last executing test programs: 11m19.295976237s ago: executing program 0 (id=11770): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 11m19.16010408s ago: executing program 0 (id=11772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 11m19.003440161s ago: executing program 0 (id=11776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [], {0x10, 0x5}, {0x20, 0x1}}, 0x24, 0x2) rmdir(&(0x7f0000000140)='./bus\x00') 11m18.790275886s ago: executing program 0 (id=11781): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 11m18.563451142s ago: executing program 0 (id=11785): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0xa00}, 0x20) 11m18.213999642s ago: executing program 0 (id=11788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000001880)=""/4109, 0x100d}, {&(0x7f0000001780)=""/69, 0x45}], 0x4}, 0x20) 11m3.128100448s ago: executing program 32 (id=11788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000001880)=""/4109, 0x100d}, {&(0x7f0000001780)=""/69, 0x45}], 0x4}, 0x20) 7.439245488s ago: executing program 4 (id=19580): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000001300)={0x40, 0x16, 0x49, "80fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000001100)={0x20, 0x30, 0x6, "8002ab1f8b65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.260045155s ago: executing program 4 (id=19620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 3.905874512s ago: executing program 3 (id=19628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x4000, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x10, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0x7ff}, {@empty}, {@private=0xa010101, 0x3}, {@private=0xa010102, 0x5}]}]}}}}}, 0xfdef) 3.717709308s ago: executing program 3 (id=19630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x3fe, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback={0x100000}, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 3.609776896s ago: executing program 3 (id=19631): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000908000200ac1efe010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 3.535811251s ago: executing program 3 (id=19632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xe4b5, 0xef4799, 0x375}) 2.131452971s ago: executing program 5 (id=19661): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.964647325s ago: executing program 5 (id=19673): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x4, 0x10001}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f00000003c0)={0x20, r1, 0x2, 0x0, &(0x7f0000000380)=[{}, {}]}) 1.886726797s ago: executing program 5 (id=19664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x10, 0x25000, 0x1, r2, 0xb}) 1.769626107s ago: executing program 5 (id=19665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2b, 0x0, {0x2, 0x10, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004a040}, 0x4010) 1.768712736s ago: executing program 2 (id=19676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.684522204s ago: executing program 5 (id=19666): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002080)='ns/ipc\x00') fchown(r0, 0x0, 0x0) 1.684405228s ago: executing program 2 (id=19667): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 1.600776524s ago: executing program 2 (id=19668): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1251027, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x5, 0x0, 0x0) 1.521511102s ago: executing program 2 (id=19669): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4106, 0x100a}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.084146492s ago: executing program 4 (id=19672): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0xfe, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 954.690122ms ago: executing program 4 (id=19674): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x5, 0x3) 953.94152ms ago: executing program 1 (id=19675): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) 826.853413ms ago: executing program 1 (id=19677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x80, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @random="ce99a8ba8228"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x80}}, 0x20000014) 795.846281ms ago: executing program 4 (id=19678): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 795.072449ms ago: executing program 2 (id=19688): unshare(0x60600) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) close(r0) 680.179899ms ago: executing program 5 (id=19679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x4, 0x8dbbae47f541461a, 0x0, 0xf23, 0x7, 0x5}) 679.923809ms ago: executing program 1 (id=19680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 566.843608ms ago: executing program 1 (id=19681): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="ed", 0x1, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9, 0x10000}, &(0x7f0000000140)=0x18) 566.651505ms ago: executing program 2 (id=19682): r0 = syz_io_uring_setup(0xf02, &(0x7f0000002200)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x54, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000023c0)={0x1, 0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002280)=""/134, 0x86}], 0x0}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) 561.382443ms ago: executing program 4 (id=19683): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x1, 0x2, r1, 0x0}]) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 459.361845ms ago: executing program 1 (id=19684): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r0, 0x12) 344.749281ms ago: executing program 3 (id=19685): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 180.599225ms ago: executing program 3 (id=19686): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r1, &(0x7f0000004900)={0x2020}, 0x2081) 0s ago: executing program 1 (id=19687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@remote, 0x6e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x1000080000000, 0x4, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0xfffffffffffffffb, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x3c}, 0xa, @in=@multicast1, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) kernel console output (not intermixed with test programs): wMaxPacketSize 0 [ 1314.045380][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.091859][ T5777] usb 3-1: config 0 descriptor?? [ 1314.121327][ T5777] hub 3-1:0.0: USB hub found [ 1314.377256][ T5777] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1314.510743][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.563844][T13014] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1314.576240][T12829] IPVS: starting estimator thread 0... [ 1314.660670][T13015] IPVS: using max 27 ests per chain, 64800 per kthread [ 1314.801806][ T5777] hid-generic 0003:046D:C31C.0074: unknown main item tag 0x0 [ 1314.833000][T10907] usb 2-1: USB disconnect, device number 10 [ 1314.861639][T10907] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1314.868700][ T5777] hid-generic 0003:046D:C31C.0074: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1314.989535][T10926] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1314.989788][ T9115] Bluetooth: hci1: command 0x0406 tx timeout [ 1315.018440][T10926] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1315.309594][T10916] usb 3-1: USB disconnect, device number 116 [ 1315.620375][T10927] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1315.777926][T10927] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1315.788640][T10927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.788694][T10927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.788743][T10927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1315.788793][T10927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.822159][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.855542][T10927] usb 6-1: config 0 descriptor?? [ 1316.259538][T10907] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1316.328631][T10927] plantronics 0003:047F:FFFF.0075: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1316.444335][T10907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 1316.447711][T10907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.447789][T10907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1316.454562][T10907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1316.454642][T10907] usb 3-1: SerialNumber: syz [ 1316.505429][T10907] usb 3-1: 0:2 : does not exist [ 1316.576184][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1316.576237][ T31] audit: type=1800 audit(1787904162.439:1578): pid=13056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18272" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1316.906671][T10907] usb 3-1: USB disconnect, device number 117 [ 1317.069662][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1317.076586][T10926] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1317.083136][T10926] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1318.039556][ T9201] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1318.228845][ T9201] usb 3-1: Using ep0 maxpacket: 8 [ 1318.236985][ T9201] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1318.254644][ T9201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.254694][ T9201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.254742][ T9201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.254790][ T9201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.306549][ T9201] usb 3-1: config 0 descriptor?? [ 1318.403431][T13096] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 1318.722124][T10925] usb 6-1: reset high-speed USB device number 68 using dummy_hcd [ 1318.782343][T10925] usb 6-1: device reset changed ep0 maxpacket size! [ 1318.817674][T10926] usb 6-1: USB disconnect, device number 68 [ 1319.002988][T12832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.014133][T10926] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1319.169977][T10926] usb 6-1: Using ep0 maxpacket: 8 [ 1319.176159][T10926] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1319.190519][T10926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1319.199084][T10926] usb 6-1: Product: syz [ 1319.203521][T10926] usb 6-1: Manufacturer: syz [ 1319.203779][ T9201] sony 0003:054C:042F.0076: can't set operational mode: step 1 [ 1319.203871][ T9201] sony 0003:054C:042F.0076: Failed to set controller into operational mode [ 1319.218893][ T9201] sony 0003:054C:042F.0076: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.2-1/input0 [ 1319.218934][ T9201] sony 0003:054C:042F.0076: failed to claim input [ 1319.249599][T10926] usb 6-1: SerialNumber: syz [ 1319.265875][ T9201] usb 3-1: USB disconnect, device number 118 [ 1319.272713][T10926] usb 6-1: config 0 descriptor?? [ 1319.300122][T10926] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1319.431203][T13116] fido_id[13116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1320.303640][T10926] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 1320.303755][T10926] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 1320.328940][T10926] usb 6-1: USB disconnect, device number 69 [ 1320.597597][T13151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1320.918595][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.026826][T13162] Invalid argument reading file caps for ./file0 [ 1321.175701][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18317'. [ 1321.175799][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18317'. [ 1321.175848][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18317'. [ 1321.175884][T13166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18317'. [ 1321.219596][T10926] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1321.252041][T13168] netlink: 'syz.5.18318': attribute type 2 has an invalid length. [ 1321.380849][T10926] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1321.382636][T10926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.389349][T10926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.389873][T10926] usb 3-1: Product: syz [ 1321.389922][T10926] usb 3-1: Manufacturer: syz [ 1321.389965][T10926] usb 3-1: SerialNumber: syz [ 1321.428437][T13172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1321.447316][T10926] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1321.717194][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.727503][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.727952][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.757558][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.757781][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.757954][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.758097][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.758244][T13178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.149574][ T5777] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1322.223564][T10926] gspca_mr97310a: reg read [21] error -71 [ 1322.223731][T10926] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 1322.255697][T10926] usb 3-1: USB disconnect, device number 119 [ 1322.300496][ T5777] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1322.304017][ T5777] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1322.304089][ T5777] usb 4-1: config 1 has no interface number 0 [ 1322.311815][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.311889][ T5777] usb 4-1: Product: syz [ 1322.311941][ T5777] usb 4-1: Manufacturer: syz [ 1322.311983][ T5777] usb 4-1: SerialNumber: syz [ 1322.362913][ T5777] usb 4-1: 3:1 : does not exist [ 1322.366758][ T5777] usb 4-1: 3:2 : does not exist [ 1323.211708][T10926] usb 4-1: USB disconnect, device number 3 [ 1323.639940][ T5777] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1323.789567][ T5777] usb 6-1: Using ep0 maxpacket: 8 [ 1323.791285][ T5777] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1323.794444][ T5777] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1323.794584][ T5777] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1323.794654][ T5777] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1323.794725][ T5777] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1323.794760][ T5777] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.794884][ T5777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.079732][ T5777] usb 6-1: usb_control_msg returned -32 [ 1324.079802][ T5777] usbtmc 6-1:16.0: can't read capabilities [ 1324.112782][T10907] net_ratelimit: 94 callbacks suppressed [ 1324.112835][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.329562][T10916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1324.356424][T13232] syzkaller1: entered promiscuous mode [ 1324.362432][T13232] syzkaller1: entered allmulticast mode [ 1324.445671][T13233] usbtmc 6-1:16.0: INDICATOR_PULSE returned 0 [ 1324.500233][T10916] usb 4-1: Using ep0 maxpacket: 8 [ 1324.506014][T10916] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1324.517509][T10916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1324.517556][T10916] usb 4-1: config 0 has no interface number 0 [ 1324.517622][T10916] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1324.517672][T10916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.554950][T10916] usb 4-1: config 0 descriptor?? [ 1324.571764][T10916] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1324.648029][T10916] usb 6-1: USB disconnect, device number 70 [ 1324.760176][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.777957][T10925] usb 4-1: USB disconnect, device number 4 [ 1326.229903][T10925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1326.379628][T10925] usb 2-1: Using ep0 maxpacket: 8 [ 1326.381614][T10925] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1326.384512][T10925] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1326.384605][T10925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1326.384679][T10925] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1326.384753][T10925] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1326.384806][T10925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.429602][T10926] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1326.604331][T10926] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1326.605736][T10926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.605853][T10926] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1326.666104][T10926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.666159][T10926] usb 4-1: Product: syz [ 1326.666177][T10926] usb 4-1: Manufacturer: syz [ 1326.666222][T10926] usb 4-1: SerialNumber: syz [ 1326.677625][T12822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.684607][T10925] usb 2-1: GET_CAPABILITIES returned 0 [ 1326.684733][T10925] usbtmc 2-1:16.0: can't read capabilities [ 1326.726451][T10926] snd-ua101 4-1:1.1: invalid num_altsetting [ 1326.726501][T10926] snd-ua101 4-1:1.0: invalid format type [ 1326.873832][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1326.873935][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1326.873989][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1326.887351][T10925] usb 2-1: USB disconnect, device number 11 [ 1326.936501][T10919] usb 4-1: USB disconnect, device number 5 [ 1327.316319][T13294] input: syz1 as /devices/virtual/input/input173 [ 1327.630276][T10919] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1327.790646][T10919] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1327.800720][T10919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1327.800790][T10919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1327.800849][T10919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1327.800934][T10919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1327.801082][T10919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.830806][T10919] usb 3-1: config 0 descriptor?? [ 1328.048315][T10919] hdpvr 3-1:0.0: firmware version 0x8 dated 5 [ 1328.249843][T10925] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1328.403564][T10925] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1328.416379][T10925] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.432390][T10925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.432448][T10925] usb 6-1: Product: syz [ 1328.432483][T10925] usb 6-1: Manufacturer: syz [ 1328.432506][T10925] usb 6-1: SerialNumber: syz [ 1328.471037][ T5777] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1328.549129][T10919] hdpvr 3-1:0.0: Could not setup controls [ 1328.560678][T10919] hdpvr 3-1:0.0: registering videodev failed [ 1328.630661][ T5777] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1328.643417][ T5777] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1328.643503][ T5777] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1328.643552][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.657875][T10919] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 1328.693708][T10919] usb 3-1: USB disconnect, device number 120 [ 1328.727491][ T5777] usb 4-1: probing VID:PID(0424:012C) [ 1328.741277][ T5777] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 1328.748285][ T5777] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1328.748371][ T5777] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 1328.748397][ T5777] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1328.748434][ T5777] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1328.893200][T10925] hackrf 6-1:1.0: usb_control_msg() failed -32 request 0f [ 1328.900646][T10925] hackrf 6-1:1.0: Could not detect board [ 1328.900772][T10925] hackrf 6-1:1.0: probe with driver hackrf failed with error -32 [ 1328.942007][T10925] usb 6-1: USB disconnect, device number 71 [ 1329.138478][ T5777] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1329.345871][ T5777] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1329.388449][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18384'. [ 1330.191807][ T5777] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 1330.229100][ T5777] usb 4-1: USB disconnect, device number 6 [ 1330.510119][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.952816][T13359] syzkaller1: entered promiscuous mode [ 1330.952873][T13359] syzkaller1: entered allmulticast mode [ 1331.543304][T13378] netlink: 140 bytes leftover after parsing attributes in process `syz.5.18404'. [ 1331.554563][T13378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18404'. [ 1331.790479][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.808160][T13386] dvmrp0: entered allmulticast mode [ 1331.970935][T13389] netlink: 'syz.2.18409': attribute type 7 has an invalid length. [ 1332.532703][T13400] input: syz0 as /devices/virtual/input/input174 [ 1332.594563][T13403] tipc: Started in network mode [ 1332.594629][T13403] tipc: Node identity ac14142f, cluster identity 4711 [ 1332.601557][T13403] tipc: Enabled bearer , priority 10 [ 1332.608571][T13403] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1333.388071][T13427] netlink: 'syz.5.18425': attribute type 13 has an invalid length. [ 1333.729335][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.793572][T10919] tipc: Node number set to 2886997039 [ 1334.191190][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18436'. [ 1334.246145][T13460] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 1334.349785][T10919] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1334.510399][T10919] usb 6-1: Using ep0 maxpacket: 8 [ 1334.514610][T10919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1334.517626][T10919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1334.517723][T10919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1334.517809][T10919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1334.517889][T10919] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1334.518008][T10919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.741845][T10919] usb 6-1: GET_CAPABILITIES returned 0 [ 1334.741923][T10919] usbtmc 6-1:16.0: can't read capabilities [ 1334.948911][T10919] usb 6-1: USB disconnect, device number 72 [ 1335.108606][T13491] ip_tables: iptables: counters copy to user failed while replacing table [ 1336.068663][T10919] hid-generic 0000:0000:0000.0077: unknown main item tag 0x0 [ 1336.090417][T10919] hid-generic 0000:0000:0000.0077: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1336.270158][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.106462][T13538] netlink: 8772 bytes leftover after parsing attributes in process `syz.1.18467'. [ 1337.550727][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.421320][T10926] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1339.569661][T10926] usb 2-1: Using ep0 maxpacket: 32 [ 1339.572002][T10926] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1339.575818][T10926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.575902][T10926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.576016][T10926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.618432][T10926] usb 2-1: config 0 descriptor?? [ 1339.636938][T10926] hub 2-1:0.0: USB hub found [ 1339.839014][T10926] hub 2-1:0.0: 1 port detected [ 1340.045690][T10926] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1340.059511][T10916] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1340.077519][T10926] usbhid 2-1:0.0: can't add hid device: -71 [ 1340.077780][T10926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1340.110611][T10926] usb 2-1: USB disconnect, device number 12 [ 1340.220061][T10916] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1340.231625][T10916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1340.242441][T10916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1340.242511][T10916] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1340.251871][T10916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.251962][T10916] usb 3-1: Product: syz [ 1340.252003][T10916] usb 3-1: Manufacturer: syz [ 1340.252043][T10916] usb 3-1: SerialNumber: syz [ 1340.266450][T10916] usb 3-1: config 0 descriptor?? [ 1340.270693][T13592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1340.273744][T13592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1340.276194][T10916] usb 3-1: ucan: probing device on interface #0 [ 1340.864875][ T31] audit: type=1804 audit(1787904186.729:1579): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.18500" name="/newroot/1312/file1" dev="tmpfs" ino=6659 res=1 errno=0 [ 1340.910177][T10916] ucan 3-1:0.0 can0: registered device [ 1340.979913][T10919] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1341.096242][T10916] ucan 3-1:0.0 can0: firmware string: unknown [ 1341.117756][T10916] usb 3-1: USB disconnect, device number 121 [ 1341.153987][T13616] netlink: 'syz.5.18503': attribute type 12 has an invalid length. [ 1341.154038][T13616] netlink: 248 bytes leftover after parsing attributes in process `syz.5.18503'. [ 1341.175595][T10919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1341.186216][T10919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.186276][T10919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.186305][T10919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1341.186458][T10919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.212985][T10919] usb 2-1: config 0 descriptor?? [ 1341.648029][T10919] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1342.030169][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.671706][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.956366][ C1] plantronics 0003:047F:FFFF.0078: usb_submit_urb(ctrl) failed: -1 [ 1343.201450][T10916] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1343.321679][T31755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.370331][T10916] usb 3-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 1343.374203][T10916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.374296][T10916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1343.374414][T10916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.386912][T10916] usb 3-1: config 0 descriptor?? [ 1343.398308][T13664] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1343.504297][T13682] input: syz0 as /devices/virtual/input/input175 [ 1343.824760][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.824824][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.824897][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.824989][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.825090][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.825171][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.825261][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.825321][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.825403][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.825476][T10916] waltop 0003:172F:0502.0079: unknown main item tag 0x0 [ 1343.872446][T10916] waltop 0003:172F:0502.0079: hidraw1: USB HID v7f.fd Device [HID 172f:0502] on usb-dummy_hcd.2-1/input0 [ 1344.027314][T10916] usb 3-1: USB disconnect, device number 122 [ 1344.029895][T10919] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 1344.063981][T10919] usb 2-1: device reset changed ep0 maxpacket size! [ 1344.114915][T10907] usb 2-1: USB disconnect, device number 13 [ 1344.289674][T10907] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1344.349710][T31755] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1344.449803][T10907] usb 2-1: Using ep0 maxpacket: 8 [ 1344.452190][T10907] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1344.465929][T10907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.465983][T10907] usb 2-1: Product: syz [ 1344.466622][T10907] usb 2-1: Manufacturer: syz [ 1344.466675][T10907] usb 2-1: SerialNumber: syz [ 1344.510016][T31755] usb 6-1: Using ep0 maxpacket: 16 [ 1344.513539][T31755] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1344.526450][T31755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.526494][T31755] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.526569][T31755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.563618][T31755] usb 6-1: config 0 descriptor?? [ 1344.703483][ C0] blk_print_req_error: 26 callbacks suppressed [ 1344.703541][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1344.722376][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.722528][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1344.722908][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.723116][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1344.723527][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.723738][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 1344.724002][ C0] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.724207][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 1344.724499][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.724701][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 1344.725094][ C0] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.725288][ C0] Buffer I/O error on dev loop9, logical block 5, async page read [ 1344.725703][ C0] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1344.725957][ C0] Buffer I/O error on dev loop9, logical block 6, async page read [ 1344.901140][T10907] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1344.901488][T10907] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 1344.933609][T10907] usb 2-1: USB disconnect, device number 14 [ 1345.240617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.259453][T31755] usb 6-1: language id specifier not provided by device, defaulting to English [ 1345.370311][T13724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.372749][T13724] bridge0: port 2(bond0) entered blocking state [ 1345.374923][T13724] bridge0: port 2(bond0) entered disabled state [ 1345.375451][T13724] bond0: entered allmulticast mode [ 1345.384250][T13724] bond0: entered promiscuous mode [ 1345.385453][T13724] bridge0: port 2(bond0) entered blocking state [ 1345.385584][T13724] bridge0: port 2(bond0) entered forwarding state [ 1345.416480][ T50] bridge0: port 2(bond0) entered disabled state [ 1345.471573][T31755] letsketch 0003:6161:4D15.007A: Device info:  [ 1345.704482][T31755] usb 6-1: Max retries (5) exceeded reading string descriptor 201 [ 1345.715504][T31755] letsketch 0003:6161:4D15.007A: probe with driver letsketch failed with error -71 [ 1345.735349][T31755] usb 6-1: USB disconnect, device number 73 [ 1345.771511][T13737] ALSA: mixer_oss: invalid OSS volume 'vice' [ 1345.771558][T13737] ALSA: mixer_oss: invalid OSS volume '1' [ 1345.771574][T13737] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1345.771587][T13737] ALSA: mixer_oss: invalid OSS volume '2' [ 1345.793790][T10907] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1345.960892][T10907] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1345.974058][T10907] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1345.974108][T10907] usb 2-1: Product: syz [ 1345.992355][T10907] usb 2-1: config 0 descriptor?? [ 1346.004241][T10907] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1346.014961][T10907] usb 2-1: Detected FT232H [ 1346.206095][T10907] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1346.591261][T10926] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1346.627039][T10907] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1346.749749][T10926] usb 3-1: Using ep0 maxpacket: 16 [ 1346.750945][T10926] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1346.755159][T10926] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.755252][T10926] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.755315][T10926] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1346.755395][T10926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1346.755439][T10926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.771210][T10926] usb 3-1: config 0 descriptor?? [ 1346.826965][T10907] usb 2-1: USB disconnect, device number 15 [ 1346.867724][T10907] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1346.879066][T10907] ftdi_sio 2-1:0.0: device disconnected [ 1347.412409][T10926] usb 3-1: USB disconnect, device number 123 [ 1347.530384][T13769] sctp: [Deprecated]: syz.5.18567 (pid 13769) Use of int in max_burst socket option. [ 1347.530384][T13769] Use struct sctp_assoc_value instead [ 1347.713212][T13771] batman_adv: batadv0: Interface deactivated: macvtap1 [ 1347.792571][T12822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.806219][T13771] batman_adv: batadv0: Removing interface: macvtap1 [ 1348.270023][T13795] netlink: 'syz.2.18578': attribute type 4 has an invalid length. [ 1348.278061][T13795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18578'. [ 1348.294705][T13795] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1348.392557][T13799] bridge0: port 1(syz_tun) entered blocking state [ 1348.395884][T13799] bridge0: port 1(syz_tun) entered disabled state [ 1348.396458][T13799] syz_tun: entered allmulticast mode [ 1348.405600][T13799] syz_tun: entered promiscuous mode [ 1348.432233][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.444030][T13799] bridge0: port 3(batadv0) entered blocking state [ 1348.456712][T13799] bridge0: port 3(batadv0) entered disabled state [ 1348.464017][T13799] batadv0: entered allmulticast mode [ 1348.473646][T13799] batadv0: entered promiscuous mode [ 1348.739657][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1348.739695][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1349.008712][T13828] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.18592'. [ 1349.018809][T13828] netlink: 1700 bytes leftover after parsing attributes in process `syz.1.18592'. [ 1349.370698][T13840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18598'. [ 1349.470635][T10907] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1349.640713][T10907] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.644441][T10907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1349.644541][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1349.644635][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1349.644699][T10907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1349.644826][T10907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.655751][T10907] usb 3-1: config 0 descriptor?? [ 1349.908520][T13854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.909263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.053589][T13858] vimc link validate: Sensor B:src:16x16 (0x33424752, 9, 0, 0, 0) Raw Capture 1:snk:4096x16 (0x32314247, 8, 0, 0, 0) [ 1350.121435][T10907] plantronics 0003:047F:FFFF.007C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1350.152268][T10907] hid_parser_main: 218 callbacks suppressed [ 1350.160007][T10907] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 1350.168126][T10907] hid-generic 0000:0000:0000.007D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1350.383100][T10907] usb 3-1: USB disconnect, device number 124 [ 1350.398977][T13863] fido_id[13863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1351.082109][T10907] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1351.246158][T10907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1351.249523][T10907] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1351.249669][T10907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1351.249749][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1351.249821][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1351.249892][T10907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1351.250015][T10907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.281843][T10907] usb 2-1: config 0 descriptor?? [ 1351.288737][T13876] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1351.720245][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.720314][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.720343][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.720465][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.720557][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.720632][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.720717][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.726800][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.728577][T10907] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 1351.812939][T10907] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1351.919539][T10926] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1352.026787][T10907] usb 2-1: USB disconnect, device number 16 [ 1352.070143][T10926] usb 6-1: Using ep0 maxpacket: 16 [ 1352.076166][T10926] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1352.092921][T10926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.092977][T10926] usb 6-1: Product: syz [ 1352.093016][T10926] usb 6-1: Manufacturer: syz [ 1352.093039][T10926] usb 6-1: SerialNumber: syz [ 1352.551212][T10926] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1352.563409][T10926] usb 6-1: USB disconnect, device number 74 [ 1352.925162][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.223765][T13941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18642'. [ 1353.546985][T13958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.557698][T12822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.596183][T13962] netlink: 'syz.5.18651': attribute type 1 has an invalid length. [ 1353.604696][T13962] netlink: 'syz.5.18651': attribute type 2 has an invalid length. [ 1353.612856][T13962] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1354.040220][T31755] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1354.190442][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.201764][T31755] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1354.203503][T31755] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1354.203566][T31755] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1354.203621][T31755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.258753][T13969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1354.288102][T31755] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1354.562140][T31755] usb 2-1: USB disconnect, device number 17 [ 1355.737628][ T31] audit: type=1326 audit(1787904201.599:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14007 comm="syz.5.18672" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f075dd9e159 code=0x0 [ 1356.460017][T10926] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1356.621826][T10926] usb 2-1: Using ep0 maxpacket: 32 [ 1356.630508][T10926] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1356.669801][T10926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.692243][T10926] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1357.354998][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18696'. [ 1357.627865][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18699'. [ 1357.689760][T10926] gspca_nw80x: reg_w err -71 [ 1357.689911][T10926] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 1357.705282][T10926] usb 2-1: USB disconnect, device number 18 [ 1358.132531][T14090] hsr0: entered allmulticast mode [ 1358.132574][T14090] hsr_slave_0: entered allmulticast mode [ 1358.132947][T14090] hsr_slave_1: entered allmulticast mode [ 1358.134512][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18703'. [ 1358.163398][T14090] hsr_slave_0: left promiscuous mode [ 1358.172956][T14090] hsr_slave_1: left promiscuous mode [ 1358.198298][T14090] hsr0 (unregistering): left allmulticast mode [ 1358.393190][T14094] loop5: detected capacity change from 0 to 7 [ 1358.400760][T14094] Dev loop5: unable to read RDB block 7 [ 1358.406600][T14094] loop5: AHDI p1 p2 p3 [ 1358.411092][T14094] loop5: partition table partially beyond EOD, truncated [ 1358.418593][T14094] loop5: p2 start 16777216 is beyond EOD, truncated [ 1358.670396][T12822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.750290][T10916] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1358.887536][T14114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1358.906581][T10916] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1358.913362][T10916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.913465][T10916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.913528][T10916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1358.913645][T10916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.951456][T10916] usb 2-1: config 0 descriptor?? [ 1359.404609][T10916] hid_parser_main: 6 callbacks suppressed [ 1359.405926][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.406039][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.406122][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.406197][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.406301][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.406388][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.406461][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.409891][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.410013][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.410093][T10916] plantronics 0003:047F:FFFF.007F: unknown main item tag 0x0 [ 1359.507055][T10916] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1359.661770][T10907] usb 2-1: USB disconnect, device number 19 [ 1359.820407][T10916] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1359.950922][T25366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.979600][T10916] usb 6-1: Using ep0 maxpacket: 32 [ 1359.981758][T10916] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1359.985184][T10916] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1359.985265][T10916] usb 6-1: config 0 has no interface number 0 [ 1359.992927][T10916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.993019][T10916] usb 6-1: Product: syz [ 1359.993062][T10916] usb 6-1: Manufacturer: syz [ 1359.993104][T10916] usb 6-1: SerialNumber: syz [ 1360.016656][T10916] usb 6-1: config 0 descriptor?? [ 1360.037773][T10916] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1360.249359][T10916] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1360.265873][T10916] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1360.445106][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.460022][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.673049][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1360.676231][T10916] usb 6-1: USB disconnect, device number 75 [ 1360.700120][T10916] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1360.717394][T10916] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1360.731931][T10916] quatech2 6-1:0.51: device disconnected [ 1360.917920][T14150] syzkaller1: entered promiscuous mode [ 1360.917982][T14150] syzkaller1: entered allmulticast mode [ 1361.329880][T10926] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1361.480239][T10926] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1361.492309][T10926] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1361.492366][T10926] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1361.492429][T10926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.531357][T14154] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1361.554617][T10926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1361.765343][T10916] usb 3-1: USB disconnect, device number 125 [ 1361.873020][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.873112][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.520270][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.759595][T14189] netlink: 7 bytes leftover after parsing attributes in process `syz.2.18745'. [ 1363.130935][T10926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.133919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.272918][T14206] input: syz0 as /devices/virtual/input/input178 [ 1363.492790][T14213] input: syz0 as /devices/virtual/input/input179 [ 1364.010098][T31755] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1364.190782][T10927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.191060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.433196][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.778178][T31755] hid_parser_main: 6 callbacks suppressed [ 1364.778241][T31755] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 1364.807381][T31755] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1365.519655][T10926] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1365.553997][T14268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.556339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.669779][T10926] usb 6-1: Using ep0 maxpacket: 8 [ 1365.675735][T10926] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1365.686445][T10926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1365.686513][T10926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.710733][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.720665][T10926] usb 6-1: config 0 descriptor?? [ 1365.776398][T14278] netlink: 'syz.2.18782': attribute type 11 has an invalid length. [ 1365.938931][T10926] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1366.339579][T31755] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1366.489840][T31755] usb 2-1: Using ep0 maxpacket: 32 [ 1366.494171][T31755] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1366.498070][T31755] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1366.498156][T31755] usb 2-1: config 0 has no interface number 0 [ 1366.498285][T31755] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.498369][T31755] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.498482][T31755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.519125][T31755] usb 2-1: config 0 descriptor?? [ 1366.949205][T31755] ft260 0003:0403:6030.0082: unknown main item tag 0x0 [ 1367.144216][T31755] ft260 0003:0403:6030.0082: chip code: 6424 8183 [ 1367.345122][T31755] ft260 0003:0403:6030.0082: uart interface is not supported [ 1367.568681][T10925] usb 2-1: USB disconnect, device number 20 [ 1367.932080][T14327] ip_tables: iptables: counters copy to user failed while replacing table [ 1367.938772][T14327] tipc: Enabling of bearer rejected, already enabled [ 1368.066971][T31755] usb 6-1: USB disconnect, device number 76 [ 1368.237329][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18810'. [ 1368.237394][T14337] netlink: 'syz.2.18810': attribute type 10 has an invalid length. [ 1368.237414][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18810'. [ 1368.273615][T14337] geneve2: entered promiscuous mode [ 1368.273671][T14337] geneve2: entered allmulticast mode [ 1368.790149][T14354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18818'. [ 1369.155426][T14369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1369.378934][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18829'. [ 1369.553638][T25366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.409546][T10926] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1370.560639][T10926] usb 6-1: Using ep0 maxpacket: 32 [ 1370.562494][T10926] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1370.565915][T10926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.589137][T10926] usb 6-1: config 0 descriptor?? [ 1370.617898][T10926] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1370.718059][T14434] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 1371.469965][T12832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.509511][T10907] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1371.591485][T10927] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1371.647143][T10926] gspca_sunplus: reg_w_riv err -71 [ 1371.647257][T10926] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1371.663503][T10907] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1371.666560][T10907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.684271][T10926] usb 6-1: USB disconnect, device number 77 [ 1371.692534][T10907] usb 2-1: config 0 descriptor?? [ 1371.713318][T10907] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1371.769617][T10927] usb 3-1: Using ep0 maxpacket: 32 [ 1371.775531][T10927] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1371.786069][T10927] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.786140][T10927] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1371.786222][T10927] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1371.786279][T10927] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1371.846049][T10927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.846110][T10927] usb 3-1: Product: syz [ 1371.846156][T10927] usb 3-1: Manufacturer: syz [ 1371.846219][T10927] usb 3-1: SerialNumber: syz [ 1371.877955][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1371.913423][T10927] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input180 [ 1372.100095][T10927] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1372.100157][T10927] (id 0x00) [ 1372.113437][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.323320][T10927] rc_core: IR keymap rc-imon-pad not found [ 1372.323388][T10927] Registered IR keymap rc-empty [ 1372.323722][T10927] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1372.323790][T10927] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1372.427365][T10927] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1372.515162][T14448] loop5: detected capacity change from 0 to 7 [ 1372.546155][T10927] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input181 [ 1372.546838][T14448] Dev loop5: unable to read RDB block 7 [ 1372.546951][T14448] loop5: unable to read partition table [ 1372.554555][T14448] loop5: partition table beyond EOD, truncated [ 1372.554669][T14448] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1372.641297][T10907] gspca_stv06xx: I2C: Read error writing address: -71 [ 1372.656128][T10907] usb 2-1: USB disconnect, device number 21 [ 1372.658521][T10927] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:126> initialized [ 1372.695483][T10927] usb 3-1: USB disconnect, device number 126 [ 1373.690470][T10907] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1373.844608][T10907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1373.846388][T10907] usb 6-1: not running at top speed; connect to a high speed hub [ 1373.846489][T10907] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1373.850608][T10907] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1373.852323][T10907] usb 6-1: language id specifier not provided by device, defaulting to English [ 1373.873040][T10907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.873123][T10907] usb 6-1: Manufacturer: 妵銍烶ⷊ鼕↫㧸疌Ῐ֙ⳉ妮ᅜ۝憾ₒÎ [ 1374.029574][T10927] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1374.108256][T10907] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1374.114807][T10907] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1374.163126][T10907] usb 6-1: USB disconnect, device number 78 [ 1374.180029][T10927] usb 2-1: Using ep0 maxpacket: 32 [ 1374.187414][T10927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1374.201902][T10927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.201958][T10927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1374.202004][T10927] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1374.202037][T10927] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 1374.202071][T10927] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1374.202098][T10927] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1374.248451][T10927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1374.248474][T10927] usb 2-1: SerialNumber: syz [ 1374.303258][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.321546][T14471] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1374.333827][T10927] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1374.343224][T10927] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 1374.536323][T31755] usb 2-1: USB disconnect, device number 22 [ 1374.942333][T14498] loop4: detected capacity change from 0 to 7 [ 1374.965248][T14498] Dev loop4: unable to read RDB block 7 [ 1374.965332][T14498] loop4: unable to read partition table [ 1374.965613][T14498] loop4: partition table beyond EOD, truncated [ 1374.965675][T14498] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1375.123854][T14502] bridge0: port 3(syz_tun) entered blocking state [ 1375.124114][T14502] bridge0: port 3(syz_tun) entered disabled state [ 1375.124643][T14502] syz_tun: entered allmulticast mode [ 1376.354558][T14551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18888'. [ 1376.354637][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18888'. [ 1376.550319][T10926] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1376.591244][T12833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.713536][T10926] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1376.716988][T10926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.717173][T10926] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1376.717290][T10926] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1376.717375][T10926] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1376.728019][T10926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.728094][T10926] usb 6-1: Product: syz [ 1376.728137][T10926] usb 6-1: Manufacturer: syz [ 1376.728178][T10926] usb 6-1: SerialNumber: syz [ 1376.816607][T10926] cdc_ncm 6-1:1.0: skipping garbage [ 1377.012895][T14549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1377.068835][T14574] netlink: 'syz.4.18897': attribute type 2 has an invalid length. [ 1377.246570][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.293157][T14582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.625838][T14549] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1377.796601][T14594] sg_write: data in/out 335936/136 bytes for SCSI command 0x0-- guessing data in; [ 1377.796601][T14594] program syz.1.18903 not setting count and/or reply_len properly [ 1377.837242][T10926] cdc_ncm 6-1:1.0: bind() failure [ 1377.875241][T10926] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1377.877457][T10926] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1377.887766][T10926] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1377.943640][T10926] usb 6-1: USB disconnect, device number 79 [ 1378.094192][T14602] netlink: 156 bytes leftover after parsing attributes in process `syz.3.18910'. [ 1378.557591][T14618] sctp: [Deprecated]: syz.4.18917 (pid 14618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1378.557591][T14618] Use struct sctp_sack_info instead [ 1378.866576][T14631] netlink: 'syz.1.18922': attribute type 5 has an invalid length. [ 1378.866630][T14631] netlink: 'syz.1.18922': attribute type 9 has an invalid length. [ 1378.866646][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18922'. [ 1379.487571][T14654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1379.660300][T14661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.667881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.673804][T14661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.676232][T12828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.685866][T14661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.693924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.899790][T10926] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1380.063838][T10926] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1380.068768][T10926] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1380.068895][T10926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.068974][T10926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.069037][T10926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1380.089317][T10926] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1380.090153][T10926] usb 2-1: Manufacturer: syz [ 1380.157129][T10926] usb 2-1: config 0 descriptor?? [ 1380.597288][T10926] appleir 0003:05AC:8243.0083: unknown main item tag 0x0 [ 1380.653610][T10926] appleir 0003:05AC:8243.0083: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1380.846119][T31755] usb 2-1: USB disconnect, device number 23 [ 1380.903719][T14697] loop4: detected capacity change from 0 to 7 [ 1380.940944][T14697] Dev loop4: unable to read RDB block 7 [ 1380.941002][T14697] loop4: AHDI p1 p2 p3 [ 1380.941024][T14697] loop4: partition table partially beyond EOD, truncated [ 1380.941602][T14697] loop4: p1 start 1601398130 is beyond EOD, truncated [ 1380.941657][T14697] loop4: p2 start 1702059890 is beyond EOD, truncated [ 1381.711602][T31755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.130082][T10927] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1382.207090][T14717] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1382.239749][T31755] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1382.279514][T10927] usb 6-1: Using ep0 maxpacket: 32 [ 1382.281497][T10927] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1382.297600][T10927] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1382.297663][T10927] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1382.297722][T10927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1382.298077][T10927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1382.298107][T10927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1382.298138][T10927] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1382.298190][T10927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.327831][T10927] usb 6-1: config 0 descriptor?? [ 1382.370847][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.400170][T31755] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1382.411467][T31755] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1382.419632][T31755] usb 2-1: config 1 has no interface number 0 [ 1382.429922][T31755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.429969][T31755] usb 2-1: Product: syz [ 1382.430002][T31755] usb 2-1: Manufacturer: syz [ 1382.430023][T31755] usb 2-1: SerialNumber: syz [ 1382.486571][T31755] usb 2-1: 3:1 : does not exist [ 1382.486618][T31755] usb 2-1: 3:2 : does not exist [ 1382.609429][T10927] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1382.716855][T10927] usb 2-1: USB disconnect, device number 24 [ 1382.879965][T10928] usb 6-1: USB disconnect, device number 80 [ 1382.948552][T10928] usblp0: removed [ 1383.148681][T14738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1383.501203][T10928] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1383.587923][ T31] audit: type=1326 audit(1787904229.449:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14754 comm="syz.1.18975" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb79359e159 code=0x0 [ 1383.706903][T10928] usb 3-1: Using ep0 maxpacket: 32 [ 1383.707696][T10928] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1383.711161][T10928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.711194][T10928] usb 3-1: Product: syz [ 1383.711225][T10928] usb 3-1: Manufacturer: syz [ 1383.711246][T10928] usb 3-1: SerialNumber: syz [ 1383.714766][T10928] usb 3-1: config 0 descriptor?? [ 1383.773862][T10928] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1383.797115][T14761] netlink: 'syz.3.18977': attribute type 39 has an invalid length. [ 1384.725223][T10928] gspca_ov534_9: reg_w failed -71 [ 1384.800491][T31755] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1384.810181][T10919] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1384.949560][T31755] usb 2-1: Using ep0 maxpacket: 32 [ 1384.951457][T31755] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1384.955436][T31755] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1384.962625][T10919] usb 6-1: Using ep0 maxpacket: 32 [ 1384.970930][T10919] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1384.977155][T31755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.977230][T31755] usb 2-1: Product: syz [ 1384.977338][T31755] usb 2-1: Manufacturer: syz [ 1384.977379][T31755] usb 2-1: SerialNumber: syz [ 1384.983224][T10919] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1384.983309][T10919] usb 6-1: config 0 has no interface number 0 [ 1385.008205][T10919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.008281][T10919] usb 6-1: Product: syz [ 1385.008332][T10919] usb 6-1: Manufacturer: syz [ 1385.008375][T10919] usb 6-1: SerialNumber: syz [ 1385.025950][T31755] usb 2-1: config 0 descriptor?? [ 1385.032375][T10928] gspca_ov534_9: Unknown sensor 0000 [ 1385.032463][T10928] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1385.070614][T10928] usb 3-1: USB disconnect, device number 127 [ 1385.070672][T10919] usb 6-1: config 0 descriptor?? [ 1385.082429][T31755] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1385.082557][T31755] dvb-usb: bulk message failed: -22 (2/0) [ 1385.104196][T10919] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1385.120464][T31755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1385.124357][T31755] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1385.124682][T31755] usb 2-1: media controller created [ 1385.163512][T31755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1385.184838][T31755] usb 2-1: selecting invalid altsetting 7 [ 1385.184914][T31755] cxusb: set interface failed [ 1385.184930][T31755] dvb-usb: bulk message failed: -22 (1/0) [ 1385.236131][T31755] DVB: Unable to find symbol lgdt330x_attach() [ 1385.236173][T31755] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1385.303265][T10919] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1385.327003][T10919] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1385.433502][T31755] rc_core: IR keymap rc-dvico-portable not found [ 1385.433571][T31755] Registered IR keymap rc-empty [ 1385.449070][T31755] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1385.464463][T31755] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input182 [ 1385.480899][T31755] dvb-usb: schedule remote query interval to 100 msecs. [ 1385.480983][T31755] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1385.501751][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 105 [ 1385.517935][T31755] usb 2-1: USB disconnect, device number 25 [ 1385.631463][T31755] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1385.703790][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1385.711969][T10928] usb 6-1: USB disconnect, device number 81 [ 1385.730125][T10928] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1385.755486][T10928] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1385.772607][T10928] quatech2 6-1:0.51: device disconnected [ 1386.038741][T14787] Invalid argument reading file caps for ./file0 [ 1386.532722][T14810] syzkaller1: entered promiscuous mode [ 1386.532763][T14810] syzkaller1: entered allmulticast mode [ 1386.779342][T14818] batadv_slave_0: entered promiscuous mode [ 1386.798667][T14817] batadv_slave_0: left promiscuous mode [ 1387.391713][T12833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.689929][T14849] loop4: detected capacity change from 0 to 7 [ 1387.701862][T14849] Dev loop4: unable to read RDB block 7 [ 1387.701934][T14849] loop4: unable to read partition table [ 1387.702138][T14849] loop4: partition table beyond EOD, truncated [ 1387.702167][T14849] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1387.760120][T10916] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1387.913529][T10916] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1387.944293][T10916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.007562][T10916] usb 3-1: config 0 descriptor?? [ 1388.034503][T10916] cp210x 3-1:0.0: cp210x converter detected [ 1388.493191][T10916] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1388.690561][T14872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.691376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.749906][T10916] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1388.916973][T10919] usb 3-1: USB disconnect, device number 2 [ 1388.962550][T10919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1388.994491][T10919] cp210x 3-1:0.0: device disconnected [ 1389.609947][T14896] netlink: 160 bytes leftover after parsing attributes in process `syz.2.19033'. [ 1389.610012][T14896] netlink: 160 bytes leftover after parsing attributes in process `syz.2.19033'. [ 1390.554136][T14918] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1390.602300][T10919] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1390.749661][T10919] usb 3-1: Using ep0 maxpacket: 8 [ 1390.750529][T10919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1390.754216][T10919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.754250][T10919] usb 3-1: Product: syz [ 1390.754283][T10919] usb 3-1: Manufacturer: syz [ 1390.754303][T10919] usb 3-1: SerialNumber: syz [ 1390.784455][T10919] usb 3-1: config 0 descriptor?? [ 1390.980199][T10916] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1391.008018][T10919] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1391.130114][T10916] usb 6-1: Using ep0 maxpacket: 32 [ 1391.132666][T10916] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1391.137157][T10916] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1391.137230][T10916] usb 6-1: config 0 has no interface number 0 [ 1391.152652][T10916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.152753][T10916] usb 6-1: Product: syz [ 1391.152770][T10916] usb 6-1: Manufacturer: syz [ 1391.152786][T10916] usb 6-1: SerialNumber: syz [ 1391.167089][T10916] usb 6-1: config 0 descriptor?? [ 1391.310709][T12832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.312372][T31755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.328138][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.339250][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.348078][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.815532][T10919] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1391.832377][T10919] usb 3-1: USB disconnect, device number 3 [ 1391.997101][T10916] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1392.198904][T10916] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1392.199999][T10916] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1392.222686][T10916] usb 6-1: USB disconnect, device number 82 [ 1393.240900][T12828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.745422][T14972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19064'. [ 1393.745463][T14972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19064'. [ 1394.880950][T15005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19078'. [ 1394.933913][T14983] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19070'. [ 1396.020861][T15022] geneve0: entered allmulticast mode [ 1396.431104][T12833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.683527][T15046] gretap0: Device is already in use. [ 1397.001822][T10928] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1397.159802][T10928] usb 3-1: Using ep0 maxpacket: 16 [ 1397.165140][T10928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1397.168341][T10928] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 1397.168416][T10928] usb 3-1: config 127 has no interface number 0 [ 1397.168501][T10928] usb 3-1: config 127 interface 124 has no altsetting 0 [ 1397.198011][T10928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.198118][T10928] usb 3-1: Product: syz [ 1397.198169][T10928] usb 3-1: Manufacturer: syz [ 1397.198220][T10928] usb 3-1: SerialNumber: syz [ 1397.928521][T15068] input: syz0 as /devices/virtual/input/input183 [ 1398.075288][T15059] geneve0: entered allmulticast mode [ 1398.113558][T10928] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 1398.706647][T10926] usb 3-1: USB disconnect, device number 4 [ 1398.979545][T10928] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1398.989894][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.129624][T10928] usb 6-1: Using ep0 maxpacket: 32 [ 1399.135395][T10928] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1399.146137][T10928] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1399.146634][T10928] usb 6-1: config 0 has no interface number 0 [ 1399.146770][T10928] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1399.146856][T10928] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1399.154800][T10928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.154836][T10928] usb 6-1: Product: syz [ 1399.154854][T10928] usb 6-1: Manufacturer: syz [ 1399.154870][T10928] usb 6-1: SerialNumber: syz [ 1399.169892][T10928] usb 6-1: config 0 descriptor?? [ 1399.390413][T15085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.397542][T15085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.467951][T15092] pim6reg1: entered promiscuous mode [ 1399.468005][T15092] pim6reg1: entered allmulticast mode [ 1399.691128][T10907] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1399.825565][T10928] appletouch 6-1:0.85: Geyser mode initialized. [ 1399.833059][T10928] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input184 [ 1399.860094][T10907] usb 3-1: Using ep0 maxpacket: 16 [ 1399.867318][T10907] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1399.879982][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.880035][T10907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.880064][T10907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1399.880113][T10907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.933502][T10907] usb 3-1: config 0 descriptor?? [ 1400.043733][T10928] usb 6-1: USB disconnect, device number 83 [ 1400.120354][T10928] appletouch 6-1:0.85: input: appletouch disconnected [ 1400.385594][T10907] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0084/input/input185 [ 1400.452244][T10907] microsoft 0003:045E:07DA.0084: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1400.596400][T10907] usb 3-1: USB disconnect, device number 5 [ 1400.808295][T15110] fido_id[15110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1400.910317][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.055791][T15115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.056545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.406515][T15132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.601170][T15116] geneve0: entered allmulticast mode [ 1402.199267][T12833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.629600][T10925] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1402.790787][T10925] usb 6-1: Using ep0 maxpacket: 32 [ 1402.792575][T10925] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1402.796916][T10925] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1402.796998][T10925] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.797078][T10925] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1402.797165][T10925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.823847][T10925] usb 6-1: config 0 descriptor?? [ 1403.105464][T15170] geneve0: entered allmulticast mode [ 1403.320749][T15177] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1403.385436][T15180] netlink: 'syz.1.19153': attribute type 11 has an invalid length. [ 1403.385512][T15180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19153'. [ 1403.649224][T15190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19146'. [ 1403.706648][T15190] netlink: 'syz.1.19146': attribute type 1 has an invalid length. [ 1403.862056][T10925] hid-alps 0003:044E:120B.0085: failed to read command (-71) [ 1403.862167][T10925] hid-alps 0003:044E:120B.0085: failed to change TP mode (-71) [ 1403.890126][T10925] hid-alps 0003:044E:120B.0085: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.5-1/input0 [ 1403.930306][T10925] usb 6-1: USB disconnect, device number 84 [ 1404.022999][T15195] fido_id[15195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1404.107207][ T31] audit: type=1326 audit(1787904249.969:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15196 comm="syz.4.19148" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b6119e159 code=0x0 [ 1404.459286][T15205] netlink: 'syz.4.19152': attribute type 11 has an invalid length. [ 1404.760080][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.333558][T15211] geneve0: entered allmulticast mode [ 1405.580588][T10928] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1405.729601][T10928] usb 3-1: Using ep0 maxpacket: 32 [ 1405.730838][T10928] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1405.746970][T10928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.747021][T10928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.747079][T10928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.765290][T10928] usb 3-1: config 0 descriptor?? [ 1406.223802][T10928] savu 0003:1E7D:2D5A.0086: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1406.475830][T10928] usb 3-1: USB disconnect, device number 6 [ 1406.881199][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19170'. [ 1407.034500][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19171'. [ 1407.249839][T15283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.318122][T15220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.366470][T15315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.911639][T10916] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1408.979499][T10925] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1409.071123][T10916] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1409.082408][T10916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.082457][T10916] usb 3-1: Product: syz [ 1409.082490][T10916] usb 3-1: Manufacturer: syz [ 1409.082512][T10916] usb 3-1: SerialNumber: syz [ 1409.130299][T10925] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1409.147122][T10925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1409.147189][T10925] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1409.165254][T10925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.165338][T10925] usb 6-1: Product: syz [ 1409.165386][T10925] usb 6-1: Manufacturer: syz [ 1409.165427][T10925] usb 6-1: SerialNumber: syz [ 1409.271034][T10916] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1409.422444][T10925] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1409.627079][T10925] usb 6-1: USB disconnect, device number 85 [ 1409.647356][T10925] usblp0: removed [ 1409.721775][T10919] usb 3-1: USB disconnect, device number 7 [ 1410.035734][T15342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19196'. [ 1410.350945][T10916] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1410.351149][T10916] ath9k_htc: Failed to initialize the device [ 1410.367882][T10919] usb 3-1: ath9k_htc: USB layer deinitialized [ 1410.391477][T15353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1410.510066][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.510342][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.032638][T10916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1411.190990][T10916] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1411.204181][T10916] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1411.204231][T10916] usb 2-1: config 1 has no interface number 0 [ 1411.226418][T10916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.226468][T10916] usb 2-1: Product: syz [ 1411.226503][T10916] usb 2-1: Manufacturer: syz [ 1411.226525][T10916] usb 2-1: SerialNumber: syz [ 1411.274969][T10916] usb 2-1: 3:1 : does not exist [ 1411.282152][T10916] usb 2-1: 3:2 : does not exist [ 1412.073172][T10925] usb 2-1: USB disconnect, device number 26 [ 1412.357333][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.741405][T15427] syzkaller1: entered promiscuous mode [ 1412.741458][T15427] syzkaller1: entered allmulticast mode [ 1413.362368][T15453] Invalid argument reading file caps for ./file0 [ 1414.225131][T15478] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.19250'. [ 1414.270050][T10925] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1414.420520][T10925] usb 2-1: Using ep0 maxpacket: 8 [ 1414.423949][T10925] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1414.431356][T10925] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1414.431429][T10925] usb 2-1: config 0 has no interface number 0 [ 1414.431593][T10925] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1414.431724][T10925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.491204][T10925] usb 2-1: config 0 descriptor?? [ 1414.516280][T10925] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1415.631862][T15371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.797749][T10907] usb 2-1: USB disconnect, device number 27 [ 1416.190869][T15495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.191156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.910393][T15371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.911121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.552550][T15371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.189636][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1419.479905][T10925] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1419.649553][T10925] usb 6-1: Using ep0 maxpacket: 8 [ 1419.653688][T10925] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1419.660283][T10925] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1419.660369][T10925] usb 6-1: config 0 has no interface number 0 [ 1419.660483][T10925] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1419.660597][T10925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.690716][T10925] usb 6-1: config 0 descriptor?? [ 1419.718497][T10925] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1420.079256][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19280'. [ 1420.109992][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.671727][T15495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.995572][T10927] usb 6-1: USB disconnect, device number 86 [ 1421.731655][T10907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1421.897968][T10907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1421.919527][T10907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1421.919582][T10907] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1421.919641][T10907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.933320][T10916] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1421.968783][T15592] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1421.986246][T10907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1422.029919][T15443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.030167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.111841][T10916] usb 6-1: Using ep0 maxpacket: 32 [ 1422.117817][T10916] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1422.128547][T10916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1422.128598][T10916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.128663][T10916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.163941][T10916] usb 6-1: config 0 descriptor?? [ 1422.179039][T10916] hub 6-1:0.0: USB hub found [ 1422.232932][T10925] usb 3-1: USB disconnect, device number 8 [ 1422.376435][T10916] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1422.683738][T25366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.684393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.784972][T10916] hid-generic 0003:046D:C31C.0087: unknown main item tag 0x0 [ 1422.816873][T10916] hid-generic 0003:046D:C31C.0087: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1423.142310][T10925] usb 6-1: USB disconnect, device number 87 [ 1423.309922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.311546][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1423.316718][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.316988][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.318434][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.735765][T15603] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1425.773269][T10927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1425.839649][T10925] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1425.880749][T12829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.939495][T10927] usb 3-1: Using ep0 maxpacket: 8 [ 1425.945715][T10927] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1425.956857][T10927] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1425.965093][T10927] usb 3-1: config 0 has no interface number 0 [ 1425.965144][T10927] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1425.965193][T10927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.997065][T10927] usb 3-1: config 0 descriptor?? [ 1426.009452][T10925] usb 2-1: Using ep0 maxpacket: 32 [ 1426.016164][T10925] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1426.027915][T10925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.027977][T10925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.028048][T10925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.063531][T10927] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1426.084537][T10925] usb 2-1: config 0 descriptor?? [ 1426.103473][T10925] hub 2-1:0.0: USB hub found [ 1426.300108][T10925] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1426.713360][T10925] hid-generic 0003:046D:C31C.0088: unknown main item tag 0x0 [ 1426.737309][T10925] hid-generic 0003:046D:C31C.0088: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1427.063814][T10925] usb 2-1: USB disconnect, device number 28 [ 1427.236933][T10927] usb 3-1: USB disconnect, device number 9 [ 1427.796418][T15222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.796646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.797133][T15222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.797316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.429618][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1428.429987][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1429.053375][T15683] input: syz1 as /devices/virtual/input/input189 [ 1429.069901][T15308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.710835][T10919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.015929][T15235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.244023][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.248019][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.251170][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.251631][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.285651][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.286667][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.287084][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.287616][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.288053][T15706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.159685][T15726] input: syz1 as /devices/virtual/input/input190 [ 1435.924127][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19366'. [ 1436.110299][T15760] net_ratelimit: 108 callbacks suppressed [ 1436.110370][T15760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.630229][T10919] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 1436.669892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.782863][T10919] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1436.786830][T10919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.786910][T10919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1436.787032][T10919] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1436.787154][T10919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.851077][T10919] hub 3-1:1.0: bad descriptor, ignoring hub [ 1436.851141][T10919] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1436.859331][T10919] cdc_wdm 3-1:1.0: skipping garbage [ 1436.867264][T10919] cdc_wdm 3-1:1.0: skipping garbage [ 1436.867381][T10919] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1437.873405][T12832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.873722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.310203][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.310321][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.310458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.510291][T10919] usb 3-1: USB disconnect, device number 10 [ 1440.432626][T15835] netlink: 140 bytes leftover after parsing attributes in process `syz.2.19378'. [ 1440.462333][T15835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19378'. [ 1440.591088][T15227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.675047][T15864] netlink: 'syz.5.19386': attribute type 7 has an invalid length. [ 1441.931157][T15225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.185272][T15871] syzkaller1: entered promiscuous mode [ 1442.194342][T15871] syzkaller1: entered allmulticast mode [ 1442.399824][T10927] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 1442.560281][T10927] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1442.570834][T10927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.570923][T10927] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1442.595472][T10927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.603700][T10927] usb 6-1: Product: syz [ 1442.609108][T10927] usb 6-1: Manufacturer: syz [ 1442.609147][T10927] usb 6-1: SerialNumber: syz [ 1442.639485][T10927] snd-ua101 6-1:1.1: invalid num_altsetting [ 1442.645612][T10927] snd-ua101 6-1:1.0: invalid format type [ 1442.667905][T15879] team_slave_0: Caught tx_queue_len zero misconfig [ 1442.855560][T10927] usb 6-1: USB disconnect, device number 88 [ 1442.933133][T15886] input: syz0 as /devices/virtual/input/input191 [ 1442.990097][T12825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.990719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.263533][T15897] tipc: Enabled bearer , priority 10 [ 1443.273709][T15897] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1443.562876][T15906] dvmrp0: entered allmulticast mode [ 1445.070693][T15684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.071024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.494751][T15946] dvmrp0: entered allmulticast mode [ 1445.979466][T10916] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1446.130563][T10916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1446.133671][T10916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.133825][T10916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.133919][T10916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.133980][T10916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1446.134094][T10916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.181324][T10916] usb 6-1: config 0 descriptor?? [ 1446.356551][T15496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.723004][T10916] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1446.943027][T10916] usb 6-1: USB disconnect, device number 89 [ 1446.950885][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.289612][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.629660][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.638331][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.979576][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.270685][T15238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.271010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.319801][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.660954][T15964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.911381][T10919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.010553][T15994] dvmrp0: entered allmulticast mode [ 1451.276769][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19436'. [ 1451.335844][T16003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19436'. [ 1451.349747][T10925] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1451.524692][T10925] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1451.535194][T10925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.552593][T10925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.552626][T10925] usb 2-1: Product: syz [ 1451.552644][T10925] usb 2-1: Manufacturer: syz [ 1451.552660][T10925] usb 2-1: SerialNumber: syz [ 1452.019923][T10925] hackrf 2-1:1.0: usb_control_msg() failed -32 request 0f [ 1452.019971][T10925] hackrf 2-1:1.0: Could not detect board [ 1452.020046][T10925] hackrf 2-1:1.0: probe with driver hackrf failed with error -32 [ 1452.065014][T10925] usb 2-1: USB disconnect, device number 29 [ 1452.540567][T16026] netlink: 140 bytes leftover after parsing attributes in process `syz.3.19446'. [ 1452.556275][T16026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19446'. [ 1452.750992][T15232] net_ratelimit: 4 callbacks suppressed [ 1452.751047][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.160518][T16039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.390758][T10928] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1453.539530][T10928] usb 2-1: Using ep0 maxpacket: 8 [ 1453.544157][T10928] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 1453.552977][T10928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.553103][T10928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.553165][T10928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1453.553292][T10928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.581359][T10928] usb 2-1: config 0 descriptor?? [ 1454.034367][T15496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.034602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.424972][T10928] sony 0003:054C:042F.008A: can't set operational mode: step 1 [ 1454.425086][T10928] sony 0003:054C:042F.008A: Failed to set controller into operational mode [ 1454.474585][T10928] sony 0003:054C:042F.008A: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.1-1/input0 [ 1454.474649][T10928] sony 0003:054C:042F.008A: failed to claim input [ 1454.514129][T10928] usb 2-1: USB disconnect, device number 30 [ 1454.667670][T16071] fido_id[16071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1455.087019][T16078] ip_tables: iptables: counters copy to user failed while replacing table [ 1455.560060][T10928] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1455.714842][T10928] usb 3-1: Using ep0 maxpacket: 8 [ 1455.726577][T10928] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1455.737311][T10928] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1455.737366][T10928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1455.737400][T10928] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1455.737431][T10928] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1455.737497][T10928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.023025][T10928] usb 3-1: GET_CAPABILITIES returned 0 [ 1456.023095][T10928] usbtmc 3-1:16.0: can't read capabilities [ 1456.233715][T10916] usb 3-1: USB disconnect, device number 11 [ 1456.593222][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.593820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.720508][T10919] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1456.763253][T10919] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1456.844940][T16116] netlink: 8772 bytes leftover after parsing attributes in process `syz.4.19483'. [ 1457.132768][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1457.153071][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1457.161898][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1457.178460][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1457.221415][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1457.231927][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.219536][T10919] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1458.381567][T10919] usb 3-1: Using ep0 maxpacket: 8 [ 1458.392961][T10919] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1458.408308][T10919] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1458.408386][T10919] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1458.408429][T10919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1458.408459][T10919] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1458.408489][T10919] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1458.408536][T10919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.510182][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.511046][T15496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.663867][T10919] usb 3-1: usb_control_msg returned -32 [ 1458.663950][T10919] usbtmc 3-1:16.0: can't read capabilities [ 1458.735050][T15232] bridge_slave_1: left allmulticast mode [ 1458.735116][T15232] bridge_slave_1: left promiscuous mode [ 1458.735805][T15232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.794880][T15232] bridge_slave_0: left allmulticast mode [ 1458.794940][T15232] bridge_slave_0: left promiscuous mode [ 1458.799930][T15232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.854350][T15232] dvmrp0: left allmulticast mode [ 1458.916341][T15232] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1459.065344][T16148] usbtmc 3-1:16.0: INDICATOR_PULSE returned 0 [ 1459.150931][T15232] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1459.284192][T10916] usb 3-1: USB disconnect, device number 12 [ 1459.334050][ T9115] Bluetooth: hci3: command tx timeout [ 1459.370659][T15232] batman_adv: batadv0: Removing interface: gretap1 [ 1459.459147][T15232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.472301][T15232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.486898][T15232] bond0 (unregistering): Released all slaves [ 1459.496701][T15232] bond1 (unregistering): Released all slaves [ 1459.679223][T15232] : left promiscuous mode [ 1459.762575][T15232] tipc: Disabling bearer [ 1459.773498][T15232] tipc: Left network mode [ 1459.814014][T15434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.814278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.495485][T16125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.495691][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.495894][T16125] bridge_slave_0: entered allmulticast mode [ 1460.524013][T16125] bridge_slave_0: entered promiscuous mode [ 1460.550102][T16125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.550365][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.550819][T16125] bridge_slave_1: entered allmulticast mode [ 1460.555591][T16125] bridge_slave_1: entered promiscuous mode [ 1460.587115][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1460.758240][T16125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.773976][T16125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.899548][T10907] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1460.990363][T16125] team0: Port device team_slave_0 added [ 1461.027683][T15232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.050972][T10907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1461.061607][T10907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.072046][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.083917][T10907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.094729][T10907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1461.107720][T10907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.121167][T10907] usb 2-1: config 0 descriptor?? [ 1461.399526][ T9115] Bluetooth: hci3: command tx timeout [ 1461.592970][T10907] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1461.629837][T15232] team0 (unregistering): Port device team_slave_1 removed [ 1461.685010][T15232] team0 (unregistering): Port device team_slave_0 removed [ 1461.866448][T10925] usb 2-1: USB disconnect, device number 31 [ 1462.027958][T16125] team0: Port device team_slave_1 added [ 1462.060858][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1462.114062][T16125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.114103][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.114132][T16125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.131069][T16125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.131129][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.131219][T16125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.293331][T16125] hsr_slave_0: entered promiscuous mode [ 1462.296503][T16125] hsr_slave_1: entered promiscuous mode [ 1462.299940][T16125] debugfs: 'hsr0' already exists in 'hsr' [ 1462.300017][T16125] Cannot create hsr debugfs directory [ 1462.357955][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.367606][T15494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.370731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.900205][T10916] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1463.052154][T10916] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1463.056264][T10916] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.056404][T10916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.085611][T10916] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1463.085666][T10916] cdc_wdm 2-1:1.0: Unknown control protocol [ 1463.295822][T10928] usb 2-1: USB disconnect, device number 32 [ 1463.489451][ T9115] Bluetooth: hci3: command tx timeout [ 1464.244757][T16253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.245280][T16253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.245988][T16253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.253988][T16252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.265020][T16252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.273626][T15494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.484663][T16125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1464.502921][ T31] audit: type=1804 audit(1787904310.359:1583): pid=16261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.19520" name="/newroot/3901/file1" dev="tmpfs" ino=19657 res=1 errno=0 [ 1464.527579][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1464.537545][T16125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1464.571373][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.579539][T16125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1464.594523][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1464.602856][T16125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1464.629006][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1464.770695][T16125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.805768][T16125] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.826103][T15494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.826241][T15494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.854821][T15496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.855111][T15496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.949945][T10916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1465.087053][T16125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.103428][T10916] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1465.114141][T10916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1465.114202][T10916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1465.114251][T10916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1465.146606][T10916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.146636][T10916] usb 2-1: Product: syz [ 1465.146652][T10916] usb 2-1: Manufacturer: syz [ 1465.146668][T10916] usb 2-1: SerialNumber: syz [ 1465.173190][T10916] usb 2-1: config 0 descriptor?? [ 1465.179334][T16273] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1465.185894][T16273] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1465.196815][T10916] usb 2-1: ucan: probing device on interface #0 [ 1465.314704][T16125] veth0_vlan: entered promiscuous mode [ 1465.342200][T16125] veth1_vlan: entered promiscuous mode [ 1465.426296][T16125] veth0_macvtap: entered promiscuous mode [ 1465.452924][T16125] veth1_macvtap: entered promiscuous mode [ 1465.491336][T16125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.523761][T16125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.549670][ T9115] Bluetooth: hci3: command tx timeout [ 1465.550012][T15494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.550568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.664952][T15232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.899943][T10916] ucan 2-1:0.0 can0: registered device [ 1465.933285][T15435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.933479][T15435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.933688][T15435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.965532][T15232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.965578][T15232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.056781][T10916] ucan 2-1:0.0 can0: firmware string: unknown [ 1466.066102][T15232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.066152][T15232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.108889][T10916] usb 2-1: USB disconnect, device number 33 [ 1466.702269][T10926] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1466.799506][T10928] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1466.859928][T10926] usb 6-1: Using ep0 maxpacket: 8 [ 1466.865944][T10926] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1466.878838][T10926] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1466.878911][T10926] usb 6-1: config 0 has no interface number 0 [ 1466.878959][T10926] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1466.878990][T10926] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1466.879022][T10926] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1466.879054][T10926] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1466.879115][T10926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.953043][T10928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1466.963708][T10928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1466.963753][T10928] usb 3-1: config 1 has no interface number 0 [ 1466.963800][T10928] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1466.963831][T10928] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1466.963862][T10928] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1466.963899][T10928] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1466.963929][T10928] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1467.037069][T10926] usb 6-1: config 0 descriptor?? [ 1467.042600][T10928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.043354][T10928] usb 3-1: Product: syz [ 1467.043374][T10928] usb 3-1: Manufacturer: syz [ 1467.043390][T10928] usb 3-1: SerialNumber: syz [ 1467.075036][T16321] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1467.082978][T10926] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1467.328139][T16321] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1467.461818][T16351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.463828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.553060][T16321] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1467.965078][T16321] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1467.981743][T10928] cdc_ncm 3-1:1.1: bind() failure [ 1468.187193][T10916] usb 3-1: USB disconnect, device number 13 [ 1468.542066][T16381] input: syz0 as /devices/virtual/input/input195 [ 1468.604392][T16383] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1469.165861][T16402] team_slave_1: Caught tx_queue_len zero misconfig [ 1469.237365][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1469.248906][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.249090][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1469.249199][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.249582][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1469.249660][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.249913][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1469.249973][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.250177][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1469.255527][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.255778][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1469.292876][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.293167][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1469.294011][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1469.294192][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1469.390060][T15232] net_ratelimit: 19 callbacks suppressed [ 1469.390115][T15232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.404787][T10925] usb 6-1: USB disconnect, device number 90 [ 1469.420543][T10928] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1469.428668][T10925] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1469.476430][T16406] bond_slave_1: Caught tx_queue_len zero misconfig [ 1469.572234][T10928] usb 3-1: Using ep0 maxpacket: 8 [ 1469.573936][T10928] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1469.601651][T10928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.601717][T10928] usb 3-1: Product: syz [ 1469.601750][T10928] usb 3-1: Manufacturer: syz [ 1469.601824][T10928] usb 3-1: SerialNumber: syz [ 1469.692785][T16413] netlink: 'syz.1.19560': attribute type 13 has an invalid length. [ 1469.859568][T10925] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1469.864162][T10919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.865103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.030628][T10925] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1470.043687][T10925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.056241][T10928] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1470.065058][T10928] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 1470.074288][T10925] usb 6-1: config 0 descriptor?? [ 1470.084456][T10925] cp210x 6-1:0.0: cp210x converter detected [ 1470.099214][T10928] usb 3-1: USB disconnect, device number 14 [ 1470.489301][T10925] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1470.504773][T10925] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1470.831448][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.832179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.006930][T16430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1471.015067][T16430] bridge0: port 2(bond8) entered blocking state [ 1471.016176][T16430] bridge0: port 2(bond8) entered disabled state [ 1471.020372][T16430] bond8: entered allmulticast mode [ 1471.028907][T16430] bond8: entered promiscuous mode [ 1471.313448][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.313678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.382617][T16444] ALSA: mixer_oss: invalid OSS volume 'vice' [ 1471.382672][T16444] ALSA: mixer_oss: invalid OSS volume '1' [ 1471.384131][T16444] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1471.384179][T16444] ALSA: mixer_oss: invalid OSS volume '2' [ 1472.333643][T16468] sctp: [Deprecated]: syz.1.19581 (pid 16468) Use of int in max_burst socket option. [ 1472.333643][T16468] Use struct sctp_assoc_value instead [ 1472.585927][T10928] usb 6-1: USB disconnect, device number 91 [ 1472.605744][T10928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1472.625992][T10928] cp210x 6-1:0.0: device disconnected [ 1472.990301][T10919] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1473.135969][T16491] netlink: 'syz.5.19591': attribute type 4 has an invalid length. [ 1473.145465][T16491] netlink: 152 bytes leftover after parsing attributes in process `syz.5.19591'. [ 1473.155027][T10919] usb 2-1: Using ep0 maxpacket: 16 [ 1473.155768][T10919] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1473.173260][T10919] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.185408][T10919] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.195824][T10919] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1473.195863][T10919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1473.195903][T10919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.231945][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.233275][T15439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.233807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.262615][T10919] usb 2-1: config 0 descriptor?? [ 1473.504922][T16500] bridge0: port 3(syz_tun) entered blocking state [ 1473.505496][T16500] bridge0: port 3(syz_tun) entered disabled state [ 1473.506224][T16500] syz_tun: entered allmulticast mode [ 1473.531817][T16500] syz_tun: entered promiscuous mode [ 1473.538153][T16500] bridge0: port 3(syz_tun) entered blocking state [ 1473.538304][T16500] bridge0: port 3(syz_tun) entered forwarding state [ 1473.555216][T16500] bridge0: port 4(batadv0) entered blocking state [ 1473.555635][T16500] bridge0: port 4(batadv0) entered disabled state [ 1473.556131][T16500] batadv0: entered allmulticast mode [ 1473.570993][T16500] batadv0: entered promiscuous mode [ 1473.572727][T16500] bridge0: port 4(batadv0) entered blocking state [ 1473.573164][T16500] bridge0: port 4(batadv0) entered forwarding state [ 1473.879692][T15496] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1473.879743][T15496] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1473.907770][T10927] usb 2-1: USB disconnect, device number 34 [ 1474.442574][T15435] net_ratelimit: 1 callbacks suppressed [ 1474.442634][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.635946][T16523] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.19604'. [ 1474.648553][T16523] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.19604'. [ 1474.678569][T16524] vimc link validate: Sensor B:src:16x16 (0x33424752, 9, 0, 0, 0) Raw Capture 1:snk:4096x16 (0x32314247, 8, 0, 0, 0) [ 1475.683483][T16571] syzkaller1: entered promiscuous mode [ 1475.683540][T16571] syzkaller1: entered allmulticast mode [ 1476.047886][T16582] hsr0: entered allmulticast mode [ 1476.047941][T16582] hsr_slave_0: entered allmulticast mode [ 1476.047985][T16582] hsr_slave_1: entered allmulticast mode [ 1476.076546][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19643'. [ 1476.120661][T16582] hsr_slave_0: left promiscuous mode [ 1476.143324][T16582] hsr_slave_1: left promiscuous mode [ 1476.157558][T16582] hsr0 (unregistering): left allmulticast mode [ 1476.431664][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.431895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.552766][T16599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.805476][T16612] loop5: detected capacity change from 0 to 7 [ 1476.814732][T16612] Dev loop5: unable to read RDB block 7 [ 1476.814769][T16612] loop5: AHDI p1 p2 p3 [ 1476.814795][T16612] loop5: partition table partially beyond EOD, truncated [ 1476.815066][T16612] loop5: p2 start 16777216 is beyond EOD, truncated [ 1477.017534][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19647'. [ 1477.480209][ T31] audit: type=1326 audit(1787904323.349:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16629 comm="syz.1.19655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb79359e159 code=0x0 [ 1477.713724][T10916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.992427][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.992650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.999320][T15435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.201491][T10919] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1479.252878][T16700] bridge_slave_1: entered promiscuous mode [ 1479.370464][T10919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1479.381843][T10919] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1479.381918][T10919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1479.381952][T10919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1479.381985][T10919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1479.382018][T10919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1479.382066][T10919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.453394][T10919] usb 6-1: config 0 descriptor?? [ 1479.465362][T16688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1479.632139][ T32] INFO: task kworker/1:7:5777 blocked for more than 143 seconds. [ 1479.633492][ T32] Tainted: G L syzkaller #0 [ 1479.633533][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.633551][ T32] task:kworker/1:7 state:D stack:16200 pid:5777 tgid:5777 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1479.633671][ T32] Workqueue ** replaying previous printk message ** [ 1479.633671][ T32] Workqueue: usb_hub_wq hub_event [ 1479.633829][ T32] Call Trace: [ 1479.633842][ T32] [ 1479.633860][ T32] __schedule+0x17d4/0x5820 [ 1479.633899][ T32] ? __lock_acquire+0x6df/0x2e50 [ 1479.633960][ T32] ? unwind_next_frame+0x8f/0x2550 [ 1479.634001][ T32] ? unwind_next_frame+0x1baf/0x2550 [ 1479.634100][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.634145][ T32] ? schedule+0x90/0x2b0 [ 1479.634183][ T32] schedule+0x164/0x2b0 [ 1479.634242][ T32] schedule_timeout+0xc0/0x2c0 [ 1479.634311][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1479.634339][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1479.634407][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1479.634439][ T32] ? wait_for_completion+0x272/0x5e0 [ 1479.634472][ T32] wait_for_completion+0x2ca/0x5e0 [ 1479.634544][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1479.634585][ T32] ? __flush_work+0x101/0xca0 [ 1479.634639][ T32] __flush_work+0xa63/0xca0 [ 1479.634701][ T32] ? __flush_work+0x101/0xca0 [ 1479.634738][ T32] ? __pfx___flush_work+0x10/0x10 [ 1479.634774][ T32] ? __pfx_wq_barrier_func+0x10/0x10 [ 1479.634853][ T32] ? __cancel_work_sync+0x5c/0x110 [ 1479.634896][ T32] __cancel_work_sync+0xbf/0x110 [ 1479.634935][ T32] mmc_stop_host+0xd9/0x460 [ 1479.635058][ T32] mmc_remove_host+0x15/0x60 [ 1479.635093][ T32] vub300_disconnect+0x154/0x2f0 [ 1479.635157][ T32] usb_unbind_interface+0x295/0x9f0 [ 1479.635241][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1479.635292][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1479.635324][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1479.635389][ T32] device_release_driver_internal+0x4f5/0x880 [ 1479.635499][ T32] bus_remove_device+0x444/0x560 [ 1479.635562][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 1479.635609][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1479.635652][ T32] device_del+0x524/0x8f0 [ 1479.635768][ T32] ? __pfx_device_del+0x10/0x10 [ 1479.635804][ T32] ? kobject_put+0x516/0x550 [ 1479.635931][ T32] usb_disable_device+0x3d4/0x8d0 [ 1479.635986][ T32] usb_disconnect+0x346/0x9a0 [ 1479.636065][ T32] hub_event+0x1bbb/0x4d30 [ 1479.636104][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 1479.636154][ T32] ? register_lock_class+0x31/0x2e0 [ 1479.636241][ T32] ? __pfx_hub_event+0x10/0x10 [ 1479.636288][ T32] ? rcu_is_watching+0x16/0xb0 [ 1479.636348][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1479.636384][ T32] process_scheduled_works+0xc3d/0x1630 [ 1479.636453][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1479.636521][ T32] ? assign_work+0x3cf/0x5d0 [ 1479.636560][ T32] worker_thread+0xa47/0xfb0 [ 1479.636620][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1479.636693][ T32] kthread+0x38b/0x480 [ 1479.636723][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1479.636756][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.636785][ T32] ret_from_fork+0x514/0xb70 [ 1479.636856][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.636897][ T32] ? __switch_to+0xc89/0x1420 [ 1479.636936][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.636997][ T32] ret_from_fork_asm+0x1a/0x30 [ 1479.637057][ T32] [ 1479.637272][ T32] INFO: task kworker/1:6:9201 blocked for more than 143 seconds. [ 1479.637314][ T32] Tainted: G L syzkaller #0 [ 1479.637331][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.637347][ T32] task:kworker/1:6 state:D stack:22320 pid:9201 tgid:9201 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1479.637446][ T32] Workqueue: events_freezable mmc_rescan [ 1479.637482][ T32] Call Trace: [ 1479.637493][ T32] [ 1479.637511][ T32] __schedule+0x17d4/0x5820 [ 1479.637626][ T32] ? __pfx___schedule+0x10/0x10 [ 1479.637670][ T32] ? schedule+0x90/0x2b0 [ 1479.637732][ T32] schedule+0x164/0x2b0 [ 1479.637768][ T32] schedule_timeout+0xc0/0x2c0 [ 1479.637798][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1479.637829][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1479.637903][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1479.637937][ T32] ? wait_for_completion+0x272/0x5e0 [ 1479.637979][ T32] wait_for_completion+0x2ca/0x5e0 [ 1479.638052][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 1479.638089][ T32] ? vub300_mmc_request+0x1000/0x1910 [ 1479.638123][ T32] ? trace_mmc_request_start+0x81/0x1e0 [ 1479.638232][ T32] mmc_wait_for_req_done+0x37/0x490 [ 1479.638274][ T32] ? mmc_start_request+0x202/0x2d0 [ 1479.638314][ T32] ? mmc_wait_for_req+0x1b5/0x240 [ 1479.638411][ T32] mmc_wait_for_cmd+0x183/0x2a0 [ 1479.638454][ T32] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 1479.638511][ T32] ? __pfx_mmc_wait_done+0x10/0x10 [ 1479.638581][ T32] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1479.638622][ T32] sdio_reset+0xf4/0x3a0 [ 1479.638716][ T32] ? __pfx_sdio_reset+0x10/0x10 [ 1479.638752][ T32] ? __mmc_claim_host+0x162/0x650 [ 1479.638803][ T32] ? mmc_power_up+0x5d/0x650 [ 1479.638856][ T32] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 1479.638898][ T32] mmc_rescan+0x6eb/0x1040 [ 1479.638948][ T32] ? process_scheduled_works+0x97a/0x1630 [ 1479.639019][ T32] process_scheduled_works+0xc3d/0x1630 [ 1479.639087][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 1479.639155][ T32] ? assign_work+0x3cf/0x5d0 [ 1479.639197][ T32] worker_thread+0xa47/0xfb0 [ 1479.639248][ T32] ? __kthread_parkme+0x71/0x1f0 [ 1479.639965][ T32] kthread+0x38b/0x480 [ 1479.640033][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1479.640106][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.640167][ T32] ret_from_fork+0x514/0xb70 [ 1479.640289][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.640387][ T32] ? __switch_to+0xc89/0x1420 [ 1479.640483][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.640544][ T32] ret_from_fork_asm+0x1a/0x30 [ 1479.640678][ T32] [ 1479.640962][ T32] [ 1479.640962][ T32] Showing all locks held in the system: [ 1479.640993][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 1479.641048][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1479.641212][ T32] #1: ffffffff9ad2aff8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1479.641638][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1479.641688][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1479.645287][ T32] locks held by klogd/4972: 1, last CPU#1: [ 1479.645338][ T32] #0: ffffffff8ed4e900 (syslog_lock){+.+.}-{4:4}, at: syslog_print+0x4ad/0x610 [ 1479.645509][ T32] locks held by getty/5372: 2, on CPU#1: [ 1479.645551][ T32] #0: ffff88803589d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1479.645705][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1479.645894][ T32] locks held by kworker/1:7/5777: 5, on CPU#1: [ 1479.645936][ T32] #0: ffff88801b14a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.646088][ T32] #1: ffffc90004c1fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.646251][ T32] #2: ffff88802990f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1479.646411][ T32] #3: ffff88807c7641d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1479.646590][ T32] #4: ffff8880780dd1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1479.652268][ T32] locks held by kworker/1:6/9201: 2, on CPU#1: [ 1479.652312][ T32] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.652496][ T32] #1: ffffc90004db7c40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.652667][ T32] locks held by kworker/0:17/10919: 5, on CPU#0: [ 1479.652708][ T32] #0: ffff88801b14a540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.652867][ T32] #1: ffffc90004ccfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.653033][ T32] #2: ffff8880295e41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1479.653238][ T32] #3: ffff88804074b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1479.653411][ T32] #4: ffff88802a3801a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1479.663719][ T32] locks held by kworker/u8:55/15496: 3, last CPU#1: [ 1479.663780][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.663971][ T32] #1: ffffc90005a6fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1479.664135][ T32] #2: ffff888028a9a258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 1479.664420][ T32] locks held by syz.5.19666/16660: 2, last CPU#1: [ 1479.664471][ T32] #0: ffff888033860460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3766/0x4530 [ 1479.664675][ T32] #1: ffff88802838f520 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1479.664870][ T32] locks held by syz.1.19687/16706: 2, last CPU#1: [ 1479.664917][ T32] #0: ffff888036146e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1479.665083][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1479.668525][ T32] [ 1479.668548][ T32] ============================================= [ 1479.668548][ T32] [ 1479.668578][ T32] NMI backtrace for cpu 1 [ 1479.668628][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1479.668701][ T32] Tainted: [L]=SOFTLOCKUP [ 1479.668721][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1479.668760][ T32] Call Trace: [ 1479.668781][ T32] [ 1479.668811][ T32] dump_stack_lvl+0xe8/0x150 [ 1479.668910][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1479.669052][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1479.669167][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1479.669240][ T32] sys_info+0x135/0x170 [ 1479.669298][ T32] watchdog+0xfd7/0x1030 [ 1479.669370][ T32] ? watchdog+0x1c7/0x1030 [ 1479.669440][ T32] kthread+0x38b/0x480 [ 1479.669508][ T32] ? __pfx_watchdog+0x10/0x10 [ 1479.669559][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.669629][ T32] ret_from_fork+0x514/0xb70 [ 1479.669728][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.669811][ T32] ? __switch_to+0xc89/0x1420 [ 1479.669899][ T32] ? __pfx_kthread+0x10/0x10 [ 1479.669960][ T32] ret_from_fork_asm+0x1a/0x30 [ 1479.670080][ T32] [ 1479.670651][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1479.670716][ C0] NMI backtrace for cpu 0 [ 1479.670733][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1479.670759][ C0] Tainted: [L]=SOFTLOCKUP [ 1479.670766][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1479.670778][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1479.670856][ C0] Code: e8 ae 83 56 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 4b c6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1479.670873][ C0] RSP: 0000:ffffc900001578b8 EFLAGS: 00000002 [ 1479.670891][ C0] RAX: 1ffffffff35a5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1479.670904][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1479.670917][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1479.670930][ C0] R10: dffffc0000000000 R11: ffffffff85712fa0 R12: dffffc0000000000 [ 1479.670945][ C0] R13: 0000000000000000 R14: ffffffff9ad2b020 R15: 0000000000000000 [ 1479.670964][ C0] FS: 0000000000000000(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 1479.670980][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1479.670994][ C0] CR2: 00007fd75cbf14b8 CR3: 000000002c4a2000 CR4: 00000000003526f0 [ 1479.671011][ C0] Call Trace: [ 1479.671018][ C0] [ 1479.671028][ C0] wait_for_lsr+0x184/0x2f0 [ 1479.671057][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1479.671082][ C0] serial8250_console_write+0xaa1/0x1200 [ 1479.671114][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1479.671140][ C0] ? __schedule+0x17ea/0x5820 [ 1479.671172][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1479.671201][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1479.671225][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1479.671253][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1479.671277][ C0] nbcon_kthread_func+0x679/0x880 [ 1479.671300][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1479.671319][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1479.671342][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1479.671370][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1479.671399][ C0] kthread+0x38b/0x480 [ 1479.671417][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1479.671435][ C0] ? __pfx_kthread+0x10/0x10 [ 1479.671453][ C0] ret_from_fork+0x514/0xb70 [ 1479.671485][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1479.671514][ C0] ? __switch_to+0xc89/0x1420 [ 1479.671542][ C0] ? __pfx_kthread+0x10/0x10 [ 1479.671560][ C0] ret_from_fork_asm+0x1a/0x30 [ 1479.671597][ C0] [ 1479.678362][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1480.934402][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.945117][ T32] Tainted: [L]=SOFTLOCKUP [ 1480.949466][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1480.959545][ T32] Call Trace: [ 1480.962856][ T32] [ 1480.965807][ T32] vpanic+0x56d/0xa60 [ 1480.969859][ T32] ? __pfx___schedule+0x10/0x10 [ 1480.974762][ T32] ? __pfx_vpanic+0x10/0x10 [ 1480.979310][ T32] panic+0xc5/0xd0 [ 1480.983091][ T32] ? __pfx_panic+0x10/0x10 [ 1480.987537][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1480.993030][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1480.998431][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1481.004608][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1481.010792][ T32] watchdog+0x1030/0x1030 [ 1481.015149][ T32] ? watchdog+0x1c7/0x1030 [ 1481.019595][ T32] kthread+0x38b/0x480 [ 1481.023687][ T32] ? __pfx_watchdog+0x10/0x10 [ 1481.028383][ T32] ? __pfx_kthread+0x10/0x10 [ 1481.032997][ T32] ret_from_fork+0x514/0xb70 [ 1481.037631][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1481.042775][ T32] ? __switch_to+0xc89/0x1420 [ 1481.047502][ T32] ? __pfx_kthread+0x10/0x10 [ 1481.052121][ T32] ret_from_fork_asm+0x1a/0x30 [ 1481.056958][ T32] [ 1481.060191][ T32] Kernel Offset: disabled [ 1481.064547][ T32] Rebooting in 86400 seconds..