last executing test programs: 3.314307267s ago: executing program 3 (id=4942): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r2, 0x1, 0xfffffffd, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x6f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 3.211396439s ago: executing program 3 (id=4946): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000700000001010007000000050005000a500445010e98338a00000009c9020073"], 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.807793734s ago: executing program 1 (id=4949): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000240)=[@rdmsr={0x66, 0x18, {0x263}}, @rdmsr={0x66, 0x18, {0x9a1}}], 0x30}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x0, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x67, &(0x7f0000000200)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x31, 0x3a, 0xfe, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x5, {0x9, 0x6, "259675", 0x432d, 0xff, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], "af"}}}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4740, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) 2.760381477s ago: executing program 3 (id=4950): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xa0179e08}) close_range(r0, 0xffffffffffffffff, 0x0) 2.664687639s ago: executing program 3 (id=4952): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) shutdown(0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 2.577744058s ago: executing program 3 (id=4953): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x2}}, 0x18) 2.457733315s ago: executing program 1 (id=4955): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x8004, 0x3, 0xffff}}, 0x80, 0x0}, 0x48c5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 2.433184918s ago: executing program 3 (id=4956): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x3) 2.280877263s ago: executing program 1 (id=4959): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x202, 0x4) sendto$inet(r0, 0x0, 0x3c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000100)="c36a6d52db1a6c7d2dbda3aa0eb8f14baf0179f5e45d6b7e24892d", 0x1b}, {&(0x7f0000000180)="3aeafd2458eef5540ba0fbe7f56151db255e884ffc7adf5dd4b3b77ec9b8dcc1aff047ec6f0dd2005bcd93c3b5973eab303266c08b28085a06fe4f762ffa00128a3d2f79ed472172a70e2095127434e5488f10e06a9b05b86c649194e843bc803030025d67c22027776805d2d5aec99cba9a8a28051988c565e0f80f1b4e5b9bb401d5375093401be554c199340ce9282358d97d7b8358a7d745eeb5b2f6317ab7b05c43625a677f8c6e04cdd55903621c3e696b62aa21", 0xb7}, {&(0x7f0000000640)="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", 0xfff}, {0x0}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.108512275s ago: executing program 0 (id=4961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 1.960063444s ago: executing program 0 (id=4963): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) shutdown(0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.908828057s ago: executing program 1 (id=4964): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, 0x0}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x0, 0xa0002f5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x67, &(0x7f0000000200)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x31, 0x3a, 0xfe, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x5, {0x9, 0x6, "259675", 0x432d, 0xff, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], "af"}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4740, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000880), 0x0, 0x60040000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.736955839s ago: executing program 0 (id=4965): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x20000004) open(0x0, 0x24a041, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x9, 0x4) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) sendto$inet(r1, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) close_range(r0, 0xffffffffffffffff, 0x0) 1.736724221s ago: executing program 2 (id=4966): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e23, @multicast1}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 1.597963127s ago: executing program 0 (id=4967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x0, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.438573328s ago: executing program 2 (id=4969): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x8004, 0x3, 0xffff}}, 0x80, 0x0}, 0x48c5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 1.360165954s ago: executing program 4 (id=4970): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) r2 = add_key$keyring(&(0x7f00000101c0), &(0x7f00000026c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x3, r2, r0, r0, 0x0) 1.260310357s ago: executing program 4 (id=4971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.226463233s ago: executing program 2 (id=4972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x3, 0x5, 0xeb}, {0x3000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x4, 0x1000]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffdfff5, 0x0, [{0x86, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x35, 0x23, 0xb, '\x00', 0xfe}, {0xf8, 0x1, 0x82, '\x00', 0x72}, {0x6, 0x1, 0x27, '\x00', 0x8}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0xce, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0xb}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x2}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0x8, 0x5, 0x9, '\x00', 0xa9}, {0x6, 0x6, 0x8}, {0xff, 0x5, 0x6, '\x00', 0xb}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x2, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x7, 0xa9, 0x1c, '\x00', 0x1}]}}) 966.488824ms ago: executing program 4 (id=4973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 846.300603ms ago: executing program 4 (id=4974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x202, 0x4) sendto$inet(r0, 0x0, 0x3c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000100)="c36a6d52db1a6c7d2dbda3aa0eb8f14baf0179f5e45d6b7e24892d", 0x1b}, {&(0x7f0000000180)="3aeafd2458eef5540ba0fbe7f56151db255e884ffc7adf5dd4b3b77ec9b8dcc1aff047ec6f0dd2005bcd93c3b5973eab303266c08b28085a06fe4f762ffa00128a3d2f79ed472172a70e2095127434e5488f10e06a9b05b86c649194e843bc803030025d67c22027776805d2d5aec99cba9a8a28051988c565e0f80f1b4e5b9bb401d5375093401be554c199340ce9282358d97d7b8358a7d745eeb5b2f6317ab7b05c43625a677f8c6e04cdd55903621c3e696b62aa21", 0xb7}, {&(0x7f0000000640)="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", 0xfff}, {&(0x7f0000001640)}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 657.43403ms ago: executing program 4 (id=4975): sched_setscheduler(0x0, 0x5, &(0x7f00000024c0)) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x1000080001}]) 556.972086ms ago: executing program 2 (id=4976): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) syz_mount_image$fuse(0x0, 0x0, 0x2004019, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xfc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00007d5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002fb}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 491.64134ms ago: executing program 0 (id=4977): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x20000004) open(0x0, 0x24a041, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f00000000c0)=0x9, 0x4) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42ddedc962"}}}}}, 0x0) sendto$inet(r1, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) close_range(r0, 0xffffffffffffffff, 0x0) 421.28926ms ago: executing program 4 (id=4978): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 331.383143ms ago: executing program 0 (id=4979): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 213.236823ms ago: executing program 1 (id=4980): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000200000004"], 0x48) syz_clone(0x82281011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) 161.679028ms ago: executing program 2 (id=4981): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x2c, 0x1, 0x8, [{@multicast2, 0x6}]}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xb, 0x100, @val=0x80}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}, 0xfffffffe}], 0x1, 0x2, 0x0) 383.821µs ago: executing program 2 (id=4982): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=4983): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000092b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000115c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) kernel console output (not intermixed with test programs): 2e [ 1483.955659][T21046] RAX: ffffffffffffffda RBX: 00007f2e4e215fa0 RCX: 00007f2e4df9c819 [ 1483.955668][T21046] RDX: 0000000000000890 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1483.955676][T21046] RBP: 00007f2e4ef0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.955683][T21046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.955690][T21046] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1483.955708][T21046] [ 1484.704287][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.713516][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.074025][T21064] futex_wake_op: syz.3.3613 tries to shift op by -1; fix this program [ 1485.136755][T21069] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1485.358494][ T9469] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1485.857686][ T9469] usb 3-1: config 1 has an invalid descriptor of length 88, skipping remainder of the config [ 1485.871276][ T9469] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1485.909517][ T9469] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 122, changing to 7 [ 1485.935796][ T9469] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8845, setting to 1024 [ 1485.968277][ T9469] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1485.994048][ T9469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.028268][ T9469] usb 3-1: Product: syz [ 1486.038324][ T9469] usb 3-1: Manufacturer: syz [ 1486.074226][ T9469] usb 3-1: SerialNumber: syz [ 1486.356770][ T9469] usb 3-1: USB disconnect, device number 127 [ 1486.439985][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.880507][T17459] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1487.773905][T21113] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1488.026193][T21117] FAULT_INJECTION: forcing a failure. [ 1488.026193][T21117] name failslab, interval 1, probability 0, space 0, times 0 [ 1488.179868][T21121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3633'. [ 1488.199958][T21119] bond0 (unregistering): Released all slaves [ 1488.303157][T21117] CPU: 0 UID: 0 PID: 21117 Comm: syz.2.3632 Tainted: G L syzkaller #0 PREEMPT(full) [ 1488.303190][T21117] Tainted: [L]=SOFTLOCKUP [ 1488.303198][T21117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1488.303215][T21117] Call Trace: [ 1488.303223][T21117] [ 1488.303230][T21117] dump_stack_lvl+0xe8/0x150 [ 1488.303253][T21117] should_fail_ex+0x412/0x560 [ 1488.303283][T21117] should_failslab+0xa8/0x100 [ 1488.303310][T21117] __kmalloc_noprof+0xe8/0x760 [ 1488.303332][T21117] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1488.303360][T21117] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1488.303384][T21117] ? tomoyo_path_number_perm+0x219/0x630 [ 1488.303400][T21117] tomoyo_path_number_perm+0x246/0x630 [ 1488.303417][T21117] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1488.303441][T21117] ? __lock_acquire+0x6b5/0x2cf0 [ 1488.303486][T21117] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1488.303530][T21117] ? __fget_files+0x2a/0x420 [ 1488.303543][T21117] ? __fget_files+0x2a/0x420 [ 1488.303553][T21117] ? __fget_files+0x3a0/0x420 [ 1488.303563][T21117] ? __fget_files+0x2a/0x420 [ 1488.303576][T21117] security_file_ioctl+0xc3/0x2a0 [ 1488.303600][T21117] __se_sys_ioctl+0x47/0x170 [ 1488.303627][T21117] do_syscall_64+0x14d/0xf80 [ 1488.303650][T21117] ? trace_irq_disable+0x3b/0x150 [ 1488.303666][T21117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.303684][T21117] ? clear_bhb_loop+0x40/0x90 [ 1488.303699][T21117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.303710][T21117] RIP: 0033:0x7f2e4df9c819 [ 1488.303724][T21117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.303734][T21117] RSP: 002b:00007f2e4ef0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.303753][T21117] RAX: ffffffffffffffda RBX: 00007f2e4e215fa0 RCX: 00007f2e4df9c819 [ 1488.303767][T21117] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1488.303779][T21117] RBP: 00007f2e4ef0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1488.303790][T21117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1488.303801][T21117] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1488.303831][T21117] [ 1488.304039][T21117] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1488.906806][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1489.785747][T21129] use of bytesused == 0 is deprecated and will be removed in the future, [ 1489.822552][T21129] use the actual size instead. [ 1490.328630][ T980] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1490.390631][T21141] macsec1: entered promiscuous mode [ 1490.399463][T21141] macsec1: entered allmulticast mode [ 1490.489377][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1490.505254][ T980] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1490.520042][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.541983][ T980] usb 2-1: Product: syz [ 1490.568214][ T980] usb 2-1: Manufacturer: syz [ 1490.608174][ T980] usb 2-1: SerialNumber: syz [ 1490.889622][ T980] usb 2-1: config 0 descriptor?? [ 1490.918452][T17459] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1490.953244][T21149] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1491.088533][T17459] usb 4-1: Using ep0 maxpacket: 16 [ 1491.096021][T17459] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1491.117753][T17459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1491.171913][T21147] bond0 (unregistering): Released all slaves [ 1491.211411][T17459] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1491.211647][ T980] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 014 [ 1491.220793][T17459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.220822][T17459] usb 4-1: Product: syz [ 1491.220838][T17459] usb 4-1: Manufacturer: syz [ 1491.220853][T17459] usb 4-1: SerialNumber: syz [ 1491.223722][T17459] usb 4-1: config 0 descriptor?? [ 1491.392808][T17459] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1491.506381][T17459] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1491.646336][T21156] kAFS: unable to lookup cell '' [ 1491.665980][T21156] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3644'. [ 1491.972808][T21158] i2c i2c-1: failure reading status [ 1491.986484][ T980] usb 2-1: USB disconnect, device number 14 [ 1492.730249][T21176] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3647'. [ 1492.845077][T21172] bond0 (unregistering): Released all slaves [ 1493.053442][T17459] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1493.257676][T17459] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1493.396516][T17459] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1493.405009][T17459] em28xx 4-1:0.0: No AC97 audio processor [ 1493.502085][T17459] usb 4-1: USB disconnect, device number 20 [ 1493.679439][T17459] em28xx 4-1:0.0: Disconnecting em28xx [ 1493.799160][T17459] em28xx 4-1:0.0: Freeing device [ 1494.430027][T21196] FAULT_INJECTION: forcing a failure. [ 1494.430027][T21196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.494722][T21196] CPU: 1 UID: 0 PID: 21196 Comm: syz.0.3652 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.494756][T21196] Tainted: [L]=SOFTLOCKUP [ 1494.494764][T21196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1494.494776][T21196] Call Trace: [ 1494.494785][T21196] [ 1494.494793][T21196] dump_stack_lvl+0xe8/0x150 [ 1494.494818][T21196] should_fail_ex+0x412/0x560 [ 1494.494839][T21196] _copy_from_user+0x2d/0xb0 [ 1494.494854][T21196] sock_do_ioctl+0x195/0x320 [ 1494.494874][T21196] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1494.494890][T21196] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1494.494915][T21196] sock_ioctl+0x5c6/0x7f0 [ 1494.494933][T21196] ? __pfx_sock_ioctl+0x10/0x10 [ 1494.494949][T21196] ? __fget_files+0x2a/0x420 [ 1494.494960][T21196] ? __fget_files+0x3a0/0x420 [ 1494.494970][T21196] ? __fget_files+0x2a/0x420 [ 1494.494982][T21196] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1494.494998][T21196] ? __pfx_sock_ioctl+0x10/0x10 [ 1494.495014][T21196] __se_sys_ioctl+0xfc/0x170 [ 1494.495030][T21196] do_syscall_64+0x14d/0xf80 [ 1494.495044][T21196] ? trace_irq_disable+0x3b/0x150 [ 1494.495062][T21196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.495074][T21196] ? clear_bhb_loop+0x40/0x90 [ 1494.495088][T21196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.495099][T21196] RIP: 0033:0x7efe8259c819 [ 1494.495113][T21196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.495124][T21196] RSP: 002b:00007efe834f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.495138][T21196] RAX: ffffffffffffffda RBX: 00007efe82815fa0 RCX: 00007efe8259c819 [ 1494.495147][T21196] RDX: 0000200000000340 RSI: 0000000000008922 RDI: 0000000000000003 [ 1494.495155][T21196] RBP: 00007efe834f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.495162][T21196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.495169][T21196] R13: 00007efe82816038 R14: 00007efe82815fa0 R15: 00007efe8293fa48 [ 1494.495187][T21196] [ 1494.992674][T21206] syzkaller0: entered promiscuous mode [ 1495.017412][T21206] syzkaller0: entered allmulticast mode [ 1495.478722][ T980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1495.678479][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1495.700938][ T980] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1495.721475][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.831632][ T980] usb 4-1: Product: syz [ 1495.849733][ T980] usb 4-1: Manufacturer: syz [ 1495.854604][ T980] usb 4-1: SerialNumber: syz [ 1495.868541][T17459] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1495.896863][ T980] usb 4-1: config 0 descriptor?? [ 1496.037611][T17459] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 1496.053854][T17459] usb 5-1: config 0 has no interface number 0 [ 1496.060867][T17459] usb 5-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1496.090053][T17459] usb 5-1: config 0 interface 107 has no altsetting 0 [ 1496.112760][T17459] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1496.146868][T17459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.161244][T17459] usb 5-1: Product: syz [ 1496.165817][T17459] usb 5-1: Manufacturer: syz [ 1496.166955][ T980] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 021 [ 1496.170796][T17459] usb 5-1: SerialNumber: syz [ 1496.248991][T17459] usb 5-1: config 0 descriptor?? [ 1497.099798][T21228] i2c i2c-1: failure reading status [ 1498.188910][T17459] usb 4-1: USB disconnect, device number 21 [ 1498.225409][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1498.564273][ T9552] usb 5-1: USB disconnect, device number 14 [ 1498.607373][T21240] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 1498.651964][T21240] bond0: entered promiscuous mode [ 1498.659034][T21240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.788513][T17459] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1498.880932][T21250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.898953][T21250] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1498.965798][T17459] usb 2-1: not running at top speed; connect to a high speed hub [ 1498.975624][T17459] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1498.986019][T17459] usb 2-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.40 [ 1499.003768][T17459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.014515][T17459] usb 2-1: Product: syz [ 1499.019815][T17459] usb 2-1: Manufacturer: 嚶䧖젝给఍让氙瀤䘓㼢ǚ淊盶瓣韀왉喣넕묊췭䀎뷼谥ꑠ䀭끉꭮舎븭烾솮둶㷣瓹觝咟◔ㆰ躬⑲旳쨢랽穃뺏㝪駱ｗ䎟绸 [ 1499.059114][T17459] usb 2-1: SerialNumber: syz [ 1499.763803][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1499.818612][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1499.883324][T21265] loop2: detected capacity change from 0 to 7 [ 1499.891719][ T6318] loop2: [ 1499.894858][ T6318] loop2: partition table partially beyond EOD, truncated [ 1499.908808][T21265] loop2: [ 1499.911854][T21265] loop2: partition table partially beyond EOD, truncated [ 1499.918206][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1500.096122][ T29] audit: type=1326 audit(1775352114.126:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.176595][T21268] netlink: 'syz.3.3670': attribute type 23 has an invalid length. [ 1500.206737][ T29] audit: type=1326 audit(1775352114.156:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.272853][ T29] audit: type=1326 audit(1775352114.196:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.323334][ T29] audit: type=1326 audit(1775352114.196:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.374709][ T29] audit: type=1326 audit(1775352114.196:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4e4539b687 code=0x7ffc0000 [ 1500.431171][ T29] audit: type=1326 audit(1775352114.196:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4e4539da8a code=0x7ffc0000 [ 1500.500992][ T29] audit: type=1326 audit(1775352114.196:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.559596][ T29] audit: type=1326 audit(1775352114.196:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.586590][ T29] audit: type=1326 audit(1775352114.196:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1500.611299][ T29] audit: type=1326 audit(1775352114.196:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21267 comm="syz.3.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1501.088617][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1501.236658][T21277] syzkaller0: entered promiscuous mode [ 1501.242567][T21277] syzkaller0: entered allmulticast mode [ 1501.269012][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 1501.279851][ T5924] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1501.298881][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.307150][ T5924] usb 4-1: Product: syz [ 1501.318525][ T5924] usb 4-1: Manufacturer: syz [ 1501.328583][ T5924] usb 4-1: SerialNumber: syz [ 1501.337668][ T5924] usb 4-1: config 0 descriptor?? [ 1501.583415][ T5924] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 022 [ 1501.738886][ T980] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1502.157907][T21287] futex_wake_op: syz.0.3676 tries to shift op by -1; fix this program [ 1502.233701][ T980] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1502.277364][ T980] usb 3-1: config 0 has no interface number 0 [ 1502.299412][ T980] usb 3-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1502.311642][T17459] usbhid 2-1:1.0: can't add hid device: -71 [ 1502.327353][T17459] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1502.356446][ T980] usb 3-1: config 0 interface 107 has no altsetting 0 [ 1502.395936][T17459] usb 2-1: USB disconnect, device number 15 [ 1502.423279][ T980] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1502.434305][T21291] i2c i2c-1: failure reading status [ 1502.445288][ T9469] usb 4-1: USB disconnect, device number 22 [ 1502.470815][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.540235][ T980] usb 3-1: Product: syz [ 1502.544944][ T980] usb 3-1: Manufacturer: syz [ 1502.555799][ T980] usb 3-1: SerialNumber: syz [ 1502.577660][ T980] usb 3-1: config 0 descriptor?? [ 1503.435111][T21307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 1505.912999][T21307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.970439][T21307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.008028][T17459] usb 3-1: USB disconnect, device number 2 [ 1506.558465][ T5918] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1506.798648][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 1506.834092][ T5918] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1506.843450][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.858945][ T5918] usb 2-1: Product: syz [ 1506.864582][ T5918] usb 2-1: Manufacturer: syz [ 1506.875491][ T5918] usb 2-1: SerialNumber: syz [ 1506.893538][ T5918] usb 2-1: config 0 descriptor?? [ 1506.902632][T21346] fuse: Bad value for 'fd' [ 1507.018893][T17459] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1507.164408][ T5918] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 016 [ 1507.338885][T17459] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1507.366584][T17459] usb 4-1: config 0 has no interface number 0 [ 1507.401589][T17459] usb 4-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1507.417808][T17459] usb 4-1: config 0 interface 107 has no altsetting 0 [ 1507.740196][T17459] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1507.760287][T21352] syzkaller0: entered promiscuous mode [ 1507.765876][T21352] syzkaller0: entered allmulticast mode [ 1507.777638][T17459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.808434][T17459] usb 4-1: Product: syz [ 1507.812820][T17459] usb 4-1: Manufacturer: syz [ 1507.827455][T17459] usb 4-1: SerialNumber: syz [ 1507.841915][T17459] usb 4-1: config 0 descriptor?? [ 1507.950448][T21354] i2c i2c-1: failure reading status [ 1507.959356][ T5918] usb 2-1: USB disconnect, device number 16 [ 1508.793385][ T5918] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1508.849384][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'. [ 1508.968012][ T5918] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 1508.977294][ T5918] usb 5-1: config 0 has no interface number 0 [ 1508.983896][ T5918] usb 5-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1508.998797][ T5918] usb 5-1: config 0 interface 107 has no altsetting 0 [ 1509.031508][ T5918] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1509.041327][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.052252][ T5918] usb 5-1: Product: syz [ 1509.056600][ T5918] usb 5-1: Manufacturer: syz [ 1509.072763][ T5918] usb 5-1: SerialNumber: syz [ 1509.120257][ T5918] usb 5-1: config 0 descriptor?? [ 1509.978202][T17459] usb 4-1: USB disconnect, device number 23 [ 1511.975820][T21366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.017685][T21366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.045491][ T42] usb 5-1: USB disconnect, device number 15 [ 1512.297503][T21389] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1512.364866][ T9469] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1512.788662][T21403] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1512.844237][T21397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1512.857597][T21397] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1513.204585][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1513.336379][T21384] kvm: kvm [21383]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1513.413772][T21402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1513.513342][T21402] bond0: (slave bond1): making interface the new active one [ 1513.533233][T21402] bond1: entered promiscuous mode [ 1513.603672][T21402] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1513.699992][ T7452] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1514.188525][ T5924] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1514.368178][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 1514.397822][T21421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1514.429789][ T5924] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1514.458471][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.466619][ T5924] usb 5-1: Product: syz [ 1514.613459][ T5924] usb 5-1: Manufacturer: syz [ 1514.645287][ T5924] usb 5-1: SerialNumber: syz [ 1514.687177][T21422] netlink: 'syz.0.3709': attribute type 10 has an invalid length. [ 1514.776875][ T5924] usb 5-1: config 0 descriptor?? [ 1514.780530][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1514.834729][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1515.031644][T17459] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1515.126377][ T5924] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 016 [ 1515.259703][ T5918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1515.314515][T17459] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1515.334911][T17459] usb 3-1: config 0 has no interface number 0 [ 1515.348809][T17459] usb 3-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1515.389124][T17459] usb 3-1: config 0 interface 107 has no altsetting 0 [ 1515.434198][T17459] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1515.460707][T17459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.501643][T17459] usb 3-1: Product: syz [ 1515.513630][T17459] usb 3-1: Manufacturer: syz [ 1515.536124][T17459] usb 3-1: SerialNumber: syz [ 1515.553782][T17459] usb 3-1: config 0 descriptor?? [ 1516.116770][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1516.598481][ T5924] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1516.771362][ T5924] usb 4-1: config 0 has an invalid interface number: 213 but max is 0 [ 1516.785069][ T5924] usb 4-1: config 0 has no interface number 0 [ 1516.791402][T17459] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1516.804838][ T5924] usb 4-1: config 0 interface 213 altsetting 101 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.822952][ T5924] usb 4-1: config 0 interface 213 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.847522][ T5924] usb 4-1: config 0 interface 213 has no altsetting 0 [ 1516.862055][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1516.878154][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.938128][ T5924] usb 4-1: config 0 descriptor?? [ 1516.949094][T17459] usb 2-1: Using ep0 maxpacket: 16 [ 1517.003720][T17459] usb 2-1: config 0 has no interfaces? [ 1517.048889][T17459] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1517.063304][T17459] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1517.080393][T17459] usb 2-1: Manufacturer: syz [ 1517.096094][T17459] usb 2-1: config 0 descriptor?? [ 1517.476842][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.490523][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.497845][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.505333][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.688555][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.797649][T21439] i2c i2c-1: failure reading status [ 1517.869452][ T42] usb 5-1: USB disconnect, device number 16 [ 1517.918423][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.935132][ T5924] logitech 0003:046D:CA04.008C: unknown main item tag 0x0 [ 1517.986500][ T5924] logitech 0003:046D:CA04.008C: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input213 [ 1518.025327][ T5924] logitech 0003:046D:CA04.008C: no inputs found [ 1518.077526][ T5924] usb 4-1: USB disconnect, device number 24 [ 1518.365907][T21462] futex_wake_op: syz.4.3717 tries to shift op by -1; fix this program [ 1518.444874][T21463] fido_id[21463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1518.572830][ T5918] usb 3-1: USB disconnect, device number 3 [ 1519.013365][T21475] xt_hashlimit: size too large, truncated to 1048576 [ 1519.043901][ T5918] usb 2-1: USB disconnect, device number 17 [ 1519.258621][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1519.358081][T21488] kAFS: unable to lookup cell '' [ 1519.384431][T21488] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1520.026315][ T9552] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1520.219136][ T9552] usb 3-1: Using ep0 maxpacket: 32 [ 1520.250109][ T9552] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1520.288993][ T9552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.297050][ T9552] usb 3-1: Product: syz [ 1520.305419][T21508] FAULT_INJECTION: forcing a failure. [ 1520.305419][T21508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.389282][ T9552] usb 3-1: Manufacturer: syz [ 1520.398108][T21508] CPU: 0 UID: 0 PID: 21508 Comm: syz.3.3732 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.398140][T21508] Tainted: [L]=SOFTLOCKUP [ 1520.398148][T21508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1520.398169][T21508] Call Trace: [ 1520.398178][T21508] [ 1520.398186][T21508] dump_stack_lvl+0xe8/0x150 [ 1520.398217][T21508] should_fail_ex+0x412/0x560 [ 1520.398251][T21508] _copy_from_iter+0x1d3/0x1670 [ 1520.398278][T21508] ? rcu_is_watching+0x15/0xb0 [ 1520.398312][T21508] ? __pfx__copy_from_iter+0x10/0x10 [ 1520.398343][T21508] ? netlink_sendmsg+0x650/0xb40 [ 1520.398361][T21508] ? skb_put+0x11b/0x210 [ 1520.398386][T21508] netlink_sendmsg+0x6c0/0xb40 [ 1520.398415][T21508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.398437][T21508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1520.398467][T21508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1520.398491][T21508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1520.398509][T21508] sock_write_iter+0x49b/0x4f0 [ 1520.398540][T21508] ? __pfx_sock_write_iter+0x10/0x10 [ 1520.398589][T21508] do_iter_readv_writev+0x619/0x8c0 [ 1520.398617][T21508] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1520.398646][T21508] ? bpf_lsm_file_permission+0x9/0x20 [ 1520.398670][T21508] ? security_file_permission+0x75/0x260 [ 1520.398697][T21508] ? rw_verify_area+0x255/0x4d0 [ 1520.398723][T21508] vfs_writev+0x33c/0x990 [ 1520.398759][T21508] ? __pfx_vfs_writev+0x10/0x10 [ 1520.398796][T21508] ? __fget_files+0x2a/0x420 [ 1520.398816][T21508] ? __fget_files+0x3a0/0x420 [ 1520.398831][T21508] ? __fget_files+0x2a/0x420 [ 1520.398858][T21508] do_writev+0x154/0x2e0 [ 1520.398887][T21508] ? __pfx_do_writev+0x10/0x10 [ 1520.398921][T21508] do_syscall_64+0x14d/0xf80 [ 1520.398947][T21508] ? trace_irq_disable+0x3b/0x150 [ 1520.398964][T21508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.398984][T21508] ? clear_bhb_loop+0x40/0x90 [ 1520.399008][T21508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.399026][T21508] RIP: 0033:0x7f4e4539c819 [ 1520.399046][T21508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.399062][T21508] RSP: 002b:00007f4e461ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1520.399084][T21508] RAX: ffffffffffffffda RBX: 00007f4e45615fa0 RCX: 00007f4e4539c819 [ 1520.399098][T21508] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 1520.399111][T21508] RBP: 00007f4e461ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.399123][T21508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1520.399134][T21508] R13: 00007f4e45616038 R14: 00007f4e45615fa0 R15: 00007f4e4573fa48 [ 1520.399175][T21508] [ 1520.408630][ T9552] usb 3-1: SerialNumber: syz [ 1520.690748][ T9552] usb 3-1: config 0 descriptor?? [ 1520.943972][ T9552] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 004 [ 1520.968481][T17459] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1520.978816][T10936] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1521.118449][T10936] usb 5-1: device descriptor read/64, error -71 [ 1521.160436][T17459] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1521.169754][T17459] usb 2-1: config 0 has no interface number 0 [ 1521.177599][T17459] usb 2-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1521.192397][T17459] usb 2-1: config 0 interface 107 has no altsetting 0 [ 1521.227090][T21521] netlink: 'syz.0.3735': attribute type 4 has an invalid length. [ 1521.254622][T17459] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1521.265939][T17459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.274725][T17459] usb 2-1: Product: syz [ 1521.279648][T17459] usb 2-1: Manufacturer: syz [ 1521.284516][T17459] usb 2-1: SerialNumber: syz [ 1521.303479][T17459] usb 2-1: config 0 descriptor?? [ 1521.368816][T10936] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1521.518973][T10936] usb 5-1: device descriptor read/64, error -71 [ 1521.629378][T10936] usb usb5-port1: attempt power cycle [ 1521.968862][T10936] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1521.989240][T10936] usb 5-1: device descriptor read/8, error -71 [ 1522.240592][T10936] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1522.281414][T10936] usb 5-1: device descriptor read/8, error -71 [ 1522.410370][T10936] usb usb5-port1: unable to enumerate USB device [ 1523.095386][ T5918] usb 2-1: USB disconnect, device number 18 [ 1523.147830][T21544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1523.171285][T21545] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1523.658580][T21526] i2c i2c-1: failure reading status [ 1523.686878][ T980] usb 3-1: USB disconnect, device number 4 [ 1523.879500][T21551] kAFS: unable to lookup cell '' [ 1523.962357][T21551] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3744'. [ 1524.043498][T21541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1524.161720][T21541] bond0: (slave bond2): Enslaving as a backup interface with an up link [ 1524.868966][ T42] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1525.095937][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 1525.132052][ T42] usb 5-1: config 1 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1525.168638][ T42] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1525.198511][T10936] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1525.207904][ T42] usb 5-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 1525.235052][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.263719][ T42] usb 5-1: Product: Э [ 1525.270766][ T42] usb 5-1: Manufacturer: 〉 [ 1525.292486][ T42] usb 5-1: SerialNumber: 墭녈덁ࡧ꬧뾐밵刮뺃㖊쮲慉襮뒾Ⅲ陝澕ㄗ漬⪢庌깗ꠞ갪칖ෙ芔䣝൹冘 [ 1525.354795][T10936] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1525.367910][T10936] usb 3-1: config 0 has no interface number 0 [ 1525.375964][T10936] usb 3-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1525.395826][T10936] usb 3-1: config 0 interface 107 has no altsetting 0 [ 1525.433081][T10936] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1525.443095][T10936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.454324][T10936] usb 3-1: Product: syz [ 1525.458954][T10936] usb 3-1: Manufacturer: syz [ 1525.463710][T10936] usb 3-1: SerialNumber: syz [ 1525.479918][T10936] usb 3-1: config 0 descriptor?? [ 1525.558556][ T5918] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1525.627243][ T42] usbhid 5-1:1.0: can't add hid device: -71 [ 1525.644661][ T42] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1525.675880][ T42] usb 5-1: USB disconnect, device number 21 [ 1525.708553][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 1525.720810][ T5918] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1525.767037][ T5918] usb 4-1: config 0 has no interface number 0 [ 1525.783619][ T5918] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.805315][ T5918] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1526.128468][ T9552] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1527.047869][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1527.058253][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.122564][ T5918] usb 4-1: config 0 descriptor?? [ 1527.191412][ T9552] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 1527.202516][ T9552] usb 2-1: config 0 has no interface number 0 [ 1527.211775][ T9552] usb 2-1: config 0 interface 107 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1527.281712][ T9552] usb 2-1: config 0 interface 107 has no altsetting 0 [ 1527.325010][ T9552] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1527.350359][ T9552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.377007][ T9552] usb 2-1: Product: syz [ 1527.396968][ T9552] usb 2-1: Manufacturer: syz [ 1527.406418][ T9552] usb 2-1: SerialNumber: syz [ 1527.418606][T17459] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1527.429114][ T9552] usb 2-1: config 0 descriptor?? [ 1527.572734][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.589330][T17459] usb 5-1: Using ep0 maxpacket: 32 [ 1527.607279][T17459] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1527.616992][T17459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.632664][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.647280][T17459] usb 5-1: Product: syz [ 1527.656968][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.686264][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.696010][T17459] usb 5-1: Manufacturer: syz [ 1527.715793][T17459] usb 5-1: SerialNumber: syz [ 1527.740715][T17459] usb 5-1: config 0 descriptor?? [ 1527.749503][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.842279][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.870504][ T5918] logitech-djreceiver 0003:046D:C537.008D: unknown main item tag 0x0 [ 1527.890248][ T5918] logitech-djreceiver 0003:046D:C537.008D: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input4 [ 1527.915617][ T5918] usb 4-1: USB disconnect, device number 25 [ 1527.975371][T17459] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 022 [ 1528.222652][T21589] fido_id[21589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1528.246916][T10936] usb 3-1: USB disconnect, device number 5 [ 1528.416309][T21595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1528.453202][T21594] FAULT_INJECTION: forcing a failure. [ 1528.453202][T21594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.507201][T21594] CPU: 1 UID: 0 PID: 21594 Comm: syz.2.3758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.507236][T21594] Tainted: [L]=SOFTLOCKUP [ 1528.507244][T21594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1528.507255][T21594] Call Trace: [ 1528.507264][T21594] [ 1528.507272][T21594] dump_stack_lvl+0xe8/0x150 [ 1528.507305][T21594] should_fail_ex+0x412/0x560 [ 1528.507340][T21594] _copy_to_user+0x31/0xb0 [ 1528.507366][T21594] simple_read_from_buffer+0xe1/0x170 [ 1528.507399][T21594] proc_fail_nth_read+0x1bb/0x230 [ 1528.507432][T21594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1528.507459][T21594] ? rw_verify_area+0x2a6/0x4d0 [ 1528.507476][T21594] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1528.507505][T21594] vfs_read+0x20c/0xa70 [ 1528.507524][T21594] ? fdget_pos+0x246/0x320 [ 1528.507547][T21594] ? __pfx___mutex_lock+0x10/0x10 [ 1528.507575][T21594] ? __pfx_vfs_read+0x10/0x10 [ 1528.507598][T21594] ? __fget_files+0x2a/0x420 [ 1528.507619][T21594] ? __fget_files+0x3a0/0x420 [ 1528.507636][T21594] ? __fget_files+0x2a/0x420 [ 1528.507662][T21594] ksys_read+0x150/0x270 [ 1528.507688][T21594] ? __pfx_ksys_read+0x10/0x10 [ 1528.507719][T21594] do_syscall_64+0x14d/0xf80 [ 1528.507742][T21594] ? trace_irq_disable+0x3b/0x150 [ 1528.507759][T21594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.507777][T21594] ? clear_bhb_loop+0x40/0x90 [ 1528.507798][T21594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.507816][T21594] RIP: 0033:0x7f2e4df5d04e [ 1528.507834][T21594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1528.507847][T21594] RSP: 002b:00007f2e4ef0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1528.507865][T21594] RAX: ffffffffffffffda RBX: 00007f2e4ef0e6c0 RCX: 00007f2e4df5d04e [ 1528.507891][T21594] RDX: 000000000000000f RSI: 00007f2e4ef0e0a0 RDI: 0000000000000004 [ 1528.507908][T21594] RBP: 00007f2e4ef0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.507918][T21594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.507928][T21594] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1528.507959][T21594] [ 1528.868619][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1529.373969][T21607] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1529.531335][T10936] usb 2-1: USB disconnect, device number 19 [ 1529.830973][T21605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1529.844789][T21605] bond0: (slave bond5): Enslaving as an active interface with a down link [ 1530.184877][T21619] kAFS: unable to lookup cell '' [ 1530.217904][T21619] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1531.105098][T21599] i2c i2c-1: failure reading status [ 1531.161768][T17459] usb 5-1: USB disconnect, device number 22 [ 1531.227569][T21625] binder: 21622:21625 ioctl 4018620d 0 returned -22 [ 1531.395944][T21631] binder: 21626:21631 ioctl 4018620d 0 returned -22 [ 1531.504001][T21634] binder: 21626:21634 ioctl c0306201 0 returned -14 [ 1531.611515][T21635] binder: 21622:21635 ioctl c0306201 0 returned -14 [ 1533.244637][T21641] syzkaller0: entered promiscuous mode [ 1533.250467][T21641] syzkaller0: entered allmulticast mode [ 1533.745063][T21635] syz.1.3767 (21635): drop_caches: 2 [ 1534.077321][T21654] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1534.405017][T21634] syz.2.3768 (21634): drop_caches: 2 [ 1534.470472][T21662] syzkaller1: entered promiscuous mode [ 1534.476233][T21662] syzkaller1: entered allmulticast mode [ 1534.485888][T21662] xt_l2tp: invalid flags combination: 8 [ 1534.887757][T21673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1535.968411][T21689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1536.191106][T21698] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1536.802549][T21707] FAULT_INJECTION: forcing a failure. [ 1536.802549][T21707] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.848686][T21707] CPU: 0 UID: 0 PID: 21707 Comm: syz.2.3792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1536.848721][T21707] Tainted: [L]=SOFTLOCKUP [ 1536.848726][T21707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1536.848733][T21707] Call Trace: [ 1536.848739][T21707] [ 1536.848745][T21707] dump_stack_lvl+0xe8/0x150 [ 1536.848770][T21707] should_fail_ex+0x412/0x560 [ 1536.848792][T21707] should_failslab+0xa8/0x100 [ 1536.848809][T21707] __kmalloc_noprof+0xe8/0x760 [ 1536.848824][T21707] ? tomoyo_encode+0x28b/0x550 [ 1536.848840][T21707] tomoyo_encode+0x28b/0x550 [ 1536.848855][T21707] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1536.848874][T21707] ? tomoyo_path_number_perm+0x219/0x630 [ 1536.848890][T21707] tomoyo_path_number_perm+0x246/0x630 [ 1536.848907][T21707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1536.848924][T21707] ? __lock_acquire+0x6b5/0x2cf0 [ 1536.848946][T21707] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1536.848979][T21707] ? __fget_files+0x2a/0x420 [ 1536.848992][T21707] ? __fget_files+0x2a/0x420 [ 1536.849004][T21707] ? __fget_files+0x3a0/0x420 [ 1536.849023][T21707] ? __fget_files+0x2a/0x420 [ 1536.849035][T21707] security_file_ioctl+0xc3/0x2a0 [ 1536.849053][T21707] __se_sys_ioctl+0x47/0x170 [ 1536.849069][T21707] do_syscall_64+0x14d/0xf80 [ 1536.849085][T21707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.849096][T21707] ? clear_bhb_loop+0x40/0x90 [ 1536.849111][T21707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.849122][T21707] RIP: 0033:0x7f2e4df9c819 [ 1536.849135][T21707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.849145][T21707] RSP: 002b:00007f2e4ef0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1536.849159][T21707] RAX: ffffffffffffffda RBX: 00007f2e4e215fa0 RCX: 00007f2e4df9c819 [ 1536.849169][T21707] RDX: 0000000000000000 RSI: 0000000040047459 RDI: 0000000000000003 [ 1536.849181][T21707] RBP: 00007f2e4ef0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.849192][T21707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.849203][T21707] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1536.849232][T21707] [ 1536.849353][T21707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1537.391889][T21709] syzkaller0: entered promiscuous mode [ 1537.398029][T21709] syzkaller0: entered allmulticast mode [ 1537.971546][T21718] batadv_slave_1: entered promiscuous mode [ 1537.977922][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 1537.977936][ T29] audit: type=1326 audit(1775352151.996:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.051888][ T29] audit: type=1326 audit(1775352151.996:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.148581][ T29] audit: type=1326 audit(1775352151.996:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.217671][T21723] netlink: 'syz.2.3798': attribute type 10 has an invalid length. [ 1538.259922][ T29] audit: type=1326 audit(1775352151.996:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.308513][ T29] audit: type=1326 audit(1775352151.996:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.372083][ T29] audit: type=1326 audit(1775352151.996:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.488573][ T29] audit: type=1326 audit(1775352151.996:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.528609][ T29] audit: type=1326 audit(1775352151.996:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.733410][ T29] audit: type=1326 audit(1775352152.046:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.809379][T21735] kAFS: unable to lookup cell '' [ 1538.828954][ T29] audit: type=1326 audit(1775352152.066:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21717 comm="syz.4.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed3f9c819 code=0x7ffc0000 [ 1538.888762][T10936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1538.917571][T21735] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3799'. [ 1538.959966][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3801'. [ 1539.125637][T21733] kvm: kvm [21731]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1539.262411][T10936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1539.293668][T10936] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1539.331384][T10936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1539.371132][T10936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.403967][T21721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1539.483202][T10936] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1539.647379][T21721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.657675][T21721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.454378][ T42] usb 3-1: USB disconnect, device number 6 [ 1543.231586][T21830] netlink: 'syz.0.3836': attribute type 10 has an invalid length. [ 1543.296755][T21831] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3835'. [ 1543.359619][T21828] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1543.403289][T21828] bond0: (slave bond6): Enslaving as an active interface with a down link [ 1543.623864][T21838] netlink: 'syz.3.3838': attribute type 10 has an invalid length. [ 1543.792756][T21843] kAFS: unable to lookup cell '' [ 1543.865840][T21843] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3839'. [ 1543.909290][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1543.992033][T17459] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1544.115881][ T42] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1544.127505][ T42] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1544.241092][ T42] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1544.250519][T17459] usb 2-1: Using ep0 maxpacket: 32 [ 1544.268711][T17459] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1544.277697][T17459] usb 2-1: config 0 has no interface number 0 [ 1544.284061][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.296890][T17459] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1544.325359][T21838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1544.353097][T17459] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1544.371232][ T42] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1544.394702][T17459] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1544.405600][T17459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.426296][T17459] usb 2-1: Product: syz [ 1544.461403][T17459] usb 2-1: Manufacturer: syz [ 1544.514309][T17459] usb 2-1: SerialNumber: syz [ 1544.538201][T17459] usb 2-1: config 0 descriptor?? [ 1544.617579][T21838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.629036][T21838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.005988][T17459] radio-si470x 2-1:0.35: DeviceID=0x0042 ChipID=0x0000 [ 1545.017010][T17459] radio-si470x 2-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1545.526421][T21846] FAULT_INJECTION: forcing a failure. [ 1545.526421][T21846] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.550866][T21846] CPU: 0 UID: 0 PID: 21846 Comm: syz.2.3840 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.550900][T21846] Tainted: [L]=SOFTLOCKUP [ 1545.550908][T21846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1545.550920][T21846] Call Trace: [ 1545.550928][T21846] [ 1545.550938][T21846] dump_stack_lvl+0xe8/0x150 [ 1545.550971][T21846] should_fail_ex+0x412/0x560 [ 1545.551007][T21846] should_failslab+0xa8/0x100 [ 1545.551046][T21846] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1545.551070][T21846] ? __alloc_skb+0x186/0x7d0 [ 1545.551092][T21846] ? __alloc_skb+0x1d0/0x7d0 [ 1545.551110][T21846] ? __local_bh_enable_ip+0xd0/0x130 [ 1545.551146][T21846] __alloc_skb+0x1d0/0x7d0 [ 1545.551174][T21846] netlink_sendmsg+0x5d4/0xb40 [ 1545.551206][T21846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.551229][T21846] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1545.551261][T21846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1545.551288][T21846] ____sys_sendmsg+0x972/0x9f0 [ 1545.551322][T21846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1545.551356][T21846] ? import_iovec+0x73/0xa0 [ 1545.551382][T21846] ___sys_sendmsg+0x2a5/0x360 [ 1545.551412][T21846] ? __pfx____sys_sendmsg+0x10/0x10 [ 1545.551472][T21846] ? __fget_files+0x2a/0x420 [ 1545.551490][T21846] ? __fget_files+0x3a0/0x420 [ 1545.551517][T21846] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1545.551554][T21846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1545.551590][T21846] ? __pfx_ksys_write+0x10/0x10 [ 1545.551625][T21846] do_syscall_64+0x14d/0xf80 [ 1545.551650][T21846] ? trace_irq_disable+0x3b/0x150 [ 1545.551666][T21846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.551686][T21846] ? clear_bhb_loop+0x40/0x90 [ 1545.551711][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.551730][T21846] RIP: 0033:0x7f2e4df9c819 [ 1545.551751][T21846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.551768][T21846] RSP: 002b:00007f2e4ef0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.551790][T21846] RAX: ffffffffffffffda RBX: 00007f2e4e215fa0 RCX: 00007f2e4df9c819 [ 1545.551803][T21846] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1545.551815][T21846] RBP: 00007f2e4ef0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.551827][T21846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.551840][T21846] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1545.551872][T21846] [ 1545.802784][T17459] radio-si470x 2-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 1545.812688][T17459] radio-si470x 2-1:0.35: si470x_get_scratch: si470x_get_report returned -110 [ 1545.823361][T17459] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 1545.858875][T17459] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1546.155649][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.162536][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.296540][ T5918] usb 2-1: USB disconnect, device number 20 [ 1546.563976][T21866] netlink: 14632 bytes leftover after parsing attributes in process `syz.2.3849'. [ 1546.573745][T10936] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1546.612257][T17459] usb 4-1: USB disconnect, device number 26 [ 1546.689064][ T5918] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1546.740950][T10936] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1546.754659][T10936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1546.778961][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1546.813483][T10936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1546.824336][T10936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1546.838948][T10936] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1546.848148][T10936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.863849][T10936] usb 5-1: config 0 descriptor?? [ 1546.888622][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 1546.944706][T21877] netlink: 'syz.2.3852': attribute type 1 has an invalid length. [ 1547.015785][ T5918] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1547.024228][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.037453][ T5918] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1547.077527][ T5918] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1547.097122][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.111511][ T5918] usb 2-1: Product: syz [ 1547.121054][ T5918] usb 2-1: Manufacturer: syz [ 1547.126558][ T5918] usb 2-1: SerialNumber: syz [ 1547.165797][ T5918] usb 2-1: config 0 descriptor?? [ 1547.329158][T10936] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1547.403769][ T42] usb 2-1: USB disconnect, device number 21 [ 1547.706638][T21891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3857'. [ 1548.148635][ T5918] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1548.314109][ T5918] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1548.324063][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.375651][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1548.442220][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1548.505922][ T5918] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1548.506517][T21906] binder: 21905:21906 ioctl c018620c 200000000000 returned -22 [ 1548.581786][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1548.619574][ T5918] usb 4-1: Product: syz [ 1548.626098][ T5918] usb 4-1: Manufacturer: syz [ 1548.797288][ T5918] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1549.032758][T21893] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 1549.220363][ T42] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1549.249354][ T9552] usb 4-1: USB disconnect, device number 27 [ 1549.358471][ T42] usb 2-1: device descriptor read/64, error -71 [ 1549.628661][ T42] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1549.798542][ T42] usb 2-1: device descriptor read/64, error -71 [ 1549.910771][ T42] usb usb2-port1: attempt power cycle [ 1550.048653][ T5918] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 1550.066466][ T5918] usb 5-1: device reset changed ep0 maxpacket size! [ 1550.087800][T17459] usb 5-1: USB disconnect, device number 23 [ 1550.250111][T17459] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1550.258448][ T42] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1550.289273][ T42] usb 2-1: device descriptor read/8, error -71 [ 1550.418497][T17459] usb 5-1: Using ep0 maxpacket: 8 [ 1550.435419][T17459] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1550.446525][T17459] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.464348][T17459] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1550.481402][T17459] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1550.490828][T17459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.521845][T17459] usb 5-1: Product: syz [ 1550.540646][T17459] usb 5-1: Manufacturer: syz [ 1550.545432][ T42] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1550.571094][T17459] usb 5-1: SerialNumber: syz [ 1550.580814][T17459] usb 5-1: config 0 descriptor?? [ 1550.589393][ T42] usb 2-1: device descriptor read/8, error -71 [ 1550.709479][ T42] usb usb2-port1: unable to enumerate USB device [ 1550.808793][T17459] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1550.838047][ T42] usb 5-1: USB disconnect, device number 24 [ 1550.968707][T17459] usb 3-1: Using ep0 maxpacket: 16 [ 1550.981267][T17459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.002668][T17459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1551.014398][T17459] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1551.035067][T17459] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1551.047704][T17459] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1551.065616][T17459] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1551.075931][T17459] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1551.085505][T17459] usb 3-1: Manufacturer: syz [ 1551.096149][T17459] usb 3-1: config 0 descriptor?? [ 1551.398550][T17459] rc_core: IR keymap rc-hauppauge not found [ 1551.404770][T17459] Registered IR keymap rc-empty [ 1551.419041][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.449314][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.459786][T21964] syz.4.3886 (21964): attempted to duplicate a private mapping with mremap. This is not supported. [ 1551.494982][T17459] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1551.531283][T17459] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input150 [ 1551.568015][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.629211][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.649502][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.668786][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.688711][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.708804][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.728902][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.749473][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.768529][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.808987][T17459] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1551.831975][T17459] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1551.841775][T17459] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1551.847166][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1551.857192][T17459] usb 3-1: USB disconnect, device number 7 [ 1552.066277][T21985] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1552.468458][T17459] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1552.658699][T17459] usb 2-1: Using ep0 maxpacket: 8 [ 1552.740752][T17459] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1552.759300][T22005] netlink: 'syz.2.3897': attribute type 10 has an invalid length. [ 1552.767657][T17459] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.802597][T17459] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1552.818843][T17459] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1552.818865][T17459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.818878][T17459] usb 2-1: Product: syz [ 1552.818887][T17459] usb 2-1: Manufacturer: syz [ 1552.818897][T17459] usb 2-1: SerialNumber: syz [ 1552.821691][T17459] usb 2-1: config 0 descriptor?? [ 1553.142073][ T9552] usb 2-1: USB disconnect, device number 26 [ 1553.198483][T17459] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1553.465714][T17459] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1553.479905][T17459] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1553.496978][T17459] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1553.513166][T17459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.536656][T22005] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1553.556175][T17459] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1553.835592][T22005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.864540][T22005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.005118][ T9552] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1554.027796][T22019] fuse: Bad value for 'fd' [ 1554.089430][T22020] kAFS: unable to lookup cell '' [ 1554.134507][T22020] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3901'. [ 1554.211446][ T9552] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1554.220855][ T9552] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1554.241749][ T9552] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1554.271133][ T9552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.293551][ T9552] usb 4-1: Product: syz [ 1554.298135][ T9552] usb 4-1: Manufacturer: syz [ 1554.308825][ T9552] usb 4-1: SerialNumber: syz [ 1554.326829][ T9552] usb 4-1: config 0 descriptor?? [ 1555.004078][T22013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.017575][T22028] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1555.030356][T22013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.046930][ T9552] mos7840 4-1:0.0: required endpoints missing [ 1555.057754][ T9552] usb 4-1: USB disconnect, device number 28 [ 1555.750216][T22045] binder: 22037:22045 ioctl 4018620d 0 returned -22 [ 1555.833358][T22048] binder: 22037:22048 ioctl c0306201 0 returned -14 [ 1555.951266][ T9552] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1555.985630][T22051] binder: 22042:22051 ioctl 4018620d 0 returned -22 [ 1556.042854][ T5924] usb 3-1: USB disconnect, device number 8 [ 1556.177274][ T9552] usb 5-1: Using ep0 maxpacket: 32 [ 1556.189719][T22055] binder: 22042:22055 ioctl c0306201 0 returned -14 [ 1556.225065][ T9552] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1556.245550][ T9552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.270494][ T9552] usb 5-1: Product: syz [ 1556.279910][ T9552] usb 5-1: Manufacturer: syz [ 1556.284704][ T9552] usb 5-1: SerialNumber: syz [ 1556.321041][ T9552] usb 5-1: config 0 descriptor?? [ 1556.367462][T22057] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1556.606442][ T9552] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 025 [ 1556.863617][T22040] i2c i2c-1: failure reading data [ 1557.258857][T22074] syzkaller0: entered promiscuous mode [ 1557.265418][T22074] syzkaller0: entered allmulticast mode [ 1557.344339][T22076] kAFS: unable to lookup cell '' [ 1557.365240][T22076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3919'. [ 1558.079951][T22082] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 1558.340788][T22055] syz.3.3911 (22055): drop_caches: 2 [ 1558.723328][ T5918] usb 5-1: USB disconnect, device number 25 [ 1559.136540][T22090] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1559.204050][T22093] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1559.414355][T22086] bond0 (unregistering): Released all slaves [ 1562.617160][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3937'. [ 1562.888036][T22137] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20001 [ 1563.748461][ T5924] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1563.912754][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 1563.932268][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1563.960298][ T5924] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1563.973796][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.985663][ T5924] usb 4-1: Product: syz [ 1563.995260][ T5924] usb 4-1: Manufacturer: syz [ 1564.001351][ T5924] usb 4-1: SerialNumber: syz [ 1564.002656][ T5840] Bluetooth: hci5: Invalid handle: 0x8e5a > 0x0eff [ 1564.009855][ T5924] usb 4-1: config 0 descriptor?? [ 1564.054265][ T5924] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1564.091999][ T5924] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1564.270325][T22156] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3948'. [ 1564.479149][T22160] input: syz0 as /devices/virtual/input/input151 [ 1564.640379][ T5924] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1564.730935][T22168] netlink: 'syz.4.3954': attribute type 1 has an invalid length. [ 1565.064926][ T5924] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1565.085197][ T5924] em28xx 4-1:0.0: board has no eeprom [ 1565.099279][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1565.099300][ T29] audit: type=1804 audit(1775352179.126:458): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3961" name="/newroot/226/file0" dev="tmpfs" ino=1168 res=1 errno=0 [ 1565.307194][T22196] bond0: option downdelay: invalid value (18446744073709551615) [ 1565.315347][T22196] bond0: option downdelay: allowed values 0 - 2147483647 [ 1565.324460][T22196] bond0 (unregistering): Released all slaves [ 1565.388809][T14856] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1565.398532][ T5924] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1565.406163][T22202] loop5: detected capacity change from 0 to 7 [ 1565.406744][ T5924] em28xx 4-1:0.0: dvb set to bulk mode. [ 1565.420170][T22202] Dev loop5: unable to read RDB block 7 [ 1565.427909][T22202] loop5: unable to read partition table [ 1565.434485][ T9552] em28xx 4-1:0.0: Binding DVB extension [ 1565.435057][T22202] loop5: partition table beyond EOD, truncated [ 1565.465895][T22202] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1565.473279][ T5924] usb 4-1: USB disconnect, device number 29 [ 1565.484567][ T5924] em28xx 4-1:0.0: Disconnecting em28xx [ 1565.509360][T10936] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 1565.540149][T14856] usb 5-1: Using ep0 maxpacket: 32 [ 1565.571125][T14856] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1565.595196][T14856] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1565.613235][T14856] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1565.613998][ T9552] em28xx 4-1:0.0: Registering input extension [ 1565.630140][ T5924] em28xx 4-1:0.0: Closing input extension [ 1565.642717][T14856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1565.653412][T14856] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1565.658466][ T5924] em28xx 4-1:0.0: Freeing device [ 1565.673969][T14856] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1565.706329][T10936] usb 3-1: config 0 has no interfaces? [ 1565.715070][T22207] pim6reg: entered allmulticast mode [ 1565.721772][T14856] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1565.735821][T10936] usb 3-1: config 0 has no interfaces? [ 1565.745257][T10936] usb 3-1: config 0 has no interfaces? [ 1565.753842][T14856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.777846][T10936] usb 3-1: string descriptor 0 read error: -22 [ 1565.785066][T10936] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1565.795724][T14856] usb 5-1: config 0 descriptor?? [ 1565.808858][T10936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.834566][T10936] usb 3-1: config 0 descriptor?? [ 1566.056799][T14856] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1566.191311][T22222] binder_alloc: 22221: pid 22221 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1566.204178][T22222] binder_alloc: 22221: pid 22221 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1566.260037][T22193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.278557][T22193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.291550][T14856] usb 5-1: USB disconnect, device number 26 [ 1566.307824][T14856] usblp0: removed [ 1566.332620][T10936] usb 3-1: USB disconnect, device number 9 [ 1566.962948][T22230] syzkaller0: entered promiscuous mode [ 1566.968954][T22230] syzkaller0: entered allmulticast mode [ 1567.201180][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 1567.955449][T22264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1568.507659][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1568.802852][T22300] syzkaller0: entered promiscuous mode [ 1568.831608][T22300] syzkaller0: entered allmulticast mode [ 1572.797399][T22393] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1574.401005][T22465] netlink: 'syz.3.4082': attribute type 1 has an invalid length. [ 1574.508670][ T29] audit: type=1326 audit(1775352188.526:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1574.536019][T22465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1574.605971][T22468] bond3: (slave ip6gretap1): making interface the new active one [ 1574.616389][ T29] audit: type=1326 audit(1775352188.526:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1574.649591][T22468] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1574.660809][ T29] audit: type=1326 audit(1775352188.526:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1574.742962][ T29] audit: type=1326 audit(1775352188.526:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1574.827271][ T29] audit: type=1326 audit(1775352188.526:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1574.901906][ T29] audit: type=1326 audit(1775352188.526:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1574.989197][ T29] audit: type=1326 audit(1775352188.526:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1575.085600][ T29] audit: type=1326 audit(1775352188.526:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1575.166349][ T29] audit: type=1326 audit(1775352188.526:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22470 comm="syz.2.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2e4df9c819 code=0x7ffc0000 [ 1575.883060][T22525] input: syz0 as /devices/virtual/input/input153 [ 1577.115739][T22558] input: syz0 as /devices/virtual/input/input154 [ 1578.171850][T22599] input: syz0 as /devices/virtual/input/input155 [ 1580.559134][T22681] syzkaller1: entered promiscuous mode [ 1580.575148][T22681] syzkaller1: entered allmulticast mode [ 1580.719474][T22689] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1581.980945][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1581.989340][ T9469] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1582.159244][ T9469] usb 2-1: Using ep0 maxpacket: 8 [ 1582.175469][ T9469] usb 2-1: config 127 has an invalid interface number: 92 but max is 0 [ 1582.188928][ T9469] usb 2-1: config 127 has no interface number 0 [ 1582.196198][ T9469] usb 2-1: config 127 interface 92 altsetting 8 endpoint 0xF has an invalid bInterval 20, changing to 8 [ 1582.219479][ T9469] usb 2-1: config 127 interface 92 has no altsetting 0 [ 1582.231037][ T9469] usb 2-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice=17.b9 [ 1582.240787][ T9469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.249503][ T9469] usb 2-1: Product: syz [ 1582.254291][ T9469] usb 2-1: Manufacturer: syz [ 1582.261913][ T9469] usb 2-1: SerialNumber: syz [ 1582.498109][ T9469] ums-realtek 2-1:127.92: USB Mass Storage device detected [ 1582.521332][ T9552] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1582.604679][ T9469] usb 2-1: USB disconnect, device number 27 [ 1582.750477][ T9552] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1582.759615][ T9552] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1582.779152][ T9552] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1582.789397][ T9552] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1582.801489][ T9552] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1582.813015][ T9552] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1582.826305][ T9552] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1582.836585][ T9552] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1582.845288][ T9552] usb 5-1: Product: syz [ 1582.849698][ T9552] usb 5-1: Manufacturer: syz [ 1582.870425][T22744] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1582.881481][ T9552] cdc_wdm 5-1:1.0: skipping garbage [ 1582.886756][ T9552] cdc_wdm 5-1:1.0: skipping garbage [ 1582.901385][ T9552] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1582.907499][ T9552] cdc_wdm 5-1:1.0: Unknown control protocol [ 1583.111532][ C1] wdm_int_callback: 373 callbacks suppressed [ 1583.111557][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1583.124288][ C1] wdm_int_callback: 373 callbacks suppressed [ 1583.124308][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1583.136829][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1583.143721][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1583.151172][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1583.165324][ T9552] usb 5-1: USB disconnect, device number 27 [ 1583.568421][ T42] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1583.721391][ T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1583.738844][ T42] usb 4-1: config 0 has no interface number 0 [ 1583.754870][ T42] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1583.765788][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.774424][ T42] usb 4-1: Product: syz [ 1583.779611][ T42] usb 4-1: Manufacturer: syz [ 1583.788617][ T42] usb 4-1: SerialNumber: syz [ 1583.804842][ T42] usb 4-1: config 0 descriptor?? [ 1583.819045][ T42] usb 4-1: selecting invalid altsetting 1 [ 1583.836238][ T42] dvb_ttusb_budget: ttusb_init_controller: error [ 1583.843257][ T42] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1584.013543][ T42] DVB: Unable to find symbol stv0299_attach() [ 1584.101392][ T42] DVB: Unable to find symbol tda8083_attach() [ 1584.113047][ T42] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1584.169931][ T42] usb 4-1: USB disconnect, device number 30 [ 1584.688748][T22793] netlink: 'syz.2.4210': attribute type 2 has an invalid length. [ 1584.953910][T22818] syzkaller1: entered promiscuous mode [ 1584.986945][T22818] syzkaller1: entered allmulticast mode [ 1585.208446][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1585.378385][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 1585.401788][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.447183][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1585.474607][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1585.492512][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.511606][ T5924] usb 3-1: Product: syz [ 1585.515838][ T5924] usb 3-1: Manufacturer: syz [ 1585.522879][ T5924] usb 3-1: SerialNumber: syz [ 1585.765422][ T5924] usb 3-1: 0:2 : does not exist [ 1585.795229][ T5924] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1585.945561][ T5924] usb 3-1: USB disconnect, device number 10 [ 1586.046482][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.589473][ T9469] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1587.768543][ T9469] usb 4-1: Using ep0 maxpacket: 8 [ 1587.793347][ T9469] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1587.814794][ T9469] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1587.826235][ T9469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.835358][ T9469] usb 4-1: Product: syz [ 1587.840716][ T9469] usb 4-1: Manufacturer: syz [ 1587.845572][ T9469] usb 4-1: SerialNumber: syz [ 1587.859682][ T9469] usb 4-1: config 0 descriptor?? [ 1587.887449][ T9469] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1587.911412][ T9469] usb 4-1: setting power ON [ 1587.916090][ T9469] dvb-usb: bulk message failed: -22 (2/0) [ 1587.960968][ T9469] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1588.008084][ T9469] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1588.018162][ T9469] usb 4-1: media controller created [ 1588.050392][ T9469] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1588.071834][T22907] dvb-usb: bulk message failed: -22 (3/0) [ 1588.077637][T22907] dvb-usb: bulk message failed: -22 (3/0) [ 1588.090253][T22907] dvb-usb: bulk message failed: -22 (4/0) [ 1588.096052][T22907] cxusb: i2c read failed [ 1588.118750][ T9469] usb 4-1: selecting invalid altsetting 6 [ 1588.135183][ T9469] usb 4-1: digital interface selection failed (-22) [ 1588.151378][ T9469] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1588.179372][ T9469] usb 4-1: setting power OFF [ 1588.184463][ T9469] dvb-usb: bulk message failed: -22 (2/0) [ 1588.214811][ T9469] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1588.244987][ T9469] (NULL device *): no alternate interface [ 1588.422223][ T9469] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1588.483481][ T9469] usb 4-1: USB disconnect, device number 31 [ 1589.668417][ T9469] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1589.778345][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4282'. [ 1589.839158][ T9469] usb 3-1: Using ep0 maxpacket: 32 [ 1589.846977][ T9469] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 1589.859718][ T9469] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.922237][ T9469] usb 3-1: config 0 has no interface number 0 [ 1589.941592][ T9469] usb 3-1: config 0 interface 74 altsetting 2 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 1589.989433][ T9469] usb 3-1: config 0 interface 74 has no altsetting 0 [ 1590.020688][ T9469] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 1590.058602][ T9469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.067023][ T9469] usb 3-1: Product: syz [ 1590.085539][ T9469] usb 3-1: Manufacturer: syz [ 1590.091654][ T9469] usb 3-1: SerialNumber: syz [ 1590.124498][ T9469] usb 3-1: config 0 descriptor?? [ 1590.139552][ T9469] em28xx 3-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 1590.161449][ T9469] em28xx 3-1:0.74: Video interface 74 found: isoc [ 1590.403448][ T9469] em28xx 3-1:0.74: unknown em28xx chip ID (0) [ 1590.508743][ T9469] em28xx 3-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 1590.530014][ T9469] em28xx 3-1:0.74: board has no eeprom [ 1590.552969][ T9469] em28xx 3-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 1590.573254][ T9469] em28xx 3-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 1590.587080][ T9469] em28xx 3-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 1590.601282][ T9469] em28xx 3-1:0.74: couldn't read from i2c device 0xba: error -5 [ 1590.611541][ T9469] em28xx 3-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 1590.618424][ T9552] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1590.621598][ T9469] em28xx 3-1:0.74: couldn't read from i2c device 0x90: error -5 [ 1590.638194][ T9469] em28xx 3-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 1590.647651][T22984] tipc: Started in network mode [ 1590.652992][T22984] tipc: Node identity 4, cluster identity 4711 [ 1590.660027][T22984] tipc: Node number set to 4 [ 1590.667355][ T9469] em28xx 3-1:0.74: couldn't read from i2c device 0x42: error -5 [ 1590.686580][ T9469] em28xx 3-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 1590.699000][ T9469] em28xx 3-1:0.74: couldn't read from i2c device 0x60: error -5 [ 1590.717080][ T9469] em28xx 3-1:0.74: No sensor detected [ 1590.789354][ T9552] usb 5-1: Using ep0 maxpacket: 32 [ 1590.798472][ T9469] em28xx 3-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 1590.800077][ T9552] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1590.824523][ T9469] em28xx 3-1:0.74: Currently, V4L2 is not supported on this model [ 1590.845715][ T9552] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1590.853101][T14856] em28xx 3-1:0.74: Registering snapshot button... [ 1590.889032][ T9469] usb 3-1: USB disconnect, device number 11 [ 1590.907416][ T9552] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1590.915124][T14856] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/input/input156 [ 1590.937411][ T9552] usb 5-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1590.955042][ T9552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.966039][ T9469] em28xx 3-1:0.74: Disconnecting em28xx [ 1590.987417][T14856] em28xx 3-1:0.74: Remote control support is not available for this card. [ 1591.004676][ T9552] usb 5-1: config 0 descriptor?? [ 1591.010932][ T9469] em28xx 3-1:0.74: Closing input extension [ 1591.023368][ T9469] em28xx 3-1:0.74: Deregistering snapshot button [ 1591.028516][T22977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1591.206942][ T9469] em28xx 3-1:0.74: Freeing device [ 1591.662071][ T9552] usb 5-1: string descriptor 0 read error: -71 [ 1591.670105][ T9552] uclogic 0003:5543:0081.008F: failed retrieving string descriptor #200: -71 [ 1591.687845][ T9552] uclogic 0003:5543:0081.008F: failed retrieving pen parameters: -71 [ 1591.697065][ T9552] uclogic 0003:5543:0081.008F: failed probing pen v2 parameters: -71 [ 1591.707065][ T9552] uclogic 0003:5543:0081.008F: failed probing parameters: -71 [ 1591.715285][ T9552] uclogic 0003:5543:0081.008F: probe with driver uclogic failed with error -71 [ 1591.750381][ T9552] usb 5-1: USB disconnect, device number 28 [ 1592.468737][ T9469] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1592.648729][ T9469] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1592.668512][ T9469] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1592.688060][ T9469] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1592.697772][ T9469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.918031][ T9469] usb 2-1: usb_control_msg returned -32 [ 1592.955505][ T9469] usbtmc 2-1:16.0: can't read capabilities [ 1593.214361][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1593.227965][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1593.271584][ T86] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.271721][T23074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1593.283141][ T86] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.308928][ T86] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.327343][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1593.345814][ T86] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.659278][T23088] input: syz0 as /devices/virtual/input/input157 [ 1594.774496][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.791006][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.814536][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.837256][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.871321][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.894326][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.954443][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1594.986078][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1595.013684][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1595.033616][T23125] openvswitch: netlink: Flow key attr not present in new flow. [ 1595.318994][ T9469] usb 2-1: USB disconnect, device number 28 [ 1596.067023][T23172] netlink: 620 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1596.082488][T23166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1596.985316][T23195] syzkaller0: entered promiscuous mode [ 1597.011446][T23195] syzkaller0: entered allmulticast mode [ 1597.116503][T23200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1598.968656][ T9469] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1599.145372][ T9469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 9 [ 1599.175268][ T9469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8241, setting to 1024 [ 1599.207183][ T9469] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1599.219247][ T9469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.232060][ T9469] usb 3-1: config 0 descriptor?? [ 1599.458062][ T9469] ath6kl: Failed to submit usb control message: -71 [ 1599.467578][ T9469] ath6kl: unable to send the bmi data to the device: -71 [ 1599.475387][ T9469] ath6kl: Unable to send get target info: -71 [ 1599.509859][ T9469] ath6kl: Failed to init ath6kl core: -71 [ 1599.517254][ T9469] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1599.532081][ T9469] usb 3-1: USB disconnect, device number 12 [ 1601.285400][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1601.295362][T23288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1601.375576][ T86] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.377898][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1601.395510][ T86] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.423584][ T86] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.436597][T23288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4420'. [ 1601.449545][ T86] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1601.673300][T23317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4432'. [ 1602.093293][T23332] syzkaller0: entered promiscuous mode [ 1602.099318][T23332] syzkaller0: entered allmulticast mode [ 1602.118835][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1602.152427][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1605.274154][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1605.284178][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1605.770496][ T5924] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1605.932159][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 1605.939987][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.951638][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.978533][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1606.000968][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1606.011486][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.028535][ T9469] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1606.047001][ T5924] usb 4-1: config 0 descriptor?? [ 1606.149330][T23434] netlink: 620 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1606.188895][ T9469] usb 5-1: Using ep0 maxpacket: 16 [ 1606.204218][ T9469] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1606.238520][ T9469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1606.266774][ T9469] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1606.285533][ T9469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.302783][ T9469] usb 5-1: Product: syz [ 1606.317259][ T9469] usb 5-1: Manufacturer: syz [ 1606.322287][ T9469] usb 5-1: SerialNumber: syz [ 1606.343556][ T9469] usb 5-1: config 0 descriptor?? [ 1606.365095][ T9469] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1606.392088][ T9469] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1606.520091][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0090/input/input158 [ 1606.558826][ T5924] microsoft 0003:045E:07DA.0090: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1606.687439][T10936] usb 4-1: USB disconnect, device number 32 [ 1606.767213][T23445] fido_id[23445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1607.002162][ T9469] em28xx 5-1:0.0: unknown em28xx chip ID (148) [ 1607.199242][T23468] fuse: Bad value for 'fd' [ 1607.204301][ T9469] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1607.219099][ T9469] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1607.226471][ T9469] em28xx 5-1:0.0: No AC97 audio processor [ 1607.240662][ T9469] usb 5-1: USB disconnect, device number 29 [ 1607.256536][ T9469] em28xx 5-1:0.0: Disconnecting em28xx [ 1607.286000][ T9469] em28xx 5-1:0.0: Freeing device [ 1607.584495][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.593903][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.921835][T23495] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1607.931953][T23500] fuse: Bad value for 'fd' [ 1608.810481][T23528] fuse: Bad value for 'fd' [ 1609.318559][T10936] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1609.469216][T10936] usb 2-1: Using ep0 maxpacket: 16 [ 1609.482608][T10936] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1609.507252][T10936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.536715][T10936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1609.550161][T10936] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1609.560012][T10936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.568228][T10936] usb 2-1: Product: syz [ 1609.572690][T10936] usb 2-1: Manufacturer: syz [ 1609.577588][T10936] usb 2-1: SerialNumber: syz [ 1609.598686][ T9469] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1609.760810][ T9469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.773166][ T9469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.828926][ T9469] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1609.870958][ T9469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.926612][ T9469] usb 4-1: config 0 descriptor?? [ 1610.021719][T10936] usb 2-1: 0:2 : does not exist [ 1610.042124][T10936] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1610.147373][T10936] usb 2-1: USB disconnect, device number 29 [ 1610.212235][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1610.367145][ T9469] usbhid 4-1:0.0: can't add hid device: -71 [ 1610.380021][ T9469] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1610.401239][ T9469] usb 4-1: USB disconnect, device number 33 [ 1610.506746][T23575] Invalid argument reading file caps for ./file0 [ 1610.818149][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1610.842159][T23592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4556'. [ 1610.888445][ T5918] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1611.053483][ T5918] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1611.063114][ T5918] usb 3-1: not running at top speed; connect to a high speed hub [ 1611.082826][ T5918] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1611.098452][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.111054][ T5918] usb 3-1: Product: syz [ 1611.117541][ T5918] usb 3-1: Manufacturer: syz [ 1611.126449][ T5918] usb 3-1: SerialNumber: syz [ 1611.338442][ T5924] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1611.376106][ T5918] usb 3-1: unit 6 not found! [ 1611.515058][ T5918] usb 3-1: USB disconnect, device number 13 [ 1611.551250][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1611.574049][ T5924] usb 2-1: string descriptor 0 read error: -22 [ 1611.574397][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1611.594399][ T5924] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 1611.648366][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.143599][T23605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.179001][T23605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.211570][ T5924] hid (null): unknown global tag 0xe [ 1612.227286][ T5924] hid (null): unknown global tag 0x71 [ 1612.234265][ T5924] hid (null): unknown global tag 0x13 [ 1612.318586][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.328389][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.335588][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.377361][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.403506][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.433970][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.455678][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.482822][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.505603][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.523521][ T5924] glorious 0003:258A:0033.0091: unknown main item tag 0x0 [ 1612.541324][ T5924] glorious 0003:258A:0033.0091: unexpected long global item [ 1612.589300][ T5924] glorious 0003:258A:0033.0091: probe with driver glorious failed with error -22 [ 1612.626166][ T5924] usb 2-1: USB disconnect, device number 30 [ 1613.368804][ T5918] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1613.539269][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 1613.547315][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.563234][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1613.589280][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1613.608023][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1613.619932][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1613.636206][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1613.646958][ T5918] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1613.656575][ T5918] usb 3-1: Manufacturer: syz [ 1613.665979][ T5918] usb 3-1: config 0 descriptor?? [ 1613.751461][ T9552] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1613.930774][ T9552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1613.931970][ T5918] rc_core: IR keymap rc-hauppauge not found [ 1613.942533][ T9552] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1613.948365][ T5918] Registered IR keymap rc-empty [ 1613.957640][ T9552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.963357][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1613.982480][ T9552] usb 5-1: config 0 descriptor?? [ 1613.989964][T23678] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1613.999145][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.031921][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1614.043931][T14856] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1614.054631][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input159 [ 1614.075434][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.098646][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.119058][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.138827][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.158569][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.178784][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.204104][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.218640][T14856] usb 4-1: Using ep0 maxpacket: 8 [ 1614.227350][T14856] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1614.237283][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.245029][T14856] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1614.268928][T14856] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1614.288927][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.298053][T14856] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1614.311079][ T5918] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1614.319534][T14856] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1614.330068][T14856] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1614.343709][T14856] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1614.361211][ T5918] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1614.376833][T14856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.388450][ T5918] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1614.444138][ T5918] usb 3-1: USB disconnect, device number 14 [ 1614.480874][ T9552] input: HID 0458:5015 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5015.0092/input/input160 [ 1614.551581][ T9552] input: HID 0458:5015 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5015.0092/input/input161 [ 1614.612677][T14856] usb 4-1: usb_control_msg returned -32 [ 1614.627985][T14856] usbtmc 4-1:16.0: can't read capabilities [ 1614.811576][ T9552] input: HID 0458:5015 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5015.0092/input/input162 [ 1614.918669][ T9552] kye 0003:0458:5015.0092: input,hiddev1,hidraw0: USB HID v7f.fd Mouse [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 1614.974903][ T9552] usb 5-1: USB disconnect, device number 30 [ 1615.025468][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1615.043038][T23713] usbtmc 4-1:16.0: Unable to send data, error -71 [ 1615.070625][T23709] fido_id[23709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1615.530949][T23727] netlink: 'syz.4.4614': attribute type 4 has an invalid length. [ 1615.568554][ T9552] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1615.748439][ T9552] usb 3-1: Using ep0 maxpacket: 32 [ 1615.760693][ T9552] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1615.769843][ T9552] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1615.796616][ T9552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1615.808489][ T9552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1615.821546][ T9552] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1615.838612][ T9552] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1615.868420][ T9552] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1615.877789][ T9552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.910147][ T9552] usb 3-1: config 0 descriptor?? [ 1616.125309][ T9552] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1616.151219][ T9552] usb 3-1: USB disconnect, device number 15 [ 1616.168980][ T9552] usblp1: removed [ 1616.251489][T23751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1616.279977][T23751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1616.310142][T23751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1616.316258][T23751] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1616.354474][T23751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1616.378648][T23751] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1616.399872][T23751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1616.406002][T23751] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1616.430032][T23751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1616.436064][T23751] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1616.708721][ T9552] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1616.824738][ T42] usb 4-1: USB disconnect, device number 34 [ 1616.875515][ T9552] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1616.895122][ T9552] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1616.904613][ T9552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1616.914717][ T9552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1616.928741][ T9552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1616.941461][ T9552] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1616.955544][ T9552] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1616.986128][ T9552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.013450][ T9552] usb 3-1: config 0 descriptor?? [ 1617.040040][T23721] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1617.068537][ T5924] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1617.243763][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1617.259983][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1617.274195][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1617.286541][ T9552] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1617.293430][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1617.316803][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1617.337111][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1617.361405][ T5924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1617.373560][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.399331][ T5924] usb 5-1: config 0 descriptor?? [ 1617.475423][ T5918] usb 3-1: USB disconnect, device number 16 [ 1617.499182][ T5918] usblp0: removed [ 1617.839785][ T5924] hid_parser_main: 118 callbacks suppressed [ 1617.839803][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.883836][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.893253][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.912372][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.920507][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.928133][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.939377][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.958105][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.973879][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1617.982528][ T5924] plantronics 0003:047F:FFFF.0093: unknown main item tag 0x0 [ 1618.009786][ T5924] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1618.142672][ T5918] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1618.150717][ T5924] usb 5-1: USB disconnect, device number 31 [ 1618.166422][T23805] fido_id[23805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1618.299548][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 1618.333163][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 1618.345481][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1618.384291][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 1618.390815][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 1618.403376][ T5918] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 7 [ 1618.433437][ T5918] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1618.443742][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.452650][ T5918] usb 2-1: Product: syz [ 1618.457185][ T5918] usb 2-1: Manufacturer: syz [ 1618.468978][T23817] Bluetooth: hci3: command 0x0406 tx timeout [ 1618.475085][T23817] Bluetooth: hci0: command 0x0406 tx timeout [ 1618.484542][ T5918] usb 2-1: SerialNumber: syz [ 1618.643859][T23826] syzkaller1: entered promiscuous mode [ 1618.668486][ T5924] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1618.694617][T23826] syzkaller1: entered allmulticast mode [ 1618.733554][ T5918] usb 2-1: unit 14 not found! [ 1618.739381][T23828] netlink: 620 bytes leftover after parsing attributes in process `syz.3.4659'. [ 1618.861717][ T5918] usb 2-1: USB disconnect, device number 31 [ 1618.869024][ T5924] usb 3-1: too many configurations: 240, using maximum allowed: 8 [ 1618.921318][ T5924] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1618.938434][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.946581][ T5924] usb 3-1: Product: syz [ 1618.969808][ T5924] usb 3-1: Manufacturer: syz [ 1618.981799][ T6318] udevd[6318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1618.997767][ T5924] usb 3-1: SerialNumber: syz [ 1619.046700][ T5924] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1619.136673][ T9552] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1619.308855][ T5918] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1619.489565][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 1619.499391][ T5918] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1619.518109][ T5918] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1619.534969][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1619.558648][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1619.599452][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1619.618611][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1619.649859][ T5918] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1619.669002][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.705500][ T5918] usb 5-1: config 0 descriptor?? [ 1619.781813][ T42] usb 3-1: USB disconnect, device number 17 [ 1619.940736][ T5918] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1619.989746][ T5918] usb 5-1: USB disconnect, device number 32 [ 1620.017361][ T5918] usblp0: removed [ 1620.378732][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 1620.387801][ T9552] usb 3-1: Service connection timeout for: 256 [ 1620.406244][ T9552] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1620.419825][ T9552] ath9k_htc: Failed to initialize the device [ 1620.436879][ T42] usb 3-1: ath9k_htc: USB layer deinitialized [ 1620.448769][ T5918] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1620.458490][T23817] Bluetooth: hci4: command 0x0406 tx timeout [ 1620.464594][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 1620.540538][T23889] mac80211_hwsim hwsim17 4: renamed from wlan1 (while UP) [ 1620.541080][T23817] Bluetooth: hci3: command 0x0406 tx timeout [ 1620.554332][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 1620.692417][ T5918] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1620.705422][ T5918] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1620.726225][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1620.747656][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1620.882904][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1620.908603][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1620.925663][ T5918] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1620.935753][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.954662][ T5918] usb 5-1: config 0 descriptor?? [ 1620.971366][T23838] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1621.199994][ T5918] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1621.388079][ T42] usb 5-1: USB disconnect, device number 33 [ 1621.409710][ T42] usblp0: removed [ 1622.406155][T23937] net_ratelimit: 5 callbacks suppressed [ 1622.406168][T23937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1622.473760][T23944] xt_connbytes: Forcing CT accounting to be enabled [ 1622.989808][ T42] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1623.180215][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 1623.197512][ T42] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1623.217026][ T42] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1623.258603][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1623.284142][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1623.304400][ T42] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1623.329982][T23981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4727'. [ 1623.333573][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1623.385502][ T42] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1623.404978][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.432781][ T42] usb 2-1: config 0 descriptor?? [ 1623.633762][ T86] bond1 (unregistering): Released all slaves [ 1623.680461][ T42] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1623.697299][ T42] usb 2-1: USB disconnect, device number 32 [ 1623.719570][ T42] usblp0: removed [ 1623.822299][ T86] tipc: Left network mode [ 1623.955787][ T86] IPVS: stopping backup sync thread 17681 ... [ 1624.181449][T24003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.287389][ T42] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1624.332670][ T86] hsr_slave_0: left promiscuous mode [ 1624.360867][ T86] hsr_slave_1: left promiscuous mode [ 1624.471062][ T42] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1624.485868][ T42] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1624.509731][ T42] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1624.539664][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1624.560194][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1624.598509][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1624.635448][ T42] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1624.644787][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.692726][ T42] usb 2-1: config 0 descriptor?? [ 1624.694804][T23959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1624.941970][ T42] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1625.113700][ T42] usb 2-1: USB disconnect, device number 33 [ 1625.140755][ T42] usblp0: removed [ 1627.060852][T24125] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1627.258139][T24136] syzkaller1: entered promiscuous mode [ 1627.266642][T24136] syzkaller1: entered allmulticast mode [ 1627.465958][T24142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1627.908894][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4809'. [ 1628.204762][T24188] netlink: 608 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1628.318841][ T5924] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1628.491344][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1628.503892][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1628.515634][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1628.526109][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1628.541756][ T5924] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1628.552889][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.566135][ T5924] usb 2-1: config 0 descriptor?? [ 1628.901834][T24212] mac80211_hwsim hwsim21 4: renamed from wlan1 (while UP) [ 1628.963675][T24216] netlink: 608 bytes leftover after parsing attributes in process `syz.2.4829'. [ 1629.053596][ T5924] hid_parser_main: 5 callbacks suppressed [ 1629.053623][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.072244][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.080932][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.089659][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.097664][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.107331][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.115334][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.136873][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.179035][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.197055][ T5924] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x0 [ 1629.239881][ T5924] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1629.318802][ T5924] usb 2-1: USB disconnect, device number 34 [ 1629.474135][T24224] fido_id[24224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1630.226481][T24247] netlink: 608 bytes leftover after parsing attributes in process `syz.2.4842'. [ 1630.520074][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 1631.158196][T24290] lo: Caught tx_queue_len zero misconfig [ 1631.510018][T24305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1631.562962][T24309] netlink: 'syz.3.4866': attribute type 1 has an invalid length. [ 1631.611005][T24309] netlink: 'syz.3.4866': attribute type 2 has an invalid length. [ 1631.629650][T24309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4866'. [ 1632.115464][T24340] netlink: 'syz.4.4880': attribute type 12 has an invalid length. [ 1632.125810][T24340] netlink: 'syz.4.4880': attribute type 1 has an invalid length. [ 1632.136252][T24340] netlink: 'syz.4.4880': attribute type 2 has an invalid length. [ 1632.145217][T24340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4880'. [ 1632.718566][ T29] audit: type=1326 audit(1775352246.746:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1632.780547][ T29] audit: type=1326 audit(1775352246.746:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1632.838432][ T29] audit: type=1326 audit(1775352246.786:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1632.888842][ T29] audit: type=1326 audit(1775352246.786:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1632.965197][ T29] audit: type=1326 audit(1775352246.786:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1633.006025][ T29] audit: type=1326 audit(1775352246.786:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1633.039142][ T29] audit: type=1326 audit(1775352246.786:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1633.096282][ T29] audit: type=1326 audit(1775352246.816:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1633.174907][ T29] audit: type=1326 audit(1775352246.816:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.3.4895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4e4539c819 code=0x7ffc0000 [ 1633.641405][ T86] bond0 (unregistering): Released all slaves [ 1633.771662][ T86] tipc: Disabling bearer [ 1633.829337][ T86] tipc: Left network mode [ 1634.217475][ T86] hsr_slave_0: left promiscuous mode [ 1634.227880][ T86] hsr_slave_1: left promiscuous mode [ 1634.752566][T24440] netlink: 'syz.2.4924': attribute type 9 has an invalid length. [ 1635.167253][T24455] fuse: Bad value for 'fd' [ 1635.595306][T24470] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4938'. [ 1635.867260][ T29] audit: type=1326 audit(1775352249.896:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24478 comm="syz.0.4943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe8259c819 code=0x0 [ 1635.999557][T24490] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4947'. [ 1636.035027][T24491] kvm: pic: non byte write [ 1636.689323][T24515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4957'. [ 1638.038616][T24552] kvm: Disabled LAPIC found during irq injection [ 1639.056405][T24577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4982'. [ 1639.066704][T24577] ------------[ cut here ]------------ [ 1639.072837][T24577] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1639.086205][T24577] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.2.4982/24577 [ 1639.098329][T24577] Modules linked in: [ 1639.103540][T24577] CPU: 1 UID: 0 PID: 24577 Comm: syz.2.4982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.115052][T24577] Tainted: [L]=SOFTLOCKUP [ 1639.119574][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1639.129947][T24577] RIP: 0010:u32_change+0x1daf/0x2720 [ 1639.135738][T24577] Code: 3d d6 ea 42 06 01 75 33 e8 ae e8 0c f8 eb 50 e8 a7 e8 0c f8 48 8d 3d 80 1f 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 a8 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 82 e8 0c f8 eb 24 e8 7b e8 0c f8 [ 1639.157319][T24577] RSP: 0018:ffffc9000d316fc0 EFLAGS: 00010287 [ 1639.163956][T24577] RAX: ffffffff89b8cc29 RBX: ffff8880287c0800 RCX: 0000000000000010 [ 1639.172189][T24577] RDX: ffffffff8ce1a880 RSI: 0000000000000020 RDI: ffffffff9020ebb0 [ 1639.180758][T24577] RBP: ffffc9000d317178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1639.190093][T24577] R10: dffffc0000000000 R11: fffffbfff2023ab7 R12: ffff88804677e4e8 [ 1639.199744][T24577] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 1639.208033][T24577] FS: 00007f2e4ef0e6c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 1639.218819][T24577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1639.225637][T24577] CR2: 000000110c2b1154 CR3: 000000007db7c000 CR4: 00000000003526f0 [ 1639.234309][T24577] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1639.242399][T24577] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1639.250746][T24577] Call Trace: [ 1639.254159][T24577] [ 1639.257232][T24577] ? __pfx_u32_change+0x10/0x10 [ 1639.263062][T24577] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1639.268933][T24577] tc_new_tfilter+0xff8/0x1780 [ 1639.273866][T24577] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1639.279197][T24577] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1639.284746][T24577] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1639.290168][T24577] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1639.295535][T24577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1639.302833][T24577] ? ref_tracker_free+0x693/0x840 [ 1639.309448][T24577] ? __copy_skb_header+0xa3/0x4a0 [ 1639.314554][T24577] ? __pfx_ref_tracker_free+0x10/0x10 [ 1639.321804][T24577] ? __skb_clone+0x63/0x7a0 [ 1639.326395][T24577] netlink_rcv_skb+0x232/0x4b0 [ 1639.331504][T24577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1639.337126][T24577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1639.342947][T24577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1639.348448][T24577] netlink_unicast+0x80f/0x9b0 [ 1639.353289][T24577] ? __pfx_netlink_unicast+0x10/0x10 [ 1639.358690][T24577] ? netlink_sendmsg+0x650/0xb40 [ 1639.363683][T24577] ? skb_put+0x11b/0x210 [ 1639.368180][T24577] netlink_sendmsg+0x813/0xb40 [ 1639.373344][T24577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1639.378749][T24577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1639.383739][T24577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1639.389636][T24577] ____sys_sendmsg+0x972/0x9f0 [ 1639.394476][T24577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1639.401542][T24577] ? import_iovec+0x73/0xa0 [ 1639.406201][T24577] ___sys_sendmsg+0x2a5/0x360 [ 1639.412002][T24577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1639.417446][T24577] ? preempt_schedule_common+0x82/0xd0 [ 1639.423345][T24577] ? preempt_schedule_thunk+0x16/0x30 [ 1639.429012][T24577] ? __fget_files+0x2a/0x420 [ 1639.433728][T24577] ? __fget_files+0x3a0/0x420 [ 1639.438529][T24577] __sys_sendmmsg+0x27c/0x4e0 [ 1639.443274][T24577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1639.448602][T24577] ? do_futex+0x395/0x420 [ 1639.453100][T24577] ? rcu_is_watching+0x15/0xb0 [ 1639.457925][T24577] __x64_sys_sendmmsg+0xa0/0xc0 [ 1639.462910][T24577] do_syscall_64+0x14d/0xf80 [ 1639.467565][T24577] ? trace_irq_disable+0x3b/0x150 [ 1639.472868][T24577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.479051][T24577] ? clear_bhb_loop+0x40/0x90 [ 1639.483786][T24577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.489875][T24577] RIP: 0033:0x7f2e4df9c819 [ 1639.494350][T24577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.515693][T24577] RSP: 002b:00007f2e4ef0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1639.525497][T24577] RAX: ffffffffffffffda RBX: 00007f2e4e215fa0 RCX: 00007f2e4df9c819 [ 1639.533868][T24577] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1639.542750][T24577] RBP: 00007f2e4e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1639.551063][T24577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.559120][T24577] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1639.567285][T24577] [ 1639.570552][T24577] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1639.577962][T24577] CPU: 1 UID: 0 PID: 24577 Comm: syz.2.4982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.589388][T24577] Tainted: [L]=SOFTLOCKUP [ 1639.593937][T24577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1639.604358][T24577] Call Trace: [ 1639.607681][T24577] [ 1639.610667][T24577] vpanic+0x56c/0xa60 [ 1639.614826][T24577] ? __pfx__printk+0x10/0x10 [ 1639.619553][T24577] ? __pfx_vpanic+0x10/0x10 [ 1639.624105][T24577] ? is_bpf_text_address+0x292/0x2b0 [ 1639.629467][T24577] ? is_bpf_text_address+0x26/0x2b0 [ 1639.634826][T24577] panic+0xc5/0xd0 [ 1639.638712][T24577] ? __pfx_panic+0x10/0x10 [ 1639.643556][T24577] __warn+0x315/0x4f0 [ 1639.647899][T24577] ? u32_change+0x1da0/0x2720 [ 1639.652693][T24577] ? u32_change+0x1da0/0x2720 [ 1639.657517][T24577] __report_bug+0x29a/0x540 [ 1639.662137][T24577] ? ___sys_sendmsg+0x2a5/0x360 [ 1639.667276][T24577] ? __sys_sendmmsg+0x27c/0x4e0 [ 1639.672185][T24577] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1639.677278][T24577] ? u32_change+0x1da0/0x2720 [ 1639.681991][T24577] ? __pfx___report_bug+0x10/0x10 [ 1639.687147][T24577] report_bug_entry+0x19a/0x290 [ 1639.692049][T24577] ? u32_change+0x1daf/0x2720 [ 1639.696736][T24577] ? u32_change+0x1db4/0x2720 [ 1639.701424][T24577] handle_bug+0xce/0x200 [ 1639.705841][T24577] exc_invalid_op+0x1a/0x50 [ 1639.710453][T24577] asm_exc_invalid_op+0x1a/0x20 [ 1639.715345][T24577] RIP: 0010:u32_change+0x1daf/0x2720 [ 1639.720735][T24577] Code: 3d d6 ea 42 06 01 75 33 e8 ae e8 0c f8 eb 50 e8 a7 e8 0c f8 48 8d 3d 80 1f 68 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 80 a8 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 82 e8 0c f8 eb 24 e8 7b e8 0c f8 [ 1639.741138][T24577] RSP: 0018:ffffc9000d316fc0 EFLAGS: 00010287 [ 1639.747580][T24577] RAX: ffffffff89b8cc29 RBX: ffff8880287c0800 RCX: 0000000000000010 [ 1639.755825][T24577] RDX: ffffffff8ce1a880 RSI: 0000000000000020 RDI: ffffffff9020ebb0 [ 1639.763812][T24577] RBP: ffffc9000d317178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1639.771893][T24577] R10: dffffc0000000000 R11: fffffbfff2023ab7 R12: ffff88804677e4e8 [ 1639.780439][T24577] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 1639.789251][T24577] ? u32_change+0x1d99/0x2720 [ 1639.794193][T24577] ? __pfx_u32_change+0x10/0x10 [ 1639.799110][T24577] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1639.804963][T24577] tc_new_tfilter+0xff8/0x1780 [ 1639.810783][T24577] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1639.816560][T24577] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1639.822181][T24577] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1639.827735][T24577] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1639.833792][T24577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1639.839662][T24577] ? ref_tracker_free+0x693/0x840 [ 1639.845412][T24577] ? __copy_skb_header+0xa3/0x4a0 [ 1639.850500][T24577] ? __pfx_ref_tracker_free+0x10/0x10 [ 1639.856062][T24577] ? __skb_clone+0x63/0x7a0 [ 1639.860766][T24577] netlink_rcv_skb+0x232/0x4b0 [ 1639.865999][T24577] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1639.871567][T24577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1639.876914][T24577] ? netlink_deliver_tap+0x2e/0x1b0 [ 1639.882138][T24577] netlink_unicast+0x80f/0x9b0 [ 1639.886974][T24577] ? __pfx_netlink_unicast+0x10/0x10 [ 1639.892280][T24577] ? netlink_sendmsg+0x650/0xb40 [ 1639.897316][T24577] ? skb_put+0x11b/0x210 [ 1639.901570][T24577] netlink_sendmsg+0x813/0xb40 [ 1639.906471][T24577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1639.911945][T24577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1639.917239][T24577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1639.922568][T24577] ____sys_sendmsg+0x972/0x9f0 [ 1639.927484][T24577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1639.932892][T24577] ? import_iovec+0x73/0xa0 [ 1639.937503][T24577] ___sys_sendmsg+0x2a5/0x360 [ 1639.942258][T24577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1639.947497][T24577] ? preempt_schedule_common+0x82/0xd0 [ 1639.953153][T24577] ? preempt_schedule_thunk+0x16/0x30 [ 1639.958579][T24577] ? __fget_files+0x2a/0x420 [ 1639.963264][T24577] ? __fget_files+0x3a0/0x420 [ 1639.967955][T24577] __sys_sendmmsg+0x27c/0x4e0 [ 1639.972652][T24577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1639.977865][T24577] ? do_futex+0x395/0x420 [ 1639.982266][T24577] ? rcu_is_watching+0x15/0xb0 [ 1639.987150][T24577] __x64_sys_sendmmsg+0xa0/0xc0 [ 1639.992019][T24577] do_syscall_64+0x14d/0xf80 [ 1639.996710][T24577] ? trace_irq_disable+0x3b/0x150 [ 1640.001757][T24577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.008032][T24577] ? clear_bhb_loop+0x40/0x90 [ 1640.012722][T24577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.018623][T24577] RIP: 0033:0x7f2e4df9c819 [ 1640.023228][T24577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.043103][T24577] RSP: 002b:00007f2e4ef0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1640.051715][T24577] RAX: ffffffffffffffda RBX: 00007f2e4e215fa0 RCX: 00007f2e4df9c819 [ 1640.059918][T24577] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1640.067991][T24577] RBP: 00007f2e4e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1640.076319][T24577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.085018][T24577] R13: 00007f2e4e216038 R14: 00007f2e4e215fa0 R15: 00007f2e4e33fa48 [ 1640.093541][T24577] [ 1640.097196][T24577] Kernel Offset: disabled [ 1640.101547][T24577] Rebooting in 86400 seconds..