last executing test programs: 2m53.23098291s ago: executing program 0 (id=13182): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) 2m53.162032951s ago: executing program 0 (id=13183): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2m53.093488183s ago: executing program 0 (id=13184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r1, 0x31, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) 2m52.995041257s ago: executing program 0 (id=13186): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 2m52.824866388s ago: executing program 0 (id=13188): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1, 0x1}}, 0x18) 2m52.527028711s ago: executing program 0 (id=13193): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m36.415244505s ago: executing program 32 (id=13193): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 9.1945237s ago: executing program 4 (id=16342): r0 = socket$inet(0x2b, 0x801, 0x0) setresuid(0xee01, 0xee00, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 8.927938662s ago: executing program 4 (id=16347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 8.486127114s ago: executing program 4 (id=16352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008044}, 0x4) 8.213367806s ago: executing program 4 (id=16357): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) keyctl$revoke(0x3, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 8.02091877s ago: executing program 4 (id=16363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x1, 0x4, 0x401, 0x404}) 7.863395961s ago: executing program 4 (id=16367): r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.971241645s ago: executing program 1 (id=16475): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) 1.915917708s ago: executing program 5 (id=16476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) 1.809547987s ago: executing program 1 (id=16479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.704056271s ago: executing program 5 (id=16481): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.666332933s ago: executing program 1 (id=16483): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f0000000100)={{@any, 0x8}, 0xe5, 0x8100}) 1.484126374s ago: executing program 5 (id=16486): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) 1.455220166s ago: executing program 1 (id=16487): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 1.317241856s ago: executing program 5 (id=16490): r0 = syz_io_uring_setup(0x5850, &(0x7f0000000240)={0x0, 0x5e96, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 683.60266ms ago: executing program 2 (id=16500): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execve(&(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000800)={[], 0x10000000000001}) 607.25996ms ago: executing program 3 (id=16501): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 586.804315ms ago: executing program 2 (id=16502): r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='comm\x00') exit(0x100000001) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, 0x0, 0x0) 538.538587ms ago: executing program 3 (id=16503): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 443.160131ms ago: executing program 1 (id=16504): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 443.032165ms ago: executing program 2 (id=16505): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000340)={0x0, 0x0, 0x1000}) 442.93324ms ago: executing program 3 (id=16506): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 362.958538ms ago: executing program 1 (id=16507): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 349.392249ms ago: executing program 2 (id=16508): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 317.131562ms ago: executing program 5 (id=16509): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000040)="922e27b8fb441dbb0c9f", 0x0}, 0x20) 267.282905ms ago: executing program 3 (id=16510): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 178.673942ms ago: executing program 2 (id=16511): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1065, 0x80, 0x4, 0x10001}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1c, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x4, 0x1}) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 116.104002ms ago: executing program 3 (id=16512): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="201104060000000101", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 98.58475ms ago: executing program 5 (id=16513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @local, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @remote, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001740)="05", 0x1}], 0x1}}], 0x1, 0x5d9) 3.233397ms ago: executing program 2 (id=16514): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 0s ago: executing program 3 (id=16515): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @remote, 0x0, 0x0, 'sh\x00', 0x35, 0xb, 0x35}, 0x2c) kernel console output (not intermixed with test programs): 827.092431][T31382] macsec1: entered allmulticast mode [ 827.547995][T12852] gspca_vc032x: reg_r err -71 [ 827.548015][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548027][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548037][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548048][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548059][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548069][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548080][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548090][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548100][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548111][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548121][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548130][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548140][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548151][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548161][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548170][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548181][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548192][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548202][T12852] gspca_vc032x: I2c Bus Busy Wait 00 [ 827.548213][T12852] gspca_vc032x: Unknown sensor... [ 827.548300][T12852] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 827.675763][T12852] usb 2-1: USB disconnect, device number 9 [ 828.668227][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12288'. [ 828.668256][T31452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12288'. [ 828.668286][T31452] netlink: 'syz.3.12288': attribute type 12 has an invalid length. [ 828.853131][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.062204][T31468] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 829.356534][T31485] netlink: 296 bytes leftover after parsing attributes in process `syz.3.12305'. [ 830.038065][T31523] vxcan4: entered promiscuous mode [ 830.172571][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.810982][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 830.976046][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 830.993373][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.993424][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 830.993453][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.038465][ T10] usb 4-1: config 0 descriptor?? [ 831.231265][T31577] netlink: 356 bytes leftover after parsing attributes in process `syz.1.12353'. [ 831.517106][ T10] magicmouse 0003:05AC:0265.0017: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 831.765513][ T10] usb 4-1: USB disconnect, device number 13 [ 831.823256][ T37] audit: type=1326 audit(2000000039.994:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31600 comm="syz.0.12361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x0 [ 831.898966][T31596] fido_id[31596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 832.778339][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 832.861894][ T37] audit: type=1326 audit(2000000040.966:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.864360][ T37] audit: type=1326 audit(2000000040.966:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.878882][ T37] audit: type=1326 audit(2000000040.985:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.878952][ T37] audit: type=1326 audit(2000000040.985:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.879008][ T37] audit: type=1326 audit(2000000040.985:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.887069][ T37] audit: type=1326 audit(2000000040.985:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.887135][ T37] audit: type=1326 audit(2000000040.985:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 832.892563][ T37] audit: type=1326 audit(2000000040.994:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31635 comm="syz.0.12378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 833.041994][ T10] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.042033][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 833.042073][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 833.042106][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.052468][ T10] usb 4-1: config 0 descriptor?? [ 833.525380][ T10] hid_parser_main: 7 callbacks suppressed [ 833.525408][ T10] corsair-psu 0003:1B1C:1C03.0018: unknown main item tag 0x0 [ 833.525449][ T10] corsair-psu 0003:1B1C:1C03.0018: unknown main item tag 0x0 [ 833.525480][ T10] corsair-psu 0003:1B1C:1C03.0018: unknown main item tag 0x0 [ 833.525510][ T10] corsair-psu 0003:1B1C:1C03.0018: unknown main item tag 0x0 [ 833.525540][ T10] corsair-psu 0003:1B1C:1C03.0018: unknown main item tag 0x0 [ 833.574516][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12388'. [ 833.574550][T31657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12388'. [ 833.598515][ T10] corsair-psu 0003:1B1C:1C03.0018: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 833.631264][T31657] erspan0: entered promiscuous mode [ 833.687482][ T10] corsair-psu 0003:1B1C:1C03.0018: unable to initialize device (-38) [ 833.719814][ T10] corsair-psu 0003:1B1C:1C03.0018: probe with driver corsair-psu failed with error -38 [ 833.729745][ T10] usb 4-1: USB disconnect, device number 14 [ 833.858454][ T49] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 833.936100][T31663] fido_id[31663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 834.019905][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 834.022673][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.022716][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.022759][ T49] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 834.022785][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.045697][ T49] usb 2-1: config 0 descriptor?? [ 834.425871][T31681] wireguard: wg0: Could not create IPv4 socket [ 834.589816][ T49] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 834.589862][ T49] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 834.589901][ T49] cherry 0003:046A:0027.0019: unknown main item tag 0x0 [ 834.589931][ T49] cherry 0003:046A:0027.0019: item fetching failed at offset 14/69 [ 834.590849][ T49] cherry 0003:046A:0027.0019: probe with driver cherry failed with error -22 [ 834.777304][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12404'. [ 834.878864][ T6088] usb 2-1: USB disconnect, device number 10 [ 835.047124][T31708] netlink: 'syz.3.12406': attribute type 3 has an invalid length. [ 835.047151][T31708] netlink: 'syz.3.12406': attribute type 1 has an invalid length. [ 835.047167][T31708] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12406'. [ 835.674185][T31742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12421'. [ 835.674216][T31742] netlink: 35 bytes leftover after parsing attributes in process `syz.4.12421'. [ 835.674235][T31742] netlink: 'syz.4.12421': attribute type 5 has an invalid length. [ 835.674251][T31742] netlink: 'syz.4.12421': attribute type 6 has an invalid length. [ 835.674265][T31742] netlink: 35 bytes leftover after parsing attributes in process `syz.4.12421'. [ 836.767288][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 836.948711][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 836.948747][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.948774][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 836.948804][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 836.952076][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 836.952108][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.952132][ T10] usb 4-1: Product: syz [ 836.952149][ T10] usb 4-1: Manufacturer: syz [ 836.952165][ T10] usb 4-1: SerialNumber: syz [ 837.027196][ T10] usb 4-1: config 0 descriptor?? [ 837.209513][ T6088] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 837.282254][ T10] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 837.370700][ T6088] usb 2-1: Using ep0 maxpacket: 32 [ 837.376147][ T6088] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 837.376180][ T6088] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 837.376205][ T6088] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 837.376229][ T6088] usb 2-1: config 1 has no interface number 0 [ 837.376284][ T6088] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 837.376315][ T6088] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 837.376362][ T6088] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 837.376390][ T6088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.452614][ T6088] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 837.598872][ T5790] usb 4-1: USB disconnect, device number 15 [ 837.710373][ T6088] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 838.155158][ T5790] usb 2-1: USB disconnect, device number 11 [ 838.163359][ T5790] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 838.660159][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 838.833974][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 838.834011][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 838.834040][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 838.834065][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 838.834110][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 838.834136][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.840964][ T10] usb 5-1: config 0 descriptor?? [ 839.070153][ T10] hdpvr 5-1:0.0: firmware version 0x0 dated [ 839.070174][ T10] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 839.648724][ T10] hdpvr 5-1:0.0: Could not setup controls [ 839.649555][ T10] hdpvr 5-1:0.0: registering videodev failed [ 839.683094][ T10] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 839.712165][ T10] usb 5-1: USB disconnect, device number 26 [ 839.878697][T31916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12502'. [ 839.975911][T31920] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 840.852422][ T5790] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 840.895321][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 840.901067][T31975] Invalid logical block size (8192) [ 841.018312][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 841.018359][ T5790] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 841.018387][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.036921][ T5790] usb 4-1: config 0 descriptor?? [ 841.055504][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 841.058220][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 841.058256][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 841.058297][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.062118][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 841.062149][ T10] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 841.062173][ T10] usb 1-1: Product: syz [ 841.062190][ T10] usb 1-1: Manufacturer: syz [ 841.062208][ T10] usb 1-1: SerialNumber: syz [ 841.177106][ T10] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input87 [ 841.523123][ T5790] zeroplus 0003:0C12:0005.001A: item fetching failed at offset 0/3 [ 841.523965][ T5790] zeroplus 0003:0C12:0005.001A: parse failed [ 841.524048][ T5790] zeroplus 0003:0C12:0005.001A: probe with driver zeroplus failed with error -22 [ 841.595217][ T5790] usb 1-1: USB disconnect, device number 16 [ 841.735162][ T5790] appletouch 1-1:1.0: input: appletouch disconnected [ 841.761103][ T37] audit: type=1326 audit(2000000049.279:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31990 comm="syz.1.12539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff8b17cf6c9 code=0x0 [ 841.764582][ T6088] usb 4-1: USB disconnect, device number 16 [ 843.237277][ T6088] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 843.296594][ T37] audit: type=1326 audit(2000000050.719:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32071 comm="syz.3.12577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721834f6c9 code=0x0 [ 843.402172][ T6088] usb 2-1: Using ep0 maxpacket: 8 [ 843.408002][ T6088] usb 2-1: config 0 interface 0 has no altsetting 0 [ 843.408052][ T6088] usb 2-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 843.408292][ T6088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.424488][ T6088] usb 2-1: config 0 descriptor?? [ 843.567634][T32084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12584'. [ 843.915652][ T6088] lenovo 0003:17EF:61AE.001B: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.1-1/input0 [ 844.014206][T32101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12591'. [ 844.087481][ T10] usb 2-1: USB disconnect, device number 12 [ 844.100190][T32103] futex_wake_op: syz.0.12592 tries to shift op by -1; fix this program [ 844.140459][T29095] udevd[29095]: 'fido_id' [32100] terminated by signal 33 (Unknown signal 33) [ 844.616708][ T6088] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 844.781237][ T6088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.781277][ T6088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.781321][ T6088] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 844.781349][ T6088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.793847][ T6088] usb 1-1: config 0 descriptor?? [ 845.266922][ T6088] koneplus 0003:1E7D:2E22.001C: unknown main item tag 0x3 [ 845.310519][ T6088] koneplus 0003:1E7D:2E22.001C: hidraw0: USB HID v0.80 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 845.543446][ T6088] usb 1-1: USB disconnect, device number 17 [ 846.081810][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 846.258671][ T10] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 846.258789][ T10] usb 4-1: config 1 has no interface number 0 [ 846.258842][ T10] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 846.258872][ T10] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 846.258902][ T10] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.262913][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 846.262947][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.262970][ T10] usb 4-1: Product: syz [ 846.262987][ T10] usb 4-1: Manufacturer: syz [ 846.263004][ T10] usb 4-1: SerialNumber: syz [ 846.350980][T32166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 846.575974][T32166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 846.822462][ T10] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 847.012315][ T10] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 847.012346][ T10] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 847.017914][ T10] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 847.017947][ T10] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 847.098411][ T10] usb 4-1: USB disconnect, device number 17 [ 847.120350][ T10] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 847.329218][ T10] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 848.199411][T12852] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 848.347360][T32278] bond_slave_0: entered promiscuous mode [ 848.350689][T32278] @0Ù: entered promiscuous mode [ 848.351026][T32278] batadv0: entered promiscuous mode [ 848.351690][T32278] macsec3: entered promiscuous mode [ 848.351710][T32278] bond0: entered promiscuous mode [ 848.352905][T32278] macsec3: entered allmulticast mode [ 848.352925][T32278] bond0: entered allmulticast mode [ 848.352941][T32278] bond_slave_0: entered allmulticast mode [ 848.352962][T32278] @0Ù: entered allmulticast mode [ 848.352983][T32278] macvlan0: entered allmulticast mode [ 848.353012][T32278] batadv0: entered allmulticast mode [ 848.359668][T12852] usb 4-1: Using ep0 maxpacket: 32 [ 848.362829][T12852] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 848.362866][T12852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.381837][T12852] usb 4-1: config 0 descriptor?? [ 849.102297][T12852] usb 4-1: USB disconnect, device number 18 [ 849.567475][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.612810][T32385] netlink: 'syz.4.12728': attribute type 4 has an invalid length. [ 850.612835][T32385] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12728'. [ 850.713404][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12731'. [ 850.958586][T12852] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 851.146741][T12852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.146798][T12852] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 851.146824][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.153438][T12852] usb 1-1: config 0 descriptor?? [ 851.626574][T12852] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0 [ 851.631322][T12852] logitech-hidpp-device 0003:046D:C086.001E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 851.815802][ T6088] usb 1-1: USB disconnect, device number 18 [ 851.845972][ T6071] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 852.006334][ T6071] usb 2-1: Using ep0 maxpacket: 8 [ 852.011803][ T6071] usb 2-1: unable to get BOS descriptor or descriptor too short [ 852.013391][ T6071] usb 2-1: config 4 interface 0 has no altsetting 0 [ 852.027740][ T6071] usb 2-1: string descriptor 0 read error: -22 [ 852.027929][ T6071] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 852.027960][ T6071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.057891][ T6071] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 852.104750][ T6071] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 852.105257][ T6071] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 852.105314][ T6071] usb 2-1: media controller created [ 852.200117][ T6071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 852.350526][ T6071] zl10353_read_register: readreg error (reg=127, ret==0) [ 852.523134][ T6071] usb 2-1: USB disconnect, device number 13 [ 852.568025][T32452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12759'. [ 852.715437][ T37] audit: type=1326 audit(2000000059.528:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32460 comm="syz.3.12765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721834f6c9 code=0x7ffc0000 [ 852.715502][ T37] audit: type=1326 audit(2000000059.528:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32460 comm="syz.3.12765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721834f6c9 code=0x7ffc0000 [ 852.727992][ T37] audit: type=1326 audit(2000000059.547:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32460 comm="syz.3.12765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f721834f6c9 code=0x7ffc0000 [ 852.735518][ T37] audit: type=1326 audit(2000000059.547:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32460 comm="syz.3.12765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721834f6c9 code=0x7ffc0000 [ 852.735589][ T37] audit: type=1326 audit(2000000059.556:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32460 comm="syz.3.12765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f721834f6c9 code=0x7ffc0000 [ 852.735643][ T37] audit: type=1326 audit(2000000059.556:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32460 comm="syz.3.12765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721834f6c9 code=0x7ffc0000 [ 853.161299][ T5790] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 853.321676][T12852] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 853.322181][ T5790] usb 5-1: Using ep0 maxpacket: 8 [ 853.331107][ T5790] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 853.331142][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.331166][ T5790] usb 5-1: Product: syz [ 853.331183][ T5790] usb 5-1: Manufacturer: syz [ 853.331200][ T5790] usb 5-1: SerialNumber: syz [ 853.362360][ T5790] usb 5-1: config 0 descriptor?? [ 853.409110][ T5790] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 853.409186][ T5790] usb 5-1: setting power ON [ 853.409979][ T5790] dvb-usb: bulk message failed: -22 (2/0) [ 853.432336][ T5790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.433432][ T5790] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 853.433502][ T5790] usb 5-1: media controller created [ 853.490090][T12852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 853.490149][T12852] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 853.490175][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.527509][T12852] usb 2-1: config 0 descriptor?? [ 853.528432][T32475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 853.557639][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.689042][ T5790] usb 5-1: selecting invalid altsetting 6 [ 853.689070][ T5790] usb 5-1: digital interface selection failed (-22) [ 853.689088][ T5790] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 853.690512][ T5790] usb 5-1: setting power OFF [ 853.693875][ T5790] dvb-usb: bulk message failed: -22 (2/0) [ 853.693902][ T5790] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 853.693918][ T5790] (NULL device *): no alternate interface [ 853.871451][ T5790] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 853.898046][ T5790] usb 5-1: USB disconnect, device number 27 [ 853.992134][T12852] kone 0003:1E7D:2CED.001F: unknown main item tag 0x1 [ 854.017439][T12852] kone 0003:1E7D:2CED.001F: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 854.197541][T12852] usb 2-1: USB disconnect, device number 14 [ 854.654281][T32530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12798'. [ 854.985154][T32550] usb usb1: usbfs: process 32550 (syz.3.12806) did not claim interface 1 before use [ 855.889944][T32598] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 856.336583][T32623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12844'. [ 856.795414][T32643] sock: sock_timestamping_bind_phc: sock not bind to device [ 857.204066][T12852] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 857.366794][T12852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.366828][T12852] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 857.366972][T12852] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 857.367000][T12852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.420322][T12852] usb 1-1: config 0 descriptor?? [ 857.898321][T12852] kovaplus 0003:1E7D:2D50.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 858.081974][T12852] kovaplus 0003:1E7D:2D50.0020: couldn't init struct kovaplus_device [ 858.082039][T12852] kovaplus 0003:1E7D:2D50.0020: couldn't install mouse [ 858.097154][T12852] kovaplus 0003:1E7D:2D50.0020: probe with driver kovaplus failed with error -71 [ 858.131678][T12852] usb 1-1: USB disconnect, device number 19 [ 858.291982][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.843736][ T37] audit: type=1326 audit(2000000065.260:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32735 comm="syz.4.12899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f224b9bf6c9 code=0x0 [ 859.168522][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 859.168600][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 859.335436][ C1] vkms_vblank_simulate: vblank timer overrun [ 860.925054][ T6071] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 861.086274][ T6071] usb 1-1: Using ep0 maxpacket: 32 [ 861.088784][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.088820][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.088845][ T6071] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 861.088892][ T6071] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 861.088918][ T6071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.171407][ T6071] usb 1-1: config 0 descriptor?? [ 861.670503][ T387] 9pnet_fd: p9_fd_create_unix (387): problem connecting socket: ./file0: -30 [ 861.698691][ T6071] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0021/input/input88 [ 861.798834][ T6071] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0021/input/input89 [ 861.981808][ T6071] kye 0003:0458:5011.0021: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 862.028266][ T6071] usb 1-1: USB disconnect, device number 20 [ 862.278678][ T401] fido_id[401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 863.057757][ T445] netlink: 'syz.3.12982': attribute type 18 has an invalid length. [ 863.404481][ T464] tipc: Enabling of bearer rejected, failed to enable media [ 863.781331][ C1] vkms_vblank_simulate: vblank timer overrun [ 864.101378][ T6071] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 864.261897][ T6071] usb 2-1: Using ep0 maxpacket: 8 [ 864.264854][ T6071] usb 2-1: config 0 interface 0 has no altsetting 0 [ 864.264898][ T6071] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 864.264926][ T6071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.271023][ T6071] usb 2-1: config 0 descriptor?? [ 864.582878][ T5790] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 864.747375][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 864.747415][ T5790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 864.747465][ T5790] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 864.747494][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.759925][ T5790] usb 5-1: config 0 descriptor?? [ 864.765873][ T510] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 864.821159][ T6071] mcp2221 0003:04D8:00DD.0022: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 865.047066][ T6071] usb 2-1: USB disconnect, device number 15 [ 865.289820][ T5790] creative-sb0540 0003:041E:3100.0023: item fetching failed at offset 1/5 [ 865.290632][ T5790] creative-sb0540 0003:041E:3100.0023: parse failed [ 865.290746][ T5790] creative-sb0540 0003:041E:3100.0023: probe with driver creative-sb0540 failed with error -22 [ 865.519291][ T5790] usb 5-1: USB disconnect, device number 28 [ 865.558261][ T540] block device autoloading is deprecated and will be removed. [ 865.846845][ T558] netlink: 116 bytes leftover after parsing attributes in process `syz.3.13036'. [ 865.846896][ T558] nbd: couldn't find a device at index 31 [ 866.068950][ T5790] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 866.146003][ T49] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 866.169941][ T576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13046'. [ 866.231104][ T5790] usb 1-1: Using ep0 maxpacket: 8 [ 866.233532][ T5790] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 866.233586][ T5790] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 866.233619][ T5790] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.233644][ T5790] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 866.233675][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 866.233721][ T5790] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 866.233748][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.244218][ T5790] usb 1-1: config 0 descriptor?? [ 866.304232][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 866.309326][ T49] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.309428][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 866.309475][ T49] usb 2-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 866.309504][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.399307][ T49] usb 2-1: config 0 descriptor?? [ 866.767010][ T5790] microsoft 0003:045E:00F9.0024: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 866.767050][ T5790] microsoft 0003:045E:00F9.0024: no inputs found [ 866.767066][ T5790] microsoft 0003:045E:00F9.0024: could not initialize ff, continuing anyway [ 866.896369][ T49] hid_mf 0003:0079:1844.0025: hidraw1: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.1-1/input0 [ 866.896480][ T49] hid_mf 0003:0079:1844.0025: Invalid report, this should never happen! [ 866.896497][ T49] hid_mf 0003:0079:1844.0025: Force feedback init failed. [ 866.936050][ T5790] usb 1-1: USB disconnect, device number 21 [ 867.028203][ T601] fido_id[601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 867.068171][T12852] usb 2-1: USB disconnect, device number 16 [ 867.110664][ T604] fido_id[604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 867.469845][ T6071] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 867.632914][ T6071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.632971][ T6071] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 867.632998][ T6071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.682901][ T6071] usb 4-1: config 0 descriptor?? [ 867.811605][ T37] audit: type=1326 audit(2000000073.639:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.811669][ T37] audit: type=1326 audit(2000000073.639:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.816533][ T37] audit: type=1326 audit(2000000073.648:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.817773][ T37] audit: type=1326 audit(2000000073.648:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.819117][ T37] audit: type=1326 audit(2000000073.648:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.819488][ T37] audit: type=1326 audit(2000000073.648:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.819801][ T37] audit: type=1326 audit(2000000073.648:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 867.821065][ T37] audit: type=1326 audit(2000000073.648:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=635 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c88cf6c9 code=0x7ffc0000 [ 868.364590][ T6071] usb 4-1: string descriptor 0 read error: -71 [ 868.365149][ T6071] uclogic 0003:5543:006E.0026: failed retrieving string descriptor #200: -71 [ 868.365210][ T6071] uclogic 0003:5543:006E.0026: failed retrieving pen parameters: -71 [ 868.365231][ T6071] uclogic 0003:5543:006E.0026: failed probing pen v2 parameters: -71 [ 868.365285][ T6071] uclogic 0003:5543:006E.0026: failed probing parameters: -71 [ 868.365400][ T6071] uclogic 0003:5543:006E.0026: probe with driver uclogic failed with error -71 [ 868.423431][ T6071] usb 4-1: USB disconnect, device number 19 [ 868.432827][ T49] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 868.600567][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.600607][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.600652][ T49] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 868.600679][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.622795][ T49] usb 1-1: config 0 descriptor?? [ 868.695862][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13088'. [ 868.695890][ T665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13088'. [ 868.695919][ T665] netlink: 'syz.4.13088': attribute type 12 has an invalid length. [ 868.695997][ T665] netlink: 'syz.4.13088': attribute type 13 has an invalid length. [ 868.742603][ T5790] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 868.938943][ T5790] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 868.938976][ T5790] usb 2-1: config 0 has no interface number 0 [ 868.948365][ T5790] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 868.948402][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.948663][ T5790] usb 2-1: Product: syz [ 868.948685][ T5790] usb 2-1: Manufacturer: syz [ 868.948703][ T5790] usb 2-1: SerialNumber: syz [ 868.988960][ T5790] usb 2-1: config 0 descriptor?? [ 869.162761][ T49] cypress 0003:04B4:DE61.0027: item fetching failed at offset 5/7 [ 869.171987][ T49] cypress 0003:04B4:DE61.0027: parse failed [ 869.172679][ T49] cypress 0003:04B4:DE61.0027: probe with driver cypress failed with error -22 [ 869.251770][ T5790] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 869.279526][ T5790] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 869.280037][ T5790] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 869.280543][ T5790] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 869.305257][ T5790] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 869.335627][ T37] audit: type=1326 audit(2000000075.060:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=682 comm="syz.3.13095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721834f6c9 code=0x0 [ 869.399062][ T6071] usb 1-1: USB disconnect, device number 22 [ 869.768558][ T6071] usb 2-1: USB disconnect, device number 17 [ 869.789272][ T6071] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 869.801556][ T6071] keyspan 2-1:0.133: device disconnected [ 870.496588][ T726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13118'. [ 870.496617][ T726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13118'. [ 870.735183][ T738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13123'. [ 870.913361][ T6071] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 871.084465][ T6071] usb 2-1: Using ep0 maxpacket: 32 [ 871.088094][ T6071] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.088123][ T6071] usb 2-1: config 0 has no interface number 0 [ 871.092984][ T6071] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 871.093028][ T6071] usb 2-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 871.093052][ T6071] usb 2-1: Product: syz [ 871.093069][ T6071] usb 2-1: Manufacturer: syz [ 871.093086][ T6071] usb 2-1: SerialNumber: syz [ 871.156910][ T6071] usb 2-1: config 0 descriptor?? [ 871.174947][ T6071] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 871.175000][ T6071] usb 2-1: selecting invalid altsetting 1 [ 871.175019][ T6071] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 871.191595][ T6071] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 871.191999][ T6071] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 871.192057][ T6071] usb 2-1: media controller created [ 871.254094][ T6071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.279596][ T760] ptrace attach of "./syz-executor exec"[5964] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 871.393536][ T6071] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 871.393602][ T6071] zl10353_read_register: readreg error (reg=127, ret==-71) [ 871.503517][ T6071] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 871.573145][ T6071] usb 2-1: USB disconnect, device number 18 [ 871.681267][ T770] vim2m vim2m.0: vidioc_s_fmt queue busy [ 872.562534][ T819] netlink: 'syz.0.13161': attribute type 4 has an invalid length. [ 872.562562][ T819] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13161'. [ 873.233945][ T49] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 873.403602][ T49] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 873.403637][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.403661][ T49] usb 4-1: Product: syz [ 873.403679][ T49] usb 4-1: Manufacturer: syz [ 873.403696][ T49] usb 4-1: SerialNumber: syz [ 874.106365][ T49] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 874.106443][ T49] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 874.113519][ T49] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 874.189731][ T49] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 874.234972][ T49] usb 4-1: USB disconnect, device number 20 [ 874.286682][ T886] lo speed is unknown, defaulting to 1000 [ 874.286811][ T886] lo speed is unknown, defaulting to 1000 [ 874.318829][ T886] lo speed is unknown, defaulting to 1000 [ 874.363602][ T886] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 874.405823][ T886] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 874.520468][ T886] lo speed is unknown, defaulting to 1000 [ 874.523685][ T886] lo speed is unknown, defaulting to 1000 [ 874.527316][ T886] lo speed is unknown, defaulting to 1000 [ 874.554934][ T886] lo speed is unknown, defaulting to 1000 [ 874.565359][ T886] lo speed is unknown, defaulting to 1000 [ 874.604377][ T889] smc: removing ib device syΆ [ 875.394648][ T49] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 875.456055][ T948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13218'. [ 875.554902][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 875.557467][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.557504][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.557553][ T49] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 875.557578][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.563834][ T49] usb 4-1: config 0 descriptor?? [ 875.608042][ T582] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 875.768493][ T582] usb 2-1: Using ep0 maxpacket: 32 [ 875.784114][ T582] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 875.784152][ T582] usb 2-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 875.784177][ T582] usb 2-1: Product: syz [ 875.784198][ T582] usb 2-1: Manufacturer: syz [ 875.788358][ T582] usb 2-1: SerialNumber: syz [ 875.835902][ T582] usb 2-1: config 0 descriptor?? [ 876.086780][ T49] playstation 0003:054C:05C4.0028: unbalanced delimiter at end of report description [ 876.092521][ T49] playstation 0003:054C:05C4.0028: Parse failed [ 876.092862][ T49] playstation 0003:054C:05C4.0028: probe with driver playstation failed with error -22 [ 876.179263][ T582] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 876.279001][ T6088] usb 4-1: USB disconnect, device number 21 [ 876.664808][ T1000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13240'. [ 876.774101][ T582] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 876.998709][ T6088] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 877.171933][ T6088] usb 5-1: Using ep0 maxpacket: 32 [ 877.175516][ T6088] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 877.175549][ T6088] usb 5-1: config 0 has no interface number 0 [ 877.175602][ T6088] usb 5-1: config 0 interface 184 has no altsetting 0 [ 877.186270][ T6088] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 877.186310][ T6088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.186336][ T6088] usb 5-1: Product: syz [ 877.186355][ T6088] usb 5-1: Manufacturer: syz [ 877.186436][ T6088] usb 5-1: SerialNumber: syz [ 877.216017][ T6088] usb 5-1: config 0 descriptor?? [ 877.253144][ T6088] smsc75xx v1.0.0 [ 877.268425][ T582] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 877.268454][ T582] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 877.299825][ T582] usb 2-1: USB disconnect, device number 19 [ 877.900686][ T6088] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 877.900724][ T6088] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 877.900747][ T6088] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 877.901064][ T6088] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 877.968843][ T6088] usb 5-1: USB disconnect, device number 29 [ 878.856512][ T1109] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13285'. [ 882.235893][ T1293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13369'. [ 882.235934][ T1293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13369'. [ 882.505264][ T1302] macsec1: entered promiscuous mode [ 882.505308][ T1302] macsec1: entered allmulticast mode [ 883.223480][ T1348] bond4: invalid ARP target 0.0.0.0 specified for addition [ 883.223513][ T1348] bond4: option arp_ip_target: invalid value (0) [ 883.291418][ T1348] bond4 (unregistering): Released all slaves [ 883.423757][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.519217][ C1] vkms_vblank_simulate: vblank timer overrun [ 883.622374][ C1] vkms_vblank_simulate: vblank timer overrun [ 884.053275][ T1395] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13415'. [ 884.053450][ T1395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13415'. [ 884.217052][T12852] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 884.377392][T12852] usb 2-1: Using ep0 maxpacket: 16 [ 884.379974][T12852] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 884.380066][T12852] usb 2-1: config 252 has no interface number 0 [ 884.380126][T12852] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 884.383436][T12852] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 884.383470][T12852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.383494][T12852] usb 2-1: Product: syz [ 884.383511][T12852] usb 2-1: Manufacturer: syz [ 884.383527][T12852] usb 2-1: SerialNumber: syz [ 884.522297][T12852] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 885.217901][ T3613] usb 2-1: Failed to submit usb control message: -71 [ 885.217942][ T3613] usb 2-1: unable to send the bmi data to the device: -71 [ 885.217964][ T3613] usb 2-1: unable to get target info from device [ 885.217983][ T3613] usb 2-1: could not get target info (-71) [ 885.218290][ T3613] usb 2-1: could not probe fw (-71) [ 885.222608][T12852] usb 2-1: USB disconnect, device number 20 [ 888.148675][ T1565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13500'. [ 889.697516][ T1459] syz.1.13445 (1459): drop_caches: 1 [ 889.860286][ T1635] netlink: 'syz.1.13532': attribute type 3 has an invalid length. [ 889.991842][T12852] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 890.023108][ T6088] hid-generic 0000:0004:0000.0029: unknown main item tag 0x0 [ 890.023154][ T6088] hid-generic 0000:0004:0000.0029: unknown main item tag 0x0 [ 890.023183][ T6088] hid-generic 0000:0004:0000.0029: unknown main item tag 0x0 [ 890.105260][ T6088] hid-generic 0000:0004:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 890.203702][T12852] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 890.203739][T12852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.203763][T12852] usb 5-1: Product: syz [ 890.203780][T12852] usb 5-1: Manufacturer: syz [ 890.203797][T12852] usb 5-1: SerialNumber: syz [ 890.261278][T12852] usb 5-1: config 0 descriptor?? [ 890.331487][T12852] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 890.751001][ T1646] fido_id[1646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 890.953239][T12852] gspca_sunplus: reg_r err -71 [ 890.953345][T12852] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 890.966186][T12852] usb 5-1: USB disconnect, device number 30 [ 891.238716][ T1670] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 891.263651][ T1670] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 891.280550][ T1670] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 891.290550][ T1670] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 891.300034][ T1670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 891.390270][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 891.399598][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 891.400076][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 891.418315][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 891.419534][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 891.728838][ T1669] xfrm0 speed is unknown, defaulting to 1000 [ 892.639010][ T1669] lo speed is unknown, defaulting to 1000 [ 893.345586][ T1669] lo speed is unknown, defaulting to 1000 [ 893.641703][ T1670] Bluetooth: hci5: command tx timeout [ 893.683094][ T6088] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 893.843589][ T6088] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 893.843622][ T6088] usb 2-1: config 0 has no interface number 0 [ 893.843676][ T6088] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 893.843704][ T6088] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 893.843734][ T6088] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 893.843764][ T6088] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 893.843794][ T6088] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 893.843824][ T6088] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 893.843871][ T6088] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 893.843898][ T6088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.962704][ T6088] usb 2-1: config 0 descriptor?? [ 893.963731][ T1747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 893.963869][ T1747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 894.017959][ T6088] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 894.165866][ T1669] chnl_net:caif_netlink_parms(): no params data found [ 894.228739][T12852] usb 2-1: USB disconnect, device number 21 [ 894.228881][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 894.253478][T12852] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 894.374700][ T1780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13595'. [ 894.659818][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.660030][ T1669] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.660270][ T1669] bridge_slave_0: entered allmulticast mode [ 894.663360][ T1669] bridge_slave_0: entered promiscuous mode [ 894.710490][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.710724][ T1669] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.710997][ T1669] bridge_slave_1: entered allmulticast mode [ 894.714007][ T1669] bridge_slave_1: entered promiscuous mode [ 894.997616][ T1669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.018509][ T1669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.336807][ T1822] tipc: Enabling of bearer rejected, failed to enable media [ 895.348621][ T1669] team0: Port device team_slave_0 added [ 895.374012][ T1669] team0: Port device team_slave_1 added [ 895.644215][ T1669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.644234][ T1669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.644262][ T1669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.646952][ T1669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.646967][ T1669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.646998][ T1669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.862755][ T1670] Bluetooth: hci5: command tx timeout [ 896.136620][ T1863] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 896.209794][ T1669] hsr_slave_0: entered promiscuous mode [ 896.211260][ T1669] hsr_slave_1: entered promiscuous mode [ 896.212371][ T1669] debugfs: 'hsr0' already exists in 'hsr' [ 896.212398][ T1669] Cannot create hsr debugfs directory [ 897.478119][ T1669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 897.546176][ T1669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 897.603252][ T1669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 897.659580][ T1669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 898.022665][T12852] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 898.052361][ T1669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.087279][ T1670] Bluetooth: hci5: command tx timeout [ 898.118543][ T1669] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.142021][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.151802][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.181177][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.186244][T12852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.186275][T12852] usb 2-1: config 0 has no interfaces? [ 898.186309][T12852] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 898.186337][T12852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.189360][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.238561][T12852] usb 2-1: config 0 descriptor?? [ 898.857772][ T582] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 898.864567][ T1669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.002340][T12852] usb 2-1: USB disconnect, device number 22 [ 899.021623][ T582] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 899.021657][ T582] usb 5-1: config 0 has no interface number 0 [ 899.021714][ T582] usb 5-1: config 0 interface 41 has no altsetting 0 [ 899.027373][ T582] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 899.027414][ T582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.027437][ T582] usb 5-1: Product: syz [ 899.027453][ T582] usb 5-1: Manufacturer: syz [ 899.027470][ T582] usb 5-1: SerialNumber: syz [ 899.137254][ T582] usb 5-1: config 0 descriptor?? [ 899.843522][ T582] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 899.900588][ T582] usb 5-1: USB disconnect, device number 31 [ 900.104474][ T1669] veth0_vlan: entered promiscuous mode [ 900.139677][ T1669] veth1_vlan: entered promiscuous mode [ 900.311691][ T1670] Bluetooth: hci5: command tx timeout [ 900.324003][ T1669] veth0_macvtap: entered promiscuous mode [ 900.360224][ T1669] veth1_macvtap: entered promiscuous mode [ 900.396388][ T1669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.454133][ T1669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.496177][ T3598] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.498693][ T3598] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.499249][ T3598] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.502508][ T3598] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.348041][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.348062][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.599986][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.600011][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.749642][ T2147] netlink: 'syz.4.13760': attribute type 1 has an invalid length. [ 902.960462][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13766'. [ 902.960543][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13766'. [ 903.478315][ T5896] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 903.554017][ T2194] netlink: 'syz.1.13784': attribute type 1 has an invalid length. [ 903.554042][ T2194] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13784'. [ 903.641414][ T5896] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 903.641448][ T5896] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 903.641470][ T5896] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 903.641493][ T5896] usb 5-1: config 220 has no interface number 2 [ 903.641577][ T5896] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 903.641609][ T5896] usb 5-1: config 220 interface 0 has no altsetting 0 [ 903.641630][ T5896] usb 5-1: config 220 interface 76 has no altsetting 0 [ 903.641661][ T5896] usb 5-1: config 220 interface 1 has no altsetting 0 [ 903.648822][ T5896] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 903.648856][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.648879][ T5896] usb 5-1: Product: syz [ 903.648896][ T5896] usb 5-1: Manufacturer: syz [ 903.648913][ T5896] usb 5-1: SerialNumber: syz [ 903.838757][ T2203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13785'. [ 903.838829][ T2203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13785'. [ 903.959344][ T5896] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 903.959383][ T5896] uvcvideo 5-1:220.0: No valid video chain found. [ 903.959461][ T5896] usb 5-1: selecting invalid altsetting 0 [ 904.006282][ T5896] usb 5-1: selecting invalid altsetting 0 [ 904.006325][ T5896] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 904.044019][ T5896] usb 5-1: USB disconnect, device number 32 [ 904.213601][ C1] vkms_vblank_simulate: vblank timer overrun [ 904.428444][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 904.589499][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 904.591948][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 904.591979][ T10] usb 6-1: config 0 has no interface number 0 [ 904.592054][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 904.592080][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 904.592109][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 904.592139][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 904.592186][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 904.592211][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.703925][ T10] usb 6-1: config 0 descriptor?? [ 904.732961][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 907.165550][ T5896] usb 6-1: USB disconnect, device number 2 [ 907.190944][ T5896] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 908.784585][ T37] audit: type=1326 audit(2000000111.950:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2408 comm="syz.5.13888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 908.784646][ T37] audit: type=1326 audit(2000000111.950:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2408 comm="syz.5.13888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 908.788260][ T37] audit: type=1326 audit(2000000111.959:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2408 comm="syz.5.13888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 908.788316][ T37] audit: type=1326 audit(2000000111.959:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2408 comm="syz.5.13888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 908.788373][ T37] audit: type=1326 audit(2000000111.959:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2408 comm="syz.5.13888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 909.237894][ T2439] netlink: 'syz.1.13895': attribute type 10 has an invalid length. [ 910.321129][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 910.383568][ T2514] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13930'. [ 910.383722][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13930'. [ 910.491949][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 910.494497][ T5896] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 910.494525][ T5896] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 910.494547][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 910.498638][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.498672][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.498705][ T5896] usb 2-1: Product: syz [ 910.498721][ T5896] usb 2-1: Manufacturer: syz [ 910.498738][ T5896] usb 2-1: SerialNumber: syz [ 910.781182][ T582] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 910.948625][ T582] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 910.948661][ T582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.948684][ T582] usb 5-1: Product: syz [ 910.948701][ T582] usb 5-1: Manufacturer: syz [ 910.948718][ T582] usb 5-1: SerialNumber: syz [ 910.964662][ T582] usb 5-1: config 0 descriptor?? [ 911.017698][ T5896] usb 2-1: 0:2 : does not exist [ 911.214960][ T582] usb-storage 5-1:0.0: USB Mass Storage device detected [ 911.242690][ T6088] usb 2-1: USB disconnect, device number 23 [ 911.314189][ C1] vkms_vblank_simulate: vblank timer overrun [ 911.370389][ T582] usb 5-1: USB disconnect, device number 33 [ 913.189173][ T37] audit: type=1326 audit(2000000116.083:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2658 comm="syz.5.13986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x0 [ 916.805408][ T2851] CIFS mount error: No usable UNC path provided in device string! [ 916.805408][ T2851] [ 916.805433][ T2851] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 919.214670][ T2939] netlink: 'syz.5.14093': attribute type 3 has an invalid length. [ 921.234018][ T2983] netlink: 332 bytes leftover after parsing attributes in process `syz.4.14117'. [ 921.234050][ T2983] netlink: 332 bytes leftover after parsing attributes in process `syz.4.14117'. [ 922.159367][ T5790] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 922.319739][ T5790] usb 5-1: Using ep0 maxpacket: 32 [ 922.340315][ T5790] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 922.340346][ T5790] usb 5-1: config 0 has no interface number 0 [ 922.355238][ T5790] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 922.355270][ T5790] usb 5-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 922.355294][ T5790] usb 5-1: Product: syz [ 922.355308][ T5790] usb 5-1: Manufacturer: syz [ 922.355325][ T5790] usb 5-1: SerialNumber: syz [ 922.368516][ T5790] usb 5-1: config 0 descriptor?? [ 922.388095][ T5790] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 922.388131][ T5790] usb 5-1: selecting invalid altsetting 1 [ 922.388152][ T5790] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 922.403445][ T5790] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 922.404173][ T5790] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 922.404240][ T5790] usb 5-1: media controller created [ 922.451500][ T5790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.663773][ T5790] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 922.663831][ T5790] zl10353_read_register: readreg error (reg=127, ret==-71) [ 922.664335][ T5790] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 922.879966][ T5790] usb 5-1: USB disconnect, device number 34 [ 924.869537][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.872722][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 925.324847][ T6071] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 925.502876][ T6071] usb 5-1: Using ep0 maxpacket: 16 [ 925.505463][ T6071] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 925.505494][ T6071] usb 5-1: config 252 has no interface number 0 [ 925.505553][ T6071] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 925.538682][ T3146] sp0: Synchronizing with TNC [ 925.548733][ T6071] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 925.548766][ T6071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.548790][ T6071] usb 5-1: Product: syz [ 925.548807][ T6071] usb 5-1: Manufacturer: syz [ 925.548823][ T6071] usb 5-1: SerialNumber: syz [ 925.604430][ T6071] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 925.933157][ T5896] IPVS: starting estimator thread 0... [ 925.933436][ T3158] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 926.021825][ T3159] IPVS: using max 7 ests per chain, 16800 per kthread [ 926.380695][ T5896] usb 5-1: USB disconnect, device number 35 [ 926.391719][ T58] usb 5-1: Failed to submit usb control message: -71 [ 926.391759][ T58] usb 5-1: unable to send the bmi data to the device: -71 [ 926.391780][ T58] usb 5-1: unable to get target info from device [ 926.391798][ T58] usb 5-1: could not get target info (-71) [ 926.392024][ T58] usb 5-1: could not probe fw (-71) [ 926.498131][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.663655][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.015002][ T582] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 927.185484][ T582] usb 6-1: Using ep0 maxpacket: 32 [ 927.188140][ T582] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 927.188178][ T582] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.188209][ T582] usb 6-1: config 0 interface 0 has no altsetting 0 [ 927.188245][ T582] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 927.188271][ T582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.199261][ T582] usb 6-1: config 0 descriptor?? [ 927.513978][ T3231] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 927.514023][ T3231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.702222][ T582] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.002A/input/input90 [ 927.914766][ T582] uclogic 0003:28BD:0933.002A: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 927.939816][ T582] usb 6-1: USB disconnect, device number 3 [ 928.166968][ T3251] fido_id[3251]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 928.531319][ T3269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14252'. [ 929.225278][ T37] audit: type=1326 audit(2000000131.072:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.225341][ T37] audit: type=1326 audit(2000000131.072:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.225769][ T37] audit: type=1326 audit(2000000131.072:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.226824][ T37] audit: type=1326 audit(2000000131.072:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.253246][ T37] audit: type=1326 audit(2000000131.091:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.253318][ T37] audit: type=1326 audit(2000000131.091:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.258391][ T37] audit: type=1326 audit(2000000131.101:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.261376][ T37] audit: type=1326 audit(2000000131.101:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3300 comm="syz.4.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f224b9bf6c9 code=0x7ffc0000 [ 929.830522][ T3333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14293'. [ 930.322890][ T3359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14296'. [ 930.670355][ T3378] block nbd4: NBD_DISCONNECT [ 931.568862][ T3431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14326'. [ 932.003503][ T37] audit: type=1326 audit(2000000133.672:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3457 comm="syz.4.14339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f224b9bf6c9 code=0x0 [ 932.688085][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14353'. [ 932.918318][ T3499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14358'. [ 933.277242][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.407266][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.075820][ T3560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14383'. [ 934.166540][ T3564] delete_channel: no stack [ 934.353630][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14391'. [ 934.823500][ T3597] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14401'. [ 934.918835][ T3602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14404'. [ 935.038871][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.611981][ T3638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14417'. [ 935.957488][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14427'. [ 936.928327][ T6088] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 937.091391][ T6088] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 937.091425][ T6088] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 937.091447][ T6088] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 937.091469][ T6088] usb 5-1: config 220 has no interface number 2 [ 937.091589][ T6088] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 937.091622][ T6088] usb 5-1: config 220 interface 0 has no altsetting 0 [ 937.091644][ T6088] usb 5-1: config 220 interface 76 has no altsetting 0 [ 937.091664][ T6088] usb 5-1: config 220 interface 1 has no altsetting 0 [ 937.096778][ T6088] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 937.096812][ T6088] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.096837][ T6088] usb 5-1: Product: syz [ 937.096854][ T6088] usb 5-1: Manufacturer: syz [ 937.096871][ T6088] usb 5-1: SerialNumber: syz [ 937.462014][ T6088] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 937.462054][ T6088] uvcvideo 5-1:220.0: No valid video chain found. [ 937.462136][ T6088] usb 5-1: selecting invalid altsetting 0 [ 937.503061][ T6088] usb 5-1: selecting invalid altsetting 0 [ 937.503100][ T6088] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 937.538098][ T6088] usb 5-1: USB disconnect, device number 36 [ 937.900911][ T5790] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 938.069723][ T5790] usb 2-1: Using ep0 maxpacket: 8 [ 938.071572][ T5790] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 938.071594][ T5790] usb 2-1: config 0 has no interface number 0 [ 938.071627][ T5790] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 938.071644][ T5790] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 938.071664][ T5790] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 938.071684][ T5790] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 938.071942][ T5790] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 938.071966][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.085696][ T5790] usb 2-1: config 0 descriptor?? [ 938.139346][ T5790] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 939.066850][ T1670] Bluetooth: hci5: command tx timeout [ 940.530101][ T6071] usb 2-1: USB disconnect, device number 24 [ 940.543489][ T6071] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 941.451272][ C1] vkms_vblank_simulate: vblank timer overrun [ 941.477519][ T3785] netlink: 'syz.4.14487': attribute type 2 has an invalid length. [ 941.479450][ T3785] netlink: 'syz.4.14487': attribute type 2 has an invalid length. [ 941.580250][ T3788] netlink: 'syz.5.14489': attribute type 23 has an invalid length. [ 942.647904][ T3844] ptrace attach of "./syz-executor exec"[1669] was attempted by ""[3844] [ 944.156491][ T3921] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14555'. [ 944.156522][ T3921] netlink: 71 bytes leftover after parsing attributes in process `syz.4.14555'. [ 944.416061][ T3935] GUP no longer grows the stack in syz.4.14564 (3935): 200000005000-200000008000 (200000004000) [ 944.416106][ T3935] CPU: 1 UID: 0 PID: 3935 Comm: syz.4.14564 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 944.416154][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 944.416183][ T3935] Call Trace: [ 944.416192][ T3935] [ 944.416204][ T3935] dump_stack_lvl+0x189/0x250 [ 944.416251][ T3935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.416288][ T3935] ? __pfx__printk+0x10/0x10 [ 944.416315][ T3935] ? find_vma+0xe7/0x160 [ 944.416363][ T3935] fixup_user_fault+0x661/0x720 [ 944.416403][ T3935] fault_in_user_writeable+0x72/0xe0 [ 944.416431][ T3935] futex_lock_pi+0x765/0xa70 [ 944.416476][ T3935] ? __pfx_futex_lock_pi+0x10/0x10 [ 944.416508][ T3935] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 944.416577][ T3935] ? __pfx_futex_wake_mark+0x10/0x10 [ 944.416632][ T3935] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 944.416676][ T3935] do_futex+0x292/0x420 [ 944.416719][ T3935] ? __pfx_do_futex+0x10/0x10 [ 944.416749][ T3935] ? __vm_munmap+0x2c1/0x380 [ 944.416783][ T3935] __se_sys_futex+0x36f/0x400 [ 944.416820][ T3935] ? __pfx___se_sys_futex+0x10/0x10 [ 944.416860][ T3935] ? __x64_sys_futex+0x21/0xf0 [ 944.416895][ T3935] do_syscall_64+0xfa/0xfa0 [ 944.416929][ T3935] ? lockdep_hardirqs_on+0x9c/0x150 [ 944.416965][ T3935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.416989][ T3935] ? clear_bhb_loop+0x60/0xb0 [ 944.417019][ T3935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.417042][ T3935] RIP: 0033:0x7f224b9bf6c9 [ 944.417063][ T3935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.417085][ T3935] RSP: 002b:00007f2249c26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 944.417112][ T3935] RAX: ffffffffffffffda RBX: 00007f224bc15fa0 RCX: 00007f224b9bf6c9 [ 944.417131][ T3935] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 944.417148][ T3935] RBP: 00007f224ba41f91 R08: 0000000000000000 R09: 0000000000000000 [ 944.417165][ T3935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.417180][ T3935] R13: 00007f224bc16038 R14: 00007f224bc15fa0 R15: 00007ffe3b314758 [ 944.417220][ T3935] [ 944.979574][ T3958] netlink: 'syz.5.14575': attribute type 2 has an invalid length. [ 944.987273][ T3958] netlink: 'syz.5.14575': attribute type 2 has an invalid length. [ 945.710299][ T3997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14597'. [ 947.149653][ T4056] netlink: 'syz.1.14624': attribute type 23 has an invalid length. [ 949.084885][ T4143] netlink: 'syz.4.14669': attribute type 5 has an invalid length. [ 949.147271][ T4148] tipc: Enabling of bearer rejected, media not registered [ 949.244640][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14672'. [ 950.889903][ T4227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14705'. [ 950.973946][ T4232] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14708'. [ 950.973973][ T4232] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14708'. [ 951.098047][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14709'. [ 951.098074][ T4240] netlink: 44 bytes leftover after parsing attributes in process `syz.5.14709'. [ 952.689432][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14750'. [ 952.833530][ T4327] netlink: 'syz.1.14754': attribute type 6 has an invalid length. [ 952.835162][ T4327] netlink: 'syz.1.14754': attribute type 6 has an invalid length. [ 953.580201][ T4363] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14769'. [ 953.629113][ T4370] netlink: 'syz.4.14775': attribute type 29 has an invalid length. [ 953.631249][ T4370] netlink: 'syz.4.14775': attribute type 29 has an invalid length. [ 954.240179][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.663374][ T4419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14800'. [ 955.366708][ T4455] Bluetooth: MGMT ver 1.23 [ 956.588979][ T37] audit: type=1326 audit(2000000156.666:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4471 comm="syz.5.14825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7fc00000 [ 956.628180][ T4513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14845'. [ 956.927718][ T4528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.177391][ T4543] [U] [ 957.177442][ T4543] [U] [ 957.177485][ T4543] [U] [ 957.177526][ T4543] [U] [ 957.177653][ T4543] [U] [ 957.177706][ T4543] [U] [ 957.177751][ T4543] [U] [ 957.177797][ T4543] [U] [ 957.177870][ T4543] [U] [ 957.177914][ T4543] [U] [ 957.177958][ T4543] [U] [ 957.225707][ T4543] [U] [ 957.225791][ T4543] [U] [ 957.225835][ T4543] [U] [ 957.225877][ T4543] [U] [ 957.225918][ T4543] [U] [ 957.225995][ T4543] [U] [ 957.226041][ T4543] [U] [ 957.226085][ T4543] [U] [ 957.226129][ T4543] [U] [ 957.226182][ T4543] [U] [ 957.226241][ T4543] [U] [ 957.226285][ T4543] [U] [ 957.226332][ T4543] [U] [ 957.226402][ T4543] [U] [ 957.226447][ T4543] [U] [ 957.226490][ T4543] [U] [ 957.226533][ T4543] [U] [ 957.226586][ T4543] [U] [ 957.226631][ T4543] [U] [ 957.226675][ T4543] [U] [ 957.226720][ T4543] [U] [ 957.226788][ T4543] [U] [ 957.226833][ T4543] [U] [ 957.226878][ T4543] [U] [ 957.226922][ T4543] [U] [ 957.226975][ T4543] [U] [ 957.227021][ T4543] [U] [ 957.227065][ T4543] [U] [ 957.227111][ T4543] [U] [ 957.227178][ T4543] [U] [ 957.227222][ T4543] [U] [ 957.227275][ T4543] [U] [ 957.227316][ T4543] [U] [ 957.227370][ T4543] [U] [ 957.227414][ T4543] [U] [ 957.227463][ T4543] [U] [ 957.227508][ T4543] [U] [ 957.227582][ T4543] [U] [ 957.227628][ T4543] [U] [ 957.227669][ T4543] [U] [ 957.227712][ T4543] [U] [ 957.227766][ T4543] [U] [ 957.227809][ T4543] [U] [ 957.227851][ T4543] [U] [ 957.227893][ T4543] [U] [ 957.227962][ T4543] [U] [ 957.228006][ T4543] [U] [ 957.228051][ T4543] [U] [ 957.228095][ T4543] [U] [ 957.228148][ T4543] [U] [ 957.228192][ T4543] [U] [ 957.228244][ T4543] [U] [ 957.228291][ T4543] [U] [ 957.228358][ T4543] [U] [ 957.228403][ T4543] [U] [ 957.228449][ T4543] [U] [ 957.228491][ T4543] [U] [ 957.228542][ T4543] [U] [ 957.228583][ T4543] [U] [ 957.228628][ T4543] [U] [ 957.228670][ T4543] [U] [ 957.228735][ T4543] [U] [ 957.228779][ T4543] [U] [ 957.228819][ T4543] [U] [ 957.228859][ T4543] [U] [ 957.228909][ T4543] [U] [ 957.228950][ T4543] [U] [ 957.228995][ T4543] [U] [ 957.229039][ T4543] [U] [ 957.229109][ T4543] [U] [ 957.229153][ T4543] [U] [ 957.229197][ T4543] [U] [ 957.229250][ T4543] [U] [ 957.229304][ T4543] [U] [ 957.229350][ T4543] [U] [ 957.229394][ T4543] [U] [ 957.229440][ T4543] [U] [ 957.229508][ T4543] [U] [ 957.229553][ T4543] [U] [ 957.229598][ T4543] [U] [ 957.229642][ T4543] [U] [ 957.229695][ T4543] [U] [ 957.229740][ T4543] [U] [ 957.229785][ T4543] [U] [ 957.229829][ T4543] [U] [ 957.229897][ T4543] [U] [ 957.229942][ T4543] [U] [ 957.229986][ T4543] [U] [ 957.230031][ T4543] [U] [ 957.230084][ T4543] [U] [ 957.230146][ T4543] [U] [ 957.230192][ T4543] [U] [ 957.230243][ T4543] [U] [ 957.230309][ T4543] [U] [ 957.230351][ T4543] [U] [ 957.230406][ T4543] [U] [ 957.513572][ T4543] [U] [ 957.513651][ T4543] [U] [ 957.513696][ T4543] [U] [ 957.513743][ T4543] [U] [ 957.513790][ T4543] [U] [ 957.513867][ T4543] [U] [ 957.513914][ T4543] [U] [ 957.513956][ T4543] [U] [ 957.513998][ T4543] [U] [ 957.514049][ T4543] [U] [ 957.514091][ T4543] [U] [ 957.514157][ T4543] [U] [ 957.514200][ T4543] [U] [ 957.514282][ T4543] [U] [ 957.514328][ T4543] [U] [ 957.514374][ T4543] [U] [ 957.514416][ T4543] [U] [ 957.514469][ T4543] [U] [ 957.514512][ T4543] [U] [ 957.514555][ T4543] [U] [ 957.606242][ T4541] [U] [ 957.881748][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14867'. [ 958.663054][ T4602] netlink: 64 bytes leftover after parsing attributes in process `syz.5.14889'. [ 958.832541][ T4612] netlink: 'syz.1.14894': attribute type 3 has an invalid length. [ 959.361453][ T4641] netlink: 71 bytes leftover after parsing attributes in process `syz.5.14908'. [ 959.598805][ T4652] sctp: [Deprecated]: syz.5.14912 (pid 4652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.598805][ T4652] Use struct sctp_sack_info instead [ 960.397082][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.917957][ T4712] program syz.1.14943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 961.797584][ T4754] vlan2: entered promiscuous mode [ 961.797615][ T4754] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 961.986144][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14978'. [ 963.235179][ T5896] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 963.413209][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.413248][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.413275][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 963.413325][ T5896] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 963.413352][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.433059][ T5896] usb 5-1: config 0 descriptor?? [ 963.937915][ T5896] itetech 0003:048D:8595.002B: item fetching failed at offset 3/7 [ 963.938860][ T5896] itetech 0003:048D:8595.002B: probe with driver itetech failed with error -22 [ 964.149423][ T10] usb 5-1: USB disconnect, device number 37 [ 964.254142][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 964.415818][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.415876][ T5896] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 964.415904][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.435025][ T5896] usb 6-1: config 0 descriptor?? [ 964.820370][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15035'. [ 964.820915][ T4897] netlink: 1 bytes leftover after parsing attributes in process `syz.1.15035'. [ 964.922905][ T5896] steelseries 0003:1038:12B6.002C: unknown main item tag 0x1 [ 964.923279][ T5896] steelseries 0003:1038:12B6.002C: reserved main item tag 0xd [ 964.923318][ T5896] steelseries 0003:1038:12B6.002C: item fetching failed at offset 6/7 [ 964.924301][ T5896] steelseries 0003:1038:12B6.002C: probe with driver steelseries failed with error -22 [ 965.118611][ T5790] usb 6-1: USB disconnect, device number 4 [ 965.464834][ T4927] sp0: Synchronizing with TNC [ 965.509337][ T4930] sp0: Found TNC [ 966.241943][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15067'. [ 966.241985][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15067'. [ 966.289721][ T3550] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.306510][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.306571][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.306620][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.951880][ T5039] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 967.951943][ T5039] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 967.952073][ T5039] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 967.952230][ T5039] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 967.952284][ T5039] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 967.952336][ T5039] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 967.952484][ T5039] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 967.952537][ T5039] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 967.952590][ T5039] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 967.952708][ T5039] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 968.419524][ T5053] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 968.433346][ T5053] @0Ù: renamed from bond_slave_1 (while UP) [ 970.293448][ T5790] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 970.463824][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 970.475340][ T5790] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 970.475374][ T5790] usb 2-1: config 0 has no interface number 0 [ 970.475430][ T5790] usb 2-1: config 0 interface 12 has no altsetting 0 [ 970.514145][ T5790] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 970.514181][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.514205][ T5790] usb 2-1: Product: syz [ 970.514222][ T5790] usb 2-1: Manufacturer: syz [ 970.514239][ T5790] usb 2-1: SerialNumber: syz [ 970.566139][ T5790] usb 2-1: config 0 descriptor?? [ 970.801998][ T5790] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 970.802078][ T5790] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 970.802182][ T5790] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 970.802281][ T5790] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 970.853754][ T5790] usb 2-1: USB disconnect, device number 25 [ 971.200644][ T5142] netlink: 47 bytes leftover after parsing attributes in process `syz.5.15151'. [ 971.200669][ T5142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15151'. [ 971.200694][ T5142] netlink: 47 bytes leftover after parsing attributes in process `syz.5.15151'. [ 971.274886][ T5146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15152'. [ 974.089773][ T5294] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15220'. [ 974.216594][ T5301] tipc: Started in network mode [ 974.216632][ T5301] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 974.216692][ T5301] tipc: Enabling of bearer rejected, failed to enable media [ 974.448291][ T5308] bond4: entered promiscuous mode [ 974.448573][ T5315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15229'. [ 975.046703][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.456630][ T5357] loop2: detected capacity change from 0 to 7 [ 975.483837][ T5357] Dev loop2: unable to read RDB block 7 [ 975.483888][ T5357] loop2: AHDI p1 p2 [ 975.483928][ T5357] loop2: partition table partially beyond EOD, truncated [ 975.484193][ T5357] loop2: p1 start 1835360114 is beyond EOD, truncated [ 976.265536][ T5383] Falling back ldisc for ptm0. [ 977.572762][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15303'. [ 977.902167][ T5457] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15299'. [ 977.989906][ T5461] netlink: 'syz.4.15302': attribute type 3 has an invalid length. [ 978.837775][ T5502] program syz.1.15319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.907248][ T5505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15323'. [ 979.461294][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15331'. [ 979.971509][ T582] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 980.142317][ T582] usb 2-1: Using ep0 maxpacket: 8 [ 980.145120][ T582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.145156][ T582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.145207][ T582] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 980.145232][ T582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.158008][ T582] usb 2-1: config 0 descriptor?? [ 980.648731][ T582] uclogic 0003:5543:0004.002D: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 980.869456][ T6071] usb 2-1: USB disconnect, device number 26 [ 980.942498][ T5577] fido_id[5577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 981.392099][ T5595] bridge_slave_0: left allmulticast mode [ 981.392136][ T5595] bridge_slave_0: left promiscuous mode [ 981.436201][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.526940][ T5595] bridge_slave_1: left allmulticast mode [ 981.526971][ T5595] bridge_slave_1: left promiscuous mode [ 981.527222][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.673500][ T5595] bond0: (slave bond_slave_0): Releasing backup interface [ 981.869622][ T5595] bond0: (slave bond_slave_1): Releasing backup interface [ 982.085751][ T5595] team0: Port device team_slave_0 removed [ 982.205541][ T5595] team0: Port device team_slave_1 removed [ 982.225738][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.225774][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.257389][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.257424][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.299371][ T5595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 982.562947][ T5649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15385'. [ 983.135053][ T5671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.159528][ T5674] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 983.329248][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.649968][ T5736] netlink: 256 bytes leftover after parsing attributes in process `syz.1.15427'. [ 984.649995][ T5736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15427'. [ 985.323942][ T37] audit: type=1326 audit(2000000183.532:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.326259][ T37] audit: type=1326 audit(2000000183.532:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.326949][ T37] audit: type=1326 audit(2000000183.532:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.335742][ T37] audit: type=1326 audit(2000000183.541:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.344267][ T37] audit: type=1326 audit(2000000183.541:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.344785][ T37] audit: type=1326 audit(2000000183.550:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.345588][ T37] audit: type=1326 audit(2000000183.550:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.346585][ T37] audit: type=1326 audit(2000000183.550:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 985.346976][ T37] audit: type=1326 audit(2000000183.550:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5767 comm="syz.1.15442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b17cf6c9 code=0x7ffc0000 [ 988.027820][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15492'. [ 989.297432][ T5937] macvlan0: entered promiscuous mode [ 989.320858][ T5937] netlink: 'syz.1.15518': attribute type 1 has an invalid length. [ 989.320884][ T5937] netlink: 'syz.1.15518': attribute type 2 has an invalid length. [ 989.320901][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15518'. [ 989.405145][ T5943] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 989.408679][ T5943] @0Ù: renamed from bond_slave_1 [ 989.738271][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15525'. [ 989.738306][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15525'. [ 990.573690][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.573775][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.831439][ T49] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 991.993869][ T49] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 991.993905][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.014433][ T49] usb 2-1: config 0 descriptor?? [ 992.543564][ T49] apple 0003:05AC:029F.002E: unbalanced delimiter at end of report description [ 992.555883][ T49] apple 0003:05AC:029F.002E: parse failed [ 992.556014][ T49] apple 0003:05AC:029F.002E: probe with driver apple failed with error -22 [ 992.734788][ T6088] usb 2-1: USB disconnect, device number 27 [ 992.880314][ T6137] netlink: 'syz.4.15584': attribute type 2 has an invalid length. [ 993.437973][ T6155] netlink: 'syz.4.15592': attribute type 27 has an invalid length. [ 997.092582][ T582] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 997.252953][ T582] usb 6-1: Using ep0 maxpacket: 8 [ 997.255573][ T582] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.255606][ T582] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.255651][ T582] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 997.255682][ T582] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 997.255710][ T582] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.255759][ T582] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 997.255786][ T582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.586306][ T582] usb 6-1: GET_CAPABILITIES returned 0 [ 997.586359][ T582] usbtmc 6-1:16.0: can't read capabilities [ 997.794464][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.952349][ T582] usb 6-1: USB disconnect, device number 5 [ 999.552541][ T6350] program syz.5.15683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.967541][ T6088] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1000.014032][ T6088] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1001.525379][ T6428] netlink: 'syz.5.15715': attribute type 8 has an invalid length. [ 1001.526183][ T6428] sch_fq: defrate 0 ignored. [ 1001.989857][ T6088] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1002.161334][ T6088] usb 5-1: Using ep0 maxpacket: 8 [ 1002.163913][ T6088] usb 5-1: config 0 has no interfaces? [ 1002.163953][ T6088] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1002.163981][ T6088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.203521][ T6088] usb 5-1: config 0 descriptor?? [ 1002.444621][ T10] usb 5-1: USB disconnect, device number 38 [ 1004.259917][ T6526] No memory to map [ 1004.747285][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15766'. [ 1004.747327][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15766'. [ 1004.795830][ T3598] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.796078][ T3598] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.796134][ T3598] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.796171][ T3598] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.296079][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15776'. [ 1005.296115][ T6564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15776'. [ 1005.432625][ T6572] netlink: 'syz.4.15781': attribute type 2 has an invalid length. [ 1005.432652][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15781'. [ 1006.171663][ T582] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1006.216884][ T6609] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1006.362260][ T582] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1006.362302][ T582] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1006.362349][ T582] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1006.362377][ T582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.370697][ T6596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1006.414760][ T582] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1006.571693][ T6623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1007.259674][ T582] usb 6-1: USB disconnect, device number 6 [ 1008.021040][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15820'. [ 1008.430298][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15830'. [ 1010.200476][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15861'. [ 1010.201650][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15861'. [ 1010.812828][ T49] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1010.991029][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.991067][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.991093][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1010.991141][ T49] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.991168][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.054244][ T49] usb 6-1: config 0 descriptor?? [ 1011.137762][ T6782] input: syz1 as /devices/virtual/input/input91 [ 1011.524153][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524197][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524227][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524256][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524287][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524315][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524344][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524374][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524402][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.524430][ T49] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 1011.660080][ T49] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1011.837565][ T49] usb 6-1: USB disconnect, device number 7 [ 1011.859187][ T6808] netlink: 'syz.4.15892': attribute type 30 has an invalid length. [ 1012.040249][ T6806] fido_id[6806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1012.044700][ T6808] bond5: option arp_missed_max: invalid value (0) [ 1012.044727][ T6808] bond5: option arp_missed_max: allowed values 1 - 255 [ 1012.139460][ T6808] bond5 (unregistering): Released all slaves [ 1012.612696][ T6836] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1012.705956][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1012.876739][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1012.880396][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.880451][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1012.880478][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.892853][ T10] usb 2-1: config 0 descriptor?? [ 1013.381419][ T10] mcp2221 0003:04D8:00DD.0031: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1013.704972][ T6865] bond0: Unable to set down delay as MII monitoring is disabled [ 1013.814336][ T49] usb 2-1: USB disconnect, device number 28 [ 1015.280236][ T6917] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.15945'. [ 1016.448504][ T49] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1016.609568][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 1016.612294][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.612350][ T49] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1016.612377][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.656689][ T49] usb 2-1: config 0 descriptor?? [ 1017.153179][ T49] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1017.555353][ T10] usb 2-1: USB disconnect, device number 29 [ 1019.336492][ T49] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1019.507722][ T49] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.507753][ T49] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1019.507776][ T49] usb 5-1: config 1 has no interface number 0 [ 1019.507855][ T49] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.507887][ T49] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1019.507917][ T49] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 1019.507977][ T49] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1019.515963][ T49] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1019.515999][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.516023][ T49] usb 5-1: Product: syz [ 1019.516040][ T49] usb 5-1: Manufacturer: syz [ 1019.516057][ T49] usb 5-1: SerialNumber: syz [ 1019.735974][ T7086] netlink: 232 bytes leftover after parsing attributes in process `syz.5.16025'. [ 1019.736012][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16025'. [ 1020.302728][ T49] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 1020.302783][ T49] cdc_ncm 5-1:1.1: bind() failure [ 1020.320259][ T582] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1020.327997][ T49] usb 5-1: USB disconnect, device number 39 [ 1020.491378][ T582] usb 2-1: Using ep0 maxpacket: 8 [ 1020.498623][ T582] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1020.498661][ T582] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1020.498689][ T582] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1020.498716][ T582] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.498764][ T582] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1020.498791][ T582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.812759][ T582] usb 2-1: GET_CAPABILITIES returned 0 [ 1020.812813][ T582] usbtmc 2-1:16.0: can't read capabilities [ 1021.042313][ T10] usb 2-1: USB disconnect, device number 30 [ 1021.763637][ T582] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1021.945991][ T582] usb 5-1: Using ep0 maxpacket: 32 [ 1021.948659][ T582] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1021.948689][ T582] usb 5-1: config 0 has no interface number 0 [ 1021.952860][ T582] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1021.952889][ T582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.952909][ T582] usb 5-1: Product: syz [ 1021.952924][ T582] usb 5-1: Manufacturer: syz [ 1021.952937][ T582] usb 5-1: SerialNumber: syz [ 1021.977402][ T582] usb 5-1: config 0 descriptor?? [ 1021.988520][ T582] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1022.257856][ T582] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1022.390997][ T582] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1022.659169][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1022.664943][ T10] usb 5-1: USB disconnect, device number 40 [ 1022.694815][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1022.774484][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1022.775520][ T10] quatech2 5-1:0.51: device disconnected [ 1024.051983][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1024.219133][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 1024.219194][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1024.219247][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1024.219274][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.273735][ T10] usb 2-1: config 0 descriptor?? [ 1024.621173][ T5896] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1024.739273][ T10] hid_parser_main: 28 callbacks suppressed [ 1024.739298][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.739330][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.739354][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.739376][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.739399][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.739423][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.739447][ T10] magicmouse 0003:05AC:0269.0033: unknown main item tag 0x0 [ 1024.750718][ T10] magicmouse 0003:05AC:0269.0033: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 1024.782220][ T5896] usb 5-1: config 2 has an invalid interface number: 50 but max is 0 [ 1024.782256][ T5896] usb 5-1: config 2 has no interface number 0 [ 1024.782317][ T5896] usb 5-1: config 2 interface 50 altsetting 2 endpoint 0x82 has invalid maxpacket 1967, setting to 64 [ 1024.782351][ T5896] usb 5-1: config 2 interface 50 has no altsetting 0 [ 1024.786643][ T5896] usb 5-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 1024.786682][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.786708][ T5896] usb 5-1: Product: syz [ 1024.786727][ T5896] usb 5-1: Manufacturer: syz [ 1024.786746][ T5896] usb 5-1: SerialNumber: syz [ 1024.808402][ T7245] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1024.823862][ T5896] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 1024.966258][ T6088] usb 2-1: USB disconnect, device number 31 [ 1025.113397][ T7260] fido_id[7260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1025.506138][ T5896] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input93 [ 1025.722344][ T5896] usb 5-1: USB disconnect, device number 41 [ 1026.095012][ T7292] netlink: 888 bytes leftover after parsing attributes in process `syz.1.16125'. [ 1026.760318][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1026.865976][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16139'. [ 1026.928219][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.928259][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.928313][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1026.928345][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.956188][ T10] usb 2-1: config 0 descriptor?? [ 1027.442550][ T10] cp2112 0003:10C4:EA90.0034: unknown main item tag 0x0 [ 1027.471723][ T10] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1027.639986][ T10] cp2112 0003:10C4:EA90.0034: error requesting version [ 1027.643058][ T10] cp2112 0003:10C4:EA90.0034: probe with driver cp2112 failed with error -71 [ 1027.675092][ T10] usb 2-1: USB disconnect, device number 32 [ 1027.930919][ T7355] bridge_slave_0: default FDB implementation only supports local addresses [ 1029.046101][ T6071] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1029.210779][ T6071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.210820][ T6071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.210846][ T6071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.210895][ T6071] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1029.210921][ T6071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.238825][ T6071] usb 5-1: config 0 descriptor?? [ 1029.701840][ T6071] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1029.701885][ T6071] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 1029.738439][ T6071] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1029.974953][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16192'. [ 1029.974988][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16192'. [ 1030.001832][ T582] usb 5-1: USB disconnect, device number 42 [ 1032.217688][ T7524] serio: Serial port ttyS3 [ 1032.254697][ T6088] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1032.427188][ T6088] usb 2-1: Using ep0 maxpacket: 32 [ 1032.429512][ T6088] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1032.433530][ T6088] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1032.433560][ T6088] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1032.433582][ T6088] usb 2-1: Product: syz [ 1032.433597][ T6088] usb 2-1: Manufacturer: syz [ 1032.433613][ T6088] usb 2-1: SerialNumber: syz [ 1032.495445][ T6088] usb 2-1: config 0 descriptor?? [ 1032.496901][ T7513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1032.513488][ T6088] hub 2-1:0.0: bad descriptor, ignoring hub [ 1032.513530][ T6088] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1032.832576][ T582] usb 2-1: USB disconnect, device number 33 [ 1033.206488][ T582] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1033.366749][ T582] usb 2-1: Using ep0 maxpacket: 32 [ 1033.369554][ T582] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1033.374289][ T582] usb 2-1: string descriptor 0 read error: -22 [ 1033.374460][ T582] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1033.374487][ T582] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1033.431282][ T582] usb 2-1: config 0 descriptor?? [ 1033.433556][ T7513] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1033.436082][ T582] hub 2-1:0.0: bad descriptor, ignoring hub [ 1033.436124][ T582] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1033.805347][ T582] usb 2-1: USB disconnect, device number 34 [ 1034.844049][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16288'. [ 1036.719234][ T7706] loop2: detected capacity change from 0 to 7 [ 1036.752695][ T7706] Dev loop2: unable to read RDB block 7 [ 1036.752736][ T7706] loop2: AHDI p1 p2 p3 [ 1036.752770][ T7706] loop2: partition table partially beyond EOD, truncated [ 1036.816206][ T7706] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1036.816236][ T7706] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1037.617425][ T37] audit: type=1326 audit(2000000232.428:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.620193][ T37] audit: type=1326 audit(2000000232.428:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.620527][ T37] audit: type=1326 audit(2000000232.428:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.627692][ T37] audit: type=1326 audit(2000000232.447:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.629534][ T37] audit: type=1326 audit(2000000232.447:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.629880][ T37] audit: type=1326 audit(2000000232.447:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.630696][ T37] audit: type=1326 audit(2000000232.447:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.631048][ T37] audit: type=1326 audit(2000000232.447:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.631783][ T37] audit: type=1326 audit(2000000232.447:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1037.641255][ T37] audit: type=1326 audit(2000000232.447:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7745 comm="syz.5.16345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1fc5f6c9 code=0x7ffc0000 [ 1038.551057][ T7776] trusted_key: encrypted_key: key trusted:syz not found [ 1039.067543][ T7793] xfrm0 speed is unknown, defaulting to 1000 [ 1039.154242][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16371'. [ 1040.283056][ T7793] lo speed is unknown, defaulting to 1000 [ 1041.408077][ T7793] lo speed is unknown, defaulting to 1000 [ 1041.648670][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16420'. [ 1041.707962][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16420'. [ 1042.122443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.386789][ C1] vkms_vblank_simulate: vblank timer overrun [ 1042.980544][ T6071] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1043.140855][ T6071] usb 6-1: Using ep0 maxpacket: 16 [ 1043.145643][ T6071] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.145679][ T6071] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.145704][ T6071] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1043.145741][ T6071] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1043.145767][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.205848][ T6071] usb 6-1: config 0 descriptor?? [ 1043.300101][ T7952] team0: entered allmulticast mode [ 1043.300127][ T7952] team_slave_0: entered allmulticast mode [ 1043.300153][ T7952] team_slave_1: entered allmulticast mode [ 1043.656161][ T6071] hid (null): unknown global tag 0xd [ 1043.656238][ T6071] hid (null): unknown global tag 0xe [ 1043.703979][ T6071] hid_parser_main: 36 callbacks suppressed [ 1043.704007][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704042][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704074][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704119][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704149][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704176][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704206][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704236][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704267][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.704295][ T6071] cougar 0003:060B:500A.0036: unknown main item tag 0x0 [ 1043.794972][ T6071] cougar 0003:060B:500A.0036: unexpected long global item [ 1043.795892][ T6071] cougar 0003:060B:500A.0036: parse failed [ 1043.796005][ T6071] cougar 0003:060B:500A.0036: probe with driver cougar failed with error -22 [ 1043.872178][ T582] usb 6-1: USB disconnect, device number 8 [ 1044.396750][ T6071] kernel write not supported for file /5882/gid_map (pid: 6071 comm: kworker/0:4) [ 1045.077915][ T8027] netlink: 7 bytes leftover after parsing attributes in process `syz.5.16481'. [ 1045.077945][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16481'. [ 1045.077969][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16481'. [ 1046.634466][ T8090] [ 1046.634481][ T8090] ============================================ [ 1046.634492][ T8090] WARNING: possible recursive locking detected [ 1046.634508][ T8090] syzkaller #0 Not tainted [ 1046.634521][ T8090] -------------------------------------------- [ 1046.634530][ T8090] syz.5.16513/8090 is trying to acquire lock: [ 1046.634543][ T8090] ffff888080618318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#7){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 1046.634621][ T8090] [ 1046.634621][ T8090] but task is already holding lock: [ 1046.634630][ T8090] ffff888080618318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#7){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 1046.634696][ T8090] [ 1046.634696][ T8090] other info that might help us debug this: [ 1046.634706][ T8090] Possible unsafe locking scenario: [ 1046.634706][ T8090] [ 1046.634713][ T8090] CPU0 [ 1046.634720][ T8090] ---- [ 1046.634725][ T8090] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#7); [ 1046.634745][ T8090] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#7); [ 1046.634766][ T8090] [ 1046.634766][ T8090] *** DEADLOCK *** [ 1046.634766][ T8090] [ 1046.634772][ T8090] May be due to missing lock nesting notation [ 1046.634772][ T8090] [ 1046.634781][ T8090] 17 locks held by syz.5.16513/8090: [ 1046.634795][ T8090] #0: ffff88803c6e8ed8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xb86/0x2590 [ 1046.634860][ T8090] #1: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: sctp_v6_xmit+0x65e/0x1350 [ 1046.634918][ T8090] #2: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x291/0x1970 [ 1046.634969][ T8090] #3: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1046.635023][ T8090] #4: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1046.635083][ T8090] #5: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1046.635144][ T8090] #6: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 1046.635206][ T8090] #7: ffff888080618318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#7){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 1046.635276][ T8090] #8: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 1046.635334][ T8090] #9: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 1046.635399][ T8090] #10: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1046.635468][ T8090] #11: ffff88814cec8298 (k-slock-AF_INET6){+...}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 1046.635532][ T8090] #12: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1046.635593][ T8090] #13: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 1046.635651][ T8090] #14: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1046.635705][ T8090] #15: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 1046.635764][ T8090] #16: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 1046.635828][ T8090] [ 1046.635828][ T8090] stack backtrace: [ 1046.635844][ T8090] CPU: 0 UID: 0 PID: 8090 Comm: syz.5.16513 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1046.635877][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1046.635894][ T8090] Call Trace: [ 1046.635904][ T8090] [ 1046.635915][ T8090] dump_stack_lvl+0x189/0x250 [ 1046.635954][ T8090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.635990][ T8090] ? __pfx__printk+0x10/0x10 [ 1046.636014][ T8090] ? do_raw_spin_lock+0x121/0x290 [ 1046.636045][ T8090] ? print_lock_name+0xde/0x100 [ 1046.636072][ T8090] print_deadlock_bug+0x28b/0x2a0 [ 1046.636096][ T8090] validate_chain+0x1a3f/0x2140 [ 1046.636120][ T8090] ? check_path+0x21/0x40 [ 1046.636139][ T8090] ? check_noncircular+0xe0/0x160 [ 1046.636161][ T8090] ? __lock_acquire+0xab9/0xd20 [ 1046.636194][ T8090] __lock_acquire+0xab9/0xd20 [ 1046.636229][ T8090] ? __dev_queue_xmit+0xd58/0x3b70 [ 1046.636258][ T8090] lock_acquire+0x120/0x360 [ 1046.636290][ T8090] ? __dev_queue_xmit+0xd58/0x3b70 [ 1046.636323][ T8090] ? __lock_acquire+0xab9/0xd20 [ 1046.636356][ T8090] rt_spin_lock+0x88/0x3e0 [ 1046.636382][ T8090] ? __dev_queue_xmit+0xd58/0x3b70 [ 1046.636422][ T8090] ? __pfx_rt_spin_lock+0x10/0x10 [ 1046.636456][ T8090] __dev_queue_xmit+0xd58/0x3b70 [ 1046.636491][ T8090] ? __dev_queue_xmit+0x26f/0x3b70 [ 1046.636531][ T8090] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1046.636559][ T8090] ? read_seqbegin+0x128/0x2e0 [ 1046.636594][ T8090] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.636628][ T8090] ? read_seqbegin+0x27c/0x2e0 [ 1046.636666][ T8090] ? __pfx_read_seqbegin+0x10/0x10 [ 1046.636702][ T8090] ? rt_write_unlock+0x191/0x230 [ 1046.636730][ T8090] ? ___neigh_create+0xf02/0x2360 [ 1046.636764][ T8090] ? ___neigh_create+0x1d71/0x2360 [ 1046.636798][ T8090] ? neigh_connected_output+0x3b6/0x460 [ 1046.636842][ T8090] ip6_finish_output2+0x1162/0x14c0 [ 1046.636876][ T8090] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1046.636903][ T8090] ? ip6_mtu+0x7d/0x490 [ 1046.636926][ T8090] ? ip6_mtu+0x38c/0x490 [ 1046.636948][ T8090] ? ip6_finish_output+0x2ef/0x4e0 [ 1046.636970][ T8090] ? ip6_output+0x126/0x550 [ 1046.636992][ T8090] ip6_output+0x340/0x550 [ 1046.637013][ T8090] ? ip6_send_skb+0x10f/0x390 [ 1046.637039][ T8090] ip6_send_skb+0x1d5/0x390 [ 1046.637067][ T8090] icmp6_send+0x12c6/0x1940 [ 1046.637099][ T8090] ? icmp6_send+0x1e9/0x1940 [ 1046.637140][ T8090] ? __pfx_icmp6_send+0x10/0x10 [ 1046.637172][ T8090] ? __lock_acquire+0xab9/0xd20 [ 1046.637213][ T8090] ? ip6_neigh_lookup+0x14e/0x470 [ 1046.637251][ T8090] ? __ipv6_addr_type+0x10c/0x2f0 [ 1046.637280][ T8090] ? ip6_tnl_xmit_ctl+0x19f/0x660 [ 1046.637311][ T8090] ip6_link_failure+0x3b/0x4c0 [ 1046.637344][ T8090] ? __pfx_ip6_link_failure+0x10/0x10 [ 1046.637382][ T8090] ip6_tnl_xmit+0xe11/0x2ba0 [ 1046.637422][ T8090] ? lockdep_unlock+0x89/0x120 [ 1046.637462][ T8090] ? __pfx_ip6_tnl_xmit+0x10/0x10 [ 1046.637498][ T8090] ? __pfx_make_kuid+0x10/0x10 [ 1046.637529][ T8090] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1046.637560][ T8090] ip6_tnl_start_xmit+0xc1d/0x1150 [ 1046.637599][ T8090] ? __pfx_ip6_tnl_start_xmit+0x10/0x10 [ 1046.637630][ T8090] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1046.637676][ T8090] dev_hard_start_xmit+0x2f0/0x870 [ 1046.637714][ T8090] sch_direct_xmit+0x241/0x4b0 [ 1046.637756][ T8090] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1046.637798][ T8090] __dev_queue_xmit+0x19fc/0x3b70 [ 1046.637835][ T8090] ? __dev_queue_xmit+0x26f/0x3b70 [ 1046.637876][ T8090] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1046.637907][ T8090] ? read_seqbegin+0x128/0x2e0 [ 1046.637943][ T8090] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.637978][ T8090] ? read_seqbegin+0x27c/0x2e0 [ 1046.638017][ T8090] ? __pfx_read_seqbegin+0x10/0x10 [ 1046.638054][ T8090] ? rt_write_unlock+0x191/0x230 [ 1046.638085][ T8090] ? ___neigh_create+0xf02/0x2360 [ 1046.638120][ T8090] ? ___neigh_create+0x1d71/0x2360 [ 1046.638158][ T8090] ? neigh_connected_output+0x3b6/0x460 [ 1046.638206][ T8090] ip6_finish_output2+0x1162/0x14c0 [ 1046.638242][ T8090] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1046.638272][ T8090] ? ip6_mtu+0x7d/0x490 [ 1046.638295][ T8090] ? ip6_mtu+0x38c/0x490 [ 1046.638319][ T8090] ? ip6_finish_output+0x2ef/0x4e0 [ 1046.638343][ T8090] ? ip6_output+0x126/0x550 [ 1046.638366][ T8090] ip6_output+0x340/0x550 [ 1046.638393][ T8090] ip6_xmit+0x11b5/0x1970 [ 1046.638429][ T8090] ? ip6_xmit+0x291/0x1970 [ 1046.638455][ T8090] ? __pfx_ip6_xmit+0x10/0x10 [ 1046.638481][ T8090] ? sctp_v6_xmit+0x65e/0x1350 [ 1046.638520][ T8090] ? sctp_v6_xmit+0x65e/0x1350 [ 1046.638554][ T8090] sctp_v6_xmit+0xa81/0x1350 [ 1046.638595][ T8090] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 1046.638630][ T8090] ? skb_crc32c+0xa6d/0xb80 [ 1046.638666][ T8090] ? sctp_packet_transmit+0x14ed/0x2bb0 [ 1046.638689][ T8090] ? sctp_packet_transmit+0x14ed/0x2bb0 [ 1046.638716][ T8090] sctp_packet_transmit+0x2581/0x2bb0 [ 1046.638757][ T8090] sctp_packet_singleton+0x233/0x330 [ 1046.638787][ T8090] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 1046.638821][ T8090] ? sctp_outq_select_transport+0x462/0x570 [ 1046.638850][ T8090] ? sctp_transport_burst_limited+0x19c/0x280 [ 1046.638884][ T8090] sctp_outq_flush+0x4f0/0x3140 [ 1046.638911][ T8090] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1046.638952][ T8090] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1046.638989][ T8090] ? rcu_is_watching+0x15/0xb0 [ 1046.639013][ T8090] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1046.639042][ T8090] ? sctp_outq_tail+0x612/0x8c0 [ 1046.639068][ T8090] ? sctp_outq_uncork+0x4d/0xa0 [ 1046.639095][ T8090] sctp_do_sm+0x5332/0x5a20 [ 1046.639125][ T8090] ? sctp_sendmsg+0x174f/0x2590 [ 1046.639160][ T8090] ? __sock_sendmsg+0x19c/0x270 [ 1046.639192][ T8090] ? ____sys_sendmsg+0x534/0x820 [ 1046.639218][ T8090] ? ___sys_sendmsg+0x21f/0x2a0 [ 1046.639248][ T8090] ? __pfx_sctp_do_sm+0x10/0x10 [ 1046.639294][ T8090] ? __sk_mem_raise_allocated+0x7ef/0x1230 [ 1046.639332][ T8090] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1046.639375][ T8090] sctp_sendmsg_to_asoc+0x1028/0x1810 [ 1046.639425][ T8090] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 1046.639457][ T8090] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1046.639495][ T8090] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1046.639519][ T8090] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1046.639542][ T8090] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1046.639563][ T8090] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1046.639586][ T8090] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1046.639607][ T8090] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1046.639635][ T8090] sctp_sendmsg+0x174f/0x2590 [ 1046.639676][ T8090] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1046.639716][ T8090] ? __schedule+0x1709/0x4c20 [ 1046.639751][ T8090] ? sock_rps_record_flow+0x19/0x410 [ 1046.639790][ T8090] ? inet_sendmsg+0x2f4/0x370 [ 1046.639825][ T8090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1046.639861][ T8090] __sock_sendmsg+0x19c/0x270 [ 1046.639898][ T8090] ____sys_sendmsg+0x534/0x820 [ 1046.639931][ T8090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.639964][ T8090] ? import_iovec+0x74/0xa0 [ 1046.639992][ T8090] ___sys_sendmsg+0x21f/0x2a0 [ 1046.640022][ T8090] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.640070][ T8090] ? __fget_files+0x2a/0x420 [ 1046.640104][ T8090] ? __fget_files+0x3a6/0x420 [ 1046.640144][ T8090] __sys_sendmmsg+0x22d/0x430 [ 1046.640176][ T8090] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1046.640210][ T8090] ? __pfx_do_futex+0x10/0x10 [ 1046.640255][ T8090] __x64_sys_sendmmsg+0xa0/0xc0 [ 1046.640287][ T8090] do_syscall_64+0xfa/0xfa0 [ 1046.640322][ T8090] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.640357][ T8090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.640381][ T8090] ? clear_bhb_loop+0x60/0xb0 [ 1046.640408][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.640443][ T8090] RIP: 0033:0x7f4a1fc5f6c9 [ 1046.640465][ T8090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.640487][ T8090] RSP: 002b:00007f4a1dec6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1046.640513][ T8090] RAX: ffffffffffffffda RBX: 00007f4a1feb5fa0 RCX: 00007f4a1fc5f6c9 [ 1046.640532][ T8090] RDX: 0000000000000001 RSI: 0000200000001d80 RDI: 0000000000000003 [ 1046.640548][ T8090] RBP: 00007f4a1fce1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1046.640565][ T8090] R10: 00000000000005d9 R11: 0000000000000246 R12: 0000000000000000 [ 1046.640580][ T8090] R13: 00007f4a1feb6038 R14: 00007f4a1feb5fa0 R15: 00007ffe950bc938 [ 1046.640608][ T8090] [ 1048.755867][ T38] INFO: task syz.0.13193:889 blocked for more than 143 seconds. [ 1048.755896][ T38] Not tainted syzkaller #0 [ 1048.755910][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.755922][ T38] task:syz.0.13193 state:D stack:22968 pid:889 tgid:884 ppid:5962 task_flags:0x400140 flags:0x00080003 [ 1048.756011][ T38] Call Trace: [ 1048.756020][ T38] [ 1048.756035][ T38] __schedule+0x16f3/0x4c20 [ 1048.756090][ T38] ? validate_chain+0x897/0x2140 [ 1048.756163][ T38] ? __lock_acquire+0xab9/0xd20 [ 1048.756196][ T38] ? __pfx___schedule+0x10/0x10 [ 1048.756235][ T38] ? schedule+0x91/0x360 [ 1048.756267][ T38] schedule+0x165/0x360 [ 1048.756300][ T38] schedule_timeout+0x9a/0x270 [ 1048.756332][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1048.756369][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1048.756402][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.756435][ T38] ? wait_for_completion+0x267/0x5d0 [ 1048.756468][ T38] wait_for_completion+0x2bf/0x5d0 [ 1048.756509][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1048.756545][ T38] ? disable_device+0x137/0x320 [ 1048.756575][ T38] disable_device+0x1c6/0x320 [ 1048.756602][ T38] ? __pfx_disable_device+0x10/0x10 [ 1048.756631][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 1048.756658][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 1048.756682][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 1048.756705][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1048.756733][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 1048.756751][ T38] nldev_dellink+0x2d1/0x320 [ 1048.756776][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 1048.756830][ T38] ? rcu_is_watching+0x15/0xb0 [ 1048.756846][ T38] ? cap_capable+0x11f/0x460 [ 1048.756861][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1048.756880][ T38] ? bpf_lsm_capable+0x9/0x20 [ 1048.756898][ T38] ? security_capable+0x7e/0x2e0 [ 1048.756918][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 1048.756949][ T38] rdma_nl_rcv+0x6ae/0x980 [ 1048.756978][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1048.757001][ T38] ? __lock_acquire+0xab9/0xd20 [ 1048.757030][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 1048.757052][ T38] netlink_unicast+0x846/0xa10 [ 1048.757080][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.757107][ T38] ? netlink_sendmsg+0x642/0xb30 [ 1048.757124][ T38] ? skb_put+0x11b/0x210 [ 1048.757144][ T38] netlink_sendmsg+0x805/0xb30 [ 1048.757166][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.757188][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.757212][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.757231][ T38] __sock_sendmsg+0x21c/0x270 [ 1048.757256][ T38] ____sys_sendmsg+0x508/0x820 [ 1048.757278][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.757301][ T38] ? import_iovec+0x74/0xa0 [ 1048.757321][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 1048.757341][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.757374][ T38] ? __fget_files+0x2a/0x420 [ 1048.757397][ T38] ? __fget_files+0x3a6/0x420 [ 1048.757424][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 1048.757445][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1048.757469][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 1048.757491][ T38] ? do_syscall_64+0xbe/0xfa0 [ 1048.757516][ T38] do_syscall_64+0xfa/0xfa0 [ 1048.757540][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.757564][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.757580][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1048.757599][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.757616][ T38] RIP: 0033:0x7f33c88cf6c9 [ 1048.757629][ T38] RSP: 002b:00007f33c6b15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.757647][ T38] RAX: ffffffffffffffda RBX: 00007f33c8b26090 RCX: 00007f33c88cf6c9 [ 1048.757660][ T38] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1048.757671][ T38] RBP: 00007f33c8951f91 R08: 0000000000000000 R09: 0000000000000000 [ 1048.757682][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.757692][ T38] R13: 00007f33c8b26128 R14: 00007f33c8b26090 R15: 00007fff4c49c178 [ 1048.757719][ T38] [ 1048.757762][ T38] INFO: lockdep is turned off. [ 1048.757774][ T38] NMI backtrace for cpu 1 [ 1048.757791][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1048.757816][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1048.757831][ T38] Call Trace: [ 1048.757839][ T38] [ 1048.757848][ T38] dump_stack_lvl+0x189/0x250 [ 1048.757885][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.757910][ T38] ? __pfx__printk+0x10/0x10 [ 1048.757933][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1048.757959][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1048.757978][ T38] ? __pfx__printk+0x10/0x10 [ 1048.757999][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1048.758017][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1048.758038][ T38] watchdog+0xf60/0xfa0 [ 1048.758069][ T38] ? watchdog+0x1e2/0xfa0 [ 1048.758093][ T38] kthread+0x711/0x8a0 [ 1048.758118][ T38] ? __pfx_watchdog+0x10/0x10 [ 1048.758139][ T38] ? __pfx_kthread+0x10/0x10 [ 1048.758161][ T38] ? rt_spin_unlock+0x150/0x200 [ 1048.758181][ T38] ? rt_spin_unlock+0x161/0x200 [ 1048.758201][ T38] ? __pfx_kthread+0x10/0x10 [ 1048.758225][ T38] ret_from_fork+0x4bc/0x870 [ 1048.758244][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.758266][ T38] ? __switch_to_asm+0x39/0x70 [ 1048.758281][ T38] ? __switch_to_asm+0x33/0x70 [ 1048.758296][ T38] ? __pfx_kthread+0x10/0x10 [ 1048.758320][ T38] ret_from_fork_asm+0x1a/0x30 [ 1048.758342][ T38] [ 1048.758349][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1048.758390][ C0] NMI backtrace for cpu 0 [ 1048.758413][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1048.758434][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1048.758446][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1048.758479][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 b7 27 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1048.758497][ C0] RSP: 0018:ffffffff8d207d80 EFLAGS: 000002c2 [ 1048.758514][ C0] RAX: bbc5f41108ae6d00 RBX: ffffffff81953c47 RCX: bbc5f41108ae6d00 [ 1048.758529][ C0] RDX: 0000000000000001 RSI: ffffffff8b3dddc0 RDI: ffffffff81953c47 [ 1048.758542][ C0] RBP: ffffffff8d207ea8 R08: ffff8880b88334db R09: 1ffff1101710669b [ 1048.758557][ C0] R10: dffffc0000000000 R11: ffffed101710669c R12: ffffffff8ed63e70 [ 1048.758571][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1a60640 [ 1048.758583][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 1048.758599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1048.758612][ C0] CR2: 0000200000001d80 CR3: 000000003d1ba000 CR4: 00000000003526f0 [ 1048.758628][ C0] Call Trace: [ 1048.758635][ C0] [ 1048.758642][ C0] default_idle+0x13/0x20 [ 1048.758661][ C0] default_idle_call+0x73/0xb0 [ 1048.758681][ C0] do_idle+0x1e7/0x510 [ 1048.758702][ C0] ? __pfx_do_idle+0x10/0x10 [ 1048.758727][ C0] cpu_startup_entry+0x44/0x60 [ 1048.758745][ C0] rest_init+0x2de/0x300 [ 1048.758766][ C0] start_kernel+0x3ae/0x410 [ 1048.758797][ C0] x86_64_start_reservations+0x24/0x30 [ 1048.758819][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1048.758840][ C0] common_startup_64+0x13e/0x147 [ 1048.758877][ C0] [ 1056.276198][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.276252][ T1320] ieee802154 phy1 wpan1: encryption failed: -22