last executing test programs: 16.36568886s ago: executing program 1 (id=10396): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x82, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000bc0)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x2c}, 0x44004) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x2000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000012, 0xb, 0x0, &(0x7f0000000480)="63ec33c9e9b98600000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000500)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000840)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r8, &(0x7f0000000880)="0802110000010802110000000800450000280000000040007ce7", 0x1a) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.107170202s ago: executing program 2 (id=10399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2210088, &(0x7f00000016c0)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d3078"]) chdir(&(0x7f0000001740)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001780)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$cgroup_pressure(r0, &(0x7f00000017c0)={'full', 0x20, 0x1, 0x20, 0x6}, 0x2f) 12.575146553s ago: executing program 2 (id=10401): set_mempolicy(0x8006, 0x0, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)}) 12.294678373s ago: executing program 1 (id=10403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="0c000180080001", @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.386087035s ago: executing program 1 (id=10405): syz_usb_connect(0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) syz_open_dev$midi(&(0x7f00000007c0), 0x3, 0x8ac02) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 10.31818499s ago: executing program 2 (id=10406): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x8, 0x8, 0x4b2}, 0x50) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000a80), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.369469524s ago: executing program 0 (id=10408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9.368932465s ago: executing program 0 (id=10409): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) mount$9p_virtio(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2210088, &(0x7f00000016c0)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d3078"]) chdir(&(0x7f0000001740)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001780)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$cgroup_pressure(r0, &(0x7f00000017c0)={'full', 0x20, 0x1, 0x20, 0x6}, 0x2f) 8.874444494s ago: executing program 3 (id=10410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.911163435s ago: executing program 1 (id=10411): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x10, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)) 6.910962711s ago: executing program 0 (id=10412): syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 5.623603023s ago: executing program 3 (id=10413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="0c000180080001", @ANYRES32, @ANYBLOB="0c00010028010000000000007104baf9e9260570f1539facea93b34858023a7b46af9a1190c109ff2b99f29d7e2dfd981de5ac5b0afd747e8ac7ac94819bfbc5eaede5ba168b05b19121d0073a9ee37daf03f84875d6a68afa161b689aa87040950fd0d3872639ae86bee695037c4a1bce3c9dbd65eb81662e74d10702c893825ee74b461b15b20e4ec7d7c3c3"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.507212159s ago: executing program 2 (id=10414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)}) 4.67867762s ago: executing program 0 (id=10415): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$char_usb(r0, 0x0, 0x0) 4.632228256s ago: executing program 3 (id=10416): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 4.482655181s ago: executing program 1 (id=10417): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) syz_open_dev$midi(&(0x7f00000007c0), 0x3, 0x8ac02) syz_usb_disconnect(r0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) socket(0x200000000000011, 0x2, 0xd) close_range(r1, 0xffffffffffffffff, 0x2000000000000) 3.698283513s ago: executing program 3 (id=10418): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), 0x0, &(0x7f00000001c0), 0x0, 0xffffffffffffffff}) 3.657286722s ago: executing program 2 (id=10419): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000200)='\x00', 0x1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)) ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100"/45) 3.538394057s ago: executing program 0 (id=10420): set_mempolicy(0x8006, 0x0, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 2.230688551s ago: executing program 3 (id=10421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.983467735s ago: executing program 2 (id=10422): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x8, 0x8, 0x4b2}, 0x50) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000a80), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.109742732s ago: executing program 0 (id=10423): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffdfffd}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007b000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x82, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000bc0)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x2c}, 0x44004) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x2000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000012, 0xb, 0x0, &(0x7f0000000480)="63ec33c9e9b98600000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000500)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, &(0x7f0000000840)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r8, &(0x7f0000000880)="0802110000010802110000000800450000280000000040007ce7", 0x1a) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 63.902277ms ago: executing program 3 (id=10424): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f00)='cmdline\x00') preadv(r1, &(0x7f0000000f40), 0x0, 0x16, 0x1000) io_uring_setup(0x7b13, &(0x7f0000000080)={0x0, 0xc75, 0x40, 0x1, 0x21c, 0x0, r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x10, &(0x7f0000000d40)=ANY=[], &(0x7f0000000dc0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r2, r4, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaa1a2c6cb1cff986dd60156909004a2f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088a80000000000000800000100050000000086dd88a888be08000000100000000100000000000000080022eb00000000200000000200000000000000000000000c00655800000000"], 0x0) 0s ago: executing program 1 (id=10432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 413][ T7456] usb 5-1: string descriptor 0 read error: -22 [ 2895.116470][ T7456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2895.172912][T30821] Bluetooth: hci3: command tx timeout [ 2895.233816][ T7456] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2895.304658][ T8124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2895.312680][ T8124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2895.313968][ T8124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2895.319672][ T8124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2895.325657][ T8124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2895.336306][ T47] usb 5-1: USB disconnect, device number 8 [ 2895.535906][ T9614] rxe_eth0 speed is unknown, defaulting to 1000 [ 2895.609469][ T8710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.717627][ T8710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.785669][ T8710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.851264][ T8710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.918783][ T9614] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.918836][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.918935][ T9614] bridge_slave_0: entered allmulticast mode [ 2895.919732][ T9614] bridge_slave_0: entered promiscuous mode [ 2895.921469][ T9614] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.921529][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.921587][ T9614] bridge_slave_1: entered allmulticast mode [ 2895.922312][ T9614] bridge_slave_1: entered promiscuous mode [ 2895.935797][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9665'. [ 2895.952327][ T9614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2895.955242][ T9614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2895.986849][ T9614] team0: Port device team_slave_0 added [ 2895.989625][ T9614] team0: Port device team_slave_1 added [ 2896.012794][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2896.012811][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2896.012831][ T9614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2896.014979][ T9614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2896.014992][ T9614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2896.015013][ T9614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2896.050513][ T9614] hsr_slave_0: entered promiscuous mode [ 2896.051377][ T9614] hsr_slave_1: entered promiscuous mode [ 2896.955504][ T9651] syzkaller0: entered promiscuous mode [ 2896.955524][ T9651] syzkaller0: entered allmulticast mode [ 2897.114867][ T853] usb 6-1: USB disconnect, device number 11 [ 2897.261186][T30821] Bluetooth: hci3: command tx timeout [ 2897.414203][T30821] Bluetooth: hci1: command tx timeout [ 2897.663703][ T8710] bond0 (unregistering): Released all slaves [ 2897.793126][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2897.797672][ T8710] tipc: Disabling bearer [ 2897.808709][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9671'. [ 2897.809078][ T8710] tipc: Left network mode [ 2897.898660][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9675'. [ 2898.038517][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2898.110656][T30913] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2898.265082][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2898.270744][T30913] usb 6-1: Using ep0 maxpacket: 8 [ 2898.273942][T30913] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2898.274989][T30913] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2898.275007][T30913] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2898.275023][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2898.275044][T30913] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2898.275063][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2898.275082][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2898.275101][T30913] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2898.275116][T30913] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2898.276147][T30913] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2898.276162][T30913] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2898.276181][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2898.276199][T30913] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2898.276217][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2898.276241][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2898.276261][T30913] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2898.276276][T30913] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2898.277222][T30913] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2898.277242][T30913] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2898.277259][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2898.277272][T30913] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2898.277284][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2898.277296][T30913] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2898.277309][T30913] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2898.277321][T30913] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2898.280145][T30913] usb 6-1: string descriptor 0 read error: -22 [ 2898.280210][T30913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2898.293363][T30913] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2898.495692][T30913] usb 6-1: USB disconnect, device number 12 [ 2898.899467][ T9700] syzkaller0: entered promiscuous mode [ 2898.899482][ T9700] syzkaller0: entered allmulticast mode [ 2899.025129][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9680'. [ 2899.026771][ T9706] team0: No ports can be present during mode change [ 2899.028787][ T9706] tipc: Started in network mode [ 2899.028800][ T9706] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2899.028865][ T9706] tipc: Enabled bearer , priority 0 [ 2899.050674][T14164] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2899.088127][ T8710] hsr_slave_0: left promiscuous mode [ 2899.088468][ T8710] hsr_slave_1: left promiscuous mode [ 2899.093582][ T8710] veth1_macvtap: left promiscuous mode [ 2899.093603][ T8710] veth0_macvtap: left promiscuous mode [ 2899.093649][ T8710] veth1_vlan: left promiscuous mode [ 2899.186660][ T8710] team0 (unregistering): Port device vlan0 removed [ 2899.211349][T14164] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2899.212138][T14164] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2899.212152][T14164] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2899.212161][T14164] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2899.212180][T14164] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2899.213322][T14164] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2899.213334][T14164] usb 8-1: Product: syz [ 2899.213341][T14164] usb 8-1: Manufacturer: syz [ 2899.219018][T14164] cdc_wdm 8-1:1.0: skipping garbage [ 2899.219026][T14164] cdc_wdm 8-1:1.0: skipping garbage [ 2899.246883][T14164] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2899.246901][T14164] cdc_wdm 8-1:1.0: Unknown control protocol [ 2899.311370][ T853] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 2899.331760][T30821] Bluetooth: hci3: command tx timeout [ 2899.349294][ T9720] syzkaller0: entered promiscuous mode [ 2899.349309][ T9720] syzkaller0: entered allmulticast mode [ 2899.423879][ T2535] usb 8-1: USB disconnect, device number 6 [ 2899.479915][ T853] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2899.487771][ T853] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2899.487793][ T853] usb 6-1: config 0 has no interface number 0 [ 2899.487825][ T853] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2899.487848][ T853] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.487878][ T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2899.495059][T30821] Bluetooth: hci1: command tx timeout [ 2899.495862][ T853] usb 6-1: config 0 descriptor?? [ 2899.518326][ T853] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2899.715722][ T9709] iowarrior 6-1:0.1: Error -90 while submitting URB [ 2899.716794][ T8083] usb 6-1: USB disconnect, device number 13 [ 2899.871669][ T2535] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2900.031122][ T2535] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2900.031993][ T2535] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2900.032008][ T2535] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2900.032017][ T2535] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2900.032038][ T2535] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2900.033181][ T2535] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2900.033193][ T2535] usb 8-1: Product: syz [ 2900.033200][ T2535] usb 8-1: Manufacturer: syz [ 2900.036095][ T2535] cdc_wdm 8-1:1.0: skipping garbage [ 2900.036104][ T2535] cdc_wdm 8-1:1.0: skipping garbage [ 2900.039799][ T2535] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 2900.039808][ T2535] cdc_wdm 8-1:1.0: Unknown control protocol [ 2900.829304][ T853] tipc: Node number set to 11578026 [ 2900.829501][ T9729] team0: No ports can be present during mode change [ 2900.829745][ T9731] tipc: Enabling of bearer rejected, already enabled [ 2900.982331][ T9614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2900.987007][ T9614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2900.988033][ T9614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2900.992511][ T9614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2900.993523][ T9614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2900.996771][ T9614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2900.997544][ T9614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2901.003473][ T9614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2901.077648][ T9614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2901.094934][ T9614] 8021q: adding VLAN 0 to HW filter on device team0 [ 2901.102484][T20709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2901.102572][T20709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2901.108794][T20709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2901.108877][T20709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2901.146432][ T9614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2901.430698][ T2535] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2901.454610][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2901.493579][ T9614] veth0_vlan: entered promiscuous mode [ 2901.499618][ T9614] veth1_vlan: entered promiscuous mode [ 2901.523936][ T9614] veth0_macvtap: entered promiscuous mode [ 2901.527817][ T9614] veth1_macvtap: entered promiscuous mode [ 2901.539638][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2901.546181][ T9614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2901.580945][T30821] Bluetooth: hci1: command tx timeout [ 2901.593662][ T2535] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2901.594853][ T2535] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2901.594881][ T2535] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2901.594912][ T2535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.598777][ T9761] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2901.623101][ T2535] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2901.834247][ T2535] usb 8-1: USB disconnect, device number 7 [ 2902.099155][T14164] usb 6-1: USB disconnect, device number 14 [ 2902.115751][ T8711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.115795][ T8711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.115825][ T8711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2902.115854][ T8711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2903.106705][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2903.106724][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2903.151629][T10369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2903.151650][T10369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2903.241950][ T9800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9661'. [ 2903.249893][T30821] Bluetooth: hci1: connection err: -111 [ 2903.580729][T14164] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2903.650754][T30821] Bluetooth: hci1: command tx timeout [ 2903.750625][T14164] usb 8-1: Using ep0 maxpacket: 8 [ 2903.753915][T14164] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2903.754752][T14164] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2903.754772][T14164] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2903.754789][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2903.754803][T14164] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2903.754815][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2903.754827][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2903.754840][T14164] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2903.754853][T14164] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2903.755629][T14164] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2903.755652][T14164] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2903.755677][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2903.755697][T14164] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2903.755715][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2903.755734][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2903.755747][T14164] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2903.755760][T14164] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2903.756602][T14164] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2903.756632][T14164] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2903.756660][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2903.756679][T14164] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2903.756698][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2903.756717][T14164] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2903.756737][T14164] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2903.756758][T14164] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2903.759039][T14164] usb 8-1: string descriptor 0 read error: -22 [ 2903.759133][T14164] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2903.773439][T14164] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2903.972280][T14164] usb 8-1: USB disconnect, device number 8 [ 2904.671781][ T47] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2904.689511][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9723'. [ 2905.321527][ T9845] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 2905.339436][ T8711] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 2905.384399][ T9845] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 2905.390986][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 2905.391471][ T47] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2905.392304][ T47] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2905.392327][ T47] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2905.392338][ T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2905.392349][ T47] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2905.392360][ T47] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2905.392378][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2905.605593][ T47] usb 6-1: usb_control_msg returned -32 [ 2905.605619][ T47] usbtmc 6-1:16.0: can't read capabilities [ 2905.613899][ T47] usb 6-1: USB disconnect, device number 15 [ 2905.773161][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9733'. [ 2906.156350][ T9873] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 2906.174424][ T8711] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 2906.225346][ T9873] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 2906.909837][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9736'. [ 2907.001733][ T9881] syzkaller0: entered promiscuous mode [ 2907.001749][ T9881] syzkaller0: entered allmulticast mode [ 2908.186240][ T9890] device-mapper: table: 248:0: zero-length target [ 2908.186250][ T9890] device-mapper: ioctl: error adding target to table [ 2908.188853][ T8124] Bluetooth: hci2: connection err: -111 [ 2908.772470][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 2908.772502][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 2909.555545][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9742'. [ 2909.787040][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9745'. [ 2909.896164][ T9916] syzkaller0: entered promiscuous mode [ 2909.896185][ T9916] syzkaller0: entered allmulticast mode [ 2910.056569][ T9921] tipc: Resetting bearer [ 2910.062898][ T9921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2910.063401][ T9922] tipc: Enabling of bearer rejected, already enabled [ 2910.237377][ T9928] syzkaller0: entered promiscuous mode [ 2910.237400][ T9928] syzkaller0: entered allmulticast mode [ 2910.621680][ T9940] syzkaller0: entered promiscuous mode [ 2910.621696][ T9940] syzkaller0: entered allmulticast mode [ 2910.990938][ T9958] tipc: Resetting bearer [ 2910.995598][ T9958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2911.030497][ T9958] tipc: Enabling of bearer rejected, already enabled [ 2911.100756][ T7431] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2911.251404][ T7431] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2911.252300][ T7431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2911.252336][ T7431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2911.263187][ T7431] as10x_usb: device has been detected [ 2911.263579][ T7431] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2911.276471][ T7431] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2911.316980][ T7431] as10x_usb: error during firmware upload part1 [ 2911.317683][ T7431] Registered device Abilis Systems DVB-Titan [ 2911.357226][ T9962] syzkaller0: entered promiscuous mode [ 2911.357240][ T9962] syzkaller0: entered allmulticast mode [ 2911.848116][ T9973] syzkaller0: entered promiscuous mode [ 2911.848136][ T9973] syzkaller0: entered allmulticast mode [ 2912.076517][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9775'. [ 2912.118683][ T9984] FAULT_INJECTION: forcing a failure. [ 2912.118683][ T9984] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.118715][ T9984] CPU: 2 UID: 0 PID: 9984 Comm: syz.2.9774 Tainted: G L syzkaller #0 PREEMPT(full) [ 2912.118739][ T9984] Tainted: [L]=SOFTLOCKUP [ 2912.118746][ T9984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2912.118756][ T9984] Call Trace: [ 2912.118762][ T9984] [ 2912.118770][ T9984] dump_stack_lvl+0x100/0x190 [ 2912.118800][ T9984] should_fail_ex.cold+0x5/0xa [ 2912.118823][ T9984] should_failslab+0xc2/0x120 [ 2912.118852][ T9984] __kmalloc_cache_noprof+0x91/0x6d0 [ 2912.118874][ T9984] ? assoc_array_insert+0x10b/0x32c0 [ 2912.118899][ T9984] assoc_array_insert+0x10b/0x32c0 [ 2912.118918][ T9984] ? __mutex_lock+0x26c/0x1bd0 [ 2912.118938][ T9984] ? __key_link_lock+0x92/0xb0 [ 2912.118977][ T9984] ? __pfx___mutex_lock+0x10/0x10 [ 2912.119000][ T9984] ? __pfx_assoc_array_insert+0x10/0x10 [ 2912.119025][ T9984] ? down_write+0x146/0x1f0 [ 2912.119067][ T9984] ? __pfx_down_write+0x10/0x10 [ 2912.119093][ T9984] __key_link_begin+0xf5/0x260 [ 2912.119121][ T9984] key_instantiate_and_link+0x201/0x4b0 [ 2912.119149][ T9984] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 2912.119175][ T9984] ? keyctl_get_persistent+0x537/0x940 [ 2912.119214][ T9984] keyring_alloc+0x7a/0xc0 [ 2912.119240][ T9984] keyctl_get_persistent+0x72b/0x940 [ 2912.119268][ T9984] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 2912.119292][ T9984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2912.119315][ T9984] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 2912.119349][ T9984] __ia32_compat_sys_keyctl+0x38f/0x550 [ 2912.119376][ T9984] __do_fast_syscall_32+0x13a/0x8b0 [ 2912.119397][ T9984] do_fast_syscall_32+0x32/0x70 [ 2912.119416][ T9984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2912.119439][ T9984] RIP: 0023:0xf7f87fec [ 2912.119472][ T9984] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 2912.119480][ T9984] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 2912.119500][ T9984] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 2912.119513][ T9984] RDX: 000000003eb7ab4f RSI: 0000000000000000 RDI: 0000000000000000 [ 2912.119525][ T9984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2912.119537][ T9984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2912.119548][ T9984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2912.119576][ T9984] [ 2912.247091][T14164] usb 5-1: USB disconnect, device number 9 [ 2912.276299][T14164] Unregistered device Abilis Systems DVB-Titan [ 2912.277104][T14164] as10x_usb: device has been disconnected [ 2912.312734][ T9993] rnbd_client L607: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 2912.312802][ T9993] rnbd_client L1256: Session s+ not found, and path parameter not given [ 2912.548426][T10003] syzkaller0: entered promiscuous mode [ 2912.548443][T10003] syzkaller0: entered allmulticast mode [ 2913.015550][ T8124] Bluetooth: hci0: connection err: -111 [ 2914.182703][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9789'. [ 2914.520694][ T2535] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 2914.619753][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9803'. [ 2914.650640][ T2535] usb 7-1: device descriptor read/64, error -71 [ 2914.660787][T30913] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2914.815850][T30913] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2914.820927][T30913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2914.820955][T30913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2914.848882][T30913] as10x_usb: device has been detected [ 2914.849190][T30913] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2914.920259][T30913] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2914.920668][ T2535] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 2915.056978][T30913] as10x_usb: error during firmware upload part1 [ 2915.059789][T30913] Registered device Abilis Systems DVB-Titan [ 2915.070722][ T2535] usb 7-1: device descriptor read/64, error -71 [ 2915.182732][ T2535] usb usb7-port1: attempt power cycle [ 2915.226583][ T8124] Bluetooth: hci3: connection err: -111 [ 2915.226830][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9805'. [ 2915.530788][ T2535] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 2915.558178][ T2535] usb 7-1: device descriptor read/8, error -71 [ 2915.802589][ T2535] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 2915.820022][ T8083] usb 6-1: USB disconnect, device number 16 [ 2915.821190][ T2535] usb 7-1: device descriptor read/8, error -71 [ 2915.840201][T10062] snd_dummy snd_dummy.0: control 2:0:0:syz0:0 is already present [ 2915.842311][ T8083] Unregistered device Abilis Systems DVB-Titan [ 2915.844290][ T8083] as10x_usb: device has been disconnected [ 2915.938517][ T2535] usb usb7-port1: unable to enumerate USB device [ 2917.511183][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9816'. [ 2917.839064][T10102] /dev/loop1: Can't open blockdev [ 2917.911568][T10104] syzkaller0: entered promiscuous mode [ 2917.911586][T10104] syzkaller0: entered allmulticast mode [ 2918.151287][ T3248] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2918.303067][ T3248] usb 8-1: Using ep0 maxpacket: 8 [ 2918.303846][ T3248] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2918.304937][ T3248] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2918.304965][ T3248] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2918.304995][ T3248] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2918.305017][ T3248] usb 8-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 2918.305034][ T3248] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2918.305061][ T3248] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2918.305922][ T3248] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2918.305948][ T3248] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2918.305997][ T3248] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2918.306019][ T3248] usb 8-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 2918.306036][ T3248] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2918.306063][ T3248] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2918.306972][ T3248] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2918.306997][ T3248] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2918.307025][ T3248] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2918.307047][ T3248] usb 8-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 2918.307070][ T3248] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2918.307093][ T3248] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2918.320198][ T3248] usb 8-1: string descriptor 0 read error: -22 [ 2918.320300][ T3248] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.324812][ T3248] adutux 8-1:168.0: interrupt endpoints not found [ 2918.536021][ T3248] usb 8-1: USB disconnect, device number 9 [ 2919.213296][ T45] audit: type=1804 audit(1792209487.293:1142): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9825" name="bus" dev="ramfs" ino=159557 res=1 errno=0 [ 2919.213681][ T45] audit: type=1804 audit(1792209487.293:1143): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9825" name="bus" dev="ramfs" ino=159557 res=1 errno=0 [ 2920.004204][T10134] qnx6: unable to read the first superblock [ 2920.004384][T10134] qnx6: unable to read the first superblock [ 2920.004393][T10134] qnx6: unable to read the first superblock [ 2920.212706][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9832'. [ 2920.969350][T10111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2921.181773][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9843'. [ 2921.211324][T21475] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2921.360765][T21475] usb 8-1: Using ep0 maxpacket: 8 [ 2921.361960][T21475] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2921.363067][T21475] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2921.363096][T21475] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2921.363126][T21475] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2921.363147][T21475] usb 8-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 2921.363164][T21475] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2921.363185][T21475] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2921.364230][T21475] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2921.364256][T21475] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2921.364286][T21475] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2921.364308][T21475] usb 8-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 2921.364325][T21475] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2921.364347][T21475] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2921.365342][T21475] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2921.365368][T21475] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2921.365396][T21475] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2921.365417][T21475] usb 8-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 2921.365433][T21475] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2921.365455][T21475] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2921.368814][T21475] usb 8-1: string descriptor 0 read error: -22 [ 2921.368913][T21475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2921.379831][T21475] adutux 8-1:168.0: interrupt endpoints not found [ 2921.584443][T21475] usb 8-1: USB disconnect, device number 10 [ 2921.644024][ T45] audit: type=1804 audit(1792209489.733:1144): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9837" name="bus" dev="ramfs" ino=160842 res=1 errno=0 [ 2921.644357][ T45] audit: type=1804 audit(1792209489.733:1145): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9837" name="bus" dev="ramfs" ino=160842 res=1 errno=0 [ 2922.085995][T10171] rnbd_client L202: map_device: Unknown parameter or missing value 'device_path' [ 2922.529584][ T45] audit: type=1804 audit(1792209490.613:1146): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9856" name="bus" dev="ramfs" ino=161806 res=1 errno=0 [ 2922.529838][ T45] audit: type=1804 audit(1792209490.613:1147): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9856" name="bus" dev="ramfs" ino=161806 res=1 errno=0 [ 2923.467707][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9849'. [ 2923.661663][T10196] rnbd_client L213: map_device: Parameters missing [ 2923.756261][ T45] audit: type=1804 audit(1792209491.843:1148): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9858" name="bus" dev="ramfs" ino=161830 res=1 errno=0 [ 2923.756519][ T45] audit: type=1804 audit(1792209491.843:1149): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9858" name="bus" dev="ramfs" ino=161830 res=1 errno=0 [ 2923.809610][T30821] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2923.813157][T30821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2923.816059][T30821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2923.816750][T30821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2923.817167][T30821] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2923.980989][ T8083] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2924.025627][T10208] rxe_eth0 speed is unknown, defaulting to 1000 [ 2924.112996][ T8083] usb 5-1: device descriptor read/64, error -71 [ 2924.306995][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9862'. [ 2924.339780][ T8124] Bluetooth: hci1: connection err: -111 [ 2924.340071][T10235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9861'. [ 2924.350678][ T8083] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2924.490649][ T8083] usb 5-1: device descriptor read/64, error -71 [ 2924.553645][T10240] rnbd_client L202: map_device: Unknown parameter or missing value 'sessnam' [ 2924.602224][ T8083] usb usb5-port1: attempt power cycle [ 2924.841487][ T8711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.875348][T10208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2924.875504][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 2924.875605][T10208] bridge_slave_0: entered allmulticast mode [ 2924.877014][T10208] bridge_slave_0: entered promiscuous mode [ 2924.879546][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2924.879622][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 2924.879939][T10208] bridge_slave_1: entered allmulticast mode [ 2924.881976][T10208] bridge_slave_1: entered promiscuous mode [ 2924.913181][T10208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2924.918922][T10208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2924.919009][ T45] audit: type=1804 audit(1792209493.003:1150): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9866" name="bus" dev="ramfs" ino=161912 res=1 errno=0 [ 2924.919669][ T45] audit: type=1804 audit(1792209493.003:1151): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9866" name="bus" dev="ramfs" ino=161912 res=1 errno=0 [ 2924.940826][ T8083] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2924.946873][ T8711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.972771][ T8083] usb 5-1: device descriptor read/8, error -71 [ 2924.973781][T10208] team0: Port device team_slave_0 added [ 2924.975479][T10208] team0: Port device team_slave_1 added [ 2924.991485][T10208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2924.991496][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2924.991509][T10208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2924.992527][T10208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2924.992535][T10208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2924.992548][T10208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2925.051992][T10208] hsr_slave_0: entered promiscuous mode [ 2925.052775][T10208] hsr_slave_1: entered promiscuous mode [ 2925.053303][T10208] debugfs: 'hsr0' already exists in 'hsr' [ 2925.053321][T10208] Cannot create hsr debugfs directory [ 2925.078249][ T8711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.141350][ T8711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.211204][ T8083] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2925.231761][ T8083] usb 5-1: device descriptor read/8, error -71 [ 2925.341182][ T8083] usb usb5-port1: unable to enumerate USB device [ 2925.405071][ T8711] bond0 (unregistering): Released all slaves [ 2925.469451][ T8711] tipc: Disabling bearer [ 2925.470080][ T8711] tipc: Left network mode [ 2925.493356][T10258] syzkaller0: entered promiscuous mode [ 2925.493372][T10258] syzkaller0: entered allmulticast mode [ 2925.902354][ T8124] Bluetooth: hci4: command tx timeout [ 2926.746657][T10268] rnbd_client L202: map_device: Unknown parameter or missing value 'sessn' [ 2926.862262][T10272] rnbd_client L127: Can't parse path ip:127: -22 [ 2927.233394][ T45] audit: type=1804 audit(1792209495.323:1152): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9878" name="bus" dev="ramfs" ino=160576 res=1 errno=0 [ 2927.233995][ T45] audit: type=1804 audit(1792209495.323:1153): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9878" name="bus" dev="ramfs" ino=160576 res=1 errno=0 [ 2927.504347][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9879'. [ 2927.810933][ T853] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2927.815290][ T8711] hsr_slave_0: left promiscuous mode [ 2927.818941][ T8711] hsr_slave_1: left promiscuous mode [ 2927.836068][ T8711] veth1_macvtap: left promiscuous mode [ 2927.836116][ T8711] veth0_macvtap: left promiscuous mode [ 2927.836200][ T8711] veth1_vlan: left promiscuous mode [ 2927.971763][ T8124] Bluetooth: hci4: command tx timeout [ 2928.001504][ T853] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2928.002476][ T853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2928.002519][ T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2928.011192][ T853] as10x_usb: device has been detected [ 2928.011500][ T853] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2928.037131][ T853] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2928.038087][ T8711] team0 (unregistering): Port device vlan0 removed [ 2928.055462][ T853] as10x_usb: error during firmware upload part1 [ 2928.059559][ T853] Registered device Abilis Systems DVB-Titan [ 2928.150497][T10306] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 2928.391376][T10309] rnbd_client L202: map_device: Unknown parameter or missing value 'sess' [ 2928.485157][T10208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2928.496767][T10208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2928.497190][T10208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2928.512018][T10208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2928.512593][T10208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2928.515341][T10208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2928.516082][T10208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2928.526710][T10208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2928.592378][ T45] audit: type=1804 audit(1792209496.683:1154): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9888" name="bus" dev="ramfs" ino=162965 res=1 errno=0 [ 2928.595054][ T45] audit: type=1804 audit(1792209496.683:1155): pid=10326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.9888" name="bus" dev="ramfs" ino=162965 res=1 errno=0 [ 2928.596751][T10208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2928.606034][T10208] 8021q: adding VLAN 0 to HW filter on device team0 [ 2928.628785][T10369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2928.628832][T10369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2928.636421][T10369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2928.636466][T10369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2929.047948][T10208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2929.093023][T10208] veth0_vlan: entered promiscuous mode [ 2929.104620][T10208] veth1_vlan: entered promiscuous mode [ 2929.134709][T10208] veth0_macvtap: entered promiscuous mode [ 2929.138246][T10208] veth1_macvtap: entered promiscuous mode [ 2929.149264][T10208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2929.159119][T10208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2929.213170][ T8711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.213215][ T8711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.213245][ T8711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.213273][ T8711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2929.264672][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.264691][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.287146][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2929.287160][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2929.508907][T10349] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 2930.060674][ T8124] Bluetooth: hci4: command tx timeout [ 2930.080757][ T7456] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2930.232896][ T7456] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2930.233865][ T7456] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2930.233893][ T7456] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2930.233930][ T7456] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.236833][T10364] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2930.260118][ T7456] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2930.445704][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9906'. [ 2930.650821][T21475] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2930.820756][T21475] usb 6-1: Using ep0 maxpacket: 8 [ 2930.821848][T21475] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2930.822908][T21475] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2930.822948][T21475] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2930.822969][T21475] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2930.822988][T21475] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2930.823008][T21475] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2930.823026][T21475] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2930.823057][T21475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2931.030703][ T47] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2931.032065][T21475] usb 6-1: usb_control_msg returned -32 [ 2931.032101][T21475] usbtmc 6-1:16.0: can't read capabilities [ 2931.046446][T21475] usb 6-1: USB disconnect, device number 17 [ 2931.181414][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2931.182383][ T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2931.182420][ T47] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2931.184344][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2931.184365][ T47] usb 5-1: Product: syz [ 2931.184378][ T47] usb 5-1: Manufacturer: syz [ 2931.184391][ T47] usb 5-1: SerialNumber: syz [ 2931.189769][ T47] cdc_mbim 5-1:1.0: skipping garbage [ 2931.395527][T10375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2932.008806][ T47] cdc_mbim 5-1:1.0: bind() failure [ 2932.017376][ T47] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2932.017414][ T47] cdc_ncm 5-1:1.1: bind() failure [ 2932.024332][ T47] usb 5-1: USB disconnect, device number 14 [ 2932.140687][ T8124] Bluetooth: hci4: command tx timeout [ 2932.594868][T10384] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 2932.831695][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9909'. [ 2932.911317][ T853] usb 8-1: USB disconnect, device number 11 [ 2933.340716][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2933.409316][ T8124] Bluetooth: hci3: connection err: -111 [ 2933.409693][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9914'. [ 2933.501348][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2933.502280][ T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2933.502317][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2933.502346][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2933.505031][ T47] usb 5-1: config 0 descriptor?? [ 2933.509984][ T47] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2933.544607][T10411] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 2933.848158][T10419] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 2933.848215][T10419] rnbd_client L1256: Session s+ not found, and path parameter not given [ 2933.997389][ T7456] usb 7-1: USB disconnect, device number 12 [ 2934.003557][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9921'. [ 2934.033206][ T4926] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2934.046492][ T7456] Unregistered device Abilis Systems DVB-Titan [ 2934.053018][ T7456] as10x_usb: device has been disconnected [ 2934.191129][ T4926] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2934.192015][ T4926] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2934.192034][ T4926] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2934.192052][ T4926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.194880][T10417] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2934.229168][ T4926] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2934.459089][ T853] usb 8-1: USB disconnect, device number 12 [ 2934.550846][T10298] udevd[10298]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2934.847913][T10446] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 2934.847969][T10446] rnbd_client L1256: Session s+ not found, and path parameter not given [ 2934.887366][T10448] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 2935.228455][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9934'. [ 2936.111903][ T8083] usb 5-1: USB disconnect, device number 15 [ 2936.165726][T10474] binder: BINDER_SET_CONTEXT_MGR already set [ 2936.165741][T10474] binder: 10472:10474 ioctl 4018620d 80004a80 returned -16 [ 2936.470929][ T853] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2936.538014][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9945'. [ 2936.621163][ T853] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2936.622366][ T853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2936.622475][ T853] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2936.624241][ T853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2936.624253][ T853] usb 7-1: Product: syz [ 2936.624261][ T853] usb 7-1: Manufacturer: syz [ 2936.624269][ T853] usb 7-1: SerialNumber: syz [ 2936.630682][ T853] cdc_mbim 7-1:1.0: skipping garbage [ 2936.840222][T10481] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2937.120714][ T4926] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2937.271078][ T4926] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2937.271885][ T4926] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2937.271909][ T4926] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2937.271929][ T4926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.273240][ T4926] usb 8-1: config 0 descriptor?? [ 2937.275281][ T4926] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2937.451067][ T853] cdc_mbim 7-1:1.0: bind() failure [ 2937.457533][ T853] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 2937.457556][ T853] cdc_ncm 7-1:1.1: bind() failure [ 2937.467319][ T853] usb 7-1: USB disconnect, device number 13 [ 2937.820688][ T7456] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2937.981166][ T7456] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2937.982275][ T7456] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2937.982303][ T7456] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2937.982336][ T7456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.988522][T10514] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2937.990476][ T7456] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2938.171473][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9960'. [ 2938.277970][ T853] usb 5-1: USB disconnect, device number 16 [ 2938.515781][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9964'. [ 2938.860856][ T8083] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 2939.011217][ T8083] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2939.011680][ T8083] usb 7-1: config 0 has no interfaces? [ 2939.011696][ T8083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2939.013009][ T8083] usb 7-1: config 0 descriptor?? [ 2939.218257][ T7456] usb 7-1: USB disconnect, device number 14 [ 2939.684990][ T45] audit: type=1804 audit(1792209507.773:1156): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9969" name="bus" dev="ramfs" ino=162292 res=1 errno=0 [ 2939.685694][ T45] audit: type=1804 audit(1792209507.773:1157): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9969" name="bus" dev="ramfs" ino=162292 res=1 errno=0 [ 2939.906648][ T7456] usb 8-1: USB disconnect, device number 13 [ 2940.390706][ T853] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2940.551344][ T853] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2940.554043][ T853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2940.554081][ T853] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2940.554113][ T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2940.558210][ T853] usb 7-1: config 0 descriptor?? [ 2940.563338][ T853] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2940.721018][T21475] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 2940.743647][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9981'. [ 2940.873427][T21475] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2940.874028][T21475] usb 6-1: config 0 has no interfaces? [ 2940.874056][T21475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2940.878692][T21475] usb 6-1: config 0 descriptor?? [ 2941.091515][ T8083] usb 6-1: USB disconnect, device number 18 [ 2942.200664][ T853] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2942.351474][ T853] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2942.352780][ T853] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2942.352811][ T853] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2942.355472][ T853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.355491][ T853] usb 5-1: Product: syz [ 2942.355502][ T853] usb 5-1: Manufacturer: syz [ 2942.355513][ T853] usb 5-1: SerialNumber: syz [ 2942.361448][ T853] cdc_mbim 5-1:1.0: skipping garbage [ 2942.572842][T10610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2942.976852][ T853] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 2942.976965][ T853] cdc_mbim 5-1:1.0: bind() failure [ 2942.981837][ T853] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2942.981874][ T853] cdc_ncm 5-1:1.1: bind() failure [ 2942.987891][ T853] usb 5-1: USB disconnect, device number 17 [ 2943.162581][ T7456] usb 7-1: USB disconnect, device number 15 [ 2943.614197][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9995'. [ 2945.712825][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10008'. [ 2946.216022][ T8124] Bluetooth: hci3: connection err: -111 [ 2946.216701][T10699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10013'. [ 2946.730673][ T7456] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2946.880647][ T7456] usb 6-1: Using ep0 maxpacket: 8 [ 2946.881199][ T7456] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2946.883307][ T7456] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2946.883328][ T7456] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 2946.884375][ T7456] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2946.884394][ T7456] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 2946.885398][ T7456] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2946.885416][ T7456] usb 6-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 2946.888519][ T7456] usb 6-1: string descriptor 0 read error: -22 [ 2946.888618][ T7456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2946.891433][ T7456] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 2946.891452][ T7456] usb 6-1: no configuration chosen from 3 choices [ 2947.440721][ T3248] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 2947.460996][ T8124] Bluetooth: hci1: connection err: -111 [ 2947.461351][T10732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10026'. [ 2947.591234][ T3248] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2947.592262][ T3248] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2947.592279][ T3248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2947.592292][ T3248] usb 5-1: config 0 has no interface number 0 [ 2947.592318][ T3248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2947.595062][ T3248] usb 5-1: config 0 descriptor?? [ 2947.598697][ T3248] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2947.744867][T10740] FAULT_INJECTION: forcing a failure. [ 2947.744867][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.744904][T10740] CPU: 0 UID: 0 PID: 10740 Comm: syz.2.10029 Tainted: G L syzkaller #0 PREEMPT(full) [ 2947.744931][T10740] Tainted: [L]=SOFTLOCKUP [ 2947.744939][T10740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2947.744951][T10740] Call Trace: [ 2947.744958][T10740] [ 2947.744966][T10740] dump_stack_lvl+0x100/0x190 [ 2947.744998][T10740] should_fail_ex.cold+0x5/0xa [ 2947.745024][T10740] should_failslab+0xc2/0x120 [ 2947.745055][T10740] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 2947.745084][T10740] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 2947.745114][T10740] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 2947.745138][T10740] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 2947.745164][T10740] alloc_inode+0x68/0x250 [ 2947.745185][T10740] new_inode+0x22/0x1c0 [ 2947.745208][T10740] hugetlbfs_get_inode+0x39a/0x700 [ 2947.745233][T10740] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 2947.745259][T10740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2947.745284][T10740] hugetlb_file_setup+0x15b/0x5b0 [ 2947.745313][T10740] ksys_mmap_pgoff+0x242/0x610 [ 2947.745344][T10740] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2947.745386][T10740] __do_fast_syscall_32+0x13a/0x8b0 [ 2947.745412][T10740] do_fast_syscall_32+0x32/0x70 [ 2947.745435][T10740] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2947.745460][T10740] RIP: 0023:0xf7f87fec [ 2947.745482][T10740] Code: Unable to access opcode bytes at 0xf7f87fc2. [ 2947.745492][T10740] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 2947.745512][T10740] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 2947.745524][T10740] RDX: 0000000002000009 RSI: 000000000005c832 RDI: 00000000ffffffff [ 2947.745536][T10740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2947.745547][T10740] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2947.745558][T10740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2947.745584][T10740] [ 2947.803177][ T4926] usb 5-1: USB disconnect, device number 18 [ 2949.421072][T10779] fuse: Unknown parameter '0x0000000000000003' [ 2949.496329][ T4926] usb 6-1: USB disconnect, device number 19 [ 2949.531193][ T7456] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 2949.691375][ T7456] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2949.692392][ T7456] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2949.692410][ T7456] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.692424][ T7456] usb 5-1: config 0 has no interface number 0 [ 2949.692453][ T7456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.694747][ T7456] usb 5-1: config 0 descriptor?? [ 2949.698217][ T7456] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2949.898823][ T7431] usb 5-1: USB disconnect, device number 19 [ 2950.070824][ T7456] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2950.220663][ T853] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2950.223527][ T7456] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2950.224555][ T7456] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2950.224589][ T7456] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2950.226466][ T7456] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.226485][ T7456] usb 8-1: Product: syz [ 2950.226497][ T7456] usb 8-1: Manufacturer: syz [ 2950.226509][ T7456] usb 8-1: SerialNumber: syz [ 2950.233734][ T7456] cdc_mbim 8-1:1.0: skipping garbage [ 2950.371123][ T853] usb 6-1: Using ep0 maxpacket: 8 [ 2950.372595][ T853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2950.373581][ T853] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2950.373604][ T853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2950.373617][ T853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2950.373629][ T853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2950.373642][ T853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2950.373653][ T853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2950.373672][ T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2950.441166][T10799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2950.585135][ T853] usb 6-1: GET_CAPABILITIES returned 0 [ 2950.585158][ T853] usbtmc 6-1:16.0: can't read capabilities [ 2950.720682][ T3248] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2950.793269][T20750] usb 6-1: USB disconnect, device number 20 [ 2950.844218][ T7456] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 2950.844254][ T7456] cdc_mbim 8-1:1.0: bind() failure [ 2950.849818][ T7456] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 2950.849849][ T7456] cdc_ncm 8-1:1.1: bind() failure [ 2950.859029][ T7456] usb 8-1: USB disconnect, device number 14 [ 2950.881093][ T3248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2950.882168][ T3248] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2950.882190][ T3248] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2950.883676][ T3248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2950.883689][ T3248] usb 5-1: Product: syz [ 2950.883697][ T3248] usb 5-1: Manufacturer: syz [ 2950.883704][ T3248] usb 5-1: SerialNumber: syz [ 2950.886845][ T3248] cdc_mbim 5-1:1.0: skipping garbage [ 2951.092185][T10817] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2951.497102][ T3248] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 2951.497136][ T3248] cdc_mbim 5-1:1.0: bind() failure [ 2951.500109][ T3248] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 2951.500130][ T3248] cdc_ncm 5-1:1.1: bind() failure [ 2951.506238][ T3248] usb 5-1: USB disconnect, device number 20 [ 2951.620677][T21475] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 2951.771888][T21475] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2951.772710][T21475] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2951.772724][T21475] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2951.772733][T21475] usb 8-1: config 0 has no interface number 0 [ 2951.772750][T21475] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2951.772770][T21475] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.774062][T21475] usb 8-1: config 0 descriptor?? [ 2951.783927][T21475] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 2951.820682][ T853] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2951.978446][T21475] usb 8-1: USB disconnect, device number 15 [ 2951.983234][ T853] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2951.984145][ T853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2951.984168][ T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2951.991882][ T853] as10x_usb: device has been detected [ 2951.992265][ T853] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2951.998569][ T853] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2952.001360][ T853] as10x_usb: error during firmware upload part1 [ 2952.001631][ T853] Registered device Abilis Systems DVB-Titan [ 2952.099397][T10863] overlayfs: failed to resolve './file1/file0': -2 [ 2952.948744][T21475] usb 7-1: USB disconnect, device number 16 [ 2952.975317][T21475] Unregistered device Abilis Systems DVB-Titan [ 2952.978293][T21475] as10x_usb: device has been disconnected [ 2953.300671][ T3248] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2953.400682][ T8083] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 2953.451935][ T3248] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2953.453083][ T3248] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2953.453103][ T3248] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2953.453131][ T3248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.551196][ T8083] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2953.552001][ T8083] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2953.552014][ T8083] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2953.552024][ T8083] usb 5-1: config 0 has no interface number 0 [ 2953.552042][ T8083] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2953.552062][ T8083] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.553582][ T8083] usb 5-1: config 0 descriptor?? [ 2953.555948][ T8083] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2953.677928][ T3248] usb 6-1: USB disconnect, device number 21 [ 2953.759421][ T7456] usb 5-1: USB disconnect, device number 21 [ 2953.781817][T10913] overlayfs: failed to resolve './file1/file0': -2 [ 2954.483645][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10089'. [ 2956.350679][ T5854] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 2956.511685][ T5854] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2956.512525][ T5854] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2956.512539][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2956.512548][ T5854] usb 6-1: config 0 has no interface number 0 [ 2956.512565][ T5854] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2956.512585][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2956.514168][ T5854] usb 6-1: config 0 descriptor?? [ 2956.517581][ T5854] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 2956.722000][T21475] usb 6-1: USB disconnect, device number 22 [ 2957.724135][T10929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2957.947327][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10101'. [ 2958.264053][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10102'. [ 2958.761679][ T3248] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2958.934897][ T3248] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2958.944150][ T3248] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2958.944507][ T3248] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2958.945303][ T3248] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2958.980342][T10983] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2959.065890][ T3248] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2959.223303][ T3248] usb 7-1: USB disconnect, device number 17 [ 2959.232840][ T8124] Bluetooth: hci0: connection err: -111 [ 2959.232957][T10992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10108'. [ 2959.250653][ T853] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 2959.401747][ T853] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2959.403142][ T853] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2959.403162][ T853] usb 8-1: config 0 has no interface number 0 [ 2959.403193][ T853] usb 8-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2959.403222][ T853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.405729][ T853] usb 8-1: config 0 descriptor?? [ 2959.409018][ T853] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 2959.613138][ T853] usb 8-1: USB disconnect, device number 16 [ 2960.206403][T11034] fuse: Unknown parameter 'grou00000000000000000000' [ 2960.396288][T11041] syzkaller0: entered promiscuous mode [ 2960.396312][T11041] syzkaller0: entered allmulticast mode [ 2960.590750][T21475] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2960.740648][T21475] usb 7-1: Using ep0 maxpacket: 8 [ 2960.741399][T21475] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2960.742543][T21475] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2960.742573][T21475] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2960.742602][T21475] usb 7-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 2960.742625][T21475] usb 7-1: config 168 interface 0 has no altsetting 0 [ 2960.743542][T21475] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2960.743570][T21475] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2960.743597][T21475] usb 7-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 2960.743620][T21475] usb 7-1: config 168 interface 0 has no altsetting 0 [ 2960.744514][T21475] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2960.744540][T21475] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2960.744609][T21475] usb 7-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 2960.744632][T21475] usb 7-1: config 168 interface 0 has no altsetting 0 [ 2960.747253][T21475] usb 7-1: string descriptor 0 read error: -22 [ 2960.747358][T21475] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2960.752098][T21475] adutux 7-1:168.0: interrupt endpoints not found [ 2960.953648][T21475] usb 7-1: USB disconnect, device number 18 [ 2961.740744][ T9509] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2961.881372][ T9509] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2961.882290][ T9509] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2961.882326][ T9509] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2961.896013][ T9509] as10x_usb: device has been detected [ 2961.896578][ T9509] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2961.917963][ T9509] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 2961.924424][ T9509] as10x_usb: error during firmware upload part1 [ 2961.924853][ T9509] Registered device Abilis Systems DVB-Titan [ 2962.310809][ T9509] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 2962.461127][ T9509] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2962.461941][ T9509] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2962.461954][ T9509] usb 5-1: config 0 has no interface number 0 [ 2962.461977][ T9509] usb 5-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2962.461994][ T9509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2962.463190][ T9509] usb 5-1: config 0 descriptor?? [ 2962.467322][ T9509] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 2962.666683][ T5854] usb 5-1: USB disconnect, device number 22 [ 2962.776124][T11012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2962.845376][ T8083] usb 7-1: USB disconnect, device number 19 [ 2962.859806][ T8083] Unregistered device Abilis Systems DVB-Titan [ 2962.863361][ T8083] as10x_usb: device has been disconnected [ 2962.953863][T11065] fuse: Unknown parameter 'grou00000000000000000000' [ 2963.229010][T11072] fuse: Unknown parameter '0x0000000000000003' [ 2964.124897][T11085] overlayfs: failed to resolve './file1/file0': -2 [ 2964.475608][ T9509] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 2964.647187][ T9509] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2964.654476][ T9509] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2964.654500][ T9509] usb 6-1: config 0 has no interface number 0 [ 2964.654533][ T9509] usb 6-1: config 0 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2964.654562][ T9509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.656772][ T9509] usb 6-1: config 0 descriptor?? [ 2964.660331][ T9509] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 2964.750701][ T7456] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2964.871441][ T5854] usb 6-1: USB disconnect, device number 23 [ 2964.910696][ T7456] usb 5-1: Using ep0 maxpacket: 8 [ 2964.911418][ T7456] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2964.912402][ T7456] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 2964.912440][ T7456] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2964.912461][ T7456] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2964.912480][ T7456] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2964.912500][ T7456] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2964.912518][ T7456] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2964.912550][ T7456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2964.993405][T11104] syzkaller0: entered promiscuous mode [ 2964.993430][T11104] syzkaller0: entered allmulticast mode [ 2965.009429][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10148'. [ 2965.129432][ T7456] usb 5-1: GET_CAPABILITIES returned 0 [ 2965.129456][ T7456] usbtmc 5-1:16.0: can't read capabilities [ 2965.334293][ T7456] usb 5-1: USB disconnect, device number 23 [ 2966.647404][T11113] bridge_slave_0: left allmulticast mode [ 2966.647422][T11113] bridge_slave_0: left promiscuous mode [ 2966.647542][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2966.688353][T11113] bridge_slave_1: left allmulticast mode [ 2966.688462][T11113] bridge_slave_1: left promiscuous mode [ 2966.689089][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2966.729558][T11113] bond0: (slave bond_slave_0): Releasing backup interface [ 2966.737110][T11113] bond0: (slave bond_slave_1): Releasing backup interface [ 2966.748279][T11113] team0: Port device team_slave_0 removed [ 2966.754448][T11113] team0: Port device team_slave_1 removed [ 2966.755074][T11113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2966.755091][T11113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2966.757116][T11113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2966.757132][T11113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2966.761654][T11113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2966.764439][T11115] vlan0: entered promiscuous mode [ 2966.771754][T11115] team0: Port device vlan0 added [ 2966.778666][T11116] tipc: Started in network mode [ 2966.778682][T11116] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2966.778791][T11116] tipc: Enabled bearer , priority 0 [ 2966.866461][T11130] Bluetooth: MGMT ver 1.23 [ 2967.110695][ T853] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 2967.119837][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10167'. [ 2967.133055][T11146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10166'. [ 2967.136751][ T8124] Bluetooth: hci1: connection err: -111 [ 2967.162812][T11151] fuse: Unknown parameter 'fd0x0000000000000003' [ 2967.205484][T11153] syzkaller0: entered promiscuous mode [ 2967.205509][T11153] syzkaller0: entered allmulticast mode [ 2967.265096][ T853] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2967.273532][ T853] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2967.273548][ T853] usb 6-1: config 0 has no interface number 0 [ 2967.273566][ T853] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2967.273584][ T853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.275387][ T853] usb 6-1: config 0 descriptor?? [ 2967.283249][ T853] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 2967.487480][ T5854] usb 6-1: USB disconnect, device number 24 [ 2968.263834][T21475] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2968.414793][T21475] usb 6-1: Using ep0 maxpacket: 8 [ 2968.415267][T21475] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2968.416265][T21475] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2968.416283][T21475] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2968.416317][T21475] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2968.416334][T21475] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2968.416347][T21475] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2968.417571][T21475] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2968.417589][T21475] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2968.417606][T21475] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2968.417619][T21475] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2968.417633][T21475] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2968.418366][T21475] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2968.418382][T21475] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2968.418399][T21475] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2968.418412][T21475] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2968.418426][T21475] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2968.420879][T21475] usb 6-1: string descriptor 0 read error: -22 [ 2968.420950][T21475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.426796][T21475] adutux 6-1:168.0: interrupt endpoints not found [ 2968.636425][T21475] usb 6-1: USB disconnect, device number 25 [ 2968.729558][ T4926] tipc: Node number set to 11578026 [ 2968.823232][T11183] overlayfs: failed to resolve './file1/file0': -2 [ 2969.174019][T11187] fuse: Unknown parameter 'group_i00000000000000000000' [ 2969.513204][T11205] syzkaller0: entered promiscuous mode [ 2969.513221][T11205] syzkaller0: entered allmulticast mode [ 2969.590743][ T5854] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 2969.771404][ T5854] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2969.772298][ T5854] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2969.772311][ T5854] usb 8-1: config 0 has no interface number 0 [ 2969.772329][ T5854] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2969.772346][ T5854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2969.773550][ T5854] usb 8-1: config 0 descriptor?? [ 2969.775697][ T5854] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 2969.977231][ T5854] usb 8-1: USB disconnect, device number 17 [ 2970.221957][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 2970.221988][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 2970.275844][ T5162] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2970.426029][ T5162] usb 5-1: Using ep0 maxpacket: 8 [ 2970.433268][ T5162] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2970.434251][ T5162] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2970.434281][ T5162] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2970.434313][ T5162] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2970.434336][ T5162] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2970.434359][ T5162] usb 5-1: config 168 interface 0 has no altsetting 0 [ 2970.435265][ T5162] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2970.435290][ T5162] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2970.435317][ T5162] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2970.435337][ T5162] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2970.435359][ T5162] usb 5-1: config 168 interface 0 has no altsetting 0 [ 2970.442995][ T5162] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2970.443026][ T5162] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2970.443058][ T5162] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2970.443081][ T5162] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2970.443103][ T5162] usb 5-1: config 168 interface 0 has no altsetting 0 [ 2970.452264][ T5162] usb 5-1: string descriptor 0 read error: -22 [ 2970.452407][ T5162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2970.473544][ T5162] adutux 5-1:168.0: interrupt endpoints not found [ 2970.669554][ T5162] usb 5-1: USB disconnect, device number 24 [ 2971.298571][T11230] fuse: Unknown parameter 'group_id00000000000000000000' [ 2971.396822][T11238] syzkaller0: entered promiscuous mode [ 2971.396839][T11238] syzkaller0: entered allmulticast mode [ 2971.684647][ T7431] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 2971.841543][ T7431] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2971.842363][ T7431] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2971.842376][ T7431] usb 8-1: config 0 has no interface number 0 [ 2971.842394][ T7431] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2971.842412][ T7431] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2971.844200][ T7431] usb 8-1: config 0 descriptor?? [ 2971.848140][ T7431] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 2972.055325][T21475] usb 8-1: USB disconnect, device number 18 [ 2972.732711][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10200'. [ 2973.027627][T11242] bridge_slave_0: left allmulticast mode [ 2973.027681][T11242] bridge_slave_0: left promiscuous mode [ 2973.027881][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 2973.035197][T11242] bridge_slave_1: left allmulticast mode [ 2973.035219][T11242] bridge_slave_1: left promiscuous mode [ 2973.035445][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 2973.045935][T11242] bond0: (slave bond_slave_0): Releasing backup interface [ 2973.049415][T11242] bond0: (slave bond_slave_1): Releasing backup interface [ 2973.059672][T11242] team0: Port device team_slave_0 removed [ 2973.065123][T11242] team0: Port device team_slave_1 removed [ 2973.065826][T11242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2973.065844][T11242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2973.067253][T11242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2973.067269][T11242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2973.123809][T11242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2973.140155][T11243] team0: Mode changed to "loadbalance" [ 2973.140528][T11244] vlan0: entered promiscuous mode [ 2973.162400][T11252] syzkaller0: entered promiscuous mode [ 2973.162417][T11252] syzkaller0: entered allmulticast mode [ 2973.163960][T11245] tipc: Started in network mode [ 2973.163976][T11245] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2973.164049][T11245] tipc: Enabled bearer , priority 0 [ 2973.451446][ T7431] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2973.611875][ T7431] usb 5-1: Using ep0 maxpacket: 8 [ 2973.612658][ T7431] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2973.613636][ T7431] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2973.613666][ T7431] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2973.613696][ T7431] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2973.613719][ T7431] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2973.613742][ T7431] usb 5-1: config 168 interface 0 has no altsetting 0 [ 2973.614621][ T7431] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2973.614646][ T7431] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2973.614677][ T7431] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2973.614698][ T7431] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2973.614718][ T7431] usb 5-1: config 168 interface 0 has no altsetting 0 [ 2973.616160][ T7431] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2973.616185][ T7431] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2973.616215][ T7431] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2973.616236][ T7431] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 2973.616258][ T7431] usb 5-1: config 168 interface 0 has no altsetting 0 [ 2973.618916][ T7431] usb 5-1: string descriptor 0 read error: -22 [ 2973.619015][ T7431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2973.683743][T11276] fuse: Unknown parameter 'group_id00000000000000000000' [ 2973.709408][ T7431] adutux 5-1:168.0: interrupt endpoints not found [ 2973.888125][T21475] usb 5-1: USB disconnect, device number 25 [ 2974.459901][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10208'. [ 2974.928318][ T8083] tipc: Node number set to 11578026 [ 2974.945230][T11295] bridge_slave_0: left allmulticast mode [ 2974.945248][T11295] bridge_slave_0: left promiscuous mode [ 2974.945350][T11295] bridge0: port 1(bridge_slave_0) entered disabled state [ 2974.948944][T11295] bridge_slave_1: left allmulticast mode [ 2974.948968][T11295] bridge_slave_1: left promiscuous mode [ 2974.949173][T11295] bridge0: port 2(bridge_slave_1) entered disabled state [ 2974.972357][T11295] bond0: (slave bond_slave_0): Releasing backup interface [ 2974.975036][T11295] bond0: (slave bond_slave_1): Releasing backup interface [ 2974.981912][T11295] team0: Port device team_slave_0 removed [ 2974.986704][T11295] team0: Port device team_slave_1 removed [ 2974.987367][T11295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2974.987384][T11295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2974.991072][T11295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2974.991089][T11295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2974.997812][T11295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2975.009829][T11299] team0: Mode changed to "loadbalance" [ 2975.030905][T11292] syzkaller0: entered promiscuous mode [ 2975.030923][T11292] syzkaller0: entered allmulticast mode [ 2975.032671][T11302] vlan0: entered promiscuous mode [ 2975.110462][T11302] team0: Port device vlan0 added [ 2975.115098][T11305] tipc: Started in network mode [ 2975.115126][T11305] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2975.115336][T11305] tipc: Enabled bearer , priority 0 [ 2975.200820][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10212'. [ 2976.772274][ T7431] tipc: Node number set to 11578026 [ 2976.855878][T11332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2976.889560][T11332] team0: No ports can be present during mode change [ 2976.897519][T11332] team0: Port device vlan0 removed [ 2976.898236][T18872] tipc: Resetting bearer [ 2976.925691][T11332] tipc: Enabling of bearer rejected, already enabled [ 2977.261817][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10222'. [ 2977.318919][T11354] syzkaller0: entered promiscuous mode [ 2977.318935][T11354] syzkaller0: entered allmulticast mode [ 2977.662389][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10224'. [ 2979.251958][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10233'. [ 2979.253883][ T8124] Bluetooth: hci1: connection err: -111 [ 2979.300639][ T4926] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2979.450694][ T4926] usb 5-1: device descriptor read/64, error -71 [ 2979.545321][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10237'. [ 2979.560729][ T5162] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2979.720634][ T4926] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2979.720694][ T5162] usb 7-1: Using ep0 maxpacket: 8 [ 2979.723298][ T5162] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2979.740053][ T5162] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2979.741150][ T5162] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2979.741700][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2979.742521][ T5162] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2979.742712][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2979.742876][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2979.743246][ T5162] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2979.743548][ T5162] usb 7-1: config 168 interface 0 has no altsetting 0 [ 2979.754749][ T5162] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2979.755765][ T5162] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2979.756242][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2979.757234][ T5162] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2979.757248][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2979.757453][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2979.757748][ T5162] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2979.758058][ T5162] usb 7-1: config 168 interface 0 has no altsetting 0 [ 2979.764042][ T5162] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 2979.764070][ T5162] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2979.764090][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2979.764103][ T5162] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2979.764116][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2979.764129][ T5162] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2979.764142][ T5162] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2979.764155][ T5162] usb 7-1: config 168 interface 0 has no altsetting 0 [ 2979.775893][ T5162] usb 7-1: string descriptor 0 read error: -22 [ 2979.775953][ T5162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2979.791185][ T5162] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2979.852803][ T4926] usb 5-1: device descriptor read/64, error -71 [ 2979.874172][T11409] syzkaller0: entered promiscuous mode [ 2979.874186][T11409] syzkaller0: entered allmulticast mode [ 2979.960808][ T4926] usb usb5-port1: attempt power cycle [ 2979.992839][ T5162] usb 7-1: USB disconnect, device number 20 [ 2980.315185][ T4926] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2980.341185][ T4926] usb 5-1: device descriptor read/8, error -71 [ 2980.590672][ T4926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2980.611228][ T4926] usb 5-1: device descriptor read/8, error -71 [ 2980.731040][ T4926] usb usb5-port1: unable to enumerate USB device [ 2981.335308][T11423] tipc: Resetting bearer [ 2981.339650][T11423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2981.339773][T11424] team0: Unable to change to the same mode the team is in [ 2981.341166][T11425] team0: Port device vlan0 added [ 2981.342820][T11426] tipc: Enabling of bearer rejected, already enabled [ 2981.561266][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10247'. [ 2981.763765][ T5357] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 2981.764008][ C2] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 2984.812807][T11456] syzkaller0: entered promiscuous mode [ 2984.812876][T11456] syzkaller0: entered allmulticast mode [ 2987.651370][T30821] Bluetooth: hci0: command 0x0406 tx timeout [ 2987.941842][ T8124] Bluetooth: hci1: connection err: -111 [ 2989.467940][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10259'. [ 2993.841287][ T8124] Bluetooth: hci1: connection err: -111 [ 2993.916200][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10266'. [ 2995.869300][ T8124] Bluetooth: hci4: connection err: -111 [ 2995.916780][T11503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10270'. [ 3001.489977][T11552] fuse: Bad value for 'fd' [ 3002.153734][ T8124] Bluetooth: hci3: connection err: -111 [ 3002.174260][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10283'. [ 3003.311981][ T5854] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 3003.475867][ T5854] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3003.495535][ T5854] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3003.495779][ T5854] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3003.495799][ T5854] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3003.495901][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.636431][ T5854] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3003.703762][ T5854] usb 7-1: invalid MIDI out EP 0 [ 3003.860278][ T8124] Bluetooth: hci4: connection err: -111 [ 3003.906478][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10294'. [ 3006.049720][ T5854] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3006.094099][ T5854] usb 7-1: USB disconnect, device number 21 [ 3006.406499][ T45] audit: type=1800 audit(1792209574.493:1158): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10286" name="bus" dev="ramfs" ino=167321 res=0 errno=0 [ 3007.302017][ T9509] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3007.475397][ T9509] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3007.490718][ T9509] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3007.490956][ T9509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.715821][ T9509] as10x_usb: device has been detected [ 3007.744395][ T9509] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3007.928849][ T9509] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 3008.101926][ T9509] as10x_usb: error during firmware upload part1 [ 3008.107421][ T9509] Registered device Abilis Systems DVB-Titan [ 3008.261455][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10302'. [ 3009.365796][T11608] fuse: Invalid rootmode [ 3009.772093][T11602] 9pnet_virtio: no channels available for device syz [ 3011.248806][T30821] Bluetooth: hci3: connection err: -111 [ 3011.259792][T11617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10297'. [ 3012.621681][ T4926] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 3012.972483][ T4926] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3013.019800][ T4926] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3013.020179][ T4926] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3013.020236][ T4926] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3013.020428][ T4926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.251155][T30821] Bluetooth: hci3: command 0x0406 tx timeout [ 3013.279189][ T4926] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3013.320108][ T4926] usb 7-1: invalid MIDI out EP 0 [ 3014.162329][T20753] usb 6-1: USB disconnect, device number 26 [ 3014.642480][T20753] Unregistered device Abilis Systems DVB-Titan [ 3014.795102][T20753] as10x_usb: device has been disconnected [ 3015.105817][ T45] audit: type=1800 audit(1792209583.193:1159): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10301" name="bus" dev="ramfs" ino=168513 res=0 errno=0 [ 3015.253494][ T4926] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3015.285377][ T4926] usb 7-1: USB disconnect, device number 22 [ 3018.379786][ T8124] Bluetooth: hci1: command 0x0406 tx timeout [ 3018.621531][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10305'. [ 3019.102062][ T2535] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 3019.280980][ T2535] usb 7-1: Using ep0 maxpacket: 8 [ 3019.324216][ T2535] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3019.378580][ T2535] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3019.378732][ T2535] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3019.378840][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3019.378864][ T2535] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3019.378889][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3019.378915][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3019.378942][ T2535] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3019.378985][ T2535] usb 7-1: config 168 interface 0 has no altsetting 0 [ 3019.399847][ T2535] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3019.399943][ T2535] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3019.400093][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3019.400127][ T2535] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3019.400149][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3019.400168][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3019.400188][ T2535] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3019.400209][ T2535] usb 7-1: config 168 interface 0 has no altsetting 0 [ 3019.416889][ T2535] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3019.417000][ T2535] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3019.417140][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3019.417173][ T2535] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3019.417205][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3019.417227][ T2535] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3019.417247][ T2535] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3019.417267][ T2535] usb 7-1: config 168 interface 0 has no altsetting 0 [ 3019.453779][ T2535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.453807][ T2535] usb 7-1: Product: syz [ 3019.453828][ T2535] usb 7-1: Manufacturer: syz [ 3019.453850][ T2535] usb 7-1: SerialNumber: syz [ 3019.850195][ T2535] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3019.919691][ T2535] usb 7-1: USB disconnect, device number 23 [ 3020.071471][ T9509] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 3020.255056][ T9509] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3020.265925][ T9509] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3020.266184][ T9509] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3020.355877][ T9509] as10x_usb: device has been detected [ 3020.365124][ T9509] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3020.424817][ T9509] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 3020.527213][ T9509] as10x_usb: error during firmware upload part1 [ 3020.549923][ T9509] Registered device Abilis Systems DVB-Titan [ 3021.655684][T11652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3021.841278][ T5162] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 3022.042671][ T5162] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3022.081123][ T5162] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3022.086438][ T5162] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3022.095765][ T5162] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3022.095891][ T5162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.225342][ T5162] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3023.144593][ T5162] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3023.160073][ T5162] usb 7-1: USB disconnect, device number 24 [ 3024.410999][ T9509] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3024.702434][ T9509] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3024.757424][ T9509] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3024.757453][ T9509] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3024.757583][ T9509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.988474][ T9509] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3025.020015][ T9509] usb 6-1: invalid MIDI out EP 0 [ 3026.291510][ T4926] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 3026.478426][T20750] usb 8-1: USB disconnect, device number 19 [ 3026.496974][ T4926] usb 7-1: Using ep0 maxpacket: 8 [ 3026.519051][ T4926] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3026.573137][ T4926] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3026.573312][ T4926] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3026.573649][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3026.573685][ T4926] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3026.573714][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3026.573733][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3026.573753][ T4926] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3026.573777][ T4926] usb 7-1: config 168 interface 0 has no altsetting 0 [ 3026.631367][ T4926] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3026.631542][ T4926] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3026.631651][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3026.631676][ T4926] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3026.631701][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3026.631727][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3026.631755][ T4926] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3026.631783][ T4926] usb 7-1: config 168 interface 0 has no altsetting 0 [ 3026.679702][ T4926] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3026.679795][ T4926] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 3026.679947][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3026.679982][ T4926] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3026.680001][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3026.680021][ T4926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3026.680041][ T4926] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 3026.680063][ T4926] usb 7-1: config 168 interface 0 has no altsetting 0 [ 3026.757385][ T4926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3026.757418][ T4926] usb 7-1: Product: syz [ 3026.757439][ T4926] usb 7-1: Manufacturer: syz [ 3026.757459][ T4926] usb 7-1: SerialNumber: syz [ 3026.830286][ T9509] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3026.908391][ T9509] usb 6-1: USB disconnect, device number 27 [ 3027.296365][T20750] Unregistered device Abilis Systems DVB-Titan [ 3027.372716][T11685] as102_open: can't find device for minor 0 [ 3027.434295][T20750] as10x_usb: device has been disconnected [ 3027.584490][ T4926] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3027.676777][ T4926] usb 7-1: USB disconnect, device number 25 [ 3028.891943][ T7431] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 3029.085832][ T7431] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3029.104505][ T7431] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.105131][ T7431] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3029.105179][ T7431] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3029.105445][ T7431] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.302982][ T7431] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 3030.428202][ T7431] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3030.512404][ T7431] usb 8-1: USB disconnect, device number 20 [ 3031.690016][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 3031.694893][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 3032.323130][ T9509] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3032.406653][T11720] fuse: Unknown parameter '00000000000000000000' [ 3032.524088][ T9509] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3032.572819][ T9509] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3032.572849][ T9509] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3032.572977][ T9509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3032.715539][ T9509] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3032.747799][ T9509] usb 5-1: invalid MIDI out EP 0 [ 3033.966479][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10338'. [ 3036.833807][ T9509] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3036.866853][ T9509] usb 5-1: USB disconnect, device number 30 [ 3037.345199][ T9509] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3037.519700][ T9509] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3037.536115][ T9509] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3037.536157][ T9509] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3037.536253][ T9509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.702911][ T9509] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3037.713319][ T9509] usb 5-1: invalid MIDI out EP 0 [ 3039.328441][ T9509] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3039.398918][ T9509] usb 5-1: USB disconnect, device number 31 [ 3040.784070][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10350'. [ 3041.881108][ T9509] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3042.068741][ T9509] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3042.091546][ T9509] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3042.091608][ T9509] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3042.091864][ T9509] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3042.307544][ T9509] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3042.330111][ T9509] usb 6-1: invalid MIDI out EP 0 [ 3042.686549][T20750] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 3042.880851][T20750] usb 8-1: Using ep0 maxpacket: 32 [ 3042.888590][T20750] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3042.914471][T20750] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 3042.914500][T20750] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3042.914521][T20750] usb 8-1: config 0 has no interfaces? [ 3042.986440][T20750] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3042.986473][T20750] usb 8-1: Product: syz [ 3042.986497][T20750] usb 8-1: Manufacturer: syz [ 3042.986522][T20750] usb 8-1: SerialNumber: syz [ 3043.065730][T20750] usb 8-1: config 0 descriptor?? [ 3043.552979][ T7456] usb 8-1: USB disconnect, device number 21 [ 3044.271302][ T9509] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3044.444275][ T9509] usb 6-1: USB disconnect, device number 28 [ 3049.114168][T30821] Bluetooth: hci4: command 0x0406 tx timeout [ 3050.283479][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10363'. [ 3051.565519][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10374'. [ 3052.614945][T20753] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 3052.833584][T20753] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3052.851739][T20753] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.851990][T20753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3053.058607][T20753] as10x_usb: device has been detected [ 3053.076852][T20753] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3053.204130][T20753] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 3053.283119][T20753] as10x_usb: error during firmware upload part1 [ 3053.288430][T20753] Registered device Abilis Systems DVB-Titan [ 3054.025077][ T5854] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3054.059010][T14164] usb 7-1: USB disconnect, device number 26 [ 3054.262067][ T5854] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3054.290880][T14164] Unregistered device Abilis Systems DVB-Titan [ 3054.297256][ T5854] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3054.297703][ T5854] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3054.297743][ T5854] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3054.297991][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3054.317026][T14164] as10x_usb: device has been disconnected [ 3054.607079][ T5854] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3054.631364][ T5854] usb 5-1: invalid MIDI out EP 0 [ 3059.431175][ T5854] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3059.456448][ T5854] usb 5-1: USB disconnect, device number 32 [ 3060.825826][T20750] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 3060.921104][T14164] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3061.007848][T20750] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3061.021273][T20750] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3061.021300][T20750] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3061.051500][T20750] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3061.051525][T20750] usb 7-1: Product: syz [ 3061.051540][T20750] usb 7-1: Manufacturer: syz [ 3061.051556][T20750] usb 7-1: SerialNumber: syz [ 3061.084165][T14164] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3061.092933][T20750] usb 7-1: config 0 descriptor?? [ 3061.113294][T14164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3061.113543][T14164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.155553][T20750] usb 7-1: selecting invalid altsetting 0 [ 3061.274324][T14164] as10x_usb: device has been detected [ 3061.284190][T20753] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 3061.286075][T14164] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3061.501755][T14164] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 3061.516837][T20753] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3061.551300][T20753] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3061.551332][T20753] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3061.551490][T20753] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3061.648969][T14164] as10x_usb: error during firmware upload part1 [ 3061.668238][T14164] Registered device Abilis Systems DVB-Titan [ 3062.363876][ T5162] usb 5-1: USB disconnect, device number 33 [ 3062.392915][T20753] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 3062.416931][T20753] usb 8-1: invalid MIDI out EP 0 [ 3062.565648][T20750] usb 7-1: USB disconnect, device number 27 [ 3063.285071][ T5162] Unregistered device Abilis Systems DVB-Titan [ 3063.341644][ T5162] as10x_usb: device has been disconnected [ 3064.854908][T20753] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3064.971541][T20753] usb 8-1: USB disconnect, device number 22 [ 3065.541937][T11941] 9p: Bad value for 'msize' [ 3065.905750][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10398'. [ 3066.773284][T11920] udevd[11920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3067.892880][T11948] binder: 11947:11948 ioctl c0306201 80000440 returned -14 [ 3070.023539][T20753] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3070.167116][ T7431] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 3070.194653][T20753] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3070.214395][T20753] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3070.214424][T20753] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3070.214556][T20753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3070.339304][T20753] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3070.351600][T20753] usb 6-1: invalid MIDI out EP 0 [ 3070.363053][ T7431] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3070.463001][ T7431] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3070.463471][ T7431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3070.992476][T11969] 9p: Bad value for 'msize' [ 3071.088809][ T7431] as10x_usb: device has been detected [ 3071.164562][ T7431] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3071.455322][ T7431] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 3071.649452][ T7431] as10x_usb: error during firmware upload part1 [ 3071.697257][ T7431] Registered device Abilis Systems DVB-Titan [ 3072.672264][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10410'. [ 3072.795523][ T4926] usb 7-1: USB disconnect, device number 28 [ 3073.226857][T20753] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3073.264006][T20753] usb 6-1: USB disconnect, device number 29 [ 3073.619475][ T4926] Unregistered device Abilis Systems DVB-Titan [ 3073.732194][ T4926] as10x_usb: device has been disconnected [ 3075.521482][ T4926] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3075.742329][ T4926] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3075.785194][ T4926] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3075.785238][ T4926] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3075.785267][ T4926] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 3075.785477][ T4926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3075.985335][ T4926] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3076.866922][T12004] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 3077.841573][ T4926] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 3077.925930][ T4926] usb 6-1: USB disconnect, device number 30 [ 3078.655645][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10421'. [ 3078.772051][T20750] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 3078.990152][T20750] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 3079.045015][T20750] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3079.045468][T20750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3079.345663][T20750] as10x_usb: device has been detected [ 3079.398916][T20750] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 3079.697143][T20750] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 3079.875165][T12022] ------------[ cut here ]------------ [ 3079.875197][T12022] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 3079.875223][T12022] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.2.10422/12022 [ 3079.885319][T12022] Modules linked in: [ 3079.887137][T12022] CPU: 0 UID: 0 PID: 12022 Comm: syz.2.10422 Tainted: G L syzkaller #0 PREEMPT(full) [ 3079.892079][T12022] Tainted: [L]=SOFTLOCKUP [ 3079.893911][T12022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3079.898375][T12022] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 3079.900988][T12022] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 68 93 71 06 45 85 c0 75 13 48 8d 3d 3c 9f 74 06 48 c7 c6 60 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 3079.907336][T12022] RSP: 0018:ffffc9000db176a0 EFLAGS: 00010246 [ 3079.909458][T12022] RAX: 0000000000000003 RBX: ffff888053fdc010 RCX: 1ffffffff248b93c [ 3079.913734][T12022] RDX: 0000000000000000 RSI: ffffffff8beff660 RDI: ffffffff9248d5c0 [ 3079.917154][T12022] RBP: ffffc9000db17810 R08: 0000000000000000 R09: 0000000000000000 [ 3079.920463][T12022] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 3079.924194][T12022] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880152fd320 [ 3079.927572][T12022] FS: 0000000000000000(0000) GS:ffff88809574a000(0063) knlGS:00000000f5415b40 [ 3079.931551][T12022] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 3079.934342][T12022] CR2: 00000000f5414ff4 CR3: 000000004ca0c000 CR4: 0000000000352ef0 [ 3079.937900][T12022] Call Trace: [ 3079.939381][T12022] [ 3079.941025][T12022] ? as102_stream_ctrl+0x28/0xd0 [ 3079.943318][T12022] ? __pfx___mutex_lock+0x10/0x10 [ 3079.945639][T12022] ? __lock_acquire+0x5c0/0x1f40 [ 3079.947967][T12022] ? __mutex_lock+0x26c/0x1bd0 [ 3079.950560][T12022] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 3079.953266][T12022] ? as102_stream_ctrl+0x28/0xd0 [ 3079.955459][T12022] as102_stream_ctrl+0x28/0xd0 [ 3079.957542][T12022] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 3079.960057][T12022] __dvb_frontend_open+0x122/0xf20 [ 3079.962862][T12022] dvb_frontend_open+0x77c/0x910 [ 3079.965129][T12022] ? __pfx_dvb_frontend_open+0x10/0x10 [ 3079.967622][T12022] dvb_device_open+0x270/0x3b0 [ 3079.969743][T12022] ? __pfx_dvb_device_open+0x10/0x10 [ 3079.973321][T12022] chrdev_open+0x234/0x6a0 [ 3079.975598][T12022] ? __pfx_chrdev_open+0x10/0x10 [ 3079.977832][T12022] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 3079.980986][T12022] do_dentry_open+0x6ab/0x14d0 [ 3079.982905][T12022] ? __pfx_chrdev_open+0x10/0x10 [ 3079.985063][T12022] vfs_open+0x82/0x3f0 [ 3079.987138][T12022] path_openat+0x1a23/0x2450 [ 3079.989494][T12022] ? __pfx_path_openat+0x10/0x10 [ 3079.992042][T12022] ? trace_event_buffer_commit+0x20a/0xa80 [ 3079.994659][T12022] do_file_open+0x20e/0x430 [ 3079.996802][T12022] ? __pfx_do_file_open+0x10/0x10 [ 3079.998953][T12022] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 3080.002582][T12022] ? _raw_spin_unlock+0x28/0x50 [ 3080.004798][T12022] ? alloc_fd+0x471/0x7a0 [ 3080.006998][T12022] do_sys_openat2+0x10f/0x1e0 [ 3080.009090][T12022] ? __pfx_do_sys_openat2+0x10/0x10 [ 3080.011717][T12022] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 3080.014622][T12022] __ia32_compat_sys_openat+0x12d/0x210 [ 3080.017126][T12022] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 3080.019759][T12022] ? find_held_lock+0x2b/0x80 [ 3080.022203][T12022] ? trace_syscall_enter+0xcc/0x120 [ 3080.024705][T12022] do_int80_emulation+0x166/0x650 [ 3080.027018][T12022] asm_int80_emulation+0x1a/0x20 [ 3080.029388][T12022] RIP: 0023:0xf71777eb [ 3080.031492][T12022] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3080.039368][T12022] RSP: 002b:00000000f541503c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 3080.043534][T12022] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5415100 [ 3080.046818][T12022] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 0000000000000000 [ 3080.050116][T12022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3080.053642][T12022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 3080.057239][T12022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3080.061100][T12022] [ 3080.062464][T12022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3080.065486][T12022] CPU: 0 UID: 0 PID: 12022 Comm: syz.2.10422 Tainted: G L syzkaller #0 PREEMPT(full) [ 3080.069995][T12022] Tainted: [L]=SOFTLOCKUP [ 3080.071803][T12022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3080.076021][T12022] Call Trace: [ 3080.077431][T12022] [ 3080.078710][T12022] dump_stack_lvl+0x100/0x190 [ 3080.080815][T12022] vpanic+0x553/0x970 [ 3080.082591][T12022] ? __pfx_vpanic+0x10/0x10 [ 3080.084540][T12022] ? lock_release+0x24d/0x310 [ 3080.086800][T12022] panic+0xd1/0xe0 [ 3080.088482][T12022] ? __pfx_panic+0x10/0x10 [ 3080.090825][T12022] check_panic_on_warn.cold+0x19/0x34 [ 3080.093168][T12022] ? __mutex_lock+0x944/0x1bd0 [ 3080.095228][T12022] __warn.cold+0x191/0x318 [ 3080.097232][T12022] __report_bug+0x30f/0x440 [ 3080.099183][T12022] ? __mutex_lock+0x944/0x1bd0 [ 3080.101320][T12022] ? __pfx___report_bug+0x10/0x10 [ 3080.103741][T12022] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 3080.106475][T12022] report_bug_entry+0xe2/0x290 [ 3080.108534][T12022] ? __mutex_lock+0x94b/0x1bd0 [ 3080.110585][T12022] handle_bug+0x1cd/0x2a0 [ 3080.112513][T12022] exc_invalid_op+0x17/0x50 [ 3080.114512][T12022] asm_exc_invalid_op+0x1a/0x20 [ 3080.116615][T12022] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 3080.118900][T12022] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 68 93 71 06 45 85 c0 75 13 48 8d 3d 3c 9f 74 06 48 c7 c6 60 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 3080.126607][T12022] RSP: 0018:ffffc9000db176a0 EFLAGS: 00010246 [ 3080.129133][T12022] RAX: 0000000000000003 RBX: ffff888053fdc010 RCX: 1ffffffff248b93c [ 3080.132387][T12022] RDX: 0000000000000000 RSI: ffffffff8beff660 RDI: ffffffff9248d5c0 [ 3080.135644][T12022] RBP: ffffc9000db17810 R08: 0000000000000000 R09: 0000000000000000 [ 3080.138907][T12022] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 3080.142169][T12022] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880152fd320 [ 3080.145837][T12022] ? as102_stream_ctrl+0x28/0xd0 [ 3080.148188][T12022] ? __pfx___mutex_lock+0x10/0x10 [ 3080.150405][T12022] ? __lock_acquire+0x5c0/0x1f40 [ 3080.152773][T12022] ? __mutex_lock+0x26c/0x1bd0 [ 3080.155053][T12022] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 3080.157451][T12022] ? as102_stream_ctrl+0x28/0xd0 [ 3080.159606][T12022] as102_stream_ctrl+0x28/0xd0 [ 3080.161674][T12022] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 3080.164159][T12022] __dvb_frontend_open+0x122/0xf20 [ 3080.166515][T12022] dvb_frontend_open+0x77c/0x910 [ 3080.168761][T12022] ? __pfx_dvb_frontend_open+0x10/0x10 [ 3080.171066][T12022] dvb_device_open+0x270/0x3b0 [ 3080.173164][T12022] ? __pfx_dvb_device_open+0x10/0x10 [ 3080.175476][T12022] chrdev_open+0x234/0x6a0 [ 3080.177522][T12022] ? __pfx_chrdev_open+0x10/0x10 [ 3080.179748][T12022] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 3080.182548][T12022] do_dentry_open+0x6ab/0x14d0 [ 3080.184633][T12022] ? __pfx_chrdev_open+0x10/0x10 [ 3080.186943][T12022] vfs_open+0x82/0x3f0 [ 3080.188959][T12022] path_openat+0x1a23/0x2450 [ 3080.191078][T12022] ? __pfx_path_openat+0x10/0x10 [ 3080.193310][T12022] ? trace_event_buffer_commit+0x20a/0xa80 [ 3080.195956][T12022] do_file_open+0x20e/0x430 [ 3080.197986][T12022] ? __pfx_do_file_open+0x10/0x10 [ 3080.200151][T12022] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 3080.203472][T12022] ? _raw_spin_unlock+0x28/0x50 [ 3080.205527][T12022] ? alloc_fd+0x471/0x7a0 [ 3080.207718][T12022] do_sys_openat2+0x10f/0x1e0 [ 3080.209789][T12022] ? __pfx_do_sys_openat2+0x10/0x10 [ 3080.212086][T12022] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 3080.214980][T12022] __ia32_compat_sys_openat+0x12d/0x210 [ 3080.217323][T12022] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 3080.219903][T12022] ? find_held_lock+0x2b/0x80 [ 3080.221959][T12022] ? trace_syscall_enter+0xcc/0x120 [ 3080.224425][T12022] do_int80_emulation+0x166/0x650 [ 3080.226668][T12022] asm_int80_emulation+0x1a/0x20 [ 3080.228771][T12022] RIP: 0023:0xf71777eb [ 3080.230564][T12022] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3080.238440][T12022] RSP: 002b:00000000f541503c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 3080.241778][T12022] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5415100 [ 3080.244879][T12022] RDX: 0000000000000802 RSI: 0000000000000000 RDI: 0000000000000000 [ 3080.247987][T12022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3080.251136][T12022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 3080.254259][T12022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3080.257797][T12022] [ 3080.260113][T12022] Kernel Offset: disabled [ 3080.261923][T12022] Rebooting in 86400 seconds..