Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2022/11/10 11:38:24 ignoring optional flag "sandboxArg"="0" 2022/11/10 11:38:24 parsed 1 programs [ 56.571666][ T4032] cgroup: Unknown subsys name 'net' [ 56.578207][ T4032] cgroup: Unknown subsys name 'rlimit' 2022/11/10 11:38:31 executed programs: 0 [ 64.719697][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.726891][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.734109][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.741410][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.748557][ T45] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.756997][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.764449][ T4062] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.792906][ T4062] chnl_net:caif_netlink_parms(): no params data found [ 64.810273][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.818084][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.825956][ T4062] device bridge_slave_0 entered promiscuous mode [ 64.833298][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.840710][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.848293][ T4062] device bridge_slave_1 entered promiscuous mode [ 64.859537][ T4062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.869601][ T4062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.882636][ T4062] team0: Port device team_slave_0 added [ 64.889279][ T4062] team0: Port device team_slave_1 added [ 64.899508][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.906481][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.932991][ T4062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.944289][ T4062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.951325][ T4062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.977570][ T4062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.979240][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.995313][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.007296][ T4062] device hsr_slave_0 entered promiscuous mode [ 65.013648][ T4062] device hsr_slave_1 entered promiscuous mode [ 65.034782][ T4062] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.042122][ T4062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.049385][ T4062] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.057035][ T4062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.073342][ T4062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.081973][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.090160][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.097901][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.105669][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 65.114423][ T4062] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.122364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.130638][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.137756][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.147481][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.155725][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.163093][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.176235][ T4062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.187415][ T4062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.198697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.206935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.215756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.224489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.233358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.241031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.252583][ T4062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.259763][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.267567][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.329987][ T4062] device veth0_vlan entered promiscuous mode [ 65.338150][ T4062] device veth1_vlan entered promiscuous mode [ 65.345175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.354263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.362502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.369891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.377685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.388714][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.396959][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.405987][ T4062] device veth0_macvtap entered promiscuous mode [ 65.413273][ T4062] device veth1_macvtap entered promiscuous mode [ 65.423003][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.430989][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.440503][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.449817][ T4062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.459142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.476358][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.484480][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.489553][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.492865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.500169][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.514541][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.808634][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.188680][ T43] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 66.197058][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.288663][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.297707][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.305848][ T43] usb 1-1: SerialNumber: syz [ 66.798617][ T3605] Bluetooth: hci0: command 0x0409 tx timeout [ 67.211548][ T43] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 67.814551][ T24] usb 1-1: USB disconnect, device number 2 [ 80.166853][ T141] cfg80211: failed to load regulatory.db [ 80.188732][ T24] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 80.278561][ T3605] Bluetooth: hci0: command 0x041b tx timeout [ 82.318602][ T45] Bluetooth: hci0: command 0x040f tx timeout [ 84.398612][ T45] Bluetooth: hci0: command 0x0419 tx timeout 2022/11/10 11:38:54 executed programs: 1 [ 86.338599][ T3614] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.708591][ T3614] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 86.716992][ T3614] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 86.808678][ T3614] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.817983][ T3614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.826229][ T3614] usb 1-1: SerialNumber: syz [ 87.729541][ T3614] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 88.336220][ T141] usb 1-1: USB disconnect, device number 3 2022/11/10 11:39:33 executed programs: 2 [ 125.050754][ T3614] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3645 jiffies s: 2005 root: 0x2/. [ 125.074425][ T3614] rcu: blocking rcu_node structures (internal RCU debug): [ 125.082308][ T3614] Sending NMI from CPU 0 to CPUs 1: [ 125.087710][ C1] NMI backtrace for cpu 1 [ 125.087720][ C1] CPU: 1 PID: 141 Comm: kworker/1:2 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 125.087735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 125.087745][ C1] Workqueue: usb_hub_wq hub_event [ 125.087766][ C1] RIP: 0010:rcu_segcblist_enqueue+0x18/0x40 [ 125.087788][ C1] Code: 8b 12 48 85 d2 74 08 48 8b 57 30 48 89 16 c3 31 c0 c3 f0 83 44 24 fc 00 48 8b 47 48 48 83 c0 01 48 89 47 48 f0 83 44 24 fc 00 <48> 8b 47 68 48 83 c0 01 48 89 47 68 48 c7 06 00 00 00 00 48 8b 47 [ 125.087802][ C1] RSP: 0018:ffffc90000318cf0 EFLAGS: 00000086 [ 125.087813][ C1] RAX: 00000000000081f9 RBX: ffff888118e83890 RCX: 00000000000081f8 [ 125.087823][ C1] RDX: 0000000000004e00 RSI: ffff888118e83890 RDI: ffff88813bd2c938 [ 125.087833][ C1] RBP: ffff88813bd2c8c0 R08: ffff888118e83858 R09: 0000000000000000 [ 125.087842][ C1] R10: 0000000000000001 R11: 000000000002f2f8 R12: ffffffff815b2ba0 [ 125.087851][ C1] R13: 0000000000000046 R14: ffff88813bd2c938 R15: ffffffff85d6d600 [ 125.087861][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 125.087874][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.087884][ C1] CR2: 00007fb1fcc3aa70 CR3: 0000000005c29000 CR4: 00000000003506e0 [ 125.087893][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.087903][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.087912][ C1] Call Trace: [ 125.087916][ C1] [ 125.087921][ C1] call_rcu+0x88/0x200 [ 125.087938][ C1] ___cache_free+0x1fe/0x3b0 [ 125.087960][ C1] ? usb_anchor_resume_wakeups+0xa/0x60 [ 125.087980][ C1] ? __usb_hcd_giveback_urb+0x141/0x230 [ 125.087999][ C1] ? dummy_timer+0xdc6/0x14c0 [ 125.088019][ C1] __kmem_cache_free+0x11c/0x1c0 [ 125.088040][ C1] dummy_timer+0xdc6/0x14c0 [ 125.088065][ C1] ? _raw_spin_lock+0xe/0x40 [ 125.088088][ C1] ? handle_irq_event+0x64/0x90 [ 125.088103][ C1] ? dummy_udc_probe+0x300/0x300 [ 125.088121][ C1] call_timer_fn+0x33/0x1f0 [ 125.088143][ C1] ? dummy_udc_probe+0x300/0x300 [ 125.088161][ C1] __run_timers.part.0+0x311/0x420 [ 125.088184][ C1] run_timer_softirq+0x44/0x90 [ 125.088204][ C1] __do_softirq+0xeb/0x2ef [ 125.088221][ C1] __irq_exit_rcu+0xc6/0x110 [ 125.088242][ C1] sysvec_apic_timer_interrupt+0xa2/0xd0 [ 125.088263][ C1] [ 125.088266][ C1] [ 125.088284][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.088299][ C1] RIP: 0010:_raw_spin_unlock_irq+0x16/0x30 [ 125.088322][ C1] Code: 05 2f 72 9f 7b 85 c0 74 01 c3 e8 6f fb 9d fc c3 0f 0b 66 90 48 83 3d e0 2d 64 01 00 74 23 e8 41 00 00 00 90 fb bf 01 00 00 00 05 a8 c6 fc 65 8b 05 fe 71 9f 7b 85 c0 74 01 c3 e8 3e fb 9d fc [ 125.088335][ C1] RSP: 0018:ffffc90001fefb30 EFLAGS: 00000246 [ 125.088344][ C1] RAX: 0000000000000001 RBX: ffff888115eb2000 RCX: 0000000000000000 [ 125.088353][ C1] RDX: ffff8881021caa00 RSI: ffffffff82d6d789 RDI: 0000000000000001 [ 125.088361][ C1] RBP: ffff888115eb2000 R08: 0000000000000005 R09: 0000000000000000 [ 125.088369][ C1] R10: 00000000ffffff94 R11: 3a312d3120627375 R12: ffff888115eb2018 [ 125.088378][ C1] R13: ffff888142710c00 R14: ffff888115f2c788 R15: 0000000000000000 [ 125.088389][ C1] ? usb_hcd_flush_endpoint+0x79/0x160 [ 125.088410][ C1] usb_hcd_flush_endpoint+0x89/0x160 [ 125.088430][ C1] usb_disable_interface+0x1a4/0x1d0 [ 125.088453][ C1] usb_unbind_interface+0x287/0x3d0 [ 125.088476][ C1] ? usb_unbind_device+0xc0/0xc0 [ 125.088498][ C1] device_remove+0x6d/0x80 [ 125.088522][ C1] device_release_driver_internal+0x26d/0x320 [ 125.088538][ C1] bus_remove_device+0x108/0x160 [ 125.088560][ C1] device_del+0x1fc/0x4f0 [ 125.088579][ C1] usb_disable_device+0x141/0x240 [ 125.088601][ C1] usb_disconnect.cold+0xaf/0x2d3 [ 125.088621][ C1] hub_event+0x10b2/0x2170 [ 125.088640][ C1] ? __schedule+0x270/0x10f0 [ 125.088656][ C1] ? update_balloon_stats_func+0x85/0xb0 [ 125.088679][ C1] process_one_work+0x2ba/0x5f0 [ 125.088704][ C1] worker_thread+0x59/0x5b0 [ 125.088725][ C1] ? rescuer_thread+0x590/0x590 [ 125.088747][ C1] kthread+0x125/0x160 [ 125.088764][ C1] ? kthread_complete_and_exit+0x30/0x30 [ 125.088783][ C1] ret_from_fork+0x1f/0x30 [ 125.088803][ C1] [ 125.181451][ T141] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 125.998537][ T141] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.388584][ T141] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 126.397704][ T141] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.419015][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.425506][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.488694][ T141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.497814][ T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.506172][ T141] usb 1-1: SerialNumber: syz [ 127.399784][ T141] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 128.069752][ T24] usb 1-1: USB disconnect, device number 4 [ 140.400736][ T24] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device 2022/11/10 11:39:54 executed programs: 3 [ 146.538637][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.898652][ T24] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 146.907342][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.998671][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.008179][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.016982][ T24] usb 1-1: SerialNumber: syz [ 147.911405][ T24] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 148.509411][ T141] usb 1-1: USB disconnect, device number 5 [ 170.558564][ T1792] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2115 jiffies s: 2145 root: 0x2/. [ 170.570652][ T1792] rcu: blocking rcu_node structures (internal RCU debug): [ 170.577798][ T1792] Sending NMI from CPU 0 to CPUs 1: [ 170.583069][ C1] NMI backtrace for cpu 1 [ 170.583078][ C1] CPU: 1 PID: 141 Comm: kworker/1:2 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 170.583093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 170.583103][ C1] Workqueue: usb_hub_wq hub_event [ 170.583122][ C1] RIP: 0010:usb_hcd_flush_endpoint+0x4f/0x160 [ 170.583144][ C1] Code: c7 c7 4c dc 90 87 4c 8b 6d 50 e8 4c 63 8b 01 e8 17 94 60 fe 48 8b 43 20 48 8d 68 e8 48 39 eb 74 2e e8 05 94 60 fe 44 8b 65 04 <31> ff 44 89 e6 e8 b7 8d 60 fe 45 85 e4 0f 84 b9 00 00 00 e8 e9 93 [ 170.583156][ C1] RSP: 0018:ffffc90001fefb38 EFLAGS: 00000093 [ 170.583166][ C1] RAX: 0000000000000000 RBX: ffff88810224b800 RCX: 0000000000000000 [ 170.583182][ C1] RDX: ffff8881021caa00 RSI: ffffffff82d6d75b RDI: 0000000000000005 [ 170.583190][ C1] RBP: ffff88811af20000 R08: 0000000000000005 R09: 0000000000000000 [ 170.583198][ C1] R10: 00000000ffffff94 R11: 3a312d3120627375 R12: 00000000ffffff94 [ 170.583206][ C1] R13: ffff888142710c00 R14: ffff88810ecf8c08 R15: 0000000000000000 [ 170.583215][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 170.583227][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.583237][ C1] CR2: 00007efdecb0ca70 CR3: 000000011655f000 CR4: 00000000003506e0 [ 170.583245][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.583253][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.583261][ C1] Call Trace: [ 170.583265][ C1] [ 170.583270][ C1] usb_disable_interface+0x1a4/0x1d0 [ 170.583292][ C1] usb_unbind_interface+0x287/0x3d0 [ 170.583314][ C1] ? usb_unbind_device+0xc0/0xc0 [ 170.583335][ C1] device_remove+0x6d/0x80 [ 170.583357][ C1] device_release_driver_internal+0x26d/0x320 [ 170.583372][ C1] bus_remove_device+0x108/0x160 [ 170.583392][ C1] device_del+0x1fc/0x4f0 [ 170.583410][ C1] usb_disable_device+0x141/0x240 [ 170.583430][ C1] usb_disconnect.cold+0xaf/0x2d3 [ 170.583448][ C1] hub_event+0x10b2/0x2170 [ 170.583466][ C1] ? __schedule+0x270/0x10f0 [ 170.583481][ C1] ? update_balloon_stats_func+0x85/0xb0 [ 170.583503][ C1] process_one_work+0x2ba/0x5f0 [ 170.583526][ C1] worker_thread+0x59/0x5b0 [ 170.583545][ C1] ? rescuer_thread+0x590/0x590 [ 170.583565][ C1] kthread+0x125/0x160 [ 170.583581][ C1] ? kthread_complete_and_exit+0x30/0x30 [ 170.583599][ C1] ret_from_fork+0x1f/0x30 [ 170.583619][ C1] 2022/11/10 11:40:30 executed programs: 4 [ 182.546334][ T141] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 183.009045][ T141] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.368560][ T141] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 183.376837][ T141] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.468605][ T141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.477645][ T141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.486257][ T141] usb 1-1: SerialNumber: syz [ 184.389536][ T141] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 184.990170][ T3265] usb 1-1: USB disconnect, device number 6 [ 197.626642][ T3265] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 197.715471][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.729189][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.758580][ T3605] Bluetooth: hci0: command 0x0406 tx timeout 2022/11/10 11:40:51 executed programs: 5 [ 203.688518][ T3265] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.078553][ T3265] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 204.087024][ T3265] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.188629][ T3265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.198107][ T3265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.206229][ T3265] usb 1-1: SerialNumber: syz [ 205.101492][ T3265] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 205.699348][ T3613] usb 1-1: USB disconnect, device number 7 [ 218.044758][ C1] ------------[ cut here ]------------ [ 218.050355][ C1] NETDEV WATCHDOG: wwan0 (cdc_ether): transmit queue 0 timed out [ 218.058501][ C1] WARNING: CPU: 1 PID: 0 at net/sched/sch_generic.c:525 dev_watchdog+0x393/0x3a0 [ 218.067661][ C1] Modules linked in: [ 218.071574][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 218.081222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 2022/11/10 11:41:06 executed programs: 6 [ 218.091294][ C1] RIP: 0010:dev_watchdog+0x393/0x3a0 [ 218.096863][ C1] Code: a0 a3 fd 48 8b 1c 24 c6 05 9f 70 78 02 01 48 89 df e8 e1 1f f5 ff 89 e9 48 89 de 48 c7 c7 c8 7c 91 85 48 89 c2 e8 7f d3 ae 00 <0f> 0b e9 c2 fe ff ff 66 0f 1f 44 00 00 41 56 49 89 f6 41 55 41 54 [ 218.105047][ T3613] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 218.116488][ C1] RSP: 0018:ffffc90000318e60 EFLAGS: 00010286 [ 218.133502][ C1] RAX: 0000000000000000 RBX: ffff888118f2c000 RCX: 0000000000000100 [ 218.141663][ C1] RDX: ffff888100bfc380 RSI: ffffffff812cc508 RDI: 0000000000000005 [ 218.149726][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 218.157727][ C1] R10: 0000000000000102 R11: 572056454454454e R12: 0000000000000001 [ 218.165702][ C1] R13: ffff888118f2c488 R14: ffff888111b51400 R15: ffff888118f2c3dc [ 218.173935][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 218.182945][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.189604][ C1] CR2: 00007ffd1fda8d98 CR3: 000000011655f000 CR4: 00000000003506e0 [ 218.197723][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.205859][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.213811][ C1] Call Trace: [ 218.217069][ C1] [ 218.219903][ C1] ? pfifo_fast_init+0x170/0x170 [ 218.224822][ C1] call_timer_fn+0x33/0x1f0 [ 218.229312][ C1] ? pfifo_fast_init+0x170/0x170 [ 218.234230][ C1] __run_timers.part.0+0x311/0x420 [ 218.239331][ C1] ? lapic_next_event+0x12/0x20 [ 218.244163][ C1] ? clockevents_program_event+0x9f/0x1c0 [ 218.249876][ C1] run_timer_softirq+0x44/0x90 [ 218.254643][ C1] __do_softirq+0xeb/0x2ef [ 218.259058][ C1] __irq_exit_rcu+0xc6/0x110 [ 218.263656][ C1] sysvec_apic_timer_interrupt+0xa2/0xd0 [ 218.269309][ C1] [ 218.272249][ C1] [ 218.275194][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 218.281184][ C1] RIP: 0010:acpi_idle_do_entry+0xc9/0xe0 [ 218.287517][ C1] Code: eb 03 83 e3 01 89 de e8 15 37 d5 fc 84 db 75 d4 e8 8c 3d d5 fc 66 90 e8 85 3d d5 fc 0f 00 2d 06 3c 82 00 e8 79 3d d5 fc fb f4 eb b7 e8 6f 3d d5 fc 48 89 ef e8 87 fa ff ff 5b 5d e9 60 3d d5 [ 218.307463][ C1] RSP: 0018:ffffc900002e3e18 EFLAGS: 00000293 [ 218.313539][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 218.321951][ C1] RDX: ffff888100bfc380 RSI: ffffffff84622de7 RDI: 0000000000000001 [ 218.329927][ C1] RBP: ffff888102085864 R08: 0000000000000001 R09: 0000000000000000 [ 218.337975][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 218.346096][ C1] R13: ffff888102085800 R14: ffff888102085864 R15: 0000000000000000 [ 218.354094][ C1] ? acpi_idle_do_entry+0xc7/0xe0 [ 218.359176][ C1] ? acpi_idle_do_entry+0xc7/0xe0 [ 218.364484][ C1] acpi_idle_enter+0x150/0x230 [ 218.369283][ C1] ? ct_kernel_enter_state+0x15/0x30 [ 218.374570][ C1] cpuidle_enter_state+0xc4/0x740 [ 218.379591][ C1] cpuidle_enter+0x29/0x40 [ 218.384099][ C1] do_idle+0x1d9/0x260 [ 218.388151][ C1] cpu_startup_entry+0x14/0x20 [ 218.393343][ C1] start_secondary+0xd6/0xe0 [ 218.397933][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 218.404025][ C1] [ 218.407049][ C1] ---[ end trace 0000000000000000 ]--- [ 218.878500][ T3613] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 219.238529][ T3613] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 219.246855][ T3613] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.338708][ T3613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.348044][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.356209][ T3613] usb 1-1: SerialNumber: syz [ 220.261504][ T3613] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 220.865362][ T24] usb 1-1: USB disconnect, device number 8 [ 232.843651][ T24] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device 2022/11/10 11:41:26 executed programs: 7 [ 238.948559][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 239.308623][ T24] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 239.316962][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.408604][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.417725][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.425888][ T24] usb 1-1: SerialNumber: syz [ 240.331365][ T24] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 240.937462][ T3613] usb 1-1: USB disconnect, device number 9 2022/11/10 11:41:39 executed programs: 8 [ 250.996828][ T3613] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 251.518513][ T3613] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.908604][ T3613] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 251.916929][ T3613] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.018615][ T3613] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.027751][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.036002][ T3613] usb 1-1: SerialNumber: syz [ 252.941316][ T3613] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 253.556298][ T3265] usb 1-1: USB disconnect, device number 10 [ 265.639113][ T3265] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 265.733445][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.739786][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 2022/11/10 11:41:59 executed programs: 9 [ 271.798486][ T3265] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 272.158582][ T3265] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 272.167108][ T3265] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.258617][ T3265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.267916][ T3265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.276155][ T3265] usb 1-1: SerialNumber: syz [ 273.160206][ T3265] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 273.880864][ T3265] usb 1-1: USB disconnect, device number 11 [ 286.567366][ T3265] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device 2022/11/10 11:42:14 executed programs: 10 [ 287.049435][ T3265] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 287.408519][ T3265] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 287.417105][ T3265] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 287.508595][ T3265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.517655][ T3265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 287.525950][ T3265] usb 1-1: SerialNumber: syz [ 288.431422][ T3265] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 289.046291][ T3615] usb 1-1: USB disconnect, device number 12 [ 301.229027][ T3615] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device 2022/11/10 11:42:35 executed programs: 11 [ 307.418488][ T1792] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 307.778565][ T1792] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 307.786965][ T1792] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.878619][ T1792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.887941][ T1792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.896228][ T1792] usb 1-1: SerialNumber: syz [ 308.781629][ T1792] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 309.382275][ T3265] usb 1-1: USB disconnect, device number 13 2022/11/10 11:42:50 executed programs: 12 [ 321.920412][ T3265] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 322.408872][ T3265] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 322.778498][ T3265] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 322.786835][ T3265] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 322.878525][ T3265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.887776][ T3265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.896381][ T3265] usb 1-1: SerialNumber: syz [ 323.801542][ T3265] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 324.406245][ T4068] usb 1-1: USB disconnect, device number 14 [ 362.383396][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 362.389836][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.402167][ T3615] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 3742 jiffies s: 2741 root: 0x2/. [ 362.428757][ T3615] rcu: blocking rcu_node structures (internal RCU debug): [ 362.435998][ T3615] Sending NMI from CPU 0 to CPUs 1: [ 362.441344][ C1] NMI backtrace for cpu 1 [ 362.441362][ C1] CPU: 1 PID: 4068 Comm: kworker/1:5 Tainted: G W 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 362.441379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 362.441389][ C1] Workqueue: usb_hub_wq hub_event [ 362.441422][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x23/0x60 [ 362.441445][ C1] Code: 0f 1f 80 00 00 00 00 65 8b 05 d9 41 ca 7e 89 c1 48 8b 34 24 81 e1 00 01 00 00 65 48 8b 14 25 80 ad 01 00 a9 00 01 ff 00 74 0e <85> c9 74 35 8b 82 5c 0b 00 00 85 c0 74 2b 8b 82 38 0b 00 00 83 f8 [ 362.441464][ C1] RSP: 0018:ffffc90000318d20 EFLAGS: 00000006 [ 362.441475][ C1] RAX: 0000000000000101 RBX: 0000000000000000 RCX: 0000000000000100 [ 362.441485][ C1] RDX: ffff88810c020180 RSI: ffffffff82cea1ae RDI: 0000000000000005 [ 362.441495][ C1] RBP: ffff88811cf9e9c0 R08: 0000000000000005 R09: 0000000000000000 [ 362.441504][ C1] R10: ffffffffffffff94 R11: 000000000002f2f8 R12: ffff888114ea2240 [ 362.441514][ C1] R13: ffff888114ea6600 R14: 0100000000000001 R15: ffff888114ea2240 [ 362.441525][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 362.441540][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.441551][ C1] CR2: 00007f7cf98e82c0 CR3: 0000000005c29000 CR4: 00000000003506e0 [ 362.441560][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.441569][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.441578][ C1] Call Trace: [ 362.441582][ C1] [ 362.441586][ C1] rx_complete+0x15e/0x2c0 [ 362.441607][ C1] __usb_hcd_giveback_urb+0xf9/0x230 [ 362.441627][ C1] usb_hcd_giveback_urb+0x1ab/0x1c0 [ 362.441646][ C1] dummy_timer+0x8e4/0x14c0 [ 362.441673][ C1] ? _raw_spin_unlock+0x1a/0x30 [ 362.441703][ C1] ? dummy_udc_probe+0x300/0x300 [ 362.441727][ C1] call_timer_fn+0x33/0x1f0 [ 362.441749][ C1] ? dummy_udc_probe+0x300/0x300 [ 362.441767][ C1] __run_timers.part.0+0x311/0x420 [ 362.441790][ C1] run_timer_softirq+0x44/0x90 [ 362.441811][ C1] __do_softirq+0xeb/0x2ef [ 362.441827][ C1] __irq_exit_rcu+0xc6/0x110 [ 362.441848][ C1] sysvec_apic_timer_interrupt+0xa2/0xd0 [ 362.441870][ C1] [ 362.441874][ C1] [ 362.441881][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 362.441897][ C1] RIP: 0010:_raw_spin_unlock_irq+0x16/0x30 [ 362.441920][ C1] Code: 05 2f 72 9f 7b 85 c0 74 01 c3 e8 6f fb 9d fc c3 0f 0b 66 90 48 83 3d e0 2d 64 01 00 74 23 e8 41 00 00 00 90 fb bf 01 00 00 00 05 a8 c6 fc 65 8b 05 fe 71 9f 7b 85 c0 74 01 c3 e8 3e fb 9d fc [ 362.441932][ C1] RSP: 0018:ffffc900033abb30 EFLAGS: 00000246 [ 362.441943][ C1] RAX: 0000000000000001 RBX: ffff888116244800 RCX: 0000000000000000 [ 362.441952][ C1] RDX: ffff88810c020180 RSI: ffffffff82d6d789 RDI: 0000000000000001 [ 362.441961][ C1] RBP: ffff888116244800 R08: 0000000000000005 R09: 0000000000000000 [ 362.441969][ C1] R10: 00000000ffffff94 R11: 3a312d3120627375 R12: ffff888116244818 [ 362.441978][ C1] R13: ffff888142710c00 R14: ffff888116679cc8 R15: 0000000000000000 [ 362.441989][ C1] ? usb_hcd_flush_endpoint+0x79/0x160 [ 362.442010][ C1] usb_hcd_flush_endpoint+0x89/0x160 [ 362.442030][ C1] usb_disable_interface+0x1a4/0x1d0 [ 362.442057][ C1] usb_unbind_interface+0x287/0x3d0 [ 362.442080][ C1] ? usb_unbind_device+0xc0/0xc0 [ 362.442101][ C1] device_remove+0x6d/0x80 [ 362.442125][ C1] device_release_driver_internal+0x26d/0x320 [ 362.442141][ C1] bus_remove_device+0x108/0x160 [ 362.442163][ C1] device_del+0x1fc/0x4f0 [ 362.442182][ C1] usb_disable_device+0x141/0x240 [ 362.442208][ C1] usb_disconnect.cold+0xaf/0x2d3 [ 362.442228][ C1] hub_event+0x10b2/0x2170 [ 362.442247][ C1] ? __schedule+0x270/0x10f0 [ 362.442262][ C1] ? wg_packet_decrypt_worker+0x1f1/0x2f0 [ 362.442281][ C1] process_one_work+0x2ba/0x5f0 [ 362.442304][ C1] worker_thread+0x59/0x5b0 [ 362.442325][ C1] ? rescuer_thread+0x590/0x590 [ 362.442347][ C1] kthread+0x125/0x160 [ 362.442365][ C1] ? kthread_complete_and_exit+0x30/0x30 [ 362.442385][ C1] ret_from_fork+0x1f/0x30 [ 362.442406][ C1] [ 363.539393][ T4068] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 368.429750][ T6308] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2022/11/10 11:43:38 executed programs: 13 [ 370.918465][ T3265] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 371.308530][ T3265] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 371.316854][ T3265] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.428528][ T3265] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.437667][ T3265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 371.445715][ T3265] usb 1-1: SerialNumber: syz [ 372.339712][ T3265] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 372.946034][ T1792] usb 1-1: USB disconnect, device number 15 2022/11/10 11:44:16 executed programs: 14 [ 408.445365][ T4068] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 3475 jiffies s: 2813 root: 0x1/. [ 408.465280][ T4068] rcu: blocking rcu_node structures (internal RCU debug): [ 408.472460][ T4068] Sending NMI from CPU 1 to CPUs 0: [ 408.477678][ C0] NMI backtrace for cpu 0 [ 408.477689][ C0] CPU: 0 PID: 1792 Comm: kworker/0:2 Tainted: G W 6.1.0-rc4-syzkaller-00020-gf67dd6ce0723 #0 [ 408.477706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 408.477716][ C0] Workqueue: usb_hub_wq hub_event [ 408.477738][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 [ 408.477758][ C0] Code: 82 38 0b 00 00 83 f8 02 75 20 48 8b 8a 40 0b 00 00 8b 92 3c 0b 00 00 48 8b 01 48 83 c0 01 48 39 c2 76 07 48 89 01 48 89 34 c1 0f 1f 00 41 55 41 54 49 89 fc 55 48 bd eb 83 b5 80 46 86 c8 61 [ 408.477771][ C0] RSP: 0018:ffffc90000003d18 EFLAGS: 00000046 [ 408.477782][ C0] RAX: 0000000000000000 RBX: ffff88811091a840 RCX: 0000000000000100 [ 408.477791][ C0] RDX: ffff8881021be3c0 RSI: ffffffff82d6af27 RDI: 0000000000000005 [ 408.477804][ C0] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 408.477813][ C0] R10: 0000000000000000 R11: 000000000002f2f8 R12: 0000000000000000 [ 408.477821][ C0] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88811091a840 [ 408.477830][ C0] FS: 0000000000000000(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 408.477844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.477854][ C0] CR2: 00007fbe43b3ba70 CR3: 0000000005c29000 CR4: 00000000003506f0 [ 408.477863][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 408.477870][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 408.477879][ C0] Call Trace: [ 408.477884][ C0] [ 408.477888][ C0] usb_hcd_unmap_urb_for_dma+0xc7/0x1a0 [ 408.477910][ C0] __usb_hcd_giveback_urb+0x1c1/0x230 [ 408.477929][ C0] usb_hcd_giveback_urb+0x1ab/0x1c0 [ 408.477947][ C0] dummy_timer+0x8e4/0x14c0 [ 408.477969][ C0] ? _raw_spin_unlock+0x1a/0x30 [ 408.477993][ C0] ? dummy_udc_probe+0x300/0x300 [ 408.478012][ C0] call_timer_fn+0x33/0x1f0 [ 408.478034][ C0] ? dummy_udc_probe+0x300/0x300 [ 408.478052][ C0] __run_timers.part.0+0x311/0x420 [ 408.478073][ C0] ? lapic_next_event+0x12/0x20 [ 408.478093][ C0] ? clockevents_program_event+0x9f/0x1c0 [ 408.478111][ C0] run_timer_softirq+0x44/0x90 [ 408.478131][ C0] __do_softirq+0xeb/0x2ef [ 408.478146][ C0] __irq_exit_rcu+0xc6/0x110 [ 408.478166][ C0] sysvec_apic_timer_interrupt+0xa2/0xd0 [ 408.478194][ C0] [ 408.478197][ C0] [ 408.478201][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 408.478215][ C0] RIP: 0010:_raw_spin_unlock_irq+0x16/0x30 [ 408.478238][ C0] Code: 05 2f 72 9f 7b 85 c0 74 01 c3 e8 6f fb 9d fc c3 0f 0b 66 90 48 83 3d e0 2d 64 01 00 74 23 e8 41 00 00 00 90 fb bf 01 00 00 00 05 a8 c6 fc 65 8b 05 fe 71 9f 7b 85 c0 74 01 c3 e8 3e fb 9d fc [ 408.478251][ C0] RSP: 0018:ffffc9000357bb30 EFLAGS: 00000246 [ 408.478261][ C0] RAX: 0000000000000001 RBX: ffff888114b84000 RCX: 0000000000000000 [ 408.478269][ C0] RDX: ffff8881021be3c0 RSI: ffffffff82d6d789 RDI: 0000000000000001 [ 408.478278][ C0] RBP: ffff888114b84000 R08: 0000000000000005 R09: 0000000000000000 [ 408.478285][ C0] R10: 00000000ffffff94 R11: 3a312d3120627375 R12: ffff888114b84018 [ 408.478294][ C0] R13: ffff888142710c00 R14: ffff88811d0fb7c8 R15: 0000000000000000 [ 408.478304][ C0] ? usb_hcd_flush_endpoint+0x79/0x160 [ 408.478324][ C0] usb_hcd_flush_endpoint+0x89/0x160 [ 408.478343][ C0] usb_disable_interface+0x1a4/0x1d0 [ 408.478370][ C0] usb_unbind_interface+0x287/0x3d0 [ 408.478394][ C0] ? usb_unbind_device+0xc0/0xc0 [ 408.478417][ C0] device_remove+0x6d/0x80 [ 408.478441][ C0] device_release_driver_internal+0x26d/0x320 [ 408.478456][ C0] bus_remove_device+0x108/0x160 [ 408.478477][ C0] device_del+0x1fc/0x4f0 [ 408.478495][ C0] usb_disable_device+0x141/0x240 [ 408.478516][ C0] usb_disconnect.cold+0xaf/0x2d3 [ 408.478535][ C0] hub_event+0x10b2/0x2170 [ 408.478555][ C0] ? __schedule+0x270/0x10f0 [ 408.478572][ C0] process_one_work+0x2ba/0x5f0 [ 408.478596][ C0] worker_thread+0x59/0x5b0 [ 408.478618][ C0] ? rescuer_thread+0x590/0x590 [ 408.478639][ C0] kthread+0x125/0x160 [ 408.478658][ C0] ? kthread_complete_and_exit+0x30/0x30 [ 408.478678][ C0] ret_from_fork+0x1f/0x30 [ 408.478700][ C0] [ 408.596445][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.907666][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.911368][ T1792] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 409.388419][ T1792] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 409.758456][ T1792] usb 1-1: config index 0 descriptor too short (expected 1851, got 59) [ 409.767218][ T1792] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 409.858518][ T1792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.867927][ T1792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 409.876046][ T1792] usb 1-1: SerialNumber: syz [ 410.771286][ T1792] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 411.369744][ T4068] usb 1-1: USB disconnect, device number 16