last executing test programs: 3.859770485s ago: executing program 1 (id=2269): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000108c0d020140000102030109021200010160"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @string={0x0, 0x3, "c3f51b6f313bed023f0fb420a4cc4b07a8d9a42fe1158b8427941ca02cda48117c6bbd1441d3e8e4fc8a0d7fbe83fbd9c63391eb60870e02a3a668886e17989d2044e4fa44d8bfb9540fdd6c508dcc627152748e43c77723b0ae080f6fcf24eceb91d985c586044320f88535cf01368143686155929d2b054ea5b4a4c457893faaed5aa4222994d9eeecb085d72bbb566d9375e51d6b7f36095917ddb3db40de545041fd9063f393460ea00bbdabb1d73108944cf782e54d10c89348de798249fcb44fdea370e08edef83aab26e6f777381a713ae0b46627cf7233446faf4ccca629d4f4d449748c12fe286713a7d1f072cf824336fb1b89"}}}, 0x0) 2.547862905s ago: executing program 2 (id=2277): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x800000006, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x800000000, 0x4, 0xfffc, 0x0, 0x7, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0xffff, 0x7fffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 2.447487124s ago: executing program 2 (id=2278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x1}, {0xcd}, {0xf8, 0x2}, {0xf, 0x4}, {0xc}], "52b3c4e776b58380"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048080}, 0x20040000) 2.390090744s ago: executing program 2 (id=2279): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000540)={{0x1, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x8f11, 0x200, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000380)={0x5, 0x10000, 0x81, 0x0, 0xe}) 2.332048704s ago: executing program 2 (id=2281): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) lseek(r0, 0xf, 0x1) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.212335961s ago: executing program 1 (id=2282): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000080), 0x318, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 1.827051236s ago: executing program 0 (id=2283): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 1.82686869s ago: executing program 2 (id=2284): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.652618438s ago: executing program 2 (id=2288): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/157, 0x9d) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 1.398488612s ago: executing program 0 (id=2291): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1, 0xffffffff}, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 1.272812638s ago: executing program 0 (id=2295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x7}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) 1.263166324s ago: executing program 4 (id=2296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x100000, 0x0, 0x1}, {0x0, 0xffffffff, 0xf, 0xfe, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf7}, {0x1000, 0xffff1000, 0xf, 0x0, 0xf6, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0xc, 0x9, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x8000000, 0x100, 0x8, 0x0, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x8000000, 0xdddd0000, 0x2, 0x1, 0x50}) 1.110623776s ago: executing program 1 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) 1.035052148s ago: executing program 4 (id=2298): r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) 969.31479ms ago: executing program 4 (id=2299): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 855.1891ms ago: executing program 1 (id=2300): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000001c0)="aa04005d", 0xfffffffffffffffb, 0x2400c030, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x100000000000000, 0x0, 0x0) 854.82616ms ago: executing program 3 (id=2301): r0 = socket$unix(0x1, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x200003a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x0, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x7, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x2, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc5, 0x1, 0xfffff000, 0xfff, 0x3, 0x7e, 0x100, 0x8000, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x100530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 792.80188ms ago: executing program 4 (id=2302): r0 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x614581) 791.890978ms ago: executing program 0 (id=2303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x8000eb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffad", 0x8) 764.12313ms ago: executing program 3 (id=2304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r1, 0x10, 0x74bd2c, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8005}, 0x44004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x15, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}, 0x1, 0x700}, 0x0) 515.814326ms ago: executing program 0 (id=2305): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259866ec9c3740ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c453c97e4af37017ea6b16b694bb4a6e4606c3e519d1d2bd3c8c4e97da22b4f9d5c3b90400000000000000c279f035580839066668ffce540b5a293e387768570000000000007a25720a170e7f5670e419dc44febf7ddc73fd4a5a216c28665f7f46c70f4e179109268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800000000000000000000000000000000000000000000000000ffffffffffffff7f00", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) rseq(&(0x7f0000001380), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='id_resolver\x00', 0x0, 0x0) 515.332435ms ago: executing program 3 (id=2306): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004000) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xb1e1, 0x2, 0xfffffffe, 0x181}) close_range(r0, r0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 358.222674ms ago: executing program 0 (id=2307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) syz_open_dev$usbfs(0x0, 0x8, 0x100) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) close(0x3) 335.131504ms ago: executing program 3 (id=2308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x27800000000, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x11}) 319.564824ms ago: executing program 1 (id=2309): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1, 0xd8f9}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x100000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 270.493715ms ago: executing program 4 (id=2310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000880)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7, 0x4, 0xffffffff, 0x4e38}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000008c0)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff, {0x3}, 0x1}, {"0100"}}) 208.053294ms ago: executing program 3 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newnexthop={0x40, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newnexthop={0x3c, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x2}, {0x2}]}]}, 0x3c}}, 0x0) 47.132137ms ago: executing program 3 (id=2312): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a310000000005000500"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 421.91µs ago: executing program 4 (id=2313): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 0s ago: executing program 1 (id=2314): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) kernel console output (not intermixed with test programs): san-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f080ec code=0x0 [ 192.190938][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.988919][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.175375][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 193.607412][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 193.676197][ T8769] kernel read not supported for file /file0 (pid: 8769 comm: syz.4.1248) [ 193.676500][ T31] audit: type=1800 audit(1792087228.761:371): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1248" name="file0" dev="mqueue" ino=24538 res=0 errno=0 [ 193.752446][ T8771] batadv_slave_1: entered promiscuous mode [ 193.754114][ T8770] batadv_slave_1: left promiscuous mode [ 193.770319][ T5735] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 193.917163][ T5735] usb 4-1: Using ep0 maxpacket: 16 [ 193.918568][ T5735] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.921722][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.921752][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.921773][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.921812][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.924848][ T5735] usb 4-1: config 0 descriptor?? [ 194.029821][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.271541][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271597][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.367643][ T5735] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0018/input/input45 [ 194.436567][ T9] hid_parser_main: 12 callbacks suppressed [ 194.436599][ T9] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 194.469340][ T9] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.504424][ T5735] microsoft 0003:045E:07DA.0018: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 194.519761][ T5708] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 194.520174][ T5708] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 194.549148][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 194.551906][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 194.552103][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 194.552549][ T5708] usb 1-1: USB disconnect, device number 17 [ 194.804516][ T25] usb 4-1: USB disconnect, device number 22 [ 194.912280][ T8790] fido_id[8790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 195.080595][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.168426][ T8787] hid-generic 0000:0000:0000.0019: pid 8787 passed too large report [ 195.231914][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.918824][ T5708] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 196.067826][ T5708] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.069567][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.073841][ T5708] usb 3-1: config 0 descriptor?? [ 196.120241][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.291505][ T5708] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 196.380251][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 196.380342][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 196.510354][ T5708] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 196.510383][ T5708] [drm] Initialized udl on minor 1 [ 196.852827][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 196.854062][ T8869] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.1291'. [ 197.013841][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 197.013871][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 197.155716][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.420810][ T8889] loop5: detected capacity change from 0 to 7 [ 197.426078][ T8889] Dev loop5: unable to read RDB block 7 [ 197.426122][ T8889] loop5: unable to read partition table [ 197.426394][ T8889] loop5: partition table beyond EOD, truncated [ 197.426439][ T8889] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.517550][ T1071] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 197.583090][ T8897] dummy0: entered promiscuous mode [ 197.597470][ T8897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 197.601474][ T8897] hsr1: entered allmulticast mode [ 197.601495][ T8897] dummy0: entered allmulticast mode [ 197.601723][ T8897] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 197.667742][ T1071] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 197.669656][ T1071] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.669703][ T1071] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.673986][ T1071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.674016][ T1071] usb 1-1: Product: syz [ 197.674058][ T1071] usb 1-1: Manufacturer: syz [ 197.674111][ T1071] usb 1-1: SerialNumber: syz [ 197.832944][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 197.832971][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 198.187838][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.267562][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.227545][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.236224][ T5704] usb 1-1: USB disconnect, device number 18 [ 199.962041][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 200.027917][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.273149][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.287182][ T5704] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 200.439460][ T5704] usb 2-1: not running at top speed; connect to a high speed hub [ 200.439498][ T5704] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 200.442655][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.442680][ T5704] usb 2-1: Product: syz [ 200.442695][ T5704] usb 2-1: Manufacturer: syz [ 200.442710][ T5704] usb 2-1: SerialNumber: syz [ 200.487980][ T5704] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 200.494497][ T5704] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 200.515196][ T5704] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 200.527538][ T5704] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 200.531118][ T5704] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 200.679663][ C1] usb 2-1: malformed indat packet [ 200.679900][ C1] usb 2-1: malformed indat packet [ 200.680149][ C1] usb 2-1: malformed indat packet [ 200.680389][ C1] usb 2-1: malformed indat packet [ 200.680797][ C1] usb 2-1: malformed indat packet [ 200.681066][ C1] usb 2-1: malformed indat packet [ 200.681326][ C1] usb 2-1: malformed indat packet [ 200.681918][ C1] usb 2-1: malformed indat packet [ 200.895742][ T5704] usb 2-1: USB disconnect, device number 16 [ 200.942413][ T5704] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 200.965020][ T5704] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 200.995359][ T5704] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 201.020020][ T5704] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 201.038546][ T5704] keyspan 2-1:1.0: device disconnected [ 201.307156][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.308468][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.559761][ T5708] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 201.560216][ T5708] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 201.581652][ T5708] usb 3-1: USB disconnect, device number 19 [ 201.617822][ T5704] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 202.097225][ T5708] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 202.268554][ T5708] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 202.272950][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.272983][ T5708] usb 3-1: Product: syz [ 202.273010][ T5708] usb 3-1: Manufacturer: syz [ 202.273025][ T5708] usb 3-1: SerialNumber: syz [ 202.276842][ T5708] usb 3-1: config 0 descriptor?? [ 202.320229][ T5708] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 202.348158][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.775567][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 202.775603][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 202.913216][ T5708] gspca_stk1135: reg_w 0x3 err -71 [ 202.914287][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914301][ T5708] gspca_stk1135: Sensor write failed [ 202.914338][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914348][ T5708] gspca_stk1135: Sensor write failed [ 202.914382][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914391][ T5708] gspca_stk1135: Sensor read failed [ 202.914424][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914434][ T5708] gspca_stk1135: Sensor read failed [ 202.914441][ T5708] gspca_stk1135: Detected sensor type unknown (0x0) [ 202.914476][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914486][ T5708] gspca_stk1135: Sensor read failed [ 202.914518][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914528][ T5708] gspca_stk1135: Sensor read failed [ 202.914559][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914569][ T5708] gspca_stk1135: Sensor write failed [ 202.914602][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 202.914609][ T5708] gspca_stk1135: Sensor write failed [ 202.914680][ T5708] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 202.966085][ T5708] usb 3-1: USB disconnect, device number 20 [ 203.097089][ T5735] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 203.220814][ T9042] ovs-dp0: entered promiscuous mode [ 203.249693][ T5735] usb 1-1: Using ep0 maxpacket: 16 [ 203.252890][ T5735] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 203.253914][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.253944][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.253966][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.254005][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.307281][ T5735] usb 1-1: config 0 descriptor?? [ 203.420868][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.485689][ T9050] netlink: 'syz.1.1372': attribute type 11 has an invalid length. [ 203.807927][ T5735] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001A/input/input46 [ 203.847103][ T5683] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 203.910762][ T5735] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 204.011254][ T5683] usb 5-1: not running at top speed; connect to a high speed hub [ 204.011339][ T5683] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.40 [ 204.013168][ T5683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 204.016337][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.016357][ T5683] usb 5-1: Product: syz [ 204.016369][ T5683] usb 5-1: Manufacturer: П [ 204.016380][ T5683] usb 5-1: SerialNumber: syz [ 204.073893][ T1071] usb 1-1: USB disconnect, device number 19 [ 204.096254][ T9053] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.347684][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.348680][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.351828][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.427994][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.459085][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.460261][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.531127][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.532773][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.579035][ T5683] usbhid 5-1:1.0: can't add hid device: -71 [ 204.579109][ T5683] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 204.582874][ T5683] usb 5-1: USB disconnect, device number 15 [ 204.694675][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 204.694701][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1384'. [ 205.682013][ T9090] batadv_slave_1: entered promiscuous mode [ 205.686200][ T9088] batadv_slave_1: left promiscuous mode [ 205.867325][ T9075] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.868725][ T9056] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.591538][ T9075] Bluetooth: hci3: command 0x0406 tx timeout [ 206.591927][ T9075] Bluetooth: hci1: command 0x0406 tx timeout [ 206.592007][ T9075] Bluetooth: hci2: command 0x0406 tx timeout [ 206.592586][ T9075] Bluetooth: hci4: command 0x0406 tx timeout [ 206.637559][ T9056] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 206.700689][ T9056] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 206.705022][ T9056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 206.705100][ T9056] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 206.706737][ T9056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 206.706824][ T9056] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 206.740865][ T9056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 206.740953][ T9056] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.743068][ T9056] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.743154][ T9056] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 207.027026][ T1071] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 207.028429][ T5683] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.077019][ T5735] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 207.178031][ T1071] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 207.179053][ T1071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.192101][ T1071] usb 1-1: config 0 descriptor?? [ 207.238641][ T5735] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 207.239818][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.239849][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.239890][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.244624][ T5735] usb 4-1: config 0 descriptor?? [ 207.366354][ T9125] net_ratelimit: 3 callbacks suppressed [ 207.367103][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.383837][ T5683] usb 2-1: device descriptor read/64, error -71 [ 207.385331][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.385625][ T9125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.387193][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.431149][ T1071] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 207.561554][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.617014][ T5683] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 207.647955][ T1071] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 207.647980][ T1071] [drm] Initialized udl on minor 1 [ 207.672749][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.672784][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.672810][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.672836][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.672861][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.672886][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.672913][ T5735] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 207.731687][ T5735] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 207.788486][ T5669] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.807470][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 207.808513][ T5683] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 207.809874][ T5683] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 207.809899][ T5683] usb 2-1: config 252 has no interface number 0 [ 207.809936][ T5683] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.812982][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.813005][ T5683] usb 2-1: Product: syz [ 207.813019][ T5683] usb 2-1: Manufacturer: syz [ 207.813032][ T5683] usb 2-1: SerialNumber: syz [ 207.906647][ T5735] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE [ 207.933164][ T5683] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 207.947449][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.952521][ T5669] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.952675][ T5669] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 207.959573][ T5669] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.959629][ T5669] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.970640][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.970694][ T5669] usb 5-1: Product: syz [ 207.970710][ T5669] usb 5-1: Manufacturer: syz [ 207.970725][ T5669] usb 5-1: SerialNumber: syz [ 208.040563][ T5669] usb 5-1: selecting invalid altsetting 1 [ 208.043075][ T5669] usb 5-1: unit 6 not found! [ 208.103050][ T13] usb 2-1: Failed to submit usb control message: -71 [ 208.103088][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 208.103105][ T13] usb 2-1: unable to get target info from device [ 208.103185][ T13] usb 2-1: could not get target info (-71) [ 208.103461][ T13] usb 2-1: could not probe fw (-71) [ 208.103492][ T5683] usb 2-1: USB disconnect, device number 18 [ 208.347546][ T5735] cp2112 0003:10C4:EA90.001B: error setting SMBus config [ 208.351760][ T5735] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 208.378913][ T5735] usb 4-1: USB disconnect, device number 23 [ 208.594068][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.747194][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 208.747244][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 208.747272][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 208.747298][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 208.849037][ T5669] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 209.041289][ T5669] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.051487][ T5669] usb 5-1: USB disconnect, device number 16 [ 209.145866][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.497642][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 209.663233][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.922277][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.922751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.027620][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.125809][ T9190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.202055][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 210.204126][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 210.356543][ T9197] batadv_slave_1: entered promiscuous mode [ 210.371559][ T9197] batadv_slave_1: left promiscuous mode [ 210.638648][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1441'. [ 210.828822][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 210.828849][ T5624] Bluetooth: hci2: command 0x0406 tx timeout [ 210.828883][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 210.828907][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 210.999398][ T5735] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.147234][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 211.149079][ T5735] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.151818][ T5735] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 211.151861][ T5735] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.151893][ T5735] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.151920][ T5735] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.151944][ T5735] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.151990][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.392131][ T5735] usb 5-1: usb_control_msg returned -32 [ 211.392180][ T5735] usbtmc 5-1:16.0: can't read capabilities [ 211.752638][ T9245] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 211.754099][ T5735] usb 5-1: USB disconnect, device number 17 [ 212.309517][ T9255] syzkaller1: entered promiscuous mode [ 212.309566][ T9255] syzkaller1: entered allmulticast mode [ 212.580556][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'. [ 212.667526][ T1071] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 212.674424][ T1071] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 212.694706][ T5669] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.710608][ T5669] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.710816][ T5669] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 212.735427][ T1071] usb 1-1: USB disconnect, device number 20 [ 213.607723][ T9292] netlink: 'syz.4.1476': attribute type 16 has an invalid length. [ 213.607757][ T9292] netlink: 'syz.4.1476': attribute type 17 has an invalid length. [ 213.633254][ C1] net_ratelimit: 15 callbacks suppressed [ 213.633268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.679434][ T9292] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.090836][ T9300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.090974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.750760][ T9267] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 214.756101][ T4934] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.389219][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.390039][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.390732][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.390829][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.390919][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.390984][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.558253][ T9267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 215.558817][ T9267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.559005][ T9267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.559171][ T9267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.797250][ T5708] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 215.947811][ T5708] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 215.953639][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.953666][ T5708] usb 5-1: Product: syz [ 215.953680][ T5708] usb 5-1: Manufacturer: syz [ 215.953695][ T5708] usb 5-1: SerialNumber: syz [ 216.002199][ T5708] usb 5-1: config 0 descriptor?? [ 216.020018][ T5708] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 216.115006][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1493'. [ 216.276975][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 216.428533][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 216.432288][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.432316][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 216.434758][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.434784][ T9] usb 4-1: Product: syz [ 216.434811][ T9] usb 4-1: Manufacturer: syz [ 216.434834][ T9] usb 4-1: SerialNumber: syz [ 216.623140][ T5708] gspca_stk1135: reg_w 0x3 err -71 [ 216.624188][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624202][ T5708] gspca_stk1135: Sensor write failed [ 216.624234][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624243][ T5708] gspca_stk1135: Sensor write failed [ 216.624294][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624302][ T5708] gspca_stk1135: Sensor read failed [ 216.624333][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624344][ T5708] gspca_stk1135: Sensor read failed [ 216.624352][ T5708] gspca_stk1135: Detected sensor type unknown (0x0) [ 216.624386][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624395][ T5708] gspca_stk1135: Sensor read failed [ 216.624427][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624437][ T5708] gspca_stk1135: Sensor read failed [ 216.624468][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624478][ T5708] gspca_stk1135: Sensor write failed [ 216.624511][ T5708] gspca_stk1135: serial bus timeout: status=0x00 [ 216.624520][ T5708] gspca_stk1135: Sensor write failed [ 216.624591][ T5708] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 216.745452][ T5708] usb 5-1: USB disconnect, device number 18 [ 216.828933][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 217.054504][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 217.624204][ T5708] usb 4-1: USB disconnect, device number 24 [ 217.624207][ C0] usb 4-1: failed to resubmit arpc in-urb: -19 [ 217.624265][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 217.624299][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 217.624330][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 217.624363][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 217.624416][ C0] usb 4-1: failed to resubmit arpc in-urb: -19 [ 217.629166][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 217.629272][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 217.629331][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 217.700535][ T5708] usb 4-1: failed to send ARPC request 4: -19 [ 217.700612][ T5708] usb 4-1: failed to execute ARPC: -19 [ 217.700629][ T5708] usb 4-1: failed to flush cport 0: -19 [ 217.700648][ T5708] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 217.700814][ T5708] usb 4-1: failed to send ARPC request 2: -19 [ 217.702336][ T5708] usb 4-1: failed to execute ARPC: -19 [ 217.702357][ T5708] usb 4-1: failed to quiesce cport 0: -19 (0) [ 217.702376][ T5708] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 217.702527][ T5708] usb 4-1: failed to send ARPC request 3: -19 [ 217.702599][ T5708] usb 4-1: failed to execute ARPC: -19 [ 217.702615][ T5708] usb 4-1: failed to clear cport 0: -19 [ 217.702631][ T5708] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 218.668437][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 218.817078][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 218.817890][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 218.819286][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.819315][ T9] usb 2-1: config 0 has no interface number 0 [ 218.819362][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.819393][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.819420][ T9] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.819496][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 218.819535][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.823325][ T9] usb 2-1: config 0 descriptor?? [ 218.870869][ T9] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 218.976272][ T9432] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 218.988845][ T5683] net_ratelimit: 13 callbacks suppressed [ 218.988865][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.012633][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.072907][ T9434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.232761][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.235826][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.236568][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.236690][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.236811][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.236892][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.237332][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.312170][ T9] elan 0003:04F3:074D.001C: failed to start in urb: -90 [ 219.417602][ T5683] sony 0005:054C:03D5.001D: UNIQ does not contain a MAC address; duplicate check skipped [ 219.585134][ T5683] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.001D/input/input48 [ 219.645045][ T5683] sony 0005:054C:03D5.001D: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 219.723083][ T9] elan 0003:04F3:074D.001C: Get report error for parm 6: 0 [ 219.797777][ T9455] fido_id[9455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.920326][ T9] elan 0003:04F3:074D.001C: Set report error for parm 7: -71 [ 219.953238][ T9] elan 0003:04F3:074D.001C: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 219.953275][ T9] elan 0003:04F3:074D.001C: Input device is not registered [ 219.991093][ T9] elan 0003:04F3:074D.001C: probe with driver elan failed with error -119 [ 220.009790][ T9463] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 220.045586][ T9] usb 2-1: USB disconnect, device number 19 [ 220.111747][ T9464] fido_id[9464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 220.812138][ T9491] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1561'. [ 221.117104][ T5708] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 221.270183][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.270256][ T5708] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 221.271759][ T5708] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.271782][ T5708] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.273971][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.273997][ T5708] usb 2-1: Product: syz [ 221.274013][ T5708] usb 2-1: Manufacturer: syz [ 221.274029][ T5708] usb 2-1: SerialNumber: syz [ 221.350756][ T5708] usb 2-1: selecting invalid altsetting 1 [ 221.351424][ T5708] usb 2-1: unit 6 not found! [ 222.069030][ T5704] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 222.185952][ T5708] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 222.237123][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 222.237285][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 222.246062][ T5704] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 222.260582][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.260607][ T5704] usb 3-1: config 0 has no interfaces? [ 222.293041][ T5704] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 222.293070][ T5704] usb 3-1: Product: syz [ 222.293086][ T5704] usb 3-1: Manufacturer: syz [ 222.293102][ T5704] usb 3-1: SerialNumber: syz [ 222.322189][ T5704] usb 3-1: config 0 descriptor?? [ 222.360516][ T5708] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 222.366667][ T5708] usb 2-1: USB disconnect, device number 20 [ 222.396989][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 222.397692][ T25] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 222.398677][ T25] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 222.398727][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.398755][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.398798][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.403612][ T25] usb 1-1: config 0 descriptor?? [ 222.494245][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.550467][ T5704] usb 3-1: USB disconnect, device number 21 [ 222.819932][ T5708] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 222.852558][ T31] audit: type=1326 audit(1792087257.941:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9562 comm="syz.1.1592" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x0 [ 222.967120][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 222.968705][ T5708] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 222.968734][ T5708] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 222.969777][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.969801][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.969868][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.969894][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.970881][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.970906][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.970974][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.970990][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.971968][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.971991][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.972033][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.972068][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.973370][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.973388][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.973436][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.973452][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.974584][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.974608][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.974649][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.974691][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.975675][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.975699][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.975773][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.975789][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.976770][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.976793][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.978753][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.978868][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.985609][ T5708] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.985740][ T5708] usb 5-1: config 0 has no interface number 0 [ 222.985883][ T5708] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.985943][ T5708] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.988501][ T5704] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 223.002230][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.002262][ T5708] usb 5-1: Product: syz [ 223.002275][ T5708] usb 5-1: Manufacturer: syz [ 223.002287][ T5708] usb 5-1: SerialNumber: syz [ 223.042688][ T5708] usb 5-1: config 0 descriptor?? [ 223.126175][ T5708] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 223.218459][ T5704] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 223.253433][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.253620][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.253780][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.318138][ T25] sony 0003:1345:3008.001E: can't set operational mode: step 1 [ 223.318340][ T25] sony 0003:1345:3008.001E: Failed to set controller into operational mode [ 223.379466][ T5704] usb 4-1: config 0 descriptor?? [ 223.425552][ T25] sony 0003:1345:3008.001E: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 223.425580][ T25] sony 0003:1345:3008.001E: failed to claim input [ 223.472545][ T25] usb 1-1: USB disconnect, device number 21 [ 223.534430][ T9565] fido_id[9565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 223.733102][ T9574] mac80211_hwsim hwsim4 ..ãc¤±: renamed from wlan1 [ 223.813788][ T5704] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 223.813975][ T5704] cm6533_jd 0003:0D8C:0022.001F: unknown main item tag 0x0 [ 223.841778][ T5704] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.001F/input/input50 [ 223.917949][ T5704] cm6533_jd 0003:0D8C:0022.001F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 223.923206][ T5708] etas_es58x 5-1:0.2: could not retrieve the product info string [ 224.140774][ T5708] usb 5-1: USB disconnect, device number 19 [ 224.153908][ T5704] usb 4-1: USB disconnect, device number 25 [ 224.192615][ T5708] etas_es58x 5-1:0.2: Disconnecting syz syz [ 224.414430][ T9594] syzkaller1: entered promiscuous mode [ 224.414453][ T9594] syzkaller1: entered allmulticast mode [ 224.430290][ T1071] net_ratelimit: 1032 callbacks suppressed [ 224.430309][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.987523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.307767][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.478180][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.638362][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.778567][ T9615] mmap: syz.3.1608 (9615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.896674][ T49] IPVS: starting estimator thread 0... [ 225.977077][ T9667] IPVS: using max 27 ests per chain, 64800 per kthread [ 226.335662][ T9680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.336297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.381837][ T9682] netlink: 'syz.3.1628': attribute type 16 has an invalid length. [ 226.381863][ T9682] netlink: 'syz.3.1628': attribute type 17 has an invalid length. [ 226.417140][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 226.485111][ T9682] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 226.509856][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.578018][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.578067][ T25] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 226.583779][ T25] usb 1-1: string descriptor 0 read error: -22 [ 226.583911][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.696980][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.857003][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 226.857812][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 226.858964][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 226.859009][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.862721][ T9] usb 5-1: config 0 descriptor?? [ 226.863507][ T9686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 226.916998][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.231000][ T25] usb 1-1: current rate 47891 is different from the runtime rate 48000 [ 227.295827][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.295864][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.295892][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.295919][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.295946][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.338235][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.338275][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.338303][ T9] hid-sensor-hub 0003:0C70:F00D.0020: unknown main item tag 0x0 [ 227.408484][ T9] hid-sensor-hub 0003:0C70:F00D.0020: hiddev0,hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0 [ 227.491732][ T9] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: failed to setup attributes [ 227.491760][ T9] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: probe with driver hid_sensor_accel_3d failed with error -1 [ 227.559617][ T9] usb 5-1: USB disconnect, device number 20 [ 227.700290][ T9711] fido_id[9711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 227.840994][ T25] usb 1-1: USB disconnect, device number 22 [ 228.887029][ T5704] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 229.037557][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 229.038386][ T5704] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 229.047294][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.047361][ T5704] usb 5-1: Product: syz [ 229.047401][ T5704] usb 5-1: Manufacturer: syz [ 229.047435][ T5704] usb 5-1: SerialNumber: syz [ 229.092385][ T5704] usb 5-1: config 0 descriptor?? [ 229.408849][ T5704] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 229.468210][ T25] net_ratelimit: 4 callbacks suppressed [ 229.468233][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.566001][ T9757] netlink: 'syz.2.1661': attribute type 16 has an invalid length. [ 229.566026][ T9757] netlink: 'syz.2.1661': attribute type 17 has an invalid length. [ 229.590280][ T9757] 0ªî{X¹¦: left allmulticast mode [ 229.627839][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.646717][ T9757] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 230.221246][ T5704] usb write operation failed. (-71) [ 230.246684][ T5704] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.260403][ T5704] dvbdev: DVB: registering new adapter (Terratec H7) [ 230.260461][ T5704] usb 5-1: media controller created [ 230.283421][ T5704] usb read operation failed. (-71) [ 230.300333][ T5704] usb write operation failed. (-71) [ 230.332308][ T5704] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 230.357678][ T5704] usb 5-1: USB disconnect, device number 21 [ 230.667487][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.938013][ T5669] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 230.957155][ T5683] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 231.087192][ T5669] usb 1-1: Using ep0 maxpacket: 32 [ 231.088927][ T5669] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 231.091353][ T5669] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 231.091379][ T5669] usb 1-1: config 0 has no interface number 0 [ 231.093479][ T5669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.093503][ T5669] usb 1-1: Product: syz [ 231.093517][ T5669] usb 1-1: Manufacturer: syz [ 231.093532][ T5669] usb 1-1: SerialNumber: syz [ 231.116515][ T5669] usb 1-1: config 0 descriptor?? [ 231.148437][ T5683] usb 3-1: Using ep0 maxpacket: 8 [ 231.159332][ T5683] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 231.160624][ T5683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.160677][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.167633][ T5683] usb 3-1: config 0 descriptor?? [ 231.205134][ T5683] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 231.554044][ T9823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.554246][ T9823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.554524][ T9823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.556464][ T5669] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 231.556509][ T5669] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 231.589967][ T9822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.607278][ T9822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.709406][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.962582][ T9840] faux_driver vgem: [drm] Unknown color mode 55546; guessing buffer size. [ 232.025822][ T5669] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 232.026088][ T5669] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 232.081551][ T5669] usb 1-1: USB disconnect, device number 23 [ 232.262408][ T5683] gspca_vc032x: reg_r err -71 [ 232.262495][ T5683] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 232.297517][ T5683] usb 3-1: USB disconnect, device number 22 [ 233.355803][ T9889] batman_adv: batadv0: Adding interface: macvtap1 [ 233.355824][ T9889] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.355969][ T9889] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 234.414653][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 234.414705][ T9934] netlink: 'syz.4.1723': attribute type 10 has an invalid length. [ 234.414722][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1723'. [ 234.504695][ T9934] geneve2: entered promiscuous mode [ 234.504723][ T9934] geneve2: entered allmulticast mode [ 234.828143][ T5704] net_ratelimit: 10 callbacks suppressed [ 234.828167][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.837071][ T5690] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 234.851598][ T31] audit: type=1326 audit(1792087269.931:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9950 comm="syz.3.1731" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff40ec code=0x0 [ 234.997713][ T5690] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 234.998713][ T5690] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 234.998734][ T5690] usb 2-1: config 0 has no interface number 0 [ 234.998772][ T5690] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.000936][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.000962][ T5690] usb 2-1: Product: syz [ 235.000977][ T5690] usb 2-1: Manufacturer: syz [ 235.000993][ T5690] usb 2-1: SerialNumber: syz [ 235.005871][ T5690] usb 2-1: config 0 descriptor?? [ 235.079111][ T5690] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 235.224810][ T9960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.225262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.309960][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 235.311819][ T5669] usb 2-1: USB disconnect, device number 21 [ 235.336524][ T5669] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 235.542221][ T9969] veth0_vlan: entered allmulticast mode [ 235.542896][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 235.563353][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.679362][ T9969] veth0_vlan (unregistering): left allmulticast mode [ 235.727114][ T5735] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 235.880565][ T5735] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.883060][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.927465][ T5735] usb 3-1: config 0 descriptor?? [ 236.052280][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.148812][ T5735] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 236.406760][ T5735] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 236.406785][ T5735] [drm] Initialized udl on minor 1 [ 236.637139][ T5690] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 236.697147][ T5683] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 236.788681][T10002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1750'. [ 236.808058][ T5690] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.809318][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.809338][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.809353][ T5690] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.809399][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.812737][ T5690] usb 5-1: config 0 descriptor?? [ 236.877063][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 236.878920][ T5683] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.881136][ T5683] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 236.881198][ T5683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 236.881226][ T5683] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.881252][ T5683] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.881294][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.046598][ T31] audit: type=1326 audit(1792087272.131:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.0.1752" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743f0ec code=0x0 [ 237.071436][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.135558][ T5683] usb 2-1: GET_CAPABILITIES returned 0 [ 237.135595][ T5683] usbtmc 2-1:16.0: can't read capabilities [ 237.234982][ T5690] hid_parser_main: 444 callbacks suppressed [ 237.235033][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235063][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235095][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235120][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235147][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235193][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235218][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235243][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235267][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.235291][ T5690] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 237.325954][ T5690] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 237.367268][ T5690] usb 2-1: USB disconnect, device number 22 [ 237.456857][ T5669] usb 5-1: USB disconnect, device number 22 [ 237.790048][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.108988][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.431086][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.587675][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.791169][ T31] audit: type=1326 audit(1792087273.881:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.791493][ T31] audit: type=1326 audit(1792087273.881:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.795803][ T31] audit: type=1326 audit(1792087273.881:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.795855][ T31] audit: type=1326 audit(1792087273.881:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.795928][ T31] audit: type=1326 audit(1792087273.881:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.837338][ T31] audit: type=1326 audit(1792087273.921:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.842972][ T31] audit: type=1326 audit(1792087273.931:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 238.845831][ T31] audit: type=1326 audit(1792087273.931:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10063 comm="syz.1.1774" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x7ffc0000 [ 239.218907][T10075] input: syz0 as /devices/virtual/input/input51 [ 239.487567][ T5683] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 239.637081][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 239.638436][ T5683] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 239.640724][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.640753][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.640814][ T5683] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 239.640863][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.647245][ T5683] usb 2-1: config 0 descriptor?? [ 239.660011][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 239.808990][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 239.811541][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 239.811561][ T9] usb 5-1: config 0 has no interface number 0 [ 239.811589][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.816443][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.816460][ T9] usb 5-1: Product: syz [ 239.816470][ T9] usb 5-1: Manufacturer: syz [ 239.816480][ T9] usb 5-1: SerialNumber: syz [ 239.842178][ T9] usb 5-1: config 0 descriptor?? [ 239.894439][ T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 240.037142][ T5704] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 240.119103][ T5683] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0022/input/input52 [ 240.134228][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 240.144190][ T9] usb 5-1: USB disconnect, device number 23 [ 240.164680][ T9] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 240.188286][ T25] net_ratelimit: 1 callbacks suppressed [ 240.188304][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.188871][ T5704] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 240.190024][ T5704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.190072][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.194367][ T5683] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0022/input/input53 [ 240.221091][ T5708] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 240.322381][ T5683] kye 0003:0458:5011.0022: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 240.366354][ T5683] usb 2-1: USB disconnect, device number 23 [ 240.417357][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 240.418978][ T5708] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 240.442112][ T5708] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 240.442138][ T5708] usb 4-1: config 0 has no interface number 0 [ 240.442176][ T5708] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 240.442225][ T5708] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 240.488281][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.488311][ T5708] usb 4-1: Product: syz [ 240.488328][ T5708] usb 4-1: Manufacturer: syz [ 240.488344][ T5708] usb 4-1: SerialNumber: syz [ 240.553841][ T5708] usb 4-1: config 0 descriptor?? [ 240.555159][T10094] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 240.557509][T10094] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 240.602606][ T5704] qmi_wwan 1-1:1.0: cdc-wdm1: USB WDM device [ 240.649821][T10096] fido_id[10096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 240.652353][ T5704] wwan wwan0: port wwan0qmi0 attached [ 240.792613][ T5704] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 06:1f:71:4e:ae:45 [ 240.796855][ T5704] usb 1-1: USB disconnect, device number 24 [ 240.825625][ T5704] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 240.852092][T10094] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 240.852230][T10094] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 240.951365][ T5704] wwan wwan0: port wwan0qmi0 disconnected [ 240.989785][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.067923][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 241.217027][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 241.217795][ T9] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 241.219010][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.219070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.222536][ T9] usb 5-1: config 0 descriptor?? [ 241.232895][ T9] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 241.253134][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.337648][ T1071] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 241.433468][T10103] input: syz0 as /devices/virtual/input/input54 [ 241.447827][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 241.454941][ T9] usb 5-1: USB disconnect, device number 24 [ 241.471985][ T5735] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 241.472723][ T5735] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 241.499286][ T1071] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 241.501015][ T1071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 241.501092][ T1071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.505910][ T1071] usb 2-1: config 0 descriptor?? [ 241.506835][T10101] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 241.520349][ T5683] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 241.527258][ T5735] usb 3-1: USB disconnect, device number 23 [ 241.599926][ T5683] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 241.601094][ T5683] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 241.640490][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.698677][ T5708] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.698707][ T5708] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 241.732218][ T5708] asix 4-1:0.34: probe with driver asix failed with error -71 [ 241.758094][ T5708] usb 4-1: USB disconnect, device number 26 [ 241.985623][ T1071] asus 0003:0B05:1ABE.0023: reserved main item tag 0xd [ 242.000637][ T1071] asus 0003:0B05:1ABE.0023: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 242.125073][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1793'. [ 242.125142][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 242.125159][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 242.270081][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.359960][ T1071] asus 0003:0B05:1ABE.0023: Asus handshake 5a failed to receive ack: -71 [ 242.366847][ T1071] usb 2-1: USB disconnect, device number 24 [ 242.975572][T10156] input: syz0 as /devices/virtual/input/input55 [ 243.307225][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.787089][ T1071] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 243.817039][ T5708] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 243.950811][ T1071] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.951584][ T1071] usb 2-1: not running at top speed; connect to a high speed hub [ 243.951621][ T1071] usb 2-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=bf.1c [ 243.952777][ T1071] usb 2-1: config 129 has an invalid interface number: 8 but max is 1 [ 243.952804][ T1071] usb 2-1: config 129 has an invalid interface number: 3 but max is 1 [ 243.952826][ T1071] usb 2-1: config 129 has no interface number 0 [ 243.952846][ T1071] usb 2-1: config 129 has no interface number 1 [ 243.952890][ T1071] usb 2-1: config 129 interface 8 has no altsetting 0 [ 243.955429][ T1071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.955455][ T1071] usb 2-1: Product: syz [ 243.955470][ T1071] usb 2-1: Manufacturer: syz [ 243.955486][ T1071] usb 2-1: SerialNumber: syz [ 244.002166][ T5708] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.022921][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.022955][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.022976][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.023030][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.108219][ T5708] usb 4-1: config 0 descriptor?? [ 244.349114][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.537219][ T5708] hid_parser_main: 468 callbacks suppressed [ 244.537245][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537276][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537302][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537328][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537354][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537380][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537406][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537431][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537457][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.537483][ T5708] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 244.619325][ T5735] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 244.646518][ T5708] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 244.670099][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.701326][T10214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.701553][T10214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.759555][T10215] input: syz0 as /devices/virtual/input/input56 [ 244.780387][ T5735] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 244.781717][ T5735] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.781764][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.888224][ T9] usb 4-1: USB disconnect, device number 27 [ 244.942183][ T1071] qcserial 2-1:129.3: Qualcomm USB modem converter detected [ 245.097804][ T5735] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 245.134528][ T5735] wwan wwan0: port wwan0qmi0 attached [ 245.163063][ T5690] usb 2-1: USB disconnect, device number 25 [ 245.172905][ T5690] qcserial 2-1:129.3: device disconnected [ 245.322135][ T5735] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 06:0a:54:63:d7:55 [ 245.325015][ T5735] usb 3-1: USB disconnect, device number 24 [ 245.352439][ T5735] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 245.397221][ T1071] net_ratelimit: 1023 callbacks suppressed [ 245.397242][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.461557][ T5735] wwan wwan0: port wwan0qmi0 disconnected [ 245.501928][T10218] netlink: 'syz.4.1839': attribute type 11 has an invalid length. [ 245.691061][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 245.767047][ T5690] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 245.920981][ T5690] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 245.922404][ T5690] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 245.922441][ T5690] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.922468][ T5690] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.922498][ T5690] usb 1-1: config 0 interface 0 has no altsetting 0 [ 245.922552][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.989636][ T5690] usb 1-1: config 0 descriptor?? [ 246.440850][ T5690] input: HID 17ef:6047 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6047.0025/input/input57 [ 246.458516][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.555647][ T5690] lenovo 0003:17EF:6047.0025: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 246.639667][ T5704] usb 1-1: USB disconnect, device number 25 [ 246.747434][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.775938][T10260] fido_id[10260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 247.467342][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.867446][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.122097][T10282] sit0: entered promiscuous mode [ 248.147078][T10282] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 248.147103][T10282] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1858'. [ 248.507464][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.687874][T10303] veth0_vlan: entered allmulticast mode [ 248.688552][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 248.785364][T10303] veth0_vlan (unregistering): left allmulticast mode [ 248.846963][ T5708] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 248.909252][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 249.017000][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 249.017796][ T5708] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 249.021738][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.021760][ T5708] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.023863][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.023886][ T5708] usb 1-1: Product: syz [ 249.023899][ T5708] usb 1-1: Manufacturer: syz [ 249.023912][ T5708] usb 1-1: SerialNumber: syz [ 249.059000][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.073496][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 249.073615][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.073687][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.073745][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.073804][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.097624][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 249.097736][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.097803][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.097956][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.098024][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.109956][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 249.110074][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 249.110134][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.110198][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.110281][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 249.146763][ T9] usb 5-1: string descriptor 0 read error: -22 [ 249.147703][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.257550][ T5690] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 249.280795][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 249.354587][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 249.354607][ T31] audit: type=1800 audit(1792087284.441:388): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1871" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 249.422875][ T5690] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 249.429906][ T5690] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.430046][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.499262][ T1071] usb 5-1: USB disconnect, device number 25 [ 249.548538][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.647309][ T5708] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 249.656043][ T5708] usb 1-1: 0:2 : does not exist [ 249.722728][ T5690] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 249.736022][ T5690] wwan wwan0: port wwan0qmi0 attached [ 249.767672][ T5708] usb 1-1: USB disconnect, device number 26 [ 249.861559][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.971856][ T5690] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, c6:44:56:58:44:f5 [ 249.987164][ T5690] usb 2-1: USB disconnect, device number 26 [ 250.000387][ T5690] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 250.049224][ T5690] wwan wwan0: port wwan0qmi0 disconnected [ 250.177091][ T1071] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 250.334975][ T1071] usb 3-1: unable to get BOS descriptor or descriptor too short [ 250.335476][ T1071] usb 3-1: not running at top speed; connect to a high speed hub [ 250.335505][ T1071] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 250.336556][ T1071] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 250.377324][ T1071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.377354][ T1071] usb 3-1: Product: syz [ 250.377370][ T1071] usb 3-1: Manufacturer: syz [ 250.377385][ T1071] usb 3-1: SerialNumber: syz [ 250.598801][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.629015][ T1071] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 250.704781][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 250.776849][ T31] audit: type=1800 audit(1792087285.861:389): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1884" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 250.824021][ T1071] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 250.824047][ T1071] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 250.907382][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.113080][T10350] kvm: user requested TSC rate below hardware speed [ 251.242176][ T1071] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 251.242209][ T1071] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 251.365310][T10358] netlink: 'syz.4.1890': attribute type 3 has an invalid length. [ 251.365381][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 251.443610][ T1071] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 251.527697][ T5690] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 251.535262][ T1071] usb 3-1: USB disconnect, device number 25 [ 251.585716][T10362] sctp: [Deprecated]: syz.4.1892 (pid 10362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.585716][T10362] Use struct sctp_sack_info instead [ 251.628574][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.689623][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 251.691183][ T5690] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 251.711749][ T5690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.711777][ T5690] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.743065][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.759097][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.759170][ T5690] usb 4-1: Product: syz [ 251.759209][ T5690] usb 4-1: Manufacturer: syz [ 251.759249][ T5690] usb 4-1: SerialNumber: syz [ 251.877629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.947371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.087166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.179957][ T5690] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.180726][ T5690] usb 4-1: 0:2 : does not exist [ 252.221499][ T31] audit: type=1800 audit(1792087287.311:390): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1896" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 252.393187][ T5690] usb 4-1: USB disconnect, device number 28 [ 252.668749][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.710311][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1903'. [ 252.710342][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1903'. [ 252.797332][ T1071] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 252.862062][T10395] kernel read not supported for file /eth0 (pid: 10395 comm: syz.1.1907) [ 252.863713][ T31] audit: type=1800 audit(1792087287.951:391): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1907" name="eth0" dev="mqueue" ino=28360 res=0 errno=0 [ 252.977260][ T1071] usb 5-1: Using ep0 maxpacket: 8 [ 252.978015][ T1071] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 252.981693][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.981726][ T1071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.981749][ T1071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.981792][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.986155][ T1071] usb 5-1: config 0 descriptor?? [ 253.055373][ T5708] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 253.217934][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 253.218701][ T5708] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 253.220084][ T5708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.220140][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.268637][ T5708] usb 3-1: config 0 descriptor?? [ 253.283404][ T5708] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 253.480162][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 253.482105][ T5708] usb 3-1: USB disconnect, device number 26 [ 253.717274][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.947293][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.009487][ T1071] sony 0003:054C:042F.0026: can't set operational mode: step 2 [ 254.009551][ T1071] sony 0003:054C:042F.0026: Failed to set controller into operational mode [ 254.034533][ T1071] sony 0003:054C:042F.0026: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.4-1/input0 [ 254.034570][ T1071] sony 0003:054C:042F.0026: failed to claim input [ 254.089455][ T1071] usb 5-1: USB disconnect, device number 26 [ 254.178229][T10415] fido_id[10415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 254.178441][ T31] audit: type=1800 audit(1792087289.271:392): pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1916" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 254.617074][ T5708] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 254.630943][T10436] loop3: detected capacity change from 0 to 4 [ 254.713649][T10438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.767752][ T5708] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 254.769090][ T5708] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 254.769140][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 254.769179][ T5708] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.769207][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.769234][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 254.770221][ T5708] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 254.770267][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 254.770296][ T5708] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.770323][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.770350][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 254.771459][ T5708] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 254.771506][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 254.771535][ T5708] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.771562][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 254.771589][ T5708] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 254.774417][ T5708] usb 4-1: string descriptor 0 read error: -22 [ 254.774553][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.964801][ T5708] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 255.172339][ T5690] usb 4-1: USB disconnect, device number 29 [ 255.327010][ T5735] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 255.346328][T10448] xt_IDLETIMER: label is empty or not nul-terminated [ 255.447259][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 255.480773][ T5735] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 255.496285][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.496315][ T5735] usb 5-1: Product: syz [ 255.496332][ T5735] usb 5-1: Manufacturer: syz [ 255.496347][ T5735] usb 5-1: SerialNumber: syz [ 255.529662][ T5735] usb 5-1: config 0 descriptor?? [ 255.597854][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 255.599375][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.605864][ T9] usb 1-1: config 0 descriptor?? [ 255.712153][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.712233][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.787165][ T5708] net_ratelimit: 3 callbacks suppressed [ 255.787187][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.884557][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 256.004417][ T5735] usb 5-1: Firmware: major: 162, minor: 241, hardware type: UNKNOWN (79) [ 256.205769][ T5735] usb 5-1: Firmware: build [ 256.212252][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 256.212279][ T9] [drm] Initialized udl on minor 1 [ 256.329271][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 256.348451][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.411630][ T5735] usb 5-1: failed to fetch extended address, random address set [ 256.411660][ T5735] usb 5-1: atusb_probe: initialization failed, error = -524 [ 256.412231][ T5735] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 256.459379][ T5735] usb 5-1: USB disconnect, device number 27 [ 256.830679][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.990758][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.507162][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.508368][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.615607][ T31] audit: type=1800 audit(1792087292.701:393): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1962" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 257.680541][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.700713][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.867665][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.906388][T10520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.915955][T10520] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.931973][T10520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.979506][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.979750][T10520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.007863][T10520] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.007972][T10520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.059166][T10520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.062255][T10520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.095428][T10520] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 258.123908][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.348655][ T9638] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.348686][ T9638] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 36182 - 0 [ 258.348718][ T9638] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.348736][ T9638] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 36182 - 0 [ 258.348760][ T9638] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.348779][ T9638] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 36182 - 0 [ 258.348803][ T9638] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.348821][ T9638] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 36182 - 0 [ 258.653649][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.813648][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 258.919143][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.947209][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.642354][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'. [ 260.642512][T10626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.699608][T10626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.990485][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.147618][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.228982][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 261.229395][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.240782][ T5735] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.266665][ T5735] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 261.280266][ T9] usb 1-1: USB disconnect, device number 27 [ 261.312101][ T5735] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 261.810370][T10663] loop5: detected capacity change from 0 to 1871 [ 261.835167][T10663] loop5: detected capacity change from 1871 to 2343 [ 262.046221][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.284681][ T5628] Buffer I/O error on dev loop5, logical block 292, async page read [ 262.320573][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2022'. [ 262.320666][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2022'. [ 262.819482][T10683] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.2028'. [ 262.819511][T10683] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.2028'. [ 263.089523][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.416554][T10704] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2037'. [ 264.119089][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.189031][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.147485][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.206470][T10769] syz_tun: entered allmulticast mode [ 265.999609][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.000363][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.197228][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.530105][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.603230][T10789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.689313][T10806] loop5: detected capacity change from 0 to 1335 [ 266.697654][T10807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.743070][T10806] loop5: detected capacity change from 1335 to 1735 [ 267.123711][T10789] batman_adv: batadv0: Interface deactivated: gretap1 [ 267.232815][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.266828][T10791] sit0: left promiscuous mode [ 267.337665][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.344978][T10804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.364633][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.379478][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.445429][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.445539][T10791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.475358][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.475487][T10791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.541446][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.559955][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.662373][T10791] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 267.709927][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.710777][ T81] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.710897][ T81] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.153558][T10820] sctp: [Deprecated]: syz.3.2076 (pid 10820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.153558][T10820] Use struct sctp_sack_info instead [ 268.317028][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.428759][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.878026][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2082'. [ 268.878072][T10833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2082'. [ 269.221604][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 269.388643][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.494016][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2097'. [ 269.494045][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2097'. [ 269.515325][ T5735] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 269.548124][ T5683] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 269.667819][ T5735] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 269.670651][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.674559][ T5735] usb 5-1: config 0 descriptor?? [ 269.717195][ T5683] usb 4-1: Using ep0 maxpacket: 16 [ 269.717947][ T5683] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 269.719361][ T5683] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.719392][ T5683] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.719442][ T5683] usb 4-1: config 0 interface 0 has no altsetting 0 [ 269.719476][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.724160][ T5683] usb 4-1: config 0 descriptor?? [ 269.900605][ T5735] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 270.115975][ T5735] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 270.116001][ T5735] [drm] Initialized udl on minor 1 [ 270.165469][ T5683] hid_parser_main: 5 callbacks suppressed [ 270.165494][ T5683] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 270.165534][ T5683] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 270.165558][ T5683] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 270.165581][ T5683] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 270.165668][ T5683] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 270.166592][ T5683] mcp2221 0003:04D8:00DD.0027: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 270.352255][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.404313][T10889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.404500][T10889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.445884][ T5669] usb 4-1: USB disconnect, device number 30 [ 270.648633][ T1071] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 270.809124][ T1071] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 270.810421][ T1071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.816079][ T1071] usb 2-1: config 0 descriptor?? [ 271.043281][ T1071] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 271.284561][ T1071] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 271.284589][ T1071] [drm] Initialized udl on minor 2 [ 271.427322][ T5669] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 271.476866][ T25] net_ratelimit: 1025 callbacks suppressed [ 271.476939][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.583566][ T5669] usb 4-1: Using ep0 maxpacket: 8 [ 271.584328][ T5669] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.585731][ T5669] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 271.585806][ T5669] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.585830][ T5669] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.585855][ T5669] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.585880][ T5669] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.585943][ T5669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.894677][ T5669] usb 4-1: usb_control_msg returned -32 [ 271.894765][ T5669] usbtmc 4-1:16.0: can't read capabilities [ 271.957744][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.359329][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.359575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.509575][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.532589][T10909] capability: warning: `syz.0.2113' uses 32-bit capabilities (legacy support in use) [ 272.550248][ T5669] usb 4-1: USB disconnect, device number 31 [ 272.994448][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.312637][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.314250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.387374][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.547691][ T5669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.038182][ T5708] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 274.197889][ T5708] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 274.199255][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.202828][ T5708] usb 1-1: config 0 descriptor?? [ 274.420398][ T5708] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 274.693035][ T5708] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 274.693062][ T5708] [drm] Initialized udl on minor 3 [ 275.150162][ T5735] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 275.150630][ T5735] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 275.172260][ T9] usb 5-1: USB disconnect, device number 28 [ 275.194726][ T5708] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.206628][ T1071] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.215570][ T5735] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.215996][ T5735] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 275.235330][ T5708] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 275.255103][ T1071] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 275.256233][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.256788][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 275.257299][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 275.290037][ T1071] usb 2-1: USB disconnect, device number 27 [ 275.332906][ T5708] usb 1-1: USB disconnect, device number 28 [ 275.364140][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 275.707336][ T25] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 275.869756][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 275.870950][ T25] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.870985][ T25] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.871014][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 275.871049][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.874079][ T25] usb 4-1: config 0 descriptor?? [ 276.341370][ T25] playstation 0003:054C:09CC.0028: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.3-1/input0 [ 276.540040][ T25] playstation 0003:054C:09CC.0028: Invalid reportID received, expected 18 got 215 [ 276.540072][ T25] playstation 0003:054C:09CC.0028: Failed to retrieve DualShock4 pairing info: -22 [ 276.540129][ T25] playstation 0003:054C:09CC.0028: Failed to get MAC address from DualShock4 [ 276.540177][ T25] playstation 0003:054C:09CC.0028: Failed to create dualshock4. [ 276.568803][ T25] playstation 0003:054C:09CC.0028: probe with driver playstation failed with error -22 [ 276.679249][ T5708] net_ratelimit: 7 callbacks suppressed [ 276.679292][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.810475][ T25] usb 4-1: USB disconnect, device number 32 [ 277.148390][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.470043][ T9631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.470279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.707657][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.187111][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.205305][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 278.229653][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 278.358303][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.362926][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.362954][ T9] usb 3-1: Product: syz [ 278.362970][ T9] usb 3-1: Manufacturer: syz [ 278.362985][ T9] usb 3-1: SerialNumber: syz [ 278.367610][ T9] usb 3-1: config 0 descriptor?? [ 278.389071][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.391219][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.391306][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.391372][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.391513][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.466097][ T25] usb 4-1: config 0 descriptor?? [ 278.578449][ T5735] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 278.630559][T11028] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.630674][T11028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.715147][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 278.722781][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 278.736085][ T5735] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 278.747840][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.748024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.766284][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.766318][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 278.766344][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 278.800067][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.815292][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.815321][ T5735] usb 2-1: Product: syz [ 278.815337][ T5735] usb 2-1: Manufacturer: syz [ 278.815352][ T5735] usb 2-1: SerialNumber: syz [ 278.816213][ T9] usb 3-1: Firmware: major: 162, minor: 241, hardware type: UNKNOWN (79) [ 278.852388][ T5735] usb 2-1: config 0 descriptor?? [ 278.853204][T11017] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 278.918804][ T25] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 279.009131][ T5735] rc_core: IR keymap rc-streamzap not found [ 279.009150][ T5735] Registered IR keymap rc-empty [ 279.013043][ T5735] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 279.040244][ T9] usb 3-1: Firmware: build [ 279.046249][ T5735] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input59 [ 279.218699][ T9] usb 3-1: failed to fetch extended address, random address set [ 279.218762][ T9] usb 3-1: atusb_probe: initialization failed, error = -524 [ 279.219210][ T9] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 279.235741][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 279.243020][ T9] usb 3-1: USB disconnect, device number 27 [ 279.252581][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.366999][ T1071] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 279.440367][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 279.441800][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.445243][ T25] usb 1-1: config 0 descriptor?? [ 279.517001][ T1071] usb 5-1: Using ep0 maxpacket: 16 [ 279.517779][ T1071] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 279.519437][ T1071] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.519469][ T1071] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.519526][ T1071] usb 5-1: config 0 interface 0 has no altsetting 0 [ 279.519562][ T1071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.523356][ T1071] usb 5-1: config 0 descriptor?? [ 279.673601][ T25] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 279.901895][ T25] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 279.901951][ T25] [drm] Initialized udl on minor 1 [ 279.942346][ T1071] hid (null): invalid report_count 1395448241 [ 279.942371][ T1071] hid (null): global environment stack underflow [ 279.981730][ T1071] hid (null): global environment stack overflow [ 279.996760][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.996792][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998485][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998513][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998548][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998743][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998770][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998956][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.998982][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 279.999142][ T1071] cougar 0003:060B:500A.002A: unknown main item tag 0x0 [ 280.006858][ T1071] cougar 0003:060B:500A.002A: invalid report_count 1395448241 [ 280.011578][ T1071] cougar 0003:060B:500A.002A: item 0 4 1 9 parsing failed [ 280.013945][ T1071] cougar 0003:060B:500A.002A: parse failed [ 280.014070][ T1071] cougar 0003:060B:500A.002A: probe with driver cougar failed with error -22 [ 280.156508][ T5676] usb 5-1: USB disconnect, device number 29 [ 280.876324][T11054] syzkaller1: entered promiscuous mode [ 280.876349][T11054] syzkaller1: entered allmulticast mode [ 280.946296][ T5735] usb 4-1: USB disconnect, device number 33 [ 281.001064][ T5676] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 281.157332][ T5676] usb 5-1: Using ep0 maxpacket: 32 [ 281.159756][ T5676] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 281.161233][ T5676] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 281.161260][ T5676] usb 5-1: config 0 has no interface number 0 [ 281.167605][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.167733][ T5676] usb 5-1: Product: syz [ 281.167795][ T5676] usb 5-1: Manufacturer: syz [ 281.167915][ T5676] usb 5-1: SerialNumber: syz [ 281.203293][ T5676] usb 5-1: config 0 descriptor?? [ 281.233589][ T5676] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 281.338555][ T1071] usb 2-1: USB disconnect, device number 28 [ 281.491911][ T5676] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 281.513303][ T5676] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 281.918719][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 281.919303][ T9] usb 5-1: USB disconnect, device number 30 [ 281.944058][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 281.959619][ T5683] net_ratelimit: 7 callbacks suppressed [ 281.959639][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.986838][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 281.987848][ T9] quatech2 5-1:0.51: device disconnected [ 282.015474][ T5735] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 282.049896][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.169777][ T5735] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.174393][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.174420][ T5735] usb 2-1: Product: syz [ 282.174435][ T5735] usb 2-1: Manufacturer: syz [ 282.174450][ T5735] usb 2-1: SerialNumber: syz [ 282.357260][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.844775][ T5735] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 282.844844][ T5735] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 282.846406][ T5735] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 282.846462][ T5735] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 282.901523][ T5735] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 282.919015][ T5735] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 282.937679][ T5735] usb 2-1: USB disconnect, device number 29 [ 283.074139][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.171236][T11124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.229881][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.230055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.400474][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.250175][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 284.917588][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 284.918026][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 284.937088][ T1071] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.941857][ T1071] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 284.942446][ T1071] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 284.952257][ T25] usb 1-1: USB disconnect, device number 29 [ 284.967449][ T5708] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 285.152832][ T5708] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 285.154902][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.161217][ T5708] usb 3-1: config 0 descriptor?? [ 285.266977][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 285.267954][ T5735] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 285.316029][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.316754][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.403579][ T5708] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 285.416989][ T5735] usb 2-1: Using ep0 maxpacket: 16 [ 285.418361][ T5735] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.418660][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 285.421234][ T5735] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.421268][ T5735] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.421362][ T5735] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.421397][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.489986][ T9] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 285.490016][ T9] usb 5-1: Product: syz [ 285.490032][ T9] usb 5-1: Manufacturer: syz [ 285.490047][ T9] usb 5-1: SerialNumber: syz [ 285.495848][ T5735] usb 2-1: config 0 descriptor?? [ 285.532278][ T9] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 285.566467][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 285.580299][ T9] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 285.580353][ T9] usb 5-1: media controller created [ 285.612266][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.639487][ T9] usb 5-1: selecting invalid altsetting 1 [ 285.639509][ T9] set interface failed [ 285.640216][ T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 285.640257][ T9] error writing reg: 0xff, val: 0x00 [ 285.692407][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.692625][ T5708] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 285.692647][ T5708] [drm] Initialized udl on minor 1 [ 285.754958][ T9] dvb_usb_mxl111sf 5-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 285.768915][ T9] usb 5-1: USB disconnect, device number 31 [ 285.784604][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.959425][ T5735] hid_parser_main: 135 callbacks suppressed [ 285.959452][ T5735] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 285.959482][ T5735] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 285.959509][ T5735] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 285.959535][ T5735] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 285.959561][ T5735] mcp2221 0003:04D8:00DD.002B: unknown main item tag 0x0 [ 285.964206][ T5735] mcp2221 0003:04D8:00DD.002B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 286.145378][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.155438][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.171467][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.201822][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.201937][T11186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.205199][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.205314][T11186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.254836][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.265282][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.324526][T11196] usb 2-1: USB disconnect, device number 30 [ 286.346191][ T59] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.346224][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.408613][ T9633] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.408647][ T9633] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.409236][ T9633] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.409268][ T9633] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.409336][ T9633] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.409364][ T9633] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.718799][T11212] loop9: detected capacity change from 0 to 7 [ 286.724821][T11212] Dev loop9: unable to read RDB block 7 [ 286.724868][T11212] loop9: unable to read partition table [ 286.725084][T11212] loop9: partition table beyond EOD, truncated [ 286.725131][T11212] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 287.327349][T10802] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 287.413840][T11196] net_ratelimit: 25 callbacks suppressed [ 287.413861][T11196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.415631][T11188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.454107][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.454374][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.454607][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.455795][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.457661][T11243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.501168][T10802] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 287.515992][T10802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.516022][T10802] usb 1-1: Product: syz [ 287.516038][T10802] usb 1-1: Manufacturer: syz [ 287.516054][T10802] usb 1-1: SerialNumber: syz [ 287.542911][T10802] usb 1-1: config 0 descriptor?? [ 287.615615][T11245] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2249'. [ 287.621732][T11245] gretap0: entered promiscuous mode [ 287.646827][T11245] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.2249'. [ 287.666766][T11245] 0ªX¹¦Dö»: renamed from gretap0 [ 287.695084][T11245] 0ªX¹¦Dö»: left promiscuous mode [ 287.695102][T11245] 0ªX¹¦Dö»: entered allmulticast mode [ 287.793059][T10802] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 030 [ 287.987853][T11229] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 287.990783][T10802] usb 1-1: USB disconnect, device number 30 [ 288.435026][T11196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.435438][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.266219][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.268566][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.486766][T11187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.574708][T11285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.800148][T11285] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 289.874856][T11290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.876646][T11290] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.910690][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.980575][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.980717][T11290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.004125][T10807] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 290.006030][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.006133][T11290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.056008][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.150991][T10807] usb 2-1: Using ep0 maxpacket: 16 [ 290.157415][T10807] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 290.173764][T10807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.173791][T10807] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 290.176222][T10807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.176248][T10807] usb 2-1: Product: syz [ 290.176264][T10807] usb 2-1: Manufacturer: syz [ 290.176280][T10807] usb 2-1: SerialNumber: syz [ 290.309115][ T9631] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.328055][ T81] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.387366][ T81] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.387417][ T81] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.663767][T10803] usb 2-1: USB disconnect, device number 31 [ 290.752982][ T5708] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 290.753393][ T5708] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 290.770718][ T5704] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 290.793883][ T5708] usb 3-1: USB disconnect, device number 28 [ 290.815298][ T5704] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 290.815599][ T5704] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 290.970516][T11315] loop5: detected capacity change from 0 to 7 [ 290.973713][T11315] Dev loop5: unable to read RDB block 7 [ 290.973760][T11315] loop5: AHDI p1 p4 [ 290.973785][T11315] loop5: partition table partially beyond EOD, truncated [ 290.974007][T11315] loop5: p1 size 100663296 extends beyond EOD, truncated [ 291.113781][ T5628] udevd[5628]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 292.138452][ T5708] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 292.167072][T11350] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0xffffffff) [ 292.284927][T11356] loop5: detected capacity change from 0 to 7 [ 292.288209][T11356] Dev loop5: unable to read RDB block 7 [ 292.297665][T11356] loop5: unable to read partition table [ 292.298275][T11356] loop5: partition table beyond EOD, truncated [ 292.298358][T11356] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 292.300605][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 292.311605][ T5708] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 292.338707][ T5708] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 292.352008][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 292.352088][ T5708] usb 3-1: Product: syz [ 292.352125][ T5708] usb 3-1: Manufacturer: syz [ 292.352174][ T5708] usb 3-1: SerialNumber: syz [ 292.387855][ T5708] usb 3-1: config 0 descriptor?? [ 292.391618][T11341] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 292.395383][ T5708] hub 3-1:0.0: bad descriptor, ignoring hub [ 292.395412][ T5708] hub 3-1:0.0: probe with driver hub failed with error -5 [ 292.608855][ T5708] net_ratelimit: 22 callbacks suppressed [ 292.608911][ T5708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.783115][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 293.090424][T11341] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 293.299576][T11341] usb 3-1: device firmware changed [ 293.309055][ T5708] usb 3-1: USB disconnect, device number 29 [ 293.489282][ T5708] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 293.494937][T11397] ================================================================== [ 293.494954][T11397] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 293.494987][T11397] Read of size 8 at addr ffff88802d688c18 by task syz.1.2314/11397 [ 293.495006][T11397] [ 293.495025][T11397] CPU: 0 UID: 0 PID: 11397 Comm: syz.1.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.495055][T11397] Tainted: [L]=SOFTLOCKUP [ 293.495063][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 293.495083][T11397] Call Trace: [ 293.495091][T11397] [ 293.495101][T11397] dump_stack_lvl+0xe8/0x150 [ 293.495135][T11397] print_address_description+0x55/0x1e0 [ 293.495167][T11397] ? dvb_device_open+0xc4/0x340 [ 293.495189][T11397] print_report+0x58/0x70 [ 293.495216][T11397] kasan_report+0x117/0x150 [ 293.495248][T11397] ? dvb_device_open+0xc4/0x340 [ 293.495275][T11397] dvb_device_open+0xc4/0x340 [ 293.495299][T11397] ? do_raw_spin_unlock+0xf5/0x200 [ 293.495334][T11397] chrdev_open+0x4d9/0x600 ** replaying previous printk message ** [ 293.495334][T11397] chrdev_open+0x4d9/0x600 [ 293.495363][T11397] ? __pfx_chrdev_open+0x10/0x10 [ 293.495391][T11397] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 293.495424][T11397] ? __pfx_chrdev_open+0x10/0x10 [ 293.495450][T11397] do_dentry_open+0x816/0x1380 [ 293.495486][T11397] vfs_open+0x3b/0x340 [ 293.495514][T11397] ? path_openat+0x1428/0x1d60 [ 293.495539][T11397] path_openat+0x1443/0x1d60 [ 293.495574][T11397] do_file_open+0x23e/0x4a0 [ 293.495600][T11397] ? __pfx_do_file_open+0x10/0x10 [ 293.495637][T11397] ? _raw_spin_unlock+0x28/0x50 [ 293.495657][T11397] ? alloc_fd+0x651/0x6c0 [ 293.495693][T11397] do_sys_openat2+0x115/0x200 [ 293.495725][T11397] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.495756][T11397] ? rcu_is_watching+0x16/0xb0 [ 293.495789][T11397] __ia32_compat_sys_openat+0x131/0x160 [ 293.495825][T11397] do_int80_emulation+0x198/0x500 [ 293.495851][T11397] ? trace_irq_disable+0x3b/0x140 [ 293.495875][T11397] ? asm_int80_emulation+0x1a/0x20 [ 293.495896][T11397] ? clear_bhb_loop+0x70/0xc0 [ 293.495926][T11397] ? clear_bhb_loop+0x70/0xc0 [ 293.495950][T11397] asm_int80_emulation+0x1a/0x20 [ 293.495972][T11397] RIP: 0023:0xf70f77eb [ 293.495997][T11397] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 293.496017][T11397] RSP: 002b:00000000f53b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 293.496041][T11397] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53b6100 [ 293.496057][T11397] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.496070][T11397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.496083][T11397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.496097][T11397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.496120][T11397] [ 293.496129][T11397] [ 293.496134][T11397] Allocated by task 11372: [ 293.496145][T11397] kasan_save_track+0x3e/0x80 [ 293.496170][T11397] __kasan_kmalloc+0x93/0xb0 [ 293.496195][T11397] __kmalloc_noprof+0x36b/0x720 [ 293.496217][T11397] iter_file_splice_write+0x1ea/0x1240 [ 293.496241][T11397] direct_splice_actor+0x101/0x160 [ 293.496261][T11397] splice_direct_to_actor+0x57b/0xcb0 [ 293.496280][T11397] do_splice_direct+0x195/0x290 [ 293.496299][T11397] do_sendfile+0x52e/0x7c0 [ 293.496324][T11397] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 293.496350][T11397] __do_fast_syscall_32+0x27a/0x6b0 [ 293.496374][T11397] do_fast_syscall_32+0x33/0x70 [ 293.496398][T11397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.496422][T11397] [ 293.496428][T11397] Freed by task 11372: [ 293.496437][T11397] kasan_save_track+0x3e/0x80 [ 293.496461][T11397] kasan_save_free_info+0x40/0x50 [ 293.496479][T11397] __kasan_slab_free+0x5c/0x80 [ 293.496504][T11397] kfree+0x1c5/0x650 [ 293.496521][T11397] iter_file_splice_write+0x109f/0x1240 [ 293.496540][T11397] direct_splice_actor+0x101/0x160 [ 293.496559][T11397] splice_direct_to_actor+0x57b/0xcb0 [ 293.496578][T11397] do_splice_direct+0x195/0x290 [ 293.496595][T11397] do_sendfile+0x52e/0x7c0 [ 293.496619][T11397] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 293.496643][T11397] __do_fast_syscall_32+0x27a/0x6b0 [ 293.496665][T11397] do_fast_syscall_32+0x33/0x70 [ 293.496689][T11397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.496713][T11397] [ 293.496718][T11397] The buggy address belongs to the object at ffff88802d688c00 [ 293.496718][T11397] which belongs to the cache kmalloc-256 of size 256 [ 293.496736][T11397] The buggy address is located 24 bytes inside of [ 293.496736][T11397] freed 256-byte region [ffff88802d688c00, ffff88802d688d00) [ 293.496758][T11397] [ 293.496763][T11397] The buggy address belongs to the physical page: [ 293.496782][T11397] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d688 [ 293.496801][T11397] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 293.496817][T11397] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 293.496841][T11397] page_type: f5(slab) [ 293.496861][T11397] raw: 00fff00000000040 ffff88801c041b40 dead000000000100 dead000000000122 [ 293.496878][T11397] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 293.496908][T11397] head: 00fff00000000040 ffff88801c041b40 dead000000000100 dead000000000122 [ 293.496927][T11397] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 293.496947][T11397] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 293.496966][T11397] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 293.496977][T11397] page dumped because: kasan: bad access detected [ 293.496994][T11397] page_owner tracks the page as allocated [ 293.497002][T11397] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18179128882 [ 293.497035][T11397] post_alloc_hook+0x1f9/0x250 [ 293.497057][T11397] get_page_from_freelist+0x2209/0x2280 [ 293.497083][T11397] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 293.497108][T11397] allocate_slab+0x7d/0x620 [ 293.497138][T11397] refill_objects+0x2d5/0x350 [ 293.497168][T11397] __pcs_replace_empty_main+0x2c8/0x6c0 [ 293.497196][T11397] __kmalloc_cache_noprof+0x39b/0x600 [ 293.497219][T11397] bus_add_driver+0x162/0x670 [ 293.497242][T11397] driver_register+0x23a/0x320 [ 293.497260][T11397] usb_register_driver+0x1e4/0x390 [ 293.497280][T11397] do_one_initcall+0x250/0x870 [ 293.497309][T11397] do_initcall_level+0x10a/0x1a0 [ 293.497339][T11397] do_initcalls+0x59/0xa0 [ 293.497366][T11397] kernel_init_freeable+0x29d/0x3e0 [ 293.497395][T11397] kernel_init+0x22/0x1d0 [ 293.497422][T11397] ret_from_fork+0x514/0xb70 [ 293.497439][T11397] page_owner free stack trace missing [ 293.497447][T11397] [ 293.497452][T11397] Memory state around the buggy address: [ 293.497481][T11397] ffff88802d688b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.497496][T11397] ffff88802d688b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.497511][T11397] >ffff88802d688c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.497523][T11397] ^ [ 293.497534][T11397] ffff88802d688c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.497549][T11397] ffff88802d688d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.497561][T11397] ================================================================== [ 293.606259][T11397] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.237478][T11397] CPU: 1 UID: 0 PID: 11397 Comm: syz.1.2314 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.248441][T11397] Tainted: [L]=SOFTLOCKUP [ 294.252773][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.262842][T11397] Call Trace: [ 294.266161][T11397] [ 294.269118][T11397] vpanic+0x56d/0xa60 [ 294.273164][T11397] ? __pfx_vpanic+0x10/0x10 [ 294.277688][T11397] ? __pfx___schedule+0x10/0x10 [ 294.282573][T11397] panic+0xc5/0xd0 [ 294.286364][T11397] ? __pfx_panic+0x10/0x10 [ 294.290843][T11397] ? preempt_schedule_thunk+0x16/0x40 [ 294.296250][T11397] ? dvb_device_open+0xc4/0x340 [ 294.301128][T11397] check_panic_on_warn+0x89/0xb0 [ 294.306096][T11397] ? dvb_device_open+0xc4/0x340 [ 294.310974][T11397] end_report+0x73/0x170 [ 294.315250][T11397] ? dvb_device_open+0xc4/0x340 [ 294.320124][T11397] kasan_report+0x128/0x150 [ 294.324653][T11397] ? dvb_device_open+0xc4/0x340 [ 294.329523][T11397] dvb_device_open+0xc4/0x340 [ 294.334233][T11397] ? do_raw_spin_unlock+0xf5/0x200 [ 294.339372][T11397] chrdev_open+0x4d9/0x600 [ 294.343853][T11397] ? __pfx_chrdev_open+0x10/0x10 [ 294.348810][T11397] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 294.355163][T11397] ? __pfx_chrdev_open+0x10/0x10 [ 294.360120][T11397] do_dentry_open+0x816/0x1380 [ 294.364918][T11397] vfs_open+0x3b/0x340 [ 294.369006][T11397] ? path_openat+0x1428/0x1d60 [ 294.373790][T11397] path_openat+0x1443/0x1d60 [ 294.378419][T11397] do_file_open+0x23e/0x4a0 [ 294.382968][T11397] ? __pfx_do_file_open+0x10/0x10 [ 294.388021][T11397] ? _raw_spin_unlock+0x28/0x50 [ 294.392909][T11397] ? alloc_fd+0x651/0x6c0 [ 294.397274][T11397] do_sys_openat2+0x115/0x200 [ 294.401977][T11397] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.407223][T11397] ? rcu_is_watching+0x16/0xb0 [ 294.412016][T11397] __ia32_compat_sys_openat+0x131/0x160 [ 294.417592][T11397] do_int80_emulation+0x198/0x500 [ 294.422638][T11397] ? trace_irq_disable+0x3b/0x140 [ 294.427686][T11397] ? asm_int80_emulation+0x1a/0x20 [ 294.432819][T11397] ? clear_bhb_loop+0x70/0xc0 [ 294.437520][T11397] ? clear_bhb_loop+0x70/0xc0 [ 294.442215][T11397] asm_int80_emulation+0x1a/0x20 [ 294.447167][T11397] RIP: 0023:0xf70f77eb [ 294.451284][T11397] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 294.470907][T11397] RSP: 002b:00000000f53b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 294.479343][T11397] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53b6100 [ 294.487337][T11397] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.495319][T11397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.503320][T11397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.511333][T11397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.519329][T11397] [ 294.522967][T11397] Kernel Offset: disabled [ 294.527301][T11397] Rebooting in 86400 seconds..