last executing test programs: 3.688291644s ago: executing program 0 (id=1403): socket$inet6_sctp(0xa, 0x1, 0x84) socket$tipc(0x1e, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 3.480551375s ago: executing program 0 (id=1409): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) read$dsp(r0, &(0x7f0000000400)=""/56, 0x38) 2.430024032s ago: executing program 0 (id=1423): fchdir(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.970795748s ago: executing program 0 (id=1428): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 1.852004587s ago: executing program 0 (id=1429): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/4104, 0x1008}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.807756095s ago: executing program 3 (id=1431): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1.685973858s ago: executing program 0 (id=1433): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.618230394s ago: executing program 4 (id=1436): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r2, &(0x7f0000000280)=""/172, 0xac, 0xe0) 1.565069721s ago: executing program 3 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f00000004c0)='./file0\x00', 0x34) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r1 = open_tree(r0, &(0x7f0000000280)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) 1.437198739s ago: executing program 4 (id=1440): pipe2(&(0x7f0000000040), 0x80080) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) 1.379652434s ago: executing program 3 (id=1441): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) r2 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x40, r2, 0x0, 0x0, 0xfe, 0x0, 0x2}]) 1.161129716s ago: executing program 2 (id=1445): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4af) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000280)={0x9, 0x4, 0x2, 0x2, 0x0, "9d42da2c1aab19dc12867e7d11f855ad801fef"}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff7e, 0x20d, 0x9, 0x85, 0x8, "f86c000900"}) 1.136410475s ago: executing program 1 (id=1446): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/222, 0xde}], 0x2) 1.000034434s ago: executing program 4 (id=1447): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 980.699739ms ago: executing program 2 (id=1448): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="ae", 0x1}], 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 956.656711ms ago: executing program 3 (id=1449): r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 955.898854ms ago: executing program 1 (id=1450): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) fallocate(r0, 0x0, 0x9e1f, 0x575) preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x38b, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_subtree(r0, 0x0, 0x32600) 845.339154ms ago: executing program 4 (id=1451): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 784.748433ms ago: executing program 1 (id=1452): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 751.694508ms ago: executing program 3 (id=1453): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r1, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) 749.244205ms ago: executing program 2 (id=1454): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r1, 0x12, 0x0, 0x4) 627.257432ms ago: executing program 4 (id=1455): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d9", 0x2, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 622.578171ms ago: executing program 1 (id=1456): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept$inet6(r1, 0x0, 0x0) 549.539117ms ago: executing program 2 (id=1457): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000000000000020000000000001104000000ffffffff000000000000000201"], 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="1c005e800800020001000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 410.1696ms ago: executing program 4 (id=1458): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='B', 0x1}], 0x1}}], 0x1, 0x400c404) exit(0x0) sendto$inet6(r0, &(0x7f00000000c0)="d9", 0x1, 0x0, 0x0, 0x0) 319.446885ms ago: executing program 2 (id=1459): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4001, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') io_setup(0xff, &(0x7f0000000b00)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x4, r1}]) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 155.336646ms ago: executing program 3 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x800f000, 0x8, r2, 0x1}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x0, 0x8, r2, 0x5}) 155.07108ms ago: executing program 1 (id=1461): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x267) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000002600)=[{{0x0, 0x12, 0x0}}], 0x1, 0x0, 0x0) 1.246902ms ago: executing program 2 (id=1462): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') read$hidraw(r1, &(0x7f0000000800)=""/4096, 0x1000) 0s ago: executing program 1 (id=1463): open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000002f) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) kernel console output (not intermixed with test programs): connect, device number 4 [ 125.918389][ T796] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 125.947971][ T796] usb 4-1: config 179 has no interface number 0 [ 125.966018][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 125.988892][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 126.001401][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.012961][ T796] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 126.045935][ T796] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.093357][ T796] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 126.122074][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.161165][ T6642] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 126.288956][ T5895] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 126.307589][ T5895] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 126.316418][ T5895] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 126.332802][ T5895] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 126.356289][ T5895] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 126.394552][ T5895] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 126.508285][ T5895] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 126.594818][ T796] usb 2-1: USB disconnect, device number 4 [ 126.645302][ T5816] usb 4-1: USB disconnect, device number 6 [ 126.650162][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 126.661005][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 126.671077][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.700163][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.734793][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 126.781681][ T6656] fido_id[6656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 127.223766][ T5816] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.338394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.437209][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.471744][ T5816] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 127.507722][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.546973][ T5816] usb 1-1: config 0 descriptor?? [ 127.740701][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.818188][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.857282][ T6689] input: syz1 as /devices/virtual/input/input12 [ 128.001868][ T29] audit: type=1326 audit(1772164957.927:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 128.068421][ T5816] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 128.108541][ T29] audit: type=1326 audit(1772164957.927:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 128.209111][ T29] audit: type=1326 audit(1772164957.927:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 128.310399][ T29] audit: type=1326 audit(1772164957.957:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 128.406376][ T29] audit: type=1326 audit(1772164957.957:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3812b9c42b code=0x7ffc0000 [ 128.537797][ T29] audit: type=1326 audit(1772164957.957:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3812b9c42b code=0x7ffc0000 [ 128.609266][ T9] usb 1-1: USB disconnect, device number 7 [ 128.627868][ T29] audit: type=1326 audit(1772164957.957:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3812b5cfce code=0x7ffc0000 [ 128.701589][ T29] audit: type=1326 audit(1772164958.137:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 128.747144][ T29] audit: type=1326 audit(1772164958.137:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 128.778035][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.791109][ T29] audit: type=1326 audit(1772164958.157:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3812b9c799 code=0x7ffc0000 [ 129.594491][ T6739] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.329'. [ 129.819478][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.978179][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.992924][ T5976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.153017][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.185798][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.208274][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.225863][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.247943][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.280225][ T5976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.293516][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.326214][ T5976] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.343751][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.353451][ T6743] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.387479][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.397767][ T5938] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.398227][ T5976] usb 5-1: config 0 descriptor?? [ 130.615830][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 130.642054][ T5938] usb 4-1: config 0 has no interfaces? [ 130.665911][ T5938] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 130.696625][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.735250][ T5938] usb 4-1: config 0 descriptor?? [ 130.752612][ T9] usb 3-1: USB disconnect, device number 5 [ 130.858725][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.870708][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.892117][ T6765] loop2: detected capacity change from 0 to 7 [ 130.926860][ T6765] Dev loop2: unable to read RDB block 7 [ 130.934309][ T6765] loop2: AHDI p1 p2 p3 [ 130.948598][ T5976] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xe [ 130.972823][ T5895] usb 4-1: USB disconnect, device number 7 [ 130.988898][ T5976] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 130.996683][ T6765] loop2: partition table partially beyond EOD, truncated [ 131.028944][ T6765] loop2: p1 start 1634624559 is beyond EOD, truncated [ 131.046706][ T5976] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 131.051590][ T6765] loop2: p2 start 1702059890 is beyond EOD, truncated [ 131.147218][ T5976] usb 5-1: USB disconnect, device number 5 [ 131.239079][ T6768] fido_id[6768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 131.340906][ T5895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.528905][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.560458][ T5895] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.579561][ T5895] usb 1-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 131.591617][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.613638][ T5895] usb 1-1: SerialNumber: syz [ 131.824000][ T6782] netlink: 'syz.4.345': attribute type 11 has an invalid length. [ 131.833266][ T6782] netlink: 104 bytes leftover after parsing attributes in process `syz.4.345'. [ 131.857368][ T5895] usb 1-1: 0:2 : does not exist [ 131.900764][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.966118][ T5895] usb 1-1: USB disconnect, device number 8 [ 132.051890][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.180902][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 132.218022][ T5976] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.386123][ T6798] netlink: 'syz.4.353': attribute type 6 has an invalid length. [ 132.396676][ T6798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'. [ 132.433164][ T5976] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 132.458796][ T5976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.499631][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.542580][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.555553][ T5976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.617916][ T5976] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.651821][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.698935][ T5976] usb 3-1: config 0 descriptor?? [ 132.719506][ T6786] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.938340][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.102975][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112916][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.171655][ T5976] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 133.297886][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 133.385056][ T5976] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 133.503195][ T5976] usb 3-1: USB disconnect, device number 6 [ 133.615521][ T6820] fido_id[6820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.703987][ T6827] mmap: syz.1.366 (6827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.918378][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.981949][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.169875][ T6845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.018217][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.037877][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.356759][ T6876] netlink: 92 bytes leftover after parsing attributes in process `syz.0.387'. [ 135.737827][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.919046][ T5895] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 135.960615][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.011526][ T5895] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 136.045613][ T5895] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 136.059441][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.085993][ T5895] usb 5-1: Manufacturer: syz [ 136.102530][ T5895] usb 5-1: config 0 descriptor?? [ 136.262170][ T5895] rc_core: IR keymap rc-hauppauge not found [ 136.290827][ T5895] Registered IR keymap rc-empty [ 136.298451][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.324238][ T5895] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 136.343030][ T6878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.375148][ T6878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.395473][ T5895] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 136.466986][ T5895] usb 5-1: USB disconnect, device number 6 [ 137.100016][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.133898][ T6912] cifs: Unknown parameter 'f,ËøyªÜ' [ 137.820235][ T6935] process 'syz.0.409' launched './file0' with NULL argv: empty string added [ 137.830901][ T6935] Invalid argument reading file caps for ./file0 [ 138.059083][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.069094][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.080346][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.139599][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.151580][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.578040][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.583020][ T6922] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 140.218228][ T796] net_ratelimit: 2 callbacks suppressed [ 140.218250][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.315496][ T6922] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.326995][ T6922] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.339864][ T6922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.346226][ T6922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.355496][ T6922] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.364678][ T6922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.371345][ T6922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.381278][ T6922] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.392413][ T6922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.399220][ T6922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.407868][ T6922] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.419710][ T6922] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.426198][ T6922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.436509][ T6922] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 140.718445][ T796] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.721132][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.807965][ T5938] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.936833][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.963461][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.983954][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.013477][ T796] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.038053][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.058043][ T5938] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 141.067733][ T796] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.080957][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.094054][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.108963][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.130297][ T5938] usb 4-1: config 0 descriptor?? [ 141.167455][ T796] usb 1-1: config 0 descriptor?? [ 141.188739][ T796] usb 1-1: can't set config #0, error -71 [ 141.256363][ T796] usb 1-1: USB disconnect, device number 9 [ 141.284576][ T6966] netlink: 256 bytes leftover after parsing attributes in process `syz.4.423'. [ 141.298763][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.318071][ T6966] netlink: 256 bytes leftover after parsing attributes in process `syz.4.423'. [ 141.504097][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 141.648112][ T6972] hsr_slave_1 (unregistering): left promiscuous mode [ 141.658305][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 141.848032][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.973498][ T5938] hid-led 0003:27B8:01ED.0009: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 142.018021][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 142.034753][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.057030][ T5938] hid-led 0003:27B8:01ED.0009: ThingM blink(1) v1 initialized [ 142.079931][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.117737][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 142.178413][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 142.205611][ T5938] usb 4-1: USB disconnect, device number 8 [ 142.213535][ T5816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.287796][ T5816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.322004][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.378109][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.387776][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.397890][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.458112][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 142.458431][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.555543][ T5816] usb 3-1: GET_CAPABILITIES returned 0 [ 142.566660][ T5816] usbtmc 3-1:16.0: can't read capabilities [ 142.608046][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.761427][ T5976] usb 3-1: USB disconnect, device number 7 [ 142.776993][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 142.794986][ T9] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.810656][ T5816] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.825243][ T9] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.840042][ T9] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.857355][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 142.871202][ T9] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 142.886518][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.896807][ T9] usb 5-1: Product: syz [ 142.902307][ T9] usb 5-1: Manufacturer: syz [ 142.910606][ T9] usb 5-1: SerialNumber: syz [ 143.001457][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.019894][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.033995][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.053718][ T5816] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.065984][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.083366][ T5816] usb 1-1: config 0 descriptor?? [ 143.128380][ T796] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.152993][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 143.302008][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 143.325994][ T796] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 143.363834][ T796] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.387792][ T796] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.400663][ T796] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 143.423592][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.436348][ T796] usb 4-1: config 7 interface 0 has no altsetting 0 [ 143.454074][ T796] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 143.477051][ T5976] usb 5-1: USB disconnect, device number 8 [ 143.487799][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.513805][ T5976] usblp0: removed [ 143.530564][ T5816] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 143.569695][ T7004] input: syz0 as /devices/virtual/input/input15 [ 143.639123][ T5816] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 143.738029][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.823410][ T5976] usb 1-1: USB disconnect, device number 10 [ 143.976015][ T796] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.000B/input/input17 [ 144.027809][ T796] kye 0003:0458:5010.000B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 144.148145][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.186498][ T796] usb 4-1: USB disconnect, device number 9 [ 144.239596][ T7010] fido_id[7010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 144.459597][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.472508][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.472517][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.539377][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.539389][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.187265][ T7043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.513795][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.559101][ T5976] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.730327][ T5976] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.749702][ T5976] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 145.763944][ T5976] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.793544][ T5976] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.814915][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.843326][ T5976] usb 4-1: Product: syz [ 145.848782][ T5976] usb 4-1: Manufacturer: syz [ 145.857178][ T5976] usb 4-1: SerialNumber: syz [ 145.901199][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.920169][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.932465][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.129595][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.307801][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 146.318983][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.349727][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 146.389147][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 146.406847][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.419652][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.429136][ T9] usb 1-1: Product: syz [ 146.434811][ T9] usb 1-1: Manufacturer: syz [ 146.448165][ T9] usb 1-1: SerialNumber: syz [ 146.464519][ T7066] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.538272][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.548529][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.551039][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.577810][ T796] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.617839][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.617854][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.748017][ T796] usb 5-1: Using ep0 maxpacket: 8 [ 146.756607][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.768242][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 146.789058][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.814286][ T796] usb 5-1: config 0 descriptor?? [ 146.836811][ T796] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 146.990295][ T5976] cdc_ncm 4-1:1.0: bind() failure [ 147.041629][ T5976] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 147.066481][ T5976] usb 4-1: USB disconnect, device number 10 [ 147.189764][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.503554][ T9] cdc_ncm 1-1:1.0: bind() failure [ 147.531332][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 147.558786][ T9] usb 1-1: USB disconnect, device number 11 [ 147.583253][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.851792][ T796] gspca_vc032x: reg_r err -71 [ 147.888483][ T796] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 147.926297][ T796] usb 5-1: USB disconnect, device number 9 [ 148.228739][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 148.400923][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 148.443895][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 148.496111][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.531328][ T9] usb 4-1: Product: syz [ 148.557220][ T9] usb 4-1: Manufacturer: syz [ 148.579131][ T9] usb 4-1: SerialNumber: syz [ 148.620813][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.854400][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.871342][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 148.952360][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 148.982615][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 149.018384][ T9] usb 4-1: media controller created [ 149.081297][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.182149][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 149.193315][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.372292][ T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 149.378028][ T796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.438331][ T9] usb 4-1: USB disconnect, device number 11 [ 149.583927][ T796] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 149.608594][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.659129][ T796] usb 2-1: config 0 descriptor?? [ 150.110698][ T796] elan 0003:04F3:0755.000C: unknown main item tag 0x1 [ 150.138959][ T796] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 150.319667][ T796] usb 2-1: USB disconnect, device number 5 [ 150.394996][ T7145] fido_id[7145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 150.699104][ T796] net_ratelimit: 10 callbacks suppressed [ 150.699128][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.950143][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 150.950163][ T29] audit: type=1326 audit(1772164980.877:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7170 comm="syz.2.515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f438899c799 code=0x0 [ 151.361001][ T796] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 151.396174][ T796] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.738979][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.036867][ T7207] Invalid argument reading file caps for ./file0 [ 152.631581][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 152.778237][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.869411][ T7222] bond1: Invalid ad_actor_system MAC address. [ 152.876604][ T7222] bond1: option ad_actor_system: invalid value (6543) [ 152.955568][ T7222] bond1 (unregistering): Released all slaves [ 153.257954][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.688563][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.819335][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.898997][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 153.930016][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 153.988294][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.053159][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.087141][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.100655][ T7251] No such timeout policy "syz1" [ 154.133082][ T9] usb 2-1: config 0 descriptor?? [ 154.162491][ T7237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.491588][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 154.562084][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 154.608847][ T9] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 154.634518][ T9] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 154.858310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.868041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.904490][ T796] usb 2-1: USB disconnect, device number 6 [ 155.250201][ T7283] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 155.280398][ T7283] netlink: 'syz.2.561': attribute type 29 has an invalid length. [ 155.338002][ T7283] netlink: 500 bytes leftover after parsing attributes in process `syz.2.561'. [ 155.898112][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.139136][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.442928][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 156.530259][ T7320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.704789][ T29] audit: type=1326 audit(1772164986.627:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 156.761433][ T7329] netlink: 104 bytes leftover after parsing attributes in process `syz.4.581'. [ 156.773333][ T29] audit: type=1326 audit(1772164986.637:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 156.881724][ T29] audit: type=1326 audit(1772164986.667:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 156.938114][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.972183][ T29] audit: type=1326 audit(1772164986.667:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.067261][ T29] audit: type=1326 audit(1772164986.667:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.118160][ T29] audit: type=1326 audit(1772164986.667:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.245342][ T29] audit: type=1326 audit(1772164986.677:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.398078][ T29] audit: type=1326 audit(1772164986.677:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.540179][ T29] audit: type=1326 audit(1772164986.677:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.677779][ T29] audit: type=1326 audit(1772164986.677:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7324 comm="syz.1.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4142d9c799 code=0x7ffc0000 [ 157.705659][ T7350] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.591'. [ 157.983542][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.058260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.348346][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.549988][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.597580][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.645106][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.692477][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.775712][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.811148][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.844793][ T9] usb 3-1: Product: syz [ 158.865875][ T9] usb 3-1: Manufacturer: syz [ 158.903894][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 158.918251][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 158.936973][ T7385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.956713][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 158.974476][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 159.034722][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.122574][ C0] cdc_wdm 3-1:1.0: unknown notification 100 received: index 0 len 0 [ 159.184036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.224306][ T7393] loop5: detected capacity change from 0 to 7 [ 159.248628][ T7393] Dev loop5: unable to read RDB block 7 [ 159.268845][ T7393] loop5: unable to read partition table [ 159.295624][ T7393] loop5: partition table beyond EOD, truncated [ 159.325540][ T796] usb 3-1: USB disconnect, device number 8 [ 159.331813][ T7393] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.352498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.757826][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.933677][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.944271][ T9] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 159.961457][ T9] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 159.974477][ T9] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 159.998460][ T9] usb 2-1: config 129 has no interface number 0 [ 160.005068][ T9] usb 2-1: config 129 has no interface number 1 [ 160.020651][ T9] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.034999][ T9] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 160.058072][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.066748][ T9] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 160.088378][ T9] usb 2-1: config 129 interface 135 has no altsetting 0 [ 160.096131][ T9] usb 2-1: config 129 interface 5 has no altsetting 0 [ 160.121506][ T9] usb 2-1: string descriptor 0 read error: -22 [ 160.129293][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 160.156648][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.194590][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.223094][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 160.407841][ T796] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.487693][ T42] usb 2-1: USB disconnect, device number 7 [ 160.593348][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.612773][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 160.655867][ T796] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 160.679620][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.721277][ T796] usb 3-1: config 0 descriptor?? [ 161.098394][ T42] net_ratelimit: 5 callbacks suppressed [ 161.098417][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.200970][ T796] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 161.513460][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 161.766363][ T796] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 161.785857][ T796] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 161.836596][ T796] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 161.892505][ T796] usb 3-1: USB disconnect, device number 9 [ 162.017924][ T5976] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.148290][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.209611][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.225443][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.247801][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.295365][ T5976] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.328066][ T5976] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.351909][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.376377][ T5976] usb 4-1: config 0 descriptor?? [ 162.847930][ T5976] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 163.082900][ T42] usb 4-1: USB disconnect, device number 12 [ 163.174182][ T7495] input: syz0 as /devices/virtual/input/input19 [ 163.184618][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.195295][ T7495] input: failed to attach handler leds to device input19, error: -6 [ 163.468517][ T5976] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.627761][ T5976] usb 1-1: Using ep0 maxpacket: 8 [ 163.639919][ T5976] usb 1-1: config 0 has no interfaces? [ 163.650803][ T5976] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 163.693950][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.747979][ T5976] usb 1-1: Product: syz [ 163.757754][ T5976] usb 1-1: Manufacturer: syz [ 163.762533][ T5976] usb 1-1: SerialNumber: syz [ 163.818897][ T5976] usb 1-1: config 0 descriptor?? [ 164.042546][ T998] tipc: Subscription rejected, illegal request [ 164.057080][ T42] usb 1-1: USB disconnect, device number 12 [ 164.066996][ T7522] C: renamed from team_slave_0 (while UP) [ 164.135134][ T7522] netlink: 164 bytes leftover after parsing attributes in process `syz.1.659'. [ 164.228033][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.889011][ T7535] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 164.995593][ T7541] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.668'. [ 165.258737][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.267811][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.446314][ T7557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.483862][ T7557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.519280][ T7557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.701665][ T7566] netlink: 'syz.2.679': attribute type 11 has an invalid length. [ 165.780048][ T5976] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.817961][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 165.960767][ T5976] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.977756][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 165.980034][ T5976] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.992810][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.006326][ T5895] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 166.018055][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.018075][ T5976] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.028773][ T5895] usb 4-1: Product: syz [ 166.041793][ T5895] usb 4-1: Manufacturer: syz [ 166.046824][ T5895] usb 4-1: SerialNumber: syz [ 166.055414][ T5895] usb 4-1: config 0 descriptor?? [ 166.057941][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.090350][ T5976] usb 5-1: SerialNumber: syz [ 166.298108][ T796] net_ratelimit: 72 callbacks suppressed [ 166.298138][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.331562][ T5976] usb 5-1: 0:2 : does not exist [ 166.378622][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.469756][ T5976] usb 5-1: USB disconnect, device number 10 [ 166.493143][ T5895] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 166.527793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.537224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.547609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.556230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.565216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.575513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.585362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.598263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.725274][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.103621][ T5895] usb 4-1: USB disconnect, device number 13 [ 167.150164][ T7585] netlink: 236 bytes leftover after parsing attributes in process `syz.4.687'. [ 167.174048][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.688'. [ 167.193056][ T7585] netlink: 236 bytes leftover after parsing attributes in process `syz.4.687'. [ 167.377279][ T7592] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.690'. [ 168.022011][ T7623] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 168.547976][ T5976] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.710352][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.756978][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.801837][ T5976] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 168.827287][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.866231][ T5976] usb 3-1: config 0 descriptor?? [ 169.311261][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.341985][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.365950][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.387907][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.407312][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.424005][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.438915][ T5976] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 169.463549][ T5976] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 169.570757][ T5976] cp2112 0003:10C4:EA90.0011: Part Number: 0x82 Device Version: 0xFE [ 169.974937][ T5976] cp2112 0003:10C4:EA90.0011: error setting SMBus config [ 170.005935][ T5976] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -71 [ 170.060278][ T5976] usb 3-1: USB disconnect, device number 10 [ 170.951784][ T7701] netlink: 68 bytes leftover after parsing attributes in process `syz.2.726'. [ 171.107905][ T5976] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.159197][ T7698] binder: 7697:7698 ioctl c0306201 200000001a80 returned -14 [ 171.278988][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 171.291648][ T5976] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 171.302830][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.314191][ T5976] usb 2-1: Product: syz [ 171.319452][ T5976] usb 2-1: Manufacturer: syz [ 171.324787][ T5976] usb 2-1: SerialNumber: syz [ 171.342826][ T5976] usb 2-1: config 0 descriptor?? [ 171.498671][ T5938] net_ratelimit: 238 callbacks suppressed [ 171.498699][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.578086][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.586706][ T5976] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 171.761239][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.780174][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.808926][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.833662][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 171.845094][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.854123][ T9] usb 5-1: Product: syz [ 171.862430][ T9] usb 5-1: Manufacturer: syz [ 171.892677][ T9] usb 5-1: SerialNumber: syz [ 171.923907][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 171.955232][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 172.071540][ T7730] Invalid argument reading file caps for ./file0 [ 172.141423][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 172.277823][ T6192] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 172.376916][ T5976] usb write operation failed. (-71) [ 172.400746][ T5976] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 172.422180][ T5976] dvbdev: DVB: registering new adapter (Terratec H7) [ 172.440300][ T6192] usb 3-1: Using ep0 maxpacket: 16 [ 172.456156][ T5976] usb 2-1: media controller created [ 172.464094][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.481232][ T6192] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.497330][ T5976] usb read operation failed. (-71) [ 172.524274][ T5976] usb write operation failed. (-71) [ 172.531759][ T6192] usb 3-1: config 0 has no interfaces? [ 172.546073][ T5976] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 172.549389][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.556366][ T6192] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 172.580134][ T5976] usb 2-1: USB disconnect, device number 8 [ 172.586400][ T6192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.631689][ T6192] usb 3-1: config 0 descriptor?? [ 172.639404][ T7715] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 172.844934][ T7715] usb 5-1: device firmware changed [ 172.855128][ T5938] usb 5-1: USB disconnect, device number 11 [ 172.865527][ T5938] usblp0: removed [ 173.007980][ T5938] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.101714][ T5976] usb 3-1: USB disconnect, device number 11 [ 173.193007][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.215731][ T5938] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.238352][ T5938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.272156][ T5938] usb 5-1: string descriptor 0 read error: -22 [ 173.295311][ T5938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 173.319126][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.379839][ T5938] hub 5-1:1.0: bad descriptor, ignoring hub [ 173.386456][ T5938] hub 5-1:1.0: probe with driver hub failed with error -5 [ 173.577952][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.587374][ T5938] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 173.632397][ T5938] usb 5-1: USB disconnect, device number 12 [ 173.648839][ T5938] usblp0: removed [ 173.737825][ T796] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.784542][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 173.911888][ T796] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 173.928770][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.948916][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.968084][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.992590][ T796] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.005075][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.046087][ T796] usb 2-1: config 0 descriptor?? [ 174.401667][ T5938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.491448][ C0] hrtimer: interrupt took 27685 ns [ 174.492848][ T796] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 174.522115][ T7787] sock: sock_timestamping_bind_phc: sock not bind to device [ 174.632219][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 174.638353][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.654396][ T5938] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 174.666624][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.705847][ T5938] usb 3-1: Product: syz [ 174.729185][ T5938] usb 3-1: Manufacturer: syz [ 174.747543][ T5938] usb 3-1: SerialNumber: syz [ 174.778980][ T5938] usb 3-1: config 0 descriptor?? [ 174.824861][ T5938] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 174.845829][ T5938] usb 3-1: Detected FT232H [ 175.033232][ T5938] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 175.349586][ T7800] loop4: detected capacity change from 0 to 1 [ 175.413640][ T7800] Dev loop4: unable to read RDB block 1 [ 175.437981][ T7800] loop4: unable to read partition table [ 175.456031][ T7800] loop4: partition table beyond EOD, truncated [ 175.476590][ T7800] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 175.499680][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.520865][ T5938] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 175.571141][ T7804] netlink: 27 bytes leftover after parsing attributes in process `syz.4.768'. [ 175.660071][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.721749][ T5938] usb 3-1: USB disconnect, device number 12 [ 175.765646][ C1] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 175.788645][ T42] usb 2-1: USB disconnect, device number 9 [ 175.844552][ T7807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.858835][ T5938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 175.888162][ T5938] ftdi_sio 3-1:0.0: device disconnected [ 176.290760][ T6192] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.471660][ T6192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.504575][ T6192] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 176.552543][ T6192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.590961][ T6192] usb 1-1: config 0 descriptor?? [ 176.701446][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.041785][ T6192] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 177.088073][ T6192] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input20 [ 177.253094][ T6192] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 177.737887][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.538124][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.547022][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.778246][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.098380][ T5976] usb 1-1: USB disconnect, device number 13 [ 179.489759][ T7880] kvm: user requested TSC rate below hardware speed [ 179.566397][ T7854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 179.825942][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.210574][ T5976] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.287842][ T6192] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.381251][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.414706][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.441655][ T5976] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 180.457857][ T5976] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 180.466986][ T5976] usb 5-1: Manufacturer: syz [ 180.479415][ T6192] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 180.493566][ T5976] usb 5-1: config 0 descriptor?? [ 180.498966][ T6192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.554473][ T6192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.588546][ T6192] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 180.616988][ T6192] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 180.631143][ T6192] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 180.640618][ T6192] usb 1-1: Manufacturer: syz [ 180.647906][ T796] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 180.657481][ T6192] usb 1-1: config 0 descriptor?? [ 180.788037][ T42] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.819765][ T796] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 180.857961][ T796] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 180.872579][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.897806][ T796] usb 2-1: config 0 has no interface number 0 [ 180.914805][ T796] usb 2-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.955709][ T796] usb 2-1: config 0 interface 66 has no altsetting 0 [ 180.973486][ T796] usb 2-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 181.008107][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.036310][ T42] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 181.053190][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.065327][ T42] usb 4-1: Product: syz [ 181.071588][ T42] usb 4-1: Manufacturer: syz [ 181.076579][ T42] usb 4-1: SerialNumber: syz [ 181.101869][ T796] usb 2-1: config 0 descriptor?? [ 181.122276][ T6192] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 181.124398][ T42] usb 4-1: config 0 descriptor?? [ 181.163305][ T6192] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 181.190185][ T42] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 181.361598][ T796] usb 2-1: string descriptor 0 read error: -71 [ 181.396223][ T5976] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input21 [ 181.409716][ T796] usb 2-1: USB disconnect, device number 10 [ 181.424432][ T6192] usb 1-1: USB disconnect, device number 14 [ 181.543871][ T5976] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input22 [ 181.579330][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.604401][ T5976] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input23 [ 181.655260][ T5976] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input24 [ 181.683103][ T5976] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 181.719127][ T5976] usb 5-1: USB disconnect, device number 13 [ 181.900016][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.947804][ T796] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 181.952005][ T7924] fido_id[7924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 182.141682][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.174381][ T796] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 182.194247][ T796] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 182.207049][ T796] usb 3-1: config 63 has no interface number 0 [ 182.257437][ T796] usb 3-1: config 63 interface 66 has no altsetting 0 [ 182.317483][ T6192] usb 4-1: USB disconnect, device number 14 [ 182.327351][ T796] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 182.356482][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.407695][ T796] usb 3-1: Product: syz [ 182.422756][ T796] usb 3-1: Manufacturer: syz [ 182.443028][ T796] usb 3-1: SerialNumber: syz [ 182.675258][ T7944] netlink: 'syz.1.825': attribute type 13 has an invalid length. [ 182.695407][ T7944] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 182.725010][ T796] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 182.745362][ T7944] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 182.755041][ T7944] gretap1: entered promiscuous mode [ 182.756522][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 182.772227][ T7944] gretap1: entered allmulticast mode [ 182.804259][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 182.816036][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 182.827329][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 182.842424][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 182.880961][ T796] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 182.895905][ T796] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 182.920873][ T796] usb 3-1: USB disconnect, device number 13 [ 182.981122][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.124769][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.134960][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.387841][ T796] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 183.506051][ T7960] netlink: 428 bytes leftover after parsing attributes in process `syz.4.832'. [ 183.517830][ T7960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.832'. [ 183.537750][ T5976] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 183.580068][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.591852][ T796] usb 3-1: not running at top speed; connect to a high speed hub [ 183.607537][ T796] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 183.627807][ T796] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 183.649013][ T796] usb 3-1: config 63 has no interface number 0 [ 183.656875][ T796] usb 3-1: config 63 interface 66 has no altsetting 0 [ 183.687441][ T796] usb 3-1: string descriptor 0 read error: -22 [ 183.695518][ T5976] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.695791][ T796] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 183.709258][ T5976] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.731959][ T5976] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.742325][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.757830][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.798422][ T796] uvcvideo 3-1:63.66: Found UVC 0.07 device (174f:8acf) [ 183.995828][ T5976] usb 1-1: usb_control_msg returned -32 [ 184.009756][ T5976] usbtmc 1-1:16.0: can't read capabilities [ 184.058259][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.245005][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 184.263557][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 184.274723][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 184.286219][ T796] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 184.321043][ T796] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 184.339978][ T796] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 184.371412][ T7978] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 184.386556][ T796] usb 3-1: USB disconnect, device number 14 [ 184.618435][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.982701][ T7994] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 185.005939][ T7994] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 185.098505][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.156326][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.401504][ T5976] usb 1-1: USB disconnect, device number 15 [ 186.944983][ T8053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.156486][ T8060] loop5: detected capacity change from 0 to 7 [ 187.177918][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.198244][ T8060] Dev loop5: unable to read RDB block 7 [ 187.204527][ T8060] loop5: AHDI p1 p2 p3 [ 187.230235][ T8060] loop5: partition table partially beyond EOD, truncated [ 187.270475][ T8060] loop5: p1 start 1601398130 is beyond EOD, truncated [ 187.308563][ T8060] loop5: p2 start 1702059890 is beyond EOD, truncated [ 187.488562][ T8070] loop8: detected capacity change from 0 to 8 [ 187.515210][ T8070] Dev loop8: unable to read RDB block 8 [ 187.550839][ T8070] loop8: unable to read partition table [ 187.566595][ T8070] loop8: partition table beyond EOD, truncated [ 187.591749][ T8070] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 187.613618][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 187.626694][ T8076] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 187.643705][ T8073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.659977][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.666850][ T8076] netlink: 'syz.0.882': attribute type 2 has an invalid length. [ 187.827805][ T5976] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 188.032241][ T5976] usb 3-1: Using ep0 maxpacket: 8 [ 188.059864][ T5976] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.090448][ T5976] usb 3-1: config 0 has no interface number 0 [ 188.106834][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 188.112087][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.139911][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.176763][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 188.218008][ T5976] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.230170][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.260691][ T5976] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 188.327776][ T5976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.362922][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.394316][ T5976] usb 3-1: config 0 descriptor?? [ 188.436251][ T5976] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 188.598247][ T8100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.271269][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.109563][ T42] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.287769][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 190.319774][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.330992][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.340275][ T42] usb 4-1: config 4 interface 0 has no altsetting 0 [ 190.369422][ T42] usb 4-1: string descriptor 0 read error: -22 [ 190.376460][ T42] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 190.407703][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.461996][ T42] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 190.508049][ T42] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.536617][ T42] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 190.572087][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-1) [ 190.581584][ T42] usb 4-1: media controller created [ 190.589843][ T5895] usb 3-1: USB disconnect, device number 15 [ 190.638467][ T5895] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 190.708023][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.730439][ T8127] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 190.738622][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.852888][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 190.852910][ T29] audit: type=1326 audit(1772165020.767:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.1.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4142d9c799 code=0x0 [ 190.944492][ T42] zl10353_read_register: readreg error (reg=127, ret==0) [ 191.034818][ T8151] loop5: detected capacity change from 0 to 7 [ 191.048686][ T5964] Dev loop5: unable to read RDB block 7 [ 191.054654][ T5964] loop5: unable to read partition table [ 191.067878][ T5964] loop5: partition table beyond EOD, truncated [ 191.093512][ T8151] Dev loop5: unable to read RDB block 7 [ 191.118312][ T8151] loop5: unable to read partition table [ 191.125678][ T8151] loop5: partition table beyond EOD, truncated [ 191.133227][ T8151] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.147998][ T42] usb 4-1: USB disconnect, device number 15 [ 191.338188][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.488905][ T8160] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 191.525036][ T8160] netlink: 'syz.2.917': attribute type 2 has an invalid length. [ 192.117841][ T5816] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.273581][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.310099][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.339363][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.378405][ T5816] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.395126][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.401127][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.429445][ T5816] usb 3-1: config 0 descriptor?? [ 192.470370][ T8166] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.919'. [ 192.881317][ T5816] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 192.917885][ T5976] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 193.113242][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.142415][ T42] usb 3-1: USB disconnect, device number 16 [ 193.150332][ T5976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.150430][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.150453][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.156084][ T5976] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.299249][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.311730][ T5976] usb 1-1: SerialNumber: syz [ 193.417945][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.541390][ T5976] usb 1-1: 0:2 : does not exist [ 193.546636][ T5976] usb 1-1: unit 5 not found! [ 193.636842][ T5976] usb 1-1: USB disconnect, device number 16 [ 193.685099][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.738016][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.750252][ T796] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.912965][ T796] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 193.928522][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.937578][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.949459][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.957273][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.967027][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.978404][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.986700][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.997558][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.010689][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.026207][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.044322][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.069906][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.078870][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.089132][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.100732][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.110888][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.121430][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.136020][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.154853][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.172280][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.204277][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.224361][ T796] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.246410][ T796] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.287741][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.326696][ T796] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.340873][ T796] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.370544][ T796] usb 4-1: Product: syz [ 194.374927][ T796] usb 4-1: Manufacturer: syz [ 194.394608][ T796] usb 4-1: SerialNumber: syz [ 194.410848][ T796] usb 4-1: config 0 descriptor?? [ 194.441808][ T796] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 194.459365][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.542837][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.556455][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.788457][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 194.798872][ T796] usb 4-1: USB disconnect, device number 16 [ 194.829782][ T796] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 194.971712][ T8255] input: syz1 as /devices/virtual/input/input25 [ 195.226834][ T8263] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 195.499547][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.760226][ T8286] netlink: 52 bytes leftover after parsing attributes in process `syz.3.968'. [ 195.877216][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'. [ 195.909837][ T8288] chnl_net:caif_netlink_parms(): no params data found [ 196.024536][ T8296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.542573][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.778197][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.200454][ T8349] input: syz0 as /devices/virtual/input/input26 [ 197.577975][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.739357][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.625686][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.995817][ T8404] syzkaller1: entered promiscuous mode [ 199.020026][ T8404] syzkaller1: entered allmulticast mode [ 199.507259][ T8422] loop9: detected capacity change from 0 to 7 [ 199.548707][ T8422] Dev loop9: unable to read RDB block 7 [ 199.556357][ T8422] loop9: AHDI p2 p3 [ 199.589167][ T8422] loop9: partition table partially beyond EOD, truncated [ 199.609621][ T8422] loop9: p2 size 157513074 extends beyond EOD, truncated [ 199.657948][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.775751][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 199.818213][ T5976] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 199.859086][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.042075][ T5976] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.068367][ T5976] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.089980][ T5976] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.103238][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.351525][ T5976] usb 1-1: GET_CAPABILITIES returned 0 [ 200.357532][ T5976] usbtmc 1-1:16.0: can't read capabilities [ 200.545730][ T42] usb 1-1: USB disconnect, device number 17 [ 200.697926][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.757807][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.078049][ T5976] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 202.296780][ T5976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.346854][ T5976] usb 1-1: config 0 has no interfaces? [ 202.360524][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 202.361645][ T5976] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 202.410544][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.427196][ T8484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1052'. [ 202.436929][ T5976] usb 1-1: Product: syz [ 202.436953][ T5976] usb 1-1: Manufacturer: syz [ 202.436970][ T5976] usb 1-1: SerialNumber: syz [ 202.458322][ T5976] usb 1-1: config 0 descriptor?? [ 202.734782][ T42] usb 1-1: USB disconnect, device number 18 [ 202.779280][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.877765][ T5976] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.920929][ T8473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.931413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.949872][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.096502][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.132442][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.166758][ T5976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.211499][ T5976] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.247312][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.291102][ T5976] usb 5-1: config 0 descriptor?? [ 203.517762][ T9] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 203.819588][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.980941][ T5976] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 204.002359][ T5976] usb 5-1: USB disconnect, device number 14 [ 204.171174][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.179421][ T9] usb 4-1: config 0 has no interface number 0 [ 204.196225][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 204.227742][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 204.255125][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.269663][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.311291][ T9] usb 4-1: config 0 descriptor?? [ 204.328679][ T8505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.360975][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 204.372793][ T8519] fido_id[8519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 204.630873][ T9] usb 4-1: USB disconnect, device number 17 [ 204.631013][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 204.867251][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.221616][ T42] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.397783][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 205.421503][ T42] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.433505][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.457827][ T42] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 205.467423][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.515743][ T42] usb 1-1: config 0 descriptor?? [ 205.803446][ T8558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.897949][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.967337][ T42] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 205.990855][ T5895] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 205.994563][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.167732][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 206.189491][ T5895] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 206.212672][ T5895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.227712][ T5895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.304778][ T5895] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.319555][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.330119][ T5895] usb 3-1: Product: syz [ 206.336722][ T5895] usb 3-1: Manufacturer: syz [ 206.358012][ T42] usb 1-1: USB disconnect, device number 19 [ 206.368571][ T5895] usb 3-1: SerialNumber: syz [ 206.490024][ T8573] batadv_slave_0: entered promiscuous mode [ 206.510063][ T8571] batadv_slave_0: left promiscuous mode [ 206.813547][ T5895] usb 3-1: 0:2 : does not exist [ 206.937970][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.297773][ T8598] input: syz0 as /devices/virtual/input/input27 [ 207.339592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.455372][ T5895] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 207.566782][ T29] audit: type=1326 audit(1772165037.487:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8608 comm="syz.4.1105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2a8f9c799 code=0x0 [ 207.606207][ T5895] usb 3-1: USB disconnect, device number 17 [ 207.664732][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.787947][ C1] net_ratelimit: 7 callbacks suppressed [ 207.787963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.803242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.820337][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.828893][ T796] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.836958][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.848912][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.857831][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.866532][ T8618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.875908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.885510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.894237][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.004194][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.031072][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.057851][ T796] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 208.080143][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.109335][ T796] usb 2-1: config 0 descriptor?? [ 208.546453][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.566986][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.581950][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.602761][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.619887][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.634005][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.660605][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1117'. [ 208.677717][ T796] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 208.695078][ T796] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 208.741820][ T796] arvo 0003:1E7D:30D4.0019: couldn't init struct arvo_device [ 208.775401][ T796] arvo 0003:1E7D:30D4.0019: couldn't install keyboard [ 208.805983][ T796] arvo 0003:1E7D:30D4.0019: probe with driver arvo failed with error -71 [ 208.861128][ T796] usb 2-1: USB disconnect, device number 11 [ 208.968715][ T8639] fido_id[8639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 209.447803][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 209.609374][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.617551][ T9] usb 3-1: config 0 has no interface number 0 [ 209.637768][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 209.646970][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.680598][ T9] usb 3-1: config 0 descriptor?? [ 209.694931][ T9] usb 3-1: selecting invalid altsetting 1 [ 209.710828][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 209.717239][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 209.833514][ T9] DVB: Unable to find symbol cx22700_attach() [ 209.876206][ T9] DVB: Unable to find symbol tda10046_attach() [ 209.882542][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 209.935884][ T9] usb 3-1: USB disconnect, device number 18 [ 211.345954][ T29] audit: type=1326 audit(1772165041.267:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.4.1142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2a8f9c799 code=0x0 [ 211.997059][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 212.011913][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 212.105703][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.116014][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 212.141958][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.145692][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 212.174309][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.205747][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.453602][ T8748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.632885][ T8754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.918537][ T6192] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 213.121317][ T6192] usb 1-1: Using ep0 maxpacket: 8 [ 213.128383][ T8784] kernel read not supported for file /!sel (pid: 8784 comm: syz.3.1174) [ 213.136460][ T6192] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 213.151694][ T29] audit: type=1800 audit(1772165043.077:43): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1174" name="!sel" dev="mqueue" ino=23950 res=0 errno=0 [ 213.175846][ T6192] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.187129][ T796] net_ratelimit: 214 callbacks suppressed [ 213.187150][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.189108][ T6192] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.212666][ T6192] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.212679][ T8781] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 213.212769][ T6192] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.249674][ T6192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.341073][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.453175][ T8781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.527793][ T6192] usb 1-1: GET_CAPABILITIES returned 0 [ 213.533740][ T6192] usbtmc 1-1:16.0: can't read capabilities [ 213.745577][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 213.745615][ T8759] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 213.772769][ T796] usb 1-1: USB disconnect, device number 20 [ 213.792951][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 214.218107][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.482760][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.491290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.550547][ T8829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.559325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.028762][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.097863][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.182942][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.978069][ T8859] netlink: 'syz.3.1201': attribute type 10 has an invalid length. [ 216.104488][ T8859] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 216.108084][ T8859] team0: Failed to send options change via netlink (err -105) [ 216.108112][ T8859] team0: Port device netdevsim0 added [ 216.546659][ T8870] vivid-002: disconnect [ 216.553912][ T8870] vivid-002: reconnect [ 217.137760][ T796] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 217.318097][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 217.329350][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.361418][ T796] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.387570][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.418286][ T796] usb 3-1: config 0 descriptor?? [ 217.642388][ T796] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.119572][ T9] usb 3-1: USB disconnect, device number 19 [ 218.166723][ T8921] futex_wake_op: syz.4.1228 tries to shift op by -1; fix this program [ 218.217879][ T5976] net_ratelimit: 7 callbacks suppressed [ 218.217899][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.379968][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.461288][ T8932] netlink: 'syz.1.1232': attribute type 8 has an invalid length. [ 218.473539][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 218.491725][ T8932] bond0: entered promiscuous mode [ 218.497075][ T8932] bond_slave_0: entered promiscuous mode [ 218.506038][ T8932] gretap0: entered promiscuous mode [ 218.513567][ T8932] ip6gretap0: entered promiscuous mode [ 218.529758][ T8932] hsr1: entered promiscuous mode [ 218.537907][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.175915][ T8949] input: syz0 as /devices/virtual/input/input28 [ 219.298271][ T796] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 219.337991][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.418462][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.468037][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 219.486704][ T796] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.518935][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 219.527984][ T796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.535419][ T796] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 219.546655][ T24] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.566953][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.575545][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 219.582884][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.599907][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 219.617855][ T796] usb 4-1: config 0 descriptor?? [ 219.630149][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.657521][ T24] usb 5-1: config 0 descriptor?? [ 220.081713][ T796] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 220.122463][ T24] logitech-djreceiver 0003:046D:C71B.001B: unknown main item tag 0x0 [ 220.161658][ T24] logitech-djreceiver 0003:046D:C71B.001B: unknown main item tag 0x0 [ 220.165878][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.194914][ T24] logitech-djreceiver 0003:046D:C71B.001B: unknown main item tag 0x0 [ 220.225731][ T24] logitech-djreceiver 0003:046D:C71B.001B: unknown main item tag 0x0 [ 220.245170][ T24] logitech-djreceiver 0003:046D:C71B.001B: unknown main item tag 0x0 [ 220.317070][ T9] usb 5-1: USB disconnect, device number 15 [ 220.457880][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.578621][ T9] usb 4-1: USB disconnect, device number 18 [ 220.620411][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.057873][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 221.224817][ T29] audit: type=1326 audit(1772165051.147:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.4.1259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2a8f9c799 code=0x0 [ 221.263207][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.285158][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.308984][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.340085][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.374620][ T9021] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 221.390243][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.436851][ T5895] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 221.439817][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.469343][ T5895] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 221.484987][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.494519][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.505119][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.519018][ T9] usb 3-1: config 0 descriptor?? [ 221.942701][ T9] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 222.005338][ T9] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 222.455129][ T9059] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.513173][ T9059] bond1: (slave lo): Enslaving as an active interface with an up link [ 223.005096][ T9073] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 223.054719][ T9073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.088629][ T9073] bond1: (slave geneve2): making interface the new active one [ 223.099640][ T9073] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 223.269847][ T998] net_ratelimit: 8 callbacks suppressed [ 223.269867][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.438694][ T9] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 223.487931][ T796] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.577851][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.581064][ T5895] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 223.607899][ T9] usb 3-1: device descriptor read/64, error -32 [ 223.630449][ T5895] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 223.641291][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.688637][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 223.719063][ T796] usb 2-1: config 0 has an invalid interface number: 101 but max is 12 [ 223.737986][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.768026][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 223.797945][ T796] usb 2-1: config 0 has no interface number 0 [ 223.826622][ T796] usb 2-1: too many endpoints for config 0 interface 101 altsetting 115: 51, using maximum allowed: 30 [ 223.859463][ T796] usb 2-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 223.916477][ T796] usb 2-1: config 0 interface 101 has no altsetting 0 [ 223.981410][ T796] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 224.020944][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.070364][ T796] usb 2-1: Product: syz [ 224.091898][ T796] usb 2-1: Manufacturer: syz [ 224.119165][ T796] usb 2-1: SerialNumber: syz [ 224.167523][ T796] usb 2-1: config 0 descriptor?? [ 224.178241][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.302201][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.312867][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.349221][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.418081][ T796] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 224.568726][ T6192] usb 3-1: USB disconnect, device number 20 [ 224.618420][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.708057][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.781061][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.023928][ T796] gspca_zc3xx: reg_w_i err -71 [ 225.111653][ T5887] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.277723][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 225.325355][ T5887] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 225.351302][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.387854][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.451890][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.494730][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.537847][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.591122][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.657807][ T796] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 225.677214][ T796] gspca_zc3xx 2-1:0.101: probe with driver gspca_zc3xx failed with error -71 [ 225.738540][ T5895] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 225.745784][ T5895] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 225.749632][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.771698][ T796] usb 2-1: USB disconnect, device number 12 [ 225.877289][ T5887] usb 5-1: GET_CAPABILITIES returned 0 [ 225.912040][ T5887] usbtmc 5-1:16.0: can't read capabilities [ 226.076291][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.089540][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.109588][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.120262][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.131527][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.143217][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.185561][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.196634][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.207199][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.219729][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.270845][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.285299][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.297933][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.309750][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.358034][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.367383][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.393255][ T796] usb 5-1: USB disconnect, device number 16 [ 227.327684][ T5887] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 227.357717][ T6192] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 227.491154][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 227.515364][ T5887] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 227.529911][ T6192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.542093][ T5887] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.558132][ T6192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.589040][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.593164][ T6192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.638202][ T6192] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.638268][ T5887] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.669131][ T6192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.874994][ T6192] usb 3-1: config 0 descriptor?? [ 227.898351][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.957850][ T5895] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 227.978176][ T5895] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 227.997709][ T5887] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.020101][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'. [ 228.038182][ T5887] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.077746][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.089733][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'. [ 228.335360][ T5887] usb 5-1: usb_control_msg returned -32 [ 228.357498][ T5887] usbtmc 5-1:16.0: can't read capabilities [ 228.388845][ T6192] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 228.573442][ T9206] net_ratelimit: 9 callbacks suppressed [ 228.573459][ T9206] netlink: zone id is out of range [ 228.618014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.668821][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.856933][ T9206] netlink: set zone limit has 4 unknown bytes [ 229.019044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 229.029433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 229.038397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 229.047321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 229.057223][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.807799][ T6192] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 229.817017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 229.825605][ T998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.898014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 229.983777][ T6192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.997991][ T6192] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.022207][ T6192] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.037930][ T6192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.049993][ T6192] usb 2-1: Product: syz [ 230.056601][ T6192] usb 2-1: Manufacturer: syz [ 230.067133][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 230.070385][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.081546][ T6192] usb 2-1: SerialNumber: syz [ 230.093639][ T5895] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 230.103943][ T6192] cdc_mbim 2-1:1.0: skipping garbage [ 230.129981][ T5895] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 230.156345][ T5938] usb 5-1: USB disconnect, device number 17 [ 230.342654][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 230.381660][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.392602][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.402625][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.440071][ T9234] vlan2: entered promiscuous mode [ 230.448784][ T9234] gretap0: entered promiscuous mode [ 230.511924][ T9] usb 3-1: USB disconnect, device number 21 [ 230.848454][ T5976] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.018396][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 231.031299][ T5976] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 231.056240][ T5976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.083421][ T5976] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.125855][ T5976] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.141562][ T6192] cdc_mbim 2-1:1.0: bind() failure [ 231.155344][ T6192] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 231.179469][ T5976] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.191113][ T6192] cdc_ncm 2-1:1.1: bind() failure [ 231.209827][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.363691][ T6192] usb 2-1: USB disconnect, device number 13 [ 231.449981][ T5976] usb 5-1: GET_CAPABILITIES returned 0 [ 231.461651][ T5976] usbtmc 5-1:16.0: can't read capabilities [ 231.669308][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 231.679507][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 231.688981][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 231.718036][ T9238] usbtmc 5-1:16.0: Unable to send data, error -71 [ 231.752648][ T5895] usb 5-1: USB disconnect, device number 18 [ 232.190488][ T9278] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.251097][ T9278] bond2: (slave lo): Enslaving as an active interface with an up link [ 232.802027][ T9299] trusted_key: syz.4.1340 sent an empty control message without MSG_MORE. [ 233.081319][ T9305] loop6: detected capacity change from 0 to 4095 [ 233.338488][ T5976] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 233.373780][ T9317] syzkaller1: entered promiscuous mode [ 233.411205][ T9317] syzkaller1: entered allmulticast mode [ 233.530632][ T5976] usb 4-1: Using ep0 maxpacket: 32 [ 233.570788][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.599356][ T5976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.609585][ T5976] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 233.619023][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.635881][ T5976] usb 4-1: config 0 descriptor?? [ 233.874196][ T5976] usbhid 4-1:0.0: can't add hid device: -71 [ 233.888311][ T5976] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 233.920699][ T5976] usb 4-1: USB disconnect, device number 19 [ 233.933362][ T9330] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 233.979728][ T9330] netlink: 'syz.2.1355': attribute type 2 has an invalid length. [ 234.011998][ T9330] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1355'. [ 234.218380][ T5895] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 234.401539][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 234.436924][ T5895] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 234.447647][ T5895] usb 1-1: config 0 has no interface number 0 [ 234.454029][ T5895] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.499017][ T5895] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 234.549946][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.564197][ T5895] usb 1-1: Product: syz [ 234.574535][ T5895] usb 1-1: Manufacturer: syz [ 234.585723][ T5895] usb 1-1: SerialNumber: syz [ 234.615392][ T5895] usb 1-1: config 0 descriptor?? [ 234.635165][ T5895] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 234.667072][ T5895] em28xx 1-1:0.132: Video interface 132 found: [ 234.732123][ T9356] loop7: detected capacity change from 0 to 16384 [ 234.908952][ T9362] loop7: detected capacity change from 16384 to 0 [ 235.118218][ T5895] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 235.151652][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1369'. [ 235.509021][ T6192] net_ratelimit: 6 callbacks suppressed [ 235.509048][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.542737][ T5895] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 235.604817][ T5895] em28xx 1-1:0.132: board has no eeprom [ 235.809268][ T5895] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 235.847035][ T5895] em28xx 1-1:0.132: analog set to bulk mode. [ 235.875824][ T42] em28xx 1-1:0.132: Registering V4L2 extension [ 235.891572][ T9384] input: syz0 as /devices/virtual/input/input29 [ 235.935796][ T5895] usb 1-1: USB disconnect, device number 21 [ 235.975104][ T5895] em28xx 1-1:0.132: Disconnecting em28xx [ 236.338734][ T5976] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 236.417786][ T42] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 236.426519][ T42] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 236.473988][ T42] em28xx 1-1:0.132: No AC97 audio processor [ 236.497856][ T42] usb 1-1: Decoder not found [ 236.514659][ T42] em28xx 1-1:0.132: failed to create media graph [ 236.521238][ T5976] usb 3-1: Using ep0 maxpacket: 32 [ 236.538116][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.555914][ T42] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 236.612394][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.629433][ T42] em28xx 1-1:0.132: Remote control support is not available for this card. [ 236.666779][ T5895] em28xx 1-1:0.132: Closing input extension [ 236.753697][ T5976] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.816855][ T5895] em28xx 1-1:0.132: Freeing device [ 236.888120][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.047463][ T5976] usb 3-1: config 0 descriptor?? [ 237.078832][ T5976] hub 3-1:0.0: USB hub found [ 237.290256][ T5976] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 237.390175][ T9406] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 237.439264][ T9409] loop4: detected capacity change from 0 to 7 [ 237.479184][ T9409] Dev loop4: unable to read RDB block 7 [ 237.485799][ T9409] loop4: AHDI p1 p2 p3 [ 237.502336][ T9409] loop4: partition table partially beyond EOD, truncated [ 237.510898][ T9409] loop4: p1 start 1601398130 is beyond EOD, truncated [ 237.519873][ T9409] loop4: p2 start 1702059890 is beyond EOD, truncated [ 237.651178][ T9415] IPv6: sit1: Disabled Multicast RS [ 237.749996][ T5976] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 237.947760][ T5976] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 238.099683][ T5976] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.109727][ T5976] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.123108][ T5976] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.128667][ T5895] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.138189][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.300632][ T5895] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.311886][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.323438][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.333697][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 238.351590][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 238.361757][ T5895] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 238.371001][ T5895] usb 5-1: Manufacturer: syz [ 238.381602][ T5895] usb 5-1: config 0 descriptor?? [ 238.388181][ T5976] usb 1-1: usb_control_msg returned -32 [ 238.394061][ T5976] usbtmc 1-1:16.0: can't read capabilities [ 238.791110][ T42] usb 3-1: USB disconnect, device number 22 [ 238.812802][ T5895] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 238.837143][ T5895] appleir 0003:05AC:8243.001F: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 238.945836][ T9442] kvm: user requested TSC rate below hardware speed [ 238.956980][ T9442] kvm: user requested TSC rate below hardware speed [ 238.961408][ T6192] usb 1-1: USB disconnect, device number 22 [ 238.989861][ T5976] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.027961][ T9] usb 5-1: USB disconnect, device number 19 [ 239.151883][ T5976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.163123][ T5976] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 239.176008][ T5976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.186003][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.195412][ T5976] usb 2-1: Product: syz [ 239.200124][ T5976] usb 2-1: Manufacturer: syz [ 239.204871][ T5976] usb 2-1: SerialNumber: syz [ 239.292639][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 239.430750][ T9438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.442641][ T9455] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1401'. [ 239.978623][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.988440][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 240.157980][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 240.169851][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 240.179214][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.194779][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.209226][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.220878][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.234486][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.244015][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.260528][ T5976] cdc_ncm 2-1:1.0: bind() failure [ 240.291649][ T5976] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 240.299707][ T5976] cdc_ncm 2-1:1.1: bind() failure [ 240.325110][ T5976] usb 2-1: USB disconnect, device number 14 [ 240.480634][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 240.486714][ T9] usbtmc 3-1:16.0: can't read capabilities [ 240.684650][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.693848][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.702986][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.712138][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.725448][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.734705][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.744004][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.753146][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.763460][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.772615][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.782239][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.791825][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.803222][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.812393][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.821611][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.830760][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.879370][ T5976] usb 3-1: USB disconnect, device number 23 [ 240.945586][ T9506] bridge1: entered promiscuous mode [ 240.977088][ T9506] bridge1: entered allmulticast mode [ 241.002173][ T9506] team0: Port device bridge1 added [ 241.030854][ T9509] bridge0: port 3(team0) entered blocking state [ 241.066063][ T9509] bridge0: port 3(team0) entered disabled state [ 241.085749][ T9509] team0: entered allmulticast mode [ 241.104045][ T9509] team_slave_0: entered allmulticast mode [ 241.118940][ T9509] team_slave_1: entered allmulticast mode [ 241.146364][ T9509] team0: entered promiscuous mode [ 241.165813][ T9509] team_slave_0: entered promiscuous mode [ 241.190354][ T9509] team_slave_1: entered promiscuous mode [ 241.878704][ T5976] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 242.052731][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.122027][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.153006][ T5976] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 242.172098][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.199492][ T5976] usb 1-1: config 0 descriptor?? [ 242.349807][ T29] audit: type=1800 audit(1772165072.277:45): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1450" name="bus" dev="tmpfs" ino=1534 res=0 errno=0 [ 242.666433][ T5976] hid-steam 0003:28DE:1142.0020: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 242.767772][ T5976] hid-steam 0003:28DE:1142.0020: Steam wireless receiver connected [ 242.788163][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 242.871877][ T5976] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 242.938849][ T5976] usb 1-1: USB disconnect, device number 23 [ 242.961828][ T5976] hid-steam 0003:28DE:1142.0020: Steam wireless receiver disconnected [ 243.122383][ T9588] fido_id[9588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 243.349813][ T9602] [ 243.352242][ T9602] ===================================================== [ 243.359534][ T9602] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 243.367318][ T9602] syzkaller #0 Tainted: G L [ 243.373522][ T9602] ----------------------------------------------------- [ 243.381656][ T9602] syz.1.1463/9602 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 243.389781][ T9602] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 243.399868][ T9602] [ 243.399868][ T9602] and this task is already holding: [ 243.408344][ T9602] ffff88802a3c3a20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 243.417441][ T9602] which would create a new lock dependency: [ 243.423392][ T9602] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 243.431194][ T9602] [ 243.431194][ T9602] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 243.440806][ T9602] (&dev->event_lock#2){..-.}-{3:3} [ 243.440852][ T9602] [ 243.440852][ T9602] ... which became SOFTIRQ-irq-safe at: [ 243.453895][ T9602] lock_acquire+0xf0/0x2e0 [ 243.458535][ T9602] _raw_spin_lock_irqsave+0x40/0x60 [ 243.464307][ T9602] input_event+0x76/0xe0 [ 243.469421][ T9602] hidinput_hid_event+0x142d/0x1e60 [ 243.475460][ T9602] hid_process_event+0x4be/0x620 [ 243.480801][ T9602] hid_report_raw_event+0xe8f/0x1720 [ 243.486219][ T9602] hid_input_report+0x44b/0x580 [ 243.491197][ T9602] hid_irq_in+0x47e/0x6d0 [ 243.495759][ T9602] __usb_hcd_giveback_urb+0x376/0x540 [ 243.501436][ T9602] dummy_timer+0xbbd/0x45d0 [ 243.506160][ T9602] __hrtimer_run_queues+0x53a/0xcc0 [ 243.511487][ T9602] hrtimer_run_softirq+0x182/0x5a0 [ 243.516803][ T9602] handle_softirqs+0x22a/0x870 [ 243.521702][ T9602] __irq_exit_rcu+0x5f/0x150 [ 243.526414][ T9602] irq_exit_rcu+0x9/0x30 [ 243.530825][ T9602] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 243.536583][ T9602] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.542678][ T9602] batadv_send_skb_packet+0x9a/0x690 [ 243.548224][ T9602] batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0 [ 243.555417][ T9602] process_scheduled_works+0xb02/0x1830 [ 243.561526][ T9602] worker_thread+0xa50/0xfc0 [ 243.566359][ T9602] kthread+0x388/0x470 [ 243.570933][ T9602] ret_from_fork+0x51e/0xb90 [ 243.575668][ T9602] ret_from_fork_asm+0x1a/0x30 [ 243.580738][ T9602] [ 243.580738][ T9602] to a SOFTIRQ-irq-unsafe lock: [ 243.587940][ T9602] (tasklist_lock){.+.+}-{3:3} [ 243.587979][ T9602] [ 243.587979][ T9602] ... which became SOFTIRQ-irq-unsafe at: [ 243.601254][ T9602] ... [ 243.601269][ T9602] lock_acquire+0xf0/0x2e0 [ 243.609007][ T9602] _raw_read_lock+0x36/0x50 [ 243.613905][ T9602] __do_wait+0xde/0x740 [ 243.618183][ T9602] do_wait+0x1e7/0x540 [ 243.622460][ T9602] kernel_wait+0xd6/0x1c0 [ 243.626901][ T9602] call_usermodehelper_exec_work+0xbe/0x230 [ 243.632924][ T9602] process_scheduled_works+0xb02/0x1830 [ 243.638603][ T9602] worker_thread+0xa50/0xfc0 [ 243.643323][ T9602] kthread+0x388/0x470 [ 243.647505][ T9602] ret_from_fork+0x51e/0xb90 [ 243.652658][ T9602] ret_from_fork_asm+0x1a/0x30 [ 243.657646][ T9602] [ 243.657646][ T9602] other info that might help us debug this: [ 243.657646][ T9602] [ 243.668033][ T9602] Chain exists of: [ 243.668033][ T9602] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 243.668033][ T9602] [ 243.681154][ T9602] Possible interrupt unsafe locking scenario: [ 243.681154][ T9602] [ 243.690386][ T9602] CPU0 CPU1 [ 243.696405][ T9602] ---- ---- [ 243.701813][ T9602] lock(tasklist_lock); [ 243.706182][ T9602] local_irq_disable(); [ 243.713140][ T9602] lock(&dev->event_lock#2); [ 243.720383][ T9602] lock(&f_owner->lock); [ 243.727440][ T9602] [ 243.730935][ T9602] lock(&dev->event_lock#2); [ 243.735829][ T9602] [ 243.735829][ T9602] *** DEADLOCK *** [ 243.735829][ T9602] [ 243.744174][ T9602] 5 locks held by syz.1.1463/9602: [ 243.749405][ T9602] #0: ffff88807775a420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 243.758681][ T9602] #1: ffff888077483010 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 243.769647][ T9602] #2: ffffffff9a2eb278 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 243.779184][ T9602] #3: ffff88807ed8cd80 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 243.789346][ T9602] #4: ffff88802a3c3a20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 243.798726][ T9602] [ 243.798726][ T9602] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 243.809169][ T9602] -> (&dev->event_lock#2){..-.}-{3:3} { [ 243.815146][ T9602] IN-SOFTIRQ-W at: [ 243.819619][ T9602] lock_acquire+0xf0/0x2e0 [ 243.826091][ T9602] _raw_spin_lock_irqsave+0x40/0x60 [ 243.833338][ T9602] input_event+0x76/0xe0 [ 243.839806][ T9602] hidinput_hid_event+0x142d/0x1e60 [ 243.847052][ T9602] hid_process_event+0x4be/0x620 [ 243.854042][ T9602] hid_report_raw_event+0xe8f/0x1720 [ 243.861373][ T9602] hid_input_report+0x44b/0x580 [ 243.868324][ T9602] hid_irq_in+0x47e/0x6d0 [ 243.874783][ T9602] __usb_hcd_giveback_urb+0x376/0x540 [ 243.882216][ T9602] dummy_timer+0xbbd/0x45d0 [ 243.888762][ T9602] __hrtimer_run_queues+0x53a/0xcc0 [ 243.896290][ T9602] hrtimer_run_softirq+0x182/0x5a0 [ 243.903793][ T9602] handle_softirqs+0x22a/0x870 [ 243.910696][ T9602] __irq_exit_rcu+0x5f/0x150 [ 243.917328][ T9602] irq_exit_rcu+0x9/0x30 [ 243.923698][ T9602] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 243.931633][ T9602] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.939911][ T9602] batadv_send_skb_packet+0x9a/0x690 [ 243.947256][ T9602] batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0 [ 243.956863][ T9602] process_scheduled_works+0xb02/0x1830 [ 243.964725][ T9602] worker_thread+0xa50/0xfc0 [ 243.971437][ T9602] kthread+0x388/0x470 [ 243.977627][ T9602] ret_from_fork+0x51e/0xb90 [ 243.984745][ T9602] ret_from_fork_asm+0x1a/0x30 [ 243.991925][ T9602] INITIAL USE at: [ 243.996118][ T9602] lock_acquire+0xf0/0x2e0 [ 244.002664][ T9602] _raw_spin_lock_irqsave+0x40/0x60 [ 244.010385][ T9602] input_inject_event+0xa5/0x340 [ 244.018306][ T9602] kbd_led_trigger_activate+0xbc/0x100 [ 244.026144][ T9602] led_trigger_set+0x535/0x960 [ 244.033090][ T9602] led_trigger_set_default+0x260/0x2a0 [ 244.041115][ T9602] led_classdev_register_ext+0x787/0x9c0 [ 244.048709][ T9602] input_leds_connect+0x517/0x790 [ 244.056160][ T9602] input_register_device+0xd00/0x1160 [ 244.063497][ T9602] atkbd_connect+0x731/0xa50 [ 244.070137][ T9602] serio_driver_probe+0x82/0xd0 [ 244.077198][ T9602] really_probe+0x267/0xaf0 [ 244.084091][ T9602] __driver_probe_device+0x18c/0x320 [ 244.091688][ T9602] driver_probe_device+0x4f/0x240 [ 244.098822][ T9602] __driver_attach+0x3e7/0x710 [ 244.105729][ T9602] bus_for_each_dev+0x23b/0x2c0 [ 244.112905][ T9602] serio_handle_event+0x20a/0xdd0 [ 244.120240][ T9602] process_scheduled_works+0xb02/0x1830 [ 244.128233][ T9602] worker_thread+0xa50/0xfc0 [ 244.134884][ T9602] kthread+0x388/0x470 [ 244.141153][ T9602] ret_from_fork+0x51e/0xb90 [ 244.147701][ T9602] ret_from_fork_asm+0x1a/0x30 [ 244.154593][ T9602] } [ 244.157286][ T9602] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 244.166516][ T9602] -> (&new->fa_lock){....}-{3:3} { [ 244.171765][ T9602] INITIAL USE at: [ 244.175903][ T9602] lock_acquire+0xf0/0x2e0 [ 244.183243][ T9602] _raw_write_lock_irq+0x3d/0x50 [ 244.190777][ T9602] fasync_remove_entry+0xf1/0x1c0 [ 244.197847][ T9602] pipe_fasync+0xa9/0x1e0 [ 244.204067][ T9602] __fput+0x8a5/0xa70 [ 244.209826][ T9602] delayed_fput+0x63/0xa0 [ 244.215952][ T9602] process_scheduled_works+0xb02/0x1830 [ 244.223328][ T9602] worker_thread+0xa50/0xfc0 [ 244.229792][ T9602] kthread+0x388/0x470 [ 244.235716][ T9602] ret_from_fork+0x51e/0xb90 [ 244.242173][ T9602] ret_from_fork_asm+0x1a/0x30 [ 244.248805][ T9602] INITIAL READ USE at: [ 244.253876][ T9602] lock_acquire+0xf0/0x2e0 [ 244.260525][ T9602] _raw_read_lock_irqsave+0x48/0x60 [ 244.268153][ T9602] kill_fasync+0x199/0x4d0 [ 244.274851][ T9602] anon_pipe_write+0x728/0x1480 [ 244.282098][ T9602] aio_write+0x5cd/0x870 [ 244.289257][ T9602] io_submit_one+0x7bb/0x14c0 [ 244.296992][ T9602] __se_sys_io_submit+0x195/0x340 [ 244.304328][ T9602] do_syscall_64+0x14d/0xf80 [ 244.311624][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.320075][ T9602] } [ 244.322778][ T9602] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 244.332021][ T9602] ... acquired at: [ 244.335938][ T9602] _raw_read_lock_irqsave+0x48/0x60 [ 244.341353][ T9602] kill_fasync+0x199/0x4d0 [ 244.346068][ T9602] mousedev_notify_readers+0x6f1/0xc00 [ 244.351748][ T9602] mousedev_event+0x602/0x1320 [ 244.356854][ T9602] input_handle_events_default+0xd4/0x1a0 [ 244.362897][ T9602] input_pass_values+0x288/0x890 [ 244.368182][ T9602] input_event_dispose+0x330/0x6b0 [ 244.373527][ T9602] input_inject_event+0x1dd/0x340 [ 244.378771][ T9602] evdev_write+0x325/0x4c0 [ 244.383855][ T9602] vfs_write+0x29a/0xb90 [ 244.388976][ T9602] ksys_write+0x150/0x270 [ 244.393525][ T9602] do_syscall_64+0x14d/0xf80 [ 244.398419][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.404519][ T9602] [ 244.406866][ T9602] -> (&f_owner->lock){....}-{3:3} { [ 244.412287][ T9602] INITIAL USE at: [ 244.416202][ T9602] lock_acquire+0xf0/0x2e0 [ 244.422310][ T9602] _raw_write_lock_irq+0x3d/0x50 [ 244.428944][ T9602] __f_setown+0x67/0x370 [ 244.434791][ T9602] generic_setlease+0xacf/0xff0 [ 244.441474][ T9602] do_fcntl_add_lease+0x35e/0x470 [ 244.448623][ T9602] fcntl_setlease+0x123/0x180 [ 244.454909][ T9602] do_fcntl+0x8b3/0x1a20 [ 244.460757][ T9602] __se_sys_fcntl+0xc8/0x150 [ 244.466953][ T9602] do_syscall_64+0x14d/0xf80 [ 244.473339][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.481048][ T9602] INITIAL READ USE at: [ 244.485961][ T9602] lock_acquire+0xf0/0x2e0 [ 244.492617][ T9602] _raw_read_lock_irqsave+0x48/0x60 [ 244.500853][ T9602] send_sigio+0x38/0x370 [ 244.507230][ T9602] kill_fasync+0x24d/0x4d0 [ 244.513724][ T9602] lease_break_callback+0x26/0x30 [ 244.521000][ T9602] __break_lease+0x81c/0x1e80 [ 244.528067][ T9602] try_break_deleg+0xfc/0x180 [ 244.535388][ T9602] vfs_rename+0x9ad/0xeb0 [ 244.542016][ T9602] filename_renameat2+0x539/0x9c0 [ 244.549651][ T9602] __se_sys_rename+0x55/0x2c0 [ 244.556836][ T9602] do_syscall_64+0x14d/0xf80 [ 244.563467][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.572028][ T9602] } [ 244.575024][ T9602] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 244.584240][ T9602] ... acquired at: [ 244.588257][ T9602] _raw_read_lock_irqsave+0x48/0x60 [ 244.594187][ T9602] send_sigio+0x38/0x370 [ 244.598628][ T9602] kill_fasync+0x24d/0x4d0 [ 244.603262][ T9602] lease_break_callback+0x26/0x30 [ 244.608670][ T9602] __break_lease+0x81c/0x1e80 [ 244.613559][ T9602] try_break_deleg+0xfc/0x180 [ 244.618612][ T9602] vfs_rename+0x9ad/0xeb0 [ 244.623239][ T9602] filename_renameat2+0x539/0x9c0 [ 244.628653][ T9602] __se_sys_rename+0x55/0x2c0 [ 244.634069][ T9602] do_syscall_64+0x14d/0xf80 [ 244.639059][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.645207][ T9602] [ 244.647567][ T9602] [ 244.647567][ T9602] the dependencies between the lock to be acquired [ 244.647578][ T9602] and SOFTIRQ-irq-unsafe lock: [ 244.661508][ T9602] -> (tasklist_lock){.+.+}-{3:3} { [ 244.666686][ T9602] HARDIRQ-ON-R at: [ 244.670710][ T9602] lock_acquire+0xf0/0x2e0 [ 244.676912][ T9602] _raw_read_lock+0x36/0x50 [ 244.683187][ T9602] __do_wait+0xde/0x740 [ 244.689423][ T9602] do_wait+0x1e7/0x540 [ 244.695368][ T9602] kernel_wait+0xd6/0x1c0 [ 244.701391][ T9602] call_usermodehelper_exec_work+0xbe/0x230 [ 244.709058][ T9602] process_scheduled_works+0xb02/0x1830 [ 244.716341][ T9602] worker_thread+0xa50/0xfc0 [ 244.722624][ T9602] kthread+0x388/0x470 [ 244.728636][ T9602] ret_from_fork+0x51e/0xb90 [ 244.735021][ T9602] ret_from_fork_asm+0x1a/0x30 [ 244.741732][ T9602] SOFTIRQ-ON-R at: [ 244.745783][ T9602] lock_acquire+0xf0/0x2e0 [ 244.752000][ T9602] _raw_read_lock+0x36/0x50 [ 244.758494][ T9602] __do_wait+0xde/0x740 [ 244.764510][ T9602] do_wait+0x1e7/0x540 [ 244.770435][ T9602] kernel_wait+0xd6/0x1c0 [ 244.776549][ T9602] call_usermodehelper_exec_work+0xbe/0x230 [ 244.784786][ T9602] process_scheduled_works+0xb02/0x1830 [ 244.793687][ T9602] worker_thread+0xa50/0xfc0 [ 244.800271][ T9602] kthread+0x388/0x470 [ 244.806049][ T9602] ret_from_fork+0x51e/0xb90 [ 244.812517][ T9602] ret_from_fork_asm+0x1a/0x30 [ 244.819165][ T9602] INITIAL USE at: [ 244.823143][ T9602] lock_acquire+0xf0/0x2e0 [ 244.830132][ T9602] _raw_write_lock_irq+0x3d/0x50 [ 244.838066][ T9602] copy_process+0x247a/0x3cf0 [ 244.844777][ T9602] kernel_clone+0x248/0x8e0 [ 244.851335][ T9602] user_mode_thread+0x110/0x180 [ 244.858749][ T9602] rest_init+0x23/0x300 [ 244.865289][ T9602] start_kernel+0x385/0x3d0 [ 244.871624][ T9602] x86_64_start_reservations+0x24/0x30 [ 244.881211][ T9602] x86_64_start_kernel+0x143/0x1c0 [ 244.888359][ T9602] common_startup_64+0x13e/0x147 [ 244.895465][ T9602] INITIAL READ USE at: [ 244.899851][ T9602] lock_acquire+0xf0/0x2e0 [ 244.906340][ T9602] _raw_read_lock+0x36/0x50 [ 244.912881][ T9602] __do_wait+0xde/0x740 [ 244.919247][ T9602] do_wait+0x1e7/0x540 [ 244.925445][ T9602] kernel_wait+0xd6/0x1c0 [ 244.931955][ T9602] call_usermodehelper_exec_work+0xbe/0x230 [ 244.940165][ T9602] process_scheduled_works+0xb02/0x1830 [ 244.947974][ T9602] worker_thread+0xa50/0xfc0 [ 244.954911][ T9602] kthread+0x388/0x470 [ 244.961025][ T9602] ret_from_fork+0x51e/0xb90 [ 244.967661][ T9602] ret_from_fork_asm+0x1a/0x30 [ 244.974474][ T9602] } [ 244.977046][ T9602] ... key at: [] tasklist_lock+0x18/0x40 [ 244.985177][ T9602] ... acquired at: [ 244.989454][ T9602] _raw_read_lock+0x36/0x50 [ 244.994283][ T9602] send_sigio+0x101/0x370 [ 244.999106][ T9602] dnotify_handle_event+0x169/0x440 [ 245.004612][ T9602] fsnotify+0x1831/0x1ae0 [ 245.009264][ T9602] fsnotify_move+0x1d7/0x5b0 [ 245.014516][ T9602] vfs_rename+0xcdd/0xeb0 [ 245.019068][ T9602] filename_renameat2+0x539/0x9c0 [ 245.024413][ T9602] __se_sys_renameat2+0x5a/0x2c0 [ 245.030367][ T9602] do_syscall_64+0x14d/0xf80 [ 245.035447][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.041734][ T9602] [ 245.044088][ T9602] [ 245.044088][ T9602] stack backtrace: [ 245.050328][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.1.1463 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.050358][ T9602] Tainted: [L]=SOFTLOCKUP [ 245.050364][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.050382][ T9602] Call Trace: [ 245.050392][ T9602] [ 245.050400][ T9602] dump_stack_lvl+0xe8/0x150 [ 245.050431][ T9602] __lock_acquire+0x2a94/0x2cf0 [ 245.050464][ T9602] lock_acquire+0xf0/0x2e0 [ 245.050484][ T9602] ? send_sigio+0x101/0x370 [ 245.050504][ T9602] _raw_read_lock+0x36/0x50 [ 245.050528][ T9602] ? send_sigio+0x101/0x370 [ 245.050542][ T9602] send_sigio+0x101/0x370 [ 245.050559][ T9602] dnotify_handle_event+0x169/0x440 [ 245.050583][ T9602] fsnotify+0x1831/0x1ae0 [ 245.050614][ T9602] ? fsnotify+0x74c/0x1ae0 [ 245.050638][ T9602] ? __pfx_fsnotify+0x10/0x10 [ 245.050665][ T9602] ? dput+0x37/0x1a0 [ 245.050689][ T9602] fsnotify_move+0x1d7/0x5b0 [ 245.050720][ T9602] vfs_rename+0xcdd/0xeb0 [ 245.050747][ T9602] ? __pfx_vfs_rename+0x10/0x10 [ 245.050767][ T9602] ? do_raw_spin_unlock+0xf5/0x210 [ 245.050786][ T9602] ? bpf_lsm_path_rename+0x9/0x20 [ 245.050801][ T9602] ? security_path_rename+0x17d/0x460 [ 245.050827][ T9602] filename_renameat2+0x539/0x9c0 [ 245.050854][ T9602] ? __pfx_filename_renameat2+0x10/0x10 [ 245.050882][ T9602] ? do_getname+0x151/0x250 [ 245.050903][ T9602] __se_sys_renameat2+0x5a/0x2c0 [ 245.050927][ T9602] do_syscall_64+0x14d/0xf80 [ 245.050952][ T9602] ? trace_irq_disable+0x3b/0x150 [ 245.050980][ T9602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.050997][ T9602] ? clear_bhb_loop+0x40/0x90 [ 245.051016][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.051034][ T9602] RIP: 0033:0x7f4142d9c799 [ 245.051058][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.051074][ T9602] RSP: 002b:00007f4143d03028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 245.051094][ T9602] RAX: ffffffffffffffda RBX: 00007f4143015fa0 RCX: 00007f4142d9c799 [ 245.051107][ T9602] RDX: ffffffffffffff9c RSI: 0000200000000240 RDI: ffffffffffffff9c [ 245.051120][ T9602] RBP: 00007f4142e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 245.051131][ T9602] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 245.051142][ T9602] R13: 00007f4143016038 R14: 00007f4143015fa0 R15: 00007f414313fa48 [ 245.051162][ T9602] [ 245.301747][ T6192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.381722][ T5976] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 245.547733][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 245.554845][ T5976] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.567731][ T5976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.574794][ T5976] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 245.584018][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.593942][ T5976] usb 3-1: config 0 descriptor?? [ 246.017008][ T5976] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 246.421176][ T5895] usb 3-1: USB disconnect, device number 24 [ 247.257711][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 249.578036][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog