last executing test programs: 5.164575237s ago: executing program 4 (id=5951): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) process_mrelease(0xffffffffffffffff, 0x0) 4.933094565s ago: executing program 0 (id=5955): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x200}) 4.889433445s ago: executing program 0 (id=5957): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = syz_io_uring_setup(0x20f6, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x1ff5, 0x0, 0x0, 0x0, 0x0) 4.678317599s ago: executing program 0 (id=5961): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x65}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 4.540984544s ago: executing program 0 (id=5963): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0xe08, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0) 4.440019412s ago: executing program 0 (id=5964): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2c93497d9ae41ebc6099d95fea5e764494873e0d82a172b3bb54f35039c7d81e9ab07f2fb4dad61bd50c4b2c861c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d0200000050685e0f4f07", 0xa7}], 0x2}}], 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x228}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4.141116733s ago: executing program 4 (id=5970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 4.050094706s ago: executing program 4 (id=5972): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.935123441s ago: executing program 4 (id=5975): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3.658869919s ago: executing program 1 (id=5980): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001f00)=""/4108, 0x100c}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000000)=""/19, 0x13}], 0x3}, 0x0) 3.427345121s ago: executing program 1 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 3.248123662s ago: executing program 1 (id=5986): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.147898477s ago: executing program 2 (id=5988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x13, 0x5b, "f376071686bdab131968b9688d7b56"}]}, 0x30}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000010c0)=0x15) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000100)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c) syz_emit_ethernet(0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000320000000000019078ac1414bbac14140004009078000000004500000000000000002f00007f000001000000000000"], 0x0) 3.00568726s ago: executing program 1 (id=5989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffc6e, &(0x7f0000000100)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) 2.868450991s ago: executing program 3 (id=5990): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = dup2(r0, r0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05604, &(0x7f00000014c0)={0x9, @sliced}) 2.842614295s ago: executing program 1 (id=5991): mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = inotify_init() syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100003b287040d81321009079000000010902120001000001000904"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x400017e) unlink(&(0x7f0000000000)='./file0\x00') write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYRES32], 0x1c}}, 0x0) 2.776768916s ago: executing program 3 (id=5992): r0 = inotify_init() r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r0, 0x0, 0xfffffffffffffffe, 0x8001}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) 2.68307671s ago: executing program 3 (id=5993): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 2.167650103s ago: executing program 2 (id=5994): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001f00)=""/4108, 0x100c}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000000)=""/19, 0x13}], 0x3}, 0x0) 1.969563733s ago: executing program 2 (id=5995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 1.83436116s ago: executing program 2 (id=5996): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e370c0c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.748584493s ago: executing program 3 (id=5997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.607012705s ago: executing program 3 (id=5998): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f00000004c0)=""/217, 0xd9}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f0000000900)=""/152, 0x98}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/232, 0xe8}, {&(0x7f0000002940)=""/4084, 0xff4}], 0x7}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.571692165s ago: executing program 2 (id=5999): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @broadcast, 'wlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000940)='!A', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)="1fa7", 0x2}], 0x1}}], 0x2, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x705b, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x51d5, &(0x7f0000000400)={0x0, 0x400096d2, 0x8e, 0x0, 0x2000, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x6820, &(0x7f0000000380), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1d, @mcast1, @remote}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x32, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) 797.337279ms ago: executing program 0 (id=6000): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x24, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)={0x38, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000000) r4 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xc4, 0xb2, 0x7, 0x10, 0xe20, 0x101, 0x7a5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x2e, 0x6d, 0xa, 0x0, [], [{{0x9, 0x5, 0x7, 0x3}}]}}]}}]}}, 0x0) 759.769881ms ago: executing program 4 (id=6001): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 741.0556ms ago: executing program 2 (id=6002): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000700000000000008009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_begin\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x4e21, 0x0, 'dh\x00'}, 0x2c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, 0x0, 0xee01, r3) keyctl$setperm(0x5, 0x0, 0x21081c22) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000100)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1, 0x0) ftruncate(r4, 0x2008002) read$FUSE(r4, &(0x7f0000000700)={0x2020}, 0xfffffdef) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x8000000004a4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) 712.059329ms ago: executing program 3 (id=6003): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f00000003c0)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x0, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071122400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x400000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0x0) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x10000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x5) r9 = accept$unix(r3, &(0x7f0000000240), 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) io_setup(0x100, &(0x7f0000000bc0)=0x0) sendmmsg$unix(r9, &(0x7f000001d480)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000019480)}], 0x1}}, {{&(0x7f0000019700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000199c0)=[{&(0x7f0000019780)="d6dcfca37638bb4f145cf83e2b4f00f0f6b1efbed47d3b73973c03af42934e7afa15e35e8a77f32f8f191f4cf998aa5b61915c6d376f69117368897e523c8c56b175d0a3a2d80f09d303ca90e4164e35063d991b4861af04f55a177e9a39284ac848c0586dc771aa6978a166dd813b40dffd08e4f44aa52474e370553d1fae94d97b088b53c67274d0389052", 0x8c}, {&(0x7f00000198c0)}], 0x2, &(0x7f0000019500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r7, @ANYBLOB="008e3585d213e9abfa00", @ANYRES32, @ANYBLOB="24000000000000000100000001", @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES8=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="14000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32=r7], 0x108, 0x4850}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000019c00)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32, @ANYRES32=r4, @ANYRES64, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f000001c700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000019600)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000080000000100000001000000", @ANYRESDEC=r10, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c0000000000000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x84}}, {{&(0x7f000001ce00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000001d040)=[{0x0}, {&(0x7f000001cf40)="4a7c7951ac25fa424262a5efae269a793a4833a0fe5c6f39aaef6440ba017483f2", 0x21}, {&(0x7f000001cf80)="ebc5e810057f2ad67bdbf8fe516a8cdc95ff4eee3787d251c9160bd596a1d01eed5e883a8a399db7e86714d706869c5de6ac814f0ebeaadb6ba920b78c21a9eba462ab441fc4487f5f06", 0x4a}, {0x0}], 0x4, &(0x7f000001d5c0)=ANY=[@ANYBLOB="200000000000000001000000010000", @ANYRESOCT=r10, @ANYRES32, @ANYBLOB="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", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002800000000000000010000", @ANYRES32=r6, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="18132fef41fcd2e94eb7c5e114a4cc79d6e6591fd37d2f4b647c7256953ce950ce0728963a3f2fe96adc8ca6fbce4093c0bcd6f9279670c21bc98a61022d58fcd7edbd711fdcf5ea5d4db707488b7be1094125657dac6b929749c582836837d541bbaa2b6791a5e6d30e6a39ab0dc9da42e53622a76c396ccf8a04495c8bf171f3842157f7904f40c6f77bc797b26724d19c2e8df5a2f9eaf6e7fe77f101eb4e363331d77aa5924b345dc2483017", @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="00000000180000000000000001", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="00000000180000000000000001000000010000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYBLOB="000000009b1fe62db89ad8bd86352bef2cf9f0da277b719a01d9156fe9e5de31d1915863b9d7f87c8a9c1dca9f48252d14b77744c1b65ca685b137253f7dffd67bbb8cb6cd286419077e07941c7e9a535d1b"], 0x128}}], 0x5, 0x801) io_pgetevents(r10, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x989680}, 0x0) bind$inet(r0, 0x0, 0x0) 105.103287ms ago: executing program 4 (id=6004): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x8000) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) unshare(0x20000400) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) pwrite64(r2, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) semget$private(0x0, 0x6, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x802}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000200)=[{}, {}], 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0xf, 0x0) recvmsg$unix(r1, 0x0, 0x0) 0s ago: executing program 1 (id=6005): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001f00)=""/4108, 0x100c}, {&(0x7f0000000640)=""/181, 0xb5}, {&(0x7f0000000000)=""/19, 0x13}], 0x3}, 0x0) kernel console output (not intermixed with test programs): T5138] usb 1-1: Manufacturer: syz [ 708.412884][ T5138] usb 1-1: SerialNumber: syz [ 708.447172][ T5138] usb 1-1: config 0 descriptor?? [ 708.455534][ T5138] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 708.478188][ T5138] dvb-usb: bulk message failed: -22 (3/0) [ 708.499197][ T5138] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 708.513485][ T5138] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 708.558088][ T5138] usb 1-1: media controller created [ 708.570564][ T5138] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.642325][ T5138] dvb-usb: bulk message failed: -22 (6/0) [ 708.655069][ T5138] dvb-usb: bulk message failed: -22 (6/0) [ 708.679297][ T5138] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 708.701907][ T5138] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 708.718386][T17029] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 708.740339][ T5138] dvb-usb: schedule remote query interval to 150 msecs. [ 708.752435][ T5138] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 708.783147][ T5138] usb 1-1: USB disconnect, device number 24 [ 708.847604][ T5138] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 709.010611][ T9264] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 709.019014][ T5096] Bluetooth: hci5: link tx timeout [ 709.025886][ T5096] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 709.901574][T17066] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 710.090537][ T5096] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 710.132335][ T9264] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 710.148048][ T9264] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.158383][ T9264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 710.166877][ T9264] usb 2-1: SerialNumber: syz [ 710.173644][ T5096] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 710.185672][ T9264] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 710.276554][T17068] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.284592][T17068] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.291083][T17081] netlink: 'syz.0.4309': attribute type 10 has an invalid length. [ 710.358821][T17068] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.366693][T17068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.376636][T17068] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.383937][T17068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.534592][T17068] team0: Port device bridge0 added [ 711.015713][ T5140] usb 2-1: USB disconnect, device number 20 [ 711.101559][ T5096] Bluetooth: hci5: command 0x0406 tx timeout [ 711.606561][T17118] netlink: 'syz.0.4323': attribute type 1 has an invalid length. [ 711.627418][T17118] netlink: 'syz.0.4323': attribute type 1 has an invalid length. [ 711.640701][T17118] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4323'. [ 711.656207][T17118] netlink: 652 bytes leftover after parsing attributes in process `syz.0.4323'. [ 711.669929][T17121] netlink: 'syz.2.4321': attribute type 10 has an invalid length. [ 711.758186][T17126] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 712.017000][T10883] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 712.078264][ T9264] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 712.290288][ T9264] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 712.317460][ T9264] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 712.333822][ T9264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 712.346782][ T9264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 712.360071][ T9264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 712.377727][ T9264] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 712.405288][ T9264] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 712.434380][ T9264] usb 1-1: Product: syz [ 712.449527][ T9264] usb 1-1: Manufacturer: syz [ 712.460982][T17130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 712.471407][ T9264] cdc_wdm 1-1:1.0: skipping garbage [ 712.476735][ T9264] cdc_wdm 1-1:1.0: skipping garbage [ 712.483901][ T9264] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 712.492642][T17119] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 712.500968][ T9264] cdc_wdm 1-1:1.0: Unknown control protocol [ 712.877645][T17156] netlink: 'syz.3.4337': attribute type 10 has an invalid length. [ 712.984229][T17159] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 713.014737][ T9264] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 713.072188][ T5140] usb 1-1: USB disconnect, device number 25 [ 713.234961][ T9264] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 713.261601][ T9264] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 713.282762][ T9264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 713.291617][ T9264] usb 5-1: SerialNumber: syz [ 713.335323][ T9264] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 713.491417][T17185] netlink: 'syz.3.4349': attribute type 10 has an invalid length. [ 713.551780][T17188] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 713.680344][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4355'. [ 715.297157][T17228] input: syz0 as /devices/virtual/input/input35 [ 715.356045][ T9264] usb 5-1: USB disconnect, device number 22 [ 716.827516][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4376'. [ 718.590684][ T9264] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 718.646889][T17334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4413'. [ 718.793917][ T9264] usb 3-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 718.813837][ T9264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.850842][ T9264] usb 3-1: config 0 descriptor?? [ 718.869078][T17346] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4418'. [ 718.873477][ T9264] hub 3-1:0.0: bad descriptor, ignoring hub [ 718.898138][ T9264] hub 3-1:0.0: probe with driver hub failed with error -5 [ 718.898678][T17346] unsupported nlmsg_type 40 [ 718.923338][ T9264] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 718.983927][T17346] netlink: 'syz.0.4418': attribute type 63 has an invalid length. [ 719.020284][T15813] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 719.102630][ T9264] sonixb 3-1:0.0: Error reading register 00: -71 [ 719.141124][ T9264] usb 3-1: USB disconnect, device number 28 [ 719.228190][T15813] usb 5-1: Using ep0 maxpacket: 16 [ 719.240760][T15813] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 719.260125][T15813] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.279616][T15813] usb 5-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 719.288993][T15813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.296989][T15813] usb 5-1: Product: syz [ 719.301322][T15813] usb 5-1: Manufacturer: syz [ 719.305959][T15813] usb 5-1: SerialNumber: syz [ 719.313707][T15813] usb 5-1: config 0 descriptor?? [ 719.348101][ T9318] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 719.541727][T15813] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 719.553069][ T9318] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 719.563009][T15813] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 719.572393][ T9318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.592036][T15813] usb 5-1: USB disconnect, device number 23 [ 719.598134][ T9318] usb 4-1: Product: syz [ 719.602303][ T9318] usb 4-1: Manufacturer: syz [ 719.606923][ T9318] usb 4-1: SerialNumber: syz [ 719.616380][ T9318] usb 4-1: config 0 descriptor?? [ 719.625075][ T9318] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 719.634000][ T9318] dvb-usb: bulk message failed: -22 (3/0) [ 719.648593][ T9318] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 719.670562][ T9318] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 719.681805][ T9318] usb 4-1: media controller created [ 719.690123][ T9318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.708143][ T9318] dvb-usb: bulk message failed: -22 (6/0) [ 719.714360][ T9318] dvb-usb: bulk message failed: -22 (6/0) [ 719.720728][ T9318] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 719.745448][ T9318] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 719.766025][ T9318] dvb-usb: schedule remote query interval to 150 msecs. [ 719.790085][ T9318] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 719.950100][ T9239] dvb-usb: bulk message failed: -22 (1/0) [ 719.955957][ T9239] dvb-usb: error while querying for an remote control event. [ 720.070129][T17375] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 720.085966][T17375] overlayfs: failed to set xattr on upper [ 720.094223][T17375] overlayfs: ...falling back to redirect_dir=nofollow. [ 720.109200][T17375] overlayfs: ...falling back to index=off. [ 720.115484][T17375] overlayfs: ...falling back to uuid=null. [ 720.125183][T17375] overlayfs: ...falling back to xino=off. [ 720.128104][ T9318] dvb-usb: bulk message failed: -22 (1/0) [ 720.158023][ T9318] dvb-usb: error while querying for an remote control event. [ 720.318139][ T9318] dvb-usb: bulk message failed: -22 (1/0) [ 720.328595][ T9318] dvb-usb: error while querying for an remote control event. [ 720.330842][T17381] CIFS: iocharset name too long [ 720.488618][ T9318] dvb-usb: bulk message failed: -22 (1/0) [ 720.494437][ T9318] dvb-usb: error while querying for an remote control event. [ 720.503406][T17388] overlay: Unknown parameter 'obj_role' [ 720.536102][T17354] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 720.547189][T17391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4437'. [ 720.679754][ T9318] dvb-usb: bulk message failed: -22 (1/0) [ 720.697902][ T9318] dvb-usb: error while querying for an remote control event. [ 720.888128][T15813] dvb-usb: bulk message failed: -22 (1/0) [ 720.897539][T15813] dvb-usb: error while querying for an remote control event. [ 720.932901][ T9318] usb 4-1: USB disconnect, device number 29 [ 721.056171][ T9318] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 721.399636][T17413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4449'. [ 721.554054][T17421] CIFS: iocharset name too long [ 722.115662][T17440] overlay: Unknown parameter 'obj_role' [ 723.018750][T17456] CIFS: iocharset name too long [ 723.438114][ T5138] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 723.476937][T17469] ieee802154 phy0 wpan0: encryption failed: -90 [ 723.528949][T17469] nfs: Unknown parameter 'sm' [ 723.654608][ T5138] usb 1-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 723.669859][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.692271][ T5138] usb 1-1: Product: syz [ 723.696514][ T5138] usb 1-1: Manufacturer: syz [ 723.713805][ T5138] usb 1-1: SerialNumber: syz [ 723.722497][ T5138] usb 1-1: config 0 descriptor?? [ 723.737423][ T5138] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 723.746238][ T5138] dvb-usb: bulk message failed: -22 (3/0) [ 723.764731][ T5138] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 723.778846][ T5138] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 723.791810][ T5138] usb 1-1: media controller created [ 723.803804][ T5138] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 723.826994][ T5138] dvb-usb: bulk message failed: -22 (6/0) [ 723.833382][ T5138] dvb-usb: bulk message failed: -22 (6/0) [ 723.846008][ T5138] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 723.858054][ T5138] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 723.873313][ T5138] dvb-usb: schedule remote query interval to 150 msecs. [ 723.883661][ T5138] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 723.918248][T15813] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 723.989118][T17486] CIFS: iocharset name too long [ 724.041160][ T5223] dvb-usb: bulk message failed: -22 (1/0) [ 724.046979][ T5223] dvb-usb: error while querying for an remote control event. [ 724.120251][T15813] usb 5-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 724.136827][T15813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.166294][T15813] usb 5-1: config 0 descriptor?? [ 724.168273][T17491] IPv6: NLM_F_REPLACE set, but no existing node found! [ 724.174245][T15813] hub 5-1:0.0: bad descriptor, ignoring hub [ 724.186179][T15813] hub 5-1:0.0: probe with driver hub failed with error -5 [ 724.209603][T15813] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 724.229127][ T5223] dvb-usb: bulk message failed: -22 (1/0) [ 724.247105][ T5223] dvb-usb: error while querying for an remote control event. [ 724.275178][T17491] input: syz0 as /devices/virtual/input/input38 [ 724.438149][ T5223] dvb-usb: bulk message failed: -22 (1/0) [ 724.438193][T15813] sonixb 5-1:0.0: Error reading register 00: -71 [ 724.443929][ T5223] dvb-usb: error while querying for an remote control event. [ 724.510479][T15813] usb 5-1: USB disconnect, device number 24 [ 724.628199][T17462] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 724.668153][ T5140] dvb-usb: bulk message failed: -22 (1/0) [ 724.678077][ T5140] dvb-usb: error while querying for an remote control event. [ 724.858207][ T5223] dvb-usb: bulk message failed: -22 (1/0) [ 724.871995][ T5223] dvb-usb: error while querying for an remote control event. [ 725.073227][ T5223] dvb-usb: bulk message failed: -22 (1/0) [ 725.099322][ T5223] dvb-usb: error while querying for an remote control event. [ 725.155579][ T5223] usb 1-1: USB disconnect, device number 26 [ 725.241664][ T5223] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 727.082914][T17524] vivid-003: kernel_thread() failed [ 727.394732][T17530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 727.401416][T17530] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 727.469326][T17530] vhci_hcd vhci_hcd.0: Device attached [ 727.490634][T17538] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 727.748809][ T5223] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 727.830416][T17531] vhci_hcd: connection reset by peer [ 727.840866][ T1054] vhci_hcd: stop threads [ 727.848008][ T1054] vhci_hcd: release socket [ 727.864511][ T1054] vhci_hcd: disconnect device [ 727.976709][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4502'. [ 727.989894][T17554] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4503'. [ 728.054483][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 728.054504][ T30] audit: type=1326 audit(2000000006.200:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17551 comm="syz.3.4502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a87d75bd9 code=0x0 [ 728.161527][T17554] netlink: 'syz.0.4503': attribute type 63 has an invalid length. [ 728.186527][T17560] xt_socket: unknown flags 0x50 [ 729.862998][ T30] audit: type=1326 audit(2000000007.170:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17578 comm="syz.2.4513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x0 [ 729.981312][T17591] xt_socket: unknown flags 0x50 [ 730.456763][T17616] Bluetooth: MGMT ver 1.22 [ 730.624078][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 730.731891][T17622] syz.3.4527: attempt to access beyond end of device [ 730.731891][T17622] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 731.689770][T17636] xt_socket: unknown flags 0x50 [ 732.095410][T17658] xt_bpf: check failed: parse error [ 732.216848][T17658] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 732.223425][T17658] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 732.235774][T17663] vhci_hcd: connection closed [ 732.235850][T17658] vhci_hcd vhci_hcd.0: Device attached [ 732.246353][T10209] vhci_hcd: stop threads [ 732.250978][T10209] vhci_hcd: release socket [ 732.255667][T10209] vhci_hcd: disconnect device [ 732.324266][T17667] syz.3.4545: attempt to access beyond end of device [ 732.324266][T17667] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 732.498357][ T9318] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 732.506343][T15813] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 732.992306][T17668] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 733.160367][T15813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.187111][ T5223] vhci_hcd: vhci_device speed not set [ 733.195211][ T9318] usb 3-1: Using ep0 maxpacket: 32 [ 733.237455][T15813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.248299][T15813] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 733.257530][T15813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.276257][T15813] usb 5-1: config 0 descriptor?? [ 733.582870][T15813] usbhid 5-1:0.0: can't add hid device: -71 [ 733.598115][T15813] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 733.624339][T15813] usb 5-1: USB disconnect, device number 25 [ 733.908035][ T5096] Bluetooth: hci5: command 0x0406 tx timeout [ 734.453753][ T9318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 734.464361][ T9318] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 734.472419][ T9318] usb 3-1: can't read configurations, error -71 [ 734.938899][ T30] audit: type=1326 audit(2000000013.080:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17696 comm="syz.1.4557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c2175bd9 code=0x0 [ 735.084818][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'. [ 735.497278][T17717] xt_bpf: check failed: parse error [ 735.556593][T17717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 735.563172][T17717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 735.589357][T17717] vhci_hcd vhci_hcd.0: Device attached [ 735.616985][T17722] vhci_hcd: connection closed [ 735.617192][ T51] vhci_hcd: stop threads [ 735.638866][ T51] vhci_hcd: release socket [ 735.647125][ T51] vhci_hcd: disconnect device [ 735.960497][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4573'. [ 736.270003][T17752] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 736.278551][T17752] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.4579'. [ 736.317640][ T30] audit: type=1326 audit(2000000014.460:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17749 comm="syz.0.4580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 736.363909][T17755] program syz.2.4581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.418107][ T9318] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 736.470885][T17758] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4582'. [ 736.485571][T17758] 0X: renamed from caif0 [ 736.611466][T17758] 0X: entered allmulticast mode [ 736.617239][T17758] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 736.633780][ T9318] usb 5-1: Using ep0 maxpacket: 16 [ 736.652715][ T9318] usb 5-1: config 0 has an invalid interface number: 208 but max is 0 [ 736.664836][ T9318] usb 5-1: config 0 has no interface number 0 [ 736.676752][ T9318] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 736.686502][ T9318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.696180][ T9318] usb 5-1: Product: syz [ 736.762592][ T9318] usb 5-1: Manufacturer: syz [ 736.799951][ T9318] usb 5-1: SerialNumber: syz [ 736.825523][ T9318] usb 5-1: config 0 descriptor?? [ 736.836346][ T9318] ftdi_sio 5-1:0.208: FTDI USB Serial Device converter detected [ 736.862415][ T9318] ftdi_sio ttyUSB0: unknown device type: 0xf37f [ 737.052485][ T9318] usb 5-1: USB disconnect, device number 26 [ 737.072029][ T9318] ftdi_sio 5-1:0.208: device disconnected [ 737.570290][ T9318] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 738.440277][T17799] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.4596'. [ 738.470287][T17799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4596'. [ 738.494823][T17799] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.4596'. [ 738.649748][ T9318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.660971][ T9318] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 738.681669][ T9318] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.693115][ T9318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 738.703009][ T9318] usb 2-1: SerialNumber: syz [ 738.719321][ T9318] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 739.406905][T17841] netlink: 'syz.2.4614': attribute type 1 has an invalid length. [ 739.428770][T17841] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4614'. [ 739.666708][T17853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.691534][T17853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.801919][ T30] audit: type=1326 audit(2000000017.950:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17854 comm="syz.2.4619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x0 [ 739.886571][T17858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 739.897176][ T9318] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 739.908089][T15813] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 739.938054][T17858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.098170][ T9318] usb 4-1: Using ep0 maxpacket: 32 [ 740.105882][ T9318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 740.116673][ T9318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 740.130832][ T9318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 740.141193][T15813] usb 5-1: Using ep0 maxpacket: 32 [ 740.168483][ T9318] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 740.180124][ T9318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.188617][ T9318] usb 4-1: Product: syz [ 740.193836][ T9318] usb 4-1: Manufacturer: syz [ 740.198837][ T9318] usb 4-1: SerialNumber: syz [ 740.214931][ T9318] usb 4-1: config 0 descriptor?? [ 740.228816][ T9318] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 740.418444][ T5139] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 740.620248][ T5139] usb 1-1: Using ep0 maxpacket: 32 [ 740.656944][ T5139] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.702931][ T5139] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.720037][ T5139] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 740.734112][ T5139] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 740.747747][ T5139] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 740.761422][ T5139] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 740.769935][ T30] audit: type=1800 audit(2000000018.920:426): pid=17869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4622" name="/" dev="fuse" ino=1 res=0 errno=0 [ 740.780410][ T5139] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 740.807257][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.816052][ T5139] usb 1-1: Product: syz [ 740.821589][ T5139] usb 1-1: Manufacturer: syz [ 740.828227][ T5139] usb 1-1: SerialNumber: syz [ 741.081896][ T5139] cdc_ncm 1-1:1.0: bind() failure [ 741.097033][ T5139] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 741.105145][ T5139] cdc_ncm 1-1:1.1: bind() failure [ 741.127497][ T5139] usb 1-1: USB disconnect, device number 27 [ 741.318638][ T9264] usb 2-1: USB disconnect, device number 21 [ 741.520846][T17873] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4624'. [ 741.585030][T15813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 741.603466][T15813] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 741.613492][T15813] usb 5-1: can't read configurations, error -71 [ 741.830808][T17879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4627'. [ 742.118158][ T5139] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 742.428715][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 742.453519][ T5138] usb 4-1: USB disconnect, device number 30 [ 742.462099][ T5139] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 742.510752][ T5139] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.570587][ T5139] usb 2-1: New USB device found, idVendor=1b80, idProduct=c161, bcdDevice=ce.43 [ 742.614624][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.633648][ T5139] usb 2-1: Product: syz [ 742.637879][ T5139] usb 2-1: Manufacturer: syz [ 742.647986][ T5139] usb 2-1: SerialNumber: syz [ 742.664039][ T5139] usb 2-1: config 0 descriptor?? [ 742.758541][T17892] gretap0: entered promiscuous mode [ 742.930376][ T5139] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 742.958968][ T5139] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 742.988364][ T5138] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 742.990390][ T5139] usb 2-1: USB disconnect, device number 22 [ 743.196874][ T5138] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.199968][T15813] libceph: connect (1)[c::]:6789 error -101 [ 743.216088][T15813] libceph: mon0 (1)[c::]:6789 connect error [ 743.224094][ T5138] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 743.231220][T15813] libceph: connect (1)[c::]:6789 error -101 [ 743.244189][T15813] libceph: mon0 (1)[c::]:6789 connect error [ 743.259538][ T5138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 743.278095][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 743.288005][ T5138] usb 4-1: SerialNumber: syz [ 743.309242][ T5138] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 743.333429][T17896] ceph: No mds server is up or the cluster is laggy [ 743.552231][T17903] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4635'. [ 744.017691][T17927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.228180][ T5135] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 744.350602][T17943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.360658][T17943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.413225][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 744.430278][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 744.604797][ T5138] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 744.622991][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 744.649916][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.665519][ T5135] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 744.675202][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.689521][ T5135] usb 5-1: Product: syz [ 744.693757][ T5135] usb 5-1: Manufacturer: syz [ 744.719740][ T5135] usb 5-1: SerialNumber: syz [ 744.730923][ T5135] usb 5-1: config 0 descriptor?? [ 744.760737][ T5135] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 744.820092][ T5138] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 744.832618][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.844574][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.877729][ T5138] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 744.916490][ T5138] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 744.927492][ T5138] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 744.950702][ T5138] usb 1-1: Manufacturer: syz [ 744.999145][ T5138] usb 1-1: config 0 descriptor?? [ 745.471933][ T5138] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 745.513569][ T5138] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 745.521063][T15813] usb 5-1: USB disconnect, device number 29 [ 745.577048][ T5138] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 745.748063][ T5140] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 745.949341][ T5140] usb 3-1: Using ep0 maxpacket: 32 [ 745.964838][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.984663][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.997822][ T5140] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 746.013349][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.025243][ T5140] usb 3-1: config 0 descriptor?? [ 746.040906][ T5140] hub 3-1:0.0: USB hub found [ 746.088596][ T9318] usb 1-1: USB disconnect, device number 28 [ 746.334263][ T5140] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 746.360706][ T5140] usbhid 3-1:0.0: can't add hid device: -71 [ 746.371360][ T5140] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 746.428456][ T5140] usb 3-1: USB disconnect, device number 31 [ 746.637600][T15813] usb 4-1: USB disconnect, device number 31 [ 746.668177][ T9318] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 746.888672][ T9318] usb 2-1: Using ep0 maxpacket: 32 [ 746.908386][ T9318] usb 2-1: config index 0 descriptor too short (expected 65529, got 18) [ 746.940302][ T9318] usb 2-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 746.953617][ T9318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.979084][ T9318] usb 2-1: Product: syz [ 746.983351][ T9318] usb 2-1: Manufacturer: syz [ 746.995494][ T9318] usb 2-1: SerialNumber: syz [ 747.008828][ T9318] r8152-cfgselector 2-1: Unknown version 0x0000 [ 747.022945][ T9318] r8152-cfgselector 2-1: config 0 descriptor?? [ 747.181848][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.433747][ T30] audit: type=1804 audit(2000000025.580:427): pid=17997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.4670" name="/newroot/186/file1/bus/cgroup.controllers" dev="overlay" ino=10 res=1 errno=0 [ 747.616368][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4669'. [ 747.842615][T18011] netlink: 'syz.2.4675': attribute type 11 has an invalid length. [ 748.025858][T18015] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 749.183994][ T5135] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 749.256194][ T30] audit: type=1804 audit(2000000027.400:428): pid=18029 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4681" name="/newroot/176/file1/bus/cgroup.controllers" dev="overlay" ino=10 res=1 errno=0 [ 749.379193][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4685'. [ 750.081925][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4693'. [ 750.249216][ T30] audit: type=1800 audit(2000000028.380:429): pid=18078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4698" name="/" dev="fuse" ino=1 res=0 errno=0 [ 750.460549][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4700'. [ 750.598059][T15813] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 750.808090][T15813] usb 4-1: Using ep0 maxpacket: 32 [ 750.815370][T15813] usb 4-1: config index 0 descriptor too short (expected 65529, got 18) [ 750.826548][ T5139] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 750.848616][T15813] usb 4-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 750.860601][T15813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.871578][T15813] usb 4-1: Product: syz [ 750.875822][T15813] usb 4-1: Manufacturer: syz [ 750.881376][T15813] usb 4-1: SerialNumber: syz [ 750.890609][T15813] r8152-cfgselector 4-1: Unknown version 0x0000 [ 750.897128][T15813] r8152-cfgselector 4-1: config 0 descriptor?? [ 751.075834][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.099997][ T5139] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.137849][ T5139] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.142409][ T5135] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 751.157993][ T5139] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 751.173720][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.193348][ T5139] usb 2-1: config 0 descriptor?? [ 751.368141][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 751.375273][ T5135] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 751.388217][ T5135] usb 3-1: config 0 has no interface number 0 [ 751.395051][ T5135] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.406856][ T5135] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 751.416283][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.449073][ T5135] usb 3-1: config 0 descriptor?? [ 751.468133][ T5135] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 751.647369][ T5139] holtek_mouse 0003:04D9:A070.0008: item fetching failed at offset 2/5 [ 751.659862][ T5139] holtek_mouse 0003:04D9:A070.0008: hid parse failed: -22 [ 751.667252][ T5139] holtek_mouse 0003:04D9:A070.0008: probe with driver holtek_mouse failed with error -22 [ 751.794717][ T5139] usb 3-1: USB disconnect, device number 32 [ 751.820284][ T5139] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 751.915090][ T5138] usb 2-1: USB disconnect, device number 24 [ 752.138108][T10883] Bluetooth: hci5: command 0x0406 tx timeout [ 752.788070][ T5135] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 752.988039][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 752.998083][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.010892][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.045662][ T5135] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 753.058369][ T5139] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 753.069875][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.097631][ T5135] usb 1-1: config 0 descriptor?? [ 753.110867][ T5135] hub 1-1:0.0: USB hub found [ 753.133846][ T5138] r8152-cfgselector 4-1: USB disconnect, device number 32 [ 753.260371][ T5139] usb 2-1: Using ep0 maxpacket: 16 [ 753.270272][ T5139] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 753.293626][ T5139] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 753.319257][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.327480][ T5139] usb 2-1: Product: syz [ 753.347137][ T5139] usb 2-1: Manufacturer: syz [ 753.386840][T18127] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 753.439782][ T5139] usb 2-1: SerialNumber: syz [ 753.519253][ T5139] usb 2-1: config 0 descriptor?? [ 753.631844][T18115] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 753.858853][ T5139] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 754.229720][T18115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.281925][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 754.329593][ T5135] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 754.331532][T18115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.341723][ T5135] usbhid 1-1:0.0: can't add hid device: -71 [ 754.352498][ T5135] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 754.393914][ T5135] usb 1-1: USB disconnect, device number 29 [ 754.462561][ T5140] usb 2-1: USB disconnect, device number 25 [ 755.034094][T18157] sp0: Synchronizing with TNC [ 755.618182][ T5135] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 756.361130][ T5135] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 756.375344][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.408410][ T5135] usb 3-1: config 0 descriptor?? [ 756.468887][ T30] audit: type=1804 audit(2000000034.620:430): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.4730" name="/newroot/183/file1/bus/cgroup.controllers" dev="overlay" ino=10 res=1 errno=0 [ 756.836490][T18157] Cannot find del_set index 0 as target [ 756.858335][ T5135] usb 3-1: Cannot read MAC address [ 756.865854][ T5135] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 756.995527][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 757.403785][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4751'. [ 758.176893][T18239] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 759.444358][ T30] audit: type=1326 audit(2000000037.530:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18230 comm="syz.0.4758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 759.711704][ T5135] usb 3-1: USB disconnect, device number 33 [ 760.299539][ T5139] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 760.518545][ T5139] usb 1-1: Using ep0 maxpacket: 32 [ 760.543208][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 760.574749][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 760.605447][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.649331][ T5139] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 760.686962][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.729409][ T5139] usb 1-1: Product: syz [ 760.742516][ T5139] usb 1-1: Manufacturer: syz [ 760.777491][ T5139] usb 1-1: SerialNumber: syz [ 760.816005][ T5139] usb 1-1: config 0 descriptor?? [ 760.841345][ T5139] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 762.755370][ T30] audit: type=1804 audit(2000000040.900:432): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4786" name="/newroot/226/bus/bus" dev="overlay" ino=1207 res=1 errno=0 [ 762.807012][T18302] Invalid ELF header magic: != ELF [ 763.369002][T18325] netem: incorrect gi model size [ 763.383243][T18325] netem: change failed [ 764.111008][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4799'. [ 764.251371][T18358] netem: incorrect gi model size [ 764.265333][T18358] netem: change failed [ 764.443719][ T5135] usb 1-1: USB disconnect, device number 30 [ 765.098674][ T5223] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 765.115643][T18385] nbd: nbd4 already in use [ 765.304806][ T5223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 765.336035][ T5223] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 765.360250][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.381920][ T5223] usb 1-1: config 0 descriptor?? [ 765.607357][ T5223] ath6kl: Failed to submit usb control message: -71 [ 765.634484][ T5223] ath6kl: unable to send the bmi data to the device: -71 [ 765.645851][ T5223] ath6kl: Unable to send get target info: -71 [ 765.656443][ T30] audit: type=1326 audit(2000000043.800:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18403 comm="syz.3.4828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a87d75bd9 code=0x0 [ 765.696758][ T30] audit: type=1326 audit(2000000043.830:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 765.720583][ T5223] ath6kl: Failed to init ath6kl core: -71 [ 765.729527][ T5223] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 765.752661][ T5223] usb 1-1: USB disconnect, device number 31 [ 765.768587][ T30] audit: type=1326 audit(2000000043.830:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 765.880398][ T30] audit: type=1326 audit(2000000043.830:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 765.921194][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4829'. [ 765.951091][ T30] audit: type=1326 audit(2000000043.830:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 766.013039][ T30] audit: type=1326 audit(2000000043.830:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 766.097077][ T30] audit: type=1326 audit(2000000043.830:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 766.172222][ T30] audit: type=1326 audit(2000000043.840:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 766.216657][ T30] audit: type=1326 audit(2000000043.840:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18414 comm="syz.2.4833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fac5ad75bd9 code=0x7ffc0000 [ 766.529004][ T5096] Bluetooth: hci6: sending frame failed (-49) [ 766.539081][T10883] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 766.873635][T18453] nbd: nbd0 already in use [ 767.315662][ T5096] Bluetooth: hci6: sending frame failed (-49) [ 767.325385][T10883] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 769.175309][T18524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4878'. [ 769.215142][T18524] vlan3: entered promiscuous mode [ 769.246696][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 769.246736][ T30] audit: type=1326 audit(2000000047.390:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18519 comm="syz.0.4877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 769.273901][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.398344][T15813] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 769.598108][T15813] usb 3-1: Using ep0 maxpacket: 16 [ 769.646794][T15813] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 769.691621][T15813] usb 3-1: config 0 has no interface number 0 [ 769.738518][T15813] usb 3-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 769.803941][T15813] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 769.852087][T15813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.903738][T15813] usb 3-1: Product: syz [ 769.958097][T15813] usb 3-1: Manufacturer: syz [ 769.975576][T15813] usb 3-1: SerialNumber: syz [ 769.997815][T15813] usb 3-1: config 0 descriptor?? [ 770.266538][T18539] sctp: [Deprecated]: syz.0.4883 (pid 18539) Use of int in maxseg socket option. [ 770.266538][T18539] Use struct sctp_assoc_value instead [ 771.018591][T10883] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 771.502334][T18561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4892'. [ 771.652324][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'. [ 771.696990][T18574] sch_fq: defrate 4294967292 ignored. [ 771.891287][T18578] sctp: [Deprecated]: syz.0.4897 (pid 18578) Use of int in maxseg socket option. [ 771.891287][T18578] Use struct sctp_assoc_value instead [ 772.115208][ T5139] usb 3-1: USB disconnect, device number 34 [ 772.359286][T18587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4901'. [ 772.382385][T10209] Bluetooth: hci6: Frame reassembly failed (-84) [ 772.383614][ T5096] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 772.400155][T18587] vlan2: entered promiscuous mode [ 772.533037][T18599] sctp: [Deprecated]: syz.4.4906 (pid 18599) Use of int in maxseg socket option. [ 772.533037][T18599] Use struct sctp_assoc_value instead [ 772.716396][T18613] team0: No ports can be present during mode change [ 772.759303][T18612] sch_fq: defrate 4294967292 ignored. [ 773.214779][T18630] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4919'. [ 773.378157][ T5139] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 773.478131][ T9264] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 773.565631][T18634] netlink: 'syz.4.4921': attribute type 1 has an invalid length. [ 773.574358][T18634] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4921'. [ 773.585159][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 773.593503][T18634] netlink: 'syz.4.4921': attribute type 1 has an invalid length. [ 773.603062][ T5139] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 773.612065][ T5139] usb 1-1: config 0 has no interface number 0 [ 773.620818][ T5139] usb 1-1: config 0 interface 11 has no altsetting 0 [ 773.681012][ T5139] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=5a.16 [ 773.690648][ T9264] usb 3-1: Using ep0 maxpacket: 16 [ 773.706165][ T9264] usb 3-1: config 0 has an invalid interface number: 215 but max is 0 [ 773.721339][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.729786][ T9264] usb 3-1: config 0 has no interface number 0 [ 773.738588][ T9264] usb 3-1: config 0 interface 215 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 773.757593][ T5139] usb 1-1: config 0 descriptor?? [ 773.791044][ T5139] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 773.801103][ T9264] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=e6.00 [ 773.821716][ T9264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.831721][ T5139] usb 1-1: selecting invalid altsetting 0 [ 773.846886][ T1977] pvrusb2: Invalid write control endpoint [ 773.859655][ T9264] usb 3-1: Product: syz [ 773.883206][ T9264] usb 3-1: Manufacturer: syz [ 773.896199][ T9264] usb 3-1: SerialNumber: syz [ 773.909227][ T9264] usb 3-1: config 0 descriptor?? [ 774.011576][ T9264] usb 1-1: USB disconnect, device number 32 [ 774.035136][ T1977] pvrusb2: Invalid write control endpoint [ 774.043557][ T1977] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 774.067832][ T1977] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 774.086296][ T1977] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 774.106651][ T1977] pvrusb2: Device being rendered inoperable [ 774.120033][ T1977] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 774.128157][ T1977] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 774.142887][ T1977] pvrusb2: Attached sub-driver cx25840 [ 774.201719][ T1977] pvrusb2: Attempted to execute control transfer when device not ok [ 774.216428][T18646] team0: No ports can be present during mode change [ 774.232674][ T1977] pvrusb2: Attempted to execute control transfer when device not ok [ 774.252804][ T1977] pvrusb2: Attempted to execute control transfer when device not ok [ 774.265848][ T1977] pvrusb2: Attempted to execute control transfer when device not ok [ 774.284204][ T1977] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 774.378731][T10883] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 774.621729][ T1977] TUNER: Unable to find symbol tda829x_probe() [ 775.164927][ T1977] DVB: Unable to find symbol tda9887_attach() [ 775.276418][ T1977] tuner: 1-0043: Tuner 4 found with type(s) Radio TV. [ 775.561623][ T1977] pvrusb2: Attached sub-driver tuner [ 775.595153][ T1977] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 775.651547][ T1977] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 775.872799][T18678] netlink: 'syz.3.4935': attribute type 1 has an invalid length. [ 775.884214][ T30] audit: type=1326 audit(2000000054.030:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18674 comm="syz.0.4936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 776.014463][ T5139] usb 3-1: USB disconnect, device number 35 [ 776.609718][ T2796] Bluetooth: hci6: Frame reassembly failed (-84) [ 776.626867][ T5096] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 777.238239][ T5139] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 777.435834][ T5139] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 777.459468][ T5139] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 777.469264][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.484886][ T5139] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 777.492426][ T5139] usb 3-1: No valid video chain found. [ 777.723662][ T5223] usb 3-1: USB disconnect, device number 36 [ 777.774066][ T30] audit: type=1326 audit(2000000055.920:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18727 comm="syz.0.4956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 778.324230][ T30] audit: type=1326 audit(2000000056.470:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18742 comm="syz.3.4963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a87d75bd9 code=0x0 [ 778.381185][ T30] audit: type=1326 audit(2000000056.530:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18740 comm="syz.4.4962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc671775bd9 code=0x0 [ 778.618431][ T5096] Bluetooth: hci6: command 0x1003 tx timeout [ 778.619061][T10883] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 778.784500][T18756] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 778.888051][ T5223] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 779.078067][ T5223] usb 3-1: Using ep0 maxpacket: 32 [ 779.091283][ T5223] usb 3-1: config index 0 descriptor too short (expected 65529, got 18) [ 779.105982][ T5223] usb 3-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=4d.28 [ 779.115750][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.124002][ T5223] usb 3-1: Product: syz [ 779.128579][ T5223] usb 3-1: Manufacturer: syz [ 779.169511][ T5223] usb 3-1: SerialNumber: syz [ 779.198265][ T5223] r8152-cfgselector 3-1: Unknown version 0x0000 [ 779.215808][ T5223] r8152-cfgselector 3-1: config 0 descriptor?? [ 779.329223][ T30] audit: type=1326 audit(2000000057.480:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18770 comm="syz.4.4975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc671775bd9 code=0x0 [ 779.413827][T10209] Bluetooth: hci6: Frame reassembly failed (-84) [ 779.425956][ T5096] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 779.543019][T18783] netlink: 'syz.0.4979': attribute type 1 has an invalid length. [ 779.555306][T18783] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4979'. [ 779.565047][T18783] netlink: 'syz.0.4979': attribute type 1 has an invalid length. [ 779.731044][T18791] netlink: 'syz.3.4983': attribute type 1 has an invalid length. [ 779.990864][T18795] netlink: 'syz.0.4984': attribute type 3 has an invalid length. [ 780.082098][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4985'. [ 780.266635][ T30] audit: type=1326 audit(2000000058.410:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.3.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87d75bd9 code=0x7ffc0000 [ 780.335887][ T30] audit: type=1326 audit(2000000058.410:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.3.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f8a87d75bd9 code=0x7ffc0000 [ 780.398997][ T30] audit: type=1326 audit(2000000058.410:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.3.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87d75bd9 code=0x7ffc0000 [ 780.438837][ T30] audit: type=1326 audit(2000000058.440:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.3.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a87d75bd9 code=0x7ffc0000 [ 780.472259][ T30] audit: type=1326 audit(2000000058.440:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18801 comm="syz.3.4987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a87d75bd9 code=0x7ffc0000 [ 780.802819][T18820] netlink: 'syz.4.4996': attribute type 1 has an invalid length. [ 781.418750][T10883] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 781.963858][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 781.963878][ T30] audit: type=1326 audit(2000000060.110:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18827 comm="syz.3.4998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a87d75bd9 code=0x0 [ 781.998942][ T5140] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 784.529224][ T30] audit: type=1326 audit(2000000062.660:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18841 comm="syz.2.5004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac5ad75bd9 code=0x0 [ 784.578416][T18854] netlink: 'syz.3.5008': attribute type 1 has an invalid length. [ 784.604911][T18854] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5008'. [ 784.622792][T18854] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5008'. [ 785.953386][T18871] netlink: 'syz.1.5011': attribute type 3 has an invalid length. [ 786.148879][ T30] audit: type=1326 audit(2000000064.280:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18879 comm="syz.2.5018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x0 [ 786.365817][T18894] netlink: 'syz.1.5023': attribute type 1 has an invalid length. [ 786.385122][T18894] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5023'. [ 786.406036][T18894] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5023'. [ 787.356656][T18908] netlink: 'syz.3.5028': attribute type 3 has an invalid length. [ 787.387220][T18909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5030'. [ 787.598189][ T5135] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 787.620608][T18924] netlink: 'syz.2.5039': attribute type 1 has an invalid length. [ 787.649115][T18924] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5039'. [ 787.667594][T18924] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5039'. [ 787.805460][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.837459][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.856629][T18937] netlink: 'syz.2.5044': attribute type 3 has an invalid length. [ 789.820949][ T5135] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 789.832141][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.827437][ T5135] usb 1-1: config 0 descriptor?? [ 790.958331][ T5135] usb 1-1: can't set config #0, error -71 [ 790.967608][T18942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5043'. [ 790.998421][ T5135] usb 1-1: USB disconnect, device number 33 [ 791.338378][T18960] bridge0: port 2(bridge_slave_1) entered listening state [ 791.521146][T18969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5055'. [ 791.548221][T18969] netlink: 'syz.1.5055': attribute type 30 has an invalid length. [ 791.885416][T18979] netlink: 'syz.4.5056': attribute type 21 has an invalid length. [ 791.893581][T18979] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5056'. [ 792.929755][T19000] bridge0: port 2(bridge_slave_1) entered listening state [ 793.465169][T19015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5072'. [ 793.488353][T19015] netlink: 'syz.2.5072': attribute type 30 has an invalid length. [ 795.473161][T19035] netlink: 'syz.2.5075': attribute type 21 has an invalid length. [ 795.481337][T19035] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5075'. [ 796.020380][ T5096] Bluetooth: hci3: command 0x0406 tx timeout [ 798.221545][T19072] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 800.640100][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5110'. [ 800.890373][ T30] audit: type=1326 audit(2000000079.040:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19134 comm="syz.4.5117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc671775bd9 code=0x0 [ 800.928808][T19136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5111'. [ 800.952730][T19136] netlink: 'syz.0.5111': attribute type 30 has an invalid length. [ 801.079367][T19139] KVM: debugfs: duplicate directory 19139-4 [ 801.167264][T19144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5119'. [ 801.182570][T19144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5119'. [ 801.662230][T19150] sctp: [Deprecated]: syz.1.5120 (pid 19150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 801.662230][T19150] Use struct sctp_sack_info instead [ 802.798015][T19165] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.234409][ T30] audit: type=1326 audit(2000000082.380:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19199 comm="syz.0.5134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 804.413969][T19206] KVM: debugfs: duplicate directory 19206-4 [ 804.450935][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5136'. [ 805.256844][T19245] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5146'. [ 805.298065][T19245] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5146'. [ 806.543924][T19275] sctp: [Deprecated]: syz.4.5151 (pid 19275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.543924][T19275] Use struct sctp_sack_info instead [ 807.764863][ T30] audit: type=1326 audit(2000000085.910:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19282 comm="syz.1.5155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c2175bd9 code=0x0 [ 807.947088][ T5096] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 807.958721][ T5096] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 807.967475][ T5096] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 807.975851][ T5096] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 807.984208][ T5096] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 807.995665][T19284] KVM: debugfs: duplicate directory 19284-4 [ 808.005057][ T5096] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 808.429511][T19286] chnl_net:caif_netlink_parms(): no params data found [ 808.621872][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.759931][T19286] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.767546][T19286] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.776111][T19286] bridge_slave_0: entered allmulticast mode [ 808.797285][T19286] bridge_slave_0: entered promiscuous mode [ 808.807298][T19312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.813940][T19311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5161'. [ 808.828304][T19286] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.835579][T19286] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.848050][T19311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5161'. [ 808.868449][T19286] bridge_slave_1: entered allmulticast mode [ 808.876206][T19286] bridge_slave_1: entered promiscuous mode [ 808.974524][T19286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.993040][T19286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.199126][T19286] team0: Port device team_slave_0 added [ 809.269091][T19286] team0: Port device team_slave_1 added [ 809.383431][T19326] sctp: [Deprecated]: syz.1.5163 (pid 19326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.383431][T19326] Use struct sctp_sack_info instead [ 809.899340][T19286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.931817][T19286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.957866][ C0] vkms_vblank_simulate: vblank timer overrun [ 810.024873][T19286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.065488][T10883] Bluetooth: hci6: command tx timeout [ 810.089864][T19286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.124543][T19286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.168790][T19286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.353206][T19286] hsr_slave_0: entered promiscuous mode [ 810.383127][T19286] hsr_slave_1: entered promiscuous mode [ 810.414047][T19286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.423072][ T30] audit: type=1326 audit(2000000088.570:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19339 comm="syz.4.5170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc671775bd9 code=0x0 [ 810.425340][T19286] Cannot create hsr debugfs directory [ 810.617695][T19341] KVM: debugfs: duplicate directory 19341-4 [ 811.026704][T19286] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.260062][T19286] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.471592][T19360] tmpfs: Bad value for 'nr_inodes' [ 811.479957][T19286] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.504053][T10883] Bluetooth: hci5: unexpected event for opcode 0x0c05 [ 811.710937][T19286] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.066525][T19367] sctp: [Deprecated]: syz.4.5179 (pid 19367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.066525][T19367] Use struct sctp_sack_info instead [ 812.139795][T10883] Bluetooth: hci6: command tx timeout [ 813.214122][T19286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 813.241470][T19286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 813.259496][T19286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 813.270895][T19286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 813.615774][T19286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.694289][T19286] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.726871][ T9318] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.734238][ T9318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.799739][ T9318] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.807063][ T9318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.218338][T10883] Bluetooth: hci6: command tx timeout [ 814.465710][T19286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.637713][T19286] veth0_vlan: entered promiscuous mode [ 814.665943][T19286] veth1_vlan: entered promiscuous mode [ 814.770013][T19286] veth0_macvtap: entered promiscuous mode [ 814.805685][T19286] veth1_macvtap: entered promiscuous mode [ 814.903351][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.939786][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.957949][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 814.992120][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.048330][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.093873][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.123703][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.176583][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.210173][T19286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.452482][T19419] hfs: can't find a HFS filesystem on dev nullb0 [ 817.142473][T10883] Bluetooth: hci6: command tx timeout [ 817.270122][ T9239] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 817.473640][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.502969][ T9239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.516863][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.528982][ T9239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.556505][ T9239] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 817.565531][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.598053][ T9239] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 817.618060][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.621875][ T9239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.640182][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.655198][ T9239] usb 5-1: config 0 descriptor?? [ 817.673239][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.697780][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.717219][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.737400][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.761022][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.785013][T19286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.802792][T19286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.823159][T19286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.904322][T19286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.931037][T19286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.947207][T19286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.956355][T19286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.115439][ T9239] acrux 0003:1A34:0802.0009: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 818.154340][ T9239] acrux 0003:1A34:0802.0009: no inputs found [ 818.167866][ T9239] acrux 0003:1A34:0802.0009: Failed to enable force feedback support, error: -19 [ 818.215843][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.235076][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.352174][T10209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.364776][T10209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.369004][ T5139] usb 5-1: USB disconnect, device number 30 [ 818.887157][T19455] could not allocate digest TFM handle sha256-arm64-neon [ 819.428647][T19474] program syz.3.5219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 820.688973][ T5135] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 820.829997][T10883] Bluetooth: hci5: unexpected event for opcode 0x202a [ 820.920576][ T5135] usb 5-1: config 1 interface 0 altsetting 231 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 820.981550][ T5135] usb 5-1: config 1 interface 0 has no altsetting 0 [ 821.008505][T19506] program syz.1.5231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.032380][ T5135] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 821.048019][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.068587][ T5135] usb 5-1: Manufacturer: ȗ⩪㞄밽屠莅㩁齟୾ᗞ洫뜠ඓ睗ǽ馊䚭讇㕁㣸ꗌ㓛Ὃ楄銹ꋥ껗⊻矤ك琮褟ᄆ言晔飧쳾慧핀匥忋呑듄쯮ဈ톉薓䆻翳켊ﹰ杈 [ 821.103674][ T5135] usb 5-1: SerialNumber: syz [ 821.146206][T19486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.226736][T19514] ptrace attach of "./syz-executor exec"[14349] was attempted by ""[19514] [ 822.310614][ T5135] usb 5-1: USB disconnect, device number 31 [ 822.489049][T19539] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5246'. [ 822.525491][T19539] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 823.783635][T10883] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 823.858926][T10883] Bluetooth: hci6: Injecting HCI hardware error event [ 823.871270][ T5096] Bluetooth: hci6: hardware error 0x00 [ 824.296215][T19550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 824.594537][T19554] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 824.601140][T19554] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 824.632319][T19554] vhci_hcd vhci_hcd.0: Device attached [ 824.858511][T10883] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 824.918170][T15813] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 824.926583][T10883] Bluetooth: hci5: Injecting HCI hardware error event [ 824.937793][T10883] Bluetooth: hci5: hardware error 0x00 [ 824.971084][T19554] netlink: zone id is out of range [ 824.976531][T19554] netlink: zone id is out of range [ 825.805133][T19554] netlink: zone id is out of range [ 825.860207][T19554] netlink: zone id is out of range [ 825.868671][T19554] netlink: zone id is out of range [ 825.873884][T19554] netlink: zone id is out of range [ 825.879278][T19554] netlink: zone id is out of range [ 825.884969][T19554] netlink: zone id is out of range [ 825.890645][T19554] netlink: zone id is out of range [ 825.918096][T19582] [U] [ 825.921464][T19582] [U] [ 825.924258][T19582] [U] [ 825.926987][T19582] [U] [ 825.930077][T19582] [U] [ 825.932828][T19582] [U] [ 825.935553][T19582] [U] [ 825.938283][T19582] [U] [ 825.941491][T19582] [U] [ 825.944209][T19582] [U] [ 825.946898][T19582] [U] [ 826.059781][T19561] vhci_hcd: connection reset by peer [ 826.082027][ T51] vhci_hcd: stop threads [ 826.095740][ T51] vhci_hcd: release socket [ 826.108658][ T51] vhci_hcd: disconnect device [ 826.136697][T19566] [U] [ 826.155323][T19591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 826.258893][T19595] tmpfs: Bad value for 'nr_inodes' [ 826.378222][ T5096] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 826.426455][ T5096] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 827.054291][T10883] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 827.436957][T19603] netlink: 'syz.0.5267': attribute type 2 has an invalid length. [ 827.828992][ T9318] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 827.931852][T19621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 828.040940][ T9318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.070147][T19626] net_ratelimit: 28 callbacks suppressed [ 828.070170][T19626] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 828.092545][ T9318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.103740][ T9318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 828.136479][ T9318] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 828.164716][ T9318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.202314][ T9318] usb 3-1: config 0 descriptor?? [ 828.346292][T19620] could not allocate digest TFM handle sha256-arm64-neon [ 828.622944][T19639] netlink: 'syz.3.5281': attribute type 2 has an invalid length. [ 828.641690][ T9318] acrux 0003:1A34:0802.000A: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 828.665962][ T9318] acrux 0003:1A34:0802.000A: no inputs found [ 828.685152][ T9318] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19 [ 828.789795][ T9224] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 828.908056][ T5135] usb 3-1: USB disconnect, device number 38 [ 828.993361][ T9224] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 829.005076][ T9224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.029954][ T9224] usb 2-1: config 0 descriptor?? [ 829.695849][ T9224] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 830.198912][ T9224] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 830.288351][T15813] vhci_hcd: vhci_device speed not set [ 830.338709][ T9224] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 830.350290][ T9224] usb 2-1: USB disconnect, device number 26 [ 830.412340][T19656] input: syz1 as /devices/virtual/input/input40 [ 830.838674][T19669] netlink: 'syz.4.5293': attribute type 2 has an invalid length. [ 830.867949][ T30] audit: type=1326 audit(2000000109.003:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19670 comm="syz.2.5294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5ad75bd9 code=0x0 [ 831.032745][T19677] Invalid ELF section header overflow [ 833.075144][T19705] netlink: 'syz.0.5306': attribute type 2 has an invalid length. [ 834.058179][ T9264] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 834.568317][ T9264] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 834.948766][ T9264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.960300][ T9264] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.281587][ T9264] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 835.589556][ T9264] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 835.609226][ T9264] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 835.619179][ T9264] usb 2-1: Manufacturer: syz [ 835.633331][ T9264] usb 2-1: config 0 descriptor?? [ 835.692655][T19729] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5313'. [ 835.739294][T19729] gretap0: entered promiscuous mode [ 835.813306][T19732] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5313'. [ 835.842692][T19732] 0XD: renamed from gretap0 [ 835.851329][ T9264] usbhid 2-1:0.0: can't add hid device: -71 [ 835.869734][ T9264] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 835.898502][ T9264] usb 2-1: USB disconnect, device number 27 [ 835.907125][T19732] 0XD: left promiscuous mode [ 835.924236][T19732] 0XD: entered allmulticast mode [ 835.951299][T19732] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 836.340665][T19747] netlink: 'syz.3.5319': attribute type 2 has an invalid length. [ 837.332992][ T30] audit: type=1326 audit(2000000115.473:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19773 comm="syz.1.5332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c2175bd9 code=0x0 [ 838.010177][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5338'. [ 840.512664][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5350'. [ 844.200774][ T9264] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 844.298772][T15813] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 844.500365][ T9264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.512065][ T9264] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.917325][ T9264] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.928440][T15813] usb 4-1: Using ep0 maxpacket: 32 [ 845.474323][T15813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 845.485210][T19889] ALSA: seq fatal error: cannot create timer (-22) [ 845.492215][ T9264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.528251][ T9264] usb 5-1: Product: syz [ 845.532493][ T9264] usb 5-1: Manufacturer: syz [ 845.537120][ T9264] usb 5-1: SerialNumber: syz [ 845.547624][T15813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 845.593083][T15813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 845.642818][T15813] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 845.662893][T15813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.687434][T15813] usb 4-1: Product: syz [ 845.694688][T15813] usb 4-1: Manufacturer: syz [ 845.704305][T15813] usb 4-1: SerialNumber: syz [ 845.726448][T15813] usb 4-1: config 0 descriptor?? [ 845.748170][T15813] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22 [ 846.728709][ T9264] cdc_ncm 5-1:1.0: bind() failure [ 846.757676][ T9264] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 846.792675][ T9264] cdc_ncm 5-1:1.1: bind() failure [ 847.262317][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5385'. [ 847.275555][T19874] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5368'. [ 847.339583][ T9264] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 847.539990][ T9264] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 847.557357][ T9264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.565604][ T5135] usb 5-1: USB disconnect, device number 32 [ 847.607598][ T9264] usb 3-1: config 0 descriptor?? [ 847.828028][ T5140] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 847.982701][ T9264] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 848.014379][ T9264] usb 3-1: USB disconnect, device number 39 [ 848.031819][ T5140] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.068926][ T5140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.092469][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 848.122345][ T5140] usb 2-1: SerialNumber: syz [ 848.150488][ T5140] usb 2-1: bad CDC descriptors [ 848.211404][T19930] ALSA: seq fatal error: cannot create timer (-22) [ 848.509197][ T5140] usb 4-1: USB disconnect, device number 33 [ 848.654881][ T5135] usb 2-1: USB disconnect, device number 28 [ 850.100057][T19951] netlink: 'syz.2.5397': attribute type 9 has an invalid length. [ 850.679665][T19973] ALSA: seq fatal error: cannot create timer (-22) [ 850.800969][T15813] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 851.010015][T15813] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 851.035921][T15813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.092191][T15813] usb 4-1: config 0 descriptor?? [ 851.645791][T15813] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 851.696286][T15813] usb 4-1: USB disconnect, device number 34 [ 851.993966][T20006] ALSA: seq fatal error: cannot create timer (-22) [ 852.691338][T20026] tmpfs: Bad value for 'nr_inodes' [ 852.813987][T20029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.838989][T20029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.865512][T20029] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 853.070919][T20040] cgroup: Invalid name [ 854.406936][T20066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.425000][T20066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.444211][T20066] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 854.679321][T20080] netlink: 'syz.2.5447': attribute type 10 has an invalid length. [ 856.199183][ T5140] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 856.328040][ T784] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 856.369459][T20124] fuse: Unknown parameter 'grou00000000000000000000' [ 857.170040][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 857.286388][ T5140] usb 1-1: New USB device found, idVendor=056a, idProduct=0062, bcdDevice= 0.00 [ 857.317977][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.328314][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5467'. [ 857.350364][ T5140] usb 1-1: config 0 descriptor?? [ 857.367202][ T5140] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 857.414620][T20131] cgroup: Invalid name [ 857.437961][ T784] usb 3-1: Using ep0 maxpacket: 32 [ 857.450370][ T784] usb 3-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 857.490401][ T784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.515602][ T784] usb 3-1: Product: syz [ 857.528065][ T784] usb 3-1: Manufacturer: syz [ 857.533139][ T784] usb 3-1: SerialNumber: syz [ 857.553275][ T784] usb 3-1: config 0 descriptor?? [ 857.589608][ T9264] usb 1-1: USB disconnect, device number 34 [ 857.827400][ T9264] usb 3-1: USB disconnect, device number 40 [ 858.942587][T20163] ptrace attach of "./syz-executor exec"[15468] was attempted by "./syz-executor exec"[20163] [ 858.971882][T20163] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 861.802466][ C1] sd 0:0:1:0: [sda] tag#4974 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 861.813017][ C1] sd 0:0:1:0: [sda] tag#4974 CDB: Write(6) 0a 0b 00 08 00 00 [ 862.077250][T20207] ptrace attach of "./syz-executor exec"[19286] was attempted by "./syz-executor exec"[20207] [ 862.122456][T20207] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 866.062185][T20243] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5515'. [ 866.279671][ T5140] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 866.607488][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 866.862007][ T5140] usb 4-1: Dual-Role OTG device on HNP port [ 866.883936][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.956720][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 866.998176][ T5140] usb 4-1: SerialNumber: syz [ 867.075184][T20255] netlink: 'syz.2.5517': attribute type 10 has an invalid length. [ 867.130004][ T5140] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 867.372167][ T5140] usb 4-1: USB disconnect, device number 35 [ 867.704099][T20270] ptrace attach of "./syz-executor exec"[15365] was attempted by "./syz-executor exec"[20270] [ 867.729947][T20270] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 868.110525][T20281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5527'. [ 870.013974][T20354] netlink: 'syz.3.5560': attribute type 2 has an invalid length. [ 870.034512][T20354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5560'. [ 870.062396][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.305525][T20369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.391429][T20372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.519470][T20369] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.291908][T20401] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5581'. [ 871.328731][T10883] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 871.338750][T10883] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 872.818117][T20438] [U] [ 872.820980][T20438] [U] [ 872.823721][T20438] [U] [ 872.826446][T20438] [U] [ 872.830580][T20438] [U] [ 872.833320][T20438] [U] [ 872.836043][T20438] [U] [ 872.838854][T20438] [U] [ 872.841789][T20438] [U] [ 872.844521][T20438] [U] [ 872.847257][T20438] [U] [ 872.936770][T15813] IPVS: starting estimator thread 0... [ 873.058150][T20441] IPVS: using max 27 ests per chain, 64800 per kthread [ 873.449007][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 873.559068][T20429] [U] [ 873.634428][T20456] ADFS-fs (nullb0): unrecognised mount option "wlan0" or missing value [ 873.938069][ T784] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 874.129173][ T784] usb 5-1: Using ep0 maxpacket: 32 [ 874.149116][ T784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.170508][ T784] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 874.201912][ T784] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 874.213304][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.227163][ T784] usb 5-1: config 0 descriptor?? [ 874.248529][ T784] usb 5-1: bad CDC descriptors [ 874.718353][ T5223] usb 5-1: USB disconnect, device number 33 [ 876.451754][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5635'. [ 877.058125][ T784] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 877.279742][ T784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.319120][ T784] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 877.364169][ T784] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 877.386749][ T784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.416343][ T784] usb 4-1: Product: syz [ 877.442570][ T784] usb 4-1: Manufacturer: syz [ 877.462092][ T784] usb 4-1: SerialNumber: syz [ 878.167999][ T9264] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 878.367929][ T9264] usb 5-1: Using ep0 maxpacket: 8 [ 878.381375][ T9264] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 878.397956][ T9264] usb 5-1: config 179 has no interface number 0 [ 878.416871][ T9264] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 878.438013][ T9264] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 878.477418][ T9264] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 878.507473][ T9264] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 878.530075][ T9264] usb 5-1: config 179 interface 65 has no altsetting 0 [ 878.537323][ T9264] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 878.538531][ T5140] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 878.555988][ T9264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.578151][ T784] cdc_ncm 4-1:1.0: bind() failure [ 878.579557][T20588] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 878.587662][ T784] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 878.628822][ T784] cdc_ncm 4-1:1.1: bind() failure [ 878.636730][ T9264] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input41 [ 878.724029][ T4518] input input41: unable to receive magic message: -110 [ 878.742331][ T4518] input input41: unable to receive magic message: -32 [ 878.760265][ T4518] input input41: unable to receive magic message: -32 [ 878.788272][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 878.796237][ T4518] input input41: unable to receive magic message: -32 [ 878.810991][ T5140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.833803][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 878.852479][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 878.864908][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 878.894765][ T5140] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 878.926514][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.953631][ T5140] usb 3-1: config 0 descriptor?? [ 879.006656][T20588] input input41: unable to receive magic message: -32 [ 879.046318][T20588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.062635][T20588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.140023][T20560] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5639'. [ 879.206184][ T5140] usb 5-1: USB disconnect, device number 34 [ 879.206286][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 879.226309][ T5140] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 879.286535][ T5139] usb 4-1: USB disconnect, device number 36 [ 879.295670][ T784] usb 3-1: USB disconnect, device number 41 [ 880.708990][T20628] netem: change failed [ 880.965339][T20635] sch_tbf: burst 0 is lower than device bridge_slave_1 mtu (1514) ! [ 881.538321][ T9264] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 881.738218][ T9318] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 881.758166][ T9264] usb 5-1: Using ep0 maxpacket: 8 [ 881.768432][ T9264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.797599][ T9264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 881.842163][ T9264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 881.851974][T20665] netem: change failed [ 881.884826][ T9264] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 881.948546][ T9264] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 881.968241][ T9318] usb 3-1: Using ep0 maxpacket: 16 [ 881.978956][T20669] sch_tbf: burst 0 is lower than device bridge_slave_1 mtu (1514) ! [ 881.992850][ T9318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 882.021125][ T9264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.056206][ T9318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 882.080684][ T9264] usb 5-1: config 0 descriptor?? [ 882.127969][ T9318] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 882.179119][ T9318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.187411][ T9318] usb 3-1: Product: syz [ 882.221499][ T9318] usb 3-1: Manufacturer: syz [ 882.248249][ T9318] usb 3-1: SerialNumber: syz [ 882.277575][ T9318] usb 3-1: config 0 descriptor?? [ 882.347767][ T9318] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 882.434932][ T784] usb 5-1: USB disconnect, device number 35 [ 882.826638][T20688] netlink: 'syz.0.5690': attribute type 10 has an invalid length. [ 882.962757][T20688] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.219555][T20688] bond0: (slave team0): Enslaving as an active interface with an up link [ 883.456285][T20694] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5692'. [ 883.806865][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5693'. [ 884.046034][T20704] sch_tbf: burst 0 is lower than device bridge_slave_1 mtu (1514) ! [ 884.240645][T20706] netlink: 'syz.4.5698': attribute type 2 has an invalid length. [ 884.262604][ T5135] usb 3-1: USB disconnect, device number 42 [ 884.288061][T20706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5698'. [ 885.678405][ T5135] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 885.748411][T20733] netlink: 'syz.3.5705': attribute type 10 has an invalid length. [ 885.845233][T20733] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.873360][T20733] bond0: (slave team0): Enslaving as an active interface with an up link [ 885.926144][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 885.952471][ T5135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.965355][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 885.987990][ T5135] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 885.999749][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.008256][ T5223] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 886.029565][ T5135] usb 5-1: config 0 descriptor?? [ 886.046297][ T5135] usb 5-1: bad CDC descriptors [ 886.200271][ T5223] usb 1-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 886.214970][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.233377][ T5139] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 886.242075][ T5223] usb 1-1: config 0 descriptor?? [ 886.285824][ T5223] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 886.312424][ T5223] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 886.353958][T20745] ptrace attach of "./syz-executor exec"[14349] was attempted by "./syz-executor exec"[20745] [ 886.377267][T20745] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 886.480887][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 886.504383][ T5139] usb 3-1: New USB device found, idVendor=056a, idProduct=0062, bcdDevice= 0.00 [ 886.524156][ T9264] usb 1-1: USB disconnect, device number 35 [ 886.558261][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.587195][ T5139] usb 3-1: config 0 descriptor?? [ 886.599765][ T5139] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 886.888415][ T5139] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 887.046568][ T9239] usb 3-1: USB disconnect, device number 43 [ 887.148377][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 887.177213][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 887.204823][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 887.312348][ T5223] usb 5-1: USB disconnect, device number 36 [ 887.360465][ T5139] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 887.404017][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.425463][ T5139] usb 4-1: Product: syz [ 887.435598][ T5139] usb 4-1: Manufacturer: syz [ 887.442996][ T5139] usb 4-1: SerialNumber: syz [ 887.459272][ T5139] usb 4-1: config 0 descriptor?? [ 887.484121][ T5139] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 889.016938][T20777] xt_l2tp: v2 tid > 0xffff: 2013396992 [ 889.398467][ T5135] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 889.690327][ T5135] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 889.751358][ T5135] usb 1-1: Dual-Role OTG device on HNP port [ 889.778176][ T5135] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.787568][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 889.805947][ T5135] usb 1-1: SerialNumber: syz [ 889.949360][ T5139] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 889.989458][ T5135] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 890.246549][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.692704][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.857109][ T5223] usb 4-1: USB disconnect, device number 37 [ 890.867267][ T5139] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 890.915845][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.947320][ T5139] usb 3-1: config 0 descriptor?? [ 891.061544][T20800] x_tables: ip_tables: ah match: only valid for protocol 51 [ 891.092301][ T9318] usb 1-1: USB disconnect, device number 36 [ 891.308066][ T5140] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 891.405861][ T5139] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 891.429021][ T5139] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 891.444206][ T5139] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 891.508191][ T5140] usb 5-1: Using ep0 maxpacket: 32 [ 891.522223][ T5140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.555386][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 891.586408][ T5140] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 891.610529][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.631951][ T5140] usb 5-1: config 0 descriptor?? [ 891.641299][ T5140] usb 5-1: bad CDC descriptors [ 891.933267][ T5139] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 892.031819][ C1] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 892.033014][ T5140] usb 3-1: USB disconnect, device number 44 [ 892.138018][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 892.163043][ T5139] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.187247][T20812] netlink: 'syz.0.5737': attribute type 10 has an invalid length. [ 892.195758][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.242342][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 892.262498][ T5139] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 892.291126][ T5139] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 892.311109][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.344619][ T5139] usb 4-1: config 0 descriptor?? [ 892.689785][ T5139] usb 4-1: USB disconnect, device number 38 [ 893.088481][T20819] ptrace attach of "./syz-executor exec"[14349] was attempted by "./syz-executor exec"[20819] [ 893.113507][T20819] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 893.205713][ T9239] usb 5-1: USB disconnect, device number 37 [ 893.445047][T20829] x_tables: ip_tables: ah match: only valid for protocol 51 [ 893.722964][ T9239] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 894.024222][ T5139] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 894.055554][ T9318] IPVS: starting estimator thread 0... [ 894.065040][ T9239] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 894.081363][ T9239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.158088][T20846] IPVS: using max 15 ests per chain, 36000 per kthread [ 894.254998][ T9239] usb 2-1: config 0 descriptor?? [ 894.418085][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 895.135397][ T9239] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 895.148277][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 895.178245][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 895.240949][ T5139] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 895.281778][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.315133][ T5139] usb 3-1: Product: syz [ 895.320479][ T5139] usb 3-1: Manufacturer: syz [ 895.338716][T20855] netlink: 'syz.3.5750': attribute type 10 has an invalid length. [ 895.356071][ T5139] usb 3-1: SerialNumber: syz [ 895.399673][ T5139] usb 3-1: config 0 descriptor?? [ 895.428214][ T5139] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 895.620785][ T30] audit: type=1326 audit(2000000173.763:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20856 comm="syz.4.5752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc671775bd9 code=0x0 [ 895.778045][ T5223] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 895.980300][ T5223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.998275][ T5223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.040256][ T5223] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 896.063919][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.093860][ T5223] usb 1-1: config 0 descriptor?? [ 896.551787][T20872] ptrace attach of "./syz-executor exec"[15365] was attempted by "./syz-executor exec"[20872] [ 896.552289][ T5223] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 896.573017][ T5223] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 896.596744][T20872] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 896.597232][ T5223] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 896.851391][ T5223] usb 3-1: USB disconnect, device number 45 [ 897.203048][ T9239] usb 2-1: USB disconnect, device number 29 [ 897.313069][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 897.313757][ T5139] usb 1-1: USB disconnect, device number 37 [ 897.567911][ T30] audit: type=1326 audit(2000000175.703:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20898 comm="syz.4.5766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc671775bd9 code=0x0 [ 897.814789][T20909] ptrace attach of "./syz-executor exec"[19286] was attempted by "./syz-executor exec"[20909] [ 897.835750][T20909] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 898.262887][T10883] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 898.367987][ T5139] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 898.687994][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 898.743648][ T9264] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 898.771520][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 898.804861][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 898.871711][ T5139] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 898.889273][ T5139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.915473][ T5139] usb 3-1: Product: syz [ 898.923429][ T5139] usb 3-1: Manufacturer: syz [ 898.937352][ T5139] usb 3-1: SerialNumber: syz [ 898.949737][ T9264] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 898.966873][ T9264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.976144][ T5139] usb 3-1: config 0 descriptor?? [ 899.003796][ T5139] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 899.019316][ T9264] usb 4-1: config 0 descriptor?? [ 899.254924][ T9264] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 899.626481][T20948] x_tables: ip_tables: ah match: only valid for protocol 51 [ 899.657267][ T30] audit: type=1326 audit(2000000177.793:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20949 comm="syz.0.5784" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb10d75bd9 code=0x0 [ 900.432680][ T5139] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 900.478104][ T5140] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 900.670449][ T5139] usb 2-1: config 0 has an invalid interface number: 154 but max is 0 [ 900.675379][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.697076][ T5139] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.703230][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.731137][ T5139] usb 2-1: config 0 has no interface number 0 [ 900.732156][ T5140] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 900.741386][ T5139] usb 2-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 900.755693][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.777944][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.790462][ T5140] usb 5-1: config 0 descriptor?? [ 900.824227][ T9264] usb 3-1: USB disconnect, device number 46 [ 900.858566][ T5139] usb 2-1: config 0 descriptor?? [ 900.874011][ T5139] qmi_wwan 2-1:0.154: skipping garbage [ 900.891865][ T5139] qmi_wwan 2-1:0.154: skipping garbage [ 900.902759][ T5139] qmi_wwan 2-1:0.154: bogus CDC Union: master=0, slave=0 [ 900.910511][ T5139] qmi_wwan 2-1:0.154: probe with driver qmi_wwan failed with error -22 [ 901.113644][ T5135] usb 2-1: USB disconnect, device number 30 [ 901.133144][T20966] [U] [ 901.135923][T20966] [U] [ 901.138669][T20966] [U] [ 901.141395][T20966] [U] [ 901.155327][T20966] [U] [ 901.158084][T20966] [U] [ 901.160810][T20966] [U] [ 901.163539][T20966] [U] [ 901.173706][T20966] [U] [ 901.176475][T20966] [U] [ 901.179207][T20966] [U] [ 901.213583][ T9264] IPVS: starting estimator thread 0... [ 901.228415][ T5140] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 901.256162][ T5140] hid-thrustmaster 0003:044F:B65D.000D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 901.290463][ T5140] hid-thrustmaster 0003:044F:B65D.000D: Wrong number of endpoints? [ 901.338353][T20970] IPVS: using max 18 ests per chain, 43200 per kthread [ 901.408393][ T5140] usb 4-1: USB disconnect, device number 39 [ 901.801234][T20962] [U] [ 901.853099][ C0] hid-thrustmaster 0003:044F:B65D.000D: URB to get model id failed with error -71 [ 901.887798][ T5140] usb 5-1: USB disconnect, device number 38 [ 902.334733][T10883] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 902.358707][T10883] Bluetooth: hci3: Injecting HCI hardware error event [ 902.422657][T10883] Bluetooth: hci3: hardware error 0x00 [ 903.219393][T21007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 903.350771][T21013] [U] [ 903.353556][T21013] [U] [ 903.356272][T21013] [U] [ 903.358994][T21013] [U] [ 903.381473][T21013] [U] [ 903.384237][T21013] [U] [ 903.386964][T21013] [U] [ 903.389693][T21013] [U] [ 903.397977][T21013] [U] [ 903.400719][T21013] [U] [ 903.403438][T21013] [U] [ 903.467559][ T5139] IPVS: starting estimator thread 0... [ 903.608157][T21019] IPVS: using max 17 ests per chain, 40800 per kthread [ 904.109753][T21008] [U] [ 904.538465][T10883] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 904.728198][ T5139] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 904.947080][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.968313][ T5140] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 905.006615][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.070874][ T5139] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 905.098547][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.126466][ T5139] usb 1-1: config 0 descriptor?? [ 905.133033][T21059] netlink: 'syz.2.5823': attribute type 10 has an invalid length. [ 905.156738][ T5140] usb 2-1: Using ep0 maxpacket: 16 [ 905.201533][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.228608][ T5140] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.282644][ T5140] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.361439][ T5140] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 905.386589][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.417267][ T5140] usb 2-1: config 0 descriptor?? [ 905.572439][ T5139] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 905.605360][ T5139] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 905.662961][ T5139] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints? [ 905.754474][T21074] [U] [ 905.757244][T21074] [U] [ 905.759968][T21074] [U] [ 905.762694][T21074] [U] [ 905.773440][T21074] [U] [ 905.776190][T21074] [U] [ 905.778916][T21074] [U] [ 905.781642][T21074] [U] [ 905.794267][T21074] [U] [ 905.797028][T21074] [U] [ 905.799766][T21074] [U] [ 905.841276][ T9239] IPVS: starting estimator thread 0... [ 905.948395][T21076] IPVS: using max 18 ests per chain, 43200 per kthread [ 906.155848][T21079] input: syz0 as /devices/virtual/input/input46 [ 906.301452][ C1] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -71 [ 906.312143][ T5139] usb 1-1: USB disconnect, device number 38 [ 906.431817][T21071] [U] [ 906.439687][ T5140] ryos 0003:1E7D:31CE.000F: unknown main item tag 0x0 [ 906.463416][ T5140] ryos 0003:1E7D:31CE.000F: collection stack underflow [ 906.488160][ T5140] ryos 0003:1E7D:31CE.000F: item 0 0 0 12 parsing failed [ 906.506303][ T5140] ryos 0003:1E7D:31CE.000F: parse failed [ 906.555819][ T5140] ryos 0003:1E7D:31CE.000F: probe with driver ryos failed with error -22 [ 906.622209][T10883] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 906.676292][ T5139] usb 2-1: USB disconnect, device number 31 [ 906.850268][ T9239] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 907.048986][ T9239] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 907.057345][ T9239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.088703][ T9239] usb 4-1: config 0 has no interface number 0 [ 907.105862][ T9239] usb 4-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 907.128104][ T5140] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 907.141688][ T9239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.155550][ T9239] usb 4-1: config 0 descriptor?? [ 907.168513][ T9239] qmi_wwan 4-1:0.154: skipping garbage [ 907.174377][ T9239] qmi_wwan 4-1:0.154: skipping garbage [ 907.200995][ T9239] qmi_wwan 4-1:0.154: bogus CDC Union: master=0, slave=0 [ 907.222404][ T9239] qmi_wwan 4-1:0.154: probe with driver qmi_wwan failed with error -22 [ 907.328065][ T5140] usb 5-1: Using ep0 maxpacket: 32 [ 907.344886][ T5140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.375002][ T5140] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 907.405513][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.426610][ T784] usb 4-1: USB disconnect, device number 40 [ 907.455962][ T5140] usb 5-1: Product: syz [ 907.462316][ T5140] usb 5-1: Manufacturer: syz [ 907.467014][ T5140] usb 5-1: SerialNumber: syz [ 907.495233][ T5140] usb 5-1: config 0 descriptor?? [ 907.505514][ T5140] usb 5-1: bad CDC descriptors [ 907.513071][ T5140] usb 5-1: unsupported MDLM descriptors [ 907.557076][T21109] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 907.782473][ T9239] usb 5-1: USB disconnect, device number 39 [ 908.427277][T21122] [U] [ 908.430044][T21122] [U] [ 908.432784][T21122] [U] [ 908.435521][T21122] [U] [ 908.444409][T21122] [U] [ 908.447158][T21122] [U] [ 908.449887][T21122] [U] [ 908.452699][T21122] [U] [ 908.455581][T21122] [U] [ 908.458313][T21122] [U] [ 908.461034][T21122] [U] [ 911.871037][T21120] [U] [ 913.118352][ T9239] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 913.548313][ T9239] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 913.611403][ T9239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.653791][ T9239] usb 1-1: config 0 descriptor?? [ 913.741757][ T9239] usb 1-1: selecting invalid altsetting 3 [ 913.754615][ T9239] comedi comedi0: could not set alternate setting 3 in high speed [ 913.768207][ T9239] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 913.808149][ T9239] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 913.962100][ T9239] usb 1-1: USB disconnect, device number 39 [ 915.523944][T21247] netlink: 'syz.0.5878': attribute type 10 has an invalid length. [ 916.777252][T21286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5893'. [ 916.986037][T21296] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 917.237068][T21304] ptrace attach of "./syz-executor exec"[15468] was attempted by "./syz-executor exec"[21304] [ 917.266624][T21304] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 917.518352][T21314] netlink: 'syz.3.5901': attribute type 10 has an invalid length. [ 917.652700][T21322] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.5903'. [ 917.692352][T21326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5906'. [ 917.970363][T21338] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 918.012733][T21341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 918.378528][T15813] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 918.578859][T15813] usb 1-1: Using ep0 maxpacket: 16 [ 918.608966][T15813] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 918.638942][T15813] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 918.660013][T15813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 918.674002][T15813] usb 1-1: SerialNumber: syz [ 918.687298][T15813] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 918.702424][T15813] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 918.714361][T15813] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 918.736881][T21361] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.5918'. [ 918.925882][T21373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5922'. [ 918.973777][T21376] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 919.098458][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 919.147169][T21387] netlink: 'syz.2.5927': attribute type 29 has an invalid length. [ 919.181051][T21387] netlink: 'syz.2.5927': attribute type 29 has an invalid length. [ 919.206518][T21387] netlink: 'syz.2.5927': attribute type 29 has an invalid length. [ 919.248971][T21387] netlink: 'syz.2.5927': attribute type 29 has an invalid length. [ 919.687116][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5932'. [ 920.148157][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 920.152097][T21415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5935'. [ 920.573751][T21426] team_slave_0: entered promiscuous mode [ 920.580232][T21426] team_slave_1: entered promiscuous mode [ 920.586053][T21426] bridge0: entered promiscuous mode [ 920.613045][T21426] vlan3: entered promiscuous mode [ 920.628034][T21426] team0: entered promiscuous mode [ 920.637431][T21426] team0: left promiscuous mode [ 920.644385][T21426] team_slave_0: left promiscuous mode [ 920.649913][T21426] team_slave_1: left promiscuous mode [ 920.655449][T21426] bridge0: left promiscuous mode [ 920.903053][T21442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5948'. [ 921.003438][ T784] usb 1-1: USB disconnect, device number 40 [ 921.434150][T21469] vlan2: entered promiscuous mode [ 921.448185][T21469] team0: entered promiscuous mode [ 921.453280][T21469] team_slave_0: entered promiscuous mode [ 921.477444][T21469] team_slave_1: entered promiscuous mode [ 921.504607][T21469] team0: left promiscuous mode [ 921.513024][T21469] team_slave_0: left promiscuous mode [ 921.538362][T21469] team_slave_1: left promiscuous mode [ 921.602803][T21474] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 921.760746][T21479] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 922.128040][ T9318] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 922.250450][T21506] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 922.318267][ T9318] usb 1-1: Using ep0 maxpacket: 16 [ 922.330865][ T9318] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 922.368406][ T9318] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.392925][ T9318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 922.417976][ T9318] usb 1-1: SerialNumber: syz [ 922.436660][ T9318] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 922.477971][ T9318] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 922.484501][ T9318] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 922.551331][T21517] netlink: 'syz.1.5980': attribute type 29 has an invalid length. [ 922.564518][T21517] netlink: 'syz.1.5980': attribute type 29 has an invalid length. [ 922.581435][T21517] netlink: 'syz.1.5980': attribute type 29 has an invalid length. [ 922.607369][T21517] netlink: 'syz.1.5980': attribute type 29 has an invalid length. [ 922.858031][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 923.217247][T21536] [U] [ 923.219998][T21536] [U] [ 923.222730][T21536] [U] [ 923.225460][T21536] [U] [ 923.238628][T21536] [U] [ 923.241383][T21536] [U] [ 923.244087][T21536] [U] [ 923.246785][T21536] [U] [ 923.287944][T21536] [U] [ 923.290731][T21536] [U] [ 923.293461][T21536] [U] [ 923.628171][ T5135] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 923.830989][ T5135] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 923.870350][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.906490][T21533] [U] [ 923.909313][ T5135] usb 2-1: config 0 descriptor?? [ 923.909486][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 923.968649][ T5135] usb 2-1: selecting invalid altsetting 3 [ 923.997317][ T5135] comedi comedi0: could not set alternate setting 3 in high speed [ 924.001976][T21551] netlink: 'syz.2.5994': attribute type 29 has an invalid length. [ 924.014558][T21551] netlink: 'syz.2.5994': attribute type 29 has an invalid length. [ 924.030213][ T5135] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 924.061004][T21551] netlink: 'syz.2.5994': attribute type 29 has an invalid length. [ 924.081979][ T5135] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 924.086392][T21551] netlink: 'syz.2.5994': attribute type 29 has an invalid length. [ 924.412099][T21555] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.5996'. [ 924.477405][ T9318] usb 2-1: USB disconnect, device number 32 [ 924.839486][T21563] netlink: 'syz.3.5998': attribute type 29 has an invalid length. [ 924.938038][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.266817][ T9318] usb 1-1: USB disconnect, device number 41 [ 925.309520][T21563] netlink: 'syz.3.5998': attribute type 29 has an invalid length. [ 926.171579][T15365] ------------[ cut here ]------------ [ 926.177674][T15365] ida_free called for id=8192 which is not allocated. [ 926.258696][T15365] WARNING: CPU: 1 PID: 15365 at lib/idr.c:525 ida_free+0x370/0x420 [ 926.266939][T15365] Modules linked in: [ 926.271000][T15365] CPU: 1 PID: 15365 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 926.282234][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 926.292453][T15365] RIP: 0010:ida_free+0x370/0x420 [ 926.297498][T15365] Code: 10 42 80 3c 28 00 74 05 e8 2d 33 88 f6 48 8b 7c 24 40 4c 89 fe e8 60 a0 17 00 90 48 c7 c7 60 5f eb 8c 89 de e8 71 f5 e7 f5 90 <0f> 0b 90 90 eb 3d e8 15 c7 25 f6 49 bd 00 00 00 00 00 fc ff df 4d [ 926.317455][T15365] RSP: 0018:ffffc9000bb97940 EFLAGS: 00010246 [ 926.323965][T15365] RAX: 585a03680e782e00 RBX: 0000000000002000 RCX: ffff888011e21e00 [ 926.332384][T15365] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 926.340810][T15365] RBP: ffffc9000bb97a30 R08: ffffffff81585742 R09: fffffbfff1c39994 [ 926.348871][T15365] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc9000bb97980 [ 926.358431][T15365] R13: dffffc0000000000 R14: ffff88802c1e80a0 R15: 0000000000000246 [ 926.366523][T15365] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 926.376164][T15365] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.385914][T15365] CR2: 000000002008f000 CR3: 00000000795ec000 CR4: 00000000003506f0 [ 926.393990][T15365] Call Trace: [ 926.397274][T15365] [ 926.400646][T15365] ? __warn+0x163/0x4e0 [ 926.404823][T15365] ? ida_free+0x370/0x420 [ 926.409236][T15365] ? report_bug+0x2b3/0x500 [ 926.413843][T15365] ? ida_free+0x370/0x420 [ 926.418270][T15365] ? handle_bug+0x3e/0x70 [ 926.422607][T15365] ? exc_invalid_op+0x1a/0x50 [ 926.427555][T15365] ? asm_exc_invalid_op+0x1a/0x20 [ 926.432907][T15365] ? __warn_printk+0x292/0x360 [ 926.437697][T15365] ? ida_free+0x370/0x420 [ 926.442332][T15365] ? __pfx_ida_free+0x10/0x10 [ 926.447045][T15365] ? synchronize_rcu+0x11b/0x360 [ 926.452049][T15365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.458534][T15365] hci_conn_del+0x746/0xc40 [ 926.463078][T15365] hci_conn_hash_flush+0x18e/0x240 [ 926.468276][T15365] hci_dev_close_sync+0x911/0xf60 [ 926.473358][T15365] hci_unregister_dev+0x1db/0x4e0 [ 926.478484][T15365] vhci_release+0x83/0xd0 [ 926.484309][T15365] ? __pfx_vhci_release+0x10/0x10 [ 926.489649][T15365] __fput+0x24a/0x8a0 [ 926.494081][T15365] task_work_run+0x24f/0x310 [ 926.498772][T15365] ? __pfx_task_work_run+0x10/0x10 [ 926.503903][T15365] ? do_exit+0xa22/0x27e0 [ 926.508405][T15365] ? kmem_cache_free+0x145/0x350 [ 926.513370][T15365] do_exit+0xa27/0x27e0 [ 926.517566][T15365] ? __pfx_do_exit+0x10/0x10 [ 926.522501][T15365] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 926.528780][T15365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 926.535127][T15365] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.540556][T15365] ? lockdep_hardirqs_on+0x99/0x150 [ 926.545890][T15365] do_group_exit+0x207/0x2c0 [ 926.550829][T15365] __x64_sys_exit_group+0x3f/0x40 [ 926.555884][T15365] do_syscall_64+0xf3/0x230 [ 926.560447][T15365] ? clear_bhb_loop+0x35/0x90 [ 926.565142][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.571077][T15365] RIP: 0033:0x7fc671775bd9 [ 926.575492][T15365] Code: Unable to access opcode bytes at 0x7fc671775baf. [ 926.582724][T15365] RSP: 002b:00007ffd6f3ef548 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 926.591174][T15365] RAX: ffffffffffffffda RBX: 00007fc6717e3587 RCX: 00007fc671775bd9 [ 926.599194][T15365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 926.607168][T15365] RBP: 0000000000000016 R08: 00007ffd6f3ed2e6 R09: 00007ffd6f3f0800 [ 926.615410][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6f3f0800 [ 926.623461][T15365] R13: 00007fc6717e3515 R14: 0000555594f084a8 R15: 0000000000000007 [ 926.631892][T15365] [ 926.634937][T15365] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 926.642248][T15365] CPU: 1 PID: 15365 Comm: syz-executor Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 926.652580][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 926.662638][T15365] Call Trace: [ 926.665916][T15365] [ 926.668847][T15365] dump_stack_lvl+0x241/0x360 [ 926.673568][T15365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.678791][T15365] ? __pfx__printk+0x10/0x10 [ 926.683415][T15365] ? vscnprintf+0x5d/0x90 [ 926.687748][T15365] panic+0x349/0x860 [ 926.691692][T15365] ? __warn+0x172/0x4e0 [ 926.695856][T15365] ? __pfx_panic+0x10/0x10 [ 926.700303][T15365] __warn+0x346/0x4e0 [ 926.704323][T15365] ? ida_free+0x370/0x420 [ 926.708702][T15365] report_bug+0x2b3/0x500 [ 926.713049][T15365] ? ida_free+0x370/0x420 [ 926.717398][T15365] handle_bug+0x3e/0x70 [ 926.721564][T15365] exc_invalid_op+0x1a/0x50 [ 926.726092][T15365] asm_exc_invalid_op+0x1a/0x20 [ 926.730965][T15365] RIP: 0010:ida_free+0x370/0x420 [ 926.735938][T15365] Code: 10 42 80 3c 28 00 74 05 e8 2d 33 88 f6 48 8b 7c 24 40 4c 89 fe e8 60 a0 17 00 90 48 c7 c7 60 5f eb 8c 89 de e8 71 f5 e7 f5 90 <0f> 0b 90 90 eb 3d e8 15 c7 25 f6 49 bd 00 00 00 00 00 fc ff df 4d [ 926.755552][T15365] RSP: 0018:ffffc9000bb97940 EFLAGS: 00010246 [ 926.761712][T15365] RAX: 585a03680e782e00 RBX: 0000000000002000 RCX: ffff888011e21e00 [ 926.769681][T15365] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 926.777647][T15365] RBP: ffffc9000bb97a30 R08: ffffffff81585742 R09: fffffbfff1c39994 [ 926.785628][T15365] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffffc9000bb97980 [ 926.793608][T15365] R13: dffffc0000000000 R14: ffff88802c1e80a0 R15: 0000000000000246 [ 926.801590][T15365] ? __warn_printk+0x292/0x360 [ 926.806371][T15365] ? __pfx_ida_free+0x10/0x10 [ 926.811053][T15365] ? synchronize_rcu+0x11b/0x360 [ 926.815996][T15365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 926.821982][T15365] hci_conn_del+0x746/0xc40 [ 926.826490][T15365] hci_conn_hash_flush+0x18e/0x240 [ 926.831611][T15365] hci_dev_close_sync+0x911/0xf60 [ 926.836662][T15365] hci_unregister_dev+0x1db/0x4e0 [ 926.841702][T15365] vhci_release+0x83/0xd0 [ 926.846031][T15365] ? __pfx_vhci_release+0x10/0x10 [ 926.851088][T15365] __fput+0x24a/0x8a0 [ 926.855086][T15365] task_work_run+0x24f/0x310 [ 926.859700][T15365] ? __pfx_task_work_run+0x10/0x10 [ 926.864830][T15365] ? do_exit+0xa22/0x27e0 [ 926.869162][T15365] ? kmem_cache_free+0x145/0x350 [ 926.874106][T15365] do_exit+0xa27/0x27e0 [ 926.878274][T15365] ? __pfx_do_exit+0x10/0x10 [ 926.882864][T15365] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 926.888860][T15365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 926.895205][T15365] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.900424][T15365] ? lockdep_hardirqs_on+0x99/0x150 [ 926.905637][T15365] do_group_exit+0x207/0x2c0 [ 926.910242][T15365] __x64_sys_exit_group+0x3f/0x40 [ 926.915278][T15365] do_syscall_64+0xf3/0x230 [ 926.919800][T15365] ? clear_bhb_loop+0x35/0x90 [ 926.924489][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.930391][T15365] RIP: 0033:0x7fc671775bd9 [ 926.934803][T15365] Code: Unable to access opcode bytes at 0x7fc671775baf. [ 926.941822][T15365] RSP: 002b:00007ffd6f3ef548 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 926.950240][T15365] RAX: ffffffffffffffda RBX: 00007fc6717e3587 RCX: 00007fc671775bd9 [ 926.958259][T15365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 926.966249][T15365] RBP: 0000000000000016 R08: 00007ffd6f3ed2e6 R09: 00007ffd6f3f0800 [ 926.974218][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6f3f0800 [ 926.982188][T15365] R13: 00007fc6717e3515 R14: 0000555594f084a8 R15: 0000000000000007 [ 926.990170][T15365] [ 926.993526][T15365] Kernel Offset: disabled [ 926.997990][T15365] Rebooting in 86400 seconds..