last executing test programs: 6.695677166s ago: executing program 3 (id=2583): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000003, 0x4, 0x1, 0x8000000}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a", 0x11) 6.603170057s ago: executing program 1 (id=2586): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) 6.452232248s ago: executing program 3 (id=2587): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r2, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.302524808s ago: executing program 3 (id=2589): r0 = epoll_create(0xb400) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) poll(&(0x7f0000000e00)=[{r0, 0x606}], 0x1, 0x4) 6.137335709s ago: executing program 3 (id=2591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x4a) 5.803552241s ago: executing program 2 (id=2595): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) 5.631358532s ago: executing program 2 (id=2598): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 5.601064902s ago: executing program 1 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd70000000000044000000", @ANYRES32=r3, @ANYBLOB="2c002380060010000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) 5.597042122s ago: executing program 0 (id=2600): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000280)={0x0, 0x9}) 5.373700623s ago: executing program 0 (id=2602): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa8, 0x24, 0xf0b, 0x3, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xa8}, 0x1, 0x7a00}, 0x0) 3.009588425s ago: executing program 4 (id=2618): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x80000002, 0x4) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, 0x0, 0x0) 2.929014435s ago: executing program 4 (id=2619): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 2.711295877s ago: executing program 4 (id=2620): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee2, 0x0) 2.668898177s ago: executing program 4 (id=2621): r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) io_uring_setup(0x177d, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.592189337s ago: executing program 4 (id=2622): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000003, 0x4, 0x1, 0x8000000}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a000300", 0x14) 2.524629697s ago: executing program 4 (id=2623): syz_open_dev$usbfs(0x0, 0x77, 0x601) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) 1.852417481s ago: executing program 1 (id=2624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@delqdisc={0x74, 0x25, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xf, 0x5}, {0x1, 0xd}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 1.767052631s ago: executing program 2 (id=2625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@delqdisc={0x54, 0x25, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xf, 0x5}, {0x1, 0xd}}, [@q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) recvmsg(r1, 0x0, 0x12041) 1.701525611s ago: executing program 0 (id=2626): rt_sigaction(0x12, &(0x7f0000000080)={&(0x7f0000000280)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e7cec4ec40b668b6683b470000a5c4c4c179d200fae4c4c4fe0d094e486ff5f5bb559a00000fbed5370b1c2665d2950e000000dbf5", 0xc0000000, 0x0, {[0x8]}}, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 1.535427952s ago: executing program 3 (id=2627): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 1.535121102s ago: executing program 2 (id=2628): syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f00820000000000000000000c000000000007000000000000006100"/39], &(0x7f0000000200)=""/66, 0x28, 0x42, 0x0, 0x5, 0x10000, @value}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550c, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.528727273s ago: executing program 0 (id=2629): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x80000002, 0x4) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x76, 0x0, 0x0) 1.469663033s ago: executing program 1 (id=2630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 456.910858ms ago: executing program 2 (id=2631): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000640)="1ec698907350bd9ae98d11a68b5e08e6b12e584c349a4cfd0d054a7e53180cf97d8369d415042e28614ec8865214713db59a83e88a3e0eb7a3092e3d6aadf9f7b11ef0c50db631463e7ebd559b37859eeb56d88a71b8e4a578c88f2bb7d39016f32c1f02fea1c8aa315f6905000000caae1145883a82bc322f979ee6e9e5b4eff3d86912", 0x84}, {&(0x7f0000002040)="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", 0xf7d}], 0x2) 343.513888ms ago: executing program 0 (id=2632): r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) io_uring_setup(0x177d, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 343.377818ms ago: executing program 1 (id=2633): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x40000003, 0x4, 0x1, 0x8000000}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a000300", 0x14) 334.485459ms ago: executing program 3 (id=2634): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000085c) shutdown(0xffffffffffffffff, 0x1) dup(0xffffffffffffffff) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@get={0x1, 0x0, 0x2b70}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) clock_gettime(0x6, &(0x7f00000001c0)) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 106.626ms ago: executing program 0 (id=2635): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 98.99061ms ago: executing program 2 (id=2636): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x876d}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "da000000015b57a3"}) 0s ago: executing program 1 (id=2637): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x3, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) kernel console output (not intermixed with test programs): [ T4561] [U] [ 104.881521][ T4561] [U] [ 104.884245][ T4561] [U] [ 104.886967][ T4561] [U] [ 104.889908][ T4561] [U] [ 104.892633][ T4561] [U] [ 104.895372][ T4561] [U] [ 104.898092][ T4561] [U] [ 104.901061][ T4561] [U] [ 104.903816][ T4561] [U] [ 104.906540][ T4561] [U] [ 104.909262][ T4561] [U] [ 104.912206][ T4561] [U] [ 104.914946][ T4561] [U] [ 104.917678][ T4561] [U] [ 104.920407][ T4561] [U] [ 104.923390][ T4561] [U] [ 104.926126][ T4561] [U] [ 104.928873][ T4561] [U] [ 104.931599][ T4561] [U] [ 104.934556][ T4561] [U] [ 104.937286][ T4561] [U] [ 104.940025][ T4561] [U] [ 104.942750][ T4561] [U] [ 104.945719][ T4561] [U] [ 104.948450][ T4561] [U] [ 104.951174][ T4561] [U] [ 104.953968][ T4561] [U] [ 104.956959][ T4561] [U] [ 104.959694][ T4561] [U] [ 104.962430][ T4561] [U] [ 104.965162][ T4561] [U] [ 104.968138][ T4561] [U] [ 104.970869][ T4561] [U] [ 104.973591][ T4561] [U] [ 104.976329][ T4561] [U] [ 104.980189][ T4561] [U] [ 104.982955][ T4561] [U] [ 104.985689][ T4561] [U] [ 104.988422][ T4561] [U] [ 104.991422][ T4561] [U] [ 104.994159][ T4561] [U] [ 104.996884][ T4561] [U] [ 104.999606][ T4561] [U] [ 105.002603][ T4561] [U] [ 105.005338][ T4561] [U] [ 105.008063][ T4561] [U] [ 105.010786][ T4561] [U] [ 105.013887][ T4561] [U] [ 105.016617][ T4561] [U] [ 105.019342][ T4561] [U] [ 105.022065][ T4561] [U] [ 105.025058][ T4561] [U] [ 105.027793][ T4561] [U] [ 105.030517][ T4561] [U] [ 105.033247][ T4561] [U] [ 105.036273][ T4561] [U] [ 105.039008][ T4561] [U] [ 105.041736][ T4561] [U] [ 105.044464][ T4561] [U] [ 105.047451][ T4561] [U] [ 105.050180][ T4561] [U] [ 105.052994][ T4561] [U] [ 105.055768][ T4561] [U] [ 105.058762][ T4561] [U] [ 105.061490][ T4561] [U] [ 105.064221][ T4561] [U] [ 105.066942][ T4561] [U] [ 105.069911][ T4561] [U] [ 105.072645][ T4561] [U] [ 105.075371][ T4561] [U] [ 105.078097][ T4561] [U] [ 105.081087][ T4561] [U] [ 105.083815][ T4561] [U] [ 105.086534][ T4561] [U] [ 105.089268][ T4561] [U] [ 105.092236][ T4561] [U] [ 105.094972][ T4561] [U] [ 105.097701][ T4561] [U] [ 105.100428][ T4561] [U] [ 105.103427][ T4561] [U] [ 105.106160][ T4561] [U] [ 105.108882][ T4561] [U] [ 105.111693][ T4561] [U] [ 105.114659][ T4561] [U] [ 105.117388][ T4561] [U] [ 105.120113][ T4561] [U] [ 105.122838][ T4561] [U] [ 105.125833][ T4561] [U] [ 105.128563][ T4561] [U] [ 105.131295][ T4561] [U] [ 105.134017][ T4561] [U] [ 105.136987][ T4561] [U] [ 105.139715][ T4561] [U] [ 105.142435][ T4561] [U] [ 105.154809][ T4560] [U] [ 106.052618][ T4241] usb 1-1: device descriptor read/all, error -71 [ 106.071916][ T4572] 9pnet: p9_errstr2errno: server reported unknown error FcgKIe [ 112.211056][ T4629] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 114.236583][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 117.308219][ T4683] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 120.305098][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 121.571517][ T4728] device dummy0 entered promiscuous mode [ 122.664975][ T4741] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 124.141676][ T4756] fuse: Unknown parameter '18446744073709551615' [ 124.180411][ T4756] Bluetooth: MGMT ver 1.22 [ 125.064026][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 125.584949][ T4777] device dummy0 entered promiscuous mode [ 125.758715][ T4784] netlink: 'syz.4.131': attribute type 1 has an invalid length. [ 130.406450][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 130.907032][ T4333] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.106982][ T4333] usb 1-1: Using ep0 maxpacket: 16 [ 131.118915][ T4333] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.156132][ T4333] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice= 0.40 [ 131.175931][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.192150][ T4333] usb 1-1: Product: syz [ 131.199864][ T4333] usb 1-1: Manufacturer: syz [ 131.204536][ T4333] usb 1-1: SerialNumber: syz [ 131.257463][ T4333] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 131.444797][ T4333] usb 1-1: USB disconnect, device number 4 [ 131.936800][ T4894] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 132.792676][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.799144][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.833960][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 134.183676][ T4920] Bluetooth: MGMT ver 1.22 [ 139.618974][ T4932] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.460211][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 142.908837][ T4971] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 145.387730][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 145.486311][ T5004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 146.532878][ T5019] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.853856][ T5048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 149.496125][ T5071] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 151.098926][ T5083] syz.1.203 uses obsolete (PF_INET,SOCK_PACKET) [ 151.153356][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 153.647538][ T5112] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 155.525310][ T5125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.367709][ T5145] vivid-003: disconnect [ 156.389752][ T5143] vivid-003: reconnect [ 156.549102][ T5150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 156.716251][ T5154] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.567509][ T5156] mmap: syz.0.228 (5156) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.338671][ T5196] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 161.597285][ T5204] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 164.633884][ T5230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.250'. [ 164.797027][ T5235] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 166.428099][ T5248] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 168.894079][ T5272] netlink: 44 bytes leftover after parsing attributes in process `syz.4.263'. [ 169.068671][ T5279] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 171.072990][ T5299] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 173.522248][ T5317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.276'. [ 173.681799][ T5330] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.248728][ T5349] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.827550][ T5357] netlink: 116 bytes leftover after parsing attributes in process `syz.0.287'. [ 178.196743][ T5367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.289'. [ 179.141525][ T5388] process 'syz.2.293' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 179.326956][ T5384] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 179.997042][ T5398] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 183.267704][ T5431] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 183.300032][ T5425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.303'. [ 183.323446][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 184.558344][ T5448] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 188.652458][ T5481] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 189.783213][ T5497] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 190.605394][ T5500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 190.641471][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 193.446225][ T5518] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.614183][ T5530] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 193.849481][ T5536] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 194.530512][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.536847][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.705871][ T5540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 194.735597][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 196.352208][ T4265] Bluetooth: hci4: command 0x0406 tx timeout [ 196.352247][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 197.321287][ T4254] Bluetooth: hci3: command 0x0406 tx timeout [ 197.327573][ T4254] Bluetooth: hci2: command 0x0406 tx timeout [ 197.333608][ T4254] Bluetooth: hci0: command 0x0406 tx timeout [ 197.518784][ T5572] autofs4:pid:5572:autofs_fill_super: called with bogus options [ 197.535942][ T5573] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.815287][ T5578] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 198.660945][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 199.089131][ T5592] autofs4:pid:5592:autofs_fill_super: called with bogus options [ 199.787161][ T4333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 200.069362][ T4333] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 200.090763][ T4333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.102119][ T4333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.171123][ T4333] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 200.186300][ T4333] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 200.196763][ T4333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.263520][ T4333] usb 3-1: config 0 descriptor?? [ 201.119442][ T4333] usbhid 3-1:0.0: can't add hid device: -71 [ 201.119938][ T5613] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 201.125634][ T4333] usbhid: probe of 3-1:0.0 failed with error -71 [ 201.186812][ T4333] usb 3-1: USB disconnect, device number 3 [ 201.395311][ T5620] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 202.181610][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 202.423520][ T5626] autofs4:pid:5626:autofs_fill_super: called with bogus options [ 203.296041][ T5632] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 205.759253][ T5651] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 205.987487][ T5660] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 206.683848][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 206.916361][ T5670] autofs4:pid:5670:autofs_fill_super: called with bogus options [ 207.408029][ T5675] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 209.459764][ T5691] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 210.204068][ T5703] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 210.224765][ T5707] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 212.252632][ T5722] autofs4:pid:5722:autofs_fill_super: called with bogus options [ 213.984514][ T5741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 216.116546][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 216.311779][ T5762] autofs4:pid:5762:autofs_fill_super: called with bogus options [ 217.738766][ T5785] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 220.455048][ T5815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 220.675526][ T5824] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 224.010687][ T5851] autofs4:pid:5851:autofs_fill_super: called with bogus options [ 225.856356][ T5859] netlink: 'syz.1.444': attribute type 1 has an invalid length. [ 226.147741][ T5868] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 227.823503][ T5882] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 228.377912][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 229.330111][ T5894] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 233.366096][ T5923] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 233.568240][ T5926] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 236.396589][ T5949] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 240.672240][ T5998] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 242.625433][ T6014] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 247.525859][ T6065] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 249.705518][ T6081] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 252.794607][ T6102] netlink: 56 bytes leftover after parsing attributes in process `syz.1.502'. [ 253.521347][ T6114] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 254.684821][ T6132] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 255.375641][ T6136] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 255.717724][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.738700][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.678275][ T6167] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 259.393399][ T6187] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 260.880440][ T6200] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 262.862954][ T6219] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 263.995925][ T52] block nbd3: Attempted send on invalid socket [ 264.002795][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 267.888656][ T6258] fuse: Unknown parameter '18446744073709551615' [ 270.194953][ T6269] tty tty22: ldisc open failed (-12), clearing slot 21 [ 270.207865][ T6266] fuse: Bad value for 'fd' [ 272.287027][ T93] block nbd0: Attempted send on invalid socket [ 272.294885][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 273.672241][ T6313] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 273.756686][ T6314] fuse: Unknown parameter '18446744073709551615' [ 276.730155][ T6353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.566'. [ 278.893792][ T6372] overlayfs: failed to resolve './file0': -2 [ 279.906207][ T6374] fuse: Unknown parameter '18446744073709551615' [ 281.860816][ T6400] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 282.396834][ C0] hrtimer: interrupt took 47669 ns [ 283.030843][ T6415] device hsr_slave_0 left promiscuous mode [ 283.223569][ T6418] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 284.563676][ T6436] fuse: Unknown parameter '18446744073709551615' [ 285.236683][ T6437] netlink: 36 bytes leftover after parsing attributes in process `syz.0.589'. [ 290.216425][ T6493] fuse: Unknown parameter '18446744073709551615' [ 293.121767][ T6539] fuse: Unknown parameter '18446744073709551615' [ 296.689874][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 297.614796][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.824104][ T6578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.917378][ T6578] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 297.998284][ T6578] bond1: (slave vti0): Error -95 calling set_mac_address [ 300.112749][ T6612] tmpfs: Unknown parameter 'usrquota' [ 307.204123][ T6687] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.664774][ T6691] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 309.064292][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 312.587151][ T6735] fuse: Unknown parameter '18446744073709551615' [ 313.017098][ T6734] bridge0: port 3(erspan0) entered blocking state [ 313.023930][ T6734] bridge0: port 3(erspan0) entered disabled state [ 313.031560][ T6734] device erspan0 entered promiscuous mode [ 313.037982][ T6734] bridge0: port 3(erspan0) entered blocking state [ 313.044583][ T6734] bridge0: port 3(erspan0) entered forwarding state [ 315.588093][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 315.859844][ T6764] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 317.067948][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.074572][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.595746][ T6810] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 319.621227][ T6807] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.029118][ T6849] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.480891][ T6853] vivid-008: disconnect [ 325.823586][ T6840] vivid-008: reconnect [ 327.495875][ T6867] device vlan2 entered promiscuous mode [ 328.192039][ T6867] device batadv0 entered promiscuous mode [ 329.068765][ T6867] team0: Port device vlan2 added [ 332.276908][ T6900] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.424920][ T6923] netlink: 52 bytes leftover after parsing attributes in process `syz.1.729'. [ 335.393301][ T6938] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 338.055582][ T26] audit: type=1326 audit(1732822915.299:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6949 comm="syz.3.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7fc00000 [ 338.363702][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 338.372853][ T6957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.741'. [ 339.653244][ T6976] netlink: 116 bytes leftover after parsing attributes in process `syz.0.746'. [ 339.773204][ T6981] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.009684][ T7005] vivid-006: disconnect [ 344.688829][ T7000] vivid-006: reconnect [ 346.960436][ T7030] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 347.134317][ T7033] netlink: 116 bytes leftover after parsing attributes in process `syz.1.764'. [ 349.121699][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 349.386313][ T7057] fuse: Unknown parameter '18446744073709551615' [ 351.684884][ T7072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.812473][ T7078] netlink: 'syz.3.775': attribute type 3 has an invalid length. [ 353.198277][ T7084] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.314221][ T7138] device vlan2 entered promiscuous mode [ 359.397161][ T7145] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.117221][ T4346] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 361.343580][ T4346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.384055][ T4346] usb 3-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 155, changing to 11 [ 361.445780][ T4346] usb 3-1: config 1 interface 0 has no altsetting 0 [ 361.517651][ T4346] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.40 [ 361.526945][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.535039][ T4346] usb 3-1: Product: syz [ 361.539629][ T4346] usb 3-1: Manufacturer: syz [ 361.544394][ T4346] usb 3-1: SerialNumber: syz [ 361.888446][ T4346] usbhid 3-1:1.0: can't add hid device: -71 [ 361.894482][ T4346] usbhid: probe of 3-1:1.0 failed with error -71 [ 361.910177][ T4346] usb 3-1: USB disconnect, device number 4 [ 362.244101][ T7170] 9pnet: Unknown protocol version 9p20 [ 364.668615][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 367.879640][ T7218] fuse: Bad value for 'fd' [ 368.624976][ T7221] cgroup: Invalid name [ 371.987479][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 377.648877][ T7302] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 378.503944][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.514611][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.174009][ T7359] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 385.933249][ T7379] fuse: Unknown parameter '18446744073709551615' [ 393.206977][ T4296] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 394.423764][ T7427] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.880'. [ 394.433313][ T7427] netlink: zone id is out of range [ 394.441830][ T7427] netlink: zone id is out of range [ 394.451350][ T7427] netlink: del zone limit has 4 unknown bytes [ 394.459113][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 394.470915][ T4296] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 394.512799][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.523529][ T4296] usb 3-1: Product: syz [ 394.711926][ T4296] usb 3-1: Manufacturer: syz [ 394.716568][ T4296] usb 3-1: SerialNumber: syz [ 394.724619][ T4296] usb 3-1: config 0 descriptor?? [ 394.926924][ T7437] fuse: Unknown parameter '18446744073709551615' [ 395.044177][ T4296] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 395.094260][ T7412] netlink: 1328 bytes leftover after parsing attributes in process `syz.2.873'. [ 395.517537][ T4296] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 395.617831][ T4296] dib0700: firmware download failed at 7 with -22 [ 397.720918][ T7463] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 398.347043][ T7465] tipc: Started in network mode [ 398.356386][ T7465] tipc: Node identity ffffffff, cluster identity 4711 [ 398.407499][ T7465] tipc: Node number set to 4294967295 [ 398.449489][ T22] usb 3-1: USB disconnect, device number 5 [ 398.893595][ T4264] Bluetooth: hci3: ACL packet for unknown connection handle 6 [ 403.862159][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 404.072427][ T7525] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 404.974891][ T7528] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 405.917148][ T7545] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 405.994480][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.786988][ T7567] overlayfs: failed to resolve './file0': -2 [ 407.364422][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.371672][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.385566][ T7569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.911'. [ 407.560515][ T7545] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 407.576617][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 407.589856][ T7548] device bridge_slave_1 left promiscuous mode [ 407.598428][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.622490][ T7548] device bridge_slave_0 left promiscuous mode [ 407.634525][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.719901][ T7581] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 408.628417][ T7548] bond0: (slave bridge0): Releasing backup interface [ 408.740425][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.914'. [ 408.740833][ T7588] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.919'. [ 408.759169][ T7586] tipc: Started in network mode [ 408.759518][ T7588] netlink: zone id is out of range [ 408.772474][ T7588] netlink: zone id is out of range [ 408.778230][ T7586] tipc: Node identity ffffffff, cluster identity 4711 [ 408.797334][ T7586] tipc: Node number set to 4294967295 [ 408.819666][ T7588] netlink: del zone limit has 4 unknown bytes [ 409.258990][ T7605] overlayfs: failed to resolve './file0': -2 [ 410.358624][ T7618] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 411.549906][ T7625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.931'. [ 413.204999][ T7639] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.935'. [ 413.220088][ T7639] netlink: zone id is out of range [ 413.225345][ T7639] netlink: zone id is out of range [ 413.238471][ T7639] netlink: del zone limit has 4 unknown bytes [ 416.596866][ T4264] Bluetooth: hci2: ACL packet for unknown connection handle 6 [ 417.574171][ T7680] overlayfs: failed to resolve './file0': -2 [ 420.071647][ T7716] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 421.406924][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 422.366896][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 422.378675][ T7] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 422.388079][ T7] usb 4-1: config 0 has no interface number 0 [ 422.399636][ T7] usb 4-1: New USB device found, idVendor=054c, idProduct=0066, bcdDevice=31.b6 [ 422.410362][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.421880][ T7] usb 4-1: Product: syz [ 422.426311][ T7] usb 4-1: Manufacturer: syz [ 422.431394][ T7] usb 4-1: SerialNumber: syz [ 422.438970][ T7] usb 4-1: config 0 descriptor?? [ 422.453433][ T7] usb 4-1: active config #0 != 1 ?? [ 422.607672][ T7752] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 423.023350][ T4426] usb 4-1: USB disconnect, device number 2 [ 423.905908][ T7769] device geneve2 entered promiscuous mode [ 425.479460][ T7789] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 427.207649][ T3582] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 428.413087][ T7830] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 428.543298][ T3582] usb 1-1: Using ep0 maxpacket: 16 [ 428.553564][ T3582] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 428.626567][ T3582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.674357][ T3582] usb 1-1: Product: syz [ 428.674405][ T3582] usb 1-1: Manufacturer: syz [ 428.674421][ T3582] usb 1-1: SerialNumber: syz [ 428.694620][ T3582] usb 1-1: config 0 descriptor?? [ 428.910877][ T3582] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 428.911440][ T7816] netlink: 1328 bytes leftover after parsing attributes in process `syz.0.1003'. [ 428.930722][ T3582] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 428.960231][ T3582] dib0700: firmware download failed at 7 with -22 [ 428.994449][ T3582] usb 1-1: USB disconnect, device number 5 [ 429.542452][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'. [ 431.083166][ T7869] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 431.761893][ T7885] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 433.067183][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 433.276995][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 433.309314][ T22] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 433.480266][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.720637][ T22] usb 4-1: Product: syz [ 433.724858][ T22] usb 4-1: Manufacturer: syz [ 434.145242][ T22] usb 4-1: SerialNumber: syz [ 434.167337][ T22] usb 4-1: config 0 descriptor?? [ 434.381408][ T22] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 434.393488][ T7893] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.1030'. [ 434.408603][ T22] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 434.416660][ T22] dib0700: firmware download failed at 7 with -22 [ 434.478400][ T22] usb 4-1: USB disconnect, device number 3 [ 435.073512][ T7924] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 436.063227][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 437.833149][ T8011] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 438.676326][ T4426] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 438.897348][ T4426] usb 5-1: Using ep0 maxpacket: 16 [ 438.912103][ T4426] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 438.954193][ T4426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.971548][ T4426] usb 5-1: Product: syz [ 438.979689][ T4426] usb 5-1: Manufacturer: syz [ 438.989356][ T4426] usb 5-1: SerialNumber: syz [ 439.020184][ T4426] usb 5-1: config 0 descriptor?? [ 439.233477][ T4426] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 439.281716][ T4426] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 439.295417][ T4426] dib0700: firmware download failed at 7 with -22 [ 439.325073][ T4426] usb 5-1: USB disconnect, device number 2 [ 439.652471][ T8025] binder: Binderfs stats mode cannot be changed during a remount [ 439.737057][ T4299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 439.930469][ T4299] usb 1-1: no configurations [ 439.936278][ T4299] usb 1-1: can't read configurations, error -22 [ 439.946719][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.953468][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.175352][ T4299] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 440.229419][ T8045] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 440.967087][ T8031] could not allocate digest TFM handle sha256-arm64-neon [ 441.217766][ T4299] usb 1-1: no configurations [ 441.222516][ T4299] usb 1-1: can't read configurations, error -22 [ 441.239475][ T4299] usb usb1-port1: attempt power cycle [ 441.797021][ T4299] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 441.844799][ T4299] usb 1-1: no configurations [ 441.855159][ T4299] usb 1-1: can't read configurations, error -22 [ 442.027016][ T4299] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 442.204157][ T4299] usb 1-1: device descriptor read/8, error -71 [ 442.327469][ T4299] usb usb1-port1: unable to enumerate USB device [ 445.162924][ T8084] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 447.217856][ T26] audit: type=1800 audit(1732823024.459:3): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1083" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 447.958398][ T8110] input: syz0 as /devices/virtual/input/input6 [ 449.001731][ T8123] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 451.242524][ T8148] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1099'. [ 451.316995][ T8148] netlink: zone id is out of range [ 451.322176][ T8148] netlink: zone id is out of range [ 451.374871][ T8148] netlink: del zone limit has 4 unknown bytes [ 452.687289][ T8168] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 456.725310][ T8204] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 457.364089][ T8206] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 460.972067][ T8230] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1111'. [ 461.039664][ T8230] netlink: zone id is out of range [ 461.080304][ T8230] netlink: zone id is out of range [ 461.166883][ T8230] netlink: del zone limit has 4 unknown bytes [ 461.554888][ T8241] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.435973][ T8256] fuse: Unknown parameter '18446744073709551615' [ 463.820905][ T8270] capability: warning: `syz.2.1135' uses 32-bit capabilities (legacy support in use) [ 465.078072][ T8292] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 465.658315][ T8308] fuse: Unknown parameter '18446744073709551615' [ 467.761362][ T8332] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 468.366904][ T4241] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 468.570993][ T4241] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 468.589154][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.601550][ T4241] usb 4-1: Product: syz [ 468.606102][ T4241] usb 4-1: Manufacturer: syz [ 468.620486][ T4241] usb 4-1: SerialNumber: syz [ 468.642436][ T4241] usb 4-1: config 0 descriptor?? [ 468.995375][ T8348] fuse: Unknown parameter '18446744073709551615' [ 469.917230][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 470.175366][ T32] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.303934][ T32] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 470.356537][ T32] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.568613][ T32] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.578746][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.881288][ T8370] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 470.935907][ T32] usb 3-1: invalid MIDI out EP 0 [ 471.365513][ T32] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 471.504752][ T32] usb 3-1: USB disconnect, device number 6 [ 471.570051][ T4241] usb 4-1: USB disconnect, device number 4 [ 471.778117][ T7540] udevd[7540]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.644452][ T8399] fuse: Unknown parameter '18446744073709551615' [ 473.592172][ T8406] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.609326][ T8427] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1185'. [ 475.627048][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 475.717677][ T8427] netlink: zone id is out of range [ 475.722896][ T8427] netlink: zone id is out of range [ 475.836414][ T8427] netlink: del zone limit has 4 unknown bytes [ 475.843027][ T4299] usb 5-1: Using ep0 maxpacket: 32 [ 475.861084][ T4299] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 475.915327][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.971286][ T4299] usb 5-1: Product: syz [ 476.006017][ T4299] usb 5-1: Manufacturer: syz [ 476.026338][ T4299] usb 5-1: SerialNumber: syz [ 476.138251][ T4299] usb 5-1: config 0 descriptor?? [ 476.319548][ T8437] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.405524][ T4299] airspy 5-1:0.0: Board ID: 00 [ 477.410554][ T4299] airspy 5-1:0.0: Firmware version: [ 478.461744][ T4299] airspy 5-1:0.0: usb_control_msg() failed -71 request 10 [ 478.533626][ T4299] airspy 5-1:0.0: Registered as swradio24 [ 478.588555][ T4299] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 478.685958][ T4299] usb 5-1: USB disconnect, device number 3 [ 479.268561][ T8474] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1201'. [ 479.542939][ T8474] netlink: zone id is out of range [ 479.618424][ T8478] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 479.879028][ T8474] netlink: zone id is out of range [ 479.915276][ T8474] netlink: del zone limit has 4 unknown bytes [ 481.575484][ T8512] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 483.959626][ T8549] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 484.238086][ T8552] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1232'. [ 486.594177][ T8584] binder_alloc: 8583: binder_alloc_buf, no vma [ 486.664411][ T8588] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 486.871975][ T8592] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1247'. [ 488.997420][ T8615] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 491.930108][ T4299] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 492.117636][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 492.128669][ T4299] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 492.137432][ T4299] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.147699][ T4299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.157786][ T4299] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.168159][ T4299] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.181425][ T4299] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.191412][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.376900][ T4294] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 492.416434][ T4299] usb 1-1: usb_control_msg returned -32 [ 492.422731][ T4299] usbtmc 1-1:16.0: can't read capabilities [ 492.627100][ T4294] usb 5-1: Using ep0 maxpacket: 16 [ 492.634588][ T4294] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.655210][ T4294] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 492.666706][ T4294] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 492.685976][ T4294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 492.698958][ T4294] usb 5-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 492.728840][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.756151][ T4294] usb 5-1: config 0 descriptor?? [ 493.646407][ T4340] usb 1-1: USB disconnect, device number 10 [ 494.218246][ T4294] nzxt-smart2 0003:1E71:2010.0001: unknown main item tag 0x0 [ 494.226692][ T4294] nzxt-smart2 0003:1E71:2010.0001: unknown main item tag 0x0 [ 494.234405][ T4294] nzxt-smart2 0003:1E71:2010.0001: unknown main item tag 0x0 [ 494.242438][ T4294] nzxt-smart2 0003:1E71:2010.0001: unknown main item tag 0x0 [ 494.250075][ T4294] nzxt-smart2 0003:1E71:2010.0001: unknown main item tag 0x0 [ 494.279724][ T4294] nzxt-smart2 0003:1E71:2010.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.4-1/input0 [ 494.935446][ T4294] usb 5-1: USB disconnect, device number 4 [ 495.838140][ T8722] device geneve2 entered promiscuous mode [ 495.937025][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 496.246834][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 496.264765][ T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.295407][ T32] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 496.409837][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.554888][ T32] usb 5-1: config 0 descriptor?? [ 497.041709][ T8732] binder: BINDER_SET_CONTEXT_MGR already set [ 497.048925][ T8732] binder: 8731:8732 ioctl 4018620d 20000040 returned -16 [ 497.656127][ T8753] device geneve2 entered promiscuous mode [ 499.177258][ T8770] binder: BINDER_SET_CONTEXT_MGR already set [ 499.183329][ T8770] binder: 8769:8770 ioctl 4018620d 20000040 returned -16 [ 500.741613][ T4294] usb 5-1: USB disconnect, device number 5 [ 500.887122][ T8542] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 500.935795][ T8804] binder: BINDER_SET_CONTEXT_MGR already set [ 500.942167][ T8804] binder: 8803:8804 ioctl 4018620d 20000040 returned -16 [ 501.078568][ T8542] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 501.097230][ T8542] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.120634][ T8542] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.140521][ T8542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.155358][ T8542] usb 3-1: config 0 descriptor?? [ 501.161594][ T8793] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 501.172452][ T8542] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 501.297055][ T4294] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 501.389882][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.396211][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.570615][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 501.577950][ T4294] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 501.586168][ T4294] usb 1-1: config 0 has no interface number 0 [ 501.600079][ T4294] usb 1-1: config 0 interface 219 has no altsetting 0 [ 501.609668][ T4294] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 501.622385][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.949509][ T4294] usb 1-1: config 0 descriptor?? [ 502.752613][ T4294] usb 1-1: string descriptor 0 read error: -71 [ 502.860569][ T4294] usb 1-1: USB disconnect, device number 11 [ 503.036971][ T4299] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 503.247003][ T4299] usb 4-1: Using ep0 maxpacket: 16 [ 503.253000][ T4299] usb 4-1: too many configurations: 156, using maximum allowed: 8 [ 503.261436][ T3582] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 503.270582][ T4299] usb 4-1: config index 0 descriptor too short (expected 42, got 18) [ 503.280392][ T4299] usb 4-1: config index 1 descriptor too short (expected 42, got 18) [ 503.294135][ T4299] usb 4-1: config index 2 descriptor too short (expected 42, got 18) [ 503.315542][ T4299] usb 4-1: config index 3 descriptor too short (expected 42, got 18) [ 503.329913][ T4299] usb 4-1: config index 4 descriptor too short (expected 42, got 18) [ 503.354224][ T4299] usb 4-1: config index 5 descriptor too short (expected 42, got 18) [ 503.364041][ T4299] usb 4-1: config index 6 descriptor too short (expected 42, got 18) [ 503.381518][ T4299] usb 4-1: config index 7 descriptor too short (expected 42, got 18) [ 503.391643][ T4299] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 503.403672][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 503.414488][ T4299] usb 4-1: Product: syz [ 503.420396][ T4299] usb 4-1: SerialNumber: syz [ 503.426357][ T4299] r8152-cfgselector 4-1: config 0 descriptor?? [ 503.457154][ T3582] usb 5-1: Using ep0 maxpacket: 8 [ 503.464071][ T3582] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 503.479245][ T3582] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x93, skipping [ 503.491704][ T3582] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.511833][ T3582] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 503.521192][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.529327][ T3582] usb 5-1: Product: syz [ 503.533637][ T3582] usb 5-1: Manufacturer: syz [ 503.538371][ T3582] usb 5-1: SerialNumber: syz [ 503.547311][ T3582] usb 5-1: config 0 descriptor?? [ 503.555576][ T3582] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 503.563644][ T3582] imon 5-1:0.0: unable to initialize intf0, err -19 [ 503.570533][ T3582] imon:imon_probe: failed to initialize context! [ 503.576972][ T3582] imon 5-1:0.0: unable to register, err -19 [ 503.624556][ T8542] usb 3-1: USB disconnect, device number 7 [ 503.640473][ T4297] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 503.640565][ T4299] r8152-cfgselector 4-1: Unknown version 0x0000 [ 503.670061][ T4299] r8152-cfgselector 4-1: Unknown version 0x0000 [ 503.702532][ T4299] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 503.762272][ T4264] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 503.774529][ T3582] usb 5-1: USB disconnect, device number 6 [ 503.826985][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 503.834387][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 503.849101][ T4297] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.858272][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.866270][ T4297] usb 1-1: Product: syz [ 503.870860][ T4297] usb 1-1: Manufacturer: syz [ 503.875461][ T4297] usb 1-1: SerialNumber: syz [ 503.882594][ T4297] usb 1-1: config 0 descriptor?? [ 503.890324][ T4297] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.899875][ T4297] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 505.084332][ T4297] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 506.515385][ T4297] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 506.534389][ T4297] em28xx 1-1:0.0: board has no eeprom [ 506.606987][ T4297] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 506.617360][ T4297] em28xx 1-1:0.0: dvb set to bulk mode. [ 506.730772][ T4297] usb 1-1: USB disconnect, device number 12 [ 506.768890][ T22] em28xx 1-1:0.0: Binding DVB extension [ 506.777753][ T4297] em28xx 1-1:0.0: Disconnecting em28xx [ 507.790563][ T22] em28xx 1-1:0.0: Registering input extension [ 507.800873][ T4297] em28xx 1-1:0.0: Closing input extension [ 507.831807][ T4297] em28xx 1-1:0.0: Freeing device [ 507.940806][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 509.528637][ T8944] trusted_key: encrypted_key: keylen parameter is missing [ 510.572681][ T8955] binder: BINDER_SET_CONTEXT_MGR already set [ 510.611339][ T8955] binder: 8953:8955 ioctl 4018620d 20000040 returned -16 [ 513.634041][ T8990] binder: BINDER_SET_CONTEXT_MGR already set [ 513.640890][ T8990] binder: 8989:8990 ioctl 4018620d 20000040 returned -16 [ 513.702385][ T8992] netlink: 1376 bytes leftover after parsing attributes in process `syz.2.1390'. [ 517.633730][ T9036] binder: BINDER_SET_CONTEXT_MGR already set [ 517.639974][ T9036] binder: 9035:9036 ioctl 4018620d 20000040 returned -16 [ 517.737315][ T9038] netlink: 1376 bytes leftover after parsing attributes in process `syz.0.1405'. [ 518.878718][ T9050] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 520.948135][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 521.063615][ T9072] netlink: 1376 bytes leftover after parsing attributes in process `syz.0.1418'. [ 521.161304][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 521.169578][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.227037][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.246919][ T4296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.286825][ T4296] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 521.311591][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.343259][ T4296] usb 2-1: config 0 descriptor?? [ 521.582722][ T4296] usbhid 2-1:0.0: can't add hid device: -71 [ 521.602927][ T4296] usbhid: probe of 2-1:0.0 failed with error -71 [ 522.428674][ T4296] usb 2-1: USB disconnect, device number 4 [ 524.092046][ T9106] netlink: 1376 bytes leftover after parsing attributes in process `syz.1.1430'. [ 527.670915][ T9151] netlink: 1376 bytes leftover after parsing attributes in process `syz.2.1444'. [ 531.409495][ T9191] netlink: 1376 bytes leftover after parsing attributes in process `syz.0.1458'. [ 534.115995][ T9222] netlink: 1376 bytes leftover after parsing attributes in process `syz.3.1469'. [ 534.145909][ T9224] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 536.717428][ T4297] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 537.747740][ T4297] usb 2-1: Using ep0 maxpacket: 32 [ 537.788701][ T4297] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 537.831450][ T9267] netlink: 1376 bytes leftover after parsing attributes in process `syz.3.1483'. [ 537.851246][ T4297] usb 2-1: config 0 has no interface number 0 [ 537.877735][ T4297] usb 2-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 537.915001][ T4297] usb 2-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 537.959008][ T4297] usb 2-1: config 0 interface 167 has no altsetting 0 [ 538.027627][ T4297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 538.120970][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.184951][ T4297] usb 2-1: Product: syz [ 538.229815][ T4297] usb 2-1: Manufacturer: syz [ 538.234468][ T4297] usb 2-1: SerialNumber: syz [ 538.312273][ T4297] usb 2-1: config 0 descriptor?? [ 538.340449][ T9251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.354898][ T9251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 538.627061][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 538.957045][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 539.109669][ T22] usb 3-1: config index 0 descriptor too short (expected 29012, got 92) [ 539.214988][ T22] usb 3-1: config 220 has too many interfaces: 185, using maximum allowed: 32 [ 539.294891][ T4297] usbtest 2-1:0.167: couldn't get endpoints, -22 [ 539.306858][ T22] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 539.318194][ T4297] usbtest: probe of 2-1:0.167 failed with error -22 [ 539.339595][ T22] usb 3-1: config 220 has 0 interfaces, different from the descriptor's value: 185 [ 539.356199][ T4297] usb 2-1: USB disconnect, device number 5 [ 539.385840][ T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.415542][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.434477][ T22] usb 3-1: Product: syz [ 539.460649][ T22] usb 3-1: Manufacturer: syz [ 539.465304][ T22] usb 3-1: SerialNumber: syz [ 540.432517][ T22] usb 3-1: USB disconnect, device number 8 [ 541.034170][ T9303] overlayfs: missing 'lowerdir' [ 541.145653][ T9308] netlink: 1376 bytes leftover after parsing attributes in process `syz.1.1497'. [ 545.008592][ T9351] overlayfs: missing 'lowerdir' [ 545.338893][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 548.608514][ T9396] overlayfs: missing 'lowerdir' [ 548.975352][ T26] audit: type=1326 audit(1732823126.219:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.1527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb1b80809 code=0x0 [ 552.465477][ T9443] overlayfs: missing 'workdir' [ 553.257751][ T9450] binder: 9449:9450 ioctl 4018620d 0 returned -22 [ 554.500562][ T9476] capability: warning: `syz.1.1552' uses deprecated v2 capabilities in a way that may be insecure [ 559.374815][ T9534] binder: 9528:9534 ioctl 4018620d 0 returned -22 [ 559.893200][ T9541] device hsr0 entered promiscuous mode [ 559.922276][ T9541] device hsr0 left promiscuous mode [ 562.186127][ T9579] overlayfs: missing 'lowerdir' [ 562.931697][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.938112][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.003545][ T9582] binder: BINDER_SET_CONTEXT_MGR already set [ 563.101829][ T9582] binder: 9581:9582 ioctl 4018620d 20000040 returned -16 [ 566.727583][ T9626] netlink: 1336 bytes leftover after parsing attributes in process `syz.2.1598'. [ 571.287025][ T3582] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 571.476818][ T3582] usb 1-1: Using ep0 maxpacket: 8 [ 571.484627][ T3582] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 571.532784][ T3582] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.567035][ T3582] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.616883][ T3582] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.676850][ T3582] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.746869][ T3582] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 571.786551][ T3582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.175836][ T3582] usb 1-1: usb_control_msg returned -32 [ 572.181647][ T3582] usbtmc 1-1:16.0: can't read capabilities [ 573.005614][ T9695] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 573.150968][ T9698] netlink: 1336 bytes leftover after parsing attributes in process `syz.4.1612'. [ 573.213758][ T4340] usb 1-1: USB disconnect, device number 13 [ 574.402214][ T9722] device geneve2 entered promiscuous mode [ 575.747752][ T9734] netlink: 1336 bytes leftover after parsing attributes in process `syz.2.1638'. [ 576.840191][ T9765] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.1651'. [ 577.603845][ T26] audit: type=1326 audit(1732823154.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.2.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f677d980809 code=0x0 [ 577.625430][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.787023][ T3582] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 577.952053][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 577.982751][ T3582] usb 5-1: unable to get BOS descriptor or descriptor too short [ 578.010860][ T3582] usb 5-1: not running at top speed; connect to a high speed hub [ 578.033165][ T3582] usb 5-1: config 12 has an invalid interface number: 187 but max is 0 [ 578.052638][ T3582] usb 5-1: config 12 has no interface number 0 [ 578.066331][ T3582] usb 5-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 578.078219][ T3582] usb 5-1: config 12 interface 187 has no altsetting 0 [ 578.088753][ T3582] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 578.098172][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.114099][ T3582] usb 5-1: Product: syz [ 578.119261][ T3582] usb 5-1: Manufacturer: syz [ 578.124055][ T3582] usb 5-1: SerialNumber: syz [ 578.152107][ T9784] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 578.385885][ T3582] ti_usb_3410_5052 5-1:12.187: TI USB 3410 1 port adapter converter detected [ 578.386049][ T3582] ti_usb_3410_5052 5-1:12.187: missing endpoints [ 578.402485][ T3582] usb 5-1: USB disconnect, device number 7 [ 578.926972][ T6377] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 579.126979][ T6377] usb 1-1: Using ep0 maxpacket: 32 [ 579.134644][ T6377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.190784][ T6377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.231013][ T6377] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.261835][ T6377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.305086][ T9820] device bond0 entered promiscuous mode [ 579.311222][ T9820] device bond_slave_0 entered promiscuous mode [ 579.323646][ T9820] device bond_slave_1 entered promiscuous mode [ 579.328681][ T6377] usb 1-1: config 0 descriptor?? [ 579.360195][ T6377] hub 1-1:0.0: USB hub found [ 579.397178][ T9821] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 579.522093][ T9821] device netdevsim0 entered promiscuous mode [ 579.563048][ T6377] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 579.585990][ T9821] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 579.775874][ T6377] usbhid 1-1:0.0: can't add hid device: -71 [ 579.786956][ T6377] usbhid: probe of 1-1:0.0 failed with error -71 [ 580.001071][ T6377] usb 1-1: USB disconnect, device number 14 [ 580.205147][ T26] audit: type=1326 audit(1732823157.449:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.4.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00de580809 code=0x0 [ 580.226864][ C0] vkms_vblank_simulate: vblank timer overrun [ 581.142820][ T26] audit: type=1326 audit(1732823158.389:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9836 comm="syz.3.1679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x0 [ 581.596946][ T6377] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 581.786868][ T6377] usb 5-1: Using ep0 maxpacket: 32 [ 581.798461][ T6377] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 581.827068][ T6377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.864612][ T6377] usb 5-1: config 0 descriptor?? [ 581.880319][ T6377] gspca_main: sq930x-2.14.0 probing 041e:403c [ 582.116790][ T4299] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 582.236887][ T8542] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 582.318259][ T4299] usb 3-1: config 0 has no interfaces? [ 582.326507][ T4299] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.336080][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.345168][ T4299] usb 3-1: Product: syz [ 582.350047][ T4299] usb 3-1: Manufacturer: syz [ 582.354772][ T4299] usb 3-1: SerialNumber: syz [ 582.369762][ T4299] usb 3-1: config 0 descriptor?? [ 582.564328][ T8542] usb 2-1: Using ep0 maxpacket: 32 [ 582.580191][ T8542] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 582.614539][ T8542] usb 2-1: config 0 has no interface number 0 [ 582.707088][ T6377] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 582.757408][ T6377] sq930x: probe of 5-1:0.0 failed with error -71 [ 582.765407][ T8542] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 583.038530][ T6377] usb 5-1: USB disconnect, device number 8 [ 583.064390][ T8542] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 583.232387][ T8542] usb 2-1: config 0 interface 126 has no altsetting 0 [ 583.267787][ T4340] usb 3-1: USB disconnect, device number 9 [ 583.275586][ T8542] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 583.355734][ T8542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.377581][ T8542] usb 2-1: Product: syz [ 583.382114][ T8542] usb 2-1: Manufacturer: syz [ 583.397393][ T8542] usb 2-1: SerialNumber: syz [ 583.413015][ T8542] usb 2-1: config 0 descriptor?? [ 583.429244][ T9862] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 583.447450][ T9862] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 583.708038][ T8542] ir_usb 2-1:0.126: IR Dongle converter detected [ 583.734677][ T8542] usb 2-1: IRDA class descriptor not found, device not bound [ 583.819375][ T8542] usb 2-1: USB disconnect, device number 6 [ 585.914621][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'. [ 588.441701][ T9997] netlink: 'syz.1.1744': attribute type 10 has an invalid length. [ 588.474361][ T9997] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 588.608215][ T6377] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 588.633697][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 589.543525][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1750'. [ 589.586861][ T6377] usb 1-1: Using ep0 maxpacket: 32 [ 589.924320][ T26] audit: type=1326 audit(1732823167.169:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10017 comm="syz.2.1752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f677d980809 code=0x0 [ 589.972740][ T3582] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 590.168197][ T3582] usb 4-1: Using ep0 maxpacket: 8 [ 590.180692][ T3582] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 590.199312][ T6377] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 590.215064][ T3582] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.217530][ T6377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.236435][ T6377] usb 1-1: config 0 descriptor?? [ 590.254498][ T6377] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 590.258152][ T3582] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.289667][ T3582] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.306123][ T3582] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.323172][ T3582] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.334537][ T3582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.569677][ T3582] usb 4-1: usb_control_msg returned -32 [ 590.575773][ T3582] usbtmc 4-1:16.0: can't read capabilities [ 590.593165][T10036] netlink: 'syz.1.1760': attribute type 10 has an invalid length. [ 590.864722][T10044] overlayfs: missing 'lowerdir' [ 592.720660][ T3582] usb 4-1: USB disconnect, device number 6 [ 592.959235][T10076] netlink: 'syz.4.1774': attribute type 10 has an invalid length. [ 592.986769][T10076] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 593.317494][T10084] overlayfs: missing 'lowerdir' [ 594.087203][ T6377] gspca_vc032x: reg_r err -71 [ 594.106751][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.112102][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.117498][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.123179][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.129422][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.134732][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.166877][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.172232][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.185579][T10089] device geneve2 entered promiscuous mode [ 594.196190][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.204528][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.346794][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.352641][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.358089][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.363403][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.368803][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.374111][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.379487][ T6377] gspca_vc032x: I2c Bus Busy Wait 00 [ 595.385102][ T6377] gspca_vc032x: Unknown sensor... [ 595.390697][ T6377] vc032x: probe of 1-1:0.0 failed with error -22 [ 595.576929][ T3582] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 595.650394][ T6377] usb 1-1: USB disconnect, device number 15 [ 595.777187][ T3582] usb 2-1: Using ep0 maxpacket: 8 [ 595.789678][ T3582] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 595.816808][ T3582] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.848224][ T3582] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.858642][ T3582] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.895641][ T3582] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.930106][ T3582] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 595.951781][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 595.978745][ T3582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.257494][T10121] overlayfs: missing 'lowerdir' [ 596.495282][ T3582] usb 2-1: usb_control_msg returned -32 [ 596.504834][ T3582] usbtmc 2-1:16.0: can't read capabilities [ 596.987513][ T22] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 597.112320][T10126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 597.142870][T10126] device vlan2 entered promiscuous mode [ 597.156873][T10126] device gretap0 entered promiscuous mode [ 597.173518][T10126] device gretap0 left promiscuous mode [ 598.376829][ T22] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 598.595557][ T22] usb 1-1: config 0 has no interface number 0 [ 598.630176][ T22] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 598.689777][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.739117][ T22] usb 1-1: Product: syz [ 598.743353][ T22] usb 1-1: Manufacturer: syz [ 598.757534][T10142] netlink: 'syz.2.1798': attribute type 10 has an invalid length. [ 598.786984][ T22] usb 1-1: SerialNumber: syz [ 598.843442][ T8542] usb 2-1: USB disconnect, device number 7 [ 598.852178][ T22] usb 1-1: config 0 descriptor?? [ 598.887840][ T22] flexcop_usb: set interface failed. [ 598.893241][ T22] b2c2_flexcop_usb: probe of 1-1:0.154 failed with error -22 [ 599.067719][ T22] usb 1-1: USB disconnect, device number 16 [ 599.347020][ T6872] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 599.409867][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 599.538785][ T6872] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 599.560825][ T6872] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 599.571464][ T6872] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 599.580886][ T6872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.885406][T10150] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 601.318905][T10191] overlayfs: missing 'workdir' [ 601.710802][ T32] usb 4-1: USB disconnect, device number 7 [ 601.844475][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 602.187044][ T3582] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 602.738750][ T3582] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.756940][ T3582] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.779980][ T3582] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 602.796770][ T3582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 602.804810][ T3582] usb 2-1: SerialNumber: syz [ 603.122824][ T3582] usb 2-1: 0:2 : does not exist [ 603.985685][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 604.411518][ T26] audit: type=1326 audit(1732823181.659:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10254 comm="syz.0.1838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb1b80809 code=0x0 [ 604.416612][ T6377] usb 2-1: USB disconnect, device number 8 [ 604.910077][T10268] overlayfs: missing 'workdir' [ 605.832577][T10275] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 605.840102][T10274] binder: 10271:10274 ioctl 4018620d 0 returned -22 [ 605.858687][T10276] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1846'. [ 605.896894][T10276] netlink: zone id is out of range [ 605.902217][T10276] netlink: zone id is out of range [ 605.938070][T10276] netlink: del zone limit has 4 unknown bytes [ 607.234426][T10301] overlayfs: missing 'workdir' [ 607.951373][ T26] audit: type=1326 audit(1732823185.199:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10303 comm="syz.0.1855" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb1b80809 code=0x0 [ 608.155990][T10316] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 608.230601][T10319] binder: 10318:10319 ioctl c0306201 0 returned -14 [ 608.848388][ T6872] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 609.054488][ T6872] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.092573][ T6872] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.109190][ T6872] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.119062][ T6872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.132593][T10325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 609.267006][T10339] overlayfs: missing 'workdir' [ 609.406974][ T4340] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 609.726571][ T4340] usb 5-1: unable to get BOS descriptor or descriptor too short [ 609.845401][ T4340] usb 5-1: config 206 has an invalid interface number: 241 but max is 2 [ 609.981703][ T4340] usb 5-1: config 206 has an invalid interface number: 228 but max is 2 [ 610.038054][T10345] sctp: [Deprecated]: syz.0.1871 (pid 10345) Use of int in max_burst socket option. [ 610.038054][T10345] Use struct sctp_assoc_value instead [ 610.070646][ T4340] usb 5-1: config 206 has an invalid interface number: 79 but max is 2 [ 610.123274][ T4340] usb 5-1: config 206 has no interface number 0 [ 610.140609][T10347] binder: 10346:10347 ioctl c0306201 0 returned -14 [ 610.156416][ T4340] usb 5-1: config 206 has no interface number 1 [ 610.182144][ T4340] usb 5-1: config 206 has no interface number 2 [ 610.196159][ T4340] usb 5-1: config 206 interface 241 has no altsetting 0 [ 610.214197][ T4340] usb 5-1: config 206 interface 228 has no altsetting 0 [ 610.221966][ T4340] usb 5-1: config 206 interface 79 has no altsetting 0 [ 610.241338][ T4340] usb 5-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c4.b0 [ 610.253550][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.262283][ T4340] usb 5-1: Product: syz [ 610.266528][ T4340] usb 5-1: Manufacturer: syz [ 610.272355][ T4340] usb 5-1: SerialNumber: syz [ 610.343203][ T4426] usb 3-1: USB disconnect, device number 10 [ 610.497743][ T26] audit: type=1326 audit(1732823187.749:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10361 comm="syz.3.1876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x0 [ 610.607935][ T4340] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 610.626652][ T4340] usb 5-1: selecting invalid altsetting 0 [ 610.635283][ T2308] pvrusb2: Invalid write control endpoint [ 610.639353][ T4340] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 610.670262][ T4340] usb 5-1: selecting invalid altsetting 0 [ 610.690282][ T4340] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 610.703893][ T4340] usb 5-1: selecting invalid altsetting 0 [ 610.716241][ T4340] usb 5-1: USB disconnect, device number 9 [ 610.761509][T10373] loop2: detected capacity change from 0 to 7 [ 610.774168][T10373] Dev loop2: unable to read RDB block 7 [ 610.780897][T10373] loop2: unable to read partition table [ 610.791070][T10373] loop2: partition table beyond EOD, truncated [ 610.797728][T10373] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 610.869660][ T2308] pvrusb2: Invalid write control endpoint [ 610.875798][ T2308] pvrusb2: Invalid write control endpoint [ 610.895515][ T2308] pvrusb2: Invalid write control endpoint [ 610.901944][ T2308] pvrusb2: Invalid write control endpoint [ 610.927040][ T2308] pvrusb2: Invalid write control endpoint [ 610.932928][ T2308] pvrusb2: Invalid write control endpoint [ 610.938760][ T2308] pvrusb2: Invalid write control endpoint [ 610.954736][ T2308] pvrusb2: Invalid write control endpoint [ 610.985168][ T2308] pvrusb2: Invalid write control endpoint [ 611.000920][ T2308] pvrusb2: Invalid write control endpoint [ 611.011801][ T2308] pvrusb2: Invalid write control endpoint [ 611.026923][ T2308] pvrusb2: Invalid write control endpoint [ 611.042961][ T2308] pvrusb2: Invalid write control endpoint [ 611.048858][ T2308] pvrusb2: Invalid write control endpoint [ 611.075114][ T2308] pvrusb2: Invalid write control endpoint [ 611.081938][ T2308] pvrusb2: Invalid write control endpoint [ 611.101318][T10382] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 611.101441][ T2308] pvrusb2: Invalid write control endpoint [ 611.163691][ T2308] pvrusb2: Invalid write control endpoint [ 611.206596][ T2308] pvrusb2: Invalid write control endpoint [ 611.243089][ T2308] pvrusb2: Invalid write control endpoint [ 611.274745][ T2308] pvrusb2: Invalid write control endpoint [ 611.301124][ T2308] pvrusb2: Invalid write control endpoint [ 611.343513][ T2308] pvrusb2: Invalid write control endpoint [ 611.375932][ T2308] pvrusb2: Invalid write control endpoint [ 611.398568][ T2308] pvrusb2: Invalid write control endpoint [ 611.415865][ T2308] pvrusb2: Invalid write control endpoint [ 611.441479][ T2308] pvrusb2: Invalid write control endpoint [ 611.553316][T10394] overlayfs: missing 'workdir' [ 611.683294][ T2308] pvrusb2: Invalid write control endpoint [ 611.840883][ T2308] pvrusb2: Invalid write control endpoint [ 612.009936][ T2308] pvrusb2: Invalid write control endpoint [ 612.131007][ T2308] pvrusb2: Invalid write control endpoint [ 612.257146][ T2308] pvrusb2: Invalid write control endpoint [ 612.290194][ T2308] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 612.418943][T10403] binder: 10400:10403 ioctl c0306201 0 returned -14 [ 612.578475][ T2308] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 612.585363][ T2308] pvrusb2: Invalid write control endpoint [ 612.612507][ T2308] pvrusb2: Invalid write control endpoint [ 612.632827][ T2308] pvrusb2: Invalid write control endpoint [ 612.665201][ T2308] pvrusb2: Invalid write control endpoint [ 612.747709][ T2308] pvrusb2: Invalid write control endpoint [ 612.753564][ T2308] pvrusb2: Invalid write control endpoint [ 612.777295][T10412] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 612.790103][ T2308] pvrusb2: Invalid write control endpoint [ 612.824012][ T2308] pvrusb2: Invalid write control endpoint [ 612.830794][ T2308] pvrusb2: Invalid write control endpoint [ 612.836806][ T2308] pvrusb2: Invalid write control endpoint [ 612.843208][ T2308] pvrusb2: Invalid write control endpoint [ 612.849157][ T2308] pvrusb2: Invalid write control endpoint [ 612.855046][ T2308] pvrusb2: Invalid write control endpoint [ 612.862690][ T2308] pvrusb2: Invalid write control endpoint [ 612.868618][ T2308] pvrusb2: Invalid write control endpoint [ 612.874566][ T2308] pvrusb2: Invalid write control endpoint [ 612.880437][ T2308] pvrusb2: Invalid write control endpoint [ 612.886423][ T2308] pvrusb2: Invalid write control endpoint [ 612.906247][ T2308] pvrusb2: Invalid write control endpoint [ 612.935680][ T2308] pvrusb2: Invalid write control endpoint [ 612.941622][ T2308] pvrusb2: Invalid write control endpoint [ 613.046172][T10420] fuse: Unknown parameter '18446744073709551615' [ 613.314362][ T2308] pvrusb2: Attached sub-driver cs53l32a [ 613.851895][ T2308] pvrusb2: Invalid write control endpoint [ 613.871540][ T26] audit: type=1326 audit(1732823191.119:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10428 comm="syz.3.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x0 [ 613.894092][ T2308] pvrusb2: Invalid write control endpoint [ 613.895904][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'. [ 613.906792][ T2308] pvrusb2: Invalid write control endpoint [ 613.916443][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1896'. [ 613.925947][ T2308] pvrusb2: Invalid write control endpoint [ 613.925964][ T2308] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 613.974281][ T2308] pvrusb2: Device being rendered inoperable [ 613.983171][ T2308] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 613.996864][ T2308] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 614.031590][ T2308] pvrusb2: Invalid write control endpoint [ 614.174884][T10437] overlayfs: missing 'workdir' [ 614.907232][ T2308] pvrusb2: Invalid write control endpoint [ 614.919846][ T2308] pvrusb2: Invalid write control endpoint [ 614.925699][ T2308] pvrusb2: Invalid write control endpoint [ 614.931911][ T2308] pvrusb2: Invalid write control endpoint [ 614.937989][ T2308] pvrusb2: Invalid write control endpoint [ 614.943812][ T2308] pvrusb2: Invalid write control endpoint [ 614.949676][ T2308] pvrusb2: Invalid write control endpoint [ 614.955433][ T2308] pvrusb2: Invalid write control endpoint [ 614.961331][ T2308] pvrusb2: Invalid write control endpoint [ 614.967307][ T2308] pvrusb2: Invalid write control endpoint [ 614.973113][ T2308] pvrusb2: Invalid write control endpoint [ 614.979007][ T2308] pvrusb2: Invalid write control endpoint [ 614.984775][ T2308] pvrusb2: Invalid write control endpoint [ 614.990982][ T2308] pvrusb2: Invalid write control endpoint [ 614.997377][ T2308] pvrusb2: Invalid write control endpoint [ 615.003239][ T2308] pvrusb2: Invalid write control endpoint [ 615.009696][ T2308] pvrusb2: Invalid write control endpoint [ 615.015532][ T2308] pvrusb2: Invalid write control endpoint [ 615.021930][ T2308] pvrusb2: Invalid write control endpoint [ 615.028230][ T2308] pvrusb2: Invalid write control endpoint [ 615.034064][ T2308] pvrusb2: Invalid write control endpoint [ 615.039913][ T2308] pvrusb2: Invalid write control endpoint [ 615.045673][ T2308] pvrusb2: Invalid write control endpoint [ 615.051585][ T2308] pvrusb2: Invalid write control endpoint [ 615.057571][ T2308] pvrusb2: Invalid write control endpoint [ 615.063405][ T2308] pvrusb2: Invalid write control endpoint [ 615.069754][ T2308] pvrusb2: Invalid write control endpoint [ 615.075585][ T2308] pvrusb2: Invalid write control endpoint [ 615.081779][ T2308] pvrusb2: Invalid write control endpoint [ 615.088152][ T2308] pvrusb2: Invalid write control endpoint [ 615.093982][ T2308] pvrusb2: Invalid write control endpoint [ 615.104006][ T2308] pvrusb2: Invalid write control endpoint [ 615.247814][ T2308] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 616.242891][ T2308] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_b) [ 616.272139][ T2308] pvrusb2: Invalid write control endpoint [ 616.286857][ T2308] pvrusb2: Invalid write control endpoint [ 616.292660][ T2308] pvrusb2: Invalid write control endpoint [ 616.316788][ T2308] pvrusb2: Invalid write control endpoint [ 616.331611][ T2308] pvrusb2: Invalid write control endpoint [ 617.387065][ T2308] pvrusb2: Invalid write control endpoint [ 617.416010][T10461] fuse: Unknown parameter '18446744073709551615' [ 617.485437][ T2308] pvrusb2: Invalid write control endpoint [ 617.632129][ T2308] pvrusb2: Invalid write control endpoint [ 617.688693][ T2308] pvrusb2: Invalid write control endpoint [ 617.754853][ T2308] pvrusb2: Invalid write control endpoint [ 617.761275][ T2308] pvrusb2: Invalid write control endpoint [ 617.767280][ T2308] pvrusb2: Invalid write control endpoint [ 617.773344][ T2308] pvrusb2: Invalid write control endpoint [ 617.779427][ T2308] pvrusb2: Invalid write control endpoint [ 617.785181][ T2308] pvrusb2: Invalid write control endpoint [ 617.811863][ T2308] pvrusb2: Invalid write control endpoint [ 617.886237][ T2308] pvrusb2: Invalid write control endpoint [ 617.943590][ T2308] pvrusb2: Invalid write control endpoint [ 617.985046][ T2308] pvrusb2: Invalid write control endpoint [ 618.006847][ T2308] pvrusb2: Invalid write control endpoint [ 618.023194][ T26] audit: type=1326 audit(1732823195.269:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.3.1910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x0 [ 618.023610][ T2308] pvrusb2: Invalid write control endpoint [ 618.062733][ T2308] pvrusb2: Attached sub-driver cs53l32a [ 618.155999][T10478] overlayfs: missing 'workdir' [ 619.024344][ T2308] pvrusb2: Invalid write control endpoint [ 619.031312][ T2308] pvrusb2: Invalid write control endpoint [ 619.064728][ T2308] pvrusb2: Invalid write control endpoint [ 619.073301][T10486] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 619.096093][ T2308] pvrusb2: Invalid write control endpoint [ 619.125464][ T2308] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 619.164039][T10488] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1914'. [ 619.216020][ T2308] pvrusb2: Device being rendered inoperable [ 619.248484][ T2308] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 619.272767][T10488] netlink: zone id is out of range [ 619.278704][T10488] netlink: zone id is out of range [ 619.297126][ T2308] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 619.333784][T10488] netlink: del zone limit has 4 unknown bytes [ 619.339830][ T2308] pvrusb2: Invalid write control endpoint [ 619.575127][ T2308] pvrusb2: Invalid write control endpoint [ 619.591988][ T2308] pvrusb2: Invalid write control endpoint [ 619.633989][ T2308] pvrusb2: Invalid write control endpoint [ 619.662102][ T2308] pvrusb2: Invalid write control endpoint [ 619.692636][ T2308] pvrusb2: Invalid write control endpoint [ 619.723043][ T2308] pvrusb2: Invalid write control endpoint [ 619.753379][ T2308] pvrusb2: Invalid write control endpoint [ 619.772882][ T2308] pvrusb2: Invalid write control endpoint [ 619.816010][ T2308] pvrusb2: Invalid write control endpoint [ 619.851670][ T2308] pvrusb2: Invalid write control endpoint [ 619.876124][ T2308] pvrusb2: Invalid write control endpoint [ 619.902184][ T2308] pvrusb2: Invalid write control endpoint [ 619.926575][T10499] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 619.937835][ T2308] pvrusb2: Invalid write control endpoint [ 619.943616][ T2308] pvrusb2: Invalid write control endpoint [ 619.986793][T10499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 619.990307][ T2308] pvrusb2: Invalid write control endpoint [ 620.017959][T10499] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 620.022286][ T2308] pvrusb2: Invalid write control endpoint [ 620.082497][ T2308] pvrusb2: Invalid write control endpoint [ 620.096386][ T2308] pvrusb2: Invalid write control endpoint [ 620.113910][ T2308] pvrusb2: Invalid write control endpoint [ 620.134202][ T2308] pvrusb2: Invalid write control endpoint [ 620.149305][ T2308] pvrusb2: Invalid write control endpoint [ 620.165432][ T2308] pvrusb2: Invalid write control endpoint [ 620.185708][ T2308] pvrusb2: Invalid write control endpoint [ 620.207803][ T2308] pvrusb2: Invalid write control endpoint [ 620.246770][ T2308] pvrusb2: Invalid write control endpoint [ 620.288834][ T2308] pvrusb2: Invalid write control endpoint [ 620.294729][ T2308] pvrusb2: Invalid write control endpoint [ 620.348153][ T2308] pvrusb2: Invalid write control endpoint [ 620.353932][ T2308] pvrusb2: Invalid write control endpoint [ 620.394894][ T2308] pvrusb2: Invalid write control endpoint [ 620.411472][ T2308] pvrusb2: Invalid write control endpoint [ 620.428121][ T2308] pvrusb2: Invalid write control endpoint [ 620.455023][ T2308] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 621.332578][T10519] overlayfs: missing 'workdir' [ 621.604767][T10521] fuse: Unknown parameter '18446744073709551615' [ 622.176394][ T2308] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_c) [ 622.208452][ T2308] pvrusb2: Invalid write control endpoint [ 622.214349][ T2308] pvrusb2: Invalid write control endpoint [ 622.326776][ T2308] pvrusb2: Invalid write control endpoint [ 622.332651][ T2308] pvrusb2: Invalid write control endpoint [ 622.356534][ T2308] pvrusb2: Invalid write control endpoint [ 622.377532][ T26] audit: type=1326 audit(1732823199.629:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.0.1925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb1b80809 code=0x0 [ 622.401944][ T2308] pvrusb2: Invalid write control endpoint [ 622.411673][ T2308] pvrusb2: Invalid write control endpoint [ 622.422479][ T2308] pvrusb2: Invalid write control endpoint [ 622.446782][ T2308] pvrusb2: Invalid write control endpoint [ 622.452975][ T2308] pvrusb2: Invalid write control endpoint [ 622.460281][ T2308] pvrusb2: Invalid write control endpoint [ 622.466297][ T2308] pvrusb2: Invalid write control endpoint [ 622.476550][ T2308] pvrusb2: Invalid write control endpoint [ 622.485113][ T2308] pvrusb2: Invalid write control endpoint [ 622.491898][ T2308] pvrusb2: Invalid write control endpoint [ 622.498053][ T2308] pvrusb2: Invalid write control endpoint [ 622.504201][ T2308] pvrusb2: Invalid write control endpoint [ 622.511027][ T2308] pvrusb2: Invalid write control endpoint [ 622.517720][ T2308] pvrusb2: Invalid write control endpoint [ 622.523706][ T2308] pvrusb2: Invalid write control endpoint [ 622.530420][ T2308] pvrusb2: Invalid write control endpoint [ 622.539330][ T2308] pvrusb2: Attached sub-driver cs53l32a [ 622.633349][ T2308] pvrusb2: Invalid write control endpoint [ 622.666796][ T2308] pvrusb2: Invalid write control endpoint [ 622.682043][ T2308] pvrusb2: Invalid write control endpoint [ 622.690060][ T2308] pvrusb2: Invalid write control endpoint [ 622.697216][ T2308] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 622.755118][ T2308] pvrusb2: Device being rendered inoperable [ 622.769602][ T2308] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 622.783349][ T2308] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 623.367094][ T4340] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 623.433518][T10567] fuse: Unknown parameter '18446744073709551615' [ 623.577094][ T4340] usb 5-1: Using ep0 maxpacket: 16 [ 623.615538][ T4340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.758980][ T4340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.999311][ T4340] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.070548][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.143208][ T4340] usb 5-1: Product: syz [ 624.164452][ T4340] usb 5-1: Manufacturer: syz [ 624.179196][ T3582] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 624.186945][ T4340] usb 5-1: SerialNumber: syz [ 624.317945][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.332307][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.688678][T10577] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 624.833489][ T3582] usb 4-1: Using ep0 maxpacket: 32 [ 625.460792][ T3582] usb 4-1: unable to get BOS descriptor or descriptor too short [ 625.477030][ T3582] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 625.484743][ T3582] usb 4-1: can't read configurations, error -71 [ 625.552117][ T6377] usb 5-1: USB disconnect, device number 10 [ 625.653434][T10588] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 626.476944][ T6872] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 626.493419][T10615] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.698207][T10618] fuse: Unknown parameter '18446744073709551615' [ 627.529173][T10622] netlink: 'syz.0.1953': attribute type 10 has an invalid length. [ 627.576975][ T6872] usb 3-1: Using ep0 maxpacket: 8 [ 627.585593][ T6872] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 627.604203][ T6872] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.610973][T10622] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 627.628620][ T6872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.667276][ T6872] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.706942][ T6872] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.728957][ T6872] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 627.746295][ T6872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.993821][ T6872] usb 3-1: usb_control_msg returned -32 [ 628.002026][ T6872] usbtmc 3-1:16.0: can't read capabilities [ 630.002268][T10667] netlink: 'syz.0.1970': attribute type 10 has an invalid length. [ 632.436981][ T6377] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 632.879769][ T6377] usb 2-1: config 0 has no interfaces? [ 632.930362][ T6377] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 633.012265][ T6377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.033441][ T6377] usb 2-1: Product: syz [ 633.039935][T10703] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 633.047220][ T6377] usb 2-1: Manufacturer: syz [ 633.067205][ T6377] usb 2-1: SerialNumber: syz [ 633.085050][ T6377] usb 2-1: config 0 descriptor?? [ 633.279920][T10710] device virt_wifi0 entered promiscuous mode [ 633.477886][T10709] device virt_wifi0 left promiscuous mode [ 633.505775][T10653] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 633.661515][ T8542] usb 3-1: USB disconnect, device number 11 [ 635.169744][T10739] netlink: 'syz.4.1998': attribute type 10 has an invalid length. [ 635.847566][ T4296] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 636.030460][ T6377] usb 2-1: can't set config #0, error -71 [ 636.036811][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 636.049849][ T4296] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 636.085834][ T6377] usb 2-1: USB disconnect, device number 9 [ 636.091910][ T4296] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.142736][ T4296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 636.185963][ T4296] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.224664][ T4296] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.427425][ T4296] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 636.437366][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.719566][ T4296] usb 5-1: usb_control_msg returned -32 [ 636.727605][ T4296] usbtmc 5-1:16.0: can't read capabilities [ 637.347686][T10781] netlink: 'syz.0.2012': attribute type 10 has an invalid length. [ 639.098421][ T4299] usb 5-1: USB disconnect, device number 11 [ 639.807013][ T4426] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 640.162434][ T4426] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.193376][ T4426] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 640.347900][ T4426] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 640.477934][ T4426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.797867][ T4426] usb 5-1: config 0 descriptor?? [ 640.905976][T10846] fuse: Unknown parameter '18446744073709551615' [ 641.001981][T10849] netlink: 'syz.1.2039': attribute type 10 has an invalid length. [ 641.009476][ T4426] Bluetooth: Can't get state to change to load ram patch err [ 641.034340][ T4426] Bluetooth: Loading patch file failed [ 641.043549][ T26] audit: type=1326 audit(1732823218.299:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.2038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x0 [ 641.045572][ T4426] ath3k: probe of 5-1:0.0 failed with error -32 [ 641.164018][ T4426] usb 5-1: USB disconnect, device number 12 [ 643.250070][T10874] sctp: [Deprecated]: syz.0.2043 (pid 10874) Use of int in max_burst socket option deprecated. [ 643.250070][T10874] Use struct sctp_assoc_value instead [ 644.217276][T10888] netlink: 'syz.4.2051': attribute type 10 has an invalid length. [ 647.126914][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 647.168738][T10947] device bridge0 entered promiscuous mode [ 647.175048][T10947] device macvtap1 entered promiscuous mode [ 647.233140][T10954] device bridge0 left promiscuous mode [ 648.419192][T10967] fuse: Unknown parameter '18446744073709551615' [ 649.078789][T10989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2093'. [ 649.125391][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2094'. [ 649.236151][T10989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2093'. [ 649.338747][ T4426] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 649.547566][ T4426] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 649.660300][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.808376][ T4426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.061680][ T4426] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 650.243724][ T4426] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 650.323014][ T4426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.403984][ T4426] usb 3-1: config 0 descriptor?? [ 650.868635][ T4426] hid-generic 0003:057E:201E.0002: hidraw0: USB HID v80.00 Device [HID 057e:201e] on usb-dummy_hcd.2-1/input0 [ 651.065688][ T4426] usb 3-1: USB disconnect, device number 12 [ 652.785710][ T26] audit: type=1326 audit(1732823230.029:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 652.861524][ T26] audit: type=1326 audit(1732823230.039:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 652.997186][ T26] audit: type=1326 audit(1732823230.039:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.118092][ T26] audit: type=1326 audit(1732823230.039:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.241038][ T26] audit: type=1326 audit(1732823230.039:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.341723][ T26] audit: type=1326 audit(1732823230.039:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.361994][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 653.401941][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 653.421153][ T26] audit: type=1326 audit(1732823230.039:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.531592][ T26] audit: type=1326 audit(1732823230.039:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.658729][ T26] audit: type=1326 audit(1732823230.039:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 653.729932][ T26] audit: type=1326 audit(1732823230.069:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11040 comm="syz.3.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b80809 code=0x7ffc0000 [ 655.393276][T11072] fuse: Unknown parameter '18446744073709551615' [ 655.655378][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 655.787792][T11076] device erspan0 entered promiscuous mode [ 655.829959][T11076] device macvtap1 entered promiscuous mode [ 657.082242][T11077] device erspan0 left promiscuous mode [ 658.651826][T11091] syz.3.2127 (11091): drop_caches: 2 [ 659.323976][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'. [ 659.470510][T11119] device erspan0 entered promiscuous mode [ 659.909376][T11119] device macvtap1 entered promiscuous mode [ 660.363668][T11123] device erspan0 left promiscuous mode [ 661.231848][T11148] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2147'. [ 662.043159][T11159] fuse: Unknown parameter '18446744073709551615' [ 664.400561][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 665.607973][T11202] fuse: Bad value for 'fd' [ 665.679804][T11200] device syzkaller0 entered promiscuous mode [ 666.751334][T11219] fuse: Unknown parameter '18446744073709551615' [ 667.518140][ T4299] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 667.737323][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 667.744631][ T4299] usb 1-1: too many configurations: 16, using maximum allowed: 8 [ 667.766011][ T4299] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 667.775413][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 667.784330][ T4299] usb 1-1: Product: syz [ 667.789535][ T4299] usb 1-1: Manufacturer: syz [ 667.804300][ T4299] usb 1-1: config 0 descriptor?? [ 667.816260][ T4299] gspca_main: 046d:0896 too many config [ 668.026858][ T4299] usb 1-1: USB disconnect, device number 17 [ 672.650219][T11324] device syzkaller0 entered promiscuous mode [ 673.495214][T11333] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:21 [ 675.059180][ T4264] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 675.075749][ T4264] Bluetooth: hci2: Injecting HCI hardware error event [ 675.087105][ T4264] Bluetooth: hci2: hardware error 0x00 [ 675.281863][T11361] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2223'. [ 676.490305][T11375] netlink: 'syz.1.2229': attribute type 10 has an invalid length. [ 676.666772][ T3582] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 677.019140][ T3582] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 677.028146][ T3582] usb 4-1: config 0 has no interface number 0 [ 677.040922][ T3582] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 677.050608][ T3582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.060144][ T3582] usb 4-1: Product: syz [ 677.066438][ T3582] usb 4-1: Manufacturer: syz [ 677.071818][ T3582] usb 4-1: SerialNumber: syz [ 677.080093][ T3582] usb 4-1: config 0 descriptor?? [ 677.137094][ T4264] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 677.299374][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 677.317433][ T3582] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 677.331231][ T3582] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 677.341320][ T3582] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 677.349447][ T3582] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 677.362125][ T3582] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 677.374993][ T3582] usb 4-1: USB disconnect, device number 10 [ 677.387636][ T3582] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 677.398914][ T3582] keyspan 4-1:0.133: device disconnected [ 677.632879][T11407] netlink: 'syz.1.2243': attribute type 10 has an invalid length. [ 678.035606][T11424] program syz.0.2251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 678.050319][ T4264] Bluetooth: Wrong link type (-22) [ 678.076890][T10959] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 678.332009][T11431] netlink: 'syz.4.2254': attribute type 10 has an invalid length. [ 678.344638][T10959] usb 3-1: Using ep0 maxpacket: 32 [ 678.356534][T10959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.378561][T10959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 678.443530][T10959] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 678.495366][T10959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.559354][T10959] usb 3-1: config 0 descriptor?? [ 678.565080][T11413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 679.051094][T10959] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0x4 [ 679.090129][T10959] logitech-djreceiver 0003:046D:C71F.0003: unknown main item tag 0xe [ 679.254256][ T4296] usb 3-1: USB disconnect, device number 13 [ 679.437085][T11462] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 679.495075][T11462] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 679.534283][T11465] loop0: detected capacity change from 0 to 7 [ 679.544886][T11465] Dev loop0: unable to read RDB block 7 [ 679.552262][T11465] loop0: unable to read partition table [ 679.558433][T11465] loop0: partition table beyond EOD, truncated [ 679.564775][T11465] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 679.564775][T11465] ) failed (rc=-5) [ 680.292853][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 680.292870][ T26] audit: type=1326 audit(1732823257.539:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 680.387658][ T4296] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 680.596914][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 680.604506][ T4296] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 680.613309][ T4296] usb 5-1: config 0 has no interface number 0 [ 680.624848][ T4296] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 680.634634][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.643288][ T4296] usb 5-1: Product: syz [ 680.649566][ T4296] usb 5-1: Manufacturer: syz [ 680.654477][ T4296] usb 5-1: SerialNumber: syz [ 680.662759][ T4296] usb 5-1: config 0 descriptor?? [ 680.672490][ T4296] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 680.874500][ T4296] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 680.888628][ T4296] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 681.009656][ T26] audit: type=1326 audit(1732823258.259:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.032728][ T26] audit: type=1326 audit(1732823258.259:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.056622][ T26] audit: type=1326 audit(1732823258.259:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.079448][ T26] audit: type=1326 audit(1732823258.259:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.107550][ T26] audit: type=1326 audit(1732823258.279:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.134974][ T26] audit: type=1326 audit(1732823258.279:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.231365][ T26] audit: type=1326 audit(1732823258.279:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.305172][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 681.305441][ T4298] usb 5-1: USB disconnect, device number 13 [ 681.341935][ T26] audit: type=1326 audit(1732823258.279:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.406060][ T4298] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 681.495690][ T4298] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 681.515330][ T26] audit: type=1326 audit(1732823258.279:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11493 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd442d80809 code=0x7fc00000 [ 681.582763][ T4298] quatech2 5-1:0.51: device disconnected [ 682.411126][T11534] rose0: tun_chr_ioctl cmd 1074025680 [ 682.680805][T11519] syz.1.2290 (11519): drop_caches: 2 [ 682.691046][T11538] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 683.506864][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 683.526769][ T4296] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 683.604397][T11562] fuse: Bad value for 'fd' [ 683.696863][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 683.715097][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.727469][ T4296] usb 4-1: Using ep0 maxpacket: 32 [ 683.738915][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.750062][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.760070][ T4296] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 683.769312][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.779797][ T4296] usb 4-1: config 0 descriptor?? [ 683.826317][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 683.876791][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.908566][ T32] usb 3-1: config 0 descriptor?? [ 684.195319][ T4296] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 684.221102][ T4296] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 684.394522][ T4296] ft260 0003:0403:6030.0004: chip code: 5e81 abf2 [ 684.698392][T10959] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 684.796051][ T4296] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 684.899242][T10959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.939255][T11569] syz.0.2311 (11569): drop_caches: 2 [ 684.944674][T10959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.976445][T10959] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 685.003961][T10959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.038945][T10959] usb 5-1: config 0 descriptor?? [ 685.407462][ T6872] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 685.491318][T10959] usbhid 5-1:0.0: can't add hid device: -71 [ 685.501069][T10959] usbhid: probe of 5-1:0.0 failed with error -71 [ 685.523947][T10959] usb 5-1: USB disconnect, device number 14 [ 685.699299][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.705816][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.041388][T11585] program syz.1.2317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.264655][ T4296] usb 4-1: USB disconnect, device number 11 [ 686.310160][ T32] usb 3-1: USB disconnect, device number 14 [ 686.453676][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 686.480296][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2323'. [ 686.880902][T11602] syz.1.2325 (11602): drop_caches: 2 [ 687.179994][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 687.415269][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 687.439546][T11632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2338'. [ 687.576212][T11636] syz.4.2340 (11636): drop_caches: 2 [ 688.117000][ T32] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 688.192203][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 688.202133][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2352'. [ 688.298497][ T32] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 688.309325][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.326892][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.354843][ T32] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 688.374402][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.389565][ T32] usb 2-1: config 0 descriptor?? [ 688.391911][T11666] syz.3.2354 (11666): drop_caches: 2 [ 688.805733][ T32] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 688.816539][ T32] corsair 0003:1B1C:1B3E.0005: unknown main item tag 0x0 [ 688.826595][ T32] corsair 0003:1B1C:1B3E.0005: item fetching failed at offset 2/5 [ 688.839487][ T32] corsair 0003:1B1C:1B3E.0005: parse failed [ 688.847694][ T32] corsair: probe of 0003:1B1C:1B3E.0005 failed with error -22 [ 689.008166][ T32] usb 2-1: USB disconnect, device number 10 [ 689.089485][T11686] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2363'. [ 689.106875][ T6872] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 689.387219][ T6872] usb 5-1: Using ep0 maxpacket: 32 [ 689.405473][ T6872] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.3f [ 689.435544][ T6872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.449505][T11694] binder: BINDER_SET_CONTEXT_MGR already set [ 689.463568][ T6872] usb 5-1: Product: syz [ 689.471109][T11694] binder: 11693:11694 ioctl 4018620d 20000040 returned -16 [ 689.482671][ T6872] usb 5-1: Manufacturer: syz [ 689.494076][ T6872] usb 5-1: SerialNumber: syz [ 689.526746][ T6872] usb 5-1: config 0 descriptor?? [ 690.048391][ T6872] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 690.096852][ T6872] airspy 5-1:0.0: Could not detect board [ 690.102613][ T6872] airspy: probe of 5-1:0.0 failed with error -71 [ 690.155078][T11698] syz.2.2368 (11698): drop_caches: 2 [ 690.207061][ T6872] usb 5-1: USB disconnect, device number 15 [ 690.732731][T11712] netlink: 'syz.0.2374': attribute type 10 has an invalid length. [ 690.745629][T11716] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2375'. [ 692.314448][T11735] syz.3.2382 (11735): drop_caches: 2 [ 692.853756][T11749] netlink: 'syz.4.2388': attribute type 10 has an invalid length. [ 693.282529][ T4299] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 693.480053][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 693.511967][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 693.527053][ T4299] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 693.552492][ T4299] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 693.593655][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.678717][ T4299] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 694.297743][T11768] syz.4.2396 (11768): drop_caches: 2 [ 694.609355][ T4296] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 694.645403][T11780] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 694.743875][ T4299] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 694.797324][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 694.808331][ T4296] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=ba.13 [ 694.828327][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.843458][ T4296] usb 1-1: Product: syz [ 694.849746][ T4296] usb 1-1: Manufacturer: syz [ 694.854505][ T4296] usb 1-1: SerialNumber: syz [ 695.342984][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 696.146969][ T4299] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 696.155293][ T4299] stv0680 4-1:4.0: last error: 59, command = 0x9d [ 696.164267][ T4296] usb 1-1: config 0 descriptor?? [ 696.171462][ T4296] mct_u232 1-1:0.0: MCT U232 converter detected [ 696.179913][ T4299] usb 4-1: USB disconnect, device number 12 [ 696.187578][ T4296] mct_u232 ttyUSB0: expected endpoint missing [ 696.200808][T11809] syz.4.2410 (11809): drop_caches: 2 [ 696.575641][ T4426] usb 1-1: USB disconnect, device number 18 [ 696.647648][ T4426] mct_u232 1-1:0.0: device disconnected [ 697.057026][ T4264] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 697.065830][ T4264] Bluetooth: hci3: Injecting HCI hardware error event [ 697.077790][ T4264] Bluetooth: hci3: hardware error 0x00 [ 697.145210][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 697.176518][T11826] device ip6gretap0 entered promiscuous mode [ 697.200555][T11826] device macvtap1 entered promiscuous mode [ 697.225938][T11829] device ip6gretap0 left promiscuous mode [ 698.176873][ T32] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 698.346787][ T32] usb 5-1: device descriptor read/64, error -71 [ 698.616797][ T32] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 698.776803][ T32] usb 5-1: device descriptor read/64, error -71 [ 698.890027][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 698.899771][ T32] usb usb5-port1: attempt power cycle [ 699.136917][ T4264] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 699.220655][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 699.235737][T11861] device ip6gretap0 entered promiscuous mode [ 699.242000][T11861] device macvtap2 entered promiscuous mode [ 699.277588][T11861] device ip6gretap0 left promiscuous mode [ 699.316797][ T32] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 699.380863][ T32] usb 5-1: device descriptor read/8, error -71 [ 700.686747][ T32] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 700.753857][ T32] usb 5-1: device descriptor read/8, error -71 [ 700.877401][ T32] usb usb5-port1: unable to enumerate USB device [ 702.062599][T11903] netlink: 'syz.2.2451': attribute type 10 has an invalid length. [ 703.376868][ T3582] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 703.419988][T11931] netlink: 'syz.2.2462': attribute type 10 has an invalid length. [ 703.577056][ T3582] usb 1-1: Using ep0 maxpacket: 16 [ 703.585860][ T3582] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.607639][ T3582] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 703.652008][ T3582] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 703.736897][ T3582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.784399][ T3582] usb 1-1: config 0 descriptor?? [ 705.225489][ T3582] usbhid 1-1:0.0: can't add hid device: -71 [ 705.262208][ T3582] usbhid: probe of 1-1:0.0 failed with error -71 [ 705.407626][ T3582] usb 1-1: USB disconnect, device number 19 [ 706.193795][T11965] netlink: 'syz.0.2475': attribute type 10 has an invalid length. [ 706.372427][T11967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2476'. [ 707.344470][T11991] syz.3.2486 sent an empty control message without MSG_MORE. [ 709.216856][ T3582] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 709.426837][ T3582] usb 3-1: Using ep0 maxpacket: 16 [ 709.434011][ T3582] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 709.467008][ T3582] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 710.756934][ T3582] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 710.765167][ T3582] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 710.774715][ T3582] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 710.783699][ T3582] usb 3-1: config 0 has no interface number 0 [ 710.789858][ T3582] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 710.801061][ T3582] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 710.816764][ T3582] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.834618][ T3582] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.863036][ T3582] usb 3-1: config 0 interface 125 has no altsetting 0 [ 710.874535][ T3582] usb 3-1: config 0 interface 125 has no altsetting 2 [ 711.043972][T12053] program syz.3.2509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.136932][ T22] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 711.270011][ T3582] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 711.279391][ T3582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.297309][ T3582] usb 3-1: Product: syz [ 711.301571][ T3582] usb 3-1: Manufacturer: syz [ 711.306197][ T3582] usb 3-1: SerialNumber: syz [ 711.313820][ T3582] usb 3-1: config 0 descriptor?? [ 711.325390][ T3582] usb 3-1: selecting invalid altsetting 2 [ 711.345512][ T22] usb 1-1: config 0 has no interfaces? [ 711.366854][ T22] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 711.464059][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.647662][ T22] usb 1-1: Product: syz [ 711.652106][ T22] usb 1-1: Manufacturer: syz [ 711.667226][ T22] usb 1-1: SerialNumber: syz [ 711.710823][ T22] usb 1-1: config 0 descriptor?? [ 712.416821][ T3582] get_1284_register timeout [ 712.421780][ C0] usb 3-1: async_complete: urb error -104 [ 712.427617][ C0] usb 3-1: async_complete: urb error -104 [ 712.434128][ T3582] uss720: probe of 3-1:0.125 failed with error -5 [ 713.854730][ T8542] usb 3-1: USB disconnect, device number 15 [ 714.106786][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 714.337587][ T22] usb 2-1: config 0 has no interfaces? [ 714.427664][ T22] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.460537][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.511742][ T22] usb 2-1: Product: syz [ 714.516092][ T22] usb 2-1: Manufacturer: syz [ 714.530206][ T952] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 714.540809][ T22] usb 2-1: SerialNumber: syz [ 714.571013][ T22] usb 2-1: config 0 descriptor?? [ 714.807425][ T952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.845089][ T952] usb 3-1: config 0 has no interfaces? [ 714.866508][ T3582] usb 1-1: USB disconnect, device number 20 [ 714.939595][ T952] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 714.961124][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.006251][ T952] usb 3-1: Product: syz [ 715.034677][ T952] usb 3-1: Manufacturer: syz [ 715.105238][ T952] usb 3-1: SerialNumber: syz [ 715.175326][ T952] usb 3-1: config 0 descriptor?? [ 718.373872][ T952] usb 3-1: USB disconnect, device number 16 [ 718.444932][ T3582] usb 2-1: USB disconnect, device number 11 [ 718.897302][ T4299] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 719.090091][ T4299] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 719.107338][ T4299] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 719.121621][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.133838][ T4299] usb 4-1: config 0 descriptor?? [ 720.578339][ T4299] ath6kl: Failed to submit usb control message: -71 [ 720.586067][ T4299] ath6kl: unable to send the bmi data to the device: -71 [ 720.885587][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 720.885607][ T26] audit: type=1326 audit(1732823298.129:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00de580809 code=0x7ffc0000 [ 720.937035][ T4426] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 720.947582][ T4299] ath6kl: Unable to send get target info: -71 [ 720.955465][ T4299] ath6kl: Failed to init ath6kl core: -71 [ 720.990247][ T26] audit: type=1326 audit(1732823298.179:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f00de580809 code=0x7ffc0000 [ 721.013655][ T4299] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 721.035767][ T4299] usb 4-1: USB disconnect, device number 13 [ 721.064472][ T26] audit: type=1326 audit(1732823298.179:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00de580809 code=0x7ffc0000 [ 721.110532][ T26] audit: type=1326 audit(1732823298.179:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00de580809 code=0x7ffc0000 [ 721.148754][ T4426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.181024][ T4426] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 721.201582][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.542634][ T4426] usb 1-1: config 0 descriptor?? [ 724.478037][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 724.568452][T12217] device ip6gretap0 entered promiscuous mode [ 724.568632][T12217] device macvtap3 entered promiscuous mode [ 724.608409][ T4426] usbhid 1-1:0.0: can't add hid device: -71 [ 724.611878][ T4426] usbhid: probe of 1-1:0.0 failed with error -71 [ 724.624903][ T4426] usb 1-1: USB disconnect, device number 21 [ 724.638644][T12219] device ip6gretap0 left promiscuous mode [ 725.450671][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2585'. [ 725.512395][T12248] device ip6gretap0 entered promiscuous mode [ 725.533193][T12248] device macvtap2 entered promiscuous mode [ 725.552977][T12253] device ip6gretap0 left promiscuous mode [ 726.113589][T12270] CUSE: info not properly terminated [ 726.135777][T12266] device syzkaller0 entered promiscuous mode [ 726.534421][T12283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2599'. [ 729.242281][T12327] nvme_fabrics: missing parameter 'transport=%s' [ 729.250987][T12327] nvme_fabrics: missing parameter 'nqn=%s' [ 730.008568][ T3582] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 730.130745][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 730.144275][T12281] device ip6gretap0 entered promiscuous mode [ 730.151065][T12281] device macvtap4 entered promiscuous mode [ 730.172254][T12288] device ip6gretap0 left promiscuous mode [ 730.258200][ T3582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.273603][ T3582] usb 5-1: config 0 has no interfaces? [ 730.773294][ T3582] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 731.588150][ T3582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.596209][ T3582] usb 5-1: Product: syz [ 731.601312][ T3582] usb 5-1: Manufacturer: syz [ 731.605948][ T3582] usb 5-1: SerialNumber: syz [ 731.612907][ T3582] usb 5-1: config 0 descriptor?? [ 732.084517][T12373] ------------[ cut here ]------------ [ 732.090536][T12373] WARNING: CPU: 0 PID: 12373 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x162/0x190 [ 732.100856][T12373] Modules linked in: [ 732.104787][T12373] CPU: 0 PID: 12373 Comm: syz.1.2637 Not tainted 6.1.119-syzkaller #0 [ 732.112972][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 732.123078][T12373] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 732.129191][T12373] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 62 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e d8 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 732.148887][T12373] RSP: 0018:ffffc9000e8aedc0 EFLAGS: 00010283 [ 732.154997][T12373] RAX: ffffffff88dac392 RBX: 0000000000000000 RCX: 0000000000080000 [ 732.163083][T12373] RDX: ffffc90006279000 RSI: 0000000000001767 RDI: 0000000000001768 [ 732.171110][T12373] RBP: ffff8880597362d4 R08: ffffffff88dac33f R09: fffffbfff2249882 [ 732.179152][T12373] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 732.187178][T12373] R13: 180c399e74066096 R14: dffffc0000000000 R15: 0000000000000000 [ 732.195181][T12373] FS: 00007fd443b396c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 732.204177][T12373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.210815][T12373] CR2: 000000110c28a5af CR3: 0000000074596000 CR4: 00000000003506f0 [ 732.218884][T12373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 732.226904][T12373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 732.234890][T12373] Call Trace: [ 732.238232][T12373] [ 732.241189][T12373] ? __warn+0x15a/0x520 [ 732.245384][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.250940][T12373] ? report_bug+0x2af/0x500 [ 732.255493][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.261046][T12373] ? handle_bug+0x3d/0x70 [ 732.265413][T12373] ? exc_invalid_op+0x16/0x40 [ 732.270178][T12373] ? asm_exc_invalid_op+0x16/0x20 [ 732.275242][T12373] ? taprio_get_start_time+0x10f/0x190 [ 732.280878][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.286390][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.291939][T12373] taprio_change+0x4319/0x5600 [ 732.296810][T12373] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 732.302769][T12373] ? taprio_destroy+0x4a0/0x4a0 [ 732.307696][T12373] ? lockdep_init_map_type+0x9d/0x900 [ 732.313116][T12373] ? rtnetlink_rcv_msg+0x818/0xff0 [ 732.318343][T12373] ? netlink_rcv_skb+0x1cd/0x410 [ 732.323323][T12373] ? netlink_unicast+0x7d8/0x970 [ 732.328317][T12373] ? netlink_sendmsg+0xa26/0xd60 [ 732.333273][T12373] ? ____sys_sendmsg+0x5a5/0x8f0 [ 732.338254][T12373] ? __sys_sendmsg+0x2a9/0x390 [ 732.343035][T12373] ? memset+0x1f/0x40 [ 732.347058][T12373] ? fifo_init+0x41e/0x760 [ 732.351482][T12373] ? qdisc_peek_head+0x40/0x40 [ 732.356285][T12373] ? taprio_peek+0x590/0x590 [ 732.360916][T12373] qdisc_create+0x8a1/0x1220 [ 732.365532][T12373] ? qdisc_notify+0x390/0x390 [ 732.370259][T12373] ? lockdep_rtnl_is_held+0x22/0x30 [ 732.375469][T12373] tc_modify_qdisc+0xa0a/0x1d70 [ 732.380371][T12373] ? qdisc_offload_query_caps+0x170/0x170 [ 732.386130][T12373] ? qdisc_offload_query_caps+0x170/0x170 [ 732.391921][T12373] rtnetlink_rcv_msg+0x818/0xff0 [ 732.396966][T12373] ? rtnetlink_bind+0x80/0x80 [ 732.401688][T12373] ? __local_bh_enable_ip+0x164/0x1f0 [ 732.407135][T12373] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.412270][T12373] ? _local_bh_enable+0xa0/0xa0 [ 732.417165][T12373] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.422283][T12373] ? __dev_queue_xmit+0x173c/0x3d50 [ 732.427518][T12373] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.432635][T12373] ? netdev_core_pick_tx+0x320/0x320 [ 732.437956][T12373] ? ref_tracker_free+0x638/0x7d0 [ 732.442996][T12373] ? memcpy+0x3c/0x60 [ 732.447015][T12373] ? refcount_inc+0x80/0x80 [ 732.451550][T12373] ? __copy_skb_header+0x47b/0x600 [ 732.456729][T12373] netlink_rcv_skb+0x1cd/0x410 [ 732.461527][T12373] ? rtnetlink_bind+0x80/0x80 [ 732.466217][T12373] ? netlink_ack+0x1290/0x1290 [ 732.471017][T12373] ? __netlink_deliver_tap+0x73e/0x770 [ 732.476518][T12373] ? netlink_deliver_tap+0x2e/0x1b0 [ 732.481756][T12373] netlink_unicast+0x7d8/0x970 [ 732.486545][T12373] ? netlink_detachskb+0x90/0x90 [ 732.491513][T12373] ? __virt_addr_valid+0x45b/0x530 [ 732.496713][T12373] ? __phys_addr_symbol+0x2b/0x70 [ 732.501781][T12373] ? __check_object_size+0x4dd/0xa30 [ 732.507112][T12373] ? bpf_lsm_netlink_send+0x5/0x10 [ 732.512256][T12373] netlink_sendmsg+0xa26/0xd60 [ 732.517064][T12373] ? netlink_getsockopt+0x580/0x580 [ 732.522280][T12373] ? aa_sock_msg_perm+0x91/0x150 [ 732.527280][T12373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 732.532580][T12373] ? security_socket_sendmsg+0x7d/0xa0 [ 732.538069][T12373] ? netlink_getsockopt+0x580/0x580 [ 732.543288][T12373] ____sys_sendmsg+0x5a5/0x8f0 [ 732.548122][T12373] ? __sys_sendmsg_sock+0x30/0x30 [ 732.553231][T12373] __sys_sendmsg+0x2a9/0x390 [ 732.557898][T12373] ? ____sys_sendmsg+0x8f0/0x8f0 [ 732.562874][T12373] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 732.568907][T12373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 732.574899][T12373] ? lockdep_hardirqs_on+0x94/0x130 [ 732.580144][T12373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 732.586137][T12373] do_syscall_64+0x3b/0xb0 [ 732.590595][T12373] ? clear_bhb_loop+0x45/0xa0 [ 732.595284][T12373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.601213][T12373] RIP: 0033:0x7fd442d80809 [ 732.605646][T12373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.625319][T12373] RSP: 002b:00007fd443b39058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.633780][T12373] RAX: ffffffffffffffda RBX: 00007fd442f45fa0 RCX: 00007fd442d80809 [ 732.641817][T12373] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 732.649829][T12373] RBP: 00007fd442df393e R08: 0000000000000000 R09: 0000000000000000 [ 732.657854][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.665853][T12373] R13: 0000000000000000 R14: 00007fd442f45fa0 R15: 00007ffcaf453b58 [ 732.673961][T12373] [ 732.677040][T12373] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 732.684324][T12373] CPU: 0 PID: 12373 Comm: syz.1.2637 Not tainted 6.1.119-syzkaller #0 [ 732.692484][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 732.702545][T12373] Call Trace: [ 732.705838][T12373] [ 732.708772][T12373] dump_stack_lvl+0x1e3/0x2cb [ 732.713464][T12373] ? nf_tcp_handle_invalid+0x642/0x642 [ 732.718933][T12373] ? panic+0x764/0x764 [ 732.723034][T12373] ? vscnprintf+0x59/0x80 [ 732.727383][T12373] panic+0x318/0x764 [ 732.731312][T12373] ? __warn+0x169/0x520 [ 732.735470][T12373] ? memcpy_page_flushcache+0xfc/0xfc [ 732.740863][T12373] __warn+0x348/0x520 [ 732.744867][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.750420][T12373] report_bug+0x2af/0x500 [ 732.754761][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.760249][T12373] handle_bug+0x3d/0x70 [ 732.764434][T12373] exc_invalid_op+0x16/0x40 [ 732.768950][T12373] asm_exc_invalid_op+0x16/0x20 [ 732.773818][T12373] RIP: 0010:taprio_get_start_time+0x162/0x190 [ 732.779897][T12373] Code: 03 42 80 3c 30 00 74 08 48 89 ef e8 18 62 07 f9 48 89 5d 00 31 c0 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5e d8 af f8 <0f> 0b b8 f2 ff ff ff eb e3 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0b [ 732.799526][T12373] RSP: 0018:ffffc9000e8aedc0 EFLAGS: 00010283 [ 732.805595][T12373] RAX: ffffffff88dac392 RBX: 0000000000000000 RCX: 0000000000080000 [ 732.813569][T12373] RDX: ffffc90006279000 RSI: 0000000000001767 RDI: 0000000000001768 [ 732.821540][T12373] RBP: ffff8880597362d4 R08: ffffffff88dac33f R09: fffffbfff2249882 [ 732.829512][T12373] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 732.837479][T12373] R13: 180c399e74066096 R14: dffffc0000000000 R15: 0000000000000000 [ 732.845455][T12373] ? taprio_get_start_time+0x10f/0x190 [ 732.850916][T12373] ? taprio_get_start_time+0x162/0x190 [ 732.856387][T12373] taprio_change+0x4319/0x5600 [ 732.861152][T12373] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 732.867085][T12373] ? taprio_destroy+0x4a0/0x4a0 [ 732.871938][T12373] ? lockdep_init_map_type+0x9d/0x900 [ 732.877324][T12373] ? rtnetlink_rcv_msg+0x818/0xff0 [ 732.882441][T12373] ? netlink_rcv_skb+0x1cd/0x410 [ 732.887470][T12373] ? netlink_unicast+0x7d8/0x970 [ 732.892436][T12373] ? netlink_sendmsg+0xa26/0xd60 [ 732.897379][T12373] ? ____sys_sendmsg+0x5a5/0x8f0 [ 732.902340][T12373] ? __sys_sendmsg+0x2a9/0x390 [ 732.907197][T12373] ? memset+0x1f/0x40 [ 732.911179][T12373] ? fifo_init+0x41e/0x760 [ 732.915594][T12373] ? qdisc_peek_head+0x40/0x40 [ 732.920380][T12373] ? taprio_peek+0x590/0x590 [ 732.924969][T12373] qdisc_create+0x8a1/0x1220 [ 732.929572][T12373] ? qdisc_notify+0x390/0x390 [ 732.934274][T12373] ? lockdep_rtnl_is_held+0x22/0x30 [ 732.939505][T12373] tc_modify_qdisc+0xa0a/0x1d70 [ 732.944432][T12373] ? qdisc_offload_query_caps+0x170/0x170 [ 732.950189][T12373] ? qdisc_offload_query_caps+0x170/0x170 [ 732.955920][T12373] rtnetlink_rcv_msg+0x818/0xff0 [ 732.960880][T12373] ? rtnetlink_bind+0x80/0x80 [ 732.965570][T12373] ? __local_bh_enable_ip+0x164/0x1f0 [ 732.970961][T12373] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.976079][T12373] ? _local_bh_enable+0xa0/0xa0 [ 732.980949][T12373] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.986066][T12373] ? __dev_queue_xmit+0x173c/0x3d50 [ 732.991280][T12373] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.996396][T12373] ? netdev_core_pick_tx+0x320/0x320 [ 733.001687][T12373] ? ref_tracker_free+0x638/0x7d0 [ 733.006717][T12373] ? memcpy+0x3c/0x60 [ 733.010705][T12373] ? refcount_inc+0x80/0x80 [ 733.015213][T12373] ? __copy_skb_header+0x47b/0x600 [ 733.020345][T12373] netlink_rcv_skb+0x1cd/0x410 [ 733.025128][T12373] ? rtnetlink_bind+0x80/0x80 [ 733.029844][T12373] ? netlink_ack+0x1290/0x1290 [ 733.034632][T12373] ? __netlink_deliver_tap+0x73e/0x770 [ 733.040113][T12373] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.045325][T12373] netlink_unicast+0x7d8/0x970 [ 733.050106][T12373] ? netlink_detachskb+0x90/0x90 [ 733.055052][T12373] ? __virt_addr_valid+0x45b/0x530 [ 733.060195][T12373] ? __phys_addr_symbol+0x2b/0x70 [ 733.065225][T12373] ? __check_object_size+0x4dd/0xa30 [ 733.070518][T12373] ? bpf_lsm_netlink_send+0x5/0x10 [ 733.075639][T12373] netlink_sendmsg+0xa26/0xd60 [ 733.080434][T12373] ? netlink_getsockopt+0x580/0x580 [ 733.085734][T12373] ? aa_sock_msg_perm+0x91/0x150 [ 733.090686][T12373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 733.095981][T12373] ? security_socket_sendmsg+0x7d/0xa0 [ 733.101446][T12373] ? netlink_getsockopt+0x580/0x580 [ 733.106661][T12373] ____sys_sendmsg+0x5a5/0x8f0 [ 733.111448][T12373] ? __sys_sendmsg_sock+0x30/0x30 [ 733.116494][T12373] __sys_sendmsg+0x2a9/0x390 [ 733.121096][T12373] ? ____sys_sendmsg+0x8f0/0x8f0 [ 733.126094][T12373] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 733.132186][T12373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.138171][T12373] ? lockdep_hardirqs_on+0x94/0x130 [ 733.143376][T12373] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.149449][T12373] do_syscall_64+0x3b/0xb0 [ 733.153875][T12373] ? clear_bhb_loop+0x45/0xa0 [ 733.158566][T12373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.164475][T12373] RIP: 0033:0x7fd442d80809 [ 733.168893][T12373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.188508][T12373] RSP: 002b:00007fd443b39058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.196930][T12373] RAX: ffffffffffffffda RBX: 00007fd442f45fa0 RCX: 00007fd442d80809 [ 733.204908][T12373] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 733.212882][T12373] RBP: 00007fd442df393e R08: 0000000000000000 R09: 0000000000000000 [ 733.220861][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.228837][T12373] R13: 0000000000000000 R14: 00007fd442f45fa0 R15: 00007ffcaf453b58 [ 733.236831][T12373] [ 733.240213][T12373] Kernel Offset: disabled [ 733.244639][T12373] Rebooting in 86400 seconds..