last executing test programs: 2m28.060940682s ago: executing program 1 (id=6047): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1, 0x1}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d4, 0x33}, 0x0, @in6=@local, 0x8034ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x203c}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x3}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x0, 0x6, 0x0, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 2m27.780711245s ago: executing program 1 (id=6053): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) lseek(r0, 0xffffffffffffc22f, 0x1) 2m27.599114139s ago: executing program 1 (id=6057): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 2m27.372935659s ago: executing program 1 (id=6062): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x5309, 0x0) 2m27.257480206s ago: executing program 1 (id=6064): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\x02A+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m27.080960301s ago: executing program 1 (id=6069): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x5, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x7, 0x6}, 0x8, 0x20400000, 0xc, 0x0, 0x3, 0x20000, 0x0}) 2m11.994442091s ago: executing program 32 (id=6069): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x5, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x7, 0x6}, 0x8, 0x20400000, 0xc, 0x0, 0x3, 0x20000, 0x0}) 1m15.501591014s ago: executing program 2 (id=7270): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000900)={'dummy0\x00', @ifru_flags}) 1m15.218701886s ago: executing program 2 (id=7273): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x8, 0x61, 0x7, 0x4, 0x7, 0xf, 0x0, 0x64, 0x5, 0x0, 0x8000, 0x0, 0x5c, 0xa0, 0xdf5, [0x7, 0x4]}}) 1m15.000117508s ago: executing program 2 (id=7276): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x8008af83, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) 1m13.652683729s ago: executing program 2 (id=7298): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/242, 0xf2}, {0x0}, {&(0x7f0000000240)=""/81, 0x51}], 0x3, 0xa3, 0x0) 1m13.436866886s ago: executing program 2 (id=7301): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) 1m13.179702403s ago: executing program 2 (id=7306): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x7, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) 58.042606688s ago: executing program 33 (id=7306): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x85, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x7, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) 2.704251391s ago: executing program 6 (id=8549): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0884123, &(0x7f0000000080)) 2.501912237s ago: executing program 6 (id=8553): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, 0x0) 2.265702939s ago: executing program 6 (id=8559): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 2.047395568s ago: executing program 6 (id=8563): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x29, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x6d24, @private2}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000300)=0x10) 1.846659419s ago: executing program 6 (id=8568): syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) 1.362300882s ago: executing program 5 (id=8579): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000900)={'wlan1\x00', @random="e80300"}) 1.347648324s ago: executing program 3 (id=8580): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) 1.164618465s ago: executing program 0 (id=8582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r0, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) 1.073798121s ago: executing program 4 (id=8583): r0 = syz_open_dev$video(&(0x7f0000003f40), 0x2, 0x402) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000004080)=@multiplanar_userptr={0x3, 0x4, 0x4, 0x10000, 0x4, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x4a, 0x81, 0xd, "f7d278f1"}, 0x2, 0x2, {0x0}}) 1.018612627s ago: executing program 3 (id=8584): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') accept4$packet(r0, 0x0, 0x0, 0x80800) 932.408484ms ago: executing program 5 (id=8585): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000a00)="8c6f", 0x2}], 0x1) 896.997326ms ago: executing program 0 (id=8586): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 831.155069ms ago: executing program 4 (id=8587): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c00000004000000000000001c000000000000000000000008"], 0x68}, 0xfffe) 730.292696ms ago: executing program 0 (id=8588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x8, 0xfff, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}, 0x38) 728.123817ms ago: executing program 5 (id=8589): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 710.384972ms ago: executing program 3 (id=8590): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000200)=0x70) 660.471386ms ago: executing program 4 (id=8591): r0 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0245720, &(0x7f0000000040)={0x1}) 485.876806ms ago: executing program 5 (id=8592): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000001980)) 478.136716ms ago: executing program 0 (id=8593): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r0, &(0x7f00000011c0)=[{&(0x7f0000000100)="fe6f58ec0e8f18e65e21101e32", 0xd}], 0x1, 0xffffffff, 0x40000) 469.414392ms ago: executing program 3 (id=8594): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 422.163266ms ago: executing program 4 (id=8595): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001280)={0x0, 0x0, 0x2000, 0x30e1}, 0x20) 309.715318ms ago: executing program 0 (id=8596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x2e, 0x0, @void}, 0x10) 279.202449ms ago: executing program 5 (id=8597): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)) 226.169704ms ago: executing program 3 (id=8598): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf00}) 209.016227ms ago: executing program 4 (id=8599): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8927, &(0x7f0000000140)={0x8001, 0x100000001, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097, 0x81]}) 129.870235ms ago: executing program 5 (id=8600): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000) 112.302694ms ago: executing program 3 (id=8601): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x2800) 87.169085ms ago: executing program 0 (id=8602): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @win={{0x7, 0x10000000, 0x8, 0xfffffffd}, 0x2, 0x3ff, 0x0, 0x5, 0x0}}) 47.508096ms ago: executing program 6 (id=8603): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8101fc00f31700008108"], 0x10) 0s ago: executing program 4 (id=8604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): disconnect, device number 121 [ 498.963650][ T797] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.008224][ T797] cp210x 3-1:0.0: device disconnected [ 499.428792][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5940'. [ 499.573391][T18328] bond5 (unregistering): Released all slaves [ 500.773817][T18388] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 501.287888][T18412] xt_TCPMSS: Only works on TCP SYN packets [ 501.631845][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 501.631865][ T30] audit: type=1326 audit(1771602750.551:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.3.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 501.665990][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.672600][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.777465][ T30] audit: type=1326 audit(1771602750.551:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.3.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 501.881719][ T30] audit: type=1326 audit(1771602750.591:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.3.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 501.983941][ T30] audit: type=1326 audit(1771602750.591:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18427 comm="syz.3.5988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 502.197903][T18450] netlink: 'syz.0.5997': attribute type 21 has an invalid length. [ 502.573229][T18462] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.627003][T18467] netlink: 'syz.2.6008': attribute type 2 has an invalid length. [ 502.685579][T18467] @„;: entered promiscuous mode [ 503.222269][T18491] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 503.443635][T18504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6024'. [ 503.662829][ T5832] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 503.837806][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 503.874092][ T5832] usb 4-1: config 4 interface 0 has no altsetting 0 [ 503.897424][ T5832] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice= e.66 [ 503.917908][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.944932][ T5832] usb 4-1: Product: syz [ 503.954796][ T5832] usb 4-1: Manufacturer: syz [ 503.970079][ T5832] usb 4-1: SerialNumber: syz [ 504.253791][ T5832] qmi_wwan 4-1:4.0: probe with driver qmi_wwan failed with error -22 [ 504.295440][ T5832] usb 4-1: USB disconnect, device number 125 [ 504.582893][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6044'. [ 504.658251][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'. [ 504.695643][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'. [ 505.104468][T18571] SET target dimension over the limit! [ 505.546200][T18594] openvswitch: netlink: Missing valid actions attribute. [ 505.573279][T18594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.117602][T18620] netlink: 'syz.3.6077': attribute type 3 has an invalid length. [ 506.133071][T18620] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6077'. [ 507.081863][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 507.625985][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6106'. [ 508.714802][T18730] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 509.325553][T18755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.708765][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6152'. [ 510.175998][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6162'. [ 510.348757][T18800] futex_wake_op: syz.0.6164 tries to shift op by 32; fix this program [ 511.064478][T18833] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 511.092675][T18833] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 511.119243][T18833] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 511.421163][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6186'. [ 511.451696][ T30] audit: type=1326 audit(1771602760.371:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.483079][ T5924] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 511.501610][ T30] audit: type=1326 audit(1771602760.411:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.579381][ T30] audit: type=1326 audit(1771602760.411:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.632229][ T30] audit: type=1326 audit(1771602760.411:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.673463][ T5924] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.712937][ T5924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.734001][ T5924] usb 5-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 511.744068][ T30] audit: type=1326 audit(1771602760.411:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.763316][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 511.803022][ T5924] usb 5-1: SerialNumber: syz [ 511.813358][ T30] audit: type=1326 audit(1771602760.411:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.893111][ T30] audit: type=1326 audit(1771602760.411:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 511.975652][ T30] audit: type=1326 audit(1771602760.411:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 512.050764][ T30] audit: type=1326 audit(1771602760.411:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18845 comm="syz.2.6187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 512.085367][ T5924] usb 5-1: 0:2 : does not exist [ 512.253108][ T5924] usb 5-1: USB disconnect, device number 107 [ 512.345437][T18838] udevd[18838]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.152810][ T24] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 513.242343][T18905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6214'. [ 513.346946][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 513.369015][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.394881][ T24] usb 5-1: config 0 descriptor?? [ 513.427986][ T24] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 513.505746][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6218'. [ 513.676961][ T5832] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 513.817431][ T24] gspca_sunplus: reg_w_riv err -71 [ 513.826784][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 513.863038][ T24] usb 5-1: USB disconnect, device number 108 [ 513.877463][ T5832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 513.890711][ T5832] usb 4-1: not running at top speed; connect to a high speed hub [ 513.930996][ T5832] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 513.946791][ T5832] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 513.957798][ T5832] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 513.968593][ T5832] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 513.986778][ T5832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.002167][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.022073][ T5832] usb 4-1: Product: syz [ 514.028741][ T5832] usb 4-1: Manufacturer: syz [ 514.034466][ T5832] usb 4-1: SerialNumber: syz [ 514.300762][ T5832] usb 4-1: 0:2 : does not exist [ 514.415818][T18935] netlink: 'syz.0.6229': attribute type 1 has an invalid length. [ 514.479899][T18935] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6229'. [ 514.502154][ T5832] usb 4-1: USB disconnect, device number 126 [ 514.568971][T18838] udevd[18838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.088263][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6241'. [ 515.166585][T18962] xt_TCPMSS: Only works on TCP SYN packets [ 515.254469][T18966] netlink: 'syz.2.6244': attribute type 29 has an invalid length. [ 515.279980][T18966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6244'. [ 515.723078][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 515.813213][T18989] xt_l2tp: missing protocol rule (udp|l2tpip) [ 516.295363][ T5832] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 516.474754][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.492501][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 516.524705][ T5832] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 516.563295][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.604914][ T5832] usb 5-1: config 0 descriptor?? [ 517.056925][ T5832] Bluetooth: Can't get version to change to load ram patch err [ 517.089063][ T5832] Bluetooth: Loading patch file failed [ 517.112302][ T5832] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 517.162857][ T5832] usb 5-1: USB disconnect, device number 109 [ 517.944840][T19062] fuse: Bad value for 'fd' [ 518.286367][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6298'. [ 518.373095][T19081] netlink: 'syz.0.6300': attribute type 21 has an invalid length. [ 518.381042][T19081] netlink: 'syz.0.6300': attribute type 6 has an invalid length. [ 518.442798][T19081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6300'. [ 519.075496][T19109] netlink: 'syz.3.6314': attribute type 6 has an invalid length. [ 519.175569][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 519.215371][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 519.240181][T19117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6318'. [ 520.196993][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6336'. [ 520.775100][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6342'. [ 521.548182][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.559319][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.568894][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.577133][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.584986][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.622822][ T5943] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 521.750123][T19199] bridge1: entered promiscuous mode [ 521.778933][T19199] bridge1: entered allmulticast mode [ 521.794647][ T5943] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 521.812801][ T5943] usb 5-1: config 179 has no interface number 0 [ 521.819391][ T5943] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 521.873142][ T5943] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 521.902820][ T5943] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 521.943015][ T5943] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 521.972748][ T5943] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 522.022902][ T5943] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 522.032031][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.080887][T19181] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.108842][T19181] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.157820][T19207] netlink: 'syz.0.6360': attribute type 21 has an invalid length. [ 522.161615][T19205] geneve4: entered promiscuous mode [ 522.325730][T19207] IPv6: NLM_F_CREATE should be specified when creating new route [ 522.407812][T19181] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 522.414410][T19181] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.423470][T19207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.430786][T19207] IPv6: NLM_F_CREATE should be set when creating new route [ 522.438166][T19207] IPv6: NLM_F_CREATE should be set when creating new route [ 522.445466][T19207] IPv6: NLM_F_CREATE should be set when creating new route [ 522.481133][T19195] chnl_net:caif_netlink_parms(): no params data found [ 522.489275][T19181] vhci_hcd vhci_hcd.0: Device attached [ 522.540389][T19214] vhci_hcd: connection closed [ 522.541907][ T178] vhci_hcd vhci_hcd.4: stop threads [ 522.553060][ T178] vhci_hcd vhci_hcd.4: release socket [ 522.559520][ T178] vhci_hcd vhci_hcd.4: disconnect device [ 522.580604][ T5832] usb 5-1: USB disconnect, device number 110 [ 522.580648][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 522.595695][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 523.040023][T19195] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.068341][T19195] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.096865][T19195] bridge_slave_0: entered allmulticast mode [ 523.126923][T19195] bridge_slave_0: entered promiscuous mode [ 523.171074][T19195] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.209177][T19195] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.249480][T19195] bridge_slave_1: entered allmulticast mode [ 523.284450][T19195] bridge_slave_1: entered promiscuous mode [ 523.381439][T19242] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 523.443837][T19242] virt_wifi0: mtu greater than device maximum [ 523.473031][T19242] bond0: (slave virt_wifi0): Error -22 calling dev_set_mtu [ 523.565379][T19195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.596429][T19195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.642829][ T5823] Bluetooth: hci5: command tx timeout [ 523.732064][T19195] team0: Port device team_slave_0 added [ 523.776689][T19195] team0: Port device team_slave_1 added [ 523.889247][T19195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.900335][ T5901] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 523.922814][T19195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.013931][T19195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.045401][T19195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.052524][T19195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.082553][T19195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.123100][ T5901] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 524.142898][ T5901] usb 5-1: config 0 has no interface number 0 [ 524.149104][ T5901] usb 5-1: config 0 interface 29 has no altsetting 0 [ 524.171872][ T5901] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 524.191826][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.205635][ T5901] usb 5-1: Product: syz [ 524.222027][ T5901] usb 5-1: Manufacturer: syz [ 524.227039][ T5901] usb 5-1: SerialNumber: syz [ 524.232875][ T5832] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 524.243666][T19195] hsr_slave_0: entered promiscuous mode [ 524.255012][ T5901] usb 5-1: config 0 descriptor?? [ 524.261447][T19195] hsr_slave_1: entered promiscuous mode [ 524.276816][T19195] debugfs: 'hsr0' already exists in 'hsr' [ 524.287911][T19195] Cannot create hsr debugfs directory [ 524.413579][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 524.445037][ T5832] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 524.474920][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.496637][ T5901] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 524.505434][ T5832] usb 4-1: Product: syz [ 524.518397][ T5832] usb 4-1: Manufacturer: syz [ 524.526493][ T5832] usb 4-1: SerialNumber: syz [ 524.548973][ T5832] r8152-cfgselector 4-1: Unknown version 0x0000 [ 524.562537][ T5832] r8152-cfgselector 4-1: config 0 descriptor?? [ 524.705452][ T5901] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 524.737042][ T5901] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 524.849829][ T5901] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 524.884519][ T5901] usb 5-1: USB disconnect, device number 111 [ 524.946162][T19195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 524.960621][T19266] netlink: 'syz.2.6381': attribute type 11 has an invalid length. [ 524.983326][T19195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.006582][T19266] netlink: 448 bytes leftover after parsing attributes in process `syz.2.6381'. [ 525.018176][T19195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 525.038700][ T5914] r8152-cfgselector 4-1: USB disconnect, device number 127 [ 525.054705][T19195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 525.297827][T19195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.365533][T19195] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.381863][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.389206][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.430047][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.437438][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.573969][T19195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.629479][T19282] netlink: 200 bytes leftover after parsing attributes in process `syz.4.6386'. [ 525.698706][T19195] veth0_vlan: entered promiscuous mode [ 525.722843][ T5823] Bluetooth: hci5: command tx timeout [ 525.736167][T19195] veth1_vlan: entered promiscuous mode [ 525.810701][T19195] veth0_macvtap: entered promiscuous mode [ 525.839692][T19195] veth1_macvtap: entered promiscuous mode [ 525.913536][T19195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.955794][T19195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.017292][ T3486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.062635][ T3486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.106024][ T3486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.121808][ T3486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.290125][T19301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.452005][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.488329][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.620974][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.670046][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.250169][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6408'. [ 527.283146][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6408'. [ 527.796112][T19353] netlink: 'syz.4.6420': attribute type 21 has an invalid length. [ 527.804672][ T5823] Bluetooth: hci5: command tx timeout [ 527.835252][T19353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6420'. [ 528.483411][T19388] syz.0.6436: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 528.512642][T19386] Cannot find map_set index 135 as target [ 528.535213][T19388] CPU: 1 UID: 0 PID: 19388 Comm: syz.0.6436 Not tainted syzkaller #0 PREEMPT(full) [ 528.535244][T19388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.535266][T19388] Call Trace: [ 528.535276][T19388] [ 528.535286][T19388] dump_stack_lvl+0xe8/0x150 [ 528.535323][T19388] warn_alloc+0x249/0x340 [ 528.535349][T19388] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 528.535385][T19388] ? __pfx_warn_alloc+0x10/0x10 [ 528.535415][T19388] ? kasan_save_track+0x4f/0x80 [ 528.535434][T19388] ? kasan_save_track+0x3e/0x80 [ 528.535452][T19388] ? __kasan_kmalloc+0x93/0xb0 [ 528.535472][T19388] ? __kmalloc_cache_noprof+0x31c/0x660 [ 528.535493][T19388] ? xskq_create+0x56/0x170 [ 528.535519][T19388] ? xsk_setsockopt+0x54c/0x990 [ 528.535543][T19388] ? do_sock_setsockopt+0x17c/0x1b0 [ 528.535570][T19388] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 528.535597][T19388] ? do_syscall_64+0x14d/0xf80 [ 528.535631][T19388] __vmalloc_node_range_noprof+0x132/0x1730 [ 528.535686][T19388] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 528.535715][T19388] ? __kasan_kmalloc+0x93/0xb0 [ 528.535767][T19388] vmalloc_user_noprof+0xad/0xe0 [ 528.535790][T19388] ? xskq_create+0xbf/0x170 [ 528.535819][T19388] xskq_create+0xbf/0x170 [ 528.535859][T19388] xsk_init_queue+0x8a/0xe0 [ 528.535889][T19388] xsk_setsockopt+0x54c/0x990 [ 528.535919][T19388] ? __pfx_xsk_setsockopt+0x10/0x10 [ 528.535947][T19388] ? __pfx_aa_sk_perm+0x10/0x10 [ 528.535975][T19388] ? aa_sock_opt_perm+0xff/0x1a0 [ 528.536004][T19388] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 528.536027][T19388] ? __pfx_xsk_setsockopt+0x10/0x10 [ 528.536055][T19388] do_sock_setsockopt+0x17c/0x1b0 [ 528.536089][T19388] __x64_sys_setsockopt+0x13d/0x1b0 [ 528.536125][T19388] do_syscall_64+0x14d/0xf80 [ 528.536156][T19388] ? trace_irq_disable+0x3b/0x150 [ 528.536187][T19388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.536209][T19388] ? clear_bhb_loop+0x40/0x90 [ 528.536236][T19388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.536264][T19388] RIP: 0033:0x7fa01ff9c629 [ 528.536295][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.536314][T19388] RSP: 002b:00007fa020d83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 528.536339][T19388] RAX: ffffffffffffffda RBX: 00007fa020215fa0 RCX: 00007fa01ff9c629 [ 528.536355][T19388] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 528.536369][T19388] RBP: 00007fa020032b39 R08: 0000000000000004 R09: 0000000000000000 [ 528.536383][T19388] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.536398][T19388] R13: 00007fa020216038 R14: 00007fa020215fa0 R15: 00007fa02033fa48 [ 528.536433][T19388] [ 528.536528][T19388] Mem-Info: [ 528.843608][T19388] active_anon:5793 inactive_anon:0 isolated_anon:0 [ 528.843608][T19388] active_file:16900 inactive_file:40157 isolated_file:0 [ 528.843608][T19388] unevictable:768 dirty:364 writeback:0 [ 528.843608][T19388] slab_reclaimable:10920 slab_unreclaimable:104952 [ 528.843608][T19388] mapped:34765 shmem:1362 pagetables:1255 [ 528.843608][T19388] sec_pagetables:0 bounce:0 [ 528.843608][T19388] kernel_misc_reclaimable:0 [ 528.843608][T19388] free:1279061 free_pcp:23319 free_cma:0 [ 528.952800][T19388] Node 0 active_anon:23172kB inactive_anon:0kB active_file:67492kB inactive_file:160424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139000kB dirty:1456kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 529.035017][T19388] Node 1 active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 529.104592][T19388] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.172788][T19388] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 529.193048][T19388] Node 0 DMA32 free:1167172kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23144kB inactive_anon:0kB active_file:67492kB inactive_file:160424kB unevictable:1536kB writepending:1464kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:90484kB local_pcp:22896kB free_cma:0kB [ 529.303500][T19388] lowmem_reserve[]: 0 0 0 0 0 [ 529.308342][T19388] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 529.398004][T19388] lowmem_reserve[]: 0 0 0 0 0 [ 529.436122][T19388] Node 1 Normal free:3935772kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.527390][T19388] lowmem_reserve[]: 0 0 0 0 0 [ 529.532333][T19388] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 529.589710][T19388] Node 0 DMA32: 2562*4kB (UME) 2865*8kB (UME) 1591*16kB (UME) 325*32kB (UM) 244*64kB (UME) 157*128kB (UM) 67*256kB (UM) 12*512kB (UM) 13*1024kB (UM) 5*2048kB (UM) 248*4096kB (M) = 1167392kB [ 529.652057][T19388] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.719095][T19388] Node 1 Normal: 1*4kB (U) 3*8kB (U) 10*16kB (UME) 9*32kB (UE) 5*64kB (U) 6*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (ME) 3*2048kB (ME) 958*4096kB (M) = 3935772kB [ 529.771877][T19388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.771928][T19388] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 529.771948][T19388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.771966][T19388] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 529.771984][T19388] 58415 total pagecache pages [ 529.772011][T19388] 0 pages in swap cache [ 529.772021][T19388] Free swap = 124996kB [ 529.772031][T19388] Total swap = 124996kB [ 529.772043][T19388] 2097051 pages RAM [ 529.772052][T19388] 0 pages HighMem/MovableOnly [ 529.772062][T19388] 427002 pages reserved [ 529.772071][T19388] 0 pages cma reserved [ 529.900451][ T5823] Bluetooth: hci5: command tx timeout [ 530.586276][ T30] audit: type=1326 audit(1771602779.511:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 530.671632][ T30] audit: type=1326 audit(1771602779.541:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 530.782810][ T30] audit: type=1326 audit(1771602779.541:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 530.841479][T19461] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 530.881318][ T30] audit: type=1326 audit(1771602779.541:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 530.935567][T19461] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 530.994108][ T30] audit: type=1326 audit(1771602779.541:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19448 comm="syz.2.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8069b9c629 code=0x7ffc0000 [ 531.097688][T19470] openvswitch: netlink: IP tunnel dst address not specified [ 531.109633][T19471] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 531.697969][T19497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6490'. [ 532.183029][T19514] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 532.451621][T19528] Cannot find del_set index 4 as target [ 532.583489][T19532] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 532.854111][T19544] netlink: 'syz.0.6513': attribute type 3 has an invalid length. [ 532.993213][T19551] netlink: 'syz.3.6516': attribute type 3 has an invalid length. [ 533.123320][ T30] audit: type=1326 audit(1771602782.021:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.4.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 533.220354][ T30] audit: type=1326 audit(1771602782.041:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.4.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 533.325254][ T30] audit: type=1326 audit(1771602782.041:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.4.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 533.452981][ T30] audit: type=1326 audit(1771602782.041:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.4.6519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 533.980003][ T30] audit: type=1326 audit(1771602782.901:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19585 comm="syz.3.6533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 534.040329][T19590] netlink: 'syz.2.6534': attribute type 11 has an invalid length. [ 534.404160][T19603] netlink: 'syz.4.6541': attribute type 1 has an invalid length. [ 534.868683][T19620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6550'. [ 534.891494][T19622] sg_write: data in/out 294979/192 bytes for SCSI command 0x2-- guessing data in; [ 534.891494][T19622] program syz.5.6551 not setting count and/or reply_len properly [ 535.073350][T19627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.346456][T19642] netlink: 'syz.3.6562': attribute type 62 has an invalid length. [ 535.568023][T19650] xt_l2tp: invalid flags combination: 4 [ 535.776267][T19656] bridge0: port 1(syz_tun) entered blocking state [ 535.803260][T19656] bridge0: port 1(syz_tun) entered disabled state [ 535.814196][T19656] syz_tun: entered allmulticast mode [ 535.843334][T19656] syz_tun: entered promiscuous mode [ 536.790687][T19700] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 536.855662][T19704] netlink: 'syz.4.6592': attribute type 1 has an invalid length. [ 536.863752][T19706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6591'. [ 536.863800][T19706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6591'. [ 537.443110][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6603'. [ 537.482771][T19732] netlink: 39 bytes leftover after parsing attributes in process `syz.0.6603'. [ 537.683583][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6610'. [ 537.792525][T19743] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 537.828702][T19743] bridge3: entered allmulticast mode [ 538.012970][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 538.012992][ T30] audit: type=1326 audit(1771602786.931:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.149184][ T30] audit: type=1326 audit(1771602786.971:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.235826][ T30] audit: type=1326 audit(1771602786.971:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.281614][T19763] i2c i2c-0: Invalid block read size 255 [ 538.300421][ T30] audit: type=1326 audit(1771602786.971:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.373215][ T30] audit: type=1326 audit(1771602786.971:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.459200][ T30] audit: type=1326 audit(1771602786.971:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.482769][ T5832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 538.496405][T19771] netlink: 'syz.0.6624': attribute type 1 has an invalid length. [ 538.562982][ T30] audit: type=1326 audit(1771602786.981:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.653125][ T30] audit: type=1326 audit(1771602786.981:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.4.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 538.684858][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 538.690643][T19777] xt_socket: unknown flags 0xc [ 538.709131][ T5832] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 538.727362][ T5832] usb 6-1: config 0 has no interface number 0 [ 538.738476][ T30] audit: type=1326 audit(1771602787.051:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19756 comm="syz.0.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 538.778129][ T5832] usb 6-1: config 0 interface 2 has no altsetting 0 [ 538.796168][ T5832] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 538.812834][ T30] audit: type=1326 audit(1771602787.051:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19756 comm="syz.0.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 538.818595][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.929971][ T5832] usb 6-1: Product: syz [ 538.942744][ T5832] usb 6-1: Manufacturer: syz [ 538.970989][ T5832] usb 6-1: SerialNumber: syz [ 539.019312][ T5832] usb 6-1: config 0 descriptor?? [ 539.080445][T19789] netlink: 'syz.0.6632': attribute type 1 has an invalid length. [ 539.132942][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6632'. [ 539.162936][T19789] netlink: 'syz.0.6632': attribute type 1 has an invalid length. [ 539.266327][ T5832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.366185][T19796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6637'. [ 539.612844][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 539.661761][ T5832] usb 6-1: USB disconnect, device number 2 [ 539.674624][T19807] netlink: 'syz.4.6642': attribute type 16 has an invalid length. [ 539.682550][T19807] netlink: 'syz.4.6642': attribute type 17 has an invalid length. [ 539.793190][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 539.813018][ T5914] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 539.855895][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 539.885267][ T5914] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 539.919906][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.940659][ T5914] usb 4-1: Product: syz [ 539.965666][ T5914] usb 4-1: Manufacturer: syz [ 539.970432][ T5914] usb 4-1: SerialNumber: syz [ 539.996786][ T5914] usb 4-1: config 0 descriptor?? [ 540.021678][ T5914] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 540.234806][ T5914] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 540.268791][ T5914] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 540.451712][ T5924] usb 4-1: USB disconnect, device number 2 [ 540.999013][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6659'. [ 541.040715][T19845] openvswitch: netlink: Message has 4 unknown bytes. [ 541.406958][T19859] netlink: 'syz.5.6665': attribute type 2 has an invalid length. [ 541.528903][T19859] C¨: entered promiscuous mode [ 541.984136][T19880] wg0: entered allmulticast mode [ 541.990552][T19880] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 542.073337][T19884] usb usb8: usbfs: process 19884 (syz.2.6679) did not claim interface 0 before use [ 542.254673][T19887] bond0: (slave bond_slave_1): Releasing backup interface [ 542.537741][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6688'. [ 542.596918][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6688'. [ 542.740769][T19906] vti0: entered promiscuous mode [ 542.740799][T19906] vti0: entered allmulticast mode [ 543.386148][T19928] SET target dimension over the limit! [ 543.498237][T19936] xt_NFQUEUE: number of total queues is 0 [ 544.046165][T19957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6715'. [ 544.312833][ T5943] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 544.484505][ T5943] usb 6-1: Using ep0 maxpacket: 8 [ 544.507151][ T5943] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.538373][ T5943] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 544.555275][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.593253][ T5943] usb 6-1: Product: syz [ 544.608322][ T5943] usb 6-1: Manufacturer: syz [ 544.622931][ T5943] usb 6-1: SerialNumber: syz [ 544.643841][ T5943] usb 6-1: config 0 descriptor?? [ 544.646320][ T5943] cdc_phonet 6-1:0.0: skipping garbage [ 544.646345][ T5943] cdc_phonet 6-1:0.0: invalid descriptor buffer length [ 544.646370][ T5943] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 544.861080][T19983] netlink: 'syz.4.6728': attribute type 1 has an invalid length. [ 544.881160][ T5832] usb 6-1: USB disconnect, device number 3 [ 545.621555][T20011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6742'. [ 545.782325][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6744'. [ 546.879481][T20044] netlink: 'syz.2.6758': attribute type 58 has an invalid length. [ 546.900366][T20044] netlink: 468 bytes leftover after parsing attributes in process `syz.2.6758'. [ 546.949000][T20044] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 547.334857][T20059] ip6erspan0: entered allmulticast mode [ 547.862579][T20082] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 548.478321][T20101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6787'. [ 548.567298][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6787'. [ 548.847266][T20116] openvswitch: netlink: Tunnel attr 5 has unexpected len 20 expected 0 [ 550.056841][T20166] veth1_to_bridge: entered promiscuous mode [ 550.092917][T20166] veth1_to_bridge: entered allmulticast mode [ 550.118788][T20166] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 550.195018][ T1312] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.449320][T20182] xt_hashlimit: size too large, truncated to 1048576 [ 550.895558][ T5914] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 550.973437][ T5832] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 551.091009][ T5914] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 551.101489][ T5914] usb 3-1: config 0 has no interface number 0 [ 551.114043][ T5914] usb 3-1: config 0 interface 41 has no altsetting 0 [ 551.174837][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 551.180609][ T5914] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 551.191630][ T5832] usb 5-1: config 1 has an invalid interface number: 50 but max is 0 [ 551.213849][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.236535][ T5832] usb 5-1: config 1 has no interface number 0 [ 551.256518][ T5914] usb 3-1: Product: syz [ 551.260808][ T5914] usb 3-1: Manufacturer: syz [ 551.265798][ T5832] usb 5-1: config 1 interface 50 has no altsetting 0 [ 551.280636][ T5914] usb 3-1: SerialNumber: syz [ 551.290950][ T5832] usb 5-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 551.305562][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.320103][ T5914] usb 3-1: config 0 descriptor?? [ 551.337285][ T5832] usb 5-1: Product: syz [ 551.357624][ T5832] usb 5-1: Manufacturer: syz [ 551.373104][ T5832] usb 5-1: SerialNumber: syz [ 551.438982][ T5832] ipaq 5-1:1.50: PocketPC PDA converter detected [ 551.653302][ T5832] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 551.738889][T20219] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6845'. [ 551.771306][ T5914] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 551.819989][ T5914] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 551.841239][ T5832] usb 5-1: USB disconnect, device number 112 [ 551.898293][ T5832] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 551.923111][ T5914] usb 3-1: USB disconnect, device number 122 [ 551.984328][ T5832] ipaq 5-1:1.50: device disconnected [ 552.058042][T20222] bond5: option arp_interval: invalid value (18446744073709547520) [ 552.114741][T20222] bond5: option arp_interval: allowed values 0 - 2147483647 [ 552.160918][T20222] bond5 (unregistering): Released all slaves [ 552.813116][ T5832] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 553.027782][ T5832] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 553.052460][ T5832] usb 4-1: config 0 has no interface number 0 [ 553.073196][ T5832] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 553.132001][ T5832] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 553.184152][ T5832] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 553.239225][ T5832] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 553.285072][ T5832] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 553.325755][ T5832] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 553.389045][ T5832] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 553.426328][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.473823][ T5832] usb 4-1: config 0 descriptor?? [ 553.489999][T20242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 553.493753][T20274] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6872'. [ 553.555376][ T5832] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 553.820471][T20242] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 553.846198][ T5832] usb 4-1: USB disconnect, device number 3 [ 553.863876][ T5832] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 554.778147][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 554.778168][ T30] audit: type=1326 audit(1771602803.701:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20321 comm="syz.4.6896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 554.877921][ T30] audit: type=1326 audit(1771602803.701:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20321 comm="syz.4.6896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 554.962791][ T30] audit: type=1326 audit(1771602803.711:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20321 comm="syz.4.6896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 555.062954][ T30] audit: type=1326 audit(1771602803.711:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20321 comm="syz.4.6896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 555.143089][ T30] audit: type=1326 audit(1771602803.711:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20321 comm="syz.4.6896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x7ffc0000 [ 555.233470][ T5914] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 555.421493][ T5914] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 555.470749][ T5914] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.516068][ T5914] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.550957][T20348] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6909'. [ 555.570346][ T5914] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.586407][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.638726][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.669452][ T5914] usb 4-1: invalid MIDI out EP 0 [ 555.842958][T20354] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6911'. [ 556.011014][ T5914] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 556.044326][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6914'. [ 556.064708][ T5914] usb 4-1: USB disconnect, device number 4 [ 556.288766][T20365] veth0_to_bridge: left allmulticast mode [ 556.307113][T20365] veth0_to_bridge: left promiscuous mode [ 556.323357][T20365] bridge0: port 3(veth0_to_bridge) entered disabled state [ 556.346047][T20365] bridge_slave_0: left allmulticast mode [ 556.363646][T20365] bridge_slave_0: left promiscuous mode [ 556.404361][T20365] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.450630][T20365] bridge_slave_1: left allmulticast mode [ 556.471885][T20365] bridge_slave_1: left promiscuous mode [ 556.481148][T20372] netlink: 'syz.5.6921': attribute type 11 has an invalid length. [ 556.490416][T20365] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.529456][T20365] bond0: (slave bond_slave_0): Releasing backup interface [ 556.559179][T20365] bond0: (slave bond_slave_1): Releasing backup interface [ 556.580534][T20365] team0: Port device team_slave_0 removed [ 556.590545][T20365] team0: Port device team_slave_1 removed [ 556.599450][T20365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.613541][T20365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.659071][T20365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 556.778296][T20370] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 556.828102][T20370] bond1 (unregistering): Released all slaves [ 556.967729][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6922'. [ 557.427316][T20392] geneve2: entered promiscuous mode [ 557.750022][T20406] netlink: 'syz.2.6937': attribute type 10 has an invalid length. [ 557.823072][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6938'. [ 557.837038][T20406] team0: Device ipvlan1 failed to register rx_handler [ 558.542934][ T30] audit: type=1326 audit(1771602807.451:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20443 comm="syz.5.6955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 558.597033][ T30] audit: type=1326 audit(1771602807.461:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20443 comm="syz.5.6955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 558.639966][T20440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.690910][ T30] audit: type=1326 audit(1771602807.491:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20443 comm="syz.5.6955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 558.764240][T20440] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.796004][ T30] audit: type=1326 audit(1771602807.491:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20443 comm="syz.5.6955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 558.851334][T20440] bridge0: port 3(dummy0) entered blocking state [ 558.858515][T20440] bridge0: port 3(dummy0) entered forwarding state [ 558.880102][ T30] audit: type=1326 audit(1771602807.491:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20443 comm="syz.5.6955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 558.908910][T20440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.188543][T20495] bond0: Error: Cannot enslave bond to itself. [ 560.720834][T20520] netlink: 'syz.0.6990': attribute type 4 has an invalid length. [ 560.740799][T20520] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6990'. [ 560.753650][T20521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 560.779227][T20523] netlink: 15 bytes leftover after parsing attributes in process `syz.4.6993'. [ 560.803081][ T5832] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 560.830558][T20520] .`: renamed from bond0 (while UP) [ 560.955102][ T5832] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.975064][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.008803][ T5832] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=c2.d1 [ 561.030570][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.049241][T20529] xt_TCPMSS: Only works on TCP SYN packets [ 561.065100][ T5832] usb 6-1: Product: syz [ 561.079656][ T5832] usb 6-1: Manufacturer: syz [ 561.122229][ T5832] usb 6-1: SerialNumber: syz [ 561.136063][ T5832] usb 6-1: config 0 descriptor?? [ 561.162155][ T5832] imon_raw 6-1:0.0: IR endpoint missing [ 561.175150][T20533] dvmrp0: entered allmulticast mode [ 561.372985][ T5832] usb 6-1: USB disconnect, device number 4 [ 561.773562][T20557] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.7010'. [ 561.799427][T20557] openvswitch: netlink: Missing key (keys=40, expected=100) [ 561.833744][T20560] SET target dimension over the limit! [ 562.157482][T20573] xt_socket: unknown flags 0xc [ 563.086417][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.095941][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.374246][ T30] audit: type=1326 audit(1771602812.301:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 563.397498][ T5901] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 563.462769][ T30] audit: type=1326 audit(1771602812.331:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 563.544266][ T30] audit: type=1326 audit(1771602812.341:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 563.602968][ T5901] usb 3-1: config index 0 descriptor too short (expected 62498, got 34) [ 563.611400][ T5901] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 563.654475][ T5901] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 563.672748][ T30] audit: type=1326 audit(1771602812.341:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20624 comm="syz.0.7043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 563.712542][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.730074][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 563.744259][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.756027][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.773579][ T5901] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 563.791150][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.800282][ T5901] usb 3-1: Product: syz [ 563.810076][ T5901] usb 3-1: Manufacturer: syz [ 563.820240][ T5901] usb 3-1: SerialNumber: syz [ 563.837551][ T5901] usb 3-1: config 0 descriptor?? [ 564.126180][ T5832] usb 3-1: USB disconnect, device number 123 [ 564.502923][ T5901] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 564.572886][ T5832] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 564.699562][ T5901] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 564.732815][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.742764][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 564.763749][ T5832] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.779117][ T5901] usb 5-1: Product: syz [ 564.785226][ T5901] usb 5-1: Manufacturer: syz [ 564.795511][ T5832] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.806672][ T5901] usb 5-1: SerialNumber: syz [ 564.849229][ T5832] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.864062][ T5901] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 564.891310][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.932341][ T5832] usb 6-1: Product: syz [ 564.932468][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 564.946246][ T5832] usb 6-1: Manufacturer: syz [ 564.950905][ T5832] usb 6-1: SerialNumber: syz [ 565.203277][ T5832] usb 6-1: 0:2 : does not exist [ 565.227665][ T5832] usb 6-1: unit 9 not found! [ 565.256724][ T5832] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4) [ 565.306973][ T5832] usb 6-1: 4:0: cannot get min/max values for control 9 (id 4) [ 565.403560][ T29] usb 5-1: USB disconnect, device number 113 [ 565.522262][ T5832] usb 6-1: USB disconnect, device number 5 [ 565.576577][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.721465][T20699] »»»»»»: renamed from vlan0 (while UP) [ 566.044826][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 566.052416][ T24] ath9k_htc: Failed to initialize the device [ 566.083473][ T29] usb 5-1: ath9k_htc: USB layer deinitialized [ 566.708349][T20737] SET target dimension over the limit! [ 567.047037][T20753] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7106'. [ 567.142384][T20753] netlink: 'syz.4.7106': attribute type 3 has an invalid length. [ 567.773085][T20782] openvswitch: netlink: Unknown key attributes 1 [ 567.926617][ T30] audit: type=1326 audit(1771602816.851:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20788 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 568.017310][ T30] audit: type=1326 audit(1771602816.881:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20788 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 568.101092][ T30] audit: type=1326 audit(1771602816.881:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20788 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 568.133030][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 568.192594][ T30] audit: type=1326 audit(1771602816.881:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20788 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 568.263173][ T30] audit: type=1326 audit(1771602816.881:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20788 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 568.333137][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 568.348567][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 568.378776][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.378808][ T24] usb 6-1: Product: syz [ 568.378825][ T24] usb 6-1: Manufacturer: syz [ 568.378842][ T24] usb 6-1: SerialNumber: syz [ 568.390450][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 568.390482][ T24] r8152-cfgselector 6-1: config 0 descriptor?? [ 568.817705][ T24] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 568.890331][T20819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7137'. [ 569.066252][T20828] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7141'. [ 569.534041][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 569.712807][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 569.729150][ T24] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 569.752715][ T24] usb 4-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 569.787927][ T24] usb 4-1: config 0 has no interface number 0 [ 569.816334][ T24] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 569.850260][T20855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7154'. [ 569.854289][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.907624][ T24] usb 4-1: Product: syz [ 569.932502][ T24] usb 4-1: Manufacturer: syz [ 569.942036][ T24] usb 4-1: SerialNumber: syz [ 569.965635][ T24] usb 4-1: config 0 descriptor?? [ 570.008076][ T24] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 570.218013][ T797] usb 4-1: USB disconnect, device number 5 [ 570.575294][T20880] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7167'. [ 571.496237][ T24] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 571.672906][ T5832] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 571.684173][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 571.711260][ T24] usb 3-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 571.750882][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 225, setting to 64 [ 571.766797][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 571.779690][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.794598][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.806732][ T24] usb 3-1: Product: syz [ 571.811012][ T24] usb 3-1: Manufacturer: syz [ 571.816269][ T24] usb 3-1: SerialNumber: syz [ 571.852860][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 571.866883][ T5832] usb 5-1: unable to get BOS descriptor or descriptor too short [ 571.894529][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 571.932815][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 571.957978][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 571.978649][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 571.992853][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 572.013026][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 572.035353][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 572.085762][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 572.137543][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32767, setting to 64 [ 572.207617][ T5832] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 572.243607][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.268002][ T24] usb 3-1: USB disconnect, device number 124 [ 572.283328][ T5832] usb 5-1: Product: syz [ 572.287571][ T5832] usb 5-1: Manufacturer: syz [ 572.311697][ T5832] usb 5-1: SerialNumber: syz [ 572.326318][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.383206][ T5832] usb 5-1: config 0 descriptor?? [ 572.410474][ T5832] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 572.611170][T19217] udevd[19217]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.685737][ T5832] usb 5-1: USB disconnect, device number 114 [ 573.148174][ T30] audit: type=1400 audit(1771602822.061:419): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=20949 comm="syz.3.7201" [ 573.583022][ T5924] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 573.753048][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 573.777251][ T5924] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 573.812807][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.832460][ T5924] usb 6-1: Product: syz [ 573.852283][ T5924] usb 6-1: Manufacturer: syz [ 573.869499][ T5924] usb 6-1: SerialNumber: syz [ 573.914122][ T5924] usb 6-1: config 0 descriptor?? [ 573.945412][ T5924] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 574.216347][T20988] SET target dimension over the limit! [ 574.335872][ T5924] gspca_ov534_9: reg_w failed -71 [ 574.591534][T20999] binfmt_misc: register: failed to install interpreter file ./file0 [ 574.752765][ T5924] gspca_ov534_9: Unknown sensor 0000 [ 574.752995][ T5924] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 574.816509][ T5924] usb 6-1: USB disconnect, device number 7 [ 575.346471][T21026] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 575.642878][ T5914] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 575.670627][T21040] netlink: 'syz.3.7244': attribute type 11 has an invalid length. [ 575.829677][ T5914] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 575.847794][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.876868][ T5914] usb 3-1: Product: syz [ 575.893271][ T5914] usb 3-1: Manufacturer: syz [ 575.910777][ T5914] usb 3-1: SerialNumber: syz [ 575.944757][ T5914] usb 3-1: config 0 descriptor?? [ 575.967273][ T5914] usb 3-1: selecting invalid altsetting 1 [ 575.993861][ T5914] technisat-usb2: could not set alternate setting to 0 [ 576.171270][ T5914] technisat-usb2: firmware version: 0.0 [ 576.188497][ T5914] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 576.306742][T21061] netlink: 408 bytes leftover after parsing attributes in process `syz.3.7254'. [ 576.400065][ T5914] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 576.430477][ T5914] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 576.484912][ T5914] usb 3-1: USB disconnect, device number 125 [ 577.043469][ T5914] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 577.223615][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 577.231171][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 577.249540][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.270823][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.296463][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 577.324151][ T5914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 577.344735][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 577.371234][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.394627][ T5914] usb 4-1: config 0 descriptor?? [ 577.401358][T21079] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 577.906729][ T24] usb 4-1: USB disconnect, device number 6 [ 577.914563][ T5823] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 578.268775][T21122] macsec0: entered promiscuous mode [ 578.280607][T21122] macsec0: entered allmulticast mode [ 578.310893][T21122] veth1_macvtap: entered allmulticast mode [ 579.360455][T21160] netlink: 'syz.5.7303': attribute type 10 has an invalid length. [ 579.368508][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 579.424644][T21160] team0: Device vxcan1 is of different type [ 579.533009][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 579.540200][ T5924] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 579.549500][ T5924] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 579.582848][ T5924] usb 4-1: config 0 has no interface number 0 [ 579.606292][ T5924] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 579.615645][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.642088][ T5924] usb 4-1: Product: syz [ 579.652926][ T5924] usb 4-1: Manufacturer: syz [ 579.672957][ T5924] usb 4-1: SerialNumber: syz [ 579.696739][ T5924] usb 4-1: config 0 descriptor?? [ 579.725183][ T5924] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 579.944796][ T5914] usb 4-1: USB disconnect, device number 7 [ 580.314694][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 580.334330][T21191] xt_TCPMSS: Only works on TCP SYN packets [ 580.482938][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 580.512786][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 580.542949][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 580.583290][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 580.603429][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.611593][ T24] usb 6-1: Product: syz [ 580.633110][ T24] usb 6-1: Manufacturer: syz [ 580.670464][ T24] usb 6-1: SerialNumber: syz [ 580.688279][ T24] usb 6-1: config 0 descriptor?? [ 580.955331][T21209] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 580.968079][T21209] bond0 (unregistering): Released all slaves [ 581.141989][ T24] usb 6-1: USB disconnect, device number 8 [ 581.482471][T21230] vivid-000: disconnect [ 581.507547][T21229] vivid-000: reconnect [ 581.935292][T21248] x_tables: duplicate underflow at hook 2 [ 582.175674][T21258] program syz.5.7351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.301751][T21262] netlink: 'syz.5.7353': attribute type 10 has an invalid length. [ 582.323518][T21262] macvlan1: entered allmulticast mode [ 582.343270][ T5914] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 582.353904][T21262] veth1_vlan: entered allmulticast mode [ 582.386863][T21262] team0: Port device macvlan1 added [ 582.527504][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 582.545728][ T5914] usb 5-1: config 7 has an invalid interface number: 108 but max is 2 [ 582.564565][ T5914] usb 5-1: config 7 has an invalid interface number: 3 but max is 2 [ 582.594115][ T5914] usb 5-1: config 7 has an invalid interface number: 12 but max is 2 [ 582.612597][ T5914] usb 5-1: config 7 has no interface number 0 [ 582.660975][ T5914] usb 5-1: config 7 has no interface number 1 [ 582.674658][ T5914] usb 5-1: config 7 has no interface number 2 [ 582.680845][ T5914] usb 5-1: config 7 interface 108 has no altsetting 0 [ 582.708332][ T5914] usb 5-1: config 7 interface 3 has no altsetting 0 [ 582.718473][ T5914] usb 5-1: config 7 interface 12 has no altsetting 0 [ 582.745867][ T5914] usb 5-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=fa.39 [ 582.763838][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.781351][ T5914] usb 5-1: Product: syz [ 582.806310][ T5914] usb 5-1: Manufacturer: syz [ 582.811432][ T5914] usb 5-1: SerialNumber: syz [ 582.886549][T21277] bond1: option min_links: invalid value (18446744073709551608) [ 582.894890][T21277] bond1: option min_links: allowed values 0 - 2147483647 [ 582.905369][T21277] bond1 (unregistering): Released all slaves [ 583.064894][ T5914] qmi_wwan 5-1:7.3: probe with driver qmi_wwan failed with error -22 [ 583.107417][ T5914] usb 5-1: USB disconnect, device number 115 [ 583.248326][T21286] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7364'. [ 583.563141][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 583.960695][T21311] bridge6: entered promiscuous mode [ 584.093053][ T5914] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 584.262332][ T30] audit: type=1326 audit(1771602833.181:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.263609][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 584.323754][ T5914] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 584.342531][ T5914] usb 6-1: config 179 has no interface number 0 [ 584.343678][ T30] audit: type=1326 audit(1771602833.181:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.392297][ T5914] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 584.408947][ T5914] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 584.421059][ T5914] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 584.434980][ T5914] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 584.453076][ T30] audit: type=1326 audit(1771602833.221:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.476268][ T5914] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 584.510493][ T5914] usb 6-1: config 179 interface 65 has no altsetting 0 [ 584.531572][ T5914] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 584.533204][ T30] audit: type=1326 audit(1771602833.221:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.553443][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.648764][ T5914] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input62 [ 584.653086][ T30] audit: type=1326 audit(1771602833.241:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.780510][ T30] audit: type=1326 audit(1771602833.241:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.880861][ T5914] usb 6-1: USB disconnect, device number 9 [ 584.897827][ T30] audit: type=1326 audit(1771602833.241:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 584.973344][ T30] audit: type=1326 audit(1771602833.241:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 585.062840][ T30] audit: type=1326 audit(1771602833.241:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.7381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a4dd9c629 code=0x7ffc0000 [ 585.656436][T21354] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 586.319004][ T5832] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 586.495315][ T5832] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.520484][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.566018][ T5832] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.586558][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.612795][ T5832] usb 5-1: Product: syz [ 586.617053][ T5832] usb 5-1: Manufacturer: syz [ 586.652256][ T5832] usb 5-1: SerialNumber: syz [ 586.826187][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7413'. [ 587.088699][ T5832] usb 5-1: cannot find UAC_HEADER [ 587.235540][ T5832] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 587.286615][ T5832] usb 5-1: USB disconnect, device number 116 [ 587.338920][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.050696][T21434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.248151][T21443] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 588.498251][T21455] xt_l2tp: v2 doesn't support IP mode [ 588.784646][T21463] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 588.855317][T21463] bond5 (unregistering): Released all slaves [ 590.653316][ T5832] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 590.813571][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 590.820544][ T5832] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 590.834993][ T5832] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.877991][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 590.895820][ T5832] usb 5-1: config 0 has no interface number 0 [ 590.912388][ T5832] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.949802][ T5832] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 591.003677][ T5832] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 591.038462][ T5832] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.069986][T21554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7494'. [ 591.082987][ T5832] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 591.094129][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.102234][ T5832] usb 5-1: Product: syz [ 591.110259][ T5832] usb 5-1: Manufacturer: syz [ 591.115398][ T5832] usb 5-1: SerialNumber: syz [ 591.143963][ T5832] usb 5-1: config 0 descriptor?? [ 591.166700][T21530] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 591.198009][ T5832] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.481299][ T5832] usb 5-1: USB disconnect, device number 117 [ 591.681207][T21572] netlink: 'syz.0.7501': attribute type 61 has an invalid length. [ 591.695093][T21572] netlink: 'syz.0.7501': attribute type 62 has an invalid length. [ 593.265815][ T30] audit: type=1326 audit(1771602842.191:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21638 comm="syz.0.7535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 593.363025][ T30] audit: type=1326 audit(1771602842.231:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21638 comm="syz.0.7535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 593.445216][ T30] audit: type=1326 audit(1771602842.231:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21638 comm="syz.0.7535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 593.532921][ T30] audit: type=1326 audit(1771602842.231:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21638 comm="syz.0.7535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01ff9c629 code=0x7ffc0000 [ 594.017587][T21672] netlink: 'syz.4.7550': attribute type 3 has an invalid length. [ 594.162997][ T797] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 594.314399][ T797] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 594.333972][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.363183][ T797] usb 4-1: config 0 has no interface number 0 [ 594.396115][ T797] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 594.405911][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.432775][ T797] usb 4-1: Product: syz [ 594.437267][ T797] usb 4-1: Manufacturer: syz [ 594.441909][ T797] usb 4-1: SerialNumber: syz [ 594.484000][ T797] usb 4-1: config 0 descriptor?? [ 594.532927][T21688] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 594.713292][ T797] cdc_subset 4-1:0.110: probe with driver cdc_subset failed with error -22 [ 594.793263][T21698] binfmt_misc: register: failed to install interpreter file ./file0 [ 594.935121][ T5914] usb 4-1: USB disconnect, device number 8 [ 595.077134][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 595.096523][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 595.106129][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 595.126458][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 595.135023][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 595.901633][T21726] netlink: 'syz.3.7576': attribute type 2 has an invalid length. [ 595.937799][ T30] audit: type=1326 audit(1771602844.861:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21727 comm="syz.4.7577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f645679c629 code=0x0 [ 596.150203][T21709] chnl_net:caif_netlink_parms(): no params data found [ 596.461147][T21740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7581'. [ 596.522550][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7581'. [ 596.683990][T21709] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.691323][T21709] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.724351][T21751] ptrace attach of "./syz-executor exec"[5838] was attempted by ""[21751] [ 596.744550][T21709] bridge_slave_0: entered allmulticast mode [ 596.790617][T21709] bridge_slave_0: entered promiscuous mode [ 596.834305][T21709] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.853502][T21709] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.889457][T21709] bridge_slave_1: entered allmulticast mode [ 596.943202][T21709] bridge_slave_1: entered promiscuous mode [ 597.099200][T21709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.125231][T21709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.254050][ T51] Bluetooth: hci6: command tx timeout [ 597.278722][T21709] team0: Port device team_slave_0 added [ 597.291739][T21709] team0: Port device team_slave_1 added [ 597.332478][T21771] netlink: 'syz.4.7595': attribute type 1 has an invalid length. [ 597.347171][T21709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.373005][T21709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.433205][T21709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.462873][T21709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.480767][T21709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.552721][T21709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.577718][T21773] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 597.596940][T21773] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 597.874984][T21709] hsr_slave_0: entered promiscuous mode [ 597.908915][T21709] hsr_slave_1: entered promiscuous mode [ 597.928603][T21709] debugfs: 'hsr0' already exists in 'hsr' [ 597.953081][T21709] Cannot create hsr debugfs directory [ 598.134925][T21795] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7607'. [ 598.182876][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 598.337649][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 598.350584][ T29] usb 4-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 598.381132][ T29] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 598.427176][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 598.463457][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 598.499338][ T29] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 598.574662][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 598.604865][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.649729][ T29] usb 4-1: Product: syz [ 598.655078][ T29] usb 4-1: Manufacturer: syz [ 598.659814][ T29] usb 4-1: SerialNumber: syz [ 598.722921][ T29] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 598.758121][ T29] usbtest 4-1:1.0: Linux user mode ISO test driver [ 598.797034][ T29] usbtest 4-1:1.0: high-speed {control iso-in} tests (+alt) [ 598.867401][T21709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 598.929405][T21709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 598.962367][ T29] usb 4-1: USB disconnect, device number 9 [ 598.983076][T21709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 599.004490][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7619'. [ 599.028808][T21709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 599.326625][ T51] Bluetooth: hci6: command tx timeout [ 599.371494][T21709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.424167][T21839] netlink: 'syz.0.7626': attribute type 6 has an invalid length. [ 599.448610][T21839] IPv6: NLM_F_CREATE should be specified when creating new route [ 599.471774][T21839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.479134][T21839] IPv6: NLM_F_CREATE should be set when creating new route [ 599.495715][T21709] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.548164][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.555395][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.636725][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.644378][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.670505][T21845] netlink: 'syz.3.7629': attribute type 3 has an invalid length. [ 599.816930][T21849] xt_cgroup: xt_cgroup: no path or classid specified [ 599.890795][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7632'. [ 599.949906][T21709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.973473][ T5924] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 600.127236][T21709] veth0_vlan: entered promiscuous mode [ 600.152928][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 600.174943][ T5924] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 600.186812][T21709] veth1_vlan: entered promiscuous mode [ 600.203590][ T5924] usb 6-1: config 0 has no interface number 0 [ 600.209772][ T5924] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 600.272073][ T5924] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 600.329368][ T5924] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 600.341738][T21709] veth0_macvtap: entered promiscuous mode [ 600.373301][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.381420][ T5924] usb 6-1: Product: syz [ 600.397667][T21709] veth1_macvtap: entered promiscuous mode [ 600.433087][ T5924] usb 6-1: Manufacturer: syz [ 600.437771][ T5924] usb 6-1: SerialNumber: syz [ 600.478014][ T5924] usb 6-1: config 0 descriptor?? [ 600.497879][T21709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.556732][T21709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.625216][ T3486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.673213][ T3486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.725653][ T3486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.779614][ T3486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.852019][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 600.955871][ T5924] radio-si470x 6-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 600.993358][ T5924] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 601.066265][ T5924] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 601.086156][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.116553][ T5924] usb 6-1: USB disconnect, device number 10 [ 601.123064][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.261344][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.307847][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.403188][ T51] Bluetooth: hci6: command tx timeout [ 601.606268][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 601.692470][T21899] ¾x9ÿ: renamed from bridge_slave_0 [ 601.823426][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.855176][ T29] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 601.888510][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.908762][ T29] usb 4-1: Product: syz [ 601.923888][ T29] usb 4-1: Manufacturer: syz [ 601.933185][ T29] usb 4-1: SerialNumber: syz [ 601.967411][T21907] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 601.992807][ T29] usb 4-1: config 0 descriptor?? [ 601.993714][T21907] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 602.020790][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.063708][T21907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 602.190496][T21913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.356439][T21918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7661'. [ 602.433336][ T29] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 602.484701][T21921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.518528][ T29] usb 4-1: USB disconnect, device number 10 [ 602.595733][T19264] udevd[19264]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.926801][T21932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 603.248887][T21945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7675'. [ 603.261996][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7676'. [ 603.425720][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 603.501706][ T51] Bluetooth: hci6: command tx timeout [ 603.614518][ T24] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 603.637272][ T24] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 603.659931][ T24] usb 7-1: config 220 has no interface number 2 [ 603.671966][ T24] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 603.687821][T21963] QAT: Stopping all acceleration devices. [ 603.713721][ T24] usb 7-1: config 220 interface 0 has no altsetting 0 [ 603.751189][ T24] usb 7-1: config 220 interface 76 has no altsetting 0 [ 603.771459][ T24] usb 7-1: config 220 interface 1 has no altsetting 0 [ 603.818969][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 603.828361][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.855193][ T24] usb 7-1: Product: syz [ 603.867940][ T24] usb 7-1: Manufacturer: syz [ 603.872618][ T24] usb 7-1: SerialNumber: syz [ 604.129332][ T24] usb 7-1: selecting invalid altsetting 0 [ 604.163223][ T24] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 604.192743][ T24] uvcvideo 7-1:220.0: No valid video chain found. [ 604.241026][ T24] usb 7-1: selecting invalid altsetting 0 [ 604.271604][ T24] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 604.304567][ T24] usb 7-1: USB disconnect, device number 2 [ 604.508772][T21991] netlink: 'syz.5.7698': attribute type 21 has an invalid length. [ 604.522999][ T5914] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 604.551474][T21991] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7698'. [ 604.591882][T21991] netlink: 'syz.5.7698': attribute type 4 has an invalid length. [ 604.622785][T21991] netlink: 'syz.5.7698': attribute type 3 has an invalid length. [ 604.642790][T21991] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7698'. [ 604.723167][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 604.763802][ T5914] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 604.803017][ T5914] usb 5-1: config 0 has no interface number 0 [ 604.839883][ T5914] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 604.871344][T22001] SET target dimension over the limit! [ 604.877406][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.898766][ T5914] usb 5-1: Product: syz [ 604.912811][ T5914] usb 5-1: Manufacturer: syz [ 604.927754][ T5914] usb 5-1: SerialNumber: syz [ 604.962201][ T5914] usb 5-1: config 0 descriptor?? [ 605.109335][T22009] overlayfs: missing 'lowerdir' [ 605.214545][ T5914] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 605.267090][ T5914] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 605.324420][ T5914] usb 5-1: USB disconnect, device number 118 [ 606.111688][T22051] netlink: 'syz.3.7728': attribute type 16 has an invalid length. [ 606.606153][T22072] netlink: 'syz.3.7739': attribute type 10 has an invalid length. [ 606.952842][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7746'. [ 607.782879][T22120] ipt_REJECT: TCP_RESET invalid for non-tcp [ 607.808405][T22118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7760'. [ 607.848931][T22122] bridge7: entered promiscuous mode [ 607.960216][T22118] bond1: entered allmulticast mode [ 608.014040][T22118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 608.175128][T22131] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 608.215918][T22131] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 609.192490][T22170] netlink: 'syz.3.7785': attribute type 6 has an invalid length. [ 609.302711][T22172] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7786'. [ 609.708518][ T30] audit: type=1326 audit(1771602858.631:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.6.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 609.789451][ T30] audit: type=1326 audit(1771602858.631:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.6.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 609.873034][ T30] audit: type=1326 audit(1771602858.691:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.6.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 609.972775][ T30] audit: type=1326 audit(1771602858.691:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.6.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 610.006916][T22197] xt_bpf: check failed: parse error [ 610.062761][ T30] audit: type=1326 audit(1771602858.691:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22183 comm="syz.6.7794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 610.317815][T22205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7802'. [ 610.397292][T22208] netlink: 'syz.0.7803': attribute type 21 has an invalid length. [ 610.426717][T22208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7803'. [ 610.457407][T22211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7805'. [ 611.047061][T22235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7816'. [ 613.495232][T22347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.133142][T22370] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7879'. [ 614.185957][T22375] dlm: no locking on control device [ 614.613869][T22393] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 615.266458][T22421] netlink: zone id is out of range [ 616.142896][T22461] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7925'. [ 616.632218][T22479] hmaÓË224): entered promiscuous mode [ 617.111250][T22502] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 617.222739][ T24] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 617.253155][T22506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7947'. [ 617.368989][T22510] netlink: 'syz.6.7949': attribute type 5 has an invalid length. [ 617.414226][ T24] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 617.434888][ T24] usb 5-1: config 0 has no interface number 0 [ 617.441839][ T24] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 617.470037][T22510] ip6erspan0: entered promiscuous mode [ 617.480790][ T24] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 617.530312][ T24] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 617.582767][ T24] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 617.592414][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.664761][ T24] usb 5-1: config 0 descriptor?? [ 617.670313][T22520] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7954'. [ 617.671215][T22495] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 617.736441][T22520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7954'. [ 617.754848][ T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input66 [ 617.799114][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7954'. [ 618.139441][ T24] usb 5-1: USB disconnect, device number 119 [ 618.253279][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7962'. [ 619.517780][T22587] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 619.927226][ T30] audit: type=1326 audit(1771602868.851:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 620.007647][ T30] audit: type=1326 audit(1771602868.851:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 620.075964][ T30] audit: type=1326 audit(1771602868.881:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 620.147956][ T30] audit: type=1326 audit(1771602868.881:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 620.247394][ T30] audit: type=1326 audit(1771602868.881:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22602 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2780d9c629 code=0x7ffc0000 [ 620.661546][T22629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8007'. [ 620.843715][T22633] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8009'. [ 620.860897][T22634] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 621.731374][T22669] xt_ecn: cannot match TCP bits for non-tcp packets [ 622.229287][T22695] binder: binder_mmap: 22693 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 623.076822][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8055'. [ 623.117246][T22727] ipip0: entered promiscuous mode [ 623.122358][T22727] ipip0: entered allmulticast mode [ 623.411480][T22743] QAT: Device 7 not found [ 624.084139][ T5832] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 624.295307][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 624.332811][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 624.379108][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 624.415144][ T5832] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 624.443428][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.471878][ T5832] usb 5-1: Product: syz [ 624.480584][ T5832] usb 5-1: Manufacturer: syz [ 624.503030][ T5832] usb 5-1: SerialNumber: syz [ 624.530254][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.537106][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.558462][ T5832] usb 5-1: config 0 descriptor?? [ 624.568949][T22759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.577104][T22759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.598829][ T5832] usb 5-1: ucan: probing device on interface #0 [ 624.974778][T22802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8094'. [ 625.037843][ T5832] usb 5-1: ucan: failed to retrieve device info [ 625.064610][ T5832] usb 5-1: ucan: probe failed; try to update the device firmware [ 625.129587][ T5832] usb 5-1: USB disconnect, device number 120 [ 625.252379][T22813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8097'. [ 625.483705][T22823] dummy0: entered allmulticast mode [ 625.987504][ T30] audit: type=1326 audit(1771602874.911:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22842 comm="syz.6.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 626.101699][ T30] audit: type=1326 audit(1771602874.911:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22842 comm="syz.6.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 626.205001][ T30] audit: type=1326 audit(1771602874.911:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22842 comm="syz.6.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 626.310950][ T30] audit: type=1326 audit(1771602874.911:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22842 comm="syz.6.8113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 626.402867][T22858] SET target dimension over the limit! [ 627.277376][ T30] audit: type=1326 audit(1771602876.201:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22899 comm="syz.6.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 627.365161][ T30] audit: type=1326 audit(1771602876.201:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22899 comm="syz.6.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 627.460320][ T30] audit: type=1326 audit(1771602876.231:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22899 comm="syz.6.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 627.529034][ T30] audit: type=1326 audit(1771602876.231:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22899 comm="syz.6.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 627.562210][ T30] audit: type=1326 audit(1771602876.231:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22899 comm="syz.6.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 627.643652][ T30] audit: type=1326 audit(1771602876.231:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22899 comm="syz.6.8141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 627.761611][T22915] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 628.725977][T22957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8168'. [ 629.001175][T22967] netlink: 'syz.6.8174': attribute type 21 has an invalid length. [ 629.043284][T22967] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8174'. [ 629.093006][T22967] netlink: 'syz.6.8174': attribute type 4 has an invalid length. [ 629.118073][T22967] netlink: 3 bytes leftover after parsing attributes in process `syz.6.8174'. [ 629.283123][T22977] netlink: 'syz.3.8179': attribute type 40 has an invalid length. [ 629.985488][T23004] xt_TPROXY: Can be used only with -p tcp or -p udp [ 630.058270][T23009] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8196'. [ 630.503269][T23029] netlink: zone id is out of range [ 630.508469][T23029] netlink: zone id is out of range [ 630.541128][T23029] netlink: zone id is out of range [ 630.563195][T23029] netlink: zone id is out of range [ 630.578685][T23029] netlink: zone id is out of range [ 630.588854][T23029] netlink: zone id is out of range [ 630.629729][T23029] netlink: zone id is out of range [ 630.653203][T23029] netlink: zone id is out of range [ 630.677539][T23029] netlink: zone id is out of range [ 630.946581][T23049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8213'. [ 631.093266][T23052] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 631.132922][T23052] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 631.588537][T23075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8227'. [ 631.745557][T23081] xt_TCPMSS: Only works on TCP SYN packets [ 631.921149][T23083] xt_CT: No such helper "snmp" [ 632.386309][T23112] netlink: 'syz.6.8243': attribute type 11 has an invalid length. [ 632.872581][T23130] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 633.232911][ T5914] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 633.412895][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 633.474866][ T5914] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 633.515200][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.532697][ T5914] usb 5-1: Product: syz [ 633.545359][ T5914] usb 5-1: Manufacturer: syz [ 633.564408][T23158] nftables ruleset with unbound chain [ 633.572703][ T5914] usb 5-1: SerialNumber: syz [ 633.602231][ T5914] r8152-cfgselector 5-1: Unknown version 0x0000 [ 633.618995][ T5914] r8152-cfgselector 5-1: config 0 descriptor?? [ 633.838603][T23165] netlink: 520 bytes leftover after parsing attributes in process `syz.5.8269'. [ 634.079867][ T5832] r8152-cfgselector 5-1: USB disconnect, device number 121 [ 634.502912][ T5924] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 634.683023][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 634.690363][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.714994][ T5924] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 634.732818][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.771559][ T5924] usb 4-1: Product: syz [ 634.781823][ T5924] usb 4-1: Manufacturer: syz [ 634.802081][ T5924] usb 4-1: SerialNumber: syz [ 634.825530][ T5924] usb 4-1: config 0 descriptor?? [ 634.856126][ T5924] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 634.883349][ T5924] usb 4-1: selecting invalid altsetting 1 [ 635.040087][ T5924] gspca_stk014: init reg: 0x00 [ 635.062082][ T5924] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 635.183359][T23208] bond2: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 635.226540][T23208] bond2 (unregistering): Released all slaves [ 635.256877][ T5924] usb 4-1: USB disconnect, device number 11 [ 635.737367][T23227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.744724][T23227] IPv6: NLM_F_CREATE should be set when creating new route [ 635.752140][T23227] IPv6: NLM_F_CREATE should be set when creating new route [ 635.759631][T23227] IPv6: NLM_F_CREATE should be set when creating new route [ 635.945811][T23233] netlink: 'syz.3.8303': attribute type 10 has an invalid length. [ 635.978096][T23233] bridge0: port 4(netdevsim0) entered blocking state [ 636.020153][T23233] bridge0: port 4(netdevsim0) entered disabled state [ 636.181300][T23237] bond1: option miimon: invalid value (18446744071562067968) [ 636.231441][T23237] bond1: option miimon: allowed values 0 - 2147483647 [ 636.285772][T23237] bond1 (unregistering): Released all slaves [ 637.010472][T23266] usb usb8: usbfs: process 23266 (syz.5.8319) did not claim interface 0 before use [ 637.220556][T23274] netlink: 766 bytes leftover after parsing attributes in process `syz.3.8323'. [ 637.429730][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8327'. [ 637.563490][T23282] 8021q: adding VLAN 0 to HW filter on device bond5 [ 637.873863][T23301] netlink: 668 bytes leftover after parsing attributes in process `syz.3.8334'. [ 637.904512][T23301] netlink: 668 bytes leftover after parsing attributes in process `syz.3.8334'. [ 638.776239][T23335] bond6: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 638.804385][T23335] bond6 (unregistering): Released all slaves [ 639.434007][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 639.434028][ T30] audit: type=1400 audit(1771602888.351:461): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.3.8382': attribute type 5 has an invalid length. [ 640.702996][ T5832] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 640.895810][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 640.933495][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.964954][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.005676][ T5832] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 641.045228][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.117050][ T5832] usb 6-1: config 0 descriptor?? [ 641.164200][ T5832] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 641.339984][ T5832] usbhid 6-1:0.0: can't add hid device: -71 [ 641.373668][ T5832] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 641.423118][ T5832] usb 6-1: USB disconnect, device number 11 [ 641.645751][T23444] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8406'. [ 641.681986][ T30] audit: type=1326 audit(1771602890.601:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.6.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 641.760399][ T30] audit: type=1326 audit(1771602890.631:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.6.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 641.861392][ T30] audit: type=1326 audit(1771602890.641:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.6.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 641.948947][ T30] audit: type=1326 audit(1771602890.641:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.6.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 642.059679][ T30] audit: type=1326 audit(1771602890.641:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.6.8407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af019c629 code=0x7ffc0000 [ 642.903010][ T5832] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 643.114780][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 643.134108][ T5832] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 643.150612][T23500] net_ratelimit: 373 callbacks suppressed [ 643.150631][T23500] openvswitch: netlink: IP tunnel dst address not specified [ 643.155376][ T5832] usb 6-1: config 0 has no interface number 0 [ 643.191551][ T5832] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.220034][ T5832] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 643.239659][ T5832] usb 6-1: config 0 interface 85 has no altsetting 0 [ 643.260350][ T5832] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 643.293005][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.330562][ T5832] usb 6-1: Product: syz [ 643.340489][ T5832] usb 6-1: Manufacturer: syz [ 643.354206][ T5832] usb 6-1: SerialNumber: syz [ 643.378738][ T5832] usb 6-1: config 0 descriptor?? [ 643.395041][T23502] Cannot find add_set index 0 as target [ 643.404927][T23509] openvswitch: netlink: Key type 31 is not supported [ 643.849240][ T5832] appletouch 6-1:0.85: Failed to request geyser raw mode [ 643.868753][ T5832] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 643.915779][ T5832] usb 6-1: USB disconnect, device number 12 [ 644.532511][T23547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8457'. [ 644.712742][ T797] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 644.775606][ T5832] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 644.839229][T23559] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8463'. [ 644.848860][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 644.882843][ T797] usb 7-1: Using ep0 maxpacket: 8 [ 644.894701][ T797] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.936098][ T797] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 644.952785][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 644.963013][ T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 644.968183][ T5832] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 644.991205][ T797] usb 7-1: SerialNumber: syz [ 644.999289][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.011747][ T797] usb 7-1: config 0 descriptor?? [ 645.033189][ T5914] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 645.038004][ T797] uvcvideo 7-1:0.0: Found UVC 0.00 device (05ac:8501) [ 645.057266][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.073768][ T5832] usb 5-1: Product: syz [ 645.083170][ T5832] usb 5-1: Manufacturer: syz [ 645.087836][ T5832] usb 5-1: SerialNumber: syz [ 645.093629][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 645.106478][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.113211][ T797] uvcvideo 7-1:0.0: Failed to create links for entity 33023 [ 645.125060][ T5832] usb 5-1: config 0 descriptor?? [ 645.138041][ T5832] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 645.146610][ T5914] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 645.159641][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 645.168305][ T797] uvcvideo 7-1:0.0: Failed to register entities (-22). [ 645.175135][ T5914] usb 4-1: Product: syz [ 645.182464][ T5914] usb 4-1: Manufacturer: syz [ 645.206549][ T5914] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 645.273737][ T5914] usb 7-1: USB disconnect, device number 3 [ 645.348365][ T5832] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 645.362144][ T5832] visor 5-1:0.0: probe with driver visor failed with error -5 [ 645.440569][ T5832] usb 4-1: USB disconnect, device number 12 [ 645.592058][ T24] usb 5-1: USB disconnect, device number 122 [ 647.082824][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 647.107095][T23600] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 647.122963][T23600] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 647.151558][T23600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 647.159629][T23600] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 647.179147][T23600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 647.195624][T23600] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 647.216500][T23600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 647.234419][T23600] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 647.268943][T23600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 647.289205][T23600] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 647.314993][T23600] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 647.330373][T23600] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 647.345371][T23600] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 647.363340][T23600] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 647.397117][T23600] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 647.544437][T23636] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 647.588424][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8501'. [ 647.662859][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 647.849395][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 647.867491][ T5914] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 647.905392][ T5914] usb 4-1: config 0 has no interface number 0 [ 647.911672][ T5914] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 647.951356][ T5914] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 648.018399][ T5914] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 648.055257][ T5914] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 648.106266][ T5914] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 648.125837][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.151369][ T5914] usb 4-1: Product: syz [ 648.153620][T23660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8511'. [ 648.163228][T23662] netlink: 'syz.4.8513': attribute type 21 has an invalid length. [ 648.174272][ T5914] usb 4-1: Manufacturer: syz [ 648.178934][ T5914] usb 4-1: SerialNumber: syz [ 648.226908][ T5914] usb 4-1: config 0 descriptor?? [ 648.444324][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 648.467004][ T5914] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 648.478512][ T5914] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 648.489659][ T5914] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 648.510940][ T5914] usb 4-1: USB disconnect, device number 13 [ 649.174756][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 649.252964][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 649.257452][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 649.322759][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 649.322798][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 649.407604][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 650.522766][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 650.774397][T23769] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8565'. [ 651.213060][ T5832] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 651.242990][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 651.323015][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 651.329155][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 651.385795][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 651.399118][ T5832] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 651.409974][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 651.416125][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 651.436521][ T5832] usb 7-1: config 0 has no interface number 0 [ 651.453333][ T5832] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 651.475602][ T5832] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 651.488002][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 651.505296][ T5832] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 651.508381][T23801] mac80211_hwsim hwsim27 è: renamed from wlan1 (while UP) [ 651.516933][ T5832] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 651.538999][ T5832] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 651.559888][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.568086][ T5832] usb 7-1: Product: syz [ 651.572951][ T5832] usb 7-1: Manufacturer: syz [ 651.577602][ T5832] usb 7-1: SerialNumber: syz [ 651.609444][ T5832] usb 7-1: config 0 descriptor?? [ 651.621977][T23803] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8582'. [ 651.666564][ T5832] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input70 [ 652.054716][ T5943] usb 7-1: USB disconnect, device number 4 [ 652.683220][ T31] INFO: task syz.1.6069:18601 blocked for more than 143 seconds. [ 652.703083][ T31] Not tainted syzkaller #0 [ 652.708750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.728598][ T31] task:syz.1.6069 state:D stack:28160 pid:18601 tgid:18600 ppid:5841 task_flags:0x400040 flags:0x00080002 [ 652.741917][ T31] Call Trace: [ 652.746773][ T31] [ 652.765439][ T31] __schedule+0x1585/0x5340 [ 652.770454][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 652.779731][ T31] ? __pfx___schedule+0x10/0x10 [ 652.785416][ T31] ? schedule+0x90/0x360 [ 652.791879][ T31] schedule+0x164/0x360 [ 652.798860][ T31] schedule_preempt_disabled+0x13/0x30 [ 652.804686][ T31] __mutex_lock+0x7fe/0x1300 [ 652.824257][ T31] ? __mutex_lock+0x5ac/0x1300 [ 652.833692][ T31] ? usbdev_open+0x182/0x770 [ 652.845116][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 652.854978][ T31] ? bus_find_device+0x27d/0x2d0 [ 652.863838][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 652.872963][ T31] ? usbdev_open+0xa7/0x770 [ 652.882054][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 652.909853][ T31] usbdev_open+0x182/0x770 [ 652.921233][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.928008][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 652.933467][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 652.938741][ T31] chrdev_open+0x4cd/0x5e0 [ 652.943709][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 652.948818][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 652.956258][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 652.961635][ T31] do_dentry_open+0x785/0x14e0 [ 652.967237][ T31] vfs_open+0x3b/0x340 [ 652.971558][ T31] ? path_openat+0x2df0/0x3860 [ 652.984084][ T31] path_openat+0x2e08/0x3860 [ 652.989130][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 652.995193][ T31] ? stack_depot_save_flags+0x33/0x810 [ 653.000821][ T31] ? __pfx_path_openat+0x10/0x10 [ 653.009632][ T31] ? __x64_sys_openat+0x138/0x170 [ 653.016590][ T31] ? do_syscall_64+0x14d/0xf80 [ 653.021518][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.028069][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 653.034262][ T31] do_file_open+0x23e/0x4a0 [ 653.039062][ T31] ? __pfx_do_file_open+0x10/0x10 [ 653.044640][ T31] ? _raw_spin_unlock+0x28/0x50 [ 653.049640][ T31] ? alloc_fd+0x64b/0x6c0 [ 653.054723][ T31] do_sys_openat2+0x113/0x200 [ 653.060011][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 653.069065][ T31] ? exc_page_fault+0x6a/0xc0 [ 653.075806][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 653.081275][ T31] __x64_sys_openat+0x138/0x170 [ 653.088989][ T31] do_syscall_64+0x14d/0xf80 [ 653.094089][ T31] ? trace_irq_disable+0x3b/0x150 [ 653.099268][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.106707][ T31] ? clear_bhb_loop+0x40/0x90 [ 653.111544][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.119420][ T31] RIP: 0033:0x7fbce735cece [ 653.125720][ T31] RSP: 002b:00007fbce817cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 653.134633][ T31] RAX: ffffffffffffffda RBX: 00007fbce817d6c0 RCX: 00007fbce735cece [ 653.143695][ T31] RDX: 0000000000048b01 RSI: 00007fbce817cc00 RDI: ffffffffffffff9c [ 653.151956][ T31] RBP: 00007fbce817cc00 R08: 0000000000000000 R09: 0000000000000000 [ 653.160563][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 653.169947][ T31] R13: 00007fbce7616038 R14: 00007fbce7615fa0 R15: 00007fbce773fa48 [ 653.178545][ T31] [ 653.181733][ T31] [ 653.181733][ T31] Showing all locks held in the system: [ 653.198217][ T31] 6 locks held by kworker/0:0/9: [ 653.203722][ T31] 1 lock held by ksoftirqd/0/15: [ 653.208827][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 653.228258][ T31] 1 lock held by khungtaskd/31: [ 653.236397][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 653.248518][ T31] 2 locks held by getty/5578: [ 653.254514][ T31] #0: ffff8880350830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 653.264803][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 653.275878][ T31] 1 lock held by syz.1.6069/18601: [ 653.281123][ T31] #0: ffff888029a58198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 653.295988][ T31] 1 lock held by syz.2.7306/21166: [ 653.301355][ T31] #0: ffff888029a58198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 653.310908][ T31] [ 653.313993][ T31] ============================================= [ 653.313993][ T31] [ 653.322535][ T31] NMI backtrace for cpu 1 [ 653.322563][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 653.322585][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.322598][ T31] Call Trace: [ 653.322607][ T31] [ 653.322617][ T31] dump_stack_lvl+0xe8/0x150 [ 653.322654][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 653.322679][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.322708][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 653.322735][ T31] sys_info+0x135/0x170 [ 653.322757][ T31] watchdog+0xfd9/0x1030 [ 653.322793][ T31] ? watchdog+0x21a/0x1030 [ 653.322831][ T31] kthread+0x388/0x470 [ 653.322851][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.322880][ T31] ? __pfx_kthread+0x10/0x10 [ 653.322901][ T31] ret_from_fork+0x51e/0xb90 [ 653.322928][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 653.322953][ T31] ? __switch_to+0xc7d/0x1450 [ 653.322980][ T31] ? __pfx_kthread+0x10/0x10 [ 653.322999][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.323041][ T31] [ 653.430208][ T31] Sending NMI from CPU 1 to CPUs 0: [ 653.435929][ C0] NMI backtrace for cpu 0 [ 653.435948][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 653.435968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.435981][ C0] Workqueue: usb_hub_wq hub_event [ 653.436016][ C0] RIP: 0010:__lock_acquire+0x86e/0x2cf0 [ 653.436041][ C0] Code: 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 f1 89 f3 c1 c3 10 31 cb 01 d6 29 da 89 dd c1 c5 13 31 d5 01 f3 29 ee 01 eb c1 c5 04 <31> f5 48 c1 e5 20 83 3d 99 1e 70 0e 00 4d 89 e5 0f 85 1f 02 00 00 [ 653.436057][ C0] RSP: 0018:ffffc900000e6418 EFLAGS: 00000087 [ 653.436071][ C0] RAX: 0000000032b88308 RBX: 00000000df1c468e RCX: 000000007208e1b4 [ 653.436084][ C0] RDX: 00000000fd11d805 RSI: 0000000077af0407 RDI: ffff88801d6fdac0 [ 653.436097][ C0] RBP: 0000000004fee6ed R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 653.436109][ C0] R10: ffffc900000e66f8 R11: ffffffff81b0b130 R12: ffff88801d6fe6a0 [ 653.436123][ C0] R13: ffff88801d6fe6a0 R14: ffff88801d6fdac0 R15: 0000000000000005 [ 653.436136][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 653.436151][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.436163][ C0] CR2: 00007fa0201e6158 CR3: 000000007ed28000 CR4: 00000000003526f0 [ 653.436180][ C0] Call Trace: [ 653.436187][ C0] [ 653.436197][ C0] ? trace_irq_disable+0x3b/0x150 [ 653.436229][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 653.436257][ C0] lock_acquire+0xf0/0x2e0 [ 653.436278][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 653.436305][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 653.436330][ C0] ? really_probe+0x267/0xaf0 [ 653.436349][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 653.436373][ C0] unwind_next_frame+0xc2/0x23c0 [ 653.436398][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 653.436425][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 653.436450][ C0] ? usb_probe_device+0x1c4/0x3b0 [ 653.436466][ C0] ? really_probe+0x267/0xaf0 [ 653.436484][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 653.436510][ C0] arch_stack_walk+0x11b/0x150 [ 653.436538][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 653.436553][ C0] ? really_probe+0x267/0xaf0 [ 653.436571][ C0] stack_trace_save+0xa9/0x100 [ 653.436588][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 653.436606][ C0] ? stack_depot_save_flags+0x33/0x810 [ 653.436627][ C0] ? __lock_acquire+0x651/0x2cf0 [ 653.436649][ C0] kasan_save_track+0x3e/0x80 [ 653.436666][ C0] ? kasan_save_track+0x3e/0x80 [ 653.436682][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 653.436698][ C0] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 653.436716][ C0] ? __alloc_skb+0x2c1/0x7d0 [ 653.436737][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 653.436757][ C0] ? ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 653.436785][ C0] ? ath6kl_usb_power_on+0x6a/0x280 [ 653.436809][ C0] ? ath6kl_core_init+0x1e1/0x10b0 [ 653.436831][ C0] ? ath6kl_usb_probe+0x14df/0x15d0 [ 653.436854][ C0] ? usb_probe_interface+0x668/0xc90 [ 653.436870][ C0] ? really_probe+0x267/0xaf0 [ 653.436885][ C0] ? __driver_probe_device+0x18c/0x320 [ 653.436901][ C0] ? driver_probe_device+0x4f/0x240 [ 653.436918][ C0] ? __device_attach_driver+0x2d4/0x4c0 [ 653.436934][ C0] ? bus_for_each_drv+0x258/0x2f0 [ 653.436956][ C0] ? __device_attach+0x2c5/0x450 [ 653.436971][ C0] ? device_initial_probe+0xa1/0xd0 [ 653.436986][ C0] ? bus_probe_device+0x12a/0x220 [ 653.437007][ C0] ? device_add+0x7b6/0xb70 [ 653.437031][ C0] ? usb_set_configuration+0x1a87/0x2110 [ 653.437055][ C0] ? usb_generic_driver_probe+0x8d/0x150 [ 653.437079][ C0] ? usb_probe_device+0x1c4/0x3b0 [ 653.437094][ C0] ? really_probe+0x267/0xaf0 [ 653.437126][ C0] __kasan_kmalloc+0x93/0xb0 [ 653.437145][ C0] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 653.437164][ C0] ? __netdev_alloc_skb+0xc1/0x810 [ 653.437185][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 653.437205][ C0] __alloc_skb+0x2c1/0x7d0 [ 653.437228][ C0] __netdev_alloc_skb+0xc1/0x810 [ 653.437249][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.437277][ C0] ath6kl_usb_post_recv_transfers+0x207/0x6f0 [ 653.437312][ C0] ath6kl_usb_power_on+0x6a/0x280 [ 653.437338][ C0] ath6kl_core_init+0x1e1/0x10b0 [ 653.437363][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 653.437384][ C0] ? __pfx_ath6kl_core_init+0x10/0x10 [ 653.437407][ C0] ? __asan_memcpy+0x40/0x70 [ 653.437432][ C0] ? ath6kl_core_create+0x7fb/0x9a0 [ 653.437457][ C0] ath6kl_usb_probe+0x14df/0x15d0 [ 653.437489][ C0] usb_probe_interface+0x668/0xc90 [ 653.437519][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 653.437535][ C0] really_probe+0x267/0xaf0 [ 653.437555][ C0] __driver_probe_device+0x18c/0x320 [ 653.437573][ C0] driver_probe_device+0x4f/0x240 [ 653.437592][ C0] __device_attach_driver+0x2d4/0x4c0 [ 653.437611][ C0] bus_for_each_drv+0x258/0x2f0 [ 653.437633][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 653.437651][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 653.437673][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.437699][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.437724][ C0] __device_attach+0x2c5/0x450 [ 653.437741][ C0] ? __pfx___device_attach+0x10/0x10 [ 653.437759][ C0] ? _raw_spin_unlock+0x28/0x50 [ 653.437783][ C0] device_initial_probe+0xa1/0xd0 [ 653.437801][ C0] bus_probe_device+0x12a/0x220 [ 653.437822][ C0] ? device_add+0x726/0xb70 [ 653.437847][ C0] device_add+0x7b6/0xb70 [ 653.437873][ C0] usb_set_configuration+0x1a87/0x2110 [ 653.437910][ C0] usb_generic_driver_probe+0x8d/0x150 [ 653.437936][ C0] usb_probe_device+0x1c4/0x3b0 [ 653.437954][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 653.437969][ C0] really_probe+0x267/0xaf0 [ 653.437989][ C0] __driver_probe_device+0x18c/0x320 [ 653.438007][ C0] driver_probe_device+0x4f/0x240 [ 653.438026][ C0] __device_attach_driver+0x2d4/0x4c0 [ 653.438046][ C0] bus_for_each_drv+0x258/0x2f0 [ 653.438068][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 653.438085][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 653.438108][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.438132][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.438158][ C0] __device_attach+0x2c5/0x450 [ 653.438175][ C0] ? __pfx___device_attach+0x10/0x10 [ 653.438192][ C0] ? _raw_spin_unlock+0x28/0x50 [ 653.438216][ C0] device_initial_probe+0xa1/0xd0 [ 653.438233][ C0] bus_probe_device+0x12a/0x220 [ 653.438255][ C0] ? device_add+0x726/0xb70 [ 653.438281][ C0] device_add+0x7b6/0xb70 [ 653.438307][ C0] usb_new_device+0xa08/0x16f0 [ 653.438334][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 653.438358][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.438381][ C0] hub_event+0x2a1c/0x4f30 [ 653.438405][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 653.438454][ C0] ? __pfx_hub_event+0x10/0x10 [ 653.438482][ C0] ? process_scheduled_works+0xa25/0x1830 [ 653.438509][ C0] ? process_scheduled_works+0xa25/0x1830 [ 653.438532][ C0] process_scheduled_works+0xb02/0x1830 [ 653.438567][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 653.438592][ C0] ? assign_work+0x3d5/0x5e0 [ 653.438615][ C0] worker_thread+0xa50/0xfc0 [ 653.438650][ C0] kthread+0x388/0x470 [ 653.438667][ C0] ? __pfx_worker_thread+0x10/0x10 [ 653.438688][ C0] ? __pfx_kthread+0x10/0x10 [ 653.438705][ C0] ret_from_fork+0x51e/0xb90 [ 653.438728][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 653.438750][ C0] ? __switch_to+0xc7d/0x1450 [ 653.438771][ C0] ? __pfx_kthread+0x10/0x10 [ 653.438787][ C0] ret_from_fork_asm+0x1a/0x30 [ 653.438821][ C0] [ 653.583398][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 653.619716][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 653.619789][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 653.619853][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.619895][ T31] Call Trace: [ 653.619918][ T31] [ 653.619949][ T31] vpanic+0x56c/0xa60 [ 653.620058][ T31] ? __pfx___schedule+0x10/0x10 [ 653.620163][ T31] ? __pfx_vpanic+0x10/0x10 [ 653.620237][ T31] ? __pfx_console_unlock+0x10/0x10 [ 653.620352][ T31] panic+0xc5/0xd0 [ 653.620426][ T31] ? __pfx_panic+0x10/0x10 [ 653.620496][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 653.620566][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 653.620653][ T31] watchdog+0x1023/0x1030 [ 653.620749][ T31] ? watchdog+0x21a/0x1030 [ 653.620853][ T31] kthread+0x388/0x470 [ 653.620914][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.620989][ T31] ? __pfx_kthread+0x10/0x10 [ 653.621051][ T31] ret_from_fork+0x51e/0xb90 [ 653.621128][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 653.621201][ T31] ? __switch_to+0xc7d/0x1450 [ 653.621284][ T31] ? __pfx_kthread+0x10/0x10 [ 653.621339][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.621484][ T31] [ 653.622910][ T31] Kernel Offset: disabled