last executing test programs: 5.905071933s ago: executing program 2 (id=805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18020000b3b200000000000018000000852000009149030095"], &(0x7f0000000cc0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 5.900554924s ago: executing program 2 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5.674946349s ago: executing program 2 (id=809): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x15, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4001010}, 0x40) 4.907237398s ago: executing program 0 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000040801010000000000000000050000fb06000240888400ffffffffb0be1d5100b952c1f9cd5c79821a8c4dc9c212df08f4ba212a91d4960a00dcf213e0b9a041ac6e74e33fbc70b04ac44e7737bbcd7941d7db9f269161371157c55ed2b50544dec1b6dd0cb334031a484b0ccbdb8530889b16b89a3f609bc3f1ed03137975d1f30f53d758a43462327e6d42422dd0cbe265876fc766e524bbb890a17101ac501b9d637dc6e8ccda8552a86635ef6d037a4a7a4c2c0bc18924ca26e49670dac98570ab28"], 0x24}, 0x1, 0x0, 0x0, 0x24004040}, 0x48004) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34970}]}, &(0x7f0000000580)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 4.82542735s ago: executing program 0 (id=815): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80800) 4.772664292s ago: executing program 2 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 4.744732882s ago: executing program 2 (id=820): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000002c0)) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f00000001c0)=@ethtool_stats={0x21}}) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x20075f, 0xec3c2) r2 = memfd_create(&(0x7f0000000300)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3e, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwritev2(r5, &(0x7f0000000780)=[{&(0x7f00000007c0)="05", 0x5b2000000000000}], 0x1, 0x7, 0x0, 0x15) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0xe) syz_open_procfs(0x0, 0x0) r6 = fsopen(&(0x7f0000000880)='cgroup2\x00', 0x1) r7 = fsmount(r6, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) syz_clone3(&(0x7f00000008c0)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) 4.642948725s ago: executing program 0 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}}, 0xc010) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r3, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, &(0x7f0000000400), &(0x7f0000000440)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x13, &(0x7f0000000d40)=ANY=[@ANYBLOB="18080000000000000000000010000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000e00)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000e40)=""/222}, 0x78) 4.495750699s ago: executing program 1 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x5bd10c119655d89}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x88}}, 0x0) 4.269838594s ago: executing program 0 (id=824): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.266610314s ago: executing program 1 (id=825): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101042, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000440)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000340)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 3.328332208s ago: executing program 1 (id=829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x15, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4001010}, 0x40) 3.188119521s ago: executing program 4 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001060c001040000000000000000308000440"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.071471434s ago: executing program 4 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00001a0000)={0x0, 0x0, &(0x7f00001a0040)={&(0x7f00001a0080)=@newqdisc={0x34, 0x24, 0x401, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0xffee, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 3.036303905s ago: executing program 0 (id=832): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d0d79bb67166ac", 0x7}], 0xffffffffffffff9c, 0x0, 0x0, 0x800300}, 0x20040805) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xddc2d14175ea15e9) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r2 = syz_open_dev$cec(0x0, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000240)={0xa000000d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000280)={0x80000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0x10000001}) r6 = epoll_create1(0x80000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, 0x0) unshare(0x400) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e22, 0x7c8b3c38, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000003c0), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}}, 0x24}}, 0x0) shutdown(r8, 0x0) ppoll(&(0x7f0000000440)=[{r8, 0x580}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000480)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xef}}, './file0\x00'}) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000540)=0xd0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000000b06010800000000000000000300fffe0500010007000000180007800c00018008fff540ac1414bb080009400000080b0900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) 2.912979568s ago: executing program 4 (id=833): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a107000000000002000000010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}, {&(0x7f0000000840)="3c288d8b3b7d97f8c475ed07c88ca0836243c54dddf9e0f57bfa33a44b9d48f76902f42f22f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292ea3dcf6ac06c8903c5", 0x50}], 0x3}}], 0x2, 0x20004090) 2.85049637s ago: executing program 4 (id=834): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000d80)={0xa, 0x0, 0x3, @remote, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000dc0)=[{&(0x7f0000000000)="580000001400ad08000000000000805602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff001ef03ac71002000000ffffffffffffffffffe7ee00000000000200000000000000", 0x58}], 0x1) 2.780963941s ago: executing program 4 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000030101020000000000000000010000001400198008000200000800000800010000000000880002800c00028005000100060000002c000180140003000000150000000000000000000000000014000400ff02000000000000000000000000000106001340000100000600020000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8004) 2.668901544s ago: executing program 4 (id=836): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000340)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000000480)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f00000004c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x24, r3, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400d044}, 0x4004014) write$nci(r0, &(0x7f00000005c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) 2.358427252s ago: executing program 1 (id=839): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, 0x0) dup2(r6, r8) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 2.106921908s ago: executing program 0 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x18, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 1.669503549s ago: executing program 2 (id=841): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000940), 0x4, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000980)={0x0, 0x7, 0x1008, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f00000009c0), 0x23, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000a00)={0x0, 0x38415262, 0x3, @stepwise={0x7ffc, 0xc63, 0x7fffffff, 0x4, 0x8, 0xc}}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000400)={0x84, &(0x7f00000004c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) syz_usb_connect$midi(0x3, 0x51, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x4, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0xc}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}], [{{0x9, 0x5, 0x0, 0xc, 0x20, 0x54, 0x3, 0x6, {0x9, 0x25, 0x1, 0x5, "029d83e6ec"}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x0, 0x8, 0x2, 0xff, 0x2}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x427}}, {0x52, &(0x7f0000000640)=@string={0x52, 0x3, "df434800468f6fb27fdd4ad50f460bfbcccdc8c65723850799233f92bd1c48449504e75052089247ee18f5e2e4f899d90e5208e28ddf3f3e31d9eb4ab197099bf7295c7d156e29bd951bd283f2da3401"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x5f, &(0x7f0000000700)=@string={0x5f, 0x3, "6189e14518aca91a765c574ddbd2ac4ec953d260baf50848af76b8af49bdb7e365166dcb80bb0de1bbf7d143f8a70566007daa40e17c5df67456ec09fb67bebaf8fd14e358d622cde8028df60797d22fd074a0bd6c618791fe571ce936"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4}}]}) 1.465177854s ago: executing program 3 (id=842): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.093042953s ago: executing program 3 (id=843): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 744.986702ms ago: executing program 1 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 653.405495ms ago: executing program 1 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x587}]}, 0x3c}}, 0x40480c0) 205.410895ms ago: executing program 3 (id=846): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) socket(0x10, 0x803, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @broadcast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000005c0), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000780)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)="27030200591114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 57.87645ms ago: executing program 3 (id=847): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000700)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 29.98101ms ago: executing program 3 (id=848): sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000600)) 0s ago: executing program 3 (id=849): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x15, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4001010}, 0x40) kernel console output (not intermixed with test programs): recommended to keep mac addresses unique to avoid problems! [ 71.250804][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.268793][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.278275][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.300796][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.312999][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.322487][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.332219][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.343047][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.359340][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.368485][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378431][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.388919][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.409550][ T4288] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 71.413419][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.442097][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.477546][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.507128][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.526201][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.536184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.581467][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.599610][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.629850][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.648809][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.672816][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.684297][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.708474][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.720887][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.729642][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.746181][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.769615][ T4293] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.797059][ T4294] Zero length message leads to an empty skb [ 71.814485][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.841013][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 71.847463][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 71.867596][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.887623][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 71.904512][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.925144][ T26] audit: type=1326 audit(1792651996.527:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 71.959810][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 71.975660][ T4192] Bluetooth: hci0: command 0x0419 tx timeout [ 72.023570][ T26] audit: type=1326 audit(1792651996.577:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.134052][ T26] audit: type=1326 audit(1792651996.577:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.236020][ T26] audit: type=1326 audit(1792651996.577:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.306825][ T26] audit: type=1326 audit(1792651996.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.369194][ T4252] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.405452][ T26] audit: type=1326 audit(1792651996.587:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.502683][ T26] audit: type=1326 audit(1792651996.587:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.578280][ T26] audit: type=1326 audit(1792651996.587:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.643175][ T4316] IPv6: sit1: Disabled Multicast RS [ 72.658906][ T26] audit: type=1326 audit(1792651996.587:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 72.710241][ T4316] capability: warning: `syz.4.8' uses deprecated v2 capabilities in a way that may be insecure [ 72.745338][ T26] audit: type=1326 audit(1792651996.587:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.1.2" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f694d92ed8e code=0x7ffc0000 [ 72.792276][ T4252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.868663][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 72.908151][ T4326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.979319][ T4252] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 72.996467][ T4252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.019784][ T4252] usb 2-1: Product: syz [ 73.032651][ T4252] usb 2-1: Manufacturer: syz [ 73.045724][ T4252] usb 2-1: SerialNumber: syz [ 73.108870][ T4324] syz.2.11 (4324) used greatest stack depth: 20464 bytes left [ 73.396666][ T4334] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 73.446504][ T4334] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 73.474276][ T4334] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 73.508804][ T4334] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 73.569434][ T4252] usb 2-1: unit 8 not found! [ 73.574371][ T4252] usb 2-1: unit 6 not found! [ 73.675026][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 73.684284][ T4252] usb 2-1: USB disconnect, device number 2 [ 73.732708][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.015651][ T4192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.024598][ T4346] process 'syz.3.16' launched '/dev/fd/6' with NULL argv: empty string added [ 74.399574][ T4192] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 74.428917][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.486725][ T4192] usb 5-1: config 0 descriptor?? [ 74.602582][ T4348] nvme nvme0: failed to connect socket: -111 [ 74.850008][ T4362] device syzkaller0 entered promiscuous mode [ 74.927231][ T4362] tipc: Started in network mode [ 74.959698][ T4362] tipc: Node identity 56425714f42b, cluster identity 4711 [ 74.988858][ T4192] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 75.023468][ T4192] [drm] Initialized udl on minor 2 [ 75.061074][ T4362] tipc: Enabled bearer , priority 0 [ 75.090946][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.165960][ T4362] tipc: Resetting bearer [ 75.240022][ T4369] kvm: pic: non byte write [ 75.250487][ T4361] tipc: Resetting bearer [ 75.374753][ T4338] udc-core: couldn't find an available UDC or it's busy [ 75.399210][ T4338] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.565642][ T4361] tipc: Disabling bearer [ 76.099925][ T4192] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffff92 [ 76.113802][ T4192] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 76.219239][ T4192] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 76.289225][ T4192] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 76.298180][ T4192] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 76.360150][ T4395] udc-core: couldn't find an available UDC or it's busy [ 76.420124][ T4395] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.157247][ T4405] udc-core: couldn't find an available UDC or it's busy [ 77.195077][ T4405] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.491129][ T26] kauditd_printk_skb: 275 callbacks suppressed [ 77.491144][ T26] audit: type=1326 audit(1792652002.097:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 77.644275][ T26] audit: type=1326 audit(1792652002.127:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 77.733733][ T26] audit: type=1326 audit(1792652002.127:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 77.809315][ T26] audit: type=1326 audit(1792652002.127:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 77.824045][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 77.928558][ T26] audit: type=1326 audit(1792652002.127:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 78.014417][ T26] audit: type=1326 audit(1792652002.127:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 78.100748][ T26] audit: type=1326 audit(1792652002.137:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 78.184478][ T26] audit: type=1326 audit(1792652002.137:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 78.249465][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.260080][ T26] audit: type=1326 audit(1792652002.137:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f202cf0cd8e code=0x7ffc0000 [ 78.340743][ T26] audit: type=1326 audit(1792652002.137:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4407 comm="syz.3.28" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f202cf4c1eb code=0x7ffc0000 [ 78.439504][ T7] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 78.468985][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.510767][ T7] usb 4-1: Product: syz [ 78.525958][ T7] usb 4-1: Manufacturer: syz [ 78.540062][ T7] usb 4-1: SerialNumber: syz [ 78.621802][ T4422] netlink: 'syz.0.30': attribute type 5 has an invalid length. [ 78.952823][ T7] usb 4-1: unit 8 not found! [ 78.966085][ T7] usb 4-1: unit 6 not found! [ 79.036952][ T7] usb 4-1: USB disconnect, device number 2 [ 79.274672][ T4252] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.292497][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.549318][ T4252] usb 1-1: Using ep0 maxpacket: 16 [ 79.669293][ T4252] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.691209][ T4252] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.820610][ T4174] usb 5-1: USB disconnect, device number 2 [ 79.919932][ T4252] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 79.949519][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.957602][ T4252] usb 1-1: Product: syz [ 80.018527][ T4252] usb 1-1: Manufacturer: syz [ 80.050561][ T4252] usb 1-1: SerialNumber: syz [ 80.095926][ T4252] usb 1-1: config 0 descriptor?? [ 80.147595][ T4449] device syzkaller0 entered promiscuous mode [ 80.163304][ T4252] hub 1-1:0.0: bad descriptor, ignoring hub [ 80.196848][ T4252] hub: probe of 1-1:0.0 failed with error -5 [ 80.210460][ T4450] tipc: Started in network mode [ 80.240378][ T4450] tipc: Node identity 329c45449b15, cluster identity 4711 [ 80.279643][ T4252] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 80.292100][ T4450] tipc: Enabled bearer , priority 0 [ 80.449400][ T4277] usb 1-1: Failed to submit usb control message: -71 [ 80.470876][ T4277] usb 1-1: unable to send the bmi data to the device: -71 [ 80.530425][ T4277] usb 1-1: unable to get target info from device [ 80.565393][ T4277] usb 1-1: could not get target info (-71) [ 80.578971][ T4448] tipc: Resetting bearer [ 80.620737][ T4277] usb 1-1: could not probe fw (-71) [ 80.668390][ T4448] tipc: Disabling bearer [ 80.779205][ T4427] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.670566][ T4174] usb 1-1: USB disconnect, device number 2 [ 81.769074][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.889153][ T4252] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.944859][ T4244] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.990894][ T4494] device syzkaller0 entered promiscuous mode [ 82.006611][ T4494] tipc: Started in network mode [ 82.015463][ T4494] tipc: Node identity 36889d826ccd, cluster identity 4711 [ 82.026695][ T4494] tipc: Enabled bearer , priority 0 [ 82.037391][ T4493] tipc: Resetting bearer [ 82.066670][ T4493] tipc: Disabling bearer [ 82.132895][ T4252] usb 5-1: Using ep0 maxpacket: 32 [ 82.139511][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.177820][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 82.256522][ T4252] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 82.295908][ T4498] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 82.319159][ T4244] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.349858][ T7] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 82.385233][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.394246][ T7] usb 4-1: Product: syz [ 82.407690][ T7] usb 4-1: Manufacturer: syz [ 82.412933][ T7] usb 4-1: SerialNumber: syz [ 82.439994][ T4252] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 82.476256][ T4252] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 82.484690][ T4252] usb 5-1: Product: syz [ 82.488880][ T4252] usb 5-1: Manufacturer: syz [ 82.499415][ T4244] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 82.509091][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 82.509105][ T26] audit: type=1326 audit(1792652007.107:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe293dfe1eb code=0x7ffc0000 [ 82.544221][ T4252] usb 5-1: SerialNumber: syz [ 82.552374][ T4252] usb 5-1: config 0 descriptor?? [ 82.557572][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.571998][ T4244] usb 3-1: Product: syz [ 82.576218][ T4244] usb 3-1: Manufacturer: syz [ 82.583263][ T4244] usb 3-1: SerialNumber: syz [ 82.616642][ T4252] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 82.627077][ T26] audit: type=1326 audit(1792652007.237:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe293dfe1eb code=0x7ffc0000 [ 82.661253][ T26] audit: type=1326 audit(1792652007.237:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe293dfe1eb code=0x7ffc0000 [ 82.692462][ T26] audit: type=1326 audit(1792652007.237:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe293dfe1eb code=0x7ffc0000 [ 82.748518][ T7] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 82.844938][ T26] audit: type=1326 audit(1792652007.267:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe293dbed8e code=0x7ffc0000 [ 82.932184][ T26] audit: type=1326 audit(1792652007.477:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 82.960940][ T7] usb 4-1: USB disconnect, device number 3 [ 82.998705][ T7] usblp0: removed [ 83.017555][ T26] audit: type=1326 audit(1792652007.477:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 83.030022][ T4244] usb 3-1: unit 8 not found! [ 83.052623][ T4244] usb 3-1: unit 6 not found! [ 83.125291][ T26] audit: type=1326 audit(1792652007.477:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 83.149263][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.173121][ T4244] usb 3-1: USB disconnect, device number 2 [ 83.226820][ T26] audit: type=1326 audit(1792652007.477:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 83.250589][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.346022][ T26] audit: type=1326 audit(1792652007.477:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4489 comm="syz.2.44" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 83.430980][ T23] usb 5-1: USB disconnect, device number 3 [ 83.454468][ T9] usb 5-1: Failed to submit usb control message: -71 [ 83.477730][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 83.495373][ T9] usb 5-1: unable to get target info from device [ 83.525247][ T9] usb 5-1: could not get target info (-71) [ 83.569053][ T9] usb 5-1: could not probe fw (-71) [ 84.056465][ T4537] tipc: Enabling of bearer rejected, failed to enable media [ 84.289550][ T7] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 84.509298][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.533975][ T4544] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 84.649763][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.669335][ T7] usb 4-1: config 0 has no interface number 0 [ 84.685887][ T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 84.710495][ T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 84.744187][ T7] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.771885][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.808555][ T7] usb 4-1: config 0 descriptor?? [ 84.813693][ T4251] usb 3-1: Using ep0 maxpacket: 16 [ 84.840440][ T4535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.865035][ T7] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 84.891328][ T4553] input: syz1 as /devices/virtual/input/input5 [ 84.979500][ T4251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.999426][ T4251] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.202908][ T4244] usb 4-1: USB disconnect, device number 4 [ 85.209461][ T4251] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 85.220598][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.229491][ T4251] usb 3-1: Product: syz [ 85.233897][ T4251] usb 3-1: Manufacturer: syz [ 85.238518][ T4251] usb 3-1: SerialNumber: syz [ 85.262030][ T4251] usb 3-1: config 0 descriptor?? [ 85.286199][ T4541] socket: no more sockets [ 85.315810][ T4541] socket: no more sockets [ 85.321247][ T4251] hub 3-1:0.0: bad descriptor, ignoring hub [ 85.330272][ T4251] hub: probe of 3-1:0.0 failed with error -5 [ 85.339358][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 85.365024][ T4251] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 85.409348][ T144] usb 3-1: Failed to submit usb control message: -71 [ 85.416287][ T144] usb 3-1: unable to send the bmi data to the device: -71 [ 85.433319][ T144] usb 3-1: unable to get target info from device [ 85.446063][ T144] usb 3-1: could not get target info (-71) [ 85.454062][ T144] usb 3-1: could not probe fw (-71) [ 85.545230][ T4539] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.753869][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.838007][ T4567] binder: 4566:4567 ioctl c0306201 0 returned -14 [ 85.859463][ T4251] usb 3-1: USB disconnect, device number 3 [ 85.924523][ T4571] tipc: Enabling of bearer rejected, failed to enable media [ 85.938904][ T4572] binder: 4566:4572 ioctl c0306201 0 returned -14 [ 85.989325][ T23] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 85.998459][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.029092][ T23] usb 2-1: Product: syz [ 86.033314][ T23] usb 2-1: Manufacturer: syz [ 86.037947][ T23] usb 2-1: SerialNumber: syz [ 86.208004][ T4579] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 86.509495][ T23] usb 2-1: unit 8 not found! [ 86.516883][ T23] usb 2-1: unit 6 not found! [ 86.552787][ T1107] cfg80211: failed to load regulatory.db [ 86.610683][ T23] usb 2-1: USB disconnect, device number 3 [ 86.688510][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.580707][ T4609] tipc: Enabling of bearer rejected, failed to enable media [ 87.641366][ T4613] sctp: [Deprecated]: syz.4.84 (pid 4613) Use of int in max_burst socket option deprecated. [ 87.641366][ T4613] Use struct sctp_assoc_value instead [ 88.121117][ T4619] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 89.059342][ T4650] device syzkaller0 entered promiscuous mode [ 89.067435][ T4652] device syzkaller0 entered promiscuous mode [ 89.335550][ T26] kauditd_printk_skb: 146 callbacks suppressed [ 89.335566][ T26] audit: type=1326 audit(1792652013.937:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 89.428969][ T26] audit: type=1326 audit(1792652013.977:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 89.517945][ T4663] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.586134][ T26] audit: type=1326 audit(1792652013.977:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 89.695391][ T26] audit: type=1326 audit(1792652013.977:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 89.819111][ T26] audit: type=1326 audit(1792652013.977:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 89.916251][ T26] audit: type=1326 audit(1792652013.977:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 90.039258][ T26] audit: type=1326 audit(1792652013.977:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 90.071728][ T4688] loop5: detected capacity change from 0 to 1959 [ 90.137226][ T26] audit: type=1326 audit(1792652013.977:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 90.143743][ T4688] loop5: detected capacity change from 1959 to 3095 [ 90.182022][ T4690] device syzkaller0 entered promiscuous mode [ 90.269115][ T26] audit: type=1326 audit(1792652013.977:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 90.349081][ T26] audit: type=1326 audit(1792652013.977:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4657 comm="syz.0.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 90.451406][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 91.180347][ T4703] socket: no more sockets [ 91.262382][ T4708] netlink: 'syz.3.113': attribute type 12 has an invalid length. [ 91.276643][ T4684] socket: no more sockets [ 91.289425][ T4708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.113'. [ 91.767440][ T4716] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 91.882311][ T4721] program syz.2.117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.924431][ T4721] sctp: [Deprecated]: syz.2.117 (pid 4721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.924431][ T4721] Use struct sctp_sack_info instead [ 91.974497][ T4719] raw_sendmsg: syz.2.117 forgot to set AF_INET. Fix it! [ 92.270368][ T4725] device syzkaller0 entered promiscuous mode [ 92.841749][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.129206][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 93.249461][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.280347][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.479261][ T13] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 93.497881][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.521112][ T4764] device syzkaller0 entered promiscuous mode [ 93.526707][ T13] usb 5-1: Product: syz [ 93.539881][ T13] usb 5-1: Manufacturer: syz [ 93.554789][ T13] usb 5-1: SerialNumber: syz [ 93.583784][ T13] usb 5-1: config 0 descriptor?? [ 93.652816][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 93.666850][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 93.739395][ T13] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 93.789126][ T9] usb 5-1: Failed to submit usb control message: -71 [ 93.796799][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 93.805225][ T9] usb 5-1: unable to get target info from device [ 93.812022][ T9] usb 5-1: could not get target info (-71) [ 93.817992][ T9] usb 5-1: could not probe fw (-71) [ 93.917142][ T4735] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.472810][ T4291] usb 5-1: USB disconnect, device number 4 [ 95.160197][ T4802] device syzkaller0 entered promiscuous mode [ 96.369175][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.613846][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 96.749314][ T21] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 96.764851][ T21] usb 1-1: config 0 has no interface number 0 [ 96.945341][ T21] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 96.964770][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.979293][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.983316][ T21] usb 1-1: Product: syz [ 96.991416][ T21] usb 1-1: Manufacturer: syz [ 97.001225][ T21] usb 1-1: SerialNumber: syz [ 97.019783][ T21] usb 1-1: config 0 descriptor?? [ 97.072564][ T21] smsc95xx v2.0.0 [ 97.249888][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 97.379511][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.394245][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.509196][ T21] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 97.549179][ T21] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.579325][ T13] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 97.606461][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.633086][ T13] usb 5-1: Product: syz [ 97.656307][ T13] usb 5-1: Manufacturer: syz [ 97.669049][ T13] usb 5-1: SerialNumber: syz [ 97.694745][ T13] usb 5-1: config 0 descriptor?? [ 97.760121][ T13] hub 5-1:0.0: bad descriptor, ignoring hub [ 97.766078][ T13] hub: probe of 5-1:0.0 failed with error -5 [ 97.804725][ T13] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 97.839277][ T9] usb 5-1: Failed to submit usb control message: -71 [ 97.856523][ T9] usb 5-1: unable to send the bmi data to the device: -71 [ 97.899180][ T9] usb 5-1: unable to get target info from device [ 97.927507][ T9] usb 5-1: could not get target info (-71) [ 97.952299][ T9] usb 5-1: could not probe fw (-71) [ 98.044746][ T21] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 98.077528][ T21] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 98.109665][ T13] usb 5-1: USB disconnect, device number 5 [ 98.123582][ T21] usb 1-1: USB disconnect, device number 3 [ 99.296695][ T4892] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.311834][ T4892] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 99.626214][ T4905] syz.3.179 uses obsolete (PF_INET,SOCK_PACKET) [ 100.107799][ T4924] program syz.3.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.167926][ T4925] sctp: [Deprecated]: syz.3.185 (pid 4925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.167926][ T4925] Use struct sctp_sack_info instead [ 100.777809][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 100.777824][ T26] audit: type=1326 audit(1792652025.377:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 100.840777][ T26] audit: type=1326 audit(1792652025.417:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 100.872533][ T26] audit: type=1326 audit(1792652025.417:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 100.914572][ T26] audit: type=1326 audit(1792652025.417:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 100.943323][ T26] audit: type=1326 audit(1792652025.417:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.195" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 101.182091][ T23] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 101.196388][ T4960] binder: BINDER_SET_CONTEXT_MGR already set [ 101.214513][ T4960] binder: 4959:4960 ioctl 4018620d 200000000200 returned -16 [ 101.312677][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 101.365811][ T4973] dccp_invalid_packet: P.Data Offset(4) too small [ 101.404141][ T26] audit: type=1326 audit(1792652026.007:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.0.205" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 101.455535][ T26] audit: type=1326 audit(1792652026.037:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.0.205" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 101.487112][ T26] audit: type=1326 audit(1792652026.037:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.0.205" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 101.538896][ T26] audit: type=1326 audit(1792652026.047:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.0.205" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 101.559754][ T23] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 101.584798][ T23] usb 5-1: config 0 has no interface number 0 [ 101.594650][ T26] audit: type=1326 audit(1792652026.047:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4975 comm="syz.0.205" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 101.739245][ T4252] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 101.779500][ T23] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 101.795926][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.804131][ T23] usb 5-1: Product: syz [ 101.808511][ T23] usb 5-1: Manufacturer: syz [ 101.817287][ T23] usb 5-1: SerialNumber: syz [ 101.837759][ T23] usb 5-1: config 0 descriptor?? [ 102.159518][ T4252] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.242939][ T4993] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 102.350002][ T4252] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 102.363329][ T4252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.373197][ T4252] usb 1-1: Product: syz [ 102.377411][ T4252] usb 1-1: Manufacturer: syz [ 102.386957][ T4252] usb 1-1: SerialNumber: syz [ 102.523176][ T4952] udc-core: couldn't find an available UDC or it's busy [ 102.531629][ T4952] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.559283][ T23] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 102.569816][ T23] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 102.583199][ T23] asix: probe of 5-1:0.251 failed with error -71 [ 102.601439][ T23] usb 5-1: USB disconnect, device number 6 [ 102.691738][ T5001] binder: 5000:5001 ioctl c0306201 0 returned -14 [ 102.772668][ T4252] usb 1-1: unit 8 not found! [ 102.778769][ T4252] usb 1-1: unit 6 not found! [ 102.843731][ T4252] usb 1-1: USB disconnect, device number 4 [ 103.091698][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.852325][ T5036] binder: 5035:5036 ioctl c0306201 0 returned -14 [ 103.861063][ T5036] binder: 5035:5036 ioctl c0306201 0 returned -14 [ 103.867996][ T5036] binder: 5035:5036 ioctl c0306201 0 returned -14 [ 104.047386][ T5041] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 104.482473][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.799149][ T4192] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 104.849203][ T23] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 104.859435][ T23] usb 2-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 104.869790][ T23] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 104.889140][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.951680][ T23] pl2303 2-1:1.0: required endpoints missing [ 104.969150][ T23] pl2303 2-1:1.1: pl2303 converter detected [ 104.995554][ T23] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 105.159203][ T4192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.213420][ T5046] netlink: 'syz.1.229': attribute type 11 has an invalid length. [ 105.329198][ T4192] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 105.340199][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.348236][ T4192] usb 1-1: Product: syz [ 105.352827][ T4192] usb 1-1: Manufacturer: syz [ 105.357465][ T4192] usb 1-1: SerialNumber: syz [ 105.719408][ T4192] usb 1-1: unit 8 not found! [ 105.724180][ T4192] usb 1-1: unit 6 not found! [ 105.780039][ T4192] usb 1-1: USB disconnect, device number 5 [ 105.810388][ T26] kauditd_printk_skb: 125 callbacks suppressed [ 105.810439][ T26] audit: type=1326 audit(1792652030.417:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3741de4d8e code=0x7ffc0000 [ 105.941627][ T26] audit: type=1326 audit(1792652030.547:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3741de4d8e code=0x7ffc0000 [ 106.042263][ T26] audit: type=1326 audit(1792652030.647:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3741de4d8e code=0x7ffc0000 [ 106.068003][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.149352][ T26] audit: type=1326 audit(1792652030.747:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5050 comm="syz.0.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 106.175563][ T4252] usb 2-1: USB disconnect, device number 4 [ 106.226390][ T4252] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 106.255273][ T4252] pl2303 2-1:1.1: device disconnected [ 106.279509][ T5092] binder: 5091:5092 ioctl c0306201 0 returned -14 [ 106.297884][ T5092] binder: 5091:5092 ioctl c0306201 0 returned -14 [ 106.317089][ T5092] binder: 5091:5092 ioctl c0306201 0 returned -14 [ 106.433000][ T5098] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 106.962155][ T26] audit: type=1326 audit(1792652031.567:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 106.994586][ T26] audit: type=1326 audit(1792652031.567:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 107.020896][ T26] audit: type=1326 audit(1792652031.567:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 107.048482][ T26] audit: type=1326 audit(1792652031.567:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 107.073026][ T26] audit: type=1326 audit(1792652031.567:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 107.148249][ T26] audit: type=1326 audit(1792652031.567:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.251" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 107.461198][ T4252] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.669423][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.749267][ T4252] usb 2-1: Using ep0 maxpacket: 16 [ 107.919193][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 108.100638][ T4252] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 108.129076][ T4252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.157544][ T4252] usb 2-1: Product: syz [ 108.175891][ T4252] usb 2-1: Manufacturer: syz [ 108.192698][ T4252] usb 2-1: SerialNumber: syz [ 108.199225][ T23] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 108.228975][ T5144] device syzkaller0 entered promiscuous mode [ 108.237676][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.264646][ T23] usb 3-1: Product: syz [ 108.283246][ T23] usb 3-1: Manufacturer: syz [ 108.287886][ T23] usb 3-1: SerialNumber: syz [ 108.591045][ T5151] binder: 5148:5151 ioctl c0306201 0 returned -14 [ 108.647107][ T5151] binder: 5148:5151 ioctl c0306201 0 returned -14 [ 108.667639][ T5151] binder: 5148:5151 ioctl c0306201 0 returned -14 [ 108.694702][ T5153] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 108.720524][ T5153] netlink: 'syz.3.264': attribute type 2 has an invalid length. [ 109.373999][ T4252] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 109.382174][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.394458][ T4252] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 109.404989][ T4252] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 109.459191][ T4252] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 109.529562][ T4252] usb 2-1: USB disconnect, device number 5 [ 109.584686][ T23] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 109.602874][ T23] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 109.649755][ T23] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 109.663800][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 109.689322][ T23] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 109.718264][ T5173] device syzkaller0 entered promiscuous mode [ 109.758583][ T23] usb 3-1: USB disconnect, device number 4 [ 109.839394][ T13] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 109.868584][ T13] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.887906][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 109.899358][ T13] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 109.915420][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.935818][ T13] usb 1-1: config 0 descriptor?? [ 109.959644][ T5164] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 110.021085][ T5184] binder: BINDER_SET_CONTEXT_MGR already set [ 110.041368][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 110.095894][ T5184] binder: 5183:5184 ioctl 4018620d 200000000200 returned -16 [ 110.365143][ T5194] netlink: 'syz.0.268': attribute type 1 has an invalid length. [ 110.401036][ T5194] netlink: 'syz.0.268': attribute type 2 has an invalid length. [ 110.422662][ T5199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.280'. [ 110.608468][ T5203] binder: 5201:5203 ioctl c0306201 0 returned -14 [ 110.618025][ T5203] binder: 5201:5203 ioctl c0306201 0 returned -14 [ 110.649185][ T4252] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.653877][ T5204] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 110.666515][ T5204] netlink: 'syz.1.282': attribute type 2 has an invalid length. [ 110.789212][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 110.795255][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 110.816685][ T13] usb 1-1: USB disconnect, device number 6 [ 110.919205][ T4252] usb 3-1: Using ep0 maxpacket: 32 [ 110.935907][ T5214] device syzkaller0 entered promiscuous mode [ 110.969218][ T4291] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.043177][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.054922][ T4252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.072342][ T4252] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 111.085076][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.097958][ T4252] usb 3-1: config 0 descriptor?? [ 111.209125][ T4291] usb 5-1: Using ep0 maxpacket: 16 [ 111.329315][ T4291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.349786][ T4291] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.525084][ T4291] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 111.544501][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.563491][ T4291] usb 5-1: Product: syz [ 111.577977][ T4291] usb 5-1: Manufacturer: syz [ 111.593355][ T4252] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 111.593623][ T4291] usb 5-1: SerialNumber: syz [ 111.619225][ T4252] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 111.645245][ T4291] usb 5-1: config 0 descriptor?? [ 111.655483][ T4252] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 111.693863][ T4291] hub 5-1:0.0: bad descriptor, ignoring hub [ 111.704646][ T4291] hub: probe of 5-1:0.0 failed with error -5 [ 111.752597][ T4291] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 111.801283][ T4252] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 111.819314][ T144] usb 5-1: Failed to submit usb control message: -71 [ 111.826296][ T144] usb 5-1: unable to send the bmi data to the device: -71 [ 111.914335][ T144] usb 5-1: unable to get target info from device [ 111.922879][ T144] usb 5-1: could not get target info (-71) [ 111.928836][ T144] usb 5-1: could not probe fw (-71) [ 112.049309][ T4291] usb 5-1: USB disconnect, device number 7 [ 112.229183][ T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 112.232977][ T4252] ft260 0003:0403:6030.0001: failed to retrieve status: -32, no wakeup [ 112.499254][ T4252] ft260 0003:0403:6030.0001: failed to reset I2C controller: -71 [ 112.555636][ T4252] usb 3-1: USB disconnect, device number 5 [ 112.599441][ T23] usb 4-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 112.618374][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.721283][ T5246] fido_id[5246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.790266][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.803834][ T23] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.820354][ T23] usb 4-1: Product: syz [ 112.824635][ T23] usb 4-1: Manufacturer: syz [ 112.837571][ T23] usb 4-1: SerialNumber: syz [ 112.864802][ T23] usb 4-1: config 0 descriptor?? [ 112.953026][ T5250] device syzkaller0 entered promiscuous mode [ 112.965688][ T23] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 113.059750][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.125388][ T23] usb 4-1: USB disconnect, device number 5 [ 113.345030][ T5263] loop9: detected capacity change from 0 to 16384 [ 113.453404][ T5270] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 113.459677][ T5268] loop_set_status: loop9 () has still dirty pages (nrpages=1) [ 113.467355][ T5270] netlink: 'syz.2.304': attribute type 2 has an invalid length. [ 114.058671][ T5278] socket: no more sockets [ 114.063186][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.147219][ T5290] rxe_eth0 speed is unknown, defaulting to 1000 [ 114.196134][ T5291] netlink: 'syz.4.311': attribute type 153 has an invalid length. [ 114.309248][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 114.385898][ T5294] device syzkaller0 entered promiscuous mode [ 114.429325][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.464065][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.629588][ T23] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 114.651997][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.681605][ T23] usb 2-1: Product: syz [ 114.685911][ T23] usb 2-1: Manufacturer: syz [ 114.700187][ T23] usb 2-1: SerialNumber: syz [ 114.736104][ T23] usb 2-1: config 0 descriptor?? [ 114.789998][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 114.795983][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 114.802562][ T5307] kvm: pic: non byte write [ 114.834277][ T5309] user requested TSC rate below hardware speed [ 114.860488][ T23] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 114.899274][ T144] usb 2-1: Failed to submit usb control message: -71 [ 114.906423][ T144] usb 2-1: unable to send the bmi data to the device: -71 [ 114.943583][ T144] usb 2-1: unable to get target info from device [ 114.950967][ T144] usb 2-1: could not get target info (-71) [ 114.957034][ T144] usb 2-1: could not probe fw (-71) [ 115.109994][ T4192] usb 2-1: USB disconnect, device number 6 [ 115.376705][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 115.518385][ T5325] netlink: 'syz.3.322': attribute type 1 has an invalid length. [ 115.536414][ T5325] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 115.729145][ T5333] netlink: 'syz.1.324': attribute type 153 has an invalid length. [ 115.797305][ T5332] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.330804][ T5342] nvme nvme0: failed to connect socket: -101 [ 116.502637][ T26] kauditd_printk_skb: 372 callbacks suppressed [ 116.502653][ T26] audit: type=1326 audit(1792652041.107:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 116.674898][ T26] audit: type=1326 audit(1792652041.137:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 116.758831][ T26] audit: type=1326 audit(1792652041.137:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3741de09ac code=0x7ffc0000 [ 116.905560][ T26] audit: type=1326 audit(1792652041.137:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3741de0a0e code=0x7ffc0000 [ 116.949174][ T4252] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.976477][ T26] audit: type=1326 audit(1792652041.137:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3741e241eb code=0x7ffc0000 [ 117.140446][ T5364] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 117.294866][ T26] audit: type=1326 audit(1792652041.137:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 117.359788][ T4252] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.389227][ T4252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.448423][ T4252] usb 1-1: config 0 descriptor?? [ 117.463156][ T26] audit: type=1326 audit(1792652041.147:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 117.591474][ T26] audit: type=1326 audit(1792652041.147:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 117.761887][ T26] audit: type=1326 audit(1792652041.167:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 117.789268][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.858269][ T26] audit: type=1326 audit(1792652041.167:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5352 comm="syz.0.330" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 117.889134][ T4291] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 118.069184][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 118.222132][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.234099][ T4252] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 118.259260][ T4291] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.287730][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.288522][ T4291] usb 5-1: config 0 has no interface number 0 [ 118.309279][ T4252] [drm] Initialized udl on minor 2 [ 118.350727][ T4291] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 118.429233][ T4291] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 118.473940][ T4291] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.519192][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.519236][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 118.589494][ T4291] usb 5-1: config 0 descriptor?? [ 118.609452][ T5372] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 118.635842][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.680086][ T4291] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 118.700766][ T7] usb 2-1: Product: syz [ 118.706747][ T7] usb 2-1: Manufacturer: syz [ 118.711967][ T5353] udc-core: couldn't find an available UDC or it's busy [ 118.729200][ T7] usb 2-1: SerialNumber: syz [ 118.763073][ T5353] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.776475][ T7] usb 2-1: config 0 descriptor?? [ 118.839923][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 118.858208][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 118.995871][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 119.036312][ T144] usb 2-1: Failed to submit usb control message: -71 [ 119.209047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 119.219051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 119.229053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 119.239053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 119.272640][ T144] usb 2-1: unable to send the bmi data to the device: -71 [ 119.282653][ T144] usb 2-1: unable to get target info from device [ 119.291536][ T144] usb 2-1: could not get target info (-71) [ 119.315444][ T144] usb 2-1: could not probe fw (-71) [ 119.369284][ T4252] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffff92 [ 119.393133][ T4252] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 119.489657][ T7] usb 2-1: USB disconnect, device number 7 [ 119.498752][ T4291] usb 5-1: USB disconnect, device number 8 [ 119.518353][ T4252] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 119.585404][ T4252] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 119.636292][ T4252] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 120.175285][ T5395] netlink: 'syz.1.339': attribute type 1 has an invalid length. [ 120.279995][ T5395] netlink: 'syz.1.339': attribute type 2 has an invalid length. [ 120.478204][ T5400] netlink: 'syz.0.341': attribute type 153 has an invalid length. [ 120.942946][ T5398] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.326974][ T5420] device syzkaller0 entered promiscuous mode [ 121.539211][ T4291] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.645645][ T5413] rxe_eth0 speed is unknown, defaulting to 1000 [ 121.809351][ T4291] usb 2-1: Using ep0 maxpacket: 16 [ 121.951839][ T4291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.002856][ T4291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.076607][ T4192] usb 1-1: USB disconnect, device number 7 [ 122.209239][ T4291] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 122.244620][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.314101][ T4291] usb 2-1: Product: syz [ 122.339655][ T4291] usb 2-1: Manufacturer: syz [ 122.355650][ T4291] usb 2-1: SerialNumber: syz [ 122.390742][ T4291] usb 2-1: config 0 descriptor?? [ 122.479910][ T4291] hub 2-1:0.0: bad descriptor, ignoring hub [ 122.485888][ T4291] hub: probe of 2-1:0.0 failed with error -5 [ 122.545212][ T4291] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 122.589294][ T4467] usb 2-1: Failed to submit usb control message: -71 [ 122.597225][ T4467] usb 2-1: unable to send the bmi data to the device: -71 [ 122.604492][ T4467] usb 2-1: unable to get target info from device [ 122.611605][ T4467] usb 2-1: could not get target info (-71) [ 122.617527][ T4467] usb 2-1: could not probe fw (-71) [ 122.839360][ T4291] usb 2-1: USB disconnect, device number 8 [ 123.185408][ T5446] ip_tables: iptables: counters copy to user failed while replacing table [ 123.228231][ T5448] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 123.277301][ T5448] netlink: 'syz.2.358': attribute type 2 has an invalid length. [ 123.553290][ T5458] device syzkaller0 entered promiscuous mode [ 123.709210][ T4192] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.822610][ T5461] rxe_eth0 speed is unknown, defaulting to 1000 [ 123.885313][ T5462] netlink: 'syz.1.362': attribute type 153 has an invalid length. [ 123.979358][ T4192] usb 5-1: Using ep0 maxpacket: 32 [ 124.109294][ T4192] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.131827][ T4192] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.174166][ T4192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.195962][ T4192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.224745][ T4192] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.274838][ T4192] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.369231][ T4192] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.386625][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.409824][ T4192] usb 5-1: config 0 descriptor?? [ 124.418017][ T26] kauditd_printk_skb: 166 callbacks suppressed [ 124.418030][ T26] audit: type=1326 audit(1792652049.017:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.449058][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.466588][ T26] audit: type=1326 audit(1792652049.057:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.497273][ T5466] veth0: mtu less than device minimum [ 124.505129][ T26] audit: type=1326 audit(1792652049.067:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.529318][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.556430][ T26] audit: type=1326 audit(1792652049.067:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.588837][ T26] audit: type=1326 audit(1792652049.067:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.613081][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.635315][ T26] audit: type=1326 audit(1792652049.067:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.659424][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.685249][ T26] audit: type=1326 audit(1792652049.067:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.709381][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.727153][ T26] audit: type=1326 audit(1792652049.067:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.739291][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 124.760164][ T1107] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.769207][ T4192] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.780399][ T5471] binder: 5470:5471 ioctl c0306201 0 returned -14 [ 124.829087][ T26] audit: type=1326 audit(1792652049.067:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 124.906422][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 124.914815][ T26] audit: type=1326 audit(1792652049.067:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5467 comm="syz.3.364" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f202cf0cd8e code=0x7ffc0000 [ 124.941104][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.078383][ T4192] usb 5-1: USB disconnect, device number 9 [ 125.089299][ T7] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 125.099508][ T7] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 125.128383][ T7] usb 3-1: Product: syz [ 125.130103][ T4192] usblp0: removed [ 125.157468][ T7] usb 3-1: Manufacturer: syz [ 125.168327][ T7] usb 3-1: SerialNumber: syz [ 125.198345][ T7] usb 3-1: config 0 descriptor?? [ 125.209490][ T1107] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.301079][ T7] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 125.366294][ T5491] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 125.368031][ T5489] device syzkaller0 entered promiscuous mode [ 125.375124][ T5491] netlink: 'syz.0.373': attribute type 2 has an invalid length. [ 125.399234][ T1107] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 125.428924][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.464788][ T1107] usb 4-1: Product: syz [ 125.507733][ T1107] usb 4-1: Manufacturer: syz [ 125.527366][ T1107] usb 4-1: SerialNumber: syz [ 125.939615][ T1107] usb 4-1: unit 8 not found! [ 125.944271][ T1107] usb 4-1: unit 6 not found! [ 126.036738][ T1107] usb 4-1: USB disconnect, device number 6 [ 126.409171][ T154] usb 3-1: Failed to submit usb control message: -110 [ 126.418735][ T154] usb 3-1: unable to send the bmi data to the device: -110 [ 126.447857][ T154] usb 3-1: unable to get target info from device [ 126.468853][ T154] usb 3-1: could not get target info (-110) [ 126.508806][ T154] usb 3-1: could not probe fw (-110) [ 127.195671][ T21] usb 3-1: USB disconnect, device number 6 [ 127.246839][ T5526] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 127.297098][ T5526] netlink: 'syz.4.384': attribute type 2 has an invalid length. [ 127.498060][ T5533] device syzkaller0 entered promiscuous mode [ 127.909584][ T4192] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 128.269405][ T5560] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 128.279521][ T4192] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.460395][ T4192] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 128.479719][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.489683][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.508492][ T4192] usb 1-1: Product: syz [ 128.519894][ T4192] usb 1-1: Manufacturer: syz [ 128.528286][ T4192] usb 1-1: SerialNumber: syz [ 128.774055][ T5575] device syzkaller0 entered promiscuous mode [ 128.779443][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 128.909269][ T4192] usb 1-1: unit 8 not found! [ 128.913930][ T4192] usb 1-1: unit 6 not found! [ 128.921789][ T7] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 128.992037][ T4192] usb 1-1: USB disconnect, device number 8 [ 129.096868][ T5581] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 129.134833][ T7] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 129.144264][ T5581] netlink: 'syz.2.405': attribute type 2 has an invalid length. [ 129.157589][ T7] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 129.176980][ T7] usb 5-1: Product: syz [ 129.195774][ T7] usb 5-1: Manufacturer: syz [ 129.210860][ T7] usb 5-1: SerialNumber: syz [ 129.234880][ T7] usb 5-1: config 0 descriptor?? [ 129.364164][ T7] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 129.956194][ T4192] usb 5-1: USB disconnect, device number 10 [ 129.962635][ T4242] usb 5-1: Failed to submit usb control message: -71 [ 129.988215][ T4242] usb 5-1: unable to send the bmi data to the device: -71 [ 130.005188][ T26] kauditd_printk_skb: 88 callbacks suppressed [ 130.005201][ T26] audit: type=1326 audit(1792652054.607:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.054021][ T4242] usb 5-1: unable to get target info from device [ 130.079054][ T4242] usb 5-1: could not get target info (-71) [ 130.099750][ T4242] usb 5-1: could not probe fw (-71) [ 130.129182][ T26] audit: type=1326 audit(1792652054.647:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.170908][ T26] audit: type=1326 audit(1792652054.647:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.179086][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 130.194995][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.209078][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 130.229020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 130.252050][ T26] audit: type=1326 audit(1792652054.647:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.276114][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.382357][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.409084][ T26] audit: type=1326 audit(1792652054.647:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.479697][ T26] audit: type=1326 audit(1792652054.647:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.554913][ T26] audit: type=1326 audit(1792652054.647:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.643272][ T26] audit: type=1326 audit(1792652054.647:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.670145][ T5618] device syzkaller0 entered promiscuous mode [ 130.759501][ T21] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 130.780352][ T26] audit: type=1326 audit(1792652054.647:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 130.796733][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.856433][ T21] usb 4-1: config 0 descriptor?? [ 130.890017][ T26] audit: type=1326 audit(1792652054.647:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.3.410" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202cf4c559 code=0x7ffc0000 [ 131.118159][ T5633] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 131.136617][ T5633] netlink: 'syz.4.421': attribute type 2 has an invalid length. [ 131.391594][ T21] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 131.408228][ T21] [drm] Initialized udl on minor 2 [ 131.569173][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.829221][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 131.981451][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 132.119256][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 132.139305][ T21] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 132.186471][ T21] usb 4-1: USB disconnect, device number 7 [ 132.192728][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 132.207685][ T5656] netlink: 'syz.0.428': attribute type 153 has an invalid length. [ 132.229379][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 132.240409][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 132.254502][ T1107] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 132.269292][ T7] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 132.285611][ T7] usb 2-1: Product: syz [ 132.290243][ T7] usb 2-1: Manufacturer: syz [ 132.295205][ T7] usb 2-1: SerialNumber: syz [ 132.308532][ T7] usb 2-1: config 0 descriptor?? [ 132.320511][ T5653] device syzkaller0 entered promiscuous mode [ 132.346454][ T5651] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.394372][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 132.633105][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.641574][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.073480][ T21] usb 2-1: USB disconnect, device number 9 [ 133.089296][ T4242] usb 2-1: Failed to submit usb control message: -71 [ 133.096323][ T4242] usb 2-1: unable to send the bmi data to the device: -71 [ 133.141883][ T4242] usb 2-1: unable to get target info from device [ 133.161827][ T4242] usb 2-1: could not get target info (-71) [ 133.176731][ T4242] usb 2-1: could not probe fw (-71) [ 133.383188][ T5687] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 133.413834][ T5687] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 133.872840][ T5704] device syzkaller0 entered promiscuous mode [ 134.050984][ T5710] rxe_eth0 speed is unknown, defaulting to 1000 [ 134.112486][ T5713] netlink: 'syz.4.445': attribute type 153 has an invalid length. [ 134.135159][ T5715] capability: warning: `syz.3.446' uses 32-bit capabilities (legacy support in use) [ 134.519136][ T4252] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.789180][ T4252] usb 4-1: Using ep0 maxpacket: 32 [ 134.925175][ T4252] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 135.139360][ T4252] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 135.157956][ T4252] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 135.184369][ T4252] usb 4-1: Product: syz [ 135.196659][ T4252] usb 4-1: Manufacturer: syz [ 135.212138][ T4252] usb 4-1: SerialNumber: syz [ 135.237630][ T4252] usb 4-1: config 0 descriptor?? [ 135.358522][ T4252] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 135.667809][ T5751] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 135.752083][ T5751] netlink: 'syz.2.458': attribute type 2 has an invalid length. [ 135.856649][ T4291] usb 4-1: USB disconnect, device number 8 [ 135.869430][ T154] usb 4-1: Failed to submit usb control message: -71 [ 135.879914][ T154] usb 4-1: unable to send the bmi data to the device: -71 [ 135.893877][ T154] usb 4-1: unable to get target info from device [ 135.912223][ T154] usb 4-1: could not get target info (-71) [ 135.933780][ T154] usb 4-1: could not probe fw (-71) [ 136.594628][ T5772] netlink: 'syz.3.463': attribute type 153 has an invalid length. [ 136.667656][ T5769] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.695977][ T5778] device syzkaller0 entered promiscuous mode [ 136.720450][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 136.720463][ T26] audit: type=1326 audit(1792652061.327:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 136.835274][ T26] audit: type=1326 audit(1792652061.327:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 136.859416][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.005032][ T26] audit: type=1326 audit(1792652061.467:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 137.190569][ T26] audit: type=1326 audit(1792652061.467:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 137.370564][ T26] audit: type=1326 audit(1792652061.467:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 137.479100][ T26] audit: type=1326 audit(1792652061.467:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 137.567348][ T5809] netlink: 'syz.2.476': attribute type 1 has an invalid length. [ 137.613917][ T26] audit: type=1326 audit(1792652061.467:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5775 comm="syz.2.466" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe293dfe559 code=0x7ffc0000 [ 137.649789][ T5809] netlink: 'syz.2.476': attribute type 2 has an invalid length. [ 138.044917][ T5823] device syzkaller0 entered promiscuous mode [ 138.164937][ T5831] tipc: Enabling of bearer rejected, failed to enable media [ 138.505363][ T26] audit: type=1326 audit(1792652063.107:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.4.485" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 138.553148][ T26] audit: type=1326 audit(1792652063.137:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.4.485" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21604cb559 code=0x7ffc0000 [ 138.585336][ T26] audit: type=1326 audit(1792652063.137:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5845 comm="syz.4.485" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f21604879ac code=0x7ffc0000 [ 138.674844][ T5848] sock: sock_timestamping_bind_phc: sock not bind to device [ 138.899191][ T7] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 138.997387][ T5857] netlink: 'syz.2.488': attribute type 153 has an invalid length. [ 139.096257][ T5856] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.299540][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.539579][ T7] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 139.568291][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.635505][ T7] usb 5-1: Product: syz [ 139.661558][ T7] usb 5-1: Manufacturer: syz [ 139.687411][ T7] usb 5-1: SerialNumber: syz [ 140.034032][ T5881] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 140.096391][ T5881] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 140.129313][ T7] usb 5-1: unit 8 not found! [ 140.133960][ T7] usb 5-1: unit 6 not found! [ 140.235914][ T7] usb 5-1: USB disconnect, device number 11 [ 140.441244][ T5895] device syzkaller0 entered promiscuous mode [ 140.509682][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.039304][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.408513][ T5927] tipc: Enabling of bearer rejected, failed to enable media [ 141.430449][ T5920] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.459558][ T7] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 141.476886][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.492474][ T5925] netlink: 'syz.2.507': attribute type 153 has an invalid length. [ 141.510276][ T7] usb 1-1: config 0 descriptor?? [ 141.669207][ T4263] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.763195][ T26] kauditd_printk_skb: 106 callbacks suppressed [ 141.763209][ T26] audit: type=1326 audit(1792652066.367:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 141.824594][ T26] audit: type=1326 audit(1792652066.367:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 141.879137][ T26] audit: type=1326 audit(1792652066.367:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 141.910959][ T26] audit: type=1326 audit(1792652066.367:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3741e241eb code=0x7ffc0000 [ 141.944003][ T26] audit: type=1326 audit(1792652066.367:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3741e241eb code=0x7ffc0000 [ 141.969485][ T4263] usb 5-1: Using ep0 maxpacket: 32 [ 141.978076][ T26] audit: type=1326 audit(1792652066.397:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3741de4d8e code=0x7ffc0000 [ 142.009210][ T13] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 142.020769][ T7] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 142.038494][ T7] [drm] Initialized udl on minor 2 [ 142.064294][ T26] audit: type=1326 audit(1792652066.577:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 142.097477][ T26] audit: type=1326 audit(1792652066.577:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 142.156485][ T26] audit: type=1326 audit(1792652066.577:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741e24559 code=0x7ffc0000 [ 142.161379][ T4263] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 142.208634][ T26] audit: type=1326 audit(1792652066.577:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3741e241eb code=0x7ffc0000 [ 142.407230][ T5934] device syzkaller0 entered promiscuous mode [ 142.429585][ T4263] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 142.438659][ T4263] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 142.457517][ T4263] usb 5-1: Product: syz [ 142.462284][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.473123][ T4263] usb 5-1: Manufacturer: syz [ 142.477748][ T4263] usb 5-1: SerialNumber: syz [ 142.508901][ T4263] usb 5-1: config 0 descriptor?? [ 142.631745][ T4263] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 142.642197][ T13] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 142.693568][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.728787][ T5944] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 142.737272][ T5944] netlink: 'syz.2.514': attribute type 2 has an invalid length. [ 142.789539][ T13] usb 2-1: Product: syz [ 142.793757][ T13] usb 2-1: Manufacturer: syz [ 142.841793][ T13] usb 2-1: SerialNumber: syz [ 142.861900][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.910162][ T7] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 142.969147][ T4279] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 143.000803][ T7] usb 1-1: USB disconnect, device number 9 [ 143.009502][ T4279] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 143.044091][ T4279] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 143.289498][ T13] usb 2-1: unit 8 not found! [ 143.294162][ T13] usb 2-1: unit 6 not found! [ 143.381263][ T7] usb 5-1: USB disconnect, device number 12 [ 143.389373][ T144] usb 5-1: Failed to submit usb control message: -71 [ 143.396468][ T144] usb 5-1: unable to send the bmi data to the device: -71 [ 143.412125][ T13] usb 2-1: USB disconnect, device number 10 [ 143.455974][ T144] usb 5-1: unable to get target info from device [ 143.493526][ T144] usb 5-1: could not get target info (-71) [ 143.528819][ T144] usb 5-1: could not probe fw (-71) [ 143.750669][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.898183][ T5966] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.033101][ T5970] netlink: 'syz.3.521': attribute type 153 has an invalid length. [ 144.560259][ T5974] device syzkaller0 entered promiscuous mode [ 145.889236][ T5994] netlink: 'syz.1.529': attribute type 1 has an invalid length. [ 145.929178][ T5994] netlink: 'syz.1.529': attribute type 2 has an invalid length. [ 146.099129][ T5474] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.389158][ T5474] usb 4-1: Using ep0 maxpacket: 32 [ 146.519192][ T5474] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 146.711414][ T5474] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 146.740660][ T5474] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 146.779043][ T5474] usb 4-1: Product: syz [ 146.789545][ T5474] usb 4-1: Manufacturer: syz [ 146.799414][ T5474] usb 4-1: SerialNumber: syz [ 146.843188][ T5474] usb 4-1: config 0 descriptor?? [ 146.943122][ T5474] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 147.487409][ T6019] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.562640][ T6020] netlink: 'syz.2.535': attribute type 153 has an invalid length. [ 147.682823][ T5474] usb 4-1: USB disconnect, device number 9 [ 147.699263][ T154] usb 4-1: Failed to submit usb control message: -71 [ 147.706353][ T154] usb 4-1: unable to send the bmi data to the device: -71 [ 147.736339][ T6029] device syzkaller0 entered promiscuous mode [ 147.762529][ T154] usb 4-1: unable to get target info from device [ 147.819115][ T154] usb 4-1: could not get target info (-71) [ 147.869221][ T154] usb 4-1: could not probe fw (-71) [ 147.915692][ T6013] nvme nvme0: failed to connect socket: -111 [ 148.815273][ T6053] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 148.864992][ T6053] netlink: 'syz.4.544': attribute type 2 has an invalid length. [ 149.255816][ T6056] binder: 6055:6056 ioctl c0306201 0 returned -14 [ 149.416042][ T6059] binder: 6055:6059 ioctl c0306201 0 returned -14 [ 149.963573][ T6069] fuse: Bad value for 'fd' [ 150.244171][ T6076] device syzkaller0 entered promiscuous mode [ 150.449160][ T4244] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.467991][ T6083] netlink: 'syz.3.553': attribute type 153 has an invalid length. [ 150.505862][ T6079] rxe_eth0 speed is unknown, defaulting to 1000 [ 150.689386][ T4192] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 150.701307][ T6092] netlink: 'syz.1.558': attribute type 1 has an invalid length. [ 150.723812][ T6092] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 150.742352][ T4244] usb 5-1: Using ep0 maxpacket: 32 [ 150.879629][ T4244] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 150.989179][ T4192] usb 1-1: Using ep0 maxpacket: 16 [ 151.059474][ T4244] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 151.075447][ T4244] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 151.095046][ T4244] usb 5-1: Product: syz [ 151.105306][ T4244] usb 5-1: Manufacturer: syz [ 151.125628][ T4244] usb 5-1: SerialNumber: syz [ 151.140356][ T4192] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.161592][ T4192] usb 1-1: config 0 has no interface number 0 [ 151.167837][ T4192] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.196765][ T4244] usb 5-1: config 0 descriptor?? [ 151.288803][ T4192] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.336341][ T4192] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.336990][ T4244] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 151.370948][ T4192] usb 1-1: config 0 interface 1 has no altsetting 0 [ 151.377921][ T4192] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 151.393348][ T4192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.418748][ T4192] usb 1-1: config 0 descriptor?? [ 151.482385][ T4192] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 151.508857][ T6105] program syz.3.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.769939][ T4291] usb 5-1: USB disconnect, device number 13 [ 151.789266][ T5829] usb 5-1: Failed to submit usb control message: -71 [ 151.810662][ T5829] usb 5-1: unable to send the bmi data to the device: -71 [ 151.848375][ T5829] usb 5-1: unable to get target info from device [ 151.880303][ T5829] usb 5-1: could not get target info (-71) [ 151.903304][ T5829] usb 5-1: could not probe fw (-71) [ 151.922171][ T4192] elan 0003:04F3:074D.0002: failed to start in urb: -90 [ 152.123166][ T6123] netlink: 'syz.4.568': attribute type 3 has an invalid length. [ 152.164419][ T6123] netlink: 224 bytes leftover after parsing attributes in process `syz.4.568'. [ 152.226617][ T6125] device syzkaller0 entered promiscuous mode [ 152.340547][ T4192] elan 0003:04F3:074D.0002: Get report error for parm 6: 0 [ 152.570707][ T6130] netlink: 'syz.2.570': attribute type 153 has an invalid length. [ 152.582954][ T6129] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.599215][ T4251] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 152.769332][ T4192] elan 0003:04F3:074D.0002: Get report error for parm 7: 0 [ 152.819157][ T4251] usb 5-1: device descriptor read/64, error -71 [ 153.109623][ T4251] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 153.205800][ T4192] elan 0003:04F3:074D.0002: Get report error for parm 8: 0 [ 153.223762][ T4192] input: Elan Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04F3:074D.0002/input/input8 [ 153.288327][ T4192] input: HID 04f3:074d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04F3:074D.0002/input/input7 [ 153.309275][ T4251] usb 5-1: device descriptor read/64, error -71 [ 153.339445][ T4192] elan 0003:04F3:074D.0002: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 153.406634][ T6085] udc-core: couldn't find an available UDC or it's busy [ 153.422175][ T6085] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.443347][ T4251] usb usb5-port1: attempt power cycle [ 153.459306][ T4192] elan 0003:04F3:074D.0002: Failed to start multitouch: -71 [ 153.526184][ T6140] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 153.551057][ T6140] netlink: 'syz.2.573': attribute type 2 has an invalid length. [ 153.564861][ T4192] elan: probe of 0003:04F3:074D.0002 failed with error -71 [ 153.584653][ T4192] usb 1-1: USB disconnect, device number 10 [ 153.845069][ T6142] fido_id[6142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.859657][ T4251] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 153.949297][ T4251] usb 5-1: device descriptor read/8, error -71 [ 154.229564][ T4251] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 154.329313][ T4251] usb 5-1: device descriptor read/8, error -71 [ 154.450484][ T4251] usb usb5-port1: unable to enumerate USB device [ 154.539239][ T4244] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.636179][ T6155] tipc: Enabling of bearer rejected, failed to enable media [ 154.764551][ T4244] usb 1-1: device descriptor read/64, error -71 [ 155.062112][ T4244] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.118023][ T6169] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.193548][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 155.193565][ T26] audit: type=1326 audit(1792652079.797:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.232728][ T26] audit: type=1326 audit(1792652079.797:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.270016][ T4244] usb 1-1: device descriptor read/64, error -71 [ 155.300806][ T26] audit: type=1326 audit(1792652079.907:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.341284][ T6172] netlink: 'syz.2.582': attribute type 153 has an invalid length. [ 155.365008][ T26] audit: type=1326 audit(1792652079.907:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.399827][ T4244] usb usb1-port1: attempt power cycle [ 155.476577][ T26] audit: type=1326 audit(1792652079.907:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.502136][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.534781][ T26] audit: type=1326 audit(1792652079.907:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.564699][ T26] audit: type=1326 audit(1792652079.957:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.588791][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.670541][ T26] audit: type=1326 audit(1792652079.957:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.819106][ T4244] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 155.892297][ T26] audit: type=1326 audit(1792652079.957:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 155.918568][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.939218][ T4244] usb 1-1: device descriptor read/8, error -71 [ 156.025021][ T26] audit: type=1326 audit(1792652079.957:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.1.583" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694d96e559 code=0x7ffc0000 [ 156.049196][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.249182][ T4244] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.370009][ T4244] usb 1-1: device descriptor read/8, error -71 [ 156.436552][ T6189] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 156.495516][ T6189] netlink: 'syz.4.587': attribute type 2 has an invalid length. [ 156.509407][ T4244] usb usb1-port1: unable to enumerate USB device [ 156.789270][ T6199] device syzkaller0 entered promiscuous mode [ 157.260755][ T6211] tipc: Enabling of bearer rejected, failed to enable media [ 158.336552][ T6240] netlink: 'syz.3.599': attribute type 153 has an invalid length. [ 158.352555][ T6238] rxe_eth0 speed is unknown, defaulting to 1000 [ 158.374933][ T6244] device syzkaller0 entered promiscuous mode [ 158.706185][ T6248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 158.876780][ T6252] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 158.949236][ T6252] netlink: 'syz.1.604': attribute type 2 has an invalid length. [ 159.049077][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.269167][ T7] usb 1-1: device descriptor read/64, error -71 [ 159.540843][ T4252] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 159.559240][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.769410][ T7] usb 1-1: device descriptor read/64, error -71 [ 159.789079][ T4252] usb 4-1: Using ep0 maxpacket: 32 [ 159.927863][ T6267] tipc: Enabling of bearer rejected, failed to enable media [ 159.938465][ T6268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.939834][ T7] usb usb1-port1: attempt power cycle [ 159.963310][ T4252] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 160.055183][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 160.199348][ T4252] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 160.221224][ T4252] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 160.244753][ T4252] usb 4-1: Product: syz [ 160.278209][ T4252] usb 4-1: Manufacturer: syz [ 160.283180][ T6262] device hsr_slave_1 left promiscuous mode [ 160.289256][ T4252] usb 4-1: SerialNumber: syz [ 160.305003][ T4252] usb 4-1: config 0 descriptor?? [ 160.369787][ T4252] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 160.529656][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 160.637728][ T6288] device ipvlan2 entered promiscuous mode [ 160.669366][ T7] usb 1-1: device descriptor read/8, error -71 [ 160.686236][ T6288] team0: Device ipvlan2 failed to register rx_handler [ 160.949358][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 161.069686][ T7] usb 1-1: device descriptor read/8, error -71 [ 161.189352][ T7] usb usb1-port1: unable to enumerate USB device [ 161.449237][ T144] usb 4-1: Failed to submit usb control message: -110 [ 161.466095][ T4192] usb 4-1: USB disconnect, device number 10 [ 161.484192][ T144] usb 4-1: unable to send the bmi data to the device: -110 [ 161.539146][ T144] usb 4-1: unable to get target info from device [ 161.579109][ T144] usb 4-1: could not get target info (-110) [ 161.585068][ T144] usb 4-1: could not probe fw (-110) [ 161.707693][ T6298] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.719620][ T6303] netlink: 'syz.4.615': attribute type 153 has an invalid length. [ 161.740656][ T6302] tipc: Enabled bearer , priority 0 [ 161.756921][ T6302] device syzkaller0 entered promiscuous mode [ 161.857217][ T6302] tipc: Resetting bearer [ 161.895817][ T6301] tipc: Resetting bearer [ 161.944059][ T6301] tipc: Disabling bearer [ 162.519714][ T6315] tipc: Enabled bearer , priority 0 [ 162.750264][ T6314] tipc: Disabling bearer [ 163.169644][ T6335] device lo entered promiscuous mode [ 163.329511][ T6335] device tunl0 entered promiscuous mode [ 163.398693][ T6335] device gre0 entered promiscuous mode [ 163.539938][ T4192] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 163.789133][ T4192] usb 5-1: Using ep0 maxpacket: 32 [ 163.825711][ T6335] device gretap0 entered promiscuous mode [ 163.901018][ T6335] device erspan0 entered promiscuous mode [ 163.910564][ T4192] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 163.963630][ T6335] device ip_vti0 entered promiscuous mode [ 164.034605][ T6335] device ip6_vti0 entered promiscuous mode [ 164.110442][ T4192] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 164.129091][ T6335] device sit0 entered promiscuous mode [ 164.132359][ T4192] usb 5-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 164.163343][ T4192] usb 5-1: Product: syz [ 164.173495][ T4192] usb 5-1: Manufacturer: syz [ 164.178166][ T4192] usb 5-1: SerialNumber: syz [ 164.205126][ T4192] usb 5-1: config 0 descriptor?? [ 164.295150][ T4192] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 164.363261][ T6335] device ip6tnl0 entered promiscuous mode [ 164.415178][ T6335] device ip6gre0 entered promiscuous mode [ 164.455029][ T6335] device syz_tun entered promiscuous mode [ 164.493668][ T6335] device ip6gretap0 entered promiscuous mode [ 164.537173][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.545661][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.566954][ T6335] device bridge0 entered promiscuous mode [ 164.675108][ T6335] device vcan0 entered promiscuous mode [ 164.741108][ T6335] device bond0 entered promiscuous mode [ 164.773300][ T6335] device bond_slave_0 entered promiscuous mode [ 164.780721][ T4263] usb 5-1: USB disconnect, device number 18 [ 164.789381][ T4277] usb 5-1: Failed to submit usb control message: -71 [ 164.797299][ T4277] usb 5-1: unable to send the bmi data to the device: -71 [ 164.820494][ T6335] device bond_slave_1 entered promiscuous mode [ 164.841634][ T4277] usb 5-1: unable to get target info from device [ 164.860117][ T4277] usb 5-1: could not get target info (-71) [ 164.909138][ T4277] usb 5-1: could not probe fw (-71) [ 164.980826][ T6335] device team0 entered promiscuous mode [ 165.015201][ T6335] device team_slave_0 entered promiscuous mode [ 165.064745][ T6335] device team_slave_1 entered promiscuous mode [ 165.176962][ T6335] device dummy0 entered promiscuous mode [ 165.256640][ T6335] device nlmon0 entered promiscuous mode [ 165.295686][ T6335] device caif0 entered promiscuous mode [ 165.331721][ T6335] device batadv0 entered promiscuous mode [ 165.394738][ T6335] device vxcan0 entered promiscuous mode [ 165.427943][ T6335] device vxcan1 entered promiscuous mode [ 165.454950][ T6335] device veth0 entered promiscuous mode [ 165.492284][ T6335] device veth1 entered promiscuous mode [ 165.529448][ T6335] device wg0 entered promiscuous mode [ 165.556643][ T6335] device wg1 entered promiscuous mode [ 165.584899][ T6335] device wg2 entered promiscuous mode [ 165.610467][ T6335] device veth0_to_bridge entered promiscuous mode [ 165.665707][ T6335] device veth1_to_bridge entered promiscuous mode [ 165.723927][ T6335] device veth0_to_bond entered promiscuous mode [ 165.772496][ T6335] device veth1_to_bond entered promiscuous mode [ 165.826576][ T6335] device veth0_to_team entered promiscuous mode [ 165.879673][ T6335] device veth1_to_team entered promiscuous mode [ 165.931341][ T6335] device veth0_to_batadv entered promiscuous mode [ 165.940447][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.977879][ T6335] device batadv_slave_0 entered promiscuous mode [ 166.029108][ T6335] device veth1_to_batadv entered promiscuous mode [ 166.051397][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.084229][ T6335] device batadv_slave_1 entered promiscuous mode [ 166.112795][ T6335] device xfrm0 entered promiscuous mode [ 166.143038][ T6335] device veth0_to_hsr entered promiscuous mode [ 166.187970][ T6335] device veth1_to_hsr entered promiscuous mode [ 166.231435][ T6335] device hsr0 entered promiscuous mode [ 166.274951][ T6335] device veth1_virt_wifi entered promiscuous mode [ 166.303876][ T6335] device veth0_virt_wifi entered promiscuous mode [ 166.312669][ T6335] device virt_wifi0 entered promiscuous mode [ 166.387063][ T6335] device vlan0 entered promiscuous mode [ 166.397058][ T6335] device vlan1 entered promiscuous mode [ 166.440842][ T6335] device macvlan0 entered promiscuous mode [ 166.471868][ T6335] device macvlan1 entered promiscuous mode [ 166.481127][ T6335] device ipvlan0 entered promiscuous mode [ 166.488106][ T6335] device ipvlan1 entered promiscuous mode [ 166.518729][ T6335] device macvtap0 entered promiscuous mode [ 166.536905][ T6335] device macsec0 entered promiscuous mode [ 166.560363][ T6335] device geneve0 entered promiscuous mode [ 166.568626][ T6335] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.581140][ T6335] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.590457][ T6335] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.599437][ T6335] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.608738][ T6335] device geneve1 entered promiscuous mode [ 166.640875][ T6335] device netdevsim0 entered promiscuous mode [ 166.651393][ T6335] device netdevsim1 entered promiscuous mode [ 166.668165][ T6335] device netdevsim2 entered promiscuous mode [ 166.683846][ T6335] device netdevsim3 entered promiscuous mode [ 166.716919][ T6335] device wlan0 entered promiscuous mode [ 166.746554][ T6335] device wlan1 entered promiscuous mode [ 166.768683][ T6348] IPv6: NLM_F_REPLACE set, but no existing node found! [ 166.787888][ T6358] netlink: 'syz.4.631': attribute type 153 has an invalid length. [ 166.848293][ T6335] syz.3.624 (6335) used greatest stack depth: 20368 bytes left [ 166.870714][ T6357] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.989855][ T6372] tipc: Enabled bearer , priority 0 [ 167.027880][ T6371] tipc: Disabling bearer [ 168.279264][ T5474] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 168.489186][ T5474] usb 1-1: device descriptor read/64, error -71 [ 168.779169][ T5474] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 168.965378][ T6420] IPVS: Scheduler module ip_vs_mh not found [ 168.979195][ T5474] usb 1-1: device descriptor read/64, error -71 [ 169.099198][ T5474] usb usb1-port1: attempt power cycle [ 169.243936][ T6429] tipc: Enabled bearer , priority 0 [ 169.255064][ T6424] syz.3.647 (6424) used greatest stack depth: 19792 bytes left [ 169.539166][ T5474] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 169.586793][ T6423] tipc: Disabling bearer [ 169.651681][ T5474] usb 1-1: device descriptor read/8, error -71 [ 169.916577][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 169.967079][ T5474] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 170.105338][ T5474] usb 1-1: device descriptor read/8, error -71 [ 170.165806][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.229612][ T5474] usb usb1-port1: unable to enumerate USB device [ 170.297134][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.376397][ T6449] bond0: (slave bond_slave_0): Releasing backup interface [ 170.389250][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.417395][ T6449] bond0: (slave bond_slave_1): Releasing backup interface [ 170.454565][ T6449] team0: Port device team_slave_0 removed [ 170.477565][ T6449] team0: Port device team_slave_1 removed [ 170.492451][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.511543][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.533957][ T6450] team0: Mode changed to "activebackup" [ 170.679093][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 170.756690][ T6467] device syzkaller0 entered promiscuous mode [ 170.787493][ T6467] tipc: Started in network mode [ 170.794362][ T6467] tipc: Node identity ba83de48384a, cluster identity 4711 [ 170.806922][ T6467] tipc: Enabled bearer , priority 0 [ 170.817150][ T6466] tipc: Resetting bearer [ 170.823575][ T6464] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.826617][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 170.855088][ T6464] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.913415][ T6466] tipc: Disabling bearer [ 170.999588][ T7] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 171.021331][ T7] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 171.069910][ T7] usb 2-1: Product: syz [ 171.098953][ T7] usb 2-1: Manufacturer: syz [ 171.116930][ T7] usb 2-1: SerialNumber: syz [ 171.134703][ T7] usb 2-1: config 0 descriptor?? [ 171.149433][ T6481] bridge: RTM_DELNEIGH with unconfigured vlan 5 on bridge_slave_1 [ 171.208658][ T6481] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 171.229157][ T6481] netlink: 244 bytes leftover after parsing attributes in process `syz.0.665'. [ 171.279221][ T7] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 171.408150][ T6495] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.497377][ T6501] netlink: 'syz.3.671': attribute type 153 has an invalid length. [ 171.836869][ T7] usb 2-1: USB disconnect, device number 11 [ 171.843157][ T154] usb 2-1: Failed to submit usb control message: -71 [ 171.854779][ T154] usb 2-1: unable to send the bmi data to the device: -71 [ 171.874271][ T154] usb 2-1: unable to get target info from device [ 171.885299][ T154] usb 2-1: could not get target info (-71) [ 171.894275][ T154] usb 2-1: could not probe fw (-71) [ 172.001797][ T4252] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 172.072670][ T6515] device syzkaller0 entered promiscuous mode [ 172.107577][ T6515] tipc: Enabled bearer , priority 0 [ 172.180186][ T6514] tipc: Resetting bearer [ 172.239485][ T4252] usb 1-1: device descriptor read/64, error -71 [ 172.272630][ T6514] tipc: Disabling bearer [ 172.534814][ T4252] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 172.759083][ T4252] usb 1-1: device descriptor read/64, error -71 [ 172.808156][ T6534] bridge_slave_1: default FDB implementation only supports local addresses [ 172.879356][ T4252] usb usb1-port1: attempt power cycle [ 172.968759][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.687'. [ 173.136109][ T6546] device syzkaller0 entered promiscuous mode [ 173.176230][ T6553] device syzkaller0 entered promiscuous mode [ 173.198669][ T6555] netlink: 'syz.1.690': attribute type 153 has an invalid length. [ 173.221802][ T6551] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.319094][ T4252] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 173.391133][ T6553] tipc: Enabled bearer , priority 0 [ 173.406073][ T6552] tipc: Resetting bearer [ 173.449493][ T4252] usb 1-1: device descriptor read/8, error -71 [ 173.513126][ T6552] tipc: Disabling bearer [ 173.744910][ T4252] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 173.859373][ T4252] usb 1-1: device descriptor read/8, error -71 [ 173.989501][ T4252] usb usb1-port1: unable to enumerate USB device [ 174.077022][ T6568] tipc: New replicast peer: 172.20.20.187 [ 174.119564][ T6568] tipc: Enabled bearer , priority 10 [ 174.341406][ T6575] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 174.349314][ T6575] netlink: 'syz.3.696': attribute type 2 has an invalid length. [ 174.529851][ T6585] bridge: RTM_DELNEIGH with unconfigured vlan 5 on bridge_slave_1 [ 174.571495][ T6588] device syzkaller0 entered promiscuous mode [ 174.780312][ T6595] device syzkaller0 entered promiscuous mode [ 174.821471][ T6595] tipc: Enabled bearer , priority 0 [ 175.044943][ T6597] device syzkaller0 entered promiscuous mode [ 175.129880][ T6594] tipc: Resetting bearer [ 175.187851][ T6594] tipc: Disabling bearer [ 175.213873][ T6605] netlink: 'syz.0.704': attribute type 153 has an invalid length. [ 175.243000][ T6601] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.325466][ T4174] tipc: Node number set to 1514511746 [ 176.268664][ T6639] bridge: RTM_DELNEIGH with unconfigured vlan 5 on bridge_slave_1 [ 177.099240][ T4174] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 177.148170][ T6649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.715'. [ 177.479229][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.508470][ T4174] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 177.561164][ T6654] smc: removing ib device sys [ 177.709430][ T4174] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 177.739170][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.747265][ T4174] usb 5-1: Product: syz [ 177.822874][ T4174] usb 5-1: Manufacturer: syz [ 177.843188][ T4174] usb 5-1: SerialNumber: syz [ 178.234014][ T4174] usb 5-1: USB disconnect, device number 19 [ 178.954022][ T4279] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.259078][ T4279] usb 3-1: Using ep0 maxpacket: 32 [ 179.305600][ T6660] device syzkaller0 entered promiscuous mode [ 179.379919][ T4279] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 179.609387][ T4279] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 179.640301][ T4279] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 179.648523][ T4279] usb 3-1: Product: syz [ 179.663161][ T4279] usb 3-1: Manufacturer: syz [ 179.669235][ T4279] usb 3-1: SerialNumber: syz [ 179.690335][ T4279] usb 3-1: config 0 descriptor?? [ 179.700861][ T6666] netlink: 'syz.4.723': attribute type 3 has an invalid length. [ 179.777660][ T4279] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 180.218285][ T6684] tipc: Can't bind to reserved service type 2 [ 180.672986][ T6697] netlink: 'syz.4.731': attribute type 10 has an invalid length. [ 180.780966][ T6697] team0: Port device dummy0 added [ 180.889410][ T4242] usb 3-1: Failed to submit usb control message: -110 [ 180.896683][ T4242] usb 3-1: unable to send the bmi data to the device: -110 [ 180.912764][ T6697] syz.4.731 (6697) used greatest stack depth: 19760 bytes left [ 180.939666][ T4242] usb 3-1: unable to get target info from device [ 180.946063][ T4242] usb 3-1: could not get target info (-110) [ 181.010713][ T4242] usb 3-1: could not probe fw (-110) [ 181.253196][ T6704] device syzkaller0 entered promiscuous mode [ 181.649883][ T4252] usb 3-1: USB disconnect, device number 7 [ 182.236963][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.342619][ T6745] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.396344][ T6747] device syzkaller0 entered promiscuous mode [ 182.433253][ T6747] tipc: Enabled bearer , priority 0 [ 182.456493][ T6746] tipc: Resetting bearer [ 182.523573][ T6746] tipc: Disabling bearer [ 183.087347][ T6785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.759'. [ 183.525316][ T6797] device syzkaller0 entered promiscuous mode [ 183.555575][ T6797] tipc: Enabled bearer , priority 0 [ 183.594094][ T6795] tipc: Resetting bearer [ 183.627701][ T6795] tipc: Disabling bearer [ 183.757911][ T6803] Illegal XDP return value 4294967274, expect packet loss! [ 184.483114][ T6833] device syzkaller0 entered promiscuous mode [ 184.508126][ T6833] tipc: Enabled bearer , priority 0 [ 184.534983][ T6831] tipc: Resetting bearer [ 184.549271][ T4252] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 184.600399][ T6831] tipc: Disabling bearer [ 184.959520][ T4252] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.149141][ T4252] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 185.165678][ T4252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.187065][ T4252] usb 4-1: Product: syz [ 185.196200][ T4252] usb 4-1: Manufacturer: syz [ 185.214680][ T4252] usb 4-1: SerialNumber: syz [ 185.522504][ T4279] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.609431][ T4252] usb 4-1: unit 0 not found! [ 185.643446][ T4252] usb 4-1: USB disconnect, device number 11 [ 185.664630][ T4186] udevd[4186]: setting owner of /dev/bus/usb/004/011 to uid=0, gid=0 failed: No such file or directory [ 185.779293][ T4279] usb 5-1: Using ep0 maxpacket: 16 [ 185.819764][ T4279] usb 5-1: no configurations [ 185.831601][ T4279] usb 5-1: can't read configurations, error -22 [ 185.879903][ T4186] udevd[4186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.909791][ T4249] Bluetooth: hci1: command 0x0406 tx timeout [ 185.919111][ T4249] Bluetooth: hci0: command 0x0406 tx timeout [ 185.949147][ T4249] Bluetooth: hci2: command 0x0406 tx timeout [ 185.962400][ T4249] Bluetooth: hci3: command 0x0406 tx timeout [ 185.969623][ T4249] Bluetooth: hci4: command 0x0406 tx timeout [ 185.999194][ T4279] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.136362][ T6875] device netdevsim0 left promiscuous mode [ 186.151662][ T6875] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.227465][ T6877] device syzkaller0 entered promiscuous mode [ 186.242322][ T6877] tipc: Enabled bearer , priority 0 [ 186.256822][ T6876] tipc: Resetting bearer [ 186.285010][ T4279] usb 5-1: Using ep0 maxpacket: 16 [ 186.296988][ T6876] tipc: Disabling bearer [ 186.354500][ T4279] usb 5-1: no configurations [ 186.359182][ T4279] usb 5-1: can't read configurations, error -22 [ 186.366855][ T4279] usb usb5-port1: attempt power cycle [ 186.470648][ T6892] ip_tables: iptables: counters copy to user failed while replacing table [ 186.767729][ T6912] device syzkaller0 entered promiscuous mode [ 186.794903][ T6912] tipc: Enabled bearer , priority 0 [ 186.809129][ T4279] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 186.820032][ T6910] tipc: Resetting bearer [ 186.852003][ T6910] tipc: Disabling bearer [ 186.909545][ T4279] usb 5-1: Using ep0 maxpacket: 16 [ 186.968081][ T4279] usb 5-1: no configurations [ 186.972894][ T4279] usb 5-1: can't read configurations, error -22 [ 187.139171][ T4279] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 187.259308][ T4279] usb 5-1: Using ep0 maxpacket: 16 [ 187.299353][ T4279] usb 5-1: no configurations [ 187.304506][ T4279] usb 5-1: can't read configurations, error -22 [ 187.317872][ T4279] usb usb5-port1: unable to enumerate USB device [ 187.728555][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 187.886830][ T6940] device syzkaller0 entered promiscuous mode [ 187.933799][ T6940] tipc: Enabled bearer , priority 0 [ 187.959938][ T6939] tipc: Resetting bearer [ 188.018802][ T6939] tipc: Disabling bearer [ 188.812435][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 189.098981][ C1] hrtimer: interrupt took 59542 ns [ 189.415566][ T6988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'. [ 191.299893][ T21] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 191.549137][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 191.669300][ T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.689939][ T21] usb 3-1: config 0 has no interface number 0 [ 191.696162][ T21] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.754448][ T21] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.793743][ T21] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.820730][ T21] usb 3-1: config 0 interface 1 has no altsetting 0 [ 191.827586][ T21] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 191.837203][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.849313][ T21] usb 3-1: config 0 descriptor?? [ 191.875541][ T7077] device gre1 entered promiscuous mode [ 191.892528][ T21] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 192.332767][ T21] elan 0003:04F3:074D.0003: failed to start in urb: -90 [ 192.416108][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 192.446575][ T7107] device syzkaller0 entered promiscuous mode [ 192.779151][ T21] elan 0003:04F3:074D.0003: Get report error for parm 6: 0 [ 192.912265][ T7021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.936075][ T7011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.959893][ T7011] [ 192.962263][ T7011] ====================================================== [ 192.969307][ T7011] WARNING: possible circular locking dependency detected [ 192.976351][ T7011] syzkaller #0 Not tainted [ 192.980824][ T7011] ------------------------------------------------------ [ 192.987864][ T7011] syz.4.836/7011 is trying to acquire lock: [ 192.993773][ T7011] ffffffff8d963e08 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 193.002583][ T7011] [ 193.002583][ T7011] but task is already holding lock: [ 193.009973][ T7011] ffff888061334350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 193.019338][ T7011] [ 193.019338][ T7011] which lock already depends on the new lock. [ 193.019338][ T7011] [ 193.029787][ T7011] [ 193.029787][ T7011] the existing dependency chain (in reverse order) is: [ 193.038842][ T7011] [ 193.038842][ T7011] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 193.046542][ T7011] __mutex_lock_common+0x1e5/0x2400 [ 193.052303][ T7011] mutex_lock_nested+0x17/0x20 [ 193.057627][ T7011] nci_start_poll+0x8de/0xd10 [ 193.062867][ T7011] nfc_start_poll+0x141/0x2c0 [ 193.068108][ T7011] nfc_genl_start_poll+0x1d7/0x340 [ 193.073823][ T7011] genl_rcv_msg+0xd0b/0xfa0 [ 193.078919][ T7011] netlink_rcv_skb+0x1e9/0x430 [ 193.084241][ T7011] genl_rcv+0x24/0x40 [ 193.088798][ T7011] netlink_unicast+0x78f/0x940 [ 193.094129][ T7011] netlink_sendmsg+0x8ba/0xbe0 [ 193.099459][ T7011] ____sys_sendmsg+0x5be/0x8f0 [ 193.104787][ T7011] ___sys_sendmsg+0x236/0x2e0 [ 193.110062][ T7011] __se_sys_sendmsg+0x1b7/0x2a0 [ 193.115474][ T7011] do_syscall_64+0x4c/0xa0 [ 193.120458][ T7011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.126917][ T7011] [ 193.126917][ T7011] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 193.135644][ T7011] __mutex_lock_common+0x1e5/0x2400 [ 193.141409][ T7011] mutex_lock_nested+0x17/0x20 [ 193.146739][ T7011] nfc_urelease_event_work+0x120/0x310 [ 193.152760][ T7011] process_one_work+0x867/0xff0 [ 193.158177][ T7011] worker_thread+0xad7/0x12a0 [ 193.163420][ T7011] kthread+0x42e/0x520 [ 193.168062][ T7011] ret_from_fork+0x1f/0x30 [ 193.173041][ T7011] [ 193.173041][ T7011] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 193.180910][ T7011] __mutex_lock_common+0x1e5/0x2400 [ 193.186675][ T7011] mutex_lock_nested+0x17/0x20 [ 193.192035][ T7011] nfc_register_device+0x38/0x300 [ 193.198053][ T7011] nci_register_device+0x89f/0x9f0 [ 193.203711][ T7011] virtual_ncidev_open+0x55/0xc0 [ 193.209221][ T7011] misc_open+0x31f/0x390 [ 193.214012][ T7011] chrdev_open+0x585/0x5f0 [ 193.219064][ T7011] do_dentry_open+0x7f7/0xf90 [ 193.224284][ T7011] path_openat+0x2718/0x2fb0 [ 193.229427][ T7011] do_filp_open+0x1df/0x400 [ 193.234481][ T7011] do_sys_openat2+0x14b/0x500 [ 193.239704][ T7011] __x64_sys_openat+0x135/0x160 [ 193.245106][ T7011] do_syscall_64+0x4c/0xa0 [ 193.250107][ T7011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.256550][ T7011] [ 193.256550][ T7011] -> #0 (nci_mutex){+.+.}-{3:3}: [ 193.263694][ T7011] __lock_acquire+0x38f7/0x7d40 [ 193.269107][ T7011] lock_acquire+0x19f/0x400 [ 193.274162][ T7011] __mutex_lock_common+0x1e5/0x2400 [ 193.279904][ T7011] mutex_lock_nested+0x17/0x20 [ 193.285232][ T7011] virtual_nci_close+0x13/0x40 [ 193.290546][ T7011] nci_close_device+0x383/0x600 [ 193.295945][ T7011] nci_unregister_device+0x5e/0x250 [ 193.301695][ T7011] virtual_ncidev_close+0x55/0x90 [ 193.307276][ T7011] __fput+0x212/0x8c0 [ 193.311806][ T7011] task_work_run+0x125/0x1a0 [ 193.316941][ T7011] exit_to_user_mode_loop+0x10f/0x130 [ 193.322862][ T7011] exit_to_user_mode_prepare+0xee/0x180 [ 193.328950][ T7011] syscall_exit_to_user_mode+0x16/0x40 [ 193.334959][ T7011] do_syscall_64+0x58/0xa0 [ 193.339920][ T7011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.346377][ T7011] [ 193.346377][ T7011] other info that might help us debug this: [ 193.346377][ T7011] [ 193.357473][ T7011] Chain exists of: [ 193.357473][ T7011] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 193.357473][ T7011] [ 193.371075][ T7011] Possible unsafe locking scenario: [ 193.371075][ T7011] [ 193.378546][ T7011] CPU0 CPU1 [ 193.383934][ T7011] ---- ---- [ 193.389316][ T7011] lock(&ndev->req_lock); [ 193.393759][ T7011] lock(&genl_data->genl_data_mutex); [ 193.401757][ T7011] lock(&ndev->req_lock); [ 193.408718][ T7011] lock(nci_mutex); [ 193.412638][ T7011] [ 193.412638][ T7011] *** DEADLOCK *** [ 193.412638][ T7011] [ 193.420921][ T7011] 1 lock held by syz.4.836/7011: [ 193.425876][ T7011] #0: ffff888061334350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x102/0x600 [ 193.435648][ T7011] [ 193.435648][ T7011] stack backtrace: [ 193.441583][ T7011] CPU: 0 PID: 7011 Comm: syz.4.836 Not tainted syzkaller #0 [ 193.448886][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.459061][ T7011] Call Trace: [ 193.462361][ T7011] [ 193.465315][ T7011] dump_stack_lvl+0x188/0x250 [ 193.470016][ T7011] ? load_image+0x410/0x410 [ 193.474540][ T7011] ? show_regs_print_info+0x20/0x20 [ 193.479776][ T7011] ? print_circular_bug+0x12b/0x1a0 [ 193.484995][ T7011] check_noncircular+0x2f8/0x400 [ 193.489956][ T7011] ? print_deadlock_bug+0x5d0/0x5d0 [ 193.495172][ T7011] ? lockdep_lock+0xf1/0x1f0 [ 193.499790][ T7011] ? mark_lock+0x94/0x320 [ 193.504139][ T7011] ? _find_first_zero_bit+0xd1/0xf0 [ 193.509372][ T7011] __lock_acquire+0x38f7/0x7d40 [ 193.514262][ T7011] ? verify_lock_unused+0x140/0x140 [ 193.519489][ T7011] ? __schedule+0x11cb/0x4350 [ 193.524198][ T7011] ? vprintk_emit+0xc0/0x150 [ 193.528838][ T7011] ? read_lock_is_recursive+0x10/0x10 [ 193.534271][ T7011] lock_acquire+0x19f/0x400 [ 193.538805][ T7011] ? virtual_nci_close+0x13/0x40 [ 193.543874][ T7011] ? __might_sleep+0xf0/0xf0 [ 193.548487][ T7011] ? read_lock_is_recursive+0x10/0x10 [ 193.553888][ T7011] ? preempt_schedule_common+0xa5/0xd0 [ 193.559375][ T7011] ? preempt_schedule+0xbc/0xd0 [ 193.564252][ T7011] __mutex_lock_common+0x1e5/0x2400 [ 193.569481][ T7011] ? virtual_nci_close+0x13/0x40 [ 193.574470][ T7011] ? __irq_work_queue_local+0x12c/0x190 [ 193.580051][ T7011] ? irq_work_queue+0xb8/0x140 [ 193.584855][ T7011] ? __wake_up_klogd+0xd9/0x100 [ 193.589743][ T7011] ? virtual_nci_close+0x13/0x40 [ 193.594711][ T7011] ? mutex_lock_io_nested+0x60/0x60 [ 193.599936][ T7011] ? load_image+0x410/0x410 [ 193.604475][ T7011] mutex_lock_nested+0x17/0x20 [ 193.609287][ T7011] virtual_nci_close+0x13/0x40 [ 193.614086][ T7011] nci_close_device+0x383/0x600 [ 193.618992][ T7011] ? kfree+0xef/0x2a0 [ 193.623011][ T7011] ? nci_unregister_device+0x250/0x250 [ 193.628490][ T7011] ? kobject_put+0x41d/0x450 [ 193.633112][ T7011] nci_unregister_device+0x5e/0x250 [ 193.638334][ T7011] ? virtual_ncidev_open+0xc0/0xc0 [ 193.643478][ T7011] virtual_ncidev_close+0x55/0x90 [ 193.648561][ T7011] __fput+0x212/0x8c0 [ 193.652586][ T7011] task_work_run+0x125/0x1a0 [ 193.657205][ T7011] exit_to_user_mode_loop+0x10f/0x130 [ 193.662603][ T7011] exit_to_user_mode_prepare+0xee/0x180 [ 193.668186][ T7011] syscall_exit_to_user_mode+0x16/0x40 [ 193.673671][ T7011] do_syscall_64+0x58/0xa0 [ 193.678117][ T7011] ? clear_bhb_loop+0x30/0x80 [ 193.682817][ T7011] ? clear_bhb_loop+0x30/0x80 [ 193.687616][ T7011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.693545][ T7011] RIP: 0033:0x7f21604cb559 [ 193.697982][ T7011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.717622][ T7011] RSP: 002b:00007fff911a4198 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 193.726063][ T7011] RAX: 0000000000000000 RBX: 00007f2160753da0 RCX: 00007f21604cb559 [ 193.734057][ T7011] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 193.742049][ T7011] RBP: 00007f2160753da0 R08: 0000000000000006 R09: 0000000000000000 [ 193.750036][ T7011] R10: 00007f2160753cb0 R11: 0000000000000246 R12: 000000000002e8f8 [ 193.758053][ T7011] R13: 00007f216075218c R14: 000000000002e66e R15: 00007f2160752180 [ 193.766057][ T7011] [ 194.009148][ T21] elan 0003:04F3:074D.0003: Get report error for parm 7: 0 [ 194.071649][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.078001][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.449125][ T21] elan 0003:04F3:074D.0003: Get report error for parm 8: 0 [ 194.457464][ T21] input: Elan Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04F3:074D.0003/input/input10 [ 194.473781][ T21] input: HID 04f3:074d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04F3:074D.0003/input/input9 [ 194.488023][ T21] elan 0003:04F3:074D.0003: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 194.651250][ T7056] udc-core: couldn't find an available UDC or it's busy [ 194.658251][ T7056] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.679118][ T21] elan 0003:04F3:074D.0003: Failed to start multitouch: -71 [ 194.696383][ T21] elan: probe of 0003:04F3:074D.0003 failed with error -71 [ 194.714538][ T21] usb 3-1: USB disconnect, device number 8 [ 194.749725][ T7127] fido_id[7127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory