last executing test programs: 2.484625175s ago: executing program 1 (id=2210): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2.412555738s ago: executing program 1 (id=2211): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x10, 0x0) 2.297412954s ago: executing program 3 (id=2215): r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x86) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.230042358s ago: executing program 3 (id=2218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) poll(&(0x7f000000bcc0)=[{r0, 0x40}], 0x1, 0x280) ioctl$TIOCSETD(r0, 0x5423, &(0x7f000000c240)=0x11) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2.016159823s ago: executing program 0 (id=2223): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffc}, 'syz0\x00', 0x39}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.919996874s ago: executing program 0 (id=2224): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000f00)={&(0x7f0000000ec0)=[r3, r2], 0x2, 0x80000}) 1.859114972s ago: executing program 0 (id=2225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.729913932s ago: executing program 0 (id=2226): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001200)) 1.631406971s ago: executing program 0 (id=2227): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8242, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') setxattr$security_ima(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x2) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.53962498s ago: executing program 1 (id=2228): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) write(r0, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}}], 0x1, 0x121, 0x0) 1.478329392s ago: executing program 3 (id=2229): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x42, 0x4, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8a], 0x8000000, 0x3c4210}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) 1.398278776s ago: executing program 1 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x40}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.397999504s ago: executing program 3 (id=2231): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x10, 0x117, 0x4, 0x10}, @op={0x10, 0x117, 0x3, 0x1}], 0x20, 0x40040}], 0x1, 0x8040) 1.396619707s ago: executing program 1 (id=2232): sched_setscheduler(0x0, 0x2, 0x0) r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaef8, 0x0, 0x40}) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.395289978s ago: executing program 0 (id=2233): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x2, &(0x7f0000000100)={0x1c, "3ac071ffbc8cd0d684737d99bb8bd238954c9a216d398df0f558125211b40c65fd"}}) 1.335859966s ago: executing program 3 (id=2234): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 1.335570038s ago: executing program 1 (id=2235): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0}) 1.262323376s ago: executing program 3 (id=2236): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 140.425582ms ago: executing program 2 (id=2245): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000240), 0x2, 0x0) rmdir(&(0x7f0000000200)='./cgroup/../file0\x00') 140.205842ms ago: executing program 2 (id=2246): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)="01000000020006fc", 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 70.286819ms ago: executing program 2 (id=2247): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c15", 0x40, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 70.190673ms ago: executing program 2 (id=2248): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 155.853µs ago: executing program 2 (id=2249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x4}}}}}}, 0x0) 0s ago: executing program 2 (id=2250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) kernel console output (not intermixed with test programs): b 7-1: USB disconnect, device number 12 [ 92.804688][ T7222] ref_ctr_offset mismatch. inode: 0x26d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 93.192705][ T2289] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 93.343786][ T2289] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.346988][ T2289] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.351205][ T2289] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.355135][ T2289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.569566][ T2289] usb 7-1: usb_control_msg returned -32 [ 93.571435][ T2289] usbtmc 7-1:16.0: can't read capabilities [ 93.592513][ T5997] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 93.754108][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.757605][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.760673][ T5997] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.763647][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.767990][ T5997] usb 8-1: config 0 descriptor?? [ 94.127415][ T2289] usb 7-1: USB disconnect, device number 13 [ 94.179181][ T5997] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 94.188094][ T5997] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.0006/input/input17 [ 94.270515][ T5997] keytouch 0003:0926:3333.0006: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 94.380455][ T6014] usb 8-1: USB disconnect, device number 5 [ 94.952496][ T5984] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.125006][ T5984] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.129624][ T5984] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 95.133967][ T7273] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.558'. [ 95.135322][ T5984] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.142233][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.150414][ T7259] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.169393][ T5984] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 95.373523][ T5984] usb 5-1: USB disconnect, device number 8 [ 96.045157][ T40] kauditd_printk_skb: 221 callbacks suppressed [ 96.045171][ T40] audit: type=1326 audit(1776106392.081:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.062772][ T40] audit: type=1326 audit(1776106392.081:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.070128][ T40] audit: type=1326 audit(1776106392.081:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.085525][ T40] audit: type=1326 audit(1776106392.081:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.092421][ T40] audit: type=1326 audit(1776106392.081:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.099177][ T40] audit: type=1326 audit(1776106392.081:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.106908][ T40] audit: type=1326 audit(1776106392.081:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.113800][ T40] audit: type=1326 audit(1776106392.081:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.120782][ T40] audit: type=1326 audit(1776106392.081:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.128426][ T40] audit: type=1326 audit(1776106392.081:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7301 comm="syz.0.574" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 96.454076][ T1330] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.622452][ T1330] usb 5-1: Using ep0 maxpacket: 8 [ 96.627071][ T1330] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.634938][ T1330] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.642471][ T1330] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.646007][ T1330] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.652526][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.657003][ T1330] usb 5-1: config 0 descriptor?? [ 97.069016][ T1330] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 97.071304][ T1330] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 97.073873][ T1330] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 97.076106][ T1330] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 97.078501][ T1330] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 97.081151][ T1330] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 97.104643][ T7364] netlink: 'syz.3.599': attribute type 15 has an invalid length. [ 97.107423][ T7364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 97.269432][ T1330] usb 5-1: USB disconnect, device number 9 [ 97.390842][ T7385] Bluetooth: hci0: load_link_keys: too big key_count value 53767 [ 98.112659][ T1330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.264585][ T1330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.268956][ T1330] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.273078][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.279661][ T1330] usb 5-1: config 0 descriptor?? [ 98.382667][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 98.491361][ T1330] usbhid 5-1:0.0: can't add hid device: -71 [ 98.493893][ T1330] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.499655][ T1330] usb 5-1: USB disconnect, device number 10 [ 98.532480][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 98.535557][ T39] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.539035][ T39] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.542103][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 98.544570][ T39] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 98.547449][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.551157][ T39] usb 6-1: config 0 descriptor?? [ 98.647946][ T7427] netlink: 'syz.3.632': attribute type 19 has an invalid length. [ 98.922486][ T1330] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 98.951108][ T7442] netlink: 148 bytes leftover after parsing attributes in process `syz.3.637'. [ 98.965541][ T39] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 98.967922][ T39] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 98.970314][ T39] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 98.973524][ T39] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 98.975776][ T39] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 98.978335][ T39] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 99.072496][ T1330] usb 5-1: Using ep0 maxpacket: 32 [ 99.076107][ T1330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.079458][ T1330] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 99.081942][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.086398][ T1330] usb 5-1: config 0 descriptor?? [ 99.089671][ T1330] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 99.096306][ T1330] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 99.165754][ T1330] usb 6-1: USB disconnect, device number 4 [ 99.294916][ T34] usb 5-1: USB disconnect, device number 11 [ 99.301388][ T34] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 100.121706][ T7494] syzkaller1: entered promiscuous mode [ 100.124264][ T7494] syzkaller1: entered allmulticast mode [ 100.222496][ T1330] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 100.386769][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 100.389758][ T7512] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 100.393711][ T1330] usb 7-1: Using ep0 maxpacket: 8 [ 100.397568][ T1330] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.402038][ T1330] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.406068][ T1330] usb 7-1: config 0 interface 0 has no altsetting 0 [ 100.408941][ T1330] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 100.411955][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.417031][ T1330] usb 7-1: config 0 descriptor?? [ 100.438295][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 100.441135][ T7513] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 100.839523][ T1330] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 100.961982][ T7532] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 100.965928][ T2289] kernel write not supported for file /comedi3 (pid: 2289 comm: kworker/3:2) [ 101.037408][ T1330] usb 7-1: USB disconnect, device number 14 [ 101.516978][ T7558] can0: slcan on pty20. [ 101.614340][ T7556] can0 (unregistered): slcan off pty20. [ 101.669030][ T7574] Bluetooth: MGMT ver 1.23 [ 101.782840][ T7590] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 101.882543][ T828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 101.904768][ T7601] all (unregistering): Released all slaves [ 102.032935][ T828] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 102.043814][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.046737][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.050074][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.052425][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.053106][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.058369][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.064256][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.067583][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.070817][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.076487][ T7612] geneve2: entered promiscuous mode [ 102.076901][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.082065][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.085555][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.089738][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.093783][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.097501][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.101993][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.105958][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.110380][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.114869][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.118426][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.121636][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.125724][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.129350][ T828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.133034][ T828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.137428][ T828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 102.142031][ T828] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 102.145876][ T828] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 102.148839][ T828] usb 6-1: Product: syz [ 102.150286][ T828] usb 6-1: Manufacturer: syz [ 102.152015][ T828] usb 6-1: SerialNumber: syz [ 102.156619][ T828] usb 6-1: config 0 descriptor?? [ 102.165306][ T828] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.203809][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.207529][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.210789][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.215072][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.218024][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.222156][ T24] usb 8-1: config 0 descriptor?? [ 102.370131][ T5822] usb 6-1: USB disconnect, device number 5 [ 102.376078][ T5822] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 102.634429][ T24] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 103.089092][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 103.808263][ T7695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.984935][ T7667] Process accounting resumed [ 103.991063][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 103.998341][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 104.097940][ T7716] netlink: 156 bytes leftover after parsing attributes in process `syz.1.754'. [ 104.198296][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 104.206224][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 104.626947][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.685672][ T24] usb 8-1: USB disconnect, device number 6 [ 104.719948][ T6014] IPVS: starting estimator thread 0... [ 104.723553][ T7776] binder: 7774:7776 ioctl c0306201 0 returned -14 [ 104.853480][ T7775] IPVS: using max 44 ests per chain, 105600 per kthread [ 105.024681][ T7790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.453386][ T7821] vcan0: tx address claim with different name [ 105.695992][ T7848] syzkaller1: entered promiscuous mode [ 105.697862][ T7848] syzkaller1: entered allmulticast mode [ 105.881523][ T7868] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 105.917756][ T7875] tipc: Started in network mode [ 105.919371][ T7875] tipc: Node identity ac14140f, cluster identity 4711 [ 105.922008][ T7875] tipc: New replicast peer: 255.255.255.255 [ 105.924225][ T7875] tipc: Enabled bearer , priority 10 [ 106.019035][ T7885] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.025954][ T7885] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 106.029501][ T7885] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 106.070049][ T7887] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.830'. [ 106.112542][ T2289] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 106.133443][ T7895] GUP no longer grows the stack in syz.2.833 (7895): 80003000-8000a000 (80001000) [ 106.137071][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.2.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.137089][ T7895] Tainted: [L]=SOFTLOCKUP [ 106.137093][ T7895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.137163][ T7895] Call Trace: [ 106.137266][ T7895] [ 106.137272][ T7895] dump_stack_lvl+0x100/0x190 [ 106.137299][ T7895] gup_vma_lookup.cold+0x83/0x96 [ 106.137318][ T7895] __get_user_pages+0x241/0x34d0 [ 106.137338][ T7895] ? down_read_killable+0x30e/0x4c0 [ 106.137354][ T7895] ? __lock_acquire+0x4a5/0x2630 [ 106.137369][ T7895] ? __pfx___get_user_pages+0x10/0x10 [ 106.137386][ T7895] __gup_longterm_locked+0x87d/0x16f0 [ 106.137403][ T7895] ? __pfx___gup_longterm_locked+0x10/0x10 [ 106.137417][ T7895] ? try_get_folio+0x262/0x750 [ 106.137429][ T7895] ? find_held_lock+0x2b/0x80 [ 106.137444][ T7895] gup_fast_fallback+0x18c6/0x2460 [ 106.137470][ T7895] ? __pfx_gup_fast_fallback+0x10/0x10 [ 106.137485][ T7895] ? __lock_acquire+0x4a5/0x2630 [ 106.137501][ T7895] ? finish_task_switch.isra.0+0x200/0xb80 [ 106.137518][ T7895] ? rcu_is_watching+0x12/0xc0 [ 106.137539][ T7895] get_user_pages_fast+0xa7/0xf0 [ 106.137552][ T7895] ? __pfx_get_user_pages_fast+0x10/0x10 [ 106.137569][ T7895] __iov_iter_get_pages_alloc+0x8ec/0x20d0 [ 106.137587][ T7895] ? pipe_lock+0x69/0x80 [ 106.137599][ T7895] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 106.137614][ T7895] ? __pfx___mutex_lock+0x10/0x10 [ 106.137627][ T7895] ? import_ubuf+0x1b6/0x220 [ 106.137643][ T7895] iov_iter_get_pages2+0xa3/0x100 [ 106.137657][ T7895] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 106.137671][ T7895] ? wait_for_space+0x2ca/0x3b0 [ 106.137687][ T7895] __do_sys_vmsplice+0x7eb/0x14f0 [ 106.137706][ T7895] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 106.137721][ T7895] ? __pfx_futex_wait+0x10/0x10 [ 106.137742][ T7895] ? lockdep_hardirqs_on+0x78/0x100 [ 106.137753][ T7895] ? irqentry_exit+0x180/0x670 [ 106.137782][ T7895] ? __do_fast_syscall_32+0xe3/0x8c0 [ 106.137794][ T7895] __do_fast_syscall_32+0xe3/0x8c0 [ 106.137807][ T7895] do_fast_syscall_32+0x32/0x70 [ 106.137820][ T7895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.137835][ T7895] RIP: 0023:0xf702ef6c [ 106.137845][ T7895] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 106.137855][ T7895] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013c [ 106.137919][ T7895] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 106.137927][ T7895] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 106.137934][ T7895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.137940][ T7895] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 106.137948][ T7895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.137963][ T7895] [ 106.272448][ T2289] usb 6-1: Using ep0 maxpacket: 8 [ 106.275641][ T2289] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 106.278665][ T2289] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.281742][ T2289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.285103][ T2289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.288529][ T2289] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.293912][ T2289] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.297459][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.322519][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.344433][ T6014] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 106.492444][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 106.494096][ T6014] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 106.495435][ T34] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.497251][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.500897][ T34] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.505562][ T6014] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.508433][ T2289] usb 6-1: usb_control_msg returned -32 [ 106.513002][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.514589][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 106.518034][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.520434][ T2289] usbtmc 6-1:16.0: can't read capabilities [ 106.526006][ T6014] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 106.526323][ T34] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.529419][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.533616][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.536633][ T6014] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.543674][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.545483][ T34] usb 8-1: config 0 descriptor?? [ 106.548199][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.555295][ T6014] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 106.558363][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.563137][ T6014] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.568261][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.572091][ T6014] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.579110][ T6014] usb 5-1: string descriptor 0 read error: -22 [ 106.581791][ T6014] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.585952][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.597952][ T6014] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 106.719771][ T7906] process 'syz.2.838' launched './file1' with NULL argv: empty string added [ 106.797450][ T7893] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 106.861635][ T7912] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 106.865221][ T24] usb 6-1: USB disconnect, device number 6 [ 106.934160][ T5822] tipc: Node number set to 2886997007 [ 106.965831][ T34] hid_parser_main: 5 callbacks suppressed [ 106.965851][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 106.971527][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 106.975533][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 106.976228][ T6014] usb 5-1: USB disconnect, device number 12 [ 106.978657][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 106.984175][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 106.988159][ T34] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 107.163256][ T6014] usb 8-1: USB disconnect, device number 7 [ 107.349881][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.842'. [ 107.354047][ T7917] bond0: ARP target 8.4.0.0 is already present [ 107.356861][ T7917] bond0: option arp_ip_target: invalid value (1032) [ 107.972584][ T5822] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 108.134263][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.138331][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.142957][ T5822] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.146675][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.152434][ T5822] usb 6-1: config 0 descriptor?? [ 108.277420][ T7963] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 108.372498][ T2289] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 108.548210][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.553053][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.557086][ T2289] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.562840][ T2289] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.562947][ T5822] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 108.566124][ T2289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.567404][ T2289] usb 8-1: config 0 descriptor?? [ 108.576027][ T5822] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0926:3333.000C/input/input19 [ 108.663241][ T5822] keytouch 0003:0926:3333.000C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 108.763855][ T5822] usb 6-1: USB disconnect, device number 7 [ 108.988846][ T2289] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 109.687558][ T8006] serio: Serial port ptm1 [ 109.998181][ T8017] netlink: 15 bytes leftover after parsing attributes in process `syz.0.885'. [ 110.068467][ T8023] syzkaller1: entered promiscuous mode [ 110.070282][ T8023] syzkaller1: entered allmulticast mode [ 110.252822][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 110.592490][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.762561][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 110.766566][ T39] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.771251][ T39] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.775784][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 110.778608][ T39] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 110.782317][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.792958][ T39] usb 6-1: config 0 descriptor?? [ 110.848469][ T8050] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 111.208637][ T39] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 111.211637][ T39] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 111.214734][ T39] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 111.217915][ T39] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 111.221439][ T39] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 111.225121][ T39] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 111.332481][ T24] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 111.337498][ T24] usb 8-1: device reset changed ep0 maxpacket size! [ 111.340512][ T59] usb 8-1: USB disconnect, device number 8 [ 111.406405][ T6014] usb 6-1: USB disconnect, device number 8 [ 111.472522][ T59] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 111.622620][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 111.625933][ T59] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.629102][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.632278][ T59] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.636168][ T59] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.643281][ T59] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.647337][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.861226][ T59] usb 8-1: GET_CAPABILITIES returned 0 [ 111.864307][ T59] usbtmc 8-1:16.0: can't read capabilities [ 112.064610][ T2289] usb 8-1: USB disconnect, device number 9 [ 112.172852][ T8115] serio: Serial port ptm1 [ 112.684658][ T8139] serio: Serial port ptm1 [ 112.902541][ T39] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 113.002457][ T6014] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 113.054084][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.057846][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.060911][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.067832][ T39] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.070772][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.075332][ T39] usb 7-1: config 0 descriptor?? [ 113.166099][ T6014] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 113.169226][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.173924][ T6014] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.178380][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.182160][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.187862][ T6014] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 113.190253][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.193692][ T6014] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.197704][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.201097][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.205705][ T6014] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 113.208240][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.211571][ T6014] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.216724][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.220622][ T6014] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.227312][ T6014] usb 6-1: string descriptor 0 read error: -22 [ 113.229288][ T6014] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.232068][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.239705][ T6014] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.276453][ T8164] netlink: 'syz.0.951': attribute type 12 has an invalid length. [ 113.279120][ T8164] netlink: 'syz.0.951': attribute type 29 has an invalid length. [ 113.281705][ T8164] netlink: 148 bytes leftover after parsing attributes in process `syz.0.951'. [ 113.285073][ T8164] netlink: 43 bytes leftover after parsing attributes in process `syz.0.951'. [ 113.493134][ T39] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 113.686701][ T24] usb 7-1: USB disconnect, device number 15 [ 113.728238][ T8196] kernel read not supported for file /batadv_slave_1 (pid: 8196 comm: syz.0.965) [ 113.732436][ T40] kauditd_printk_skb: 294 callbacks suppressed [ 113.732447][ T40] audit: type=1800 audit(1776106409.761:538): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.965" name="batadv_slave_1" dev="mqueue" ino=22783 res=0 errno=0 [ 113.785398][ T6014] kernel read not supported for file /batadv_slave_1 (pid: 6014 comm: kworker/0:3) [ 113.861377][ T6014] kernel write not supported for file /ppp (pid: 6014 comm: kworker/0:3) [ 114.081010][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 114.256544][ T8224] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.792183][ T8270] bridge0: port 3(vlan2) entered blocking state [ 114.794514][ T8270] bridge0: port 3(vlan2) entered disabled state [ 114.796697][ T8270] vlan2: entered allmulticast mode [ 114.798429][ T8270] dummy0: entered allmulticast mode [ 114.801276][ T8270] vlan2: entered promiscuous mode [ 114.803227][ T8270] dummy0: entered promiscuous mode [ 115.633616][ T6014] usb 6-1: USB disconnect, device number 9 [ 115.851646][ T92] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.856920][ T92] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.952481][ T5997] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 116.102633][ T5997] usb 7-1: Using ep0 maxpacket: 8 [ 116.106176][ T5997] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.109643][ T5997] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.113783][ T5997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 116.116370][ T5997] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.119705][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.125487][ T5997] usb 7-1: config 0 descriptor?? [ 116.226202][ T34] kernel write not supported for file /comedi3 (pid: 34 comm: kworker/3:0) [ 116.290089][ T8332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 116.542867][ T5997] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 116.545160][ T5997] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 116.547517][ T5997] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 116.549793][ T5997] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 116.552134][ T5997] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 116.554827][ T5997] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 116.740901][ T8302] i2c i2c-2: unsupported multi-msg i2c transaction [ 116.745434][ T828] usb 7-1: USB disconnect, device number 16 [ 117.417859][ T8353] kvm: apic: phys broadcast and lowest prio [ 117.862646][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 117.865243][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.913533][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 117.922745][ T8360] geneve2: entered promiscuous mode [ 117.955931][ T8362] kvm: user requested TSC rate below hardware speed [ 118.221739][ T8378] veth0: entered promiscuous mode [ 118.227397][ T8377] veth0: left promiscuous mode [ 118.294205][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 118.345167][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 118.512515][ T5997] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.635388][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 118.638733][ T8401] netlink: 'syz.2.1058': attribute type 5 has an invalid length. [ 118.641263][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 118.655411][ T92] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.658951][ T92] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.664883][ T92] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.665835][ T5997] usb 5-1: Using ep0 maxpacket: 8 [ 118.667957][ T92] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.670800][ T5997] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.676306][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 118.677739][ T5997] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.681076][ T8401] netlink: 'syz.2.1058': attribute type 5 has an invalid length. [ 118.685595][ T5997] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.688198][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 118.691171][ T5997] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.691186][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.693434][ T5997] usb 5-1: config 0 descriptor?? [ 118.865370][ T40] audit: type=1326 audit(1776106414.901:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.875398][ T40] audit: type=1326 audit(1776106414.901:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.884640][ T40] audit: type=1326 audit(1776106414.901:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.892888][ T40] audit: type=1326 audit(1776106414.901:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.899757][ T40] audit: type=1326 audit(1776106414.901:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.908885][ T40] audit: type=1326 audit(1776106414.901:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.917360][ T40] audit: type=1326 audit(1776106414.901:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.926994][ T40] audit: type=1326 audit(1776106414.901:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.934797][ T40] audit: type=1326 audit(1776106414.911:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.941978][ T40] audit: type=1326 audit(1776106414.911:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.3.1060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 118.961035][ T8423] loop2: detected capacity change from 0 to 7 [ 118.966248][ T5959] Dev loop2: unable to read RDB block 7 [ 118.968215][ T5959] loop2: AHDI p1 p4 [ 118.969509][ T5959] loop2: partition table partially beyond EOD, truncated [ 118.972178][ T5959] loop2: p1 size 100663296 extends beyond EOD, truncated [ 118.982757][ T8423] Dev loop2: unable to read RDB block 7 [ 118.985183][ T8423] loop2: AHDI p1 p4 [ 118.986860][ T8423] loop2: partition table partially beyond EOD, truncated [ 118.990422][ T8423] loop2: p1 size 100663296 extends beyond EOD, truncated [ 119.017767][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.033333][ T5959] udevd[5959]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.119158][ T5997] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 119.122326][ T5997] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 119.125469][ T5997] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 119.128362][ T5997] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 119.130734][ T5997] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 119.134080][ T5997] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 119.314065][ T24] usb 5-1: USB disconnect, device number 13 [ 120.914341][ T8489] syzkaller1: entered promiscuous mode [ 120.916422][ T8489] syzkaller1: entered allmulticast mode [ 121.005045][ T8498] input: syz0 as /devices/virtual/input/input21 [ 121.009188][ T5997] kernel write not supported for file /sg0 (pid: 5997 comm: kworker/3:3) [ 121.072678][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 121.075996][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 121.662488][ T7758] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 121.814025][ T7758] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 137 [ 121.817835][ T7758] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.826117][ T7758] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 121.829282][ T7758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 121.831998][ T7758] usb 5-1: Product: syz [ 121.833936][ T7758] usb 5-1: Manufacturer: syz [ 121.835962][ T7758] usb 5-1: SerialNumber: syz [ 121.839910][ T8537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.046938][ T7758] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 122.248945][ C2] usblp0: nonzero write bulk status received: -71 [ 122.252127][ T7758] usb 5-1: USB disconnect, device number 14 [ 122.256982][ T7758] usblp0: removed [ 122.313325][ T5958] block nbd2: Receive control failed (result -32) [ 122.316257][ T8543] block nbd2: shutting down sockets [ 122.718183][ T8575] binder: 8574:8575 ioctl c0306201 80000540 returned -22 [ 122.867038][ T8585] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.013334][ T7758] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 123.142996][ T5958] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.145456][ T59] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 123.147753][ T59] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 123.172654][ T7758] usb 7-1: Using ep0 maxpacket: 32 [ 123.176393][ T7758] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.186049][ T7758] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.188952][ T7758] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.191497][ T7758] usb 7-1: Product: syz [ 123.193139][ T7758] usb 7-1: Manufacturer: syz [ 123.194589][ T7758] usb 7-1: SerialNumber: syz [ 123.197743][ T7758] usb 7-1: config 0 descriptor?? [ 123.199889][ T8577] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.233187][ T39] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 123.393644][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.397092][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.400303][ T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.412600][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.417255][ T39] usb 5-1: config 0 descriptor?? [ 123.463923][ T5997] usb 7-1: USB disconnect, device number 17 [ 123.775241][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 123.831268][ T39] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 123.846506][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input22 [ 123.913247][ T39] keytouch 0003:0926:3333.0012: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 124.045099][ T39] usb 5-1: USB disconnect, device number 15 [ 124.623945][ T8649] : renamed from vlan0 (while UP) [ 124.763759][ T8657] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1162'. [ 124.912542][ T7758] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 125.065530][ T7758] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.069072][ T7758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.072889][ T7758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.076791][ T7758] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.079305][ T8661] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 125.081666][ T7758] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.090203][ T7758] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.095026][ T7758] usb 6-1: Manufacturer: syz [ 125.114350][ T7758] usb 6-1: config 0 descriptor?? [ 125.232492][ T5958] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.232610][ T59] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 125.241368][ T59] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 125.352548][ T828] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 125.523220][ T828] usb 5-1: Using ep0 maxpacket: 16 [ 125.528801][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 125.532188][ T7758] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 125.537932][ T8664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 125.541823][ T828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.545440][ T7758] appleir 0003:05AC:8243.0013: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 125.545568][ T828] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 125.551847][ T828] usb 5-1: can't read configurations, error -71 [ 125.795039][ T39] usb 6-1: USB disconnect, device number 10 [ 126.403084][ T828] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 126.552568][ T828] usb 5-1: Using ep0 maxpacket: 32 [ 126.563347][ T828] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 126.567836][ T828] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 126.572085][ T828] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.577183][ T828] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 126.584727][ T828] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 126.588468][ T828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.589299][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1184'. [ 126.591699][ T828] usb 5-1: Product: syz [ 126.591716][ T828] usb 5-1: Manufacturer: syz [ 126.591728][ T828] usb 5-1: SerialNumber: syz [ 126.609262][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 126.616424][ T828] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input24 [ 126.794078][ T8712] kvm: apic: phys broadcast and lowest prio [ 126.832617][ T828] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 126.835524][ T828] (id 0x00) [ 126.902484][ T828] rc_core: IR keymap rc-imon-pad not found [ 126.902522][ T5984] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 126.904561][ T828] Registered IR keymap rc-empty [ 126.904702][ T828] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 126.912198][ T828] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 126.925580][ T8717] syzkaller1: entered promiscuous mode [ 126.927418][ T8717] syzkaller1: entered allmulticast mode [ 127.035752][ T828] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 127.040362][ T828] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input25 [ 127.049912][ T828] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:17> initialized [ 127.062663][ T5984] usb 6-1: Using ep0 maxpacket: 32 [ 127.067516][ T5984] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 127.077090][ T5984] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 127.079994][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 127.089716][ T5984] usb 6-1: Product: syz [ 127.091563][ T5984] usb 6-1: Manufacturer: syz [ 127.093626][ T5984] usb 6-1: SerialNumber: syz [ 127.106902][ T5984] usb 6-1: config 0 descriptor?? [ 127.110010][ T8709] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.220149][ T8687] imon:vfd_write: invalid payload size [ 127.223576][ T828] usb 5-1: USB disconnect, device number 17 [ 127.303412][ T59] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 127.305484][ T59] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 127.312480][ T5954] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.321692][ T6014] usb 6-1: USB disconnect, device number 11 [ 127.993477][ T5997] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 128.143832][ T5997] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.146459][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.149883][ T5997] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.154958][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.158358][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 128.159199][ T5997] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.164568][ T8763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.165794][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.175715][ T5997] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.180387][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.185317][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 128.203260][ T5997] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 128.205599][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 128.208979][ T5997] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.213973][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.218474][ T5997] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 128.226227][ T5997] usb 7-1: string descriptor 0 read error: -22 [ 128.229245][ T5997] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.232625][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.252721][ T5997] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.298659][ T8800] input: syz1 as /devices/virtual/input/input26 [ 129.922583][ T59] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 130.095283][ T59] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.098565][ T59] usb 6-1: config 0 has no interface number 0 [ 130.101098][ T59] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 130.106371][ T59] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 130.110607][ T59] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.114426][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.122893][ T59] usb 6-1: config 0 descriptor?? [ 130.125466][ T8813] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 130.131218][ T59] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 130.334687][ T59] usb 6-1: USB disconnect, device number 12 [ 130.442463][ T5984] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 130.602518][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 130.605646][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.609132][ T5984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.612165][ T5984] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 130.615081][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.618883][ T5984] usb 5-1: config 0 descriptor?? [ 130.732257][ T828] usb 7-1: USB disconnect, device number 18 [ 131.032272][ T5984] kye 0003:0458:5016.0014: control desc unexpectedly large [ 131.045837][ T5984] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0014/input/input27 [ 131.104108][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.107562][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.123445][ T5984] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5016.0014/input/input28 [ 131.159284][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.165214][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.196210][ T5984] kye 0003:0458:5016.0014: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 131.237705][ T5984] usb 5-1: USB disconnect, device number 18 [ 131.248699][ T8847] fido_id[8847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 131.288194][ T92] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.291034][ T92] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.296364][ T92] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.299368][ T92] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.302270][ T92] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.312203][ T92] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.317660][ T92] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.321689][ T92] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.360917][ T8851] syzkaller1: entered promiscuous mode [ 131.363244][ T8851] syzkaller1: entered allmulticast mode [ 131.528951][ T8864] input: syz0 as /devices/virtual/input/input29 [ 131.844270][ T8882] loop6: detected capacity change from 0 to 2640 [ 131.846939][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.850790][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.854948][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.857642][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.860191][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.863141][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.866644][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.869744][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.872265][ T8882] ldm_validate_partition_table(): Disk read failed. [ 131.875031][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.877653][ T8882] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.880469][ T8882] Dev loop6: unable to read RDB block 0 [ 131.882717][ T8882] loop6: unable to read partition table [ 131.885018][ T8882] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 132.121040][ T8911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1278'. [ 132.527591][ T8929] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 132.872504][ T34] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 132.920274][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 132.920289][ T40] audit: type=1326 audit(1776106428.951:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8944 comm="syz.2.1293" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x0 [ 133.042462][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 133.048258][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.051758][ T34] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.055280][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.061973][ T34] usb 6-1: config 0 descriptor?? [ 133.279473][ T34] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 133.728079][ T34] usb 6-1: USB disconnect, device number 13 [ 134.097223][ T8989] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1313'. [ 134.192822][ T6014] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 134.260839][ T9000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1318'. [ 134.267195][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'. [ 134.352889][ T6014] usb 8-1: Using ep0 maxpacket: 8 [ 134.358835][ T6014] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.365066][ T6014] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.369414][ T6014] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.373722][ T6014] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.382654][ T6014] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.386109][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.603203][ T6014] usb 8-1: GET_CAPABILITIES returned 0 [ 134.605003][ T6014] usbtmc 8-1:16.0: can't read capabilities [ 134.706753][ T9032] syzkaller1: entered promiscuous mode [ 134.709354][ T9032] syzkaller1: entered allmulticast mode [ 134.804798][ T39] usb 8-1: USB disconnect, device number 10 [ 135.353860][ T9085] loop5: detected capacity change from 0 to 7 [ 135.449691][ T5959] Dev loop5: unable to read RDB block 7 [ 135.451597][ T5959] loop5: unable to read partition table [ 135.454711][ T5959] loop5: partition table beyond EOD, truncated [ 135.456165][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 135.461736][ C3] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 135.508053][ T7758] kernel read not supported for file /dsp (pid: 7758 comm: kworker/2:5) [ 135.589761][ T9085] Dev loop5: unable to read RDB block 7 [ 135.592194][ T9085] loop5: unable to read partition table [ 135.595220][ T9085] loop5: partition table beyond EOD, truncated [ 135.597760][ T9085] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 135.631157][ T9100] io-wq is not configured for unbound workers [ 135.717820][ T5344] Dev loop5: unable to read RDB block 7 [ 135.721696][ T5344] loop5: unable to read partition table [ 135.724109][ T5344] loop5: partition table beyond EOD, truncated [ 136.002614][ T2289] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 136.065277][ T9122] can0: slcan on ttyS3. [ 136.142836][ T9122] can0 (unregistered): slcan off ttyS3. [ 136.176252][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.181190][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.185554][ T2289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.190980][ T2289] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.195349][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.200024][ T2289] usb 6-1: config 0 descriptor?? [ 136.611098][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.614226][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.617238][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.620135][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.622998][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.623365][ T6014] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 136.625312][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.630152][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.632893][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.635225][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.637874][ T2289] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 136.653617][ T2289] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 136.717505][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1384'. [ 136.782453][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 136.794072][ T6014] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 136.802792][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.805340][ T6014] usb 5-1: Product: syz [ 136.806734][ T6014] usb 5-1: Manufacturer: syz [ 136.812475][ T6014] usb 5-1: SerialNumber: syz [ 136.817702][ T6014] usb 5-1: config 0 descriptor?? [ 136.876482][ T7758] usb 6-1: USB disconnect, device number 14 [ 137.039568][ T6014] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.059345][ T6014] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 137.064549][ T6014] usb 5-1: USB disconnect, device number 19 [ 137.772524][ T2289] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 137.865098][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.867286][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.933426][ T2289] usb 8-1: Using ep0 maxpacket: 8 [ 137.936937][ T2289] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.942422][ T2289] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.945664][ T2289] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.947883][ T2289] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.950743][ T2289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.967714][ T2289] usb 8-1: config 0 descriptor?? [ 138.158735][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 138.304242][ T9220] syzkaller1: entered promiscuous mode [ 138.306531][ T9220] syzkaller1: entered allmulticast mode [ 138.380188][ T2289] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 138.442628][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 138.585355][ T2289] usb 8-1: USB disconnect, device number 11 [ 138.625189][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.628655][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.632008][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.637814][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.640685][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.646723][ T34] usb 6-1: config 0 descriptor?? [ 138.672518][ T6033] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 138.823908][ T6033] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.827553][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.831264][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 138.834473][ T6033] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.838597][ T6033] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.841533][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.847277][ T6033] usb 5-1: config 0 descriptor?? [ 139.055287][ T34] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 139.061115][ T34] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 139.195769][ T9239] netlink: 'syz.3.1425': attribute type 10 has an invalid length. [ 139.199192][ T9239] veth1_macvtap: left promiscuous mode [ 139.320836][ T6014] usb 6-1: USB disconnect, device number 15 [ 139.323611][ T6033] plantronics 0003:047F:FFFF.0018: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 139.464577][ T39] usb 5-1: USB disconnect, device number 20 [ 139.941746][ T9264] loop2: detected capacity change from 0 to 7 [ 139.946476][ T9264] Dev loop2: unable to read RDB block 7 [ 139.948506][ T9264] loop2: unable to read partition table [ 139.950407][ T9264] loop2: partition table beyond EOD, truncated [ 139.954433][ T9264] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 140.115396][ T5959] udevd[5959]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 140.518026][ T9307] hsr0: entered promiscuous mode [ 140.521179][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 140.525260][ T9307] hsr_slave_0: left promiscuous mode [ 140.528393][ T9307] hsr_slave_1: left promiscuous mode [ 140.534965][ T9307] hsr0 (unregistering): left promiscuous mode [ 140.597271][ T9309] input: syz0 as /devices/virtual/input/input32 [ 141.240652][ T9332] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1468'. [ 141.285528][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 141.498209][ T9346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 141.565351][ T9350] trusted_key: syz.2.1477 sent an empty control message without MSG_MORE. [ 141.704535][ T9358] netlink: 'syz.1.1481': attribute type 10 has an invalid length. [ 141.707266][ T9358] veth1_macvtap: left promiscuous mode [ 142.048907][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 142.062542][ T7758] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 142.222606][ T7758] usb 7-1: Using ep0 maxpacket: 16 [ 142.225734][ T7758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.228791][ T7758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.231643][ T7758] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 142.234694][ T7758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.238763][ T7758] usb 7-1: config 0 descriptor?? [ 142.625826][ T9425] input: syz1 as /devices/virtual/input/input34 [ 142.655301][ T7758] kye 0003:0458:5016.0019: control desc unexpectedly large [ 142.660225][ T7758] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0019/input/input35 [ 142.671091][ T7758] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0019/input/input36 [ 142.741683][ T7758] kye 0003:0458:5016.0019: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 142.792950][ T9431] overlayfs: failed lookup in lower (newroot/368, name='file0', err=-40): overlapping layers [ 142.856127][ T2289] usb 7-1: USB disconnect, device number 19 [ 142.916094][ T40] audit: type=1326 audit(1776106950.953:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 142.919105][ T40] audit: type=1326 audit(1776106950.953:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 142.936912][ T40] audit: type=1326 audit(1776106950.973:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 142.948174][ T40] audit: type=1326 audit(1776106950.973:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 142.957475][ T40] audit: type=1326 audit(1776106950.973:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.1519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 143.200046][ T9458] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 143.232543][ T6014] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 143.382474][ T6014] usb 8-1: Using ep0 maxpacket: 8 [ 143.383884][ T6014] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.387763][ T6014] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.387779][ T6014] usb 8-1: config 0 interface 0 has no altsetting 0 [ 143.387801][ T6014] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.387813][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.406004][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 143.415198][ T6014] usb 8-1: config 0 descriptor?? [ 143.840769][ T6014] hid_parser_main: 30 callbacks suppressed [ 143.840783][ T6014] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 143.845262][ T6014] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 143.851139][ T6014] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 143.854157][ T6014] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 143.860261][ T6014] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 143.863253][ T6014] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 144.057435][ T6014] usb 8-1: USB disconnect, device number 12 [ 144.450917][ T9542] syzkaller1: entered promiscuous mode [ 144.453014][ T9542] syzkaller1: entered allmulticast mode [ 144.796943][ T9577] syzkaller1: entered promiscuous mode [ 144.798909][ T9577] syzkaller1: entered allmulticast mode [ 144.800052][ T9579] netlink: 83 bytes leftover after parsing attributes in process `syz.1.1572'. [ 145.289580][ T9618] netlink: 'syz.1.1578': attribute type 2 has an invalid length. [ 145.548737][ T9632] netlink: 'syz.1.1584': attribute type 1 has an invalid length. [ 145.552271][ T9632] netlink: 'syz.1.1584': attribute type 2 has an invalid length. [ 145.600484][ T9640] loop8: detected capacity change from 0 to 8 [ 145.609094][ T5959] Dev loop8: unable to read RDB block 8 [ 145.611217][ T5959] loop8: unable to read partition table [ 145.613509][ T5959] loop8: partition table beyond EOD, truncated [ 145.616160][ T9640] Dev loop8: unable to read RDB block 8 [ 145.617904][ T9640] loop8: unable to read partition table [ 145.619778][ T9640] loop8: partition table beyond EOD, truncated [ 145.621736][ T9640] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 145.657079][ T9646] syzkaller1: entered promiscuous mode [ 145.659031][ T9646] syzkaller1: entered allmulticast mode [ 146.126032][ T9672] syzkaller1: entered promiscuous mode [ 146.127830][ T9672] syzkaller1: entered allmulticast mode [ 146.324404][ T9696] netlink: 'syz.1.1614': attribute type 5 has an invalid length. [ 146.326968][ T9696] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1614'. [ 146.662944][ T6014] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 146.827277][ T6014] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.832575][ T6014] usb 5-1: config 0 has no interface number 0 [ 146.835201][ T6014] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.838980][ T6014] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 146.842747][ T6014] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.845640][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.853885][ T6014] usb 5-1: config 0 descriptor?? [ 146.856210][ T9709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.861009][ T7758] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 146.864960][ T6014] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 146.900770][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1629'. [ 146.972667][ T9728] serio: Serial port ptm1 [ 147.013370][ T7758] usb 6-1: Using ep0 maxpacket: 8 [ 147.016339][ T7758] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 147.019313][ T7758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.026839][ T7758] pvrusb2: Hardware description: Terratec Grabster AV400 [ 147.029150][ T7758] pvrusb2: ********** [ 147.030505][ T7758] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 147.034003][ T7758] pvrusb2: Important functionality might not be entirely working. [ 147.036700][ T7758] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 147.040150][ T7758] pvrusb2: ********** [ 147.067682][ T1330] usb 5-1: USB disconnect, device number 21 [ 147.070223][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 147.230066][ T2484] pvrusb2: Invalid write control endpoint [ 147.260709][ T2484] pvrusb2: Invalid write control endpoint [ 147.263865][ T2484] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 147.267660][ T2484] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 147.270366][ T2484] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 147.273843][ T2484] pvrusb2: Device being rendered inoperable [ 147.278068][ T2484] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 147.280988][ T2484] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 147.286696][ T2484] pvrusb2: Attached sub-driver cx25840 [ 147.288603][ T2484] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 147.291883][ T2484] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 147.428682][ T9717] pvrusb2: Attempted to execute control transfer when device not ok [ 147.433748][ T2289] usb 6-1: USB disconnect, device number 16 [ 147.482519][ T39] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 147.632451][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 147.637028][ T39] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 147.639872][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.642619][ T39] usb 7-1: Product: syz [ 147.643941][ T39] usb 7-1: Manufacturer: syz [ 147.645446][ T39] usb 7-1: SerialNumber: syz [ 147.854555][ T39] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 147.862920][ T39] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.866579][ T39] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 147.870376][ T39] usb 7-1: media controller created [ 147.880810][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.042759][ T9746] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.045472][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.093691][ T39] zl10353_read_register: readreg error (reg=127, ret==-110) [ 148.120551][ T39] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 148.133325][ T39] usb 7-1: USB disconnect, device number 20 [ 148.441443][ T9766] syzkaller1: entered promiscuous mode [ 148.444577][ T9766] syzkaller1: entered allmulticast mode [ 148.500956][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 148.970976][ T9806] binder: 9805:9806 ioctl c0306201 80000540 returned -14 [ 149.122466][ T2289] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 149.242572][ T40] audit: type=1326 audit(1776106957.273:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 149.274098][ T2289] usb 6-1: Using ep0 maxpacket: 32 [ 149.277058][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.280466][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.284440][ T2289] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 149.287320][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.291123][ T2289] usb 6-1: config 0 descriptor?? [ 149.293639][ T40] audit: type=1326 audit(1776106957.333:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 149.303741][ T40] audit: type=1326 audit(1776106957.333:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.311417][ T40] audit: type=1326 audit(1776106957.333:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.318247][ T40] audit: type=1326 audit(1776106957.333:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.325091][ T40] audit: type=1326 audit(1776106957.333:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.331537][ T40] audit: type=1326 audit(1776106957.333:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.338293][ T40] audit: type=1326 audit(1776106957.333:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 149.344950][ T40] audit: type=1326 audit(1776106957.333:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.351515][ T40] audit: type=1326 audit(1776106957.343:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9820 comm="syz.2.1670" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 149.706180][ T2289] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 149.974752][ T7758] usb 6-1: USB disconnect, device number 17 [ 150.102547][ T5958] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 150.102790][ T5954] Bluetooth: hci4: command 0xfc11 tx timeout [ 150.343060][ T6014] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 150.499608][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.503180][ T6014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.506117][ T6014] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.510147][ T6014] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.513084][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.519950][ T6014] usb 7-1: config 0 descriptor?? [ 150.852459][ T6033] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 150.934517][ T6014] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 151.002492][ T6033] usb 8-1: Using ep0 maxpacket: 8 [ 151.006411][ T6033] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.009137][ T6033] usb 8-1: config 0 has no interface number 0 [ 151.011173][ T6033] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.015250][ T6033] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.018226][ T6033] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.022556][ T6033] usb 8-1: config 0 descriptor?? [ 151.029584][ T6033] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 151.982508][ T6033] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 152.132479][ T6033] usb 6-1: Using ep0 maxpacket: 8 [ 152.135909][ T6033] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 152.138583][ T6033] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 152.142194][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.146004][ T6033] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.150027][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.153776][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.157529][ T6033] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 152.161967][ T6033] usb 6-1: config 168 interface 0 has no altsetting 0 [ 152.165464][ T6033] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 152.168097][ T6033] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 152.171668][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.175735][ T6033] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.179544][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.183168][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.187060][ T6033] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 152.191343][ T6033] usb 6-1: config 168 interface 0 has no altsetting 0 [ 152.195173][ T6033] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 152.197994][ T6033] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 152.201582][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.205329][ T6033] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 152.209298][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 152.213016][ T6033] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 152.216719][ T6033] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 152.221190][ T6033] usb 6-1: config 168 interface 0 has no altsetting 0 [ 152.227313][ T6033] usb 6-1: string descriptor 0 read error: -22 [ 152.229376][ T6033] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 152.232483][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.245992][ T7758] usb 8-1: USB disconnect, device number 13 [ 152.246115][ T6033] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 152.496799][ T7758] usb 6-1: USB disconnect, device number 18 [ 152.839792][ T9950] can0: slcan on ttyS3. [ 152.883252][ T9950] can0 (unregistered): slcan off ttyS3. [ 153.014505][ T2289] usb 7-1: USB disconnect, device number 21 [ 153.575743][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 153.697594][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 153.924053][ T9997] kvm: user requested TSC rate below hardware speed [ 154.714691][T10007] loop5: detected capacity change from 0 to 7 [ 154.721489][ T1187] Bluetooth: hci5: Frame reassembly failed (-84) [ 154.724079][T10005] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 154.727858][ T80] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 154.832607][T10007] Dev loop5: unable to read RDB block 7 [ 154.833902][ C3] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 154.834954][T10007] loop5: unable to read partition table [ 154.837865][ C3] buffer_io_error: 13 callbacks suppressed [ 154.837874][ C3] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 154.840223][T10007] loop5: partition table beyond EOD, [ 154.842122][ C3] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 154.845233][T10007] truncated [ 154.846881][ C3] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 154.850886][T10007] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 154.972042][ T5344] Dev loop5: unable to read RDB block 7 [ 154.973893][ T5344] loop5: unable to read partition table [ 154.975764][ T5344] loop5: partition table beyond EOD, truncated [ 155.712910][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.712928][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 156.232549][ T2289] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 156.392807][ T2289] usb 7-1: Using ep0 maxpacket: 8 [ 156.396958][ T2289] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.401422][ T2289] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.405984][ T2289] usb 7-1: config 0 interface 0 has no altsetting 0 [ 156.408755][ T2289] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.413177][ T2289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.418811][ T2289] usb 7-1: config 0 descriptor?? [ 156.445719][T10042] kvm: apic: phys broadcast and lowest prio [ 156.578815][T10046] overlayfs: statfs failed on './file0' [ 156.742837][ T5958] Bluetooth: hci5: command 0x1003 tx timeout [ 156.745922][ T5954] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 156.833252][ T2289] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 156.835383][ T2289] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 156.837388][ T2289] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 156.839363][ T2289] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 156.848537][ T2289] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 156.850994][ T2289] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 156.860313][T10050] syzkaller1: entered promiscuous mode [ 156.862124][T10050] syzkaller1: entered allmulticast mode [ 156.909612][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 157.035810][ T6033] usb 7-1: USB disconnect, device number 22 [ 157.111367][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 157.115102][T10067] bridge: RTM_NEWNEIGH with invalid ether address [ 157.120768][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 157.124976][T10067] bridge: RTM_NEWNEIGH with invalid ether address [ 157.176208][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'. [ 157.179820][T10074] input: syz0 as /devices/virtual/input/input37 [ 157.787731][T10095] syzkaller1: entered promiscuous mode [ 157.789493][T10095] syzkaller1: entered allmulticast mode [ 158.368372][ T34] kernel read not supported for file /video37 (pid: 34 comm: kworker/3:0) [ 158.492561][ T2289] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 158.652407][ T2289] usb 7-1: Using ep0 maxpacket: 8 [ 158.655437][ T2289] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 158.657969][ T2289] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.661470][ T2289] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.669584][ T2289] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.672658][ T2289] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.676811][ T2289] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.679574][ T2289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.893215][ T2289] usb 7-1: usb_control_msg returned -32 [ 158.895024][ T2289] usbtmc 7-1:16.0: can't read capabilities [ 159.103630][ T7758] usb 7-1: USB disconnect, device number 23 [ 159.725011][T10186] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 159.870207][ T40] kauditd_printk_skb: 595 callbacks suppressed [ 159.870225][ T40] audit: type=1326 audit(1776106967.903:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.0.1821" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef6c code=0x0 [ 159.932465][ T2289] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 160.105509][ T2289] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 160.108722][ T2289] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 160.111524][ T2289] usb 7-1: Product: syz [ 160.113757][ T2289] usb 7-1: Manufacturer: syz [ 160.115197][ T2289] usb 7-1: SerialNumber: syz [ 160.118049][ T2289] usb 7-1: config 0 descriptor?? [ 160.325521][ T7758] usb 7-1: USB disconnect, device number 24 [ 160.825613][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 160.876484][T10237] overlayfs: workdir and upperdir must reside under the same mount [ 161.076832][T10257] syzkaller1: entered promiscuous mode [ 161.078610][T10257] syzkaller1: entered allmulticast mode [ 161.083316][T10257] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 22 [ 161.154971][T10265] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1853'. [ 161.199318][T10270] input: syz0 as /devices/virtual/input/input38 [ 161.330522][ T7758] kernel read not supported for file /input/event0 (pid: 7758 comm: kworker/2:5) [ 161.524804][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 161.619739][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 161.624209][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 161.782612][ T1330] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 161.793360][ T6014] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 161.942612][ T1330] usb 7-1: Using ep0 maxpacket: 32 [ 161.945528][ T1330] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.950181][ T1330] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.953216][ T1330] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.955882][ T1330] usb 7-1: Product: syz [ 161.957257][ T1330] usb 7-1: Manufacturer: syz [ 161.958755][ T1330] usb 7-1: SerialNumber: syz [ 161.961486][ T1330] usb 7-1: config 0 descriptor?? [ 161.963804][ T6014] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.964893][T10293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.967454][ T6014] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.973630][ T6014] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.977213][ T6014] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.983472][ T6014] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.987044][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.990176][ T6014] usb 5-1: Product: syz [ 161.991958][ T6014] usb 5-1: Manufacturer: syz [ 161.998561][ T6014] cdc_wdm 5-1:1.0: skipping garbage [ 162.001029][ T6014] cdc_wdm 5-1:1.0: skipping garbage [ 162.004939][ T6014] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 162.007473][ T6014] cdc_wdm 5-1:1.0: Unknown control protocol [ 162.123100][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 162.206713][ T1330] usb 5-1: USB disconnect, device number 22 [ 163.052581][ T2289] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 163.212407][ T2289] usb 6-1: Using ep0 maxpacket: 8 [ 163.213678][ T2289] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 163.216892][ T2289] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.216906][ T2289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.223622][ T2289] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.223637][ T2289] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.223666][ T2289] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.223678][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.433567][ T2289] usb 6-1: usb_control_msg returned -32 [ 163.433592][ T2289] usbtmc 6-1:16.0: can't read capabilities [ 163.636365][ T1330] usb 6-1: USB disconnect, device number 19 [ 163.664610][ T7758] usb 7-1: USB disconnect, device number 25 [ 163.842488][ T6014] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 164.006633][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.010253][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.011926][T10348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 164.013915][ T6014] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.015563][T10348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.017203][T10348] vhci_hcd vhci_hcd.0: Device attached [ 164.019723][ T6014] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.027699][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.033725][ T6014] usb 8-1: config 0 descriptor?? [ 164.262735][ T1330] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 164.272613][ T39] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 164.313878][T10364] sctp: [Deprecated]: syz.1.1893 (pid 10364) Use of int in maxseg socket option. [ 164.313878][T10364] Use struct sctp_assoc_value instead [ 164.424317][ T39] usb 5-1: config 0 has no interfaces? [ 164.426227][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.429090][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.434158][ T39] usb 5-1: config 0 descriptor?? [ 164.447070][ T6014] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 164.450071][ T6014] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 164.452661][ T6014] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 164.455021][ T6014] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 164.457501][ T6014] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 164.459847][ T6014] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 164.467852][ T6014] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 164.592616][ T7758] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 164.640950][T10350] usb 37-1: recv xbuf, 0 [ 164.642986][ T24] usb 5-1: USB disconnect, device number 23 [ 164.644969][ T1187] vhci_hcd vhci_hcd.0: stop threads [ 164.648126][ T1187] vhci_hcd vhci_hcd.0: release socket [ 164.650788][ T1187] vhci_hcd vhci_hcd.0: disconnect device [ 164.704654][ T6014] usb 8-1: USB disconnect, device number 14 [ 164.712694][ T1330] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 164.742882][ T7758] usb 6-1: Using ep0 maxpacket: 16 [ 164.759859][ T7758] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.764369][ T7758] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 164.767574][ T7758] usb 6-1: can't read configurations, error -71 [ 165.612781][ T7758] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 165.683046][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 165.768986][ T7758] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.771815][ T7758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.775189][ T7758] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.778187][ T7758] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.783922][ T7758] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.786879][ T7758] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.789657][ T7758] usb 6-1: Product: syz [ 165.791026][ T7758] usb 6-1: Manufacturer: syz [ 165.796907][ T7758] cdc_wdm 6-1:1.0: skipping garbage [ 165.798622][ T7758] cdc_wdm 6-1:1.0: skipping garbage [ 165.804050][ T7758] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 165.805985][ T7758] cdc_wdm 6-1:1.0: Unknown control protocol [ 165.842456][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 165.855769][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 165.859680][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 165.862191][ T24] usb 7-1: can't read configurations, error -71 [ 165.862586][ T2289] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 166.001642][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 166.004054][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 166.006547][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 166.008634][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 166.010774][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 166.012870][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 166.013831][ T2289] usb 8-1: Using ep0 maxpacket: 8 [ 166.015027][ T1330] usb 6-1: USB disconnect, device number 21 [ 166.018863][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.022490][ T2289] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.026272][ T2289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.034257][ T2289] usb 8-1: config 0 descriptor?? [ 166.244777][ T2289] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 166.699282][ T2289] usb 8-1: USB disconnect, device number 15 [ 166.712794][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 166.864209][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.868936][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.874039][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.878781][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.882044][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.888862][ T24] usb 7-1: config 0 descriptor?? [ 167.307230][ T24] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 167.313717][ T24] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 167.316133][ T24] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 167.318652][ T24] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 167.322038][ T24] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 167.342773][ T24] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 167.372506][ T7758] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 167.462552][ T2289] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 167.532501][ T7758] usb 6-1: Using ep0 maxpacket: 8 [ 167.535489][ T7758] usb 6-1: config 0 has no interfaces? [ 167.537279][ T7758] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.540288][ T7758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.546603][ T7758] usb 6-1: config 0 descriptor?? [ 167.563904][ T34] usb 7-1: USB disconnect, device number 27 [ 167.613385][ T2289] usb 8-1: Using ep0 maxpacket: 16 [ 167.622656][ T2289] usb 8-1: unable to get BOS descriptor or descriptor too short [ 167.626336][ T2289] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 167.628819][ T2289] usb 8-1: can't read configurations, error -71 [ 167.955962][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.965073][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.973193][ T6014] usb 6-1: USB disconnect, device number 22 [ 168.472879][ T2289] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 168.624268][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.628953][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.633228][ T2289] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.638613][ T2289] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.642814][ T2289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.649818][ T2289] usb 8-1: config 0 descriptor?? [ 168.992506][ T6014] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 169.077466][ T2289] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 169.143993][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.148307][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.152177][ T6014] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.157430][ T6014] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.160295][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.169294][ T6014] usb 5-1: config 0 descriptor?? [ 169.582665][ T6014] hid_parser_main: 11 callbacks suppressed [ 169.582680][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.587018][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.589381][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.591826][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.594627][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.597016][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.599564][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.602188][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.604857][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.607514][ T6014] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 169.616992][ T6014] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 170.374545][ T2289] usb 5-1: USB disconnect, device number 24 [ 171.154384][ T39] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 171.157563][ T6014] usb 8-1: USB disconnect, device number 17 [ 171.172543][ T2289] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 171.251457][T10497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'. [ 171.257333][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 171.280282][T10497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1950'. [ 171.302519][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 171.306456][ T39] usb 7-1: config 0 has no interfaces? [ 171.309151][ T39] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.313118][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.317079][ T39] usb 7-1: config 0 descriptor?? [ 171.332548][ T2289] usb 5-1: Using ep0 maxpacket: 16 [ 171.345213][ T2289] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.350171][ T2289] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 171.354187][ T2289] usb 5-1: can't read configurations, error -71 [ 171.369852][T10502] loop8: detected capacity change from 0 to 8 [ 171.375887][ T5959] Dev loop8: unable to read RDB block 8 [ 171.377892][ T5959] loop8: unable to read partition table [ 171.379741][ T5959] loop8: partition table beyond EOD, truncated [ 171.388007][T10502] Dev loop8: unable to read RDB block 8 [ 171.390438][T10502] loop8: unable to read partition table [ 171.394092][T10502] loop8: partition table beyond EOD, truncated [ 171.401514][T10502] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 171.470781][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1957'. [ 171.726863][T10475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.730818][T10475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.736027][ T39] usb 7-1: USB disconnect, device number 28 [ 171.870205][T10529] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 172.119210][T10545] kvm_intel: kvm [10544]: vcpu8, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 172.313774][T10549] serio: Serial port ptm1 [ 172.663018][ T7758] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 172.815146][ T7758] usb 8-1: Using ep0 maxpacket: 16 [ 172.827276][ T7758] usb 8-1: unable to get BOS descriptor or descriptor too short [ 172.832277][ T7758] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 172.835083][ T7758] usb 8-1: can't read configurations, error -71 [ 173.083880][ T39] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 173.242522][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 173.246375][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 173.252259][ T39] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 173.256076][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.259420][ T39] usb 7-1: Product: syz [ 173.261149][ T39] usb 7-1: Manufacturer: syz [ 173.263178][ T39] usb 7-1: SerialNumber: syz [ 173.267163][ T39] usb 7-1: config 0 descriptor?? [ 173.270495][ T39] hub 7-1:0.0: bad descriptor, ignoring hub [ 173.273296][ T39] hub 7-1:0.0: probe with driver hub failed with error -5 [ 173.277165][ T39] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 173.590844][ T39] usb 7-1: USB disconnect, device number 29 [ 173.716660][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 174.462456][ T6014] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 174.472729][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 174.612561][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 174.616971][ T6014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 174.625865][ T6014] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 174.629951][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.633524][ T6014] usb 5-1: Product: syz [ 174.635623][ T6014] usb 5-1: Manufacturer: syz [ 174.637792][ T6014] usb 5-1: SerialNumber: syz [ 174.642868][ T6014] usb 5-1: config 0 descriptor?? [ 174.652442][ T6014] hub 5-1:0.0: bad descriptor, ignoring hub [ 174.654711][ T6014] hub 5-1:0.0: probe with driver hub failed with error -5 [ 174.657951][ T6014] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.949194][ T7758] usb 5-1: USB disconnect, device number 27 [ 175.370924][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 175.373619][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 175.411220][T10665] kvm_intel: kvm [10664]: vcpu8, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 175.590316][T10681] netlink: 'syz.3.2027': attribute type 12 has an invalid length. [ 175.602724][T10681] netlink: 'syz.3.2027': attribute type 12 has an invalid length. [ 175.757954][T10703] netlink: 'syz.0.2040': attribute type 12 has an invalid length. [ 175.761514][T10703] netlink: 'syz.0.2040': attribute type 12 has an invalid length. [ 175.884305][ T40] audit: type=1326 audit(1776106983.923:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707ef6c code=0x0 [ 175.922430][ T7758] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 175.939034][ T40] audit: type=1326 audit(1776106983.973:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 175.946765][ T40] audit: type=1326 audit(1776106983.973:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 175.955362][ T40] audit: type=1326 audit(1776106983.973:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 175.962146][ T40] audit: type=1326 audit(1776106983.973:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 175.969154][ T40] audit: type=1326 audit(1776106983.973:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 175.975932][ T40] audit: type=1326 audit(1776106983.973:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 175.982701][ T40] audit: type=1326 audit(1776106983.973:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 175.990649][ T40] audit: type=1326 audit(1776106983.973:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 175.998482][ T40] audit: type=1326 audit(1776106983.983:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.0.2046" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71b5cab code=0x7ffc0000 [ 176.082438][ T7758] usb 6-1: Using ep0 maxpacket: 16 [ 176.085606][ T7758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 176.091154][ T7758] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 176.094549][ T7758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.097339][ T7758] usb 6-1: Product: syz [ 176.098920][ T7758] usb 6-1: Manufacturer: syz [ 176.100698][ T7758] usb 6-1: SerialNumber: syz [ 176.104010][ T7758] usb 6-1: config 0 descriptor?? [ 176.111340][ T7758] hub 6-1:0.0: bad descriptor, ignoring hub [ 176.113692][ T7758] hub 6-1:0.0: probe with driver hub failed with error -5 [ 176.117205][ T7758] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.507251][ T2289] usb 6-1: USB disconnect, device number 23 [ 177.332666][ T7758] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 177.482509][ T7758] usb 5-1: Using ep0 maxpacket: 16 [ 177.488557][ T7758] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 177.492217][ T7758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.495370][ T7758] usb 5-1: Product: syz [ 177.497003][ T7758] usb 5-1: Manufacturer: syz [ 177.498865][ T7758] usb 5-1: SerialNumber: syz [ 177.712779][ T7758] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 177.718329][ T7758] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 177.721745][ T7758] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 177.727740][ T7758] usb 5-1: media controller created [ 177.739444][ T7758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.968108][ T7758] zl10353_read_register: readreg error (reg=127, ret==-110) [ 177.983310][ T2289] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 177.997288][ T7758] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 178.001359][ T7758] usb 5-1: USB disconnect, device number 28 [ 178.152543][ T2289] usb 8-1: Using ep0 maxpacket: 16 [ 178.155589][ T2289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 178.160839][ T2289] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 178.164350][ T2289] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.166991][ T2289] usb 8-1: Product: syz [ 178.168342][ T2289] usb 8-1: Manufacturer: syz [ 178.169953][ T2289] usb 8-1: SerialNumber: syz [ 178.173443][ T2289] usb 8-1: config 0 descriptor?? [ 178.178711][ T2289] hub 8-1:0.0: bad descriptor, ignoring hub [ 178.181012][ T2289] hub 8-1:0.0: probe with driver hub failed with error -5 [ 178.185648][ T2289] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.529753][ T2289] usb 8-1: USB disconnect, device number 20 [ 179.209764][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 179.213213][T10852] bridge: RTM_NEWNEIGH with invalid ether address [ 179.217775][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 179.220945][T10852] bridge: RTM_NEWNEIGH with invalid ether address [ 179.229217][T10853] binder: 10850:10853 ioctl c0306201 80000480 returned -14 [ 179.582664][T10877] input: syz0 as /devices/virtual/input/input40 [ 179.622424][ T39] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 179.636854][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 179.772670][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 179.777176][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.780931][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.792576][ T39] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.795382][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.799178][ T39] usb 7-1: config 0 descriptor?? [ 179.815009][T10891] syzkaller1: entered promiscuous mode [ 179.816970][T10891] syzkaller1: entered allmulticast mode [ 180.100500][T10916] kvm: apic: phys broadcast and lowest prio [ 180.223624][ T39] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 180.474615][ T6014] usb 7-1: USB disconnect, device number 30 [ 180.562702][ T2289] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 180.724585][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.729081][ T2289] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.733430][ T2289] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.738837][ T2289] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.743063][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.748560][ T2289] usb 6-1: config 0 descriptor?? [ 181.160168][ T2289] hid_parser_main: 5 callbacks suppressed [ 181.160182][ T2289] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x4 [ 181.184476][ T2289] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 181.471002][T10963] can0: slcan on ptm1. [ 181.979457][T11005] input: syz0 as /devices/virtual/input/input41 [ 182.113188][T10962] can0 (unregistered): slcan off ptm1. [ 182.680906][T11048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2189'. [ 182.688380][T11048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2189'. [ 183.253164][ T6014] usb 6-1: USB disconnect, device number 24 [ 183.387940][ T40] kauditd_printk_skb: 557 callbacks suppressed [ 183.387955][ T40] audit: type=1326 audit(1776106991.423:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.1.2211" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef6c code=0x0 [ 183.502563][ T7758] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 183.529514][T11108] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 183.611703][T11113] can0: slcan on ptm1. [ 183.664329][ T7758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.667784][ T7758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.670898][ T7758] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.675667][ T7758] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.678440][ T7758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.682139][ T7758] usb 7-1: config 0 descriptor?? [ 183.816709][T11127] input: syz0 as /devices/virtual/input/input42 [ 184.104867][ T7758] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 184.293818][T11110] can0 (unregistered): slcan off ptm1. [ 184.356764][ T7758] usb 7-1: USB disconnect, device number 31 [ 184.692457][ T6014] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 184.732529][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 184.803034][ T7758] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 184.852446][ T6014] usb 6-1: Using ep0 maxpacket: 8 [ 184.855394][ T6014] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.858788][ T6014] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.861908][ T6014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 184.864036][ T6014] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 184.866924][ T6014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.870608][ T6014] usb 6-1: config 0 descriptor?? [ 184.892472][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 184.897066][ T24] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 184.899860][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.902336][ T24] usb 5-1: Product: syz [ 184.904777][ T24] usb 5-1: Manufacturer: syz [ 184.906234][ T24] usb 5-1: SerialNumber: syz [ 184.909082][ T24] usb 5-1: config 0 descriptor?? [ 184.962616][ T7758] usb 8-1: Using ep0 maxpacket: 8 [ 184.965755][ T7758] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.968887][ T7758] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.971929][ T7758] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.975430][ T7758] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.979480][ T7758] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.982338][ T7758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.203588][ T7758] usb 8-1: GET_CAPABILITIES returned 0 [ 185.205435][ T7758] usbtmc 8-1:16.0: can't read capabilities [ 185.297052][ T6014] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 185.299255][ T6014] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 185.301453][ T6014] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 185.304559][ T6014] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 185.306834][ T6014] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 185.311538][ T6014] mcp2221 0003:04D8:00DD.0025: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 185.329206][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 185.342986][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.346204][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 185.348663][ T24] usb 5-1: media controller created [ 185.355607][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.414201][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 185.417861][ T6014] usb 8-1: USB disconnect, device number 21 [ 185.675750][T11193] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2246'. [ 185.903458][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 185.905834][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 185.908469][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 185.922806][T11166] ------------[ cut here ]------------ [ 185.924756][T11166] usb 5-1: BOGUS control dir, pipe 80001d80 doesn't match bRequestType c0 [ 185.927435][T11166] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#1: syz.1.2235/11166 [ 185.930650][T11166] Modules linked in: [ 185.932187][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.1.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.936107][T11166] Tainted: [L]=SOFTLOCKUP [ 185.937486][T11166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.940602][T11166] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 185.942499][T11166] Code: d2 74 5d 48 89 54 24 40 e8 ff f2 b8 fa 4c 89 ef e8 57 ab de fe 48 89 c6 48 8d 3d 3d 90 97 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 d3 f2 b8 fa 89 ee bf ff 00 00 00 [ 185.949200][T11166] RSP: 0018:ffffc90004bcf630 EFLAGS: 00010287 [ 185.951097][T11166] RAX: ffffffff8c80f520 RBX: ffff888013ad2a00 RCX: 0000000080001d80 [ 185.953797][T11166] RDX: ffff888012f939a0 RSI: ffffffff8c80f520 RDI: ffffffff90e6e1f0 [ 185.956267][T11166] RBP: ffff888026b33058 R08: 00000000000000c0 R09: 0000000000000000 [ 185.958748][T11166] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880299e84c0 [ 185.961225][T11166] R13: ffff888026b330b0 R14: 0000000080001d80 R15: 00000000000000c0 [ 185.963843][T11166] FS: 0000000000000000(0000) GS:ffff888097240000(0063) knlGS:00000000f547db40 [ 185.966676][T11166] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 185.968747][T11166] CR2: 000000000c3a3f1d CR3: 000000004bf7a000 CR4: 0000000000352ef0 [ 185.971207][T11166] Call Trace: [ 185.972245][T11166] [ 185.973295][T11166] ? __init_swait_queue_head+0xca/0x150 [ 185.975304][T11166] usb_start_wait_urb+0x10e/0x580 [ 185.976930][T11166] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 185.978727][T11166] ? __asan_memset+0x23/0x50 [ 185.980176][T11166] usb_control_msg+0x328/0x4b0 [ 185.981653][T11166] ? __pfx_usb_control_msg+0x10/0x10 [ 185.983452][T11166] dtv5100_i2c_msg+0x1be/0x340 [ 185.984966][T11166] dtv5100_i2c_xfer+0x131/0x3d0 [ 185.986607][T11166] ? do_raw_spin_lock+0x128/0x260 [ 185.988240][T11166] __i2c_transfer+0x5d9/0x17f0 [ 185.989730][T11166] ? __pfx___i2c_transfer+0x10/0x10 [ 185.991330][T11166] ? _raw_spin_lock_irq+0x45/0x50 [ 185.993042][T11166] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 185.994778][T11166] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 185.996661][T11166] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x790 [ 185.999458][T11166] ? lockdep_unlock+0x40/0xc0 [ 186.001358][T11166] ? find_held_lock+0x2b/0x80 [ 186.003383][T11166] __i2c_smbus_xfer+0x5b7/0x1080 [ 186.005426][T11166] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 186.007627][T11166] i2c_smbus_xfer+0x185/0x3c0 [ 186.009541][T11166] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 186.011610][T11166] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 186.013767][T11166] ? __might_fault+0xc5/0x140 [ 186.015510][T11166] ? __might_fault+0xc5/0x140 [ 186.016976][T11166] compat_i2cdev_ioctl+0x439/0x540 [ 186.018552][T11166] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 186.020283][T11166] ? __fget_files+0x21f/0x3d0 [ 186.021722][T11166] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 186.023548][T11166] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 186.025239][T11166] __do_fast_syscall_32+0xe3/0x8c0 [ 186.026838][T11166] do_fast_syscall_32+0x32/0x70 [ 186.028332][T11166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.030450][T11166] RIP: 0023:0xf708ef6c [ 186.031749][T11166] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 186.038924][T11166] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 186.042430][T11166] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 186.045716][T11166] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.049061][T11166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.052436][T11166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.055796][T11166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.059189][T11166] [ 186.060416][T11166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.062931][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.1.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.066893][T11166] Tainted: [L]=SOFTLOCKUP [ 186.068209][T11166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.071257][T11166] Call Trace: [ 186.072288][T11166] [ 186.073226][T11166] dump_stack_lvl+0x100/0x190 [ 186.074719][T11166] vpanic+0x552/0x970 [ 186.075944][T11166] ? __pfx_vpanic+0x10/0x10 [ 186.077336][T11166] panic+0xd1/0xe0 [ 186.078565][T11166] ? __pfx_panic+0x10/0x10 [ 186.080007][T11166] check_panic_on_warn.cold+0x19/0x34 [ 186.081633][T11166] ? usb_submit_urb+0x1573/0x1910 [ 186.083210][T11166] __warn.cold+0x191/0x348 [ 186.084604][T11166] __report_bug+0x296/0x3d0 [ 186.086037][T11166] ? usb_submit_urb+0x1573/0x1910 [ 186.087651][T11166] ? __pfx___report_bug+0x10/0x10 [ 186.089220][T11166] ? mark_held_locks+0x40/0x70 [ 186.090735][T11166] report_bug_entry+0xe1/0x290 [ 186.092232][T11166] ? usb_submit_urb+0x157e/0x1910 [ 186.094282][T11166] handle_bug+0x1cd/0x2a0 [ 186.095656][T11166] exc_invalid_op+0x17/0x50 [ 186.097128][T11166] asm_exc_invalid_op+0x1a/0x20 [ 186.098941][T11166] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 186.100735][T11166] Code: d2 74 5d 48 89 54 24 40 e8 ff f2 b8 fa 4c 89 ef e8 57 ab de fe 48 89 c6 48 8d 3d 3d 90 97 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 d3 f2 b8 fa 89 ee bf ff 00 00 00 [ 186.107610][T11166] RSP: 0018:ffffc90004bcf630 EFLAGS: 00010287 [ 186.110066][T11166] RAX: ffffffff8c80f520 RBX: ffff888013ad2a00 RCX: 0000000080001d80 [ 186.113248][T11166] RDX: ffff888012f939a0 RSI: ffffffff8c80f520 RDI: ffffffff90e6e1f0 [ 186.116431][T11166] RBP: ffff888026b33058 R08: 00000000000000c0 R09: 0000000000000000 [ 186.119651][T11166] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880299e84c0 [ 186.122940][T11166] R13: ffff888026b330b0 R14: 0000000080001d80 R15: 00000000000000c0 [ 186.126318][T11166] ? __init_swait_queue_head+0xca/0x150 [ 186.128563][T11166] usb_start_wait_urb+0x10e/0x580 [ 186.130645][T11166] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 186.133029][T11166] ? __asan_memset+0x23/0x50 [ 186.135059][T11166] usb_control_msg+0x328/0x4b0 [ 186.137136][T11166] ? __pfx_usb_control_msg+0x10/0x10 [ 186.139436][T11166] dtv5100_i2c_msg+0x1be/0x340 [ 186.141506][T11166] dtv5100_i2c_xfer+0x131/0x3d0 [ 186.143621][T11166] ? do_raw_spin_lock+0x128/0x260 [ 186.145737][T11166] __i2c_transfer+0x5d9/0x17f0 [ 186.147631][T11166] ? __pfx___i2c_transfer+0x10/0x10 [ 186.149555][T11166] ? _raw_spin_lock_irq+0x45/0x50 [ 186.151432][T11166] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 186.153551][T11166] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 186.155964][T11166] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x790 [ 186.158725][T11166] ? lockdep_unlock+0x40/0xc0 [ 186.160247][T11166] ? find_held_lock+0x2b/0x80 [ 186.161727][T11166] __i2c_smbus_xfer+0x5b7/0x1080 [ 186.163392][T11166] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 186.165584][T11166] i2c_smbus_xfer+0x185/0x3c0 [ 186.167476][T11166] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 186.169526][T11166] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 186.171744][T11166] ? __might_fault+0xc5/0x140 [ 186.173610][T11166] ? __might_fault+0xc5/0x140 [ 186.175519][T11166] compat_i2cdev_ioctl+0x439/0x540 [ 186.177580][T11166] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 186.179777][T11166] ? __fget_files+0x21f/0x3d0 [ 186.181680][T11166] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 186.183917][T11166] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 186.186040][T11166] __do_fast_syscall_32+0xe3/0x8c0 [ 186.188122][T11166] do_fast_syscall_32+0x32/0x70 [ 186.190024][T11166] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.192019][T11166] RIP: 0023:0xf708ef6c [ 186.193308][T11166] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 186.199145][T11166] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 186.201663][T11166] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 186.204096][T11166] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.206584][T11166] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.208952][T11166] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.211411][T11166] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.213945][T11166] [ 186.215669][T11166] Kernel Offset: disabled [ 186.217060][T11166] Rebooting in 86400 seconds..