][ T5700] usb 4-1: USB disconnect, device number 49 [ 539.593759][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 539.601453][T17608] usb 5-1: Using ep0 maxpacket: 16 [ 539.608554][T17608] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.618792][T17608] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 539.628007][T17608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.637974][T17608] usb 5-1: config 0 descriptor?? [ 539.647446][T17608] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 539.671144][ T5693] usb 1-1: USB disconnect, device number 47 [ 539.780096][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 539.789249][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.797339][T15807] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 539.806515][ T24] usb 2-1: Product: syz [ 539.810727][ T24] usb 2-1: Manufacturer: syz [ 539.815467][ T24] usb 2-1: SerialNumber: syz [ 539.822575][ T24] usb 2-1: config 0 descriptor?? [ 539.853933][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.861331][ T5693] usb 5-1: USB disconnect, device number 54 [ 539.953682][T15807] usb 3-1: Using ep0 maxpacket: 16 [ 539.960953][T15807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.969994][T15807] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 539.978444][T15807] usb 3-1: config 127 has no interface number 0 [ 539.985027][T15807] usb 3-1: config 127 interface 124 has no altsetting 0 [ 539.995276][T15807] usb 3-1: string descriptor 0 read error: -22 [ 540.001965][T15807] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 540.011332][T15807] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 540.019768][ C0] syz_tun: tun_net_xmit 42 [ 540.186134][T15807] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 540.250891][ T24] usb 2-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 540.417742][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6727'. [ 540.463298][ T24] usb 2-1: failed to fetch extended address, random address set [ 540.492966][ T24] usb 2-1: atusb_probe: initialization failed, error = -524 [ 540.510202][ T24] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 540.536384][ T24] usb 2-1: USB disconnect, device number 61 [ 540.677660][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.686930][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.700435][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.714039][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.732440][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.751321][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.763986][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.771436][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.779618][ T5700] hid-generic 0000:0000:0004.0046: unknown main item tag 0x0 [ 540.792293][ T5700] hid-generic 0000:0000:0004.0046: hidraw0: HID v0.03 Device [syz1] on syz0 [ 540.872797][T21169] fido_id[21169]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 540.904759][T15807] usb 3-1: device descriptor read/64, error -71 [ 541.054250][ C0] syz_tun: tun_net_xmit 42 [ 541.148202][ T24] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz0] on syz0 [ 541.197441][T15807] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 541.374104][T17608] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 541.386825][T15807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.411169][T15807] usb 3-1: device firmware changed [ 541.433267][T15807] usb 3-1: USB disconnect, device number 37 [ 541.534008][T17608] usb 4-1: Using ep0 maxpacket: 16 [ 541.548493][T17608] usb 4-1: config 0 has no interfaces? [ 541.560517][T17608] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 541.591797][T17608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.607708][T17608] usb 4-1: Product: syz [ 541.613241][T17608] usb 4-1: Manufacturer: syz [ 541.630292][T17608] usb 4-1: SerialNumber: syz [ 541.651045][T17608] usb 4-1: config 0 descriptor?? [ 541.745498][T21203] binder: 21202:21203 unknown command 1074553622 [ 541.754007][T21203] binder: 21202:21203 ioctl c0306201 80000640 returned -22 [ 541.893101][ T5700] usb 4-1: USB disconnect, device number 50 [ 541.934440][ T24] net_ratelimit: 749 callbacks suppressed [ 541.934463][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.093855][ C0] syz_tun: tun_net_xmit 42 [ 542.099075][T15807] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 542.278412][T15807] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 542.303013][T15807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.323713][T15807] usb 5-1: Product: syz [ 542.332293][T15807] usb 5-1: Manufacturer: syz [ 542.339999][T15807] usb 5-1: SerialNumber: syz [ 542.353264][T15807] usb 5-1: config 0 descriptor?? [ 542.573711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.774836][T15807] usb 5-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 542.973880][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.985515][T15807] usb 5-1: failed to fetch extended address, random address set [ 543.015823][T15807] usb 5-1: atusb_probe: initialization failed, error = -524 [ 543.048565][T15807] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 543.077435][T15807] usb 5-1: USB disconnect, device number 55 [ 543.134026][ C0] syz_tun: tun_net_xmit 42 [ 543.411889][T21276] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6781'. [ 543.614137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.775379][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.853995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.014001][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.148357][T21307] loop8: detected capacity change from 0 to 7 [ 544.167454][T21307] Dev loop8: unable to read RDB block 7 [ 544.173712][ C0] syz_tun: tun_net_xmit 42 [ 544.179978][T21307] loop8: unable to read partition table [ 544.192883][T21307] loop8: partition table beyond EOD, truncated [ 544.205909][T21307] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.387047][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6798'. [ 544.653878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.053879][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.213796][ C0] syz_tun: tun_net_xmit 42 [ 545.292305][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6812'. [ 545.583183][T21371] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6823'. [ 545.693685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.133530][T21398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6836'. [ 546.190398][T21398] veth0_to_bridge: entered promiscuous mode [ 546.198624][T21398] macvtap1: entered allmulticast mode [ 546.204544][T21398] veth0_to_bridge: entered allmulticast mode [ 546.216318][T21398] veth0_to_bridge: left allmulticast mode [ 546.226562][T21398] veth0_to_bridge: left promiscuous mode [ 546.254101][ C0] syz_tun: tun_net_xmit 42 [ 546.934779][ T24] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 547.058398][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6853'. [ 547.081153][T21436] netlink: 'syz.2.6853': attribute type 25 has an invalid length. [ 547.094232][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6853'. [ 547.128793][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 547.141627][T17608] net_ratelimit: 6 callbacks suppressed [ 547.141644][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.173248][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 547.195816][ T24] usb 1-1: config 0 has no interfaces? [ 547.211034][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 547.221987][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.236236][ T24] usb 1-1: Product: syz [ 547.247196][ T24] usb 1-1: Manufacturer: syz [ 547.255479][ T24] usb 1-1: SerialNumber: syz [ 547.269638][ T24] usb 1-1: config 0 descriptor?? [ 547.293719][ C0] syz_tun: tun_net_xmit 42 [ 547.545931][T21423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.568691][T21423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.598485][ T24] usb 1-1: USB disconnect, device number 48 [ 547.774037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.907950][T21466] pimreg: entered allmulticast mode [ 547.935604][T21466] pimreg: left allmulticast mode [ 548.053783][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 548.174155][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.218711][ T24] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 548.243904][ T24] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 528 [ 548.290192][ T24] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 548.307553][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.327232][ T24] usb 1-1: Product: syz [ 548.333867][ C0] syz_tun: tun_net_xmit 42 [ 548.338017][ T24] usb 1-1: Manufacturer: syz [ 548.351478][ T24] usb 1-1: SerialNumber: syz [ 548.612100][ T24] cdc_ncm 1-1:1.0: bind() failure [ 548.734345][T21489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6877'. [ 548.813702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.923385][ T24] usb 1-1: USB disconnect, device number 49 [ 549.110778][T19222] udevd[19222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.217211][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.374083][ C0] syz_tun: tun_net_xmit 42 [ 549.853691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.862619][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.963079][T21546] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 550.253883][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.267482][T21558] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6908'. [ 550.286701][T21558] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6908'. [ 550.413733][ C0] syz_tun: tun_net_xmit 42 [ 551.295619][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.453798][ C0] syz_tun: tun_net_xmit 42 [ 551.936133][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.334161][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.494216][ C0] syz_tun: tun_net_xmit 42 [ 552.894130][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.973723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.373860][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.533715][ C0] syz_tun: tun_net_xmit 42 [ 553.835455][T21687] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 553.914899][T15807] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 554.014089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.085818][T15807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.109080][T15807] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 554.133279][T15807] usb 2-1: string descriptor 0 read error: -22 [ 554.145049][T15807] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 554.162666][T15807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.183101][T21696] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 554.258432][T21696] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 554.414517][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.574298][ C0] syz_tun: tun_net_xmit 42 [ 555.039855][T15807] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 555.054536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.057664][T21722] veth0_macvtap: Caught tx_queue_len zero misconfig [ 555.100947][T15807] usb 2-1: USB disconnect, device number 62 [ 555.350926][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 555.455271][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.614310][ C0] syz_tun: tun_net_xmit 42 [ 555.934258][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.094355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.338326][T21757] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6993'. [ 556.392833][T21761] netlink: 'syz.0.6996': attribute type 3 has an invalid length. [ 556.420765][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6996'. [ 556.653719][ C0] syz_tun: tun_net_xmit 42 [ 557.224009][ T5713] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 557.385286][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 557.385303][ T29] audit: type=1326 audit(1780866028.718:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.386210][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.399376][ T29] audit: type=1326 audit(1780866028.718:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.416953][ T5713] usb 3-1: config 0 has no interfaces? [ 557.456990][ T5713] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 557.466121][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.470153][ T29] audit: type=1326 audit(1780866028.728:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.528205][ T29] audit: type=1326 audit(1780866028.728:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.540689][ T5713] usb 3-1: config 0 descriptor?? [ 557.560983][ T24] net_ratelimit: 2 callbacks suppressed [ 557.561000][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.582026][ T29] audit: type=1326 audit(1780866028.728:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.641554][ T29] audit: type=1326 audit(1780866028.728:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.668620][ T29] audit: type=1326 audit(1780866028.728:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71261ab code=0x7ffc0000 [ 557.694828][ C0] syz_tun: tun_net_xmit 42 [ 557.776616][ T29] audit: type=1326 audit(1780866028.728:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.854185][ T29] audit: type=1326 audit(1780866028.758:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.901680][ T29] audit: type=1326 audit(1780866028.758:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21801 comm="syz.1.7014" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 557.909974][T21783] tipc: Started in network mode [ 557.956565][T21783] tipc: Node identity ac14142f, cluster identity 4711 [ 557.981794][T21783] tipc: Enabling of bearer rejected, failed to enable media [ 558.055886][ T5713] usb 3-1: USB disconnect, device number 38 [ 558.174002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.483775][T15807] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 558.515456][ T5713] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 558.585459][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.636137][T15807] usb 2-1: Using ep0 maxpacket: 16 [ 558.666375][T15807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.686066][ T5713] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 558.699798][T15807] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 558.719577][T15807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.719629][ T5713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 558.734078][ C0] syz_tun: tun_net_xmit 42 [ 558.756920][T15807] usb 2-1: config 0 descriptor?? [ 558.762978][ T5713] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.788991][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 558.806872][ T35] tipc: Left network mode [ 558.811218][ T5713] usb 1-1: Product: syz [ 558.816820][ T5713] usb 1-1: Manufacturer: syz [ 558.827354][ T5713] usb 1-1: SerialNumber: syz [ 558.858916][ T5713] usb 1-1: config 0 descriptor?? [ 558.883726][ T5713] usb 1-1: selecting invalid altsetting 0 [ 558.974216][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.117382][ T5713] usb 1-1: USB disconnect, device number 50 [ 559.213752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.231876][T15807] mcp2221 0003:04D8:00DD.0048: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 559.615080][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.685330][T15807] usb 2-1: USB disconnect, device number 63 [ 559.773964][ C0] syz_tun: tun_net_xmit 42 [ 559.848525][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7051'. [ 559.860621][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7051'. [ 560.253695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.369625][T21908] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7064'. [ 560.656476][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.813803][ C0] syz_tun: tun_net_xmit 42 [ 560.818577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.247982][T21950] netlink: 'syz.0.7081': attribute type 1 has an invalid length. [ 561.263760][T17608] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 561.294274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.436000][T17608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.466621][T17608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.486716][T17608] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.522399][T17608] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.544670][T17608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.574830][T17608] usb 2-1: config 0 descriptor?? [ 561.854105][ C0] syz_tun: tun_net_xmit 42 [ 561.999470][T17608] plantronics 0003:047F:FFFF.0049: reserved main item tag 0xd [ 562.037095][T17608] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 562.260291][T17608] usb 2-1: USB disconnect, device number 64 [ 562.294099][ T5713] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 562.463796][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 562.472282][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.484175][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.496000][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 562.509262][ T5713] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 562.518560][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.532239][ T5713] usb 5-1: config 0 descriptor?? [ 562.734943][T17608] net_ratelimit: 3 callbacks suppressed [ 562.734973][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.815822][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.822190][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.893714][ C0] syz_tun: tun_net_xmit 42 [ 562.965155][ T5713] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 563.022014][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.004A/input/input70 [ 563.123497][ T5713] microsoft 0003:045E:07DA.004A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 563.192656][ T5713] usb 5-1: USB disconnect, device number 56 [ 563.282014][T21989] fido_id[21989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 563.374130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.774137][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.933801][ C0] syz_tun: tun_net_xmit 42 [ 564.173738][ T5713] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 564.303737][T15807] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 564.335650][ T5713] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 564.345285][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.358321][ T5713] usb 4-1: config 0 descriptor?? [ 564.367978][ T5713] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 564.413906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.479511][T15807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.506554][T15807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.518717][T15807] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 564.528764][T15807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.542052][T15807] usb 2-1: config 0 descriptor?? [ 564.780881][ T5713] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 564.814820][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.943736][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 564.974481][ C0] syz_tun: tun_net_xmit 42 [ 564.982942][T15807] hid_parser_main: 81 callbacks suppressed [ 564.982962][T15807] cm6533_jd 0003:0D8C:0022.004B: unknown main item tag 0x0 [ 565.000006][T15807] cm6533_jd 0003:0D8C:0022.004B: unknown main item tag 0x0 [ 565.010452][T15807] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.004B/input/input71 [ 565.032054][T15807] cm6533_jd 0003:0D8C:0022.004B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 565.053951][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.114563][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 565.122704][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.135982][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 565.148819][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 565.158900][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.167217][ T24] usb 1-1: Product: syz [ 565.171502][ T24] usb 1-1: Manufacturer: syz [ 565.176594][ T24] usb 1-1: SerialNumber: syz [ 565.187742][T17608] usb 2-1: USB disconnect, device number 65 [ 565.197692][ T5713] gspca_cpia1: usb_control_msg 02, error -32 [ 565.210480][ T5713] gspca_cpia1: usb_control_msg 02, error -71 [ 565.222525][ T24] usb 1-1: 0:2 : does not exist [ 565.231367][ T5713] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 565.239541][ T24] usb 1-1: unit 9 not found! [ 565.257701][ T5713] usb 4-1: USB disconnect, device number 51 [ 565.430407][ T24] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 565.441594][ T24] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 565.453720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.517969][ T24] usb 1-1: USB disconnect, device number 51 [ 565.555927][T14763] udevd[14763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.865489][T17608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.949111][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 565.949126][ T29] audit: type=1326 audit(1780866037.278:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 565.995891][ T29] audit: type=1326 audit(1780866037.278:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.020680][ C0] syz_tun: tun_net_xmit 42 [ 566.021974][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 566.031175][ T29] audit: type=1326 audit(1780866037.318:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.069657][ T29] audit: type=1326 audit(1780866037.318:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.100990][ T29] audit: type=1326 audit(1780866037.318:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.126012][ T29] audit: type=1326 audit(1780866037.328:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.151090][ T29] audit: type=1326 audit(1780866037.328:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.176657][ T29] audit: type=1326 audit(1780866037.328:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.223783][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 566.230952][ T29] audit: type=1326 audit(1780866037.328:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22045 comm="syz.1.7121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 566.257214][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.297410][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.336273][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.355427][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.381418][ T24] usb 1-1: Product: syz [ 566.400973][ T24] usb 1-1: Manufacturer: syz [ 566.409458][ T24] usb 1-1: SerialNumber: syz [ 566.444990][ T24] usb 1-1: 0:2 : does not exist [ 566.452035][ T24] usb 1-1: unit 9 not found! [ 566.493682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.734011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.053829][ C0] syz_tun: tun_net_xmit 42 [ 567.056318][ T24] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 567.154591][ T24] usb 1-1: USB disconnect, device number 52 [ 567.203762][T15807] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 567.376116][T15807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.387744][T15807] usb 4-1: config 0 has no interfaces? [ 567.393331][T15807] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 567.405787][T15807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.421942][T15807] usb 4-1: config 0 descriptor?? [ 567.758815][T22075] tipc: Started in network mode [ 567.764997][T22075] tipc: Node identity ac14142f, cluster identity 4711 [ 567.771864][T22075] tipc: Enabling of bearer rejected, failed to enable media [ 567.784143][ T24] usb 4-1: USB disconnect, device number 52 [ 567.944518][ T5756] net_ratelimit: 1 callbacks suppressed [ 567.944536][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.057493][ T29] audit: type=1326 audit(1780866039.388:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22097 comm="syz.0.7145" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf01c code=0x0 [ 568.094210][ C0] syz_tun: tun_net_xmit 42 [ 568.133972][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.154380][ T5713] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 568.325383][ T5713] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.338653][ T5713] usb 3-1: config 0 has no interface number 0 [ 568.357436][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 568.396100][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 568.422089][ T5713] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 568.439204][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.470449][ T5713] usb 3-1: config 0 descriptor?? [ 568.496794][T22093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 568.521421][ T5713] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 568.549956][ T57] tipc: Left network mode [ 568.818506][ T5713] usb 3-1: USB disconnect, device number 39 [ 568.973799][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.044736][T22118] netlink: 'syz.0.7154': attribute type 3 has an invalid length. [ 569.076321][T22118] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7154'. [ 569.133729][ C0] syz_tun: tun_net_xmit 42 [ 569.427058][T22132] netlink: 'syz.3.7160': attribute type 11 has an invalid length. [ 569.917179][T22147] netlink: 'syz.2.7167': attribute type 1 has an invalid length. [ 569.942359][T22147] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7167'. [ 570.025615][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.173787][ C0] syz_tun: tun_net_xmit 42 [ 570.886068][T22176] tunl0: Caught tx_queue_len zero misconfig [ 571.003740][ T5713] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 571.054027][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.176616][ T5713] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 571.185915][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 571.214234][ C0] syz_tun: tun_net_xmit 42 [ 571.219635][ T5713] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.224604][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.244433][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 571.270735][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 571.293815][ T5693] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 571.301614][ T5713] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 571.314480][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 571.326080][ T5713] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.344292][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 571.366168][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 571.394792][ T5713] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 571.409191][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 571.433192][ T5713] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.455957][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 571.465963][ T5693] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 571.468444][ T5713] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 571.488973][ T5693] usb 4-1: config 0 interface 0 has no altsetting 0 [ 571.492879][ T5713] usb 3-1: string descriptor 0 read error: -22 [ 571.502383][ T5713] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 571.507436][ T5693] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 571.512773][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.529198][T22191] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.530006][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 571.560965][ T5693] usb 4-1: Product: syz [ 571.569352][ T5693] usb 4-1: Manufacturer: syz [ 571.579517][ T5693] usb 4-1: SerialNumber: syz [ 571.581451][ T5713] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 571.608076][ T5693] usb 4-1: config 0 descriptor?? [ 571.652067][ T5693] usb 4-1: selecting invalid altsetting 0 [ 571.872763][ T5693] usb 3-1: USB disconnect, device number 40 [ 571.883723][ T5713] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 571.938916][ T24] usb 4-1: USB disconnect, device number 53 [ 572.064388][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 572.096742][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.109557][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.122847][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.137486][ T5713] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 572.148701][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.169633][ T5713] usb 5-1: config 0 descriptor?? [ 572.253704][ C0] syz_tun: tun_net_xmit 42 [ 572.303732][ T5700] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 572.455618][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.483705][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.497316][ T5700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.523737][ T5700] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.543715][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.565474][ T5700] usb 1-1: config 0 descriptor?? [ 572.629600][ T5713] savu 0003:1E7D:2D5A.004C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 572.906428][T15807] usb 5-1: USB disconnect, device number 57 [ 572.994164][ T5700] plantronics 0003:047F:FFFF.004D: reserved main item tag 0xd [ 573.004866][ T5693] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 573.031289][ T5700] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 573.059178][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.134613][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.175802][ T5693] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 573.186670][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.199190][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.209132][ T5693] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 573.226250][ T5693] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 573.235615][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.255622][ T5693] usb 3-1: config 0 descriptor?? [ 573.295568][ C0] syz_tun: tun_net_xmit 42 [ 573.306584][ T5713] usb 1-1: USB disconnect, device number 53 [ 573.523084][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7204'. [ 573.680191][ T5693] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 573.691951][ T5693] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 573.719252][ T5693] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 573.803732][ T5700] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 573.945426][ T5693] usb 3-1: USB disconnect, device number 41 [ 573.957895][ T5700] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.989788][ T5700] usb 5-1: config 0 has no interfaces? [ 574.007187][ T5700] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 574.027173][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.065792][ T5700] usb 5-1: config 0 descriptor?? [ 574.093694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.174048][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.254622][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.334792][ C0] syz_tun: tun_net_xmit 42 [ 574.391900][T22216] tipc: Started in network mode [ 574.400252][T22216] tipc: Node identity ac14142f, cluster identity 4711 [ 574.408737][T22216] tipc: Enabling of bearer rejected, failed to enable media [ 574.439137][ T5693] usb 5-1: USB disconnect, device number 58 [ 574.773717][ T5756] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 574.853001][T22247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7208'. [ 574.862312][T22247] bond0: ARP target 170.170.170.170 is already present [ 574.869864][T22247] bond0: option arp_ip_target: invalid value (2863311530) [ 574.945952][ T5756] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 574.961488][ T5756] usb 3-1: config 0 interface 0 has no altsetting 0 [ 574.971987][ T5756] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.987649][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 574.997743][ T5756] usb 3-1: Product: syz [ 575.002364][ T5756] usb 3-1: Manufacturer: syz [ 575.007580][ T5756] usb 3-1: SerialNumber: syz [ 575.017834][ T5693] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 575.034930][ T5756] usb 3-1: config 0 descriptor?? [ 575.081904][ T5756] usb 3-1: selecting invalid altsetting 0 [ 575.134115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.184750][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 575.193210][ T5693] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 575.208883][ T5693] usb 2-1: config 0 has no interface number 0 [ 575.224555][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.235180][ T5693] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 575.244652][ T145] tipc: Left network mode [ 575.246815][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.257995][ T5693] usb 2-1: Product: syz [ 575.287764][ T5693] usb 2-1: Manufacturer: syz [ 575.292506][ T5693] usb 2-1: SerialNumber: syz [ 575.338751][ T5693] usb 2-1: config 0 descriptor?? [ 575.371740][ T5693] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 575.380821][ C0] syz_tun: tun_net_xmit 42 [ 575.404328][ T5700] usb 3-1: USB disconnect, device number 42 [ 575.605037][ T5693] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 575.628129][T22267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7216'. [ 575.649464][ T5693] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 575.901483][T22273] syzkaller1: entered promiscuous mode [ 575.908882][T22273] syzkaller1: entered allmulticast mode [ 576.041672][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 576.042129][ T24] usb 2-1: USB disconnect, device number 66 [ 576.120558][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 576.125961][T22280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.143441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.174029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.193294][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 576.226746][ T24] quatech2 2-1:0.51: device disconnected [ 576.325962][T22283] geneve2: entered promiscuous mode [ 576.413780][ C0] syz_tun: tun_net_xmit 42 [ 576.805604][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7230'. [ 576.869786][T22307] binder: 22306:22307 ioctl c0306201 800003c0 returned -22 [ 576.987173][T22315] bridge: RTM_NEWNEIGH with invalid ether address [ 576.997537][T22315] bridge: RTM_NEWNEIGH with invalid ether address [ 577.113701][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 577.277964][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 577.289865][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 577.315650][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.326845][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 577.350000][ T24] usb 5-1: Product: syz [ 577.360160][ T24] usb 5-1: Manufacturer: syz [ 577.372673][ T24] usb 5-1: SerialNumber: syz [ 577.388727][ T24] usb 5-1: config 0 descriptor?? [ 577.410017][ T24] usb 5-1: selecting invalid altsetting 0 [ 577.454082][ C0] syz_tun: tun_net_xmit 42 [ 577.653887][ T5700] usb 5-1: USB disconnect, device number 59 [ 577.723553][T22347] syzkaller1: entered promiscuous mode [ 577.737170][T22352] Invalid argument reading file caps for ./file0 [ 577.787441][T22347] syzkaller1: entered allmulticast mode [ 577.889763][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7252'. [ 578.253683][ C0] net_ratelimit: 4 callbacks suppressed [ 578.253699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.343967][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.493725][ C0] syz_tun: tun_net_xmit 42 [ 578.567617][T22384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.656111][ T5713] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 578.826068][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 578.846108][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.878732][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.892104][T22396] syzkaller1: entered promiscuous mode [ 578.899706][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 578.920379][ T5713] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.922819][T22396] syzkaller1: entered allmulticast mode [ 578.932638][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.993103][ T5713] usb 1-1: config 0 descriptor?? [ 579.293909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.375694][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.443335][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.483147][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.497770][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.535411][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.541438][ C0] syz_tun: tun_net_xmit 42 [ 579.556705][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.582999][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.614426][ T5713] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 579.648941][ T5713] microsoft 0003:045E:07DA.004F: unbalanced collection at end of report description [ 579.680049][ T5713] microsoft 0003:045E:07DA.004F: parse failed [ 579.704070][ T5713] microsoft 0003:045E:07DA.004F: probe with driver microsoft failed with error -22 [ 579.735695][ T5713] usb 1-1: USB disconnect, device number 54 [ 580.271516][T22432] syzkaller1: entered promiscuous mode [ 580.288703][T22432] syzkaller1: entered allmulticast mode [ 580.334019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.342572][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.417987][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.574068][ C0] syz_tun: tun_net_xmit 42 [ 580.726351][ T5693] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 580.883706][ T5693] usb 1-1: Using ep0 maxpacket: 8 [ 580.898188][ T5693] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 580.912227][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.924332][ T5700] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 580.947752][ T5693] pvrusb2: Hardware description: Terratec Grabster AV400 [ 580.960999][ T5693] pvrusb2: ********** [ 580.966692][ T5693] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 580.978862][ T5693] pvrusb2: Important functionality might not be entirely working. [ 580.988561][ T5693] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 581.001298][ T5693] pvrusb2: ********** [ 581.053821][T15807] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 581.086494][ T5700] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 581.108542][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 581.137772][ T5700] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.165648][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.170157][ T2361] pvrusb2: Invalid write control endpoint [ 581.174158][ T5700] usb 5-1: Product: syz [ 581.193674][ T5700] usb 5-1: Manufacturer: syz [ 581.200612][ T5700] usb 5-1: SerialNumber: syz [ 581.219359][T15807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 581.238095][T15807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.273743][T15807] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 581.295622][T15807] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 581.322317][T15807] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 581.336999][T15807] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 581.339795][ T2361] pvrusb2: Invalid write control endpoint [ 581.355920][T15807] usb 2-1: config 1 interface 1 has no altsetting 0 [ 581.373804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.374491][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 581.401681][T15807] usb 2-1: string descriptor 0 read error: -22 [ 581.411972][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 581.415571][T15807] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 581.432295][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 581.443476][T15807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.454538][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.464528][ T2361] pvrusb2: Device being rendered inoperable [ 581.475278][T22446] pvrusb2: Attempted to execute control transfer when device not ok [ 581.504610][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 581.506242][ T10] usb 1-1: USB disconnect, device number 55 [ 581.513317][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 581.543398][ T2361] pvrusb2: Attached sub-driver cx25840 [ 581.572050][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 581.583243][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 581.610023][T22477] netlink: 'syz.2.7306': attribute type 29 has an invalid length. [ 581.615502][ C0] syz_tun: tun_net_xmit 42 [ 581.619813][T22477] netlink: 'syz.2.7306': attribute type 29 has an invalid length. [ 581.634538][T22477] netlink: 592 bytes leftover after parsing attributes in process `syz.2.7306'. [ 581.646415][T22477] unsupported nla_type 58 [ 581.725318][T22481] syzkaller1: entered promiscuous mode [ 581.731142][T22481] syzkaller1: entered allmulticast mode [ 581.887849][T15807] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 581.903693][T15807] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 581.913251][T15807] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 582.238183][ T5700] cdc_ncm 5-1:1.0: bind() failure [ 582.247829][ T5700] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 582.256724][ T5700] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 582.266253][ T5700] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 582.280106][ T5700] usb 5-1: USB disconnect, device number 60 [ 582.363836][T15807] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 582.392408][T15807] usb 2-1: USB disconnect, device number 67 [ 582.653952][ C0] syz_tun: tun_net_xmit 42 [ 582.985757][T22489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7309'. [ 583.183709][T15807] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 583.204141][ T5756] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 583.205105][ T5700] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 583.347389][T15807] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 583.368362][ T5756] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 583.374020][T15807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 583.381719][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.388073][ T5700] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.392673][ T5756] usb 1-1: Product: syz [ 583.400914][ T10] net_ratelimit: 1 callbacks suppressed [ 583.400929][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.418893][ T5756] usb 1-1: Manufacturer: syz [ 583.425541][ T5756] usb 1-1: SerialNumber: syz [ 583.426960][ T5700] usb 4-1: config 0 has no interface number 0 [ 583.442242][ T5756] usb 1-1: config 0 descriptor?? [ 583.444520][ T5700] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 583.456179][ T5756] hub 1-1:0.0: bad descriptor, ignoring hub [ 583.458561][T15807] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.474689][ T5756] hub 1-1:0.0: probe with driver hub failed with error -5 [ 583.475276][T15807] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 583.491820][ T5700] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 583.514988][T15807] usb 2-1: Product: syz [ 583.519264][ T5700] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 583.528406][T15807] usb 2-1: Manufacturer: syz [ 583.533051][T15807] usb 2-1: SerialNumber: syz [ 583.537777][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.545993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.558712][T15807] usb 2-1: config 0 descriptor?? [ 583.559069][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.572806][ T5700] usb 4-1: config 0 descriptor?? [ 583.573849][T22490] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 583.589890][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.601123][ T5700] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 583.613519][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.620632][T15807] usb 2-1: selecting invalid altsetting 0 [ 583.667058][ T5756] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 583.694038][ C0] syz_tun: tun_net_xmit 42 [ 583.702707][ T5756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.728918][ T5756] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 583.755930][ T5756] usb 1-1: media controller created [ 583.812287][ T5756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.940646][ T5756] DVB: Unable to find symbol dib7000p_attach() [ 583.949549][ T5756] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 583.969328][ T5700] usb 2-1: USB disconnect, device number 68 [ 584.013200][T15807] usb 4-1: USB disconnect, device number 54 [ 584.101906][ T5756] rc_core: IR keymap rc-dib0700-rc5 not found [ 584.128491][ T5756] Registered IR keymap rc-empty [ 584.165372][ T5756] dvb-usb: could not initialize remote control. [ 584.197917][ T5756] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 584.232725][ T5756] usb 1-1: USB disconnect, device number 56 [ 584.300144][ T5756] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 584.449027][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7322'. [ 584.574555][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.654189][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.666721][T22535] ªªªªªª: renamed from wg2 (while UP) [ 584.733682][ C0] syz_tun: tun_net_xmit 42 [ 585.614121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.696465][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.773831][ C0] syz_tun: tun_net_xmit 42 [ 585.783831][ T5756] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 585.967481][ T5756] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 585.994965][ T5756] usb 4-1: config 0 interface 0 has no altsetting 0 [ 586.009559][ T5756] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 586.040316][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 586.067221][ T5756] usb 4-1: Product: syz [ 586.084608][ T5756] usb 4-1: Manufacturer: syz [ 586.093315][ T5756] usb 4-1: SerialNumber: syz [ 586.109458][ T5756] usb 4-1: config 0 descriptor?? [ 586.127640][ T5756] usb 4-1: selecting invalid altsetting 0 [ 586.249023][T22578] bond4 (unregistering): Released all slaves [ 586.409879][ T5756] usb 4-1: USB disconnect, device number 55 [ 586.414689][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.485617][T22587] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7349'. [ 586.814247][ C0] syz_tun: tun_net_xmit 42 [ 587.434752][ T5756] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 587.639847][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 587.652132][ T5756] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.655320][ T5700] IPVS: starting estimator thread 0... [ 587.672777][ T5756] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.719848][ T5756] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 587.742465][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.778619][ T5756] usb 5-1: Product: syz [ 587.796114][ T5756] usb 5-1: Manufacturer: syz [ 587.803697][T22621] IPVS: using max 39 ests per chain, 93600 per kthread [ 587.807200][ T5756] usb 5-1: SerialNumber: syz [ 587.853713][ C0] syz_tun: tun_net_xmit 42 [ 587.867566][ T5756] usb 5-1: unit 3 not found! [ 587.886036][ T5756] usb 5-1: unit 7 not found! [ 587.962147][T22625] binder: 22624:22625 ioctl c0306201 800003c0 returned -14 [ 588.087763][ T5756] usb 5-1: unit 0 not found! [ 588.244346][ T5756] usb 5-1: USB disconnect, device number 61 [ 588.320402][T14763] udevd[14763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.575352][T15807] net_ratelimit: 9 callbacks suppressed [ 588.575370][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.602075][T22645] netlink: 'syz.1.7370': attribute type 29 has an invalid length. [ 588.670846][T22645] netlink: 'syz.1.7370': attribute type 29 has an invalid length. [ 588.688140][T22646] netlink: 592 bytes leftover after parsing attributes in process `syz.1.7370'. [ 588.733672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.814257][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.895391][ C0] syz_tun: tun_net_xmit 42 [ 589.098184][T22662] ªªªªªª: renamed from wg2 (while UP) [ 589.174036][T15807] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 589.243932][ T5756] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 589.336311][T15807] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 589.368320][T15807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 589.379709][T15807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 589.394487][T15807] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 589.404034][T15807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.412087][T15807] usb 5-1: Product: syz [ 589.416715][T15807] usb 5-1: Manufacturer: syz [ 589.421809][T15807] usb 5-1: SerialNumber: syz [ 589.423700][ T5756] usb 3-1: Using ep0 maxpacket: 8 [ 589.440946][T15807] usb 5-1: config 0 descriptor?? [ 589.446844][ T5756] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 589.454024][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.464198][ T5756] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.477344][ T5756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 589.489536][ T5756] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 589.506111][ T5756] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 589.516012][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.525098][ T5756] usb 3-1: Product: syz [ 589.529376][ T5756] usb 3-1: Manufacturer: syz [ 589.535386][ T5756] usb 3-1: SerialNumber: syz [ 589.545854][ T5756] usb 3-1: config 0 descriptor?? [ 589.551656][T22658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 589.613951][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.683172][T22674] IPv6: NLM_F_CREATE should be specified when creating new route [ 589.719657][T22674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.726972][T22674] IPv6: NLM_F_CREATE should be set when creating new route [ 589.740732][T22677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.748086][T22677] IPv6: NLM_F_CREATE should be set when creating new route [ 589.773705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.793059][ T5756] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 589.822327][ T5756] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input76 [ 589.854836][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.934140][ C0] syz_tun: tun_net_xmit 42 [ 590.139767][T22683] binder: 22682:22683 ioctl c0306201 800003c0 returned -14 [ 590.175409][ C1] powermate: config urb returned -71 [ 590.179556][ T10] usb 3-1: USB disconnect, device number 43 [ 590.180781][ C1] powermate: usb_submit_urb(config) failed [ 590.187051][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 590.343945][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.443342][T22696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.452748][T22696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.973711][ C0] syz_tun: tun_net_xmit 42 [ 591.083788][ T5700] usb 4-1: new low-speed USB device number 56 using dummy_hcd [ 591.282405][ T5700] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 591.316262][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 591.370310][ T5700] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.443743][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 591.480058][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 591.495116][ T5700] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 591.502748][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 591.525917][ T5700] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.564055][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 591.601325][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 591.644630][ T5700] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 591.652470][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 591.671179][ T5700] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.683413][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 591.703445][ T5700] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 591.719299][ T5700] usb 4-1: string descriptor 0 read error: -22 [ 591.726187][ T5700] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 591.762281][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.841829][ T5700] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 592.013785][ C0] syz_tun: tun_net_xmit 42 [ 592.196464][T22734] input: syz1 as /devices/virtual/input/input77 [ 592.217513][ T5700] usb 4-1: USB disconnect, device number 56 [ 593.054119][ C0] syz_tun: tun_net_xmit 42 [ 593.144602][ T5724] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 593.324726][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 593.335752][ T5724] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 593.353716][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.381665][ T5724] pvrusb2: Hardware description: Terratec Grabster AV400 [ 593.398004][ T5724] pvrusb2: ********** [ 593.405837][ T5724] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 593.416445][ T5724] pvrusb2: Important functionality might not be entirely working. [ 593.424389][ T5724] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 593.436473][ T5724] pvrusb2: ********** [ 593.600465][ T2361] pvrusb2: Invalid write control endpoint [ 593.667842][ T2361] pvrusb2: Invalid write control endpoint [ 593.690813][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 593.718063][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 593.733026][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 593.746907][T22776] trusted_key: syz.1.7420 sent an empty control message without MSG_MORE. [ 593.754665][ T2361] pvrusb2: Device being rendered inoperable [ 593.762242][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 593.772359][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 593.782150][ T5693] net_ratelimit: 1039 callbacks suppressed [ 593.782168][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.799379][ T2361] pvrusb2: Attached sub-driver cx25840 [ 593.815378][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 593.826109][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 593.842425][T22760] pvrusb2: Attempted to execute control transfer when device not ok [ 593.869308][ T5724] usb 4-1: USB disconnect, device number 57 [ 594.014345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.093748][ C0] syz_tun: tun_net_xmit 42 [ 594.143786][ T5700] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 594.294250][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 594.301161][ T5700] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 594.309601][ T5700] usb 1-1: config 0 has no interface number 0 [ 594.318003][ T5700] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 594.327305][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.335720][ T5700] usb 1-1: Product: syz [ 594.339934][ T5700] usb 1-1: Manufacturer: syz [ 594.344733][ T5700] usb 1-1: SerialNumber: syz [ 594.351734][ T5700] usb 1-1: config 0 descriptor?? [ 594.504045][ T5693] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 594.655764][ T5693] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 594.663346][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 594.674292][ T5693] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.686057][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 594.697346][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 594.710128][ T5693] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 594.717914][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 594.728922][ T5693] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.741154][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 594.752493][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 594.763963][ T5700] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 594.775188][ T5700] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 594.785475][ T5693] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 594.793055][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 594.804131][ T5693] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 594.817956][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.826311][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 594.838108][ T5693] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 594.852880][ T5693] usb 2-1: string descriptor 0 read error: -22 [ 594.859693][ T5693] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 594.869042][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.889089][ T5693] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 595.054155][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.133742][ C0] syz_tun: tun_net_xmit 42 [ 595.173974][ T5724] usb 2-1: USB disconnect, device number 69 [ 595.207407][ T5700] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 595.221688][ T5700] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 595.235450][ T5700] usb 1-1: USB disconnect, device number 57 [ 595.454444][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.852268][ T29] audit: type=1326 audit(1780866067.178:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 595.854301][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.898689][ T5724] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 595.941792][ T29] audit: type=1326 audit(1780866067.178:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 595.980299][ T29] audit: type=1326 audit(1780866067.218:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.039816][ T29] audit: type=1326 audit(1780866067.218:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.072085][ T29] audit: type=1326 audit(1780866067.228:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.097236][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.111258][ T29] audit: type=1326 audit(1780866067.228:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.142078][ T29] audit: type=1326 audit(1780866067.228:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.168050][ T5724] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 596.174089][ C0] syz_tun: tun_net_xmit 42 [ 596.179867][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 596.206365][ T5724] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 596.217478][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 596.248688][ T5724] usb 4-1: Product: syz [ 596.258973][ T5724] usb 4-1: Manufacturer: syz [ 596.269460][ T29] audit: type=1326 audit(1780866067.228:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.299375][ T5724] usb 4-1: SerialNumber: syz [ 596.317325][ T29] audit: type=1326 audit(1780866067.228:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.344903][ T5724] usb 4-1: config 0 descriptor?? [ 596.377665][ T5724] usb 4-1: selecting invalid altsetting 0 [ 596.417139][ T29] audit: type=1326 audit(1780866067.228:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22809 comm="syz.0.7437" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 596.442090][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.493903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.683098][ T5724] usb 4-1: USB disconnect, device number 58 [ 596.736591][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.213695][ C0] syz_tun: tun_net_xmit 42 [ 597.603897][ T5724] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 597.775304][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 597.788147][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.809109][ T5724] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 597.844445][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.871738][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 597.890060][ T5724] usb 1-1: config 0 descriptor?? [ 597.910044][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 597.939766][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 597.960937][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 597.973644][T22854] loop8: detected capacity change from 0 to 1 [ 597.981410][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 597.984305][T22854] Dev loop8: unable to read RDB block 1 [ 597.992554][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 597.998472][T22854] loop8: unable to read partition table [ 598.011560][T22854] loop8: partition table beyond EOD, truncated [ 598.018884][T22854] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 598.028521][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 598.055874][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 598.070715][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 598.099889][T22852] netlink: 'syz.1.7452': attribute type 3 has an invalid length. [ 598.131563][ T5724] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 598.253813][ C0] syz_tun: tun_net_xmit 42 [ 598.334952][ T5713] usb 1-1: USB disconnect, device number 58 [ 598.576432][ T5724] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 598.753811][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 598.770790][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 598.782180][ T5724] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 598.790197][ T5724] usb 2-1: can't read configurations, error -71 [ 598.929690][ T5713] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 598.973735][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 598.973928][ T5700] net_ratelimit: 7 callbacks suppressed [ 598.973953][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.103769][ T5713] usb 3-1: Using ep0 maxpacket: 16 [ 599.125926][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.144184][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.155686][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 599.162078][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 599.177781][ T5713] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 599.188825][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 599.201962][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 599.215711][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.224035][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.234811][ T24] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 599.245017][ T5713] usb 3-1: config 0 descriptor?? [ 599.251074][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.271727][ T24] usb 4-1: config 0 descriptor?? [ 599.294213][ C0] syz_tun: tun_net_xmit 42 [ 599.454283][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.518494][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 599.538135][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 599.550477][ T24] usb 4-1: USB disconnect, device number 59 [ 599.622106][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805434bc00: rx timeout, send abort [ 599.633298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.709366][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0050/input/input78 [ 599.935963][T15807] iguanair 5-1:0.0: failed to get version [ 599.946697][ T5713] microsoft 0003:045E:07DA.0050: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 599.951993][T15807] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 599.999384][ T5713] usb 3-1: USB disconnect, device number 44 [ 600.013887][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.049935][T15807] usb 5-1: USB disconnect, device number 62 [ 600.125028][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054348c00: rx timeout, send abort [ 600.133741][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805434bc00: abort rx timeout. Force session deactivation [ 600.138885][T22908] fido_id[22908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 600.259377][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.333752][ C0] syz_tun: tun_net_xmit 42 [ 600.633341][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054348c00: abort rx timeout. Force session deactivation [ 600.653760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.676192][T15807] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 600.833708][ T5693] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 600.847053][T15807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 600.863400][T15807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.874077][T15807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.887555][T15807] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 600.896728][T15807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.909624][T15807] usb 5-1: config 0 descriptor?? [ 601.003683][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 601.010689][ T5693] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 601.019493][ T5693] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 601.029409][ T5693] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 601.039496][ T5693] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 601.049695][ T5693] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.063033][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.071426][ T5693] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 601.080684][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.294641][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.307419][ T5693] usb 4-1: GET_CAPABILITIES returned 0 [ 601.312973][ T5693] usbtmc 4-1:16.0: can't read capabilities [ 601.337559][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.351104][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.358925][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.366714][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.374742][ C0] syz_tun: tun_net_xmit 42 [ 601.382205][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.389965][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.399729][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.407466][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.416450][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.424538][T15807] hid-multitouch 0003:0457:07DA.0051: unknown main item tag 0x0 [ 601.441885][T15807] hid-multitouch 0003:0457:07DA.0051: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 601.551457][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.560973][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.570100][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.582540][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.591685][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.600801][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.609918][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.625100][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.634243][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.643354][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.652465][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.690624][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.699758][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.708855][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.717943][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.727432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.736315][T15807] usb 5-1: USB disconnect, device number 63 [ 601.737135][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.785192][ T5713] usb 4-1: USB disconnect, device number 60 [ 602.290318][T22972] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 602.301819][T22972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 602.309016][T22972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.325121][T22972] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.348854][T22972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.355064][T22972] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 602.383698][T22972] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 602.414050][ C0] syz_tun: tun_net_xmit 42 [ 602.469771][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7498'. [ 602.610937][T22988] loop8: detected capacity change from 0 to 7 [ 602.630639][T22988] Dev loop8: unable to read RDB block 7 [ 602.659609][T22988] loop8: unable to read partition table [ 602.680753][T22988] loop8: partition table beyond EOD, truncated [ 602.699829][T22988] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 603.123672][ T5713] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 603.293679][ T5713] usb 3-1: Using ep0 maxpacket: 8 [ 603.306628][ T5713] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 603.325850][ T5713] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.336180][ T5713] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.357077][ T5713] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.379079][ T5713] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.414026][ T5713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 603.433367][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.453752][ C0] syz_tun: tun_net_xmit 42 [ 603.667371][ T5713] usb 3-1: GET_CAPABILITIES returned 0 [ 603.690162][ T5713] usbtmc 3-1:16.0: can't read capabilities [ 603.931265][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 603.940431][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 603.949538][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 603.958648][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 603.971309][T23034] team_slave_1: Caught tx_queue_len zero misconfig [ 603.979979][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 603.989109][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 603.998215][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.007323][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.018631][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.027752][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.036822][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.045878][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.057059][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.066189][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.075289][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.084385][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 604.111856][ T5713] usb 3-1: USB disconnect, device number 45 [ 604.174496][ T5700] net_ratelimit: 14 callbacks suppressed [ 604.174513][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.338432][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 604.344535][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.344572][ T5640] Bluetooth: hci1: command 0x0c1a tx timeout [ 604.344594][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.414386][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.422954][T23043] Bluetooth: hci4: command 0x0c1a tx timeout [ 604.493772][ C0] syz_tun: tun_net_xmit 42 [ 604.975003][ T5713] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 605.153671][ T5713] usb 4-1: Using ep0 maxpacket: 8 [ 605.163142][ T5713] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 605.173266][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.182488][ T5713] usb 4-1: Product: syz [ 605.190627][ T5713] usb 4-1: Manufacturer: syz [ 605.196635][ T5713] usb 4-1: SerialNumber: syz [ 605.210763][ T5713] usb 4-1: config 0 descriptor?? [ 605.213810][ T5700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.223168][ T5713] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 605.456959][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.521328][T23088] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 605.533982][ C0] syz_tun: tun_net_xmit 42 [ 605.538722][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.750562][T23100] input: syz1 as /devices/virtual/input/input80 [ 606.063125][T23115] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7542'. [ 606.253584][ T5713] gspca_sonixj: reg_w1 err -71 [ 606.253955][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.334184][ T5713] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 606.337077][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.344597][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.352024][ T5700] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 606.380281][ T5713] usb 4-1: USB disconnect, device number 61 [ 606.426466][T23132] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20001 [ 606.495031][T23043] Bluetooth: hci4: command 0x0c1a tx timeout [ 606.495803][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.513730][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 606.520061][ T5700] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 606.529121][ T5700] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.539143][ T5700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 606.549024][ T5700] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.559010][ T5700] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.572093][ T5700] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 606.581295][ C0] syz_tun: tun_net_xmit 42 [ 606.588666][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.623730][ T5756] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 606.773703][ T5756] usb 2-1: Using ep0 maxpacket: 8 [ 606.780254][ T5756] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 606.792421][ T5756] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 606.807409][ T5756] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.807650][ T5700] usb 5-1: GET_CAPABILITIES returned 0 [ 606.817663][ T5756] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.836479][ T5756] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.847873][ T5756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.868036][ T5700] usbtmc 5-1:16.0: can't read capabilities [ 606.902220][T23134] validate_nla: 43 callbacks suppressed [ 606.902347][T23134] netlink: 'syz.2.7565': attribute type 5 has an invalid length. [ 606.996869][T23138] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.006905][T23138] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.084007][ T5756] usb 2-1: GET_CAPABILITIES returned 0 [ 607.106018][ T5756] usbtmc 2-1:16.0: can't read capabilities [ 607.167654][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.176794][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.185856][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.194907][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.212846][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.221977][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.231039][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.240098][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.263872][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.272999][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.289089][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.298228][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.307332][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.324015][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.324783][T23144] netlink: 'syz.2.7559': attribute type 13 has an invalid length. [ 607.333143][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.350381][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.362638][ T5700] usb 5-1: USB disconnect, device number 64 [ 607.373701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.401356][T15807] usb 2-1: USB disconnect, device number 72 [ 607.572706][T23153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7561'. [ 607.608757][T23155] syzkaller1: entered promiscuous mode [ 607.614722][ C0] syz_tun: tun_net_xmit 42 [ 607.627261][T23155] syzkaller1: entered allmulticast mode [ 608.203987][ T5713] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 608.313454][T23182] team_slave_1: Caught tx_queue_len zero misconfig [ 608.374429][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 608.399448][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.427118][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.463847][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 608.489726][ T5713] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 608.500469][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.512386][ T5713] usb 1-1: config 0 descriptor?? [ 608.576291][T23043] Bluetooth: hci4: command 0x0c1a tx timeout [ 608.653919][ C0] syz_tun: tun_net_xmit 42 [ 608.734208][ T5700] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 608.895644][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 608.911875][ T5700] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 608.920629][ T5700] usb 3-1: config 0 has no interface number 0 [ 608.930950][ T5700] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 608.941436][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.953866][ T5700] usb 3-1: Product: syz [ 608.956234][ T5713] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0052/input/input82 [ 608.958119][ T5700] usb 3-1: Manufacturer: syz [ 608.988260][ T5700] usb 3-1: SerialNumber: syz [ 608.996184][ T5700] usb 3-1: config 0 descriptor?? [ 609.003402][ T5700] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 609.042799][ T5713] microsoft 0003:045E:07DA.0052: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 609.061714][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 609.114057][T15807] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 609.194591][ T5713] usb 1-1: USB disconnect, device number 59 [ 609.221969][ T5700] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 609.237687][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 609.246984][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.262100][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.273264][ T5700] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 609.286844][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 609.296197][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.306297][T15807] usb 2-1: Using ep0 maxpacket: 8 [ 609.314117][T15807] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 609.322680][T15807] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.332651][T15807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.343995][T15807] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.355193][ T10] usb 4-1: config 0 descriptor?? [ 609.360431][T15807] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.374205][T15807] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.386735][T15807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.453966][ C0] net_ratelimit: 12 callbacks suppressed [ 609.453987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.604065][T15807] usb 2-1: GET_CAPABILITIES returned 0 [ 609.609717][T15807] usbtmc 2-1:16.0: can't read capabilities [ 609.624322][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.669728][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 609.679008][T15807] usb 3-1: USB disconnect, device number 46 [ 609.688772][T15807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 609.700017][ C0] syz_tun: tun_net_xmit 42 [ 609.712433][T15807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 609.734772][T15807] quatech2 3-1:0.51: device disconnected [ 609.797119][ T10] savu 0003:1E7D:2D5A.0053: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 609.836930][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.846091][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.855200][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.864299][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.891723][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.900862][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.909949][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.919008][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.936065][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.936121][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.953680][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.962813][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.971906][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.980980][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.995281][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 609.999406][T15807] usb 4-1: USB disconnect, device number 62 [ 610.004422][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 610.004473][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 610.046472][ T5713] usb 2-1: USB disconnect, device number 73 [ 610.175593][T23208] sctp: [Deprecated]: syz.0.7587 (pid 23208) Use of int in max_burst socket option deprecated. [ 610.175593][T23208] Use struct sctp_assoc_value instead [ 610.493693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.655009][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.670011][T23220] netlink: 'syz.3.7594': attribute type 8 has an invalid length. [ 610.678444][T23220] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 610.733768][ C0] syz_tun: tun_net_xmit 42 [ 610.949166][T23237] pim6reg: entered allmulticast mode [ 610.964406][T23237] pim6reg: left allmulticast mode [ 610.977012][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.120715][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 611.120730][ T29] audit: type=1326 audit(1780866082.448:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23241 comm="syz.0.7603" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf01c code=0x0 [ 611.533695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.626503][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.694119][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.774051][ C0] syz_tun: tun_net_xmit 42 [ 611.971096][T23250] loop8: detected capacity change from 0 to 7 [ 611.995629][T23250] Dev loop8: unable to read RDB block 7 [ 612.025788][T23250] loop8: unable to read partition table [ 612.036087][T23250] loop8: partition table beyond EOD, truncated [ 612.050584][T23250] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 612.194169][ T5756] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 612.353804][T15807] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 612.373803][ T5756] usb 1-1: Using ep0 maxpacket: 8 [ 612.381098][ T5756] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 612.389688][ T5756] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 612.400653][ T5756] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 612.410583][ T5756] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 612.420654][ T5756] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.433820][ T5756] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 612.442877][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.505870][T15807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.516947][T15807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.527007][T15807] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.540173][T15807] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.549361][T15807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.559641][T15807] usb 5-1: config 0 descriptor?? [ 612.659456][ T5756] usb 1-1: GET_CAPABILITIES returned 0 [ 612.665063][ T5756] usbtmc 1-1:16.0: can't read capabilities [ 612.813688][ C0] syz_tun: tun_net_xmit 42 [ 612.875611][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.884711][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.893777][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.902837][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.911880][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.920923][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.930345][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.939475][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.948538][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.957639][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.968690][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.977815][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.986902][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 612.995986][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 613.005629][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 613.014758][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 613.031936][T15807] plantronics 0003:047F:FFFF.0054: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 613.051499][T15807] usb 1-1: USB disconnect, device number 60 [ 613.212450][ T5756] usb 5-1: USB disconnect, device number 65 [ 613.853854][ C0] syz_tun: tun_net_xmit 42 [ 614.014165][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.023786][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.613695][ T5713] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 614.653679][ C0] net_ratelimit: 12 callbacks suppressed [ 614.653698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.655003][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.786064][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.811879][ T5713] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 614.821776][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.833442][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.866032][ T5713] usb 3-1: config 0 descriptor?? [ 614.894067][ C0] syz_tun: tun_net_xmit 42 [ 615.030940][ T5756] hid_parser_main: 24 callbacks suppressed [ 615.030959][ T5756] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 615.088877][ T5756] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 615.133901][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.317199][ T5713] keytouch 0003:0926:3333.0056: fixing up Keytouch IEC report descriptor [ 615.348424][ T5713] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0056/input/input84 [ 615.513292][ T5713] keytouch 0003:0926:3333.0056: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 615.854145][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.933731][ C0] syz_tun: tun_net_xmit 42 [ 616.174403][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.323696][T15807] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 616.496866][T15807] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.508054][T15807] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 616.518134][T15807] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.535673][T15807] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.545080][T15807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.553219][T15807] usb 5-1: Product: syz [ 616.557593][T15807] usb 5-1: Manufacturer: syz [ 616.562513][T15807] usb 5-1: SerialNumber: syz [ 616.757232][ T29] audit: type=1326 audit(1780866088.088:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 616.792214][ T29] audit: type=1326 audit(1780866088.088:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 616.819374][T23342] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 616.828077][ T29] audit: type=1326 audit(1780866088.088:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 616.875283][ T29] audit: type=1326 audit(1780866088.088:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 616.905876][ T29] audit: type=1326 audit(1780866088.088:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 616.916988][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.932768][ T29] audit: type=1326 audit(1780866088.088:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 616.973761][ C0] syz_tun: tun_net_xmit 42 [ 617.020373][ T29] audit: type=1326 audit(1780866088.088:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 617.056298][ T29] audit: type=1326 audit(1780866088.088:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 617.081224][ T29] audit: type=1326 audit(1780866088.088:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 617.116348][ T29] audit: type=1326 audit(1780866088.088:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23355 comm="syz.3.7645" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 617.214132][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.249169][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.418646][ T10] usb 3-1: USB disconnect, device number 47 [ 617.449448][T23342] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 617.514075][T23374] syzkaller1: entered promiscuous mode [ 617.524041][T23374] syzkaller1: entered allmulticast mode [ 617.649808][T23382] netlink: 'syz.0.7657': attribute type 13 has an invalid length. [ 617.663943][T15807] cdc_ncm 5-1:1.0: bind() failure [ 617.682474][T15807] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 617.693886][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.712783][T15807] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 617.748698][T15807] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 617.763811][ T5713] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 617.801284][T15807] usb 5-1: USB disconnect, device number 66 [ 617.945295][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 617.954442][ T5713] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 617.968826][ T5713] usb 2-1: config 2 has no interface number 0 [ 617.983662][ T5713] usb 2-1: config 2 interface 88 has no altsetting 0 [ 618.000915][ T5713] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 618.014065][ C0] syz_tun: tun_net_xmit 42 [ 618.021278][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.039396][ T5713] usb 2-1: Product: syz [ 618.047870][ T5713] usb 2-1: Manufacturer: syz [ 618.062187][ T5713] usb 2-1: SerialNumber: syz [ 618.226206][T23398] [ 618.228584][T23398] ===================================================== [ 618.235601][T23398] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 618.243288][T23398] syzkaller #0 Tainted: G L [ 618.249280][T23398] ----------------------------------------------------- [ 618.256271][T23398] syz.2.7665/23398 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 618.263989][T23398] ffff888028c2cc90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 618.272708][T23398] [ 618.272708][T23398] and this task is already holding: [ 618.280058][T23398] ffff88802be8c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 618.289800][T23398] which would create a new lock dependency: [ 618.295674][T23398] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 618.303667][T23398] [ 618.303667][T23398] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 618.313097][T23398] (&dev->event_lock#2){..-.}-{3:3} [ 618.313123][T23398] [ 618.313123][T23398] ... which became SOFTIRQ-irq-safe at: [ 618.325983][T23398] lock_acquire+0x106/0x350 [ 618.330565][T23398] _raw_spin_lock_irqsave+0x40/0x60 [ 618.335840][T23398] input_event+0x71/0xc0 [ 618.340160][T23398] atp_complete_geyser_3_4+0x114e/0x1d90 [ 618.345973][T23398] __usb_hcd_giveback_urb+0x376/0x540 [ 618.351480][T23398] dummy_timer+0xbc0/0x4650 [ 618.356181][T23398] __hrtimer_run_queues+0x3c0/0xa20 [ 618.361455][T23398] hrtimer_run_softirq+0x17a/0x240 [ 618.366639][T23398] handle_softirqs+0x22a/0x840 [ 618.371500][T23398] __irq_exit_rcu+0xca/0x220 [ 618.376160][T23398] irq_exit_rcu+0x9/0x30 [ 618.380475][T23398] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 618.386180][T23398] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.392235][T23398] deref_stack_reg+0x1/0x230 [ 618.396921][T23398] unwind_next_frame+0x19d5/0x2550 [ 618.402105][T23398] __unwind_start+0x5b8/0x760 [ 618.406851][T23398] arch_stack_walk+0xe3/0x150 [ 618.411638][T23398] stack_trace_save+0xa9/0x100 [ 618.416483][T23398] kasan_save_track+0x3e/0x80 [ 618.421261][T23398] kasan_save_free_info+0x46/0x50 [ 618.426355][T23398] __kasan_slab_free+0x5c/0x80 [ 618.431191][T23398] kfree+0x1c5/0x640 [ 618.435157][T23398] devtmpfs_create_node+0x20a/0x2a0 [ 618.440519][T23398] device_add+0xa0e/0xbb0 [ 618.444961][T23398] cdev_device_add+0x1d6/0x390 [ 618.449797][T23398] mousedev_create+0x547/0x680 [ 618.454628][T23398] mousedev_connect+0x26/0x3a0 [ 618.459471][T23398] input_register_device+0xce0/0x1140 [ 618.464928][T23398] atp_probe+0xb7d/0x10c0 [ 618.469335][T23398] usb_probe_interface+0x659/0xc70 [ 618.474586][T23398] really_probe+0x267/0xaf0 [ 618.479207][T23398] __driver_probe_device+0x1ef/0x380 [ 618.484563][T23398] driver_probe_device+0x4f/0x240 [ 618.489661][T23398] __device_attach_driver+0x279/0x430 [ 618.495104][T23398] bus_for_each_drv+0x258/0x2f0 [ 618.500025][T23398] __device_attach+0x2c5/0x450 [ 618.504870][T23398] device_initial_probe+0xa1/0xd0 [ 618.509968][T23398] bus_probe_device+0x12a/0x220 [ 618.514894][T23398] device_add+0x7e9/0xbb0 [ 618.519299][T23398] usb_set_configuration+0x1a87/0x2110 [ 618.524832][T23398] usb_generic_driver_probe+0x8d/0x150 [ 618.530463][T23398] usb_probe_device+0x1c4/0x3b0 [ 618.535383][T23398] really_probe+0x267/0xaf0 [ 618.539960][T23398] __driver_probe_device+0x1ef/0x380 [ 618.545316][T23398] driver_probe_device+0x4f/0x240 [ 618.550413][T23398] __device_attach_driver+0x279/0x430 [ 618.555859][T23398] bus_for_each_drv+0x258/0x2f0 [ 618.560789][T23398] __device_attach+0x2c5/0x450 [ 618.565620][T23398] device_initial_probe+0xa1/0xd0 [ 618.570713][T23398] bus_probe_device+0x12a/0x220 [ 618.575639][T23398] device_add+0x7e9/0xbb0 [ 618.580041][T23398] usb_new_device+0xa08/0x16f0 [ 618.584879][T23398] hub_event+0x2a1c/0x4f30 [ 618.589371][T23398] process_scheduled_works+0xb5d/0x1860 [ 618.595015][T23398] worker_thread+0xa53/0xfc0 [ 618.599678][T23398] kthread+0x389/0x470 [ 618.603815][T23398] ret_from_fork+0x514/0xb70 [ 618.608474][T23398] ret_from_fork_asm+0x1a/0x30 [ 618.613316][T23398] [ 618.613316][T23398] to a SOFTIRQ-irq-unsafe lock: [ 618.620372][T23398] (tasklist_lock){.+.+}-{3:3} [ 618.620394][T23398] [ 618.620394][T23398] ... which became SOFTIRQ-irq-unsafe at: [ 618.632996][T23398] ... [ 618.633041][T23398] lock_acquire+0x106/0x350 [ 618.640188][T23398] _raw_read_lock+0x36/0x50 [ 618.644810][T23398] __do_wait+0xde/0x740 [ 618.649040][T23398] do_wait+0x1e7/0x510 [ 618.653179][T23398] kernel_wait+0xd6/0x1c0 [ 618.657578][T23398] call_usermodehelper_exec_work+0xbe/0x230 [ 618.663554][T23398] process_scheduled_works+0xb5d/0x1860 [ 618.669175][T23398] worker_thread+0xa53/0xfc0 [ 618.673835][T23398] kthread+0x389/0x470 [ 618.677978][T23398] ret_from_fork+0x514/0xb70 [ 618.682640][T23398] ret_from_fork_asm+0x1a/0x30 [ 618.687492][T23398] [ 618.687492][T23398] other info that might help us debug this: [ 618.687492][T23398] [ 618.697719][T23398] Chain exists of: [ 618.697719][T23398] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 618.697719][T23398] [ 618.710661][T23398] Possible interrupt unsafe locking scenario: [ 618.710661][T23398] [ 618.719035][T23398] CPU0 CPU1 [ 618.724381][T23398] ---- ---- [ 618.729779][T23398] lock(tasklist_lock); [ 618.734004][T23398] local_irq_disable(); [ 618.740740][T23398] lock(&dev->event_lock#2); [ 618.747924][T23398] lock(&new->fa_lock); [ 618.754671][T23398] [ 618.758162][T23398] lock(&dev->event_lock#2); [ 618.763012][T23398] [ 618.763012][T23398] *** DEADLOCK *** [ 618.763012][T23398] [ 618.771135][T23398] 6 locks held by syz.2.7665/23398: [ 618.776313][T23398] #0: ffff88802c418110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 618.785501][T23398] #1: ffff88802be8c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 618.795598][T23398] #2: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 618.805245][T23398] #3: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 618.814801][T23398] #4: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 618.824883][T23398] #5: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 618.833919][T23398] [ 618.833919][T23398] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 618.844302][T23398] -> (&dev->event_lock#2){..-.}-{3:3} { [ 618.849850][T23398] IN-SOFTIRQ-W at: [ 618.853918][T23398] lock_acquire+0x106/0x350 [ 618.860061][T23398] _raw_spin_lock_irqsave+0x40/0x60 [ 618.866899][T23398] input_event+0x71/0xc0 [ 618.872775][T23398] atp_complete_geyser_3_4+0x114e/0x1d90 [ 618.880049][T23398] __usb_hcd_giveback_urb+0x376/0x540 [ 618.887063][T23398] dummy_timer+0xbc0/0x4650 [ 618.893203][T23398] __hrtimer_run_queues+0x3c0/0xa20 [ 618.900043][T23398] hrtimer_run_softirq+0x17a/0x240 [ 618.906845][T23398] handle_softirqs+0x22a/0x840 [ 618.913266][T23398] __irq_exit_rcu+0xca/0x220 [ 618.919507][T23398] irq_exit_rcu+0x9/0x30 [ 618.925385][T23398] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 618.932653][T23398] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.940270][T23398] deref_stack_reg+0x1/0x230 [ 618.946503][T23398] unwind_next_frame+0x19d5/0x2550 [ 618.953252][T23398] __unwind_start+0x5b8/0x760 [ 618.959569][T23398] arch_stack_walk+0xe3/0x150 [ 618.965884][T23398] stack_trace_save+0xa9/0x100 [ 618.972287][T23398] kasan_save_track+0x3e/0x80 [ 618.978607][T23398] kasan_save_free_info+0x46/0x50 [ 618.985271][T23398] __kasan_slab_free+0x5c/0x80 [ 618.991677][T23398] kfree+0x1c5/0x640 [ 618.997208][T23398] devtmpfs_create_node+0x20a/0x2a0 [ 619.004041][T23398] device_add+0xa0e/0xbb0 [ 619.010000][T23398] cdev_device_add+0x1d6/0x390 [ 619.016399][T23398] mousedev_create+0x547/0x680 [ 619.022797][T23398] mousedev_connect+0x26/0x3a0 [ 619.029196][T23398] input_register_device+0xce0/0x1140 [ 619.036204][T23398] atp_probe+0xb7d/0x10c0 [ 619.042168][T23398] usb_probe_interface+0x659/0xc70 [ 619.048914][T23398] really_probe+0x267/0xaf0 [ 619.055056][T23398] __driver_probe_device+0x1ef/0x380 [ 619.061976][T23398] driver_probe_device+0x4f/0x240 [ 619.068633][T23398] __device_attach_driver+0x279/0x430 [ 619.075639][T23398] bus_for_each_drv+0x258/0x2f0 [ 619.082125][T23398] __device_attach+0x2c5/0x450 [ 619.088520][T23398] device_initial_probe+0xa1/0xd0 [ 619.095179][T23398] bus_probe_device+0x12a/0x220 [ 619.101678][T23398] device_add+0x7e9/0xbb0 [ 619.107670][T23398] usb_set_configuration+0x1a87/0x2110 [ 619.114785][T23398] usb_generic_driver_probe+0x8d/0x150 [ 619.121884][T23398] usb_probe_device+0x1c4/0x3b0 [ 619.128369][T23398] really_probe+0x267/0xaf0 [ 619.134508][T23398] __driver_probe_device+0x1ef/0x380 [ 619.141438][T23398] driver_probe_device+0x4f/0x240 [ 619.148097][T23398] __device_attach_driver+0x279/0x430 [ 619.155104][T23398] bus_for_each_drv+0x258/0x2f0 [ 619.161592][T23398] __device_attach+0x2c5/0x450 [ 619.167989][T23398] device_initial_probe+0xa1/0xd0 [ 619.174654][T23398] bus_probe_device+0x12a/0x220 [ 619.181143][T23398] device_add+0x7e9/0xbb0 [ 619.187101][T23398] usb_new_device+0xa08/0x16f0 [ 619.193501][T23398] hub_event+0x2a1c/0x4f30 [ 619.199555][T23398] process_scheduled_works+0xb5d/0x1860 [ 619.206735][T23398] worker_thread+0xa53/0xfc0 [ 619.212958][T23398] kthread+0x389/0x470 [ 619.218662][T23398] ret_from_fork+0x514/0xb70 [ 619.224890][T23398] ret_from_fork_asm+0x1a/0x30 [ 619.231291][T23398] INITIAL USE at: [ 619.235171][T23398] lock_acquire+0x106/0x350 [ 619.241226][T23398] _raw_spin_lock_irqsave+0x40/0x60 [ 619.247976][T23398] input_inject_event+0xa4/0x330 [ 619.254467][T23398] kbd_led_trigger_activate+0xbc/0x100 [ 619.261580][T23398] led_trigger_set+0x535/0x960 [ 619.267961][T23398] led_trigger_set_default+0x260/0x2a0 [ 619.274970][T23398] led_classdev_register_ext+0x787/0x9c0 [ 619.282151][T23398] input_leds_connect+0x517/0x790 [ 619.288733][T23398] input_register_device+0xce0/0x1140 [ 619.295656][T23398] atkbd_connect+0x71e/0xa10 [ 619.301791][T23398] serio_driver_probe+0x82/0xb0 [ 619.308190][T23398] really_probe+0x267/0xaf0 [ 619.314243][T23398] __driver_probe_device+0x1ef/0x380 [ 619.321079][T23398] driver_probe_device+0x4f/0x240 [ 619.327649][T23398] __driver_attach+0x34c/0x640 [ 619.333957][T23398] bus_for_each_dev+0x23b/0x2c0 [ 619.340357][T23398] serio_handle_event+0x1af/0xf80 [ 619.346929][T23398] process_scheduled_works+0xb5d/0x1860 [ 619.354023][T23398] worker_thread+0xa53/0xfc0 [ 619.360160][T23398] kthread+0x389/0x470 [ 619.365783][T23398] ret_from_fork+0x514/0xb70 [ 619.371921][T23398] ret_from_fork_asm+0x1a/0x30 [ 619.378232][T23398] } [ 619.380715][T23398] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 619.389921][T23398] [ 619.389921][T23398] the dependencies between the lock to be acquired [ 619.389930][T23398] and SOFTIRQ-irq-unsafe lock: [ 619.403417][T23398] -> (tasklist_lock){.+.+}-{3:3} { [ 619.408700][T23398] HARDIRQ-ON-R at: [ 619.412837][T23398] lock_acquire+0x106/0x350 [ 619.419322][T23398] _raw_read_lock+0x36/0x50 [ 619.425811][T23398] __do_wait+0xde/0x740 [ 619.431954][T23398] do_wait+0x1e7/0x510 [ 619.438005][T23398] kernel_wait+0xd6/0x1c0 [ 619.444319][T23398] call_usermodehelper_exec_work+0xbe/0x230 [ 619.452198][T23398] process_scheduled_works+0xb5d/0x1860 [ 619.459723][T23398] worker_thread+0xa53/0xfc0 [ 619.466291][T23398] kthread+0x389/0x470 [ 619.472342][T23398] ret_from_fork+0x514/0xb70 [ 619.478912][T23398] ret_from_fork_asm+0x1a/0x30 [ 619.485659][T23398] SOFTIRQ-ON-R at: [ 619.489798][T23398] lock_acquire+0x106/0x350 [ 619.496282][T23398] _raw_read_lock+0x36/0x50 [ 619.502770][T23398] __do_wait+0xde/0x740 [ 619.508909][T23398] do_wait+0x1e7/0x510 [ 619.514958][T23398] kernel_wait+0xd6/0x1c0 [ 619.521272][T23398] call_usermodehelper_exec_work+0xbe/0x230 [ 619.529152][T23398] process_scheduled_works+0xb5d/0x1860 [ 619.536685][T23398] worker_thread+0xa53/0xfc0 [ 619.543258][T23398] kthread+0x389/0x470 [ 619.549306][T23398] ret_from_fork+0x514/0xb70 [ 619.555877][T23398] ret_from_fork_asm+0x1a/0x30 [ 619.562621][T23398] INITIAL USE at: [ 619.566673][T23398] lock_acquire+0x106/0x350 [ 619.573069][T23398] _raw_write_lock_irq+0x3d/0x50 [ 619.579900][T23398] copy_process+0x2b4c/0x4440 [ 619.586475][T23398] kernel_clone+0x2d7/0x940 [ 619.592873][T23398] user_mode_thread+0x110/0x180 [ 619.599618][T23398] rest_init+0x23/0x300 [ 619.605676][T23398] start_kernel+0x38a/0x3e0 [ 619.612184][T23398] x86_64_start_reservations+0x24/0x30 [ 619.619575][T23398] x86_64_start_kernel+0x143/0x1c0 [ 619.626582][T23398] common_startup_64+0x13e/0x147 [ 619.633414][T23398] INITIAL READ USE at: [ 619.637901][T23398] lock_acquire+0x106/0x350 [ 619.644737][T23398] _raw_read_lock+0x36/0x50 [ 619.651574][T23398] __do_wait+0xde/0x740 [ 619.658075][T23398] do_wait+0x1e7/0x510 [ 619.664472][T23398] kernel_wait+0xd6/0x1c0 [ 619.671130][T23398] call_usermodehelper_exec_work+0xbe/0x230 [ 619.679363][T23398] process_scheduled_works+0xb5d/0x1860 [ 619.687240][T23398] worker_thread+0xa53/0xfc0 [ 619.694163][T23398] kthread+0x389/0x470 [ 619.700563][T23398] ret_from_fork+0x514/0xb70 [ 619.707485][T23398] ret_from_fork_asm+0x1a/0x30 [ 619.714578][T23398] } [ 619.717231][T23398] ... key at: [] tasklist_lock+0x18/0x40 [ 619.725198][T23398] ... acquired at: [ 619.729160][T23398] _raw_read_lock+0x36/0x50 [ 619.733825][T23398] send_sigio+0x101/0x370 [ 619.738317][T23398] dnotify_handle_event+0x169/0x440 [ 619.743672][T23398] fsnotify+0x1831/0x1ae0 [ 619.748167][T23398] path_openat+0x15c2/0x3860 [ 619.752914][T23398] do_file_open+0x23e/0x4a0 [ 619.757576][T23398] do_sys_openat2+0x113/0x200 [ 619.762413][T23398] __ia32_compat_sys_openat+0x131/0x160 [ 619.768114][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 619.773471][T23398] do_fast_syscall_32+0x33/0x70 [ 619.778483][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.784970][T23398] [ 619.787277][T23398] -> (&f_owner->lock){....}-{3:3} { [ 619.792559][T23398] INITIAL USE at: [ 619.796523][T23398] lock_acquire+0x106/0x350 [ 619.802751][T23398] _raw_write_lock_irq+0x3d/0x50 [ 619.809405][T23398] __f_setown+0x67/0x370 [ 619.815371][T23398] fcntl_dirnotify+0x3f9/0x6a0 [ 619.821854][T23398] do_fcntl+0x77e/0x1a20 [ 619.827820][T23398] do_compat_fcntl64+0x51e/0x7e0 [ 619.834482][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 619.841402][T23398] do_fast_syscall_32+0x33/0x70 [ 619.847971][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.856021][T23398] INITIAL READ USE at: [ 619.860420][T23398] lock_acquire+0x106/0x350 [ 619.867076][T23398] _raw_read_lock_irqsave+0x48/0x60 [ 619.874438][T23398] send_sigio+0x38/0x370 [ 619.880838][T23398] dnotify_handle_event+0x169/0x440 [ 619.888188][T23398] fsnotify+0x1831/0x1ae0 [ 619.894675][T23398] path_openat+0x15c2/0x3860 [ 619.901422][T23398] do_file_open+0x23e/0x4a0 [ 619.908082][T23398] do_sys_openat2+0x113/0x200 [ 619.914916][T23398] __ia32_compat_sys_openat+0x131/0x160 [ 619.922621][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 619.929975][T23398] do_fast_syscall_32+0x33/0x70 [ 619.936993][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.945502][T23398] } [ 619.948081][T23398] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 619.957113][T23398] ... acquired at: [ 619.960987][T23398] _raw_read_lock_irqsave+0x48/0x60 [ 619.966350][T23398] send_sigio+0x38/0x370 [ 619.970752][T23398] kill_fasync+0x24d/0x4d0 [ 619.975335][T23398] lease_break_callback+0x26/0x30 [ 619.980523][T23398] __break_lease+0x81f/0x1ea0 [ 619.985357][T23398] do_dentry_open+0xf23/0x13a0 [ 619.990282][T23398] vfs_open+0x3b/0x340 [ 619.994508][T23398] path_openat+0x2e08/0x3860 [ 619.999260][T23398] do_file_open+0x23e/0x4a0 [ 620.003924][T23398] do_sys_openat2+0x113/0x200 [ 620.008762][T23398] __ia32_compat_sys_openat+0x131/0x160 [ 620.014465][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 620.019822][T23398] do_fast_syscall_32+0x33/0x70 [ 620.024829][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.031317][T23398] [ 620.033628][T23398] -> (&new->fa_lock){....}-{3:3} { [ 620.038746][T23398] INITIAL USE at: [ 620.042626][T23398] lock_acquire+0x106/0x350 [ 620.048681][T23398] _raw_write_lock_irq+0x3d/0x50 [ 620.055176][T23398] fasync_remove_entry+0xf1/0x1c0 [ 620.061756][T23398] sock_fasync+0x85/0xf0 [ 620.067640][T23398] __fput+0x890/0xa60 [ 620.073173][T23398] task_work_run+0x1d9/0x270 [ 620.079318][T23398] exit_to_user_mode_loop+0x193/0x680 [ 620.086236][T23398] __do_fast_syscall_32+0x45b/0x6f0 [ 620.092985][T23398] do_fast_syscall_32+0x33/0x70 [ 620.099380][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.107254][T23398] INITIAL READ USE at: [ 620.111581][T23398] lock_acquire+0x106/0x350 [ 620.118069][T23398] _raw_read_lock_irqsave+0x48/0x60 [ 620.125271][T23398] kill_fasync+0x199/0x4d0 [ 620.131693][T23398] sock_wake_async+0x137/0x160 [ 620.138536][T23398] sock_def_error_report+0x332/0x390 [ 620.145845][T23398] sk_error_report+0x48/0x280 [ 620.152512][T23398] unix_dgram_connect+0x96b/0xc20 [ 620.159573][T23398] __sys_connect+0x312/0x450 [ 620.166149][T23398] __ia32_sys_connect+0x7a/0x90 [ 620.172985][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 620.180170][T23398] do_fast_syscall_32+0x33/0x70 [ 620.187007][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.195323][T23398] } [ 620.197809][T23398] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 620.206473][T23398] ... acquired at: [ 620.210259][T23398] _raw_read_lock_irqsave+0x48/0x60 [ 620.215622][T23398] kill_fasync+0x199/0x4d0 [ 620.220209][T23398] mousedev_notify_readers+0x6f1/0xc00 [ 620.225830][T23398] mousedev_event+0x602/0x1320 [ 620.230758][T23398] input_handle_events_default+0xd4/0x1a0 [ 620.236633][T23398] input_pass_values+0x288/0x890 [ 620.241728][T23398] input_event_dispose+0x330/0x6b0 [ 620.246998][T23398] input_inject_event+0x1dc/0x330 [ 620.252181][T23398] evdev_write+0x325/0x4c0 [ 620.256758][T23398] vfs_write+0x29a/0xb90 [ 620.261164][T23398] ksys_write+0x150/0x270 [ 620.265653][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 620.271009][T23398] do_fast_syscall_32+0x33/0x70 [ 620.276016][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.282504][T23398] [ 620.284812][T23398] [ 620.284812][T23398] stack backtrace: [ 620.290691][T23398] CPU: 0 UID: 0 PID: 23398 Comm: syz.2.7665 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.290711][T23398] Tainted: [L]=SOFTLOCKUP [ 620.290716][T23398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 620.290726][T23398] Call Trace: [ 620.290732][T23398] [ 620.290739][T23398] dump_stack_lvl+0xe8/0x150 [ 620.290759][T23398] __lock_acquire+0x2a94/0x2cf0 [ 620.290781][T23398] ? kill_fasync+0x199/0x4d0 [ 620.290798][T23398] lock_acquire+0x106/0x350 [ 620.290811][T23398] ? kill_fasync+0x199/0x4d0 [ 620.290830][T23398] _raw_read_lock_irqsave+0x48/0x60 [ 620.290850][T23398] ? kill_fasync+0x199/0x4d0 [ 620.290865][T23398] kill_fasync+0x199/0x4d0 [ 620.290882][T23398] ? kill_fasync+0x53/0x4d0 [ 620.290901][T23398] mousedev_notify_readers+0x6f1/0xc00 [ 620.290924][T23398] ? mousedev_notify_readers+0x2c/0xc00 [ 620.290943][T23398] mousedev_event+0x602/0x1320 [ 620.290961][T23398] input_handle_events_default+0xd4/0x1a0 [ 620.290977][T23398] ? input_pass_values+0x8d/0x890 [ 620.290988][T23398] input_pass_values+0x288/0x890 [ 620.291002][T23398] ? input_handle_event+0x70c/0xf30 [ 620.291021][T23398] input_event_dispose+0x330/0x6b0 [ 620.291040][T23398] input_inject_event+0x1dc/0x330 [ 620.291055][T23398] ? input_inject_event+0xb5/0x330 [ 620.291071][T23398] evdev_write+0x325/0x4c0 [ 620.291084][T23398] ? __lock_acquire+0x6b5/0x2cf0 [ 620.291097][T23398] ? __pfx_evdev_write+0x10/0x10 [ 620.291110][T23398] ? bpf_lsm_file_permission+0x9/0x20 [ 620.291167][T23398] ? security_file_permission+0x75/0x260 [ 620.291249][T23398] ? rw_verify_area+0x255/0x4d0 [ 620.291265][T23398] ? __pfx_evdev_write+0x10/0x10 [ 620.291278][T23398] vfs_write+0x29a/0xb90 [ 620.291301][T23398] ? __pfx_vfs_write+0x10/0x10 [ 620.291318][T23398] ? __fget_files+0x2a/0x420 [ 620.291333][T23398] ? __fget_files+0x2a/0x420 [ 620.291346][T23398] ? __fget_files+0x3a0/0x420 [ 620.291360][T23398] ? __fget_files+0x2a/0x420 [ 620.291376][T23398] ksys_write+0x150/0x270 [ 620.291392][T23398] ? __pfx_ksys_write+0x10/0x10 [ 620.291411][T23398] __do_fast_syscall_32+0x23e/0x6f0 [ 620.291427][T23398] ? do_fast_syscall_32+0x33/0x70 [ 620.291442][T23398] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.291454][T23398] ? asm_int80_emulation+0x1a/0x20 [ 620.291466][T23398] ? do_int80_emulation+0x29f/0x550 [ 620.291479][T23398] ? trace_irq_disable+0x3b/0x140 [ 620.291497][T23398] do_fast_syscall_32+0x33/0x70 [ 620.291511][T23398] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.291525][T23398] RIP: 0023:0xf709f01c [ 620.291538][T23398] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 620.291568][T23398] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 620.291584][T23398] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 620.291593][T23398] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.291601][T23398] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.291609][T23398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.291617][T23398] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.291636][T23398] [ 620.299416][ T5756] net_ratelimit: 2 callbacks suppressed [ 620.299435][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.617616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.625728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.634617][ C0] syz_tun: tun_net_xmit 42 [ 620.663997][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.735213][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.063791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.072098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.304471][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.373664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.427182][ T5713] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 621.437693][ T5713] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 621.448995][ T5713] asix 2-1:2.88: probe with driver asix failed with error -71 [ 621.458426][ T5713] usb 2-1: USB disconnect, device number 74 [ 621.693906][ C0] syz_tun: tun_net_xmit 42 [ 621.699580][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.733920][ C0] syz_tun: tun_net_xmit 42 [ 623.773803][ C0] syz_tun: tun_net_xmit 42 [ 624.256077][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.262461][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.813829][ C0] syz_tun: tun_net_xmit 42 [ 625.454897][ T5713] net_ratelimit: 11 callbacks suppressed [ 625.454916][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.533782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.854041][ C0] syz_tun: tun_net_xmit 42 [ 625.859821][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.175060][T23093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.493898][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.573658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.824276][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.893768][ C0] syz_tun: tun_net_xmit 42 [ 626.899869][T15807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.533867][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.613647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.933920][ C0] syz_tun: tun_net_xmit 42