last executing test programs: 2.512802237s ago: executing program 4 (id=13918): r0 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3], [0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffd]], '\x00', [{0x0, 0x1000, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x0, 0x1}, {0x0, 0xb}, {0x10000000, 0x10000000}, {0x0, 0x2000000}, {0x0, 0x3}, {0x0, 0x1000}], '\x00', 0x6b4, 0x0, 0x0, 0x1000000}) 2.35078584s ago: executing program 4 (id=13923): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4d, 0x1, 0x2, "f457e386b7000000040d0000000000ee00", 0x32435750}) 2.223506931s ago: executing program 4 (id=13926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) 2.119370487s ago: executing program 4 (id=13929): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 809.917233ms ago: executing program 0 (id=13962): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) 797.83582ms ago: executing program 3 (id=13963): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 797.292901ms ago: executing program 2 (id=13964): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x43, '\x00', @buffer={"ccda298700de8e287938929d8605f51fb9adbdb3337d85fc4c27d8b57169835a", 0x20}, 0x7ffd}]}) 771.899879ms ago: executing program 1 (id=13965): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000340)={'filter\x00', 0xb001, 0x2, 0x3c8, 0x0, 0x100, 0x210, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xfffffdee, 0x110}, @unspec=@ERROR={0x0, 'ERROR\x00', 0x0, "de2ff67fd9a48bcf926e2d57215be7250652b4047ce3a3fe1a80cd53de90"}}, {{@uncond, 0xc0, 0xff9c}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x35}, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @rand_addr=0x64010101, @loopback, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x43c) 676.355924ms ago: executing program 1 (id=13966): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0xff5e) 666.94391ms ago: executing program 3 (id=13967): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000540)={0x0, 0x0, '\x00', @bt={0x7bb, 0x3, 0x0, 0x4, 0x2, 0x8, 0x1a, 0xa}}) 663.22087ms ago: executing program 2 (id=13968): r0 = syz_open_dev$dri(&(0x7f0000000380), 0x1fe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={0x0}) 654.792033ms ago: executing program 0 (id=13969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x2, @remote, 0x2000006}}, 0xfcd3, 0x9, 0x7ff, 0x3, 0xf98ece9ffcc6a987, 0x1a61, 0x6}, &(0x7f0000000000)=0x9c) 578.887648ms ago: executing program 1 (id=13970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x840, 0xffff, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x0, 0x80, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x6c}, 0x0, @in6=@private2, 0x3f, 0x0, 0x3}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x7, 0x1}]}]}, 0x13c}}, 0x0) 534.8158ms ago: executing program 3 (id=13971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0xec, 0x111, 0x4b4, 0xec, 0x700, 0x1d8, 0x278, 0x278, 0x1d8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xffff, {0x80000000}}}}, {{@ipv6={@empty, @private1, [0xff, 0xffffffff, 0xff, 0xff], [0xffffffff, 0xffffffff, 0x1ff000180, 0xffffffff], 'bond_slave_0\x00', 'macsec0\x00', {}, {}, 0x1d, 0x4, 0x6}, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x66, {0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) 528.276904ms ago: executing program 2 (id=13972): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002140)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 511.341417ms ago: executing program 0 (id=13973): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, 0xfffffffffffffc82, 0x0, 0x4a}) 387.747482ms ago: executing program 1 (id=13974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x100}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x2}, 0x400, 0x0, 0x0, 0x60ad9155d0ec4524}}, 0xb4}}, 0x4c050) 387.557384ms ago: executing program 3 (id=13975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010026"], 0x1c}}, 0x0) 387.00608ms ago: executing program 2 (id=13976): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x1}}) 378.451739ms ago: executing program 0 (id=13977): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f903, 0x0, '\x00', @p_u16=0x0}}) 326.65361ms ago: executing program 1 (id=13978): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x22, 0x1, 0x3, "839148ae34f8a738fcea570009000000044ffa911a5fff1d09dcc914c375ed40", 0x59555956}) 309.46502ms ago: executing program 4 (id=13979): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000540), &(0x7f00000005c0)=0x2a) 229.385833ms ago: executing program 3 (id=13980): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendto(r0, &(0x7f0000000080)="357dd1b3d1e732c57663637962", 0xd, 0x10, &(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80) 228.60608ms ago: executing program 2 (id=13981): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x0, {0x1, 0xf0, 0x7}, {0x1}, 0x2, 0xfe}], 0x1c) 191.546462ms ago: executing program 1 (id=13982): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000040)) 124.084049ms ago: executing program 0 (id=13983): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0xc0046d00, 0xfffffffffffffffe) 123.963687ms ago: executing program 4 (id=13984): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8009, 0x2) read(r0, &(0x7f00000006c0)=""/98, 0xffffffffffffff3a) 118.073809ms ago: executing program 2 (id=13985): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 60.013417ms ago: executing program 3 (id=13986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {0x0, 0x20}, {0x0, 0x9}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 0s ago: executing program 0 (id=13987): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB='unlock m'], 0xe) kernel console output (not intermixed with test programs): h=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 775.213215][ T29] audit: type=1326 audit(1774583082.052:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.4.10837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 775.246275][T28537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10843'. [ 775.272861][ T29] audit: type=1326 audit(1774583082.052:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.4.10837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 775.293622][T28537] netlink: 'syz.0.10843': attribute type 5 has an invalid length. [ 775.325847][T28537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10843'. [ 775.366695][ T29] audit: type=1326 audit(1774583082.052:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28523 comm="syz.4.10837" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 775.419198][T28537] geneve3: entered promiscuous mode [ 775.425819][T28537] geneve3: entered allmulticast mode [ 775.432604][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 775.441628][ T6141] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 775.467593][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 775.483289][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 775.502915][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 775.954904][T28577] netlink: 'syz.3.10861': attribute type 21 has an invalid length. [ 775.962867][T28577] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10861'. [ 776.001682][T28577] netlink: 'syz.3.10861': attribute type 4 has an invalid length. [ 776.024260][ T29] audit: type=1400 audit(1774583082.992:224): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=28579 comm="syz.4.10864" [ 776.039920][T28577] netlink: 'syz.3.10861': attribute type 3 has an invalid length. [ 776.050777][T28577] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10861'. [ 776.188505][T28588] hfs: unable to load iocharset "I#hIars8Ύ wѷ}+[S_. ,s$nFBlbSR,.R]^kRL/J}&o9b6\wm$xCdeOjocڅ`1҆m#CX^ݾO;;󣫭Xp!+ƇK=A a2HKA rp" [ 776.253236][T28593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.286081][T28596] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10872'. [ 776.763356][ T6141] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 776.810052][T28624] netlink: 'syz.1.10885': attribute type 12 has an invalid length. [ 776.820687][T28624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10885'. [ 776.923481][ T6141] usb 3-1: Using ep0 maxpacket: 32 [ 776.953674][ T6141] usb 3-1: string descriptor 0 read error: -22 [ 776.964181][ T6141] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 776.991788][ T6141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.037050][ T6141] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.253047][ T6141] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 777.477786][ T5830] usb 3-1: USB disconnect, device number 17 [ 777.756938][T28664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10904'. [ 778.147902][T28687] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.10915' sets config #0 [ 778.151636][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10916'. [ 778.349581][T28704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10924'. [ 778.835464][T28733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10938'. [ 779.163329][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 780.013498][ T6141] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 780.030584][T28793] netlink: 'syz.4.10967': attribute type 4 has an invalid length. [ 780.190163][ T6141] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 780.201749][ T6141] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.222240][ T6141] usb 3-1: config 0 has no interface number 0 [ 780.237432][ T6141] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 780.257178][T28807] __nla_validate_parse: 3 callbacks suppressed [ 780.257198][T28807] netlink: 180 bytes leftover after parsing attributes in process `syz.0.10973'. [ 780.273344][ T6141] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 780.286558][T28809] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10975'. [ 780.293288][ T6141] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 780.343192][ T6141] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 780.370035][ T6141] usb 3-1: config 0 interface 52 has no altsetting 0 [ 780.386303][ T6141] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 780.403558][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 780.420368][ T6141] usb 3-1: Product: syz [ 780.433017][ T6141] usb 3-1: SerialNumber: syz [ 780.450515][ T6141] usb 3-1: config 0 descriptor?? [ 780.503521][T28815] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3 out of range (51000000..2150000000) [ 780.655692][T28828] netlink: 'syz.4.10984': attribute type 2 has an invalid length. [ 780.739061][T28832] openvswitch: netlink: Missing valid actions attribute. [ 780.773221][T28832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.937407][ T6141] usb 3-1: USB disconnect, device number 18 [ 781.986462][T28899] program syz.0.11019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 782.003592][T28899] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 782.161975][T28907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11023'. [ 782.633435][T28932] veth4: entered allmulticast mode [ 782.803838][T28941] team0: entered allmulticast mode [ 782.823459][T28941] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11040'. [ 782.847426][T28941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 783.636079][T28982] bridge_slave_0: entered promiscuous mode [ 783.729822][T28988] netlink: 'syz.2.11063': attribute type 21 has an invalid length. [ 784.252327][T29018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11078'. [ 784.401501][T29028] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 785.073656][ T6141] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 785.204426][ T5995] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 785.245670][ T6141] usb 2-1: Using ep0 maxpacket: 16 [ 785.256636][ T6141] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 785.273522][ T6141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.286912][ T6141] usb 2-1: Product: syz [ 785.291233][ T6141] usb 2-1: Manufacturer: syz [ 785.297188][ T6141] usb 2-1: SerialNumber: syz [ 785.306305][ T6141] usb 2-1: config 0 descriptor?? [ 785.377158][ T5995] usb 1-1: Using ep0 maxpacket: 8 [ 785.395572][ T5995] usb 1-1: unable to get BOS descriptor or descriptor too short [ 785.405679][ T5995] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 785.424568][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 785.445769][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 785.460859][ T5995] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 785.471535][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 785.481876][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 785.499469][ T5995] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 785.523283][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.542435][ T6141] speedtch 2-1:0.0: speedtch_bind: data interface not found! [ 785.550859][ T5995] usb 1-1: Product: syz [ 785.561213][ T6141] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 785.568553][ T5995] usb 1-1: Manufacturer: syz [ 785.576275][ T5995] usb 1-1: SerialNumber: syz [ 785.593295][ T5995] usb 1-1: config 0 descriptor?? [ 785.599799][T29067] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 785.629486][ T5995] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 785.670094][T29099] netlink: 'syz.2.11117': attribute type 21 has an invalid length. [ 785.693317][T29099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11117'. [ 785.783513][ T5995] usb 2-1: USB disconnect, device number 10 [ 785.886945][T29107] udevd[29107]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.990478][ T6141] usb 1-1: USB disconnect, device number 16 [ 786.162717][T29126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11128'. [ 786.184346][T29126] netlink: 'syz.2.11128': attribute type 5 has an invalid length. [ 786.192211][T29126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11128'. [ 786.317778][T29136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11132'. [ 786.567367][T29146] netlink: 'syz.1.11138': attribute type 1 has an invalid length. [ 786.581110][T29146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.597257][T29148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11139'. [ 786.826320][T29164] xt_TCPMSS: Only works on TCP SYN packets [ 787.554908][T29208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11167'. [ 787.908581][T29230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.203322][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 788.687103][T29281] trusted_key: encrypted_key: insufficient parameters specified [ 788.700396][T29279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.473613][T29325] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 789.956428][T29356] dlm: non-version read from control device 4096 [ 790.054820][T29364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11245'. [ 790.244238][ T6141] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 790.405808][ T6141] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 790.421386][ T6141] usb 4-1: config 1 has no interface number 0 [ 790.442151][ T6141] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 790.455186][ T6141] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 790.473457][ T6141] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 790.492924][ T6141] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 790.514969][ T6141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.534562][ T6141] usb 4-1: Product: syz [ 790.540006][ T6141] usb 4-1: Manufacturer: syz [ 790.560801][ T6141] usb 4-1: SerialNumber: syz [ 790.570875][T29360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 790.594574][T29393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11259'. [ 790.784442][T29360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 790.824835][ T6141] usb 4-1: No status endpoint found [ 791.023235][ T6009] usb 4-1: USB disconnect, device number 15 [ 791.166937][T29423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11274'. [ 791.432490][T29438] netlink: 'syz.2.11282': attribute type 1 has an invalid length. [ 791.843009][T29461] netlink: zone id is out of range [ 791.853054][T29464] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 791.853237][T29461] netlink: zone id is out of range [ 791.880190][T29461] netlink: get zone limit has 4 unknown bytes [ 791.938322][T29466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11296'. [ 791.964280][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11296'. [ 792.044835][T29471] net veth1_virt_wifi : renamed from virt_wifi0 [ 792.222218][T29485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.467156][T29498] xt_TPROXY: Can be used only with -p tcp or -p udp [ 792.613770][ T6141] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 792.689141][ T29] audit: type=1326 audit(1774583099.652:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29512 comm="syz.4.11320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 792.755796][ T29] audit: type=1326 audit(1774583099.652:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29512 comm="syz.4.11320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 792.793340][ T6141] usb 2-1: Using ep0 maxpacket: 16 [ 792.813039][ T6141] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 792.816932][ T29] audit: type=1326 audit(1774583099.652:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29512 comm="syz.4.11320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=151 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 792.822256][ T6141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.881117][ T6141] usb 2-1: Product: syz [ 792.885715][ T6141] usb 2-1: Manufacturer: syz [ 792.900668][ T6141] usb 2-1: SerialNumber: syz [ 792.915099][ T29] audit: type=1326 audit(1774583099.652:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29512 comm="syz.4.11320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 792.924343][ T6141] usb 2-1: config 0 descriptor?? [ 792.957817][ T29] audit: type=1326 audit(1774583099.652:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29512 comm="syz.4.11320" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 792.977393][ T6141] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 793.103176][ T6009] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 793.272351][ T6009] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 793.283127][ T6009] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.324363][ T6009] usb 3-1: config 0 has no interface number 0 [ 793.333581][ T6009] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 793.333612][ T6009] usb 3-1: config 0 interface 168 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 793.333638][ T6009] usb 3-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 793.333697][ T6009] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 793.333722][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.352031][ T6009] usb 3-1: config 0 descriptor?? [ 793.360017][ T6009] HFC-S_USB 3-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 793.439507][ T6009] usb 2-1: USB disconnect, device number 11 [ 793.566788][ T6141] usb 3-1: USB disconnect, device number 19 [ 793.852548][T29557] program syz.4.11339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.953443][ T6141] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 794.032893][T29565] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 794.044861][T29565] bridge4: entered promiscuous mode [ 794.050357][T29565] bridge4: entered allmulticast mode [ 794.062757][T29568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 794.075624][ T29] audit: type=1326 audit(1774583101.022:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29569 comm="syz.0.11345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 794.135846][ T6141] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 794.152356][ T29] audit: type=1326 audit(1774583101.062:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29569 comm="syz.0.11345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 794.155525][ T6141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.227906][ T6141] usb 4-1: config 0 descriptor?? [ 794.248998][ T29] audit: type=1326 audit(1774583101.092:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29569 comm="syz.0.11345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 794.280983][T29574] openvswitch: netlink: Tunnel attr 183 out of range max 16 [ 794.306830][ T29] audit: type=1326 audit(1774583101.272:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29569 comm="syz.0.11345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 794.353202][ T29] audit: type=1326 audit(1774583101.272:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29569 comm="syz.0.11345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 794.428132][T29580] netlink: 'syz.0.11350': attribute type 11 has an invalid length. [ 794.445322][ T6141] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 794.651660][ T6141] [drm:udl_init] *ERROR* Selecting channel failed [ 794.680701][T29591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 794.702893][T29591] block device autoloading is deprecated and will be removed. [ 794.707953][ T6141] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 794.733426][ T6141] [drm] Initialized udl on minor 2 [ 794.738804][T29593] netlink: 'syz.1.11355': attribute type 5 has an invalid length. [ 794.763322][ T6141] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 794.775419][ T6141] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 794.807167][ T5995] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 794.823760][ T6141] usb 4-1: USB disconnect, device number 16 [ 794.840103][ T5995] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 795.458019][T29630] xt_limit: Overflow, try lower: 1792/134217728 [ 795.779352][T29651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11384'. [ 796.012613][T29663] SET target dimension over the limit! [ 796.051583][T29667] overlayfs: missing 'lowerdir' [ 796.404932][T29684] m1Ie5n: entered promiscuous mode [ 796.433889][ T6009] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 796.593164][ T6009] usb 5-1: Using ep0 maxpacket: 16 [ 796.605478][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 796.644665][ T6009] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 796.683304][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.691456][ T6009] usb 5-1: Product: syz [ 796.723205][ T6009] usb 5-1: Manufacturer: syz [ 796.727868][ T6009] usb 5-1: SerialNumber: syz [ 796.755773][ T6009] usb 5-1: config 0 descriptor?? [ 796.825916][T29699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11406'. [ 797.016764][ T6141] usb 5-1: USB disconnect, device number 12 [ 797.446074][T29735] openvswitch: netlink: Message has 4 unknown bytes. [ 797.824606][T29757] netlink: 'syz.1.11432': attribute type 64 has an invalid length. [ 797.865712][T29757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11432'. [ 797.901802][T29757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.943720][T29761] syz_tun: entered promiscuous mode [ 797.953253][T29761] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 798.521067][T29800] netlink: 'syz.2.11454': attribute type 3 has an invalid length. [ 798.881573][T29823] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11465'. [ 799.049137][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 799.049157][ T29] audit: type=1326 audit(1774583106.012:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.2.11470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 799.086453][T29835] netlink: 272 bytes leftover after parsing attributes in process `syz.3.11472'. [ 799.133455][ T29] audit: type=1326 audit(1774583106.052:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.2.11470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 799.150352][T29838] dummy0: entered promiscuous mode [ 799.192575][T29837] dummy0: left promiscuous mode [ 799.196547][ T29] audit: type=1326 audit(1774583106.072:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.2.11470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 799.258111][ T29] audit: type=1326 audit(1774583106.072:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.2.11470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 799.307747][ T29] audit: type=1326 audit(1774583106.072:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.2.11470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 799.434809][T29854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11482'. [ 799.529720][T29858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.330975][ T29] audit: type=1326 audit(1774583108.292:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.11540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 801.381710][ T29] audit: type=1326 audit(1774583108.322:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.11540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 801.395675][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11541'. [ 801.446615][ T29] audit: type=1326 audit(1774583108.322:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.11540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=106 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 801.493737][ T29] audit: type=1326 audit(1774583108.322:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.11540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 801.523556][ T6141] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 801.555171][ T29] audit: type=1326 audit(1774583108.322:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.11540" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 801.606787][T29987] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.11547'. [ 801.625593][T29987] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.11547'. [ 801.695787][ T6141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.706335][ T6141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.735949][ T6141] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 801.758020][ T6141] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 801.789473][ T6141] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 801.800379][ T6141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 801.814423][ T6141] usb 1-1: SerialNumber: syz [ 802.051518][ T6141] usb 1-1: 0:2 : does not exist [ 802.076029][ T6141] usb 1-1: unit 5 not found! [ 802.096311][T30015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11558'. [ 802.143143][T30015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11558'. [ 802.195253][ T6141] usb 1-1: USB disconnect, device number 17 [ 802.279698][T29972] udevd[29972]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.634480][T30041] xt_ecn: cannot match TCP bits for non-tcp packets [ 802.781519][T30051] openvswitch: netlink: Message has 16 unknown bytes. [ 802.790581][T30054] netlink: 'syz.3.11578': attribute type 304 has an invalid length. [ 802.815804][T30055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.150310][T30074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11586'. [ 803.255499][T30078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11589'. [ 803.335810][T30085] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.11592'. [ 803.754080][T30108] netdevsim netdevsim2: Direct firmware load for .. @ failed with error -2 [ 803.791614][T30108] netdevsim netdevsim2: Falling back to sysfs fallback for: .. @ [ 804.013252][ T6141] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 804.167033][ T6141] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 804.183689][ T6141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.215715][ T6141] usb 2-1: config 0 descriptor?? [ 804.447500][ T6141] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 804.647780][ T6141] [drm:udl_init] *ERROR* Selecting channel failed [ 804.687599][ T6141] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 804.732734][ T6141] [drm] Initialized udl on minor 2 [ 804.743279][ T6141] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 804.771623][ T6141] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 804.790003][ T5995] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 804.799366][ T5995] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 804.815653][ T6141] usb 2-1: USB disconnect, device number 12 [ 805.053490][T30177] bond4: option arp_all_targets: invalid value (1073741825) [ 805.065118][T30177] bond4 (unregistering): Released all slaves [ 805.368633][T30196] netlink: 'syz.1.11646': attribute type 3 has an invalid length. [ 805.773564][ T6141] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 805.943501][ T6141] usb 3-1: Using ep0 maxpacket: 8 [ 805.951630][ T6141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.970867][ T6141] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 805.990234][ T6141] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 806.023967][ T6141] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 806.054552][ T6141] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 806.065115][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 806.074014][ T6141] usb 3-1: SerialNumber: syz [ 806.096084][T30204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 806.123298][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 806.132071][ T6141] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 806.141643][ T6141] usb-storage 3-1:1.0: USB Mass Storage device detected [ 806.165459][ T6141] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 806.176245][ T6141] scsi host1: usb-storage 3-1:1.0 [ 806.623221][T30274] openvswitch: netlink: nsh attr 247 is out of range max 3 [ 806.993162][ T6009] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 807.079683][T30301] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.11696'. [ 807.145460][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 807.163203][ T6009] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 807.185440][ T6009] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 807.203714][ T6009] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 807.221442][ T6009] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 807.237614][ T6009] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.268605][ T6009] usb 2-1: config 0 descriptor?? [ 807.353964][T30314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11702'. [ 807.396625][T30246] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 807.490608][ T6009] hdpvr 2-1:0.0: firmware version 0xd dated jl;S11!vOp [ 807.490608][ T6009] 4(r [ 807.490608][ T6009] d2}d~٭^r [ 807.691228][ T6009] hdpvr 2-1:0.0: device init failed [ 807.705569][ T6009] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 807.705589][T30334] netlink: 'syz.4.11711': attribute type 15 has an invalid length. [ 807.727706][ T6009] usb 2-1: USB disconnect, device number 13 [ 808.104707][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 808.104727][ T29] audit: type=1326 audit(1774583115.072:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.163011][ T29] audit: type=1326 audit(1774583115.102:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.213263][ T29] audit: type=1326 audit(1774583115.102:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.273561][ T29] audit: type=1326 audit(1774583115.102:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.323215][ T29] audit: type=1326 audit(1774583115.102:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.370384][ T29] audit: type=1326 audit(1774583115.102:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.444796][ T29] audit: type=1326 audit(1774583115.102:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.473788][ T29] audit: type=1326 audit(1774583115.102:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.502336][ T29] audit: type=1326 audit(1774583115.102:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.526112][T30246] usb 3-1: device descriptor read/64, error -71 [ 808.533042][ T29] audit: type=1326 audit(1774583115.102:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30355 comm="syz.0.11723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 808.687999][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.697136][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.744367][T30388] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 808.763234][T30246] usb 3-1: reset high-speed USB device number 20 using dummy_hcd [ 808.771890][T30246] usb 3-1: device reset changed ep0 maxpacket size! [ 808.799439][ T6141] usb 3-1: USB disconnect, device number 20 [ 809.091682][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11746'. [ 809.228872][T30408] bond0: option miimon: invalid value (18446744073709551615) [ 809.253198][T30408] bond0: option miimon: allowed values 0 - 2147483647 [ 809.306177][ T6141] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 809.478342][ T6141] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 809.504080][ T6141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.535659][ T6141] usb 3-1: config 0 descriptor?? [ 809.565098][ T6141] cp210x 3-1:0.0: cp210x converter detected [ 809.796832][T30440] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 809.817744][ T6141] usb 3-1: cp210x converter now attached to ttyUSB0 [ 810.027171][ T6009] usb 3-1: USB disconnect, device number 21 [ 810.047315][ T6009] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 810.069634][ T6009] cp210x 3-1:0.0: device disconnected [ 810.659338][T30489] trusted_key: encrypted_key: hex blob is missing [ 810.705344][T30492] libceph: resolve '0' (ret=-3): failed [ 810.832144][T30499] kAFS: unable to lookup cell '/' [ 810.953832][ T6009] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 811.066291][T30513] netlink: 'syz.3.11801': attribute type 8 has an invalid length. [ 811.154581][ T6009] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 811.162980][ T6009] usb 1-1: config 0 has no interface number 0 [ 811.179570][ T6009] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 811.190739][ T6009] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 811.201906][ T6009] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 811.223671][ T6009] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 811.255864][ T6009] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 811.265316][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 811.281634][ T6009] usb 1-1: Product: syz [ 811.293167][ T6009] usb 1-1: Manufacturer: syz [ 811.298006][ T6009] usb 1-1: SerialNumber: syz [ 811.326060][ T6009] usb 1-1: config 0 descriptor?? [ 811.357079][ T6009] xpad 1-1:0.237: probe with driver xpad failed with error -5 [ 811.466863][T30531] netlink: 'syz.1.11810': attribute type 1 has an invalid length. [ 811.595884][ T6009] usb 1-1: USB disconnect, device number 18 [ 811.703696][T30545] openvswitch: netlink: Message has 1 unknown bytes. [ 811.710712][T30545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.861547][T30554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11821'. [ 811.876362][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11822'. [ 812.083214][ T6009] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 812.206088][T30571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 812.248399][ T6009] usb 5-1: Using ep0 maxpacket: 8 [ 812.263733][ T49] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.279232][ T6009] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 812.303334][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.314833][ T6009] usb 5-1: Product: syz [ 812.319131][ T6009] usb 5-1: Manufacturer: syz [ 812.326715][ T6009] usb 5-1: SerialNumber: syz [ 812.333954][ T49] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.343530][ T6009] usb 5-1: config 0 descriptor?? [ 812.367645][ T6009] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 812.383787][ T6009] dvb-usb: bulk message failed: -22 (2/0) [ 812.397770][ T6009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 812.409369][ T6009] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 812.419001][ T6009] usb 5-1: media controller created [ 812.441444][ T6009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.562380][T30589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11838'. [ 812.573914][ T6009] dvb-usb: bulk message failed: -22 (1/0) [ 812.679857][ T48] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 812.693332][ T6009] DVB: Unable to find symbol mt352_attach() [ 812.721542][ T6009] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 812.833127][ T6009] rc_core: IR keymap rc-dvico-portable not found [ 812.839522][ T6009] Registered IR keymap rc-empty [ 812.864230][ T6009] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 812.894182][ T6009] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input111 [ 812.917407][T30606] xt_hashlimit: overflow, try lower: 18446744073709551614/129 [ 812.926141][ T6009] dvb-usb: schedule remote query interval to 100 msecs. [ 812.935807][ T6009] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 812.974206][ T6009] usb 5-1: USB disconnect, device number 13 [ 813.024259][T30609] netlink: 'syz.3.11848': attribute type 2 has an invalid length. [ 813.165201][ T6009] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 813.363881][T30628] netlink: 'syz.3.11856': attribute type 10 has an invalid length. [ 813.373575][T30628] batman_adv: batadv0: Adding interface: netdevsim0 [ 813.393630][T30628] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.427298][T30628] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 813.671150][T30640] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 813.723905][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 813.732108][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 813.885641][T30656] SET target dimension over the limit! [ 813.949026][T30660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11871'. [ 814.053809][ T6009] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 814.213155][ T6009] usb 3-1: Using ep0 maxpacket: 32 [ 814.225439][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 814.247727][ T6009] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 814.264745][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 814.281033][ T6009] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 814.293294][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.303373][ T6009] usb 3-1: Product: syz [ 814.307576][ T6009] usb 3-1: Manufacturer: syz [ 814.323982][ T6009] usb 3-1: SerialNumber: syz [ 814.334644][ T6009] usb 3-1: config 0 descriptor?? [ 814.374333][ T6009] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input113 [ 814.645533][ C0] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 814.645531][ T6009] usb 3-1: USB disconnect, device number 22 [ 814.659929][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 814.763835][ T6141] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 814.808931][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11892'. [ 814.928489][T30706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11894'. [ 815.006754][T30710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11897'. [ 816.353962][T30798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11938'. [ 816.520805][T30804] trusted_key: encrypted_key: keyword 'tpdate' not recognized [ 816.800602][T30822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 816.901077][T30833] netlink: 'syz.1.11953': attribute type 32 has an invalid length. [ 816.933709][ T6141] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 816.939543][T30833] netlink: 'syz.1.11953': attribute type 32 has an invalid length. [ 817.105747][ T6141] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 817.128501][ T6141] usb 5-1: config 0 has no interface number 0 [ 817.142308][ T6141] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 817.165898][ T6141] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 817.197789][ T6141] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 817.233973][ T6141] usb 5-1: config 0 interface 2 has no altsetting 0 [ 817.259791][ T6141] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 817.270315][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.287463][ T6141] usb 5-1: Product: syz [ 817.297382][ T6141] usb 5-1: Manufacturer: syz [ 817.310035][ T6141] usb 5-1: SerialNumber: syz [ 817.342071][ T6141] usb 5-1: config 0 descriptor?? [ 817.362954][T30816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 817.370838][T30816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 817.456584][ T29] audit: type=1326 audit(1774583124.412:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30858 comm="syz.0.11964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 817.533822][ T29] audit: type=1326 audit(1774583124.422:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30858 comm="syz.0.11964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 817.585302][ T29] audit: type=1326 audit(1774583124.422:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30858 comm="syz.0.11964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 817.589993][T30864] openvswitch: netlink: IP tunnel TTL not specified. [ 817.668961][ T29] audit: type=1326 audit(1774583124.422:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30858 comm="syz.0.11964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 817.669745][ T6141] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.913770][ T6009] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 817.939547][ T5995] usb 5-1: USB disconnect, device number 14 [ 818.063216][ T6141] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 818.073628][ T6009] usb 4-1: Using ep0 maxpacket: 16 [ 818.091158][ T6009] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 818.100485][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.112775][ T6009] usb 4-1: Product: syz [ 818.119079][ T6009] usb 4-1: Manufacturer: syz [ 818.123293][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 818.124685][ T6009] usb 4-1: SerialNumber: syz [ 818.235712][ T6141] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.249312][ T6141] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 818.249345][ T6141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.249366][ T6141] usb 1-1: Product: syz [ 818.249382][ T6141] usb 1-1: Manufacturer: syz [ 818.249398][ T6141] usb 1-1: SerialNumber: syz [ 818.252429][ T6141] usb 1-1: config 0 descriptor?? [ 818.305025][ T6141] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 818.363934][ T6009] usb 4-1: 1:1 : bogus bTerminalLink 3 [ 818.372728][ T6009] usb 4-1: unit 2 not found! [ 818.382383][ T6009] usb 4-1: unit 1: unexpected type 0x03 [ 818.393628][ T6009] usb 4-1: unit 4 not found! [ 818.397828][T30897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.398295][ T6009] usb 4-1: unit 9 not found! [ 818.513832][ T6009] usb 4-1: USB disconnect, device number 17 [ 818.563556][T30451] udevd[30451]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.703054][ T6141] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 818.716360][ T6141] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 818.725155][T30907] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11987'. [ 818.743919][ T6141] usb 1-1: USB disconnect, device number 19 [ 818.847127][T30911] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 818.910177][T30913] bond4: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 818.928258][T30913] bond4 (unregistering): Released all slaves [ 819.186619][T30929] xt_recent: Unsupported userspace flags (000000fe) [ 819.285992][T30935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11999'. [ 819.741036][T30963] program syz.1.12016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.755758][T30963] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 819.886189][ T49] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 819.910510][T30973] qrtr: Invalid version 203 [ 820.048191][ T49] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 820.066476][ T49] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 820.095078][ T49] usb 3-1: config 220 has no interface number 2 [ 820.101491][ T49] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 820.150584][ T49] usb 3-1: config 220 interface 0 has no altsetting 0 [ 820.160283][ T49] usb 3-1: config 220 interface 76 has no altsetting 0 [ 820.168406][ T49] usb 3-1: config 220 interface 1 has no altsetting 0 [ 820.187302][ T49] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 820.215878][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.229755][ T49] usb 3-1: Product: syz [ 820.239453][ T49] usb 3-1: Manufacturer: syz [ 820.244991][ T49] usb 3-1: SerialNumber: syz [ 820.433444][ T5995] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 820.497779][ T49] usb 3-1: selecting invalid altsetting 0 [ 820.514415][ T49] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 820.521854][ T49] uvcvideo 3-1:220.0: No valid video chain found. [ 820.540000][ T49] usb 3-1: selecting invalid altsetting 0 [ 820.555778][ T49] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 820.577578][ T49] usb 3-1: USB disconnect, device number 23 [ 820.590833][ T5995] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 820.615658][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.633584][ T5995] usb 1-1: Product: syz [ 820.642699][ T5995] usb 1-1: Manufacturer: syz [ 820.650929][ T5995] usb 1-1: SerialNumber: syz [ 820.662683][ T5995] usb 1-1: config 0 descriptor?? [ 820.673716][ T5995] hub 1-1:0.0: bad descriptor, ignoring hub [ 820.681532][ T5995] hub 1-1:0.0: probe with driver hub failed with error -5 [ 820.690960][ T5995] usbsevseg 1-1:0.0: USB 7 Segment device now attached [ 820.816669][T31020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12041'. [ 821.033802][ T5995] usb 1-1: USB disconnect, device number 20 [ 821.040946][ T5995] usbsevseg 1-1:0.0: USB 7 Segment now disconnected [ 821.152122][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12049'. [ 821.180248][T31036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12049'. [ 821.408873][T31054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12058'. [ 821.560456][T31058] Cannot find del_set index 3 as target [ 821.813173][ T5995] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 822.000462][ T5995] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 822.013913][ T5995] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 822.043286][ T5995] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 822.064032][ T5995] usb 1-1: config 220 has no interface number 2 [ 822.070964][ T5995] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 822.111468][ T5995] usb 1-1: config 220 interface 0 has no altsetting 0 [ 822.119795][ T5995] usb 1-1: config 220 interface 76 has no altsetting 0 [ 822.129873][ T6141] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 822.138530][ T5995] usb 1-1: config 220 interface 1 has no altsetting 0 [ 822.149657][ T5995] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 822.159325][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.170139][ T5995] usb 1-1: Product: syz [ 822.174766][ T5995] usb 1-1: Manufacturer: syz [ 822.179479][ T5995] usb 1-1: SerialNumber: syz [ 822.293756][ T6141] usb 5-1: Using ep0 maxpacket: 32 [ 822.323563][ T6141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 822.343148][ T6141] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 822.373148][ T6141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 822.392166][ T6141] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 822.413166][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.432178][ T6141] usb 5-1: Product: syz [ 822.444588][ T6141] usb 5-1: Manufacturer: syz [ 822.454841][ T6141] usb 5-1: SerialNumber: syz [ 822.511944][ T6141] usb 5-1: config 0 descriptor?? [ 822.529545][ T5995] usb 1-1: selecting invalid altsetting 0 [ 822.554270][ T6141] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input115 [ 822.570070][ T5995] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 822.596968][ T5995] uvcvideo 1-1:220.0: No valid video chain found. [ 822.648192][ T5995] usb 1-1: selecting invalid altsetting 0 [ 822.663185][ T5995] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 822.701897][ T5995] usb 1-1: USB disconnect, device number 21 [ 822.855537][ T6141] usb 5-1: USB disconnect, device number 15 [ 822.855655][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 823.019996][T31126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12092'. [ 823.213543][T31136] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12097'. [ 823.426381][T31150] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12103'. [ 823.614302][T31162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12110'. [ 823.715772][ T29] audit: type=1326 audit(1774583130.682:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.1.12112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 823.745482][ T29] audit: type=1326 audit(1774583130.712:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.1.12112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 823.805578][ T29] audit: type=1326 audit(1774583130.742:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.1.12112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 823.882803][ T29] audit: type=1326 audit(1774583130.742:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.1.12112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 823.928472][ T29] audit: type=1326 audit(1774583130.742:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31166 comm="syz.1.12112" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 824.159673][T31190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.167067][T31190] IPv6: NLM_F_CREATE should be set when creating new route [ 824.174385][T31190] IPv6: NLM_F_CREATE should be set when creating new route [ 824.227558][T31193] netlink: 'syz.2.12125': attribute type 6 has an invalid length. [ 824.463501][T31200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.644005][T31212] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 31212 comm: syz.4.12135) [ 824.707263][ T29] audit: type=1800 audit(1774583131.672:274): pid=31212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12135" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=91070 res=0 errno=0 [ 824.753686][T31214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.982886][T31223] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 825.037264][T31227] bond3: option lp_interval: invalid value (18446744073709551614) [ 825.046421][T31227] bond3: option lp_interval: allowed values 1 - 2147483647 [ 825.075203][T31227] bond3 (unregistering): Released all slaves [ 825.340513][T31245] usb usb8: usbfs: process 31245 (syz.4.12151) did not claim interface 0 before use [ 825.403677][ T6141] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 825.437062][T31251] xt_bpf: check failed: parse error [ 825.577928][ T6141] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 825.587871][ T6141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.613604][ T6141] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 825.632547][ T6141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.653778][ T6141] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.666210][ T6141] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 825.676238][ T6141] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 825.700763][ T6141] usb 1-1: Product: syz [ 825.713955][ T6141] usb 1-1: Manufacturer: syz [ 825.726396][ T6141] cdc_wdm 1-1:1.0: skipping garbage [ 825.741850][ T6141] cdc_wdm 1-1:1.0: skipping garbage [ 825.750030][ T6141] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 825.762117][ T6141] cdc_wdm 1-1:1.0: Unknown control protocol [ 825.974618][T31237] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 825.998782][ T6141] usb 1-1: USB disconnect, device number 22 [ 826.012653][T31274] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 826.186523][T31283] netlink: 'syz.4.12170': attribute type 21 has an invalid length. [ 826.230987][T31283] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12170'. [ 826.250128][T31283] netlink: 'syz.4.12170': attribute type 5 has an invalid length. [ 826.268931][T31283] netlink: 'syz.4.12170': attribute type 6 has an invalid length. [ 826.290208][T31283] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12170'. [ 826.450047][T31299] netlink: 'syz.4.12178': attribute type 1 has an invalid length. [ 826.825164][T31320] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12189'. [ 827.243287][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 827.574145][T31367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12210'. [ 827.774654][T31381] netlink: 'syz.1.12217': attribute type 7 has an invalid length. [ 827.800102][T31381] netlink: 'syz.1.12217': attribute type 8 has an invalid length. [ 827.806502][T31373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.816796][T31373] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.836619][T31373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 827.878820][T31383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12219'. [ 828.328144][T31410] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 828.507700][T31421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12238'. [ 828.637184][T31429] xt_HMARK: spi-set and port-set can't be combined [ 828.644909][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.665224][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.684117][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.703758][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.847400][T31439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12245'. [ 829.218471][T31455] Option ' ˴-]' to dns_resolver key: bad/missing value [ 829.483588][ T29] audit: type=1326 audit(1774583136.442:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31470 comm="syz.1.12263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 829.563487][ T29] audit: type=1326 audit(1774583136.442:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31470 comm="syz.1.12263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 829.633243][ T29] audit: type=1326 audit(1774583136.472:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31470 comm="syz.1.12263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 829.677646][ T29] audit: type=1326 audit(1774583136.472:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31470 comm="syz.1.12263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 829.703559][ T49] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 829.735170][ T29] audit: type=1326 audit(1774583136.472:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31470 comm="syz.1.12263" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 829.878068][ T49] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 829.903414][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.920414][ T49] usb 1-1: Product: syz [ 829.933486][ T49] usb 1-1: Manufacturer: syz [ 829.950647][ T49] usb 1-1: SerialNumber: syz [ 829.987976][ T49] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 830.038462][ T5830] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 830.478427][T31530] openvswitch: netlink: IP tunnel dst address not specified [ 830.564323][ T49] usb 1-1: USB disconnect, device number 23 [ 830.717291][T31540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12295'. [ 830.903262][ T6141] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 831.067447][ T6141] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 831.083256][ T6141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.083514][ T5830] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 831.100880][ T6141] usb 5-1: Product: syz [ 831.111926][ T6141] usb 5-1: Manufacturer: syz [ 831.117152][ T6141] usb 5-1: SerialNumber: syz [ 831.129080][ T5830] ath9k_htc: Failed to initialize the device [ 831.135019][ T6141] usb 5-1: config 0 descriptor?? [ 831.154926][ T49] usb 1-1: ath9k_htc: USB layer deinitialized [ 831.159753][ T6141] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 016 [ 831.389540][ T6141] (null): failure setting delay to 10us [ 831.397609][ T6141] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 831.427889][ T6141] usb 5-1: USB disconnect, device number 16 [ 831.510259][T31580] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 831.592538][T31584] fuse: Bad value for 'user_id' [ 831.597850][T31584] fuse: Bad value for 'user_id' [ 831.703171][ T5995] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 831.863346][ T5995] usb 2-1: Using ep0 maxpacket: 32 [ 831.890292][ T5995] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 831.911847][ T5995] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 831.950112][ T5995] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 832.008380][ T5995] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.031146][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.053201][ T5995] usb 2-1: Product: syz [ 832.060554][ T5995] usb 2-1: Manufacturer: syz [ 832.070689][ T5995] usb 2-1: SerialNumber: syz [ 832.096751][ T5995] cdc_ncm 2-1:1.0: skipping garbage [ 832.122336][ T5995] cdc_ncm 2-1:1.0: skipping garbage [ 832.133813][ T5995] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 832.150959][ T5995] cdc_ncm 2-1:1.0: bind() failure [ 832.329398][ T5995] usb 2-1: USB disconnect, device number 14 [ 832.723163][ T5830] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 832.873591][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 832.885601][ T5830] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 832.903130][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.932786][ T5830] usb 1-1: config 0 descriptor?? [ 832.965520][ T5830] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 832.998056][ T5830] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input116 [ 833.382088][ T5830] usb 1-1: USB disconnect, device number 24 [ 833.616209][T31690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.763917][T31699] netlink: 'syz.2.12371': attribute type 16 has an invalid length. [ 833.772187][T31699] netlink: 'syz.2.12371': attribute type 17 has an invalid length. [ 833.845885][ T5995] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 834.116898][T31714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 834.123636][T31714] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 834.162749][T31714] vhci_hcd vhci_hcd.0: Device attached [ 834.171912][T31721] netlink: 'syz.3.12379': attribute type 1 has an invalid length. [ 834.213162][T31719] vhci_hcd vhci_hcd.0: port 0 already used [ 834.238591][T31715] vhci_hcd: connection closed [ 834.238889][ T48] vhci_hcd vhci_hcd.2: stop threads [ 834.272488][ T48] vhci_hcd vhci_hcd.2: release socket [ 834.278110][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 834.413372][ T5995] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 834.455439][T31740] netlink: 'syz.3.12388': attribute type 49 has an invalid length. [ 834.664310][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12396'. [ 835.052437][T31777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 835.083286][ T5995] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 835.141816][T31781] netlink: 'syz.2.12410': attribute type 1 has an invalid length. [ 835.241455][T31785] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 835.257128][ T5995] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 835.257161][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.257182][ T5995] usb 2-1: Product: syz [ 835.257198][ T5995] usb 2-1: Manufacturer: syz [ 835.257213][ T5995] usb 2-1: SerialNumber: syz [ 835.259950][ T5995] usb 2-1: config 0 descriptor?? [ 835.523616][ T5995] mos7840 2-1:0.0: required endpoints missing [ 835.544122][ T5995] usb 2-1: USB disconnect, device number 15 [ 835.605514][T31804] sctp: [Deprecated]: syz.4.12421 (pid 31804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 835.605514][T31804] Use struct sctp_sack_info instead [ 835.746814][T31812] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12426'. [ 836.216374][T31841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12440'. [ 836.358230][T31849] netlink: 'syz.0.12444': attribute type 1 has an invalid length. [ 836.434040][T31853] x_tables: duplicate underflow at hook 2 [ 837.048486][T31888] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 837.173268][T31893] netlink: 'syz.4.12466': attribute type 21 has an invalid length. [ 837.197093][T31893] netlink: 'syz.4.12466': attribute type 4 has an invalid length. [ 837.363019][T31904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12472'. [ 837.696208][T31927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12482'. [ 837.759453][T31931] netlink: 'syz.1.12485': attribute type 10 has an invalid length. [ 837.890400][T31937] ip6tnl4: entered promiscuous mode [ 837.923213][T31937] ip6tnl4: entered allmulticast mode [ 838.114274][T31953] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 838.220822][T31959] veth0_to_batadv: entered allmulticast mode [ 838.644630][T31984] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 839.051427][T32011] QAT: Device 3 not found [ 839.193515][ T5995] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 839.215907][T32023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12529'. [ 839.359285][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 839.379565][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 839.429862][ T5995] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 839.441817][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.453204][ T5995] usb 1-1: Product: syz [ 839.460359][ T5995] usb 1-1: Manufacturer: syz [ 839.466418][T32035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.478591][ T5995] usb 1-1: SerialNumber: syz [ 839.483477][T32036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12537'. [ 839.496271][ T5995] usb 1-1: config 0 descriptor?? [ 839.672662][T32044] bond7: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 839.690183][T32044] bond7 (unregistering): Released all slaves [ 839.833109][ T5995] usb 1-1: USB disconnect, device number 25 [ 840.393424][T32084] PM: Enabling pm_trace changes system date and time during resume. [ 840.393424][T32084] PM: Correct system time has to be restored manually after resume. [ 840.463428][ T5995] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 840.492173][T32089] binder: 32086:32089 ioctl c018620b 0 returned -14 [ 840.508854][T32090] netlink: 'syz.0.12559': attribute type 20 has an invalid length. [ 840.625905][ T5995] usb 2-1: config 230 has an invalid interface number: 217 but max is 0 [ 840.643463][ T5995] usb 2-1: config 230 has an invalid interface number: 236 but max is 0 [ 840.661894][ T5995] usb 2-1: config 230 has 2 interfaces, different from the descriptor's value: 1 [ 840.683268][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 840.691846][ T5995] usb 2-1: config 230 has no interface number 0 [ 840.699564][T32100] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 840.708163][ T5995] usb 2-1: config 230 has no interface number 1 [ 840.718331][ T5995] usb 2-1: config 230 interface 217 altsetting 201 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.749164][ T5995] usb 2-1: too many endpoints for config 230 interface 236 altsetting 175: 162, using maximum allowed: 30 [ 840.773161][ T5995] usb 2-1: config 230 interface 236 altsetting 175 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 840.784458][T32103] netlink: 'syz.2.12567': attribute type 61 has an invalid length. [ 840.806644][ T5995] usb 2-1: config 230 interface 236 altsetting 175 has 1 endpoint descriptor, different from the interface descriptor's value: 162 [ 840.841573][ T5995] usb 2-1: config 230 interface 217 has no altsetting 0 [ 840.861878][ T5995] usb 2-1: config 230 interface 236 has no altsetting 0 [ 840.872851][ T5995] usb 2-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=6c.4c [ 840.890744][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.909680][ T5995] usb 2-1: Product: syz [ 840.923913][ T5995] usb 2-1: Manufacturer: syz [ 840.928695][ T5995] usb 2-1: SerialNumber: syz [ 840.970178][T32112] netlink: 'syz.4.12572': attribute type 12 has an invalid length. [ 841.192585][ T5995] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 841.219647][ T5995] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 841.235578][ T5995] dib0700: firmware download failed at 7 with -8 [ 841.268036][ T5995] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 841.292258][ T5995] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 841.301408][T32130] openvswitch: netlink: Message has 4 unknown bytes. [ 841.317347][ T5995] dib0700: firmware download failed at 7 with -8 [ 841.345676][ T5995] usb 2-1: USB disconnect, device number 16 [ 841.428323][T32135] netlink: 'syz.3.12583': attribute type 11 has an invalid length. [ 841.578930][T32146] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12588'. [ 841.924196][ T5995] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 842.077931][T32173] program syz.1.12602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 842.096817][ T5995] usb 3-1: Using ep0 maxpacket: 16 [ 842.109319][ T5995] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 842.123215][ T6141] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 842.131966][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.167515][ T5995] usb 3-1: Product: syz [ 842.172278][ T5995] usb 3-1: Manufacturer: syz [ 842.182605][ T5995] usb 3-1: SerialNumber: syz [ 842.192400][ T5995] usb 3-1: config 0 descriptor?? [ 842.201755][ T5995] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 842.215113][ T5995] usb 3-1: Detected FT-X [ 842.273135][ T6141] usb 4-1: Using ep0 maxpacket: 8 [ 842.292803][ T6141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.317650][ T6141] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 842.343208][ T6141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.374752][ T6141] usb 4-1: config 0 descriptor?? [ 842.405486][ T6141] uvcvideo 4-1:0.0: Found UVC 0.00 device (031b:0201) [ 842.416994][ T6141] uvcvideo 4-1:0.0: No valid video chain found. [ 842.527350][T32193] snd_dummy snd_dummy.0: control 0:546091537:0:syz0:0 is already present [ 842.608426][ T5995] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 842.624728][ T5995] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 842.639314][ T5830] usb 4-1: USB disconnect, device number 18 [ 842.646055][ T5995] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 842.684221][ T5995] usb 3-1: USB disconnect, device number 24 [ 842.705402][ T5995] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 842.728484][ T5995] ftdi_sio 3-1:0.0: device disconnected [ 842.882578][ T29] audit: type=1326 audit(1774583149.842:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.0.12621" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 842.957912][ T29] audit: type=1326 audit(1774583149.842:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.0.12621" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 842.994555][ T29] audit: type=1326 audit(1774583149.842:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.0.12621" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 843.018830][ T29] audit: type=1326 audit(1774583149.842:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.0.12621" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 843.303193][ T5830] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 843.649324][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 843.657136][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 843.666717][ T5830] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 843.677540][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.688321][ T5830] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 843.697750][ T5830] usb 1-1: config 1 has no interface number 1 [ 843.704159][ T5830] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 843.717445][ T5830] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.730789][T32248] bond3: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 843.731480][ T5830] usb 1-1: config 1 interface 2 has no altsetting 0 [ 843.756272][ T5830] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.765684][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.774074][ T5830] usb 1-1: Product: syz [ 843.778530][ T5830] usb 1-1: Manufacturer: syz [ 843.785231][ T5830] usb 1-1: SerialNumber: syz [ 843.801230][T32248] bond3 (unregistering): Released all slaves [ 843.857937][T32257] netlink: 'syz.1.12642': attribute type 16 has an invalid length. [ 843.874889][T32257] netlink: 'syz.1.12642': attribute type 17 has an invalid length. [ 844.015518][ T5830] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 844.022578][ T5830] usb 1-1: MIDIStreaming interface descriptor not found [ 844.192069][ T5830] usb 1-1: USB disconnect, device number 26 [ 844.494246][T32284] batman_adv: batadv0: Interface activated: netdevsim0 [ 844.518469][T32285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.647828][T32293] macvtap0: entered allmulticast mode [ 844.868030][T32304] xt_bpf: check failed: parse error [ 844.873769][ T5995] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 845.048891][ T5995] usb 3-1: Using ep0 maxpacket: 32 [ 845.057564][ T5995] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.070120][ T5995] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.086760][ T5995] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 845.104304][ T5995] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 845.119931][ T5995] usb 3-1: Product: syz [ 845.127367][ T5995] usb 3-1: Manufacturer: syz [ 845.133587][T32321] netlink: 'syz.0.12674': attribute type 1 has an invalid length. [ 845.148060][ T5995] hub 3-1:4.0: USB hub found [ 845.171319][T32321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 845.345455][T32331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12679'. [ 845.363648][ T5995] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 845.414347][T32335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12681'. [ 845.692862][ T5995] usb 3-1: USB disconnect, device number 25 [ 845.803348][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 845.907099][T32363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.000416][T32369] netlink: 'syz.3.12698': attribute type 16 has an invalid length. [ 846.035584][T32369] netlink: 'syz.3.12698': attribute type 17 has an invalid length. [ 846.196810][T32377] netlink: 'syz.0.12702': attribute type 3 has an invalid length. [ 846.214591][T32377] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12702'. [ 846.227970][T32384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12704'. [ 846.407350][T32394] netlink: 'syz.1.12711': attribute type 4 has an invalid length. [ 846.835709][T32420] netlink: 'syz.4.12724': attribute type 1 has an invalid length. [ 846.858573][T32420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12724'. [ 847.348745][T32451] program syz.0.12738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 847.638421][T32472] tc_dump_action: action bad kind [ 848.117896][T32499] netlink: 'syz.3.12762': attribute type 21 has an invalid length. [ 848.138725][T32499] netlink: 'syz.3.12762': attribute type 6 has an invalid length. [ 848.163177][T32499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12762'. [ 848.183430][ T5830] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 848.335595][ T5830] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 848.346846][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.374387][ T5830] usb 5-1: config 0 descriptor?? [ 848.395735][ T5830] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 848.563484][ T49] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 848.753261][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 848.766312][ T49] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 848.785477][ T49] usb 4-1: config 0 has no interface number 0 [ 848.791728][ T49] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 848.816727][ T5830] gspca_stv06xx: I2C: Read error writing address: -71 [ 848.836951][ T49] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 848.856333][ T5830] usb 5-1: USB disconnect, device number 17 [ 848.874440][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.882582][ T49] usb 4-1: Product: syz [ 848.904305][ T49] usb 4-1: Manufacturer: syz [ 848.908970][ T49] usb 4-1: SerialNumber: syz [ 848.941999][ T49] usb 4-1: config 0 descriptor?? [ 849.123339][ T6009] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 849.298002][ T6009] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 849.319522][ T6009] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 849.338379][ T6009] usb 2-1: config 0 interface 0 has no altsetting 0 [ 849.349383][T32562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12793'. [ 849.354572][ T6009] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 849.383708][ T49] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 849.395389][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 849.418362][ T49] usb 4-1: USB disconnect, device number 19 [ 849.424808][ T6009] usb 2-1: Product: syz [ 849.429045][ T6009] usb 2-1: Manufacturer: syz [ 849.439651][ T6009] usb 2-1: SerialNumber: syz [ 849.467501][ T6009] usb 2-1: config 0 descriptor?? [ 849.497779][ T6009] hub 2-1:0.0: bad descriptor, ignoring hub [ 849.506761][ T6009] hub 2-1:0.0: probe with driver hub failed with error -5 [ 849.517888][ T6009] usb 2-1: selecting invalid altsetting 0 [ 849.636680][T32571] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 849.853565][T32583] netlink: 'syz.4.12802': attribute type 1 has an invalid length. [ 849.863521][ T49] usb 2-1: USB disconnect, device number 17 [ 850.600951][ T29] audit: type=1400 audit(1774583157.562:284): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=32622 comm="syz.2.12824" [ 850.774973][T32634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12827'. [ 851.573176][T32682] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12852'. [ 852.169785][ T6023] cgroup: fork rejected by pids controller in /syz3 [ 852.807507][T12135] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 852.814933][ T5995] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 852.849873][T12135] batman_adv: batadv0: Removing interface: netdevsim0 [ 852.986431][ T5995] usb 1-1: config 2 has an invalid interface number: 211 but max is 0 [ 853.024153][ T5995] usb 1-1: config 2 has no interface number 0 [ 853.043219][ T5995] usb 1-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 853.073549][ T5995] usb 1-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 4 [ 853.107779][ T5995] usb 1-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1023 [ 853.155281][ T5995] usb 1-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 853.175916][ T5995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.199722][ T5995] usb 1-1: Product: syz [ 853.205224][ T5995] usb 1-1: Manufacturer: syz [ 853.213807][ T5995] usb 1-1: SerialNumber: syz [ 853.232423][T12135] erspan0: left allmulticast mode [ 853.242573][T32739] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 853.256371][T12135] erspan0: left promiscuous mode [ 853.265528][T12135] bridge0: port 1(erspan0) entered disabled state [ 853.279688][ T5995] em28xx 1-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 853.293459][ T5995] em28xx 1-1:2.211: Device initialization failed. [ 853.300762][ T5995] em28xx 1-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 853.333212][ T49] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 853.485613][ T6008] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 853.495758][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 853.506072][ T49] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 853.517914][ T49] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 853.530094][ T6008] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 853.539414][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 853.551170][ T6008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 853.554443][ T5995] usb 1-1: USB disconnect, device number 27 [ 853.564830][ T49] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.576048][T32763] netlink: 'syz.2.12890': attribute type 2 has an invalid length. [ 853.587303][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 853.587409][ T6008] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 853.603110][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.625642][ T6008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 853.666492][ T49] usb 5-1: Product: syz [ 853.670805][ T49] usb 5-1: Manufacturer: syz [ 853.693186][ T49] usb 5-1: SerialNumber: syz [ 853.713855][T32750] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 853.755918][ T49] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 853.756002][T32766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12891'. [ 853.802259][ T49] usbtest 5-1:1.0: Linux user mode ISO test driver [ 853.811325][ T49] usbtest 5-1:1.0: high-speed {control bulk-in iso-in} tests (+alt) [ 853.974985][ T49] usb 5-1: USB disconnect, device number 18 [ 854.133124][T12135] bond0 (unregistering): Released all slaves [ 854.154784][T12135] bond1 (unregistering): Released all slaves [ 854.181847][T12135] bond2 (unregistering): Released all slaves [ 854.229780][T12135] bond3 (unregistering): Released all slaves [ 854.271403][T12135] bond4 (unregistering): Released all slaves [ 854.317447][ T320] openvswitch: netlink: IPv6 tunnel dst address is zero [ 854.478651][T12135] IPVS: stopping backup sync thread 16120 ... [ 855.066866][T32764] chnl_net:caif_netlink_parms(): no params data found [ 855.083302][ T351] netlink: 'syz.2.12911': attribute type 3 has an invalid length. [ 855.167348][ T355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 855.567545][ T373] misc userio: Invalid payload size [ 855.653764][T32764] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.661018][T32764] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.695166][T32764] bridge_slave_0: entered allmulticast mode [ 855.714741][T32764] bridge_slave_0: entered promiscuous mode [ 855.733253][ T6013] Bluetooth: hci3: command tx timeout [ 855.750618][T32764] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.783467][T32764] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.811393][T32764] bridge_slave_1: entered allmulticast mode [ 855.828443][T32764] bridge_slave_1: entered promiscuous mode [ 855.848439][ T49] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 855.932532][T32764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.980630][ T393] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 856.003225][T32764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.020651][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 856.036609][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 856.075167][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 856.102659][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 856.122528][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 856.127078][T32764] team0: Port device team_slave_0 added [ 856.168327][ T49] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 856.174029][T32764] team0: Port device team_slave_1 added [ 856.184733][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.192934][ T49] usb 5-1: Product: syz [ 856.218515][ T49] usb 5-1: Manufacturer: syz [ 856.224695][ T49] usb 5-1: SerialNumber: syz [ 856.255216][ T49] usb 5-1: config 0 descriptor?? [ 856.268076][ T49] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input118 [ 856.363537][T32764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.370537][T32764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.410357][T32764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.466274][ T404] openvswitch: netlink: EtherType 0 is less than min 600 [ 856.496312][T32764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.528211][T32764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.604973][ T49] usb 5-1: USB disconnect, device number 19 [ 856.612058][T32764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.700991][T12135] hsr_slave_0: left promiscuous mode [ 856.731480][T12135] hsr_slave_1: left promiscuous mode [ 857.195085][ T420] batadv2: entered promiscuous mode [ 857.229384][ T422] bridge2: entered promiscuous mode [ 857.253240][ T422] bridge2: entered allmulticast mode [ 857.317709][T32764] hsr_slave_0: entered promiscuous mode [ 857.363989][T32764] hsr_slave_1: entered promiscuous mode [ 857.372196][T32764] debugfs: 'hsr0' already exists in 'hsr' [ 857.378854][T32764] Cannot create hsr debugfs directory [ 857.539787][ T441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12944'. [ 857.803278][ T6013] Bluetooth: hci3: command tx timeout [ 857.923895][T12135] IPVS: stop unused estimator thread 0... [ 858.018337][ T464] netlink: 'syz.1.12954': attribute type 8 has an invalid length. [ 858.130363][ T468] netlink: 388 bytes leftover after parsing attributes in process `syz.0.12955'. [ 858.325475][ T478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12959'. [ 858.456532][ T484] openvswitch: netlink: Missing key (keys=840, expected=2000) [ 858.620880][ T492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12964'. [ 858.853884][T32764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 858.890061][T32764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 858.946172][T32764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 858.980085][T32764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 859.331046][T32764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.384010][T32764] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.420278][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.427577][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.470383][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.477620][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.699433][T32764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.861047][T32764] veth0_vlan: entered promiscuous mode [ 859.883637][ T6013] Bluetooth: hci3: command tx timeout [ 859.897789][T32764] veth1_vlan: entered promiscuous mode [ 859.950194][T32764] veth0_macvtap: entered promiscuous mode [ 859.962241][T32764] veth1_macvtap: entered promiscuous mode [ 860.022111][T32764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.064601][T32764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.145572][T13820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.181461][T13820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.248002][T13820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.279961][T13820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.456925][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.483172][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.594211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.603921][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.883674][ T599] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13005'. [ 861.623572][ T6195] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 861.631993][ T644] usb usb7: usbfs: process 644 (syz.2.13021) did not claim interface 0 before use [ 861.788097][ T6195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 861.830264][ T6195] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 861.863298][ T6195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.871353][ T6195] usb 1-1: Product: syz [ 861.876038][T13982] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 861.903826][ T6195] usb 1-1: Manufacturer: syz [ 861.909258][ T6195] usb 1-1: SerialNumber: syz [ 861.927838][ T6195] usb 1-1: config 0 descriptor?? [ 861.933629][ T632] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 861.950340][ T632] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 861.963419][ T6013] Bluetooth: hci3: command tx timeout [ 861.977972][ T6195] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 862.064479][T13982] usb 5-1: Using ep0 maxpacket: 16 [ 862.071619][T13982] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 862.080265][T13982] usb 5-1: config 251 has no interface number 0 [ 862.086829][T13982] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 862.102077][T13982] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 862.124499][T13982] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 862.144637][T13982] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 862.163668][T13982] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 862.205330][T13982] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 862.253475][T13982] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.274027][ T6195] usb 1-1: USB disconnect, device number 28 [ 862.296008][T13982] usb 5-1: config 251 interface 202 has no altsetting 0 [ 862.322708][T13982] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 862.343401][T13982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.362134][T13982] usb 5-1: Product: syz [ 862.373990][T13982] usb 5-1: Manufacturer: syz [ 862.378721][T13982] usb 5-1: SerialNumber: syz [ 862.400205][ T642] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 862.416320][ T642] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 862.538044][ T682] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13034'. [ 862.664555][T13982] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 862.671831][T13982] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 862.681548][T13982] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 862.703341][ T5830] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 862.704407][T13982] usb 5-1: USB disconnect, device number 20 [ 862.885710][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 862.895656][ T5830] usb 2-1: unable to get BOS descriptor or descriptor too short [ 862.918365][ T5830] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 862.932981][ T5830] usb 2-1: config 8 has no interface number 0 [ 862.939303][ T5830] usb 2-1: config 8 interface 255 has no altsetting 0 [ 862.964799][ T5830] usb 2-1: string descriptor 0 read error: -22 [ 862.983318][ T5830] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 863.002624][ T5830] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 863.265587][ T5830] catc 2-1:8.255: Missing or invalid endpoints [ 863.365252][ T716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.536706][ T49] usb 2-1: USB disconnect, device number 18 [ 863.826868][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13049'. [ 864.046933][ T752] netlink: 5040 bytes leftover after parsing attributes in process `syz.4.13054'. [ 864.056581][ T750] kAFS: unparsable volume name [ 864.261561][ T765] trusted_key: encrypted_key: keylen parameter is missing [ 864.704240][ T792] Cannot find add_set index 0 as target [ 864.880253][ T29] audit: type=1326 audit(1774583171.842:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=802 comm="syz.3.13078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 864.974501][ T29] audit: type=1326 audit(1774583171.872:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=802 comm="syz.3.13078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 865.011665][ T811] netlink: 'syz.2.13081': attribute type 11 has an invalid length. [ 865.035342][ T29] audit: type=1326 audit(1774583171.872:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=802 comm="syz.3.13078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 865.081173][ T29] audit: type=1326 audit(1774583171.872:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=802 comm="syz.3.13078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 865.081228][ T29] audit: type=1326 audit(1774583171.872:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=802 comm="syz.3.13078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 865.683285][T13982] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 865.847549][T13982] usb 3-1: Using ep0 maxpacket: 16 [ 865.874617][T13982] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 865.896764][T13982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.931642][T13982] usb 3-1: Product: syz [ 865.940355][T13982] usb 3-1: Manufacturer: syz [ 865.955745][T13982] usb 3-1: SerialNumber: syz [ 865.978235][T13982] usb 3-1: config 0 descriptor?? [ 866.018038][ T864] netlink: 'syz.0.13106': attribute type 63 has an invalid length. [ 866.048907][ T864] netlink: 'syz.0.13106': attribute type 17 has an invalid length. [ 866.188009][ T876] IPVS: Error connecting to the multicast addr [ 866.204819][T13982] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 866.218988][T13982] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 866.293647][ T49] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 866.458372][T13982] usb 3-1: USB disconnect, device number 26 [ 866.480431][ T49] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 866.503929][ T49] usb 5-1: config 0 has no interface number 0 [ 866.521035][ T49] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 866.535660][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.555611][ T49] usb 5-1: Product: syz [ 866.564912][ T49] usb 5-1: Manufacturer: syz [ 866.575128][ T49] usb 5-1: SerialNumber: syz [ 866.593387][ T49] usb 5-1: config 0 descriptor?? [ 866.614641][ T897] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 866.821718][ T49] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 866.844915][ T49] uvcvideo 5-1:0.64: Failed to create links for entity 32768 [ 866.854822][ T49] uvcvideo 5-1:0.64: Failed to register entities (-22). [ 866.882588][ T49] usb 5-1: USB disconnect, device number 21 [ 866.936594][ T919] usb usb8: usbfs: process 919 (syz.0.13133) did not claim interface 0 before use [ 867.020608][ T925] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 867.103428][ T6009] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 867.244447][ T937] netlink: 'syz.0.13139': attribute type 21 has an invalid length. [ 867.252426][ T937] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13139'. [ 867.262239][ T937] netlink: 'syz.0.13139': attribute type 4 has an invalid length. [ 867.270459][ T937] netlink: 'syz.0.13139': attribute type 5 has an invalid length. [ 867.279878][ T937] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13139'. [ 867.284472][ T6009] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 867.298580][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.307062][ T6009] usb 2-1: Product: syz [ 867.311327][ T6009] usb 2-1: Manufacturer: syz [ 867.316418][ T6009] usb 2-1: SerialNumber: syz [ 867.332241][ T6009] usb 2-1: config 0 descriptor?? [ 867.333391][ T6195] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 867.342626][ T6009] ch341 2-1:0.0: ch341-uart converter detected [ 867.437373][ T943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13142'. [ 867.447700][ T943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13142'. [ 867.515532][ T6195] usb 3-1: Using ep0 maxpacket: 16 [ 867.533203][ T6195] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 867.551602][ T6195] usb 3-1: config 0 has no interface number 0 [ 867.564050][ T6195] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 867.589830][ T6195] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 867.600269][ T6195] usb 3-1: config 0 interface 41 has no altsetting 0 [ 867.626221][ T6195] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 867.636418][ T6195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.644808][ T6195] usb 3-1: Product: syz [ 867.663157][ T6195] usb 3-1: Manufacturer: syz [ 867.668001][ T6195] usb 3-1: SerialNumber: syz [ 867.676506][ T6195] usb 3-1: config 0 descriptor?? [ 867.689840][ T931] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 867.697465][ T931] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 867.741674][ T958] netlink: 'syz.4.13147': attribute type 11 has an invalid length. [ 867.768351][ T6009] usb 2-1: failed to send control message: -71 [ 867.783228][ T6009] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 867.804927][ T6009] usb 2-1: USB disconnect, device number 19 [ 867.824771][ T6009] ch341 2-1:0.0: device disconnected [ 867.932133][ T6195] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 867.965579][ T6195] usb 3-1: USB disconnect, device number 27 [ 868.593204][ T6195] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 868.763224][ T6195] usb 1-1: Using ep0 maxpacket: 16 [ 868.777336][ T6195] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 868.803141][ T6195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.824934][ T6195] usb 1-1: Product: syz [ 868.829189][ T6195] usb 1-1: Manufacturer: syz [ 868.843226][ T6195] usb 1-1: SerialNumber: syz [ 868.858371][ T6195] usb 1-1: config 0 descriptor?? [ 868.880391][ T6195] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 868.934763][ T1024] netlink: 'syz.1.13178': attribute type 21 has an invalid length. [ 868.954561][ T1024] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13178'. [ 868.973628][ T1024] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13178'. [ 869.006731][ T1028] program syz.2.13180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 869.291065][ T6195] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 869.331014][ T6195] usb 1-1: USB disconnect, device number 29 [ 869.539621][ T1067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13194'. [ 869.783175][ T6195] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 869.969020][ T6195] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 869.969057][ T6195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.969078][ T6195] usb 2-1: Product: syz [ 869.969093][ T6195] usb 2-1: Manufacturer: syz [ 869.969110][ T6195] usb 2-1: SerialNumber: syz [ 870.003786][ T6195] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 870.094914][T13982] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 870.128343][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.134856][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.345261][ T1107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13212'. [ 870.482893][ T1113] : renamed from dummy0 (while UP) [ 870.635954][ T49] usb 2-1: USB disconnect, device number 20 [ 871.166438][T13982] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 871.193305][T13982] ath9k_htc: Failed to initialize the device [ 871.220264][ T49] usb 2-1: ath9k_htc: USB layer deinitialized [ 871.293603][ T1155] xt_TPROXY: Can be used only with -p tcp or -p udp [ 871.591567][ T1172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13245'. [ 871.639363][ T1177] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13247'. [ 871.664606][ T1177] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 872.474339][ T1231] random: crng reseeded on system resumption [ 872.664576][ T1242] xt_TCPMSS: Only works on TCP SYN packets [ 872.816143][ T1252] netlink: 'syz.0.13282': attribute type 29 has an invalid length. [ 872.882345][ T1256] __nla_validate_parse: 1 callbacks suppressed [ 872.882366][ T1256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13284'. [ 872.944327][ T1261] autofs4:pid:1261:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 873.663985][ T1310] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 874.754792][ T1369] netlink: 'syz.3.13333': attribute type 21 has an invalid length. [ 874.823555][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13333'. [ 874.914217][ T1375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13337'. [ 875.287213][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13344'. [ 875.476534][ T1400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13349'. [ 875.510859][ T1400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.714167][ T29] audit: type=1326 audit(1774583182.662:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1409 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 875.782465][ T29] audit: type=1326 audit(1774583182.662:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1409 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 875.851698][ T29] audit: type=1326 audit(1774583182.672:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1409 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 875.889150][ T1420] netlink: zone id is out of range [ 875.914754][ T29] audit: type=1326 audit(1774583182.672:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1409 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 875.962536][ T1422] netlink: 'syz.0.13360': attribute type 21 has an invalid length. [ 875.966123][ T29] audit: type=1326 audit(1774583182.672:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1409 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 875.994636][ T1422] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13360'. [ 876.001872][ T1420] netlink: set zone limit has 4 unknown bytes [ 876.012757][ T1422] netlink: 'syz.0.13360': attribute type 1 has an invalid length. [ 876.021350][ T1424] netlink: 'syz.4.13361': attribute type 8 has an invalid length. [ 876.062382][ T29] audit: type=1326 audit(1774583182.672:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1409 comm="syz.3.13354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 876.237490][ T1432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13365'. [ 876.626199][ T1454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13375'. [ 876.739009][ T1461] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 877.009089][ T1476] [U] v3f"S/4:XTzWtlW= [ 877.043197][ T1476] [U] J"e:" [ 877.112235][ T1483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13388'. [ 877.487914][ T1505] openvswitch: netlink: IP tunnel dst address not specified [ 877.640981][ T1511] netlink: 'syz.0.13403': attribute type 1 has an invalid length. [ 877.817949][ T1520] netlink: 'syz.1.13406': attribute type 21 has an invalid length. [ 878.366075][ T1555] dlm: no locking on control device [ 878.530135][ T1566] openvswitch: netlink: Actions may not be safe on all matching packets [ 878.580699][ T1571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13432'. [ 878.871700][ T1588] netlink: 'syz.1.13440': attribute type 30 has an invalid length. [ 878.873534][ T1589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13441'. [ 878.890802][ T1589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13441'. [ 879.462034][ T1620] xt_TCPMSS: Only works on TCP SYN packets [ 879.473263][ T1623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13458'. [ 879.586870][ T1628] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 879.828146][ T49] IPVS: starting estimator thread 0... [ 879.979558][ T1646] IPVS: using max 27 ests per chain, 64800 per kthread [ 880.067285][ T1658] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 880.151234][ T1665] openvswitch: netlink: Flow key attribute not present in set flow. [ 880.182372][ T1667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13477'. [ 880.529748][ T1686] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 880.682783][ T1690] ALSA: mixer_oss: invalid OSS volume '' [ 880.698994][ T1690] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 880.720952][ T1690] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 881.023518][ T1690] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 881.033007][ T1690] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 881.078243][ T1714] No such timeout policy "syz0" [ 881.611451][ T1747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13515'. [ 881.643285][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 881.825360][ T29] audit: type=1326 audit(1774583188.792:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.2.13521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 881.895535][ T29] audit: type=1326 audit(1774583188.792:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.2.13521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 881.943134][ T29] audit: type=1326 audit(1774583188.822:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.2.13521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 882.005920][ T29] audit: type=1326 audit(1774583188.822:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.2.13521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 882.072541][ T29] audit: type=1326 audit(1774583188.822:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1758 comm="syz.2.13521" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 882.107355][ T1774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13529'. [ 882.203254][ T6195] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 882.353217][ T6195] usb 1-1: Using ep0 maxpacket: 32 [ 882.360677][ T6195] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 882.373113][ T6195] usb 1-1: config 0 has no interface number 0 [ 882.381931][ T6195] usb 1-1: config 0 interface 132 has no altsetting 0 [ 882.399214][ T6195] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 882.413154][ T6195] usb 1-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 882.432192][ T6195] usb 1-1: Product: syz [ 882.437063][ T6195] usb 1-1: Manufacturer: syz [ 882.441858][ T6195] usb 1-1: SerialNumber: syz [ 882.471401][ T6195] usb 1-1: config 0 descriptor?? [ 882.491480][ T6195] ftdi_sio 1-1:0.132: FTDI USB Serial Device converter detected [ 882.507996][ T6195] ftdi_sio ttyUSB0: unknown device type: 0x302 [ 882.553609][ T49] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 882.734901][ T6195] usb 1-1: USB disconnect, device number 30 [ 882.753766][ T49] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 882.759125][ T6195] ftdi_sio 1-1:0.132: device disconnected [ 882.761799][ T49] usb 2-1: config 0 has no interface number 0 [ 882.796483][ T49] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 882.810501][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.831227][ T49] usb 2-1: Product: syz [ 882.840655][ T49] usb 2-1: Manufacturer: syz [ 882.850774][ T49] usb 2-1: SerialNumber: syz [ 882.872062][ T49] usb 2-1: config 0 descriptor?? [ 882.894701][ T1812] netlink: 'syz.4.13548': attribute type 12 has an invalid length. [ 882.914131][ T1812] netlink: 120 bytes leftover after parsing attributes in process `syz.4.13548'. [ 883.092765][ T49] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 883.135921][ T49] usb 2-1: USB disconnect, device number 21 [ 884.056124][ T1869] binder: 1868:1869 ioctl 40046210 0 returned -14 [ 884.222505][ T1883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13580'. [ 884.896152][ T1924] usb usb8: usbfs: process 1924 (syz.1.13601) did not claim interface 0 before use [ 885.578705][ T1966] openvswitch: netlink: IP tunnel dst address not specified [ 885.768724][ T1973] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 885.830311][ T1977] lo: left promiscuous mode [ 885.883429][ T1980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13628'. [ 885.982042][ T1977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.021126][ T1977] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.103245][ T1977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 886.597384][ T2009] xt_HMARK: spi-set and port-set can't be combined [ 886.943533][ T2031] netlink: 'syz.1.13654': attribute type 3 has an invalid length. [ 886.951442][ T2031] netlink: 46 bytes leftover after parsing attributes in process `syz.1.13654'. [ 887.147851][ T29] audit: type=1326 audit(1774583194.112:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.4.13661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 887.212863][ T29] audit: type=1326 audit(1774583194.112:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.4.13661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 887.319122][ T29] audit: type=1326 audit(1774583194.112:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.4.13661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 887.373144][ T29] audit: type=1326 audit(1774583194.112:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.4.13661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 887.433874][ T29] audit: type=1326 audit(1774583194.112:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.4.13661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 888.219572][ T2106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13692'. [ 888.253178][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13692'. [ 888.314413][ T2111] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 888.605722][ T2130] sctp: [Deprecated]: syz.4.13703 (pid 2130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 888.605722][ T2130] Use struct sctp_sack_info instead [ 888.655944][ T2132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13704'. [ 888.853261][ T2143] netlink: 'syz.0.13709': attribute type 2 has an invalid length. [ 889.497479][ T2183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 889.991581][ T2214] netlink: 348 bytes leftover after parsing attributes in process `syz.3.13743'. [ 890.836979][ T2268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13771'. [ 890.846437][ T2266] netlink: 'syz.0.13770': attribute type 3 has an invalid length. [ 890.856484][ T2270] nftables ruleset with unbound chain [ 890.874090][ T2266] netlink: 'syz.0.13770': attribute type 16 has an invalid length. [ 890.901754][ T2266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13770'. [ 891.066499][ T2281] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 891.858517][ T2333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13801'. [ 891.904848][ T2335] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13804'. [ 891.918156][ T2335] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 892.080315][ T2346] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 892.840948][ T2392] netlink: 'syz.3.13832': attribute type 2 has an invalid length. [ 893.295455][ T2426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13846'. [ 893.494588][ T2443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13853'. [ 893.513462][ T2443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13853'. [ 893.534393][ T2443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13853'. [ 893.886049][ T29] audit: type=1400 audit(1774583200.852:306): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=2470 comm="syz.4.13864" [ 893.965758][ T6195] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 894.107989][ T2487] netlink: 'syz.3.13870': attribute type 10 has an invalid length. [ 894.116278][ T2487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13870'. [ 894.151723][ T6195] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 894.160497][ T6195] usb 2-1: config 0 has an invalid interface number: 3 but max is 2 [ 894.180469][ T2487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 894.197140][ T6195] usb 2-1: config 0 has no interface number 0 [ 894.204864][ T6195] usb 2-1: config 0 has no interface number 1 [ 894.211385][ T6195] usb 2-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 894.224261][ T6195] usb 2-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 894.238222][ T6195] usb 2-1: config 0 interface 3 has no altsetting 0 [ 894.249452][ T6195] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 894.258953][ T6195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.294235][ T6195] usb 2-1: config 0 descriptor?? [ 894.313357][ T2500] netlink: 'syz.2.13874': attribute type 1 has an invalid length. [ 894.513768][ T6195] usb 2-1: Could not set interface, error -71 [ 894.557398][ T6195] usb 2-1: selecting invalid altsetting 0 [ 894.565688][ T6195] usb 2-1: Could not set interface, error -22 [ 894.583809][ T6195] usb 2-1: USB disconnect, device number 22 [ 894.854790][ T2536] netlink: 'syz.2.13889': attribute type 21 has an invalid length. [ 894.862942][ T2536] IPv6: NLM_F_CREATE should be specified when creating new route [ 894.871604][ T2536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 894.878925][ T2536] IPv6: NLM_F_CREATE should be set when creating new route [ 894.886617][ T2536] IPv6: NLM_F_CREATE should be set when creating new route [ 894.893932][ T2536] IPv6: NLM_F_CREATE should be set when creating new route [ 896.409236][ T2649] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13935'. [ 896.483160][ T6009] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 896.604451][ T2663] netlink: 'syz.0.13938': attribute type 21 has an invalid length. [ 896.627459][ T2663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13938'. [ 896.643791][ T6009] usb 5-1: Using ep0 maxpacket: 8 [ 896.651087][ T6009] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 896.675396][ T6009] usb 5-1: config 0 has no interface number 0 [ 896.691933][ T6009] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 896.713788][ T6009] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 896.736474][ T6009] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.767072][ T6009] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 896.783130][ T6009] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 896.815662][ T6009] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 896.837625][ T6009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.891143][ T29] audit: type=1400 audit(1774583203.852:307): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=2680 comm="syz.2.13948" [ 896.894124][ T6009] usb 5-1: config 0 descriptor?? [ 896.961515][ T6009] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 897.322707][ T2639] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 897.365658][ T6195] usb 5-1: USB disconnect, device number 22 [ 897.388217][ T6195] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 897.540786][ T2721] netlink: 'syz.0.13962': attribute type 6 has an invalid length. [ 897.778490][ T2737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13970'. [ 898.214322][ T2773] ================================================================== [ 898.222443][ T2773] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.231077][ T2773] Write of size 1 at addr ffffc9000423b000 by task vivid-000-vid-c/2773 [ 898.239436][ T2773] [ 898.241812][ T2773] CPU: 1 UID: 0 PID: 2773 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 898.241843][ T2773] Tainted: [L]=SOFTLOCKUP [ 898.241851][ T2773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.241862][ T2773] Call Trace: [ 898.241871][ T2773] [ 898.241880][ T2773] dump_stack_lvl+0xe8/0x150 [ 898.241912][ T2773] print_report+0xba/0x230 [ 898.241935][ T2773] ? tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.241960][ T2773] kasan_report+0x117/0x150 [ 898.241994][ T2773] ? tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.242022][ T2773] tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.242086][ T2773] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 898.242124][ T2773] ? __lock_acquire+0x6b5/0x2cf0 [ 898.242148][ T2773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.242168][ T2773] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.242191][ T2773] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 898.242231][ T2773] vivid_thread_vid_cap+0x909/0x1190 [ 898.242273][ T2773] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 898.242306][ T2773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.242328][ T2773] ? __kthread_parkme+0x7a/0x1f0 [ 898.242358][ T2773] kthread+0x388/0x470 [ 898.242377][ T2773] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 898.242405][ T2773] ? __pfx_kthread+0x10/0x10 [ 898.242424][ T2773] ret_from_fork+0x51e/0xb90 [ 898.242450][ T2773] ? __pfx_ret_from_fork+0x10/0x10 [ 898.242474][ T2773] ? __switch_to+0xc7d/0x1450 [ 898.242497][ T2773] ? __pfx_kthread+0x10/0x10 [ 898.242515][ T2773] ret_from_fork_asm+0x1a/0x30 [ 898.242550][ T2773] [ 898.242557][ T2773] [ 898.399296][ T2773] The buggy address belongs to a vmalloc virtual mapping [ 898.406328][ T2773] Memory state around the buggy address: [ 898.411954][ T2773] ffffc9000423af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 898.420012][ T2773] ffffc9000423af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 898.428067][ T2773] >ffffc9000423b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 898.436124][ T2773] ^ [ 898.440190][ T2773] ffffc9000423b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 898.448331][ T2773] ffffc9000423b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 898.456471][ T2773] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 898.500307][ T2773] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 898.507641][ T2773] CPU: 0 UID: 0 PID: 2773 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 898.519039][ T2773] Tainted: [L]=SOFTLOCKUP [ 898.523377][ T2773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.533519][ T2773] Call Trace: [ 898.536804][ T2773] [ 898.539744][ T2773] vpanic+0x56c/0xa60 [ 898.543913][ T2773] ? __pfx_vpanic+0x10/0x10 [ 898.548510][ T2773] ? __pfx___schedule+0x10/0x10 [ 898.553369][ T2773] panic+0xc5/0xd0 [ 898.557099][ T2773] ? __pfx_panic+0x10/0x10 [ 898.561695][ T2773] ? preempt_schedule_common+0x82/0xd0 [ 898.567159][ T2773] ? tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.572795][ T2773] check_panic_on_warn+0x89/0xb0 [ 898.577739][ T2773] ? tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.583466][ T2773] end_report+0x73/0x180 [ 898.587712][ T2773] ? tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.593430][ T2773] kasan_report+0x128/0x150 [ 898.597941][ T2773] ? tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.603593][ T2773] tpg_fill_plane_buffer+0x3dec/0x5ec0 [ 898.609079][ T2773] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 898.614899][ T2773] ? __lock_acquire+0x6b5/0x2cf0 [ 898.619958][ T2773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.625942][ T2773] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.631235][ T2773] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 898.637401][ T2773] vivid_thread_vid_cap+0x909/0x1190 [ 898.642713][ T2773] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 898.648453][ T2773] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.654273][ T2773] ? __kthread_parkme+0x7a/0x1f0 [ 898.659221][ T2773] kthread+0x388/0x470 [ 898.663288][ T2773] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 898.669024][ T2773] ? __pfx_kthread+0x10/0x10 [ 898.673633][ T2773] ret_from_fork+0x51e/0xb90 [ 898.678266][ T2773] ? __pfx_ret_from_fork+0x10/0x10 [ 898.683408][ T2773] ? __switch_to+0xc7d/0x1450 [ 898.688105][ T2773] ? __pfx_kthread+0x10/0x10 [ 898.692707][ T2773] ret_from_fork_asm+0x1a/0x30 [ 898.697503][ T2773] [ 898.700968][ T2773] Kernel Offset: disabled [ 898.705294][ T2773] Rebooting in 86400 seconds..