last executing test programs: 3m54.942836014s ago: executing program 3 (id=3490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, &(0x7f0000001100), 0x0, &(0x7f0000001140)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3m52.114644934s ago: executing program 3 (id=3500): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="300200007d00000005bf000000000000000005000000000000000000005a0200000000000000000b000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa583effeb09b5351f5bde05"], 0x230) 3m52.04031283s ago: executing program 3 (id=3501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000500000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff05"], 0x23c}}, 0x8000000) 3m52.039797809s ago: executing program 3 (id=3502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110, 0x2, 0x4}}, @ip_ttl={{0x14, 0x110, 0x2, 0x400}}], 0x30, 0x4c00}, 0x810) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) 3m48.523541494s ago: executing program 3 (id=3519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 3m47.892108798s ago: executing program 3 (id=3527): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000500)="107569185aa6a18558be87bda07bd6752937c3a16469dd608c378207093c63c054243a55e6a1e901800000000000000000b065c1122e4722d0159729bf11", 0x3e}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast2, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0xa0}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x10009}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0004000000000000000000000340000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 3m46.528446643s ago: executing program 32 (id=3527): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000500)="107569185aa6a18558be87bda07bd6752937c3a16469dd608c378207093c63c054243a55e6a1e901800000000000000000b065c1122e4722d0159729bf11", 0x3e}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast2, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0xa0}, {0x0, 0x4, 0x1, 0x0, 0x10000000000, 0x10009}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x0, 0x0, 0x2, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x400, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)={'#! ', './file0', [{0x20, '.^[,**-'}, {0x20, '#! '}, {0x20, 'cpu.stat\x00'}, {0x20, '$[(\xcd'}, {0x20, '/^^'}]}, 0x2a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0004000000000000000000000340000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_clone(0x8209311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 5.078376117s ago: executing program 5 (id=4769): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 4.278029378s ago: executing program 5 (id=4784): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x0, 0x148, 0x128, 0x148, 0x3d0, 0x240, 0x240, 0x3d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x9e4b, 0x1ff, 0x0, 0x0, 0xca, 0x7}, {0x4}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'pim6reg1\x00', 'veth1\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x44, 0x10, 0x6, 'snmp_trap\x00', {0xfffffffffffffffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 4.189981305s ago: executing program 5 (id=4785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10005}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0xff21, 0x11, 'vlan1\x00'}]}, 0x30}}, 0x8800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 3.867999343s ago: executing program 5 (id=4789): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x3}, 0xb) 2.521345121s ago: executing program 5 (id=4809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 1.964415125s ago: executing program 0 (id=4820): mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x20000}, 0x20) 1.8702933s ago: executing program 0 (id=4822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe}, {0xb, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 1.627360427s ago: executing program 0 (id=4824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"0f80fb6034df688c6388a9e085310fbb314f62cab9b24b26ce8644cf029cf464c4a8480b610546fe0bb90bae17c2d7ad7ded6bb82d9c3fd4e94dc645fac380ba970ee4265c10511d6a2e12e378475e7d0cd5ea14acc9e50095d32667cbba0d25356621f826a677ab8adb260c7bcc885a83b736829023a83f5b7a260ffa563f4d96cfe8683d8ccd01a99f05e3139abe075563dc428136ce258a5a822d0995ee72cae132f7fe263a3b926f99ae582ae5c4f9e0e4ffc6d79e5fc9ba6e47e015c46e32c0927b91134d7f6765d919ef5503c57a3e0f9a95732ed15ebff9f30e327ba09d91685f0b2b9887013b7a164e83c633f34f9f2a0541c82c56f2c2b0d258b4bb520311c78d8cbf8cb39bcce288e488084ad0c44e646c82a00954e2a04630ec63485f68d518f3f57859d19e6b63b1138663b0634bb75eb1ecf0b661d909d5d18d93f180b0e0e2d1b7881ea7a67381762540f7b5b29fd61a51942377730d1aace459126f6b9e3fc86c0c90c55316e73d5da4e4b872a361be3e7227dcec0aebf1a3729622fdbf64576e4225366a9a27efbdef31fe063196b656240cd206fc7ce72bdb22def4bf38d1719c0abbba220f4dd8197e4e723a587cc2152b5aa9559cc893f87cdbb8f06ea418be563a7dcc922e1a96e6bacc191bf8032c13937baa898bc2cde3b815eb74a169f24524e609c538485f79376a5803aa84a68973c8add5b0d5c96c26dc641d8abcd1c524663b61a2d8ff9322d58d627b376e5978ee097d947cb45db1130790dfd6742a29c9c3635708a669487f1511a0d3c9706a48554028ad9d490fc3bfddb2c62b57972c966086f67e5ff070e236890335e573d19f295486a63c57e99207637dda3e04fca51cd6dd34bbdd291dea6696f35160c8ef0b4b0106edef1978e95fcaf77dd5f4aee1986f90de4e4f99ff3841bb086b312e1be187cbd4585a1783b3208536ef4a4d5afaf400c6368bbea4386644c37187752f35823e3b767518b203069e3b38d676ddf74c4a2eff6cdc99ad0093e46535d30cdfc5ea7e4ef759e61ca1a232f7a7156991e026a925394bb9992bc374722e7bf838032992713691933e3cf34038ccf39399aab6ae6bedb3027c54763f0c057bffd0d498910fb3e9dae2e39c477268430c420ebac3f7478736613d956e1d37fc3e04f49a0fc853abae98a10f4487b9cc1c731bfc3c741405870a09b9ee0769854a1cd9fa8f277efca1c33c9e01c8fcb627329e576a8abc5615a76dd1bcde4a2d92801f3d9c91f61c1263bf6891bdc3790291afb16938a77829d550805956deca806f2b61108e2f316bb7c15f63afdfb2a540227e8086f73131d54844fcaafd65fa3f53066f31d5ca861145f70a16886fb28dda67f7ad19d6d7f0762e7b2842c1688169e26d2cbfd03307f025c94fff5cc3c9cff6e9857f8d0f3d41ae7438f324fc946c"}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.506280705s ago: executing program 4 (id=4826): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) sendto(r0, &(0x7f0000000340)="77207e4f483298c9eab55889e36b70be0dd7bb5d2380059aacd93bde6599deec4f6c6e3838926c241a18dd3bf79561f5af18898601bdcd9d9bf3f743a9e241efb6a82d79f71f97b7c7e0eca49477507bae88f0694c804c1bb46f314be80d8c8a36883f94afa45be33be20fa2db91236ed3a20b6f64691b91c9f4f37b88cc1ea7e878a94f863bcec1abd7070cc3b3e1ce1b214009e6849dbaad22a7b95636836581e03f14723589a81963d2c832313afd6556292d8c12dc2c757c0292f24df48faabc5f46f2a306f9ed8a7f79e9a6cc10537963a6cbd52e0a170c", 0xda, 0x2000001, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.371357554s ago: executing program 4 (id=4829): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r0, 0x4}, &(0x7f0000000180)=0x8) 1.31611127s ago: executing program 2 (id=4830): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semget$private(0x0, 0x7, 0x195) 1.231542342s ago: executing program 4 (id=4831): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) r0 = userfaultfd(0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca}, 0x38) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x0, 0x2, 0x10000}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) close_range(r0, 0xffffffffffffffff, 0x0) 1.069894931s ago: executing program 1 (id=4832): r0 = getpid() unshare(0x2c020400) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x20000}, 0x20) 1.004420041s ago: executing program 2 (id=4833): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x40000002, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 909.088798ms ago: executing program 1 (id=4834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) 907.028557ms ago: executing program 2 (id=4835): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10) 755.858237ms ago: executing program 2 (id=4836): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0xa}, 0x8}], 0x1, 0x0, 0x0) 696.248066ms ago: executing program 1 (id=4837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000440)={{}, "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x7, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103e, 0x200000000006, 0x0, 0xe2, 0x1, 0x1, 0x1, 0x4000000000a, 0x8000000800005, 0x800000068], 0x8080000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 630.036604ms ago: executing program 5 (id=4838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) shutdown(r0, 0x1) 596.873127ms ago: executing program 2 (id=4839): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) sendto(r0, &(0x7f0000000340)="77207e4f483298c9eab55889e36b70be0dd7bb5d2380059aacd93bde6599deec4f6c6e3838926c241a18dd3bf79561f5af18898601bdcd9d9bf3f743a9e241efb6a82d79f71f97b7c7e0eca49477507bae88f0694c804c1bb46f314be80d8c8a36883f94afa45be33be20fa2db91236ed3a20b6f64691b91c9f4f37b88cc1ea7e878a94f863bcec1abd7070cc3b3e1ce1b214009e6849dbaad22a7b95636836581e03f14723589a81963d2c832313afd6556292d8c12dc2c757c0292f24df48faabc5f46f2a306f9ed8a7f79e9a6cc10537963a6cbd52e0a170c", 0xda, 0x2000001, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 456.365135ms ago: executing program 2 (id=4840): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffb, 0x3, 0x4, 0x82}, &(0x7f0000000500)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, 0x0, 0x0, 0x40002120, 0x0, 0x0) io_uring_enter(r0, 0x5125, 0xf6d7, 0x3, 0x0, 0x0) 434.071782ms ago: executing program 1 (id=4841): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r0, 0x4}, &(0x7f0000000180)=0x8) 364.237171ms ago: executing program 0 (id=4842): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) timerfd_create(0x1, 0x0) 310.526017ms ago: executing program 4 (id=4843): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 208.385047ms ago: executing program 0 (id=4844): r0 = getpid() unshare(0x2c020400) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x20000}, 0x20) 208.093577ms ago: executing program 1 (id=4845): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x205, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) 196.150672ms ago: executing program 4 (id=4846): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x18, &(0x7f0000000040)="020000000980ffff", 0x8) 52.147887ms ago: executing program 0 (id=4847): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c12f182520) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r2 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r2}) ftruncate(0xffffffffffffffff, 0xc17a) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x1406}, 0xb) 193.541µs ago: executing program 4 (id=4848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x4, 0xc9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010865}, 0x4008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @random="98c8ca7122df"}, 0x14) 0s ago: executing program 1 (id=4849): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/10, 0xa}, 0x8}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): audit(1761290660.031:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.553171][ T30] audit: type=1326 audit(1761290660.031:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.613901][ T30] audit: type=1326 audit(1761290660.031:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.636594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.645099][ T30] audit: type=1326 audit(1761290660.031:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.667492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.688484][ T30] audit: type=1326 audit(1761290660.031:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.713372][ T30] audit: type=1326 audit(1761290660.031:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.735671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.745790][ T30] audit: type=1326 audit(1761290660.031:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1015.768193][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.833985][ T30] audit: type=1326 audit(1761290660.031:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20836 comm="syz.1.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1016.585561][T20857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1016.608356][T20857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1017.223873][ T5914] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1017.419374][T20876] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1017.516316][ T5914] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1017.525844][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.546047][ T5914] usb 2-1: Product: syz [ 1017.563301][ T5914] usb 2-1: Manufacturer: syz [ 1017.570229][ T5914] usb 2-1: SerialNumber: syz [ 1018.465324][T20889] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1019.719415][T20900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.748973][ T5914] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1019.780598][T20900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.809798][ T5914] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1019.834799][ T5914] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1019.894033][T20904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1019.903216][T20904] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1019.912560][T20904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1019.921670][T20904] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1019.934149][ T5914] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1020.014271][T20906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4107'. [ 1020.060237][ T5914] usb 2-1: USB disconnect, device number 117 [ 1020.207278][T20913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1020.217467][T20913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1020.242185][T20913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1020.251241][T20913] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1021.787834][T20955] vlan3: entered promiscuous mode [ 1021.795029][T20955] batadv0: entered promiscuous mode [ 1023.306418][T20984] bridge1: left promiscuous mode [ 1024.005036][ T43] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1024.242052][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1024.274825][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1024.283089][ T43] usb 3-1: config 0 has no interface number 0 [ 1024.289179][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1024.542359][ T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 49995, setting to 1024 [ 1024.635286][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1025.007558][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.133742][ T43] usb 3-1: config 0 descriptor?? [ 1025.182102][ T43] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1025.360633][ T5926] usb 3-1: USB disconnect, device number 109 [ 1026.025441][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1026.110452][T21025] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1026.130743][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1026.142147][T21025] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4141'. [ 1026.790702][T21047] netlink: 'syz.5.4145': attribute type 4 has an invalid length. [ 1026.878085][T21051] netlink: 'syz.5.4145': attribute type 4 has an invalid length. [ 1027.158890][T21052] vcan1: entered promiscuous mode [ 1027.166776][T21052] team0: Device vcan1 is of different type [ 1027.174959][T21056] netlink: 'syz.1.4147': attribute type 10 has an invalid length. [ 1027.414566][T21056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.430318][T21056] bond0: entered promiscuous mode [ 1027.442175][T21056] bond_slave_0: entered promiscuous mode [ 1027.469445][T21056] bond_slave_1: entered promiscuous mode [ 1027.492208][T21056] team0: Port device bond0 added [ 1029.102022][ T1209] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1029.406331][T21096] fuse: Bad value for 'group_id' [ 1029.411446][T21096] fuse: Bad value for 'group_id' [ 1029.422109][ T1209] usb 6-1: Using ep0 maxpacket: 32 [ 1029.445392][ T1209] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.564925][ T1209] usb 6-1: config 0 has no interfaces? [ 1029.575957][ T1209] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1029.588789][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.957724][ T1209] usb 6-1: config 0 descriptor?? [ 1030.070262][T21107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1030.174871][T21107] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1030.187023][T21107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1030.198550][T21107] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4164'. [ 1030.210759][T21084] nfs: Unknown parameter ' ' [ 1030.389493][T21112] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1030.442912][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1030.636615][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1030.636632][ T30] audit: type=1326 audit(1761290675.131:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1030.763205][ T30] audit: type=1326 audit(1761290675.141:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1030.772077][ T5926] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1030.865262][ T30] audit: type=1326 audit(1761290675.141:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1030.941909][ T30] audit: type=1326 audit(1761290675.141:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1031.056435][ T30] audit: type=1326 audit(1761290675.261:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1031.099884][ T30] audit: type=1326 audit(1761290675.261:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1031.165792][T21108] delete_channel: no stack [ 1031.183425][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1031.209943][ T5926] usb 3-1: config 0 has an invalid interface number: 212 but max is 0 [ 1031.225770][ T30] audit: type=1326 audit(1761290675.261:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1031.228802][ T5926] usb 3-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 1031.310855][ T30] audit: type=1326 audit(1761290675.261:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f066d38efc9 code=0x7ffc0000 [ 1031.335543][ T30] audit: type=1326 audit(1761290675.261:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f066d32b099 code=0x7ffc0000 [ 1031.379134][ T30] audit: type=1326 audit(1761290675.261:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21117 comm="syz.1.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f066d32b099 code=0x7ffc0000 [ 1031.401514][ T5926] usb 3-1: config 0 has no interface number 0 [ 1031.401551][ T5926] usb 3-1: too many endpoints for config 0 interface 212 altsetting 7: 117, using maximum allowed: 30 [ 1031.401588][ T5926] usb 3-1: config 0 interface 212 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 117 [ 1031.401613][ T5926] usb 3-1: config 0 interface 212 has no altsetting 0 [ 1031.401648][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1031.401668][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.412597][ T5926] usb 3-1: config 0 descriptor?? [ 1031.622508][ T5914] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 1031.775934][T21112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.805000][ T1209] usb 6-1: USB disconnect, device number 13 [ 1031.817917][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1031.827619][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.834126][T21134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4172'. [ 1031.847155][ T5914] usb 2-1: Product: syz [ 1031.851329][ T5914] usb 2-1: Manufacturer: syz [ 1031.865004][ T5914] usb 2-1: SerialNumber: syz [ 1031.883965][ T5914] usb 2-1: config 0 descriptor?? [ 1031.889321][T21112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.916632][ T5836] Bluetooth: hci5: Unknown advertising packet type: 0x35 [ 1031.916688][ T5836] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1031.950467][ T5926] usb 3-1: string descriptor 0 read error: -71 [ 1031.968147][ T5926] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1031.981356][ T5926] gspca_vc032x: reg_r err -71 [ 1031.987515][ T5926] vc032x 3-1:0.212: probe with driver vc032x failed with error -71 [ 1032.002452][ T5926] usb 3-1: USB disconnect, device number 110 [ 1032.101189][ T5914] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1032.111404][T21141] vlan3: entered promiscuous mode [ 1032.116553][T21141] batadv0: entered promiscuous mode [ 1032.452147][ T1209] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1032.647152][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.688913][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.730909][ T1209] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1032.794656][ T1209] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1032.838557][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.887904][ T1209] usb 6-1: config 0 descriptor?? [ 1033.115997][T21144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.134875][T21144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.365451][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1034.725710][ T5914] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1034.738455][ T5914] usb 2-1: USB disconnect, device number 118 [ 1035.779385][ T1209] usbhid 6-1:0.0: can't add hid device: -71 [ 1035.807832][ T1209] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1035.900161][ T1209] usb 6-1: USB disconnect, device number 14 [ 1036.282342][ T5914] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1036.373842][T21203] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1036.452005][ T5914] usb 3-1: device descriptor read/64, error -71 [ 1036.732733][ T5914] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1036.891404][ T5914] usb 3-1: device descriptor read/64, error -71 [ 1037.042182][ T5914] usb usb3-port1: attempt power cycle [ 1037.169998][T21214] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1037.199529][T21214] team0: Port device batadv2 added [ 1037.432043][ T5914] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1037.452994][ T5914] usb 3-1: device descriptor read/8, error -71 [ 1038.083134][ T5914] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1038.151582][ T5914] usb 3-1: device descriptor read/8, error -71 [ 1038.272457][ T5914] usb usb3-port1: unable to enumerate USB device [ 1039.272952][T21244] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1039.453281][T16659] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1039.615513][T16659] usb 5-1: config 0 has no interfaces? [ 1039.624526][T16659] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1039.634793][T16659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.676097][T16659] usb 5-1: Product: syz [ 1039.733501][T16659] usb 5-1: Manufacturer: syz [ 1039.738294][T16659] usb 5-1: SerialNumber: syz [ 1039.782067][ T5900] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1039.783003][T16659] usb 5-1: config 0 descriptor?? [ 1040.027916][ T5900] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.058600][T21252] tipc: Enabling of bearer rejected, already enabled [ 1040.066133][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1040.090439][ T5900] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1040.102330][T21243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.110206][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.111102][T21243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.150302][ T5900] usb 2-1: config 0 descriptor?? [ 1040.186327][T21243] vlan3: entered promiscuous mode [ 1040.408793][ T1209] usb 5-1: USB disconnect, device number 99 [ 1040.624531][ T5900] aquacomputer_d5next 0003:0C70:F014.0021: unknown main item tag 0x0 [ 1040.635984][ T5900] aquacomputer_d5next 0003:0C70:F014.0021: unknown main item tag 0x0 [ 1040.655625][ T5900] aquacomputer_d5next 0003:0C70:F014.0021: unknown main item tag 0x0 [ 1040.683717][ T5900] aquacomputer_d5next 0003:0C70:F014.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 1040.894266][T21249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.953168][T21249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.995144][ T43] usb 2-1: USB disconnect, device number 119 [ 1041.139749][T21265] fido_id[21265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1041.235925][T21281] netlink: 'syz.5.4210': attribute type 3 has an invalid length. [ 1041.612146][T16659] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1041.720036][T21287] FAULT_INJECTION: forcing a failure. [ 1041.720036][T21287] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.736611][T21287] CPU: 1 UID: 0 PID: 21287 Comm: syz.1.4214 Not tainted syzkaller #0 PREEMPT(full) [ 1041.736634][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1041.736652][T21287] Call Trace: [ 1041.736660][T21287] [ 1041.736669][T21287] dump_stack_lvl+0x189/0x250 [ 1041.736698][T21287] ? __pfx____ratelimit+0x10/0x10 [ 1041.736721][T21287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1041.736745][T21287] ? __pfx__printk+0x10/0x10 [ 1041.736770][T21287] ? __pfx___might_resched+0x10/0x10 [ 1041.736789][T21287] ? fs_reclaim_acquire+0x7d/0x100 [ 1041.736820][T21287] should_fail_ex+0x414/0x560 [ 1041.736851][T21287] should_failslab+0xa8/0x100 [ 1041.736872][T21287] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1041.736897][T21287] ? __alloc_skb+0x112/0x2d0 [ 1041.736920][T21287] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 1041.736949][T21287] __alloc_skb+0x112/0x2d0 [ 1041.736978][T21287] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1041.737009][T21287] rtmsg_ifinfo+0x8c/0x1a0 [ 1041.737038][T21287] netif_state_change+0x29e/0x3a0 [ 1041.737064][T21287] ? __pfx_netif_state_change+0x10/0x10 [ 1041.737089][T21287] ? __dev_change_flags+0x4cc/0x6d0 [ 1041.737117][T21287] set_operstate+0x2cc/0x3a0 [ 1041.737139][T21287] ? __pfx_netif_state_change+0x10/0x10 [ 1041.737162][T21287] ? __pfx_set_operstate+0x10/0x10 [ 1041.737187][T21287] ? netif_change_flags+0xe8/0x1a0 [ 1041.737210][T21287] do_setlink+0x12bc/0x41c0 [ 1041.737232][T21287] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1041.737267][T21287] ? __pfx_do_setlink+0x10/0x10 [ 1041.737285][T21287] ? stack_trace_save+0x9c/0xe0 [ 1041.737307][T21287] ? __pfx_stack_trace_save+0x10/0x10 [ 1041.737340][T21287] ? __lock_acquire+0xab9/0xd20 [ 1041.737366][T21287] ? __mutex_trylock_common+0x153/0x260 [ 1041.737392][T21287] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1041.737419][T21287] ? rcu_is_watching+0x15/0xb0 [ 1041.737440][T21287] ? trace_contention_end+0x39/0x120 [ 1041.737462][T21287] ? __mutex_lock+0x335/0x1350 [ 1041.737498][T21287] ? rtnl_newlink+0x8e9/0x1c80 [ 1041.737526][T21287] ? __pfx___mutex_lock+0x10/0x10 [ 1041.737559][T21287] ? ns_capable+0x8a/0xf0 [ 1041.737580][T21287] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1041.737602][T21287] rtnl_newlink+0x14ad/0x1c80 [ 1041.737625][T21287] ? netlink_deliver_tap+0x19c/0x1b0 [ 1041.737670][T21287] ? __pfx_rtnl_newlink+0x10/0x10 [ 1041.737720][T21287] ? kasan_quarantine_put+0xdd/0x220 [ 1041.737743][T21287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1041.737772][T21287] ? nlmon_xmit+0xb0/0x100 [ 1041.737791][T21287] ? kmem_cache_free+0x19b/0x690 [ 1041.737825][T21287] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1041.737845][T21287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1041.737868][T21287] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1041.737887][T21287] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1041.737911][T21287] ? __dev_queue_xmit+0x27b/0x3b50 [ 1041.737931][T21287] ? __dev_queue_xmit+0x27b/0x3b50 [ 1041.737949][T21287] ? __dev_queue_xmit+0x27b/0x3b50 [ 1041.737970][T21287] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1041.737989][T21287] ? kasan_save_track+0x3e/0x80 [ 1041.738011][T21287] ? __kasan_slab_alloc+0x6c/0x80 [ 1041.738040][T21287] ? __lock_acquire+0xab9/0xd20 [ 1041.738084][T21287] ? __pfx_rtnl_newlink+0x10/0x10 [ 1041.738108][T21287] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1041.738137][T21287] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1041.738161][T21287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1041.738183][T21287] ? ref_tracker_free+0x63a/0x7d0 [ 1041.738202][T21287] ? __asan_memcpy+0x40/0x70 [ 1041.738224][T21287] ? __pfx_ref_tracker_free+0x10/0x10 [ 1041.738240][T21287] ? __skb_clone+0x63/0x7a0 [ 1041.738268][T21287] netlink_rcv_skb+0x208/0x470 [ 1041.738295][T21287] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1041.738320][T21287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1041.738357][T21287] ? netlink_deliver_tap+0x2e/0x1b0 [ 1041.738391][T21287] netlink_unicast+0x82f/0x9e0 [ 1041.738424][T21287] ? __pfx_netlink_unicast+0x10/0x10 [ 1041.738450][T21287] ? netlink_sendmsg+0x642/0xb30 [ 1041.738465][T21287] ? skb_put+0x11b/0x210 [ 1041.738486][T21287] netlink_sendmsg+0x805/0xb30 [ 1041.738513][T21287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.738543][T21287] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1041.738570][T21287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1041.738588][T21287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.738614][T21287] __sock_sendmsg+0x21c/0x270 [ 1041.738640][T21287] ____sys_sendmsg+0x505/0x830 [ 1041.738670][T21287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1041.738699][T21287] ? import_iovec+0x74/0xa0 [ 1041.738725][T21287] ___sys_sendmsg+0x21f/0x2a0 [ 1041.738746][T21287] ? __pfx____sys_sendmsg+0x10/0x10 [ 1041.738802][T21287] ? __fget_files+0x2a/0x420 [ 1041.738819][T21287] ? __fget_files+0x3a0/0x420 [ 1041.738848][T21287] __x64_sys_sendmsg+0x19b/0x260 [ 1041.738870][T21287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1041.738899][T21287] ? __pfx_ksys_write+0x10/0x10 [ 1041.738927][T21287] ? do_syscall_64+0xbe/0xfa0 [ 1041.738953][T21287] do_syscall_64+0xfa/0xfa0 [ 1041.738974][T21287] ? lockdep_hardirqs_on+0x9c/0x150 [ 1041.738995][T21287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.739014][T21287] ? clear_bhb_loop+0x60/0xb0 [ 1041.739036][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.739054][T21287] RIP: 0033:0x7f066d38efc9 [ 1041.739071][T21287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.739088][T21287] RSP: 002b:00007f066e13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.739109][T21287] RAX: ffffffffffffffda RBX: 00007f066d5e5fa0 RCX: 00007f066d38efc9 [ 1041.739124][T21287] RDX: 0000000020000880 RSI: 0000200000000140 RDI: 0000000000000007 [ 1041.739136][T21287] RBP: 00007f066e13f090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.739149][T21287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1041.739160][T21287] R13: 00007f066d5e6038 R14: 00007f066d5e5fa0 R15: 00007f066d70fa28 [ 1041.739192][T21287] [ 1041.740965][T21287] sit0: left promiscuous mode [ 1042.337633][T21287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.349084][T16659] usb 6-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 1042.358388][T16659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.366664][T16659] usb 6-1: Product: syz [ 1042.370834][T16659] usb 6-1: Manufacturer: syz [ 1042.375486][T16659] usb 6-1: SerialNumber: syz [ 1042.382089][T16659] usb 6-1: config 0 descriptor?? [ 1042.390474][T16659] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1042.401477][T21287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.593712][T21281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.602431][T21281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.623620][T16659] pwc: Failed to set LED on/off time (-71) [ 1042.645874][T16659] pwc: send_video_command error -71 [ 1042.651071][T16659] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1042.662062][T16659] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1042.691663][T16659] usb 6-1: USB disconnect, device number 15 [ 1042.824490][T21293] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1042.834704][T21293] batadv1: entered promiscuous mode [ 1042.840625][T21293] team0: Port device batadv1 added [ 1042.910092][T21297] IPv6: addrconf: prefix option has invalid lifetime [ 1043.492619][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4224'. [ 1043.600671][T21318] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1043.722135][ T1209] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1043.885265][ T1209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1043.901199][ T1209] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1043.911286][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.932700][ T1209] usb 6-1: Product: syz [ 1043.936869][ T1209] usb 6-1: Manufacturer: syz [ 1043.955847][ T1209] usb 6-1: SerialNumber: syz [ 1043.980686][ T1209] usb 6-1: config 0 descriptor?? [ 1044.000682][ T1209] hub 6-1:0.0: bad descriptor, ignoring hub [ 1044.014724][ T1209] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1044.072166][ T1209] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input55 [ 1044.150044][T21327] bond0: option arp_validate: invalid value (18446744073491644417) [ 1045.121908][T21350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.130676][T21350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.292028][T16659] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1045.452563][T16659] usb 5-1: Using ep0 maxpacket: 8 [ 1045.460686][T16659] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.471339][T16659] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1045.483221][T16659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1045.495880][T16659] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1045.511569][T21355] tipc: Enabling of bearer rejected, already enabled [ 1045.524928][T16659] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1045.537552][T16659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1045.545886][T16659] usb 5-1: Product: syz [ 1045.550155][T16659] usb 5-1: Manufacturer: syz [ 1045.555489][T16659] usb 5-1: SerialNumber: syz [ 1045.570102][T16659] usb 5-1: config 0 descriptor?? [ 1045.944380][T16659] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1045.952424][T16659] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1046.022224][T21366] netlink: 'syz.0.4239': attribute type 3 has an invalid length. [ 1046.086069][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1046.097013][T21364] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1046.116373][T21364] bond1 (unregistering): Released all slaves [ 1046.164421][T16659] radio-si470x 5-1:0.0: software version 55, hardware version 122 [ 1046.178249][T16659] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1046.366807][T16659] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1046.388140][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.394889][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.401487][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.408163][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.415123][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.421734][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.428354][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.434997][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.441633][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.448288][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.454945][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.461546][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.468173][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.474810][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.481410][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.488047][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.494770][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.501368][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.507987][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.514628][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.521227][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.527884][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.534631][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.541231][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.547871][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.554495][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.561101][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.567722][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.574601][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.581199][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.587822][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.594426][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.601016][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.607624][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.614231][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.620823][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.627432][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.634041][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.640650][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.647290][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.653946][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.660546][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.667178][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.673785][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.680386][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.686994][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.693606][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.700198][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.706834][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.713453][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.720048][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.726666][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.733317][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.739916][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.746547][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.753155][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.759744][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.766365][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.772960][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.779559][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.786160][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.792785][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.799393][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.806024][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.812834][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.819438][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.826084][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.832689][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.839286][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.845916][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.852512][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.859101][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.865699][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.872314][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.878905][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.885531][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.892201][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.898793][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.905403][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.912012][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.918610][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.925239][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.931831][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.938466][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.945090][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.951680][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.958279][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.964916][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.971506][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.978125][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.984770][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.991367][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1046.997973][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.004605][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.011208][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.017816][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.024425][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.031018][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.037633][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.044258][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.050854][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.057483][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.064100][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.070703][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.077313][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.083941][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.090536][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.097143][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.103769][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.110362][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.116968][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.123605][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.130194][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.136795][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.143414][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.150021][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.156681][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.163311][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.169910][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.176514][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.183137][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.189729][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.196326][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.202957][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.209580][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.216171][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.222820][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.229424][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.236010][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.242644][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.249231][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.255841][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.262476][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.269093][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.275727][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.282365][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.288971][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.295591][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.302221][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.308813][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.315423][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.322015][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.328607][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.335233][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.341826][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.348448][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.355070][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.363104][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.369706][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.376316][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.382948][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.389543][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.396162][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.402818][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.409419][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.416006][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.422606][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.429168][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.435726][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.442288][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.448834][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.455441][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.462015][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.468577][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.475143][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.481688][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.488257][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.494832][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.501379][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.507959][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.514611][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.521160][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.527716][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.534352][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.540903][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.547473][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.554022][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.560565][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.567147][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.573729][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.580282][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.586846][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.593395][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.599940][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.606509][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.613085][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.619632][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.626189][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.632803][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.639427][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.646028][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.652658][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.659336][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.665939][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.672539][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.679149][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.685772][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.692415][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.699057][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.705781][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.712897][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.719557][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.726341][T16659] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1047.734869][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.742078][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.748955][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.755930][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.763073][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.769871][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.776681][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.783281][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.789740][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.796231][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.802700][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.809147][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.815638][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.822111][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.828563][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.835112][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.841622][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.848132][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.854712][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.861157][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.867629][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.874111][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.880553][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.887118][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.893630][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.900096][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.906573][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.913093][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.919546][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.926022][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.932771][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.939221][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.945752][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.952318][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.958827][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.965309][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.971755][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.978240][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.984710][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.991162][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1047.997674][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.004138][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.010583][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.017073][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.023544][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.029991][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.036490][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.042968][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.049421][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.055887][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.062378][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.068833][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.075307][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.081779][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.088259][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.094770][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.101230][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.107732][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.114199][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.120657][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.127171][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.133674][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.140128][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.146591][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.153186][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.159687][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.166178][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.172694][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.179135][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.185625][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.192099][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.198544][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.205042][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.211483][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.217961][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.224423][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.230863][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.237341][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.243863][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.250317][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.256795][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.263264][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.269713][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.276188][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.282659][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.289098][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.295557][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.302038][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.308574][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.315138][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.321593][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.328074][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.334566][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.341004][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.347482][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.353966][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.360411][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.366871][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.373347][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.379788][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.386255][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.392721][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.399162][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.405633][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.412249][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.418696][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.425160][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.431611][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.438085][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.444535][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.450986][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.457469][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.463940][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.470385][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.476860][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.483331][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.489769][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.496493][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.502973][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.509419][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.515906][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.522369][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.528814][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.535299][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.541742][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.548222][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.554696][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.561165][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.567649][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.574565][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.581021][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.587491][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.593973][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.600430][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.606907][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.613379][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.619848][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.626341][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.632827][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.639273][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.645738][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.652351][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.658830][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.665326][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.671771][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.678246][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.684710][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.691150][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.697636][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.704108][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.710555][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.717037][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.723504][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.729966][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.736597][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.743089][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.749547][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.756025][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.762494][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.768943][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.775417][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.781873][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.788343][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.794812][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.801281][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.807750][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.814225][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.820677][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.827153][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.833632][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.840072][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.846533][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.853037][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.859490][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.865976][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.872462][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.878909][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.885372][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.891815][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.898398][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.904882][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.911326][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.917808][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.924283][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.930724][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.937212][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.943674][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.950121][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.956596][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.963059][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.969504][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.976001][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.982476][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.988918][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1048.995412][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.001859][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.008325][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.014803][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.021251][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.027732][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.034203][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.040647][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.047119][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.053596][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.060037][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.066523][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.073010][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.079451][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.085917][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.092426][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.098931][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.105708][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.112278][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.118783][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.125259][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.131712][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.138182][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.144660][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.151145][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.157670][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.164245][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.170771][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.177309][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.183812][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.190327][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.196901][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.204098][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.211105][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.220108][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.226983][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.233542][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.240127][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.247058][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.253622][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.260172][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.266741][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.273303][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.279853][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.286422][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.293006][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.299552][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.306116][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.312714][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.319257][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.325883][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.332451][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.338997][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.345552][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.352130][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.358678][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.365264][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.371811][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.378375][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.384938][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.391487][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.398044][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.404612][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.411158][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.417739][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.424321][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.430868][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.437434][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.443985][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.450535][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.457109][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.463689][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.470282][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.476846][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.483454][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.490065][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.496720][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.503366][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1049.512339][T16659] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1049.545255][T16659] usb 5-1: USB disconnect, device number 100 [ 1049.634272][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1049.852495][ T43] usb 6-1: USB disconnect, device number 16 [ 1051.903539][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1051.911354][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1052.042669][ T43] usb 6-1: device descriptor read/64, error -32 [ 1052.295254][ T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1052.528140][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1052.550471][ T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 1052.619036][ T43] usb 6-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1052.689321][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1052.718902][ T43] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1052.768788][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.826825][ T43] usb 6-1: config 0 descriptor?? [ 1053.138144][T21418] delete_channel: no stack [ 1053.562025][ T5900] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1053.735945][T21453] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1054.287063][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1054.293967][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1054.307041][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1054.336741][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.413478][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.646988][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1054.657261][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.486272][ T5900] usb 2-1: Product: syz [ 1055.492059][ T5900] usb 2-1: Manufacturer: syz [ 1055.568668][ T5900] usb 2-1: SerialNumber: syz [ 1055.587457][ T5900] usb 2-1: config 0 descriptor?? [ 1055.599251][ T5900] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1055.608877][ T5900] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1055.740372][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 1055.783170][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1055.860636][T21468] bond0: option arp_validate: invalid value (18446744073491447809) [ 1055.891088][ T43] usb 6-1: USB disconnect, device number 18 [ 1056.258504][ T5900] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1056.266201][ T5900] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1056.274034][ T5900] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1056.291522][ T5900] em28xx 2-1:0.0: No AC97 audio processor [ 1057.427283][ T5900] usb 2-1: USB disconnect, device number 120 [ 1057.444337][ T5900] em28xx 2-1:0.0: Disconnecting em28xx [ 1057.460585][ T5900] em28xx 2-1:0.0: Freeing device [ 1057.470498][T21485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 1057.480069][T21491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4269'. [ 1057.501319][T21485] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1057.529634][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1057.642968][T21496] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1057.770063][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1058.122837][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1058.333585][ T43] usb 6-1: config 162 has an invalid interface number: 185 but max is 2 [ 1058.344148][ T43] usb 6-1: config 162 has an invalid interface number: 28 but max is 2 [ 1058.366171][T21492] delete_channel: no stack [ 1058.389453][ T43] usb 6-1: config 162 has an invalid interface number: 232 but max is 2 [ 1058.443802][ T43] usb 6-1: config 162 has no interface number 0 [ 1058.462090][ T43] usb 6-1: config 162 has no interface number 1 [ 1058.468344][ T43] usb 6-1: config 162 has no interface number 2 [ 1058.509693][ T43] usb 6-1: config 162 interface 185 altsetting 2 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 1058.532316][ T43] usb 6-1: config 162 interface 185 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1058.622341][ T43] usb 6-1: config 162 interface 185 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1058.636690][ T43] usb 6-1: config 162 interface 28 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1058.669045][ T43] usb 6-1: config 162 interface 28 altsetting 1 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1058.696899][ T43] usb 6-1: config 162 interface 28 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1058.729269][ T43] usb 6-1: config 162 interface 28 altsetting 1 has a duplicate endpoint with address 0x86, skipping [ 1058.775864][ T43] usb 6-1: config 162 interface 28 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1058.830742][ T43] usb 6-1: config 162 interface 185 has no altsetting 0 [ 1058.838082][ T43] usb 6-1: config 162 interface 28 has no altsetting 0 [ 1058.846945][ T43] usb 6-1: config 162 interface 232 has no altsetting 0 [ 1058.857064][ T43] usb 6-1: New USB device found, idVendor=0b05, idProduct=1779, bcdDevice= 0.31 [ 1058.866677][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.875170][ T43] usb 6-1: Product: syz [ 1058.879555][ T43] usb 6-1: Manufacturer: syz [ 1058.884667][ T43] usb 6-1: SerialNumber: syz [ 1059.362607][T21491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.565582][T21491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.822464][ T5914] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1060.151473][ T43] usb 6-1: USB disconnect, device number 19 [ 1060.171026][ T5914] usb 5-1: config 0 has no interfaces? [ 1060.183471][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1060.198709][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.232038][ T5914] usb 5-1: Product: syz [ 1060.242021][ T5914] usb 5-1: Manufacturer: syz [ 1060.256817][ T5914] usb 5-1: SerialNumber: syz [ 1060.283007][ T5914] usb 5-1: config 0 descriptor?? [ 1060.579693][T21527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.588422][T21527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.614149][T21527] vlan3: entered promiscuous mode [ 1060.728088][ T5914] usb 5-1: USB disconnect, device number 101 [ 1060.914188][T21549] netlink: 'syz.2.4287': attribute type 4 has an invalid length. [ 1060.931050][T21549] netlink: 'syz.2.4287': attribute type 4 has an invalid length. [ 1061.301267][T21553] IPv6: addrconf: prefix option has invalid lifetime [ 1061.788812][T21568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4292'. [ 1063.698726][T21595] bond0: option arp_validate: invalid value (18446744073491447809) [ 1063.739145][ T1209] hid (null): invalid report_count 45440 [ 1063.746919][ T1209] hid (null): unknown global tag 0xc [ 1063.753606][ T1209] hid (null): report_id 11408 is invalid [ 1063.760188][ T1209] hid (null): unknown global tag 0xd [ 1063.766684][ T1209] hid (null): unknown global tag 0xc [ 1063.774224][ T1209] hid (null): unknown global tag 0xc [ 1063.780348][ T1209] hid (null): unknown global tag 0xe [ 1063.786086][ T1209] hid (null): unknown global tag 0xd [ 1063.792942][ T1209] hid (null): unknown global tag 0xe [ 1063.798327][ T1209] hid (null): nested delimiters [ 1063.805908][ T1209] hid (null): unknown global tag 0xe [ 1063.815117][ T1209] hid (null): unknown global tag 0xc [ 1063.820484][ T1209] hid (null): unknown global tag 0xe [ 1063.843600][ T1209] hid (null): unknown global tag 0x72 [ 1063.849127][ T1209] hid (null): unknown global tag 0xd [ 1063.888855][ T1209] hid (null): unknown global tag 0xe [ 1063.906183][ T1209] hid (null): unknown global tag 0xd8 [ 1063.911571][ T1209] hid (null): unknown global tag 0x69 [ 1063.930777][ T1209] hid (null): unknown global tag 0xd [ 1063.954754][ T1209] hid (null): unknown global tag 0x4e [ 1063.971321][ T1209] hid (null): unknown global tag 0xe [ 1063.980620][ T1209] hid (null): global environment stack underflow [ 1063.987279][ T1209] hid (null): unknown global tag 0xd [ 1063.992845][ T1209] hid (null): report_id 18393 is invalid [ 1063.998523][ T1209] hid (null): unknown global tag 0xd [ 1064.004184][ T1209] hid (null): report_id 0 is invalid [ 1064.009478][ T1209] hid (null): unknown global tag 0xe [ 1064.015238][ T1209] hid (null): unknown global tag 0xd [ 1064.020533][ T1209] hid (null): invalid report_size -953772677 [ 1064.032167][ T1209] hid (null): global environment stack underflow [ 1064.038647][ T1209] hid (null): unknown global tag 0xe [ 1064.045348][ T1209] hid (null): report_id 564004777 is invalid [ 1064.051491][ T1209] hid (null): unknown global tag 0xc [ 1064.061432][ T1209] hid (null): global environment stack underflow [ 1064.131979][ T1209] hid (null): report_id 1178600874 is invalid [ 1064.197833][ T43] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1064.231566][ T1209] hid (null): invalid report_count -1277180051 [ 1064.256939][ T1209] hid-generic 0008:0CF2:0003.0022: ignoring exceeding usage max [ 1064.348138][ T1209] hid-generic 0008:0CF2:0003.0022: unexpected long global item [ 1064.357728][ T1209] hid-generic 0008:0CF2:0003.0022: probe with driver hid-generic failed with error -22 [ 1064.406500][ T43] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1064.427765][ T43] usb 5-1: config 1 has no interface number 0 [ 1064.469570][ T43] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 16 [ 1064.503585][ T43] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1064.533547][ T43] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 159, changing to 11 [ 1064.560924][ T43] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1064.571481][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.643859][ T43] usb 5-1: Product: syz [ 1064.655049][ T43] usb 5-1: Manufacturer: syz [ 1064.681358][ T43] usb 5-1: SerialNumber: syz [ 1064.706976][T21608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1064.722683][T21608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1064.757653][ T43] usb 5-1: Error in usbnet_get_endpoints (-22) [ 1065.311681][T21616] delete_channel: no stack [ 1065.536911][T21622] delete_channel: no stack [ 1065.922757][ T43] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1066.068984][T21637] IPv6: addrconf: prefix option has invalid lifetime [ 1066.076851][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1066.085611][ T43] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1066.095878][ T43] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1066.108225][ T43] usb 2-1: config 0 has no interface number 0 [ 1066.116447][ T43] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1066.130330][ T43] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1066.163431][ T43] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1066.184988][ T43] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1066.198321][ T43] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1066.210815][ T43] usb 2-1: Product: syz [ 1066.215146][ T43] usb 2-1: Manufacturer: syz [ 1066.225561][ T43] usb 2-1: config 0 descriptor?? [ 1066.236142][T21631] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1066.270034][T21645] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1066.279301][T21645] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1066.292128][ T1209] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1066.463658][ T1209] usb 6-1: config 0 has no interfaces? [ 1066.765579][T16659] usb 5-1: USB disconnect, device number 102 [ 1066.835982][ T5914] IPVS: starting estimator thread 0... [ 1066.854971][ T43] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input56 [ 1066.875229][ T1209] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1067.022357][T21657] IPVS: using max 28 ests per chain, 67200 per kthread [ 1067.102934][ T5926] usb 2-1: USB disconnect, device number 121 [ 1067.102970][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1067.180371][ T1209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.189856][ T1209] usb 6-1: Product: syz [ 1067.196537][ T1209] usb 6-1: Manufacturer: syz [ 1067.203479][ T1209] usb 6-1: SerialNumber: syz [ 1067.212085][T16659] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1067.221792][ T1209] usb 6-1: config 0 descriptor?? [ 1067.372314][T16659] usb 5-1: Using ep0 maxpacket: 16 [ 1067.389497][T16659] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1067.402080][T16659] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1067.419058][T16659] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1067.429330][T16659] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1067.440406][T16659] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1067.461114][T16659] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1067.470889][T16659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.485862][T16659] usb 5-1: Product: syz [ 1067.490031][T16659] usb 5-1: Manufacturer: syz [ 1067.494755][T16659] usb 5-1: SerialNumber: syz [ 1067.544933][T21664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.556155][T21664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.615045][T21666] pim6reg: entered allmulticast mode [ 1067.948970][T16659] usb 5-1: USB disconnect, device number 103 [ 1068.449087][T21634] vlan3: entered promiscuous mode [ 1068.890854][T21674] bond0: option arp_validate: invalid value (18446744073491447809) [ 1068.906051][T14605] bond0: (slave bond_slave_0): link status definitely up [ 1068.932844][T14605] bond0: (slave bond_slave_1): link status definitely up [ 1068.940365][T14605] bond0: active interface up! [ 1069.146353][ T5914] usb 6-1: USB disconnect, device number 20 [ 1069.799934][T21710] tipc: Enabled bearer , priority 0 [ 1069.819851][T21712] vivid-000: ================= START STATUS ================= [ 1069.828548][T21712] vivid-000: Test Pattern: 75% Colorbar [ 1069.835607][T21712] vivid-000: Fill Percentage of Frame: 100 [ 1069.843859][T21710] syzkaller0: entered promiscuous mode [ 1069.849362][T21710] syzkaller0: entered allmulticast mode [ 1069.855004][T21712] vivid-000: Horizontal Movement: No Movement [ 1069.867274][T21712] vivid-000: Vertical Movement: No Movement [ 1069.901329][T21712] vivid-000: OSD Text Mode: All [ 1069.906470][T21712] vivid-000: Show Border: false [ 1069.911377][T21712] vivid-000: Show Square: false [ 1069.917633][T21712] vivid-000: Sensor Flipped Horizontally: false [ 1070.195965][T21712] vivid-000: Sensor Flipped Vertically: false [ 1070.222993][T21712] vivid-000: Insert SAV Code in Image: false [ 1070.242650][T21712] vivid-000: Insert EAV Code in Image: false [ 1070.253307][T21712] vivid-000: Insert Video Guard Band: false [ 1070.259236][T21712] vivid-000: Reduced Framerate: false [ 1070.279548][T21712] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1070.328644][T21712] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1070.332583][T21706] tipc: Resetting bearer [ 1070.350533][T21712] vivid-000: Enable Capture Cropping: true [ 1070.395198][T21712] vivid-000: Enable Capture Composing: true [ 1070.404198][T21706] tipc: Disabling bearer [ 1070.426036][T21712] vivid-000: Enable Capture Scaler: true [ 1070.431703][T21712] vivid-000: Timestamp Source: End of Frame [ 1070.451171][T21712] vivid-000: Colorspace: sRGB [ 1070.460530][T21712] vivid-000: Transfer Function: Default [ 1070.467255][T21712] vivid-000: Y'CbCr Encoding: Default [ 1070.476487][T21712] vivid-000: HSV Encoding: Hue 0-179 [ 1070.502492][T21712] vivid-000: Quantization: Default [ 1070.517958][T21712] vivid-000: Apply Alpha To Red Only: false [ 1070.555079][T21712] vivid-000: Standard Aspect Ratio: 14x9 [ 1070.582798][T21712] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1070.591114][T21712] vivid-000: DV Timings: 640x480p59 inactive [ 1070.597837][T21712] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1070.605786][T21712] vivid-000: Maximum EDID Blocks: 2 [ 1070.611034][T21712] vivid-000: Limited RGB Range (16-235): false [ 1070.618961][T21712] vivid-000: Rx RGB Quantization Range: Automatic [ 1070.630053][T21712] vivid-000: Power Present: 0x00000001 [ 1070.639945][T21712] tpg source WxH: 1920x1080 (R'G'B) [ 1070.659739][T21712] tpg field: 1 [ 1070.663580][ T5914] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1070.674543][T21712] tpg crop: (0,0)/1920x1080 [ 1070.679079][T21712] tpg compose: (0,0)/1920x1080 [ 1070.684221][T21712] tpg colorspace: 8 [ 1070.688094][T21712] tpg transfer function: 0/2 [ 1070.693930][T21712] tpg quantization: 0/2 [ 1070.698596][T21712] tpg RGB range: 0/2 [ 1070.706874][T21712] vivid-000: ================== END STATUS ================== [ 1070.889907][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 1070.906886][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1070.922898][ T5914] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1070.957137][ T5914] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1071.036365][ T5914] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1071.049058][ T5914] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1071.059222][ T5914] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1071.066671][ T5914] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1071.076251][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.134451][ T5914] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1071.406107][ T5914] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1071.592201][ T5914] usb 5-1: USB disconnect, device number 104 [ 1071.727052][T21737] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4341'. [ 1071.752183][ T5926] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1071.831348][T21737] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4341'. [ 1071.856084][T21737] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4341'. [ 1071.865517][T21737] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4341'. [ 1071.881652][T21737] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1071.942033][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1071.972797][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1072.003093][ T5926] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1072.015921][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.027294][ T5926] usb 3-1: config 0 descriptor?? [ 1072.054560][T21753] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1072.135539][T21764] netlink: 'syz.4.4346': attribute type 4 has an invalid length. [ 1072.149126][T21764] netlink: 'syz.4.4346': attribute type 4 has an invalid length. [ 1072.356996][T21769] sit0: entered promiscuous mode [ 1072.362274][T21769] netlink: 'syz.0.4348': attribute type 1 has an invalid length. [ 1072.370419][T21769] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1072.613317][ T5926] hid (null): report_id 57294 is invalid [ 1072.647402][ T5926] asus 0003:0B05:18C6.0023: collection stack underflow [ 1072.665306][ T5926] asus 0003:0B05:18C6.0023: item 0 1 0 12 parsing failed [ 1072.679167][ T5926] asus 0003:0B05:18C6.0023: Asus hid parse failed: -22 [ 1072.689448][ T5926] asus 0003:0B05:18C6.0023: probe with driver asus failed with error -22 [ 1072.831731][ T5914] usb 3-1: USB disconnect, device number 115 [ 1073.674934][T21773] delete_channel: no stack [ 1074.273690][T21775] delete_channel: no stack [ 1074.816302][T21787] delete_channel: no stack [ 1075.686226][ T43] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1075.835509][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4362'. [ 1075.914199][ T43] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1075.954836][T21820] CIFS: VFS: Malformed UNC in devname [ 1076.008964][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.099011][ T43] usb 5-1: config 0 descriptor?? [ 1076.128653][ T43] cp210x 5-1:0.0: cp210x converter detected [ 1076.826993][ T43] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1077.041537][T21827] tipc: Enabling of bearer rejected, already enabled [ 1077.051006][T21832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1077.064864][T21832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1077.074433][T21832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1077.085532][T21832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1077.099695][ T5926] usb 5-1: USB disconnect, device number 105 [ 1077.127126][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1077.137757][ T5926] cp210x 5-1:0.0: device disconnected [ 1077.213341][T18249] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1077.392090][T18249] usb 3-1: Using ep0 maxpacket: 32 [ 1077.399350][T18249] usb 3-1: config 0 has no interfaces? [ 1077.407129][T18249] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1077.427303][T18249] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1077.457888][T18249] usb 3-1: Product: syz [ 1077.471470][T18249] usb 3-1: Manufacturer: syz [ 1077.551097][T18249] usb 3-1: SerialNumber: syz [ 1077.898241][T18249] usb 3-1: config 0 descriptor?? [ 1078.036497][T21833] delete_channel: no stack [ 1078.248099][T21850] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1079.271334][T21855] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1079.505591][T16659] usb 3-1: USB disconnect, device number 116 [ 1080.089946][T21867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1080.258577][T21867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4375'. [ 1081.716433][T21883] netlink: 'syz.4.4380': attribute type 5 has an invalid length. [ 1082.533739][T21898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1082.649164][T21884] delete_channel: no stack [ 1083.352070][T18249] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1083.448654][T21906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1083.467724][T21906] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1083.478134][T21906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1083.487402][T21906] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1083.512054][T18249] usb 2-1: Using ep0 maxpacket: 32 [ 1083.522227][T18249] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1083.530395][T18249] usb 2-1: config 0 has no interface number 0 [ 1083.552085][T18249] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1083.572260][T18249] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1083.592224][T18249] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1083.624738][T18249] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1083.633903][T18249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.641890][T18249] usb 2-1: Product: syz [ 1083.647417][T18249] usb 2-1: Manufacturer: syz [ 1083.652280][T18249] usb 2-1: SerialNumber: syz [ 1083.671635][T18249] usb 2-1: config 0 descriptor?? [ 1083.772251][T21911] tipc: Enabling of bearer rejected, already enabled [ 1083.890169][T21913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.901085][T21913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.937517][T21914] fuse: Unknown parameter '»ÿ0xffffffffffffffff' [ 1083.953627][T18249] appletouch 2-1:0.85: Failed to read mode from device. [ 1083.961284][T18249] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 1084.016797][T18249] usb 2-1: USB disconnect, device number 122 [ 1084.612265][T18249] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1084.822114][ T5914] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1084.984198][ T5914] usb 2-1: config 0 has no interfaces? [ 1084.992148][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1085.001521][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.016903][ T5914] usb 2-1: Product: syz [ 1085.106341][ T5914] usb 2-1: Manufacturer: syz [ 1085.115826][ T5914] usb 2-1: SerialNumber: syz [ 1085.133908][ T5914] usb 2-1: config 0 descriptor?? [ 1085.470664][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.479371][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.629027][T21928] vlan3: entered promiscuous mode [ 1085.768689][T21933] delete_channel: no stack [ 1085.835636][T16659] usb 2-1: USB disconnect, device number 123 [ 1086.662008][T18249] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1087.556172][T18249] usb 3-1: Invalid ep0 maxpacket: 32 [ 1087.725298][T18249] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 1088.140796][T18249] usb 3-1: Invalid ep0 maxpacket: 32 [ 1088.152650][T18249] usb usb3-port1: attempt power cycle [ 1088.556295][T18249] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 1089.354344][T18249] usb 3-1: Invalid ep0 maxpacket: 32 [ 1089.536587][T18249] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 1089.901858][T18249] usb 3-1: device not accepting address 120, error -71 [ 1089.926519][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'. [ 1089.967647][T21975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4404'. [ 1089.990717][T18249] usb usb3-port1: unable to enumerate USB device [ 1090.833945][T21988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4407'. [ 1091.072985][T21996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1091.121603][T21980] delete_channel: no stack [ 1091.380425][ T5926] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1091.572111][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 1091.603232][ T5926] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1091.614818][ T5926] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1091.663430][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1091.672668][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.680631][ T5926] usb 3-1: Product: syz [ 1091.732181][ T5926] usb 3-1: Manufacturer: syz [ 1091.736794][ T5926] usb 3-1: SerialNumber: syz [ 1092.038614][T21993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4408'. [ 1092.092168][T21993] netlink: 'syz.2.4408': attribute type 4 has an invalid length. [ 1092.185791][T21993] program syz.2.4408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.464973][ T5926] usb 3-1: USB disconnect, device number 121 [ 1094.476373][T22046] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1095.288108][T22059] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4424'. [ 1097.081506][T22082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1097.093603][T22082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1097.104540][T22082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1097.143115][T22082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1097.505446][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 1098.139408][T22108] netlink: 'syz.1.4439': attribute type 3 has an invalid length. [ 1098.147246][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4439'. [ 1098.728310][T22121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1098.762782][T22121] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1098.771719][T22121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1099.483059][T22145] vlan3: entered promiscuous mode [ 1099.842111][T16659] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1099.933152][T22048] delete_channel: no stack [ 1100.017836][T22128] delete_channel: no stack [ 1100.052099][T16659] usb 5-1: Using ep0 maxpacket: 16 [ 1100.059759][T16659] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1100.071398][T16659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1100.080000][T16659] usb 5-1: SerialNumber: syz [ 1100.116895][T16659] usb 5-1: config 0 descriptor?? [ 1100.129700][T16659] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1100.139459][T16659] usb 5-1: Detected FT232A [ 1100.146028][T16659] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1100.161580][T22156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.481908][T22147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.517811][T22147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.986277][ T5914] usb 5-1: USB disconnect, device number 107 [ 1101.054731][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1101.073472][T16659] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1101.078366][ T5914] ftdi_sio 5-1:0.0: device disconnected [ 1101.654557][T16659] usb 3-1: Using ep0 maxpacket: 8 [ 1101.841861][T16659] usb 3-1: config 36 has an invalid interface number: 44 but max is 0 [ 1101.850300][T16659] usb 3-1: config 36 has no interface number 0 [ 1101.872052][T16659] usb 3-1: config 36 interface 44 has no altsetting 0 [ 1101.884102][ T5900] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1101.933334][T16659] usb 3-1: New USB device found, idVendor=0711, idProduct=0902, bcdDevice=ad.ea [ 1101.943191][T16659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.951216][T16659] usb 3-1: Product: syz [ 1101.958148][T16659] usb 3-1: Manufacturer: syz [ 1101.962990][T16659] usb 3-1: SerialNumber: syz [ 1102.053690][ T5900] usb 2-1: device descriptor read/64, error -71 [ 1102.141168][T22169] netlink: 'syz.0.4464': attribute type 1 has an invalid length. [ 1102.149272][T22169] __nla_validate_parse: 1 callbacks suppressed [ 1102.149287][T22169] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4464'. [ 1102.297968][ T5900] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1103.320100][ T5900] usb 2-1: device descriptor read/64, error -71 [ 1103.476833][T22177] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1103.741005][ T5900] usb usb2-port1: attempt power cycle [ 1104.155512][T22181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4467'. [ 1104.317757][T16659] sisusb 3-1:36.44: Invalid USB2VGA device [ 1104.336822][T16659] sisusb 3-1:36.44: probe with driver sisusb failed with error -22 [ 1104.383721][T16659] usb 3-1: USB disconnect, device number 122 [ 1104.578121][T17470] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1104.942101][T16659] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1104.979013][T17470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1104.993654][T17470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.251697][T16659] usb 3-1: config 0 has no interfaces? [ 1105.257892][T17470] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1105.270653][T16659] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1105.282811][T17470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.290935][T16659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.307528][T17470] usb 5-1: config 0 descriptor?? [ 1105.312560][T16659] usb 3-1: Product: syz [ 1105.322980][T16659] usb 3-1: Manufacturer: syz [ 1105.329028][T16659] usb 3-1: SerialNumber: syz [ 1105.340205][T16659] usb 3-1: config 0 descriptor?? [ 1105.534116][T17470] hid-generic 0003:04F3:0754.0024: unknown main item tag 0x0 [ 1105.676423][T17470] hid-generic 0003:04F3:0754.0024: unknown main item tag 0x0 [ 1105.684862][T17470] hid-generic 0003:04F3:0754.0024: unknown main item tag 0x0 [ 1105.693140][T17470] hid-generic 0003:04F3:0754.0024: unknown main item tag 0x0 [ 1105.700677][T17470] hid-generic 0003:04F3:0754.0024: unknown main item tag 0x0 [ 1105.713200][T22187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.723322][T22187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.743603][T22187] vlan3: entered promiscuous mode [ 1105.862277][T17470] hid-generic 0003:04F3:0754.0024: failed to start in urb: -90 [ 1105.880642][T17470] hid-generic 0003:04F3:0754.0024: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.4-1/input0 [ 1105.973508][ T5914] usb 3-1: USB disconnect, device number 123 [ 1106.376298][T22203] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1106.671013][T22209] FAULT_INJECTION: forcing a failure. [ 1106.671013][T22209] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.685122][T22209] CPU: 0 UID: 0 PID: 22209 Comm: syz.1.4474 Not tainted syzkaller #0 PREEMPT(full) [ 1106.685136][T22209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1106.685143][T22209] Call Trace: [ 1106.685148][T22209] [ 1106.685153][T22209] dump_stack_lvl+0x189/0x250 [ 1106.685171][T22209] ? __pfx____ratelimit+0x10/0x10 [ 1106.685184][T22209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.685197][T22209] ? __pfx__printk+0x10/0x10 [ 1106.685210][T22209] ? __pfx___might_resched+0x10/0x10 [ 1106.685224][T22209] should_fail_ex+0x414/0x560 [ 1106.685242][T22209] should_failslab+0xa8/0x100 [ 1106.685254][T22209] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1106.685268][T22209] ? __alloc_skb+0x112/0x2d0 [ 1106.685286][T22209] __alloc_skb+0x112/0x2d0 [ 1106.685302][T22209] netlink_ack+0x146/0xa50 [ 1106.685315][T22209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.685328][T22209] ? ref_tracker_free+0x63a/0x7d0 [ 1106.685338][T22209] ? __asan_memcpy+0x40/0x70 [ 1106.685351][T22209] ? __pfx_ref_tracker_free+0x10/0x10 [ 1106.685359][T22209] ? __skb_clone+0x63/0x7a0 [ 1106.685374][T22209] netlink_rcv_skb+0x28c/0x470 [ 1106.685389][T22209] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.685403][T22209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.685422][T22209] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.685440][T22209] netlink_unicast+0x82f/0x9e0 [ 1106.685458][T22209] ? __pfx_netlink_unicast+0x10/0x10 [ 1106.685472][T22209] ? netlink_sendmsg+0x642/0xb30 [ 1106.685480][T22209] ? skb_put+0x11b/0x210 [ 1106.685491][T22209] netlink_sendmsg+0x805/0xb30 [ 1106.685504][T22209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.685520][T22209] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1106.685535][T22209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1106.685545][T22209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.685560][T22209] __sock_sendmsg+0x21c/0x270 [ 1106.685574][T22209] ____sys_sendmsg+0x52d/0x830 [ 1106.685587][T22209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.685602][T22209] ? import_iovec+0x74/0xa0 [ 1106.685616][T22209] ___sys_sendmsg+0x21f/0x2a0 [ 1106.685627][T22209] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.685656][T22209] ? __fget_files+0x2a/0x420 [ 1106.685665][T22209] ? __fget_files+0x3a0/0x420 [ 1106.685679][T22209] __sys_sendmmsg+0x227/0x430 [ 1106.685693][T22209] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1106.685707][T22209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1106.685731][T22209] ? ksys_write+0x22a/0x250 [ 1106.685745][T22209] ? __pfx_ksys_write+0x10/0x10 [ 1106.685761][T22209] __x64_sys_sendmmsg+0xa0/0xc0 [ 1106.685779][T22209] do_syscall_64+0xfa/0xfa0 [ 1106.685791][T22209] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.685803][T22209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.685813][T22209] ? clear_bhb_loop+0x60/0xb0 [ 1106.685825][T22209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.685834][T22209] RIP: 0033:0x7f066d38efc9 [ 1106.685844][T22209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.685853][T22209] RSP: 002b:00007f066e13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1106.685865][T22209] RAX: ffffffffffffffda RBX: 00007f066d5e5fa0 RCX: 00007f066d38efc9 [ 1106.685872][T22209] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1106.685879][T22209] RBP: 00007f066e13f090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.685886][T22209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.685892][T22209] R13: 00007f066d5e6038 R14: 00007f066d5e5fa0 R15: 00007f066d70fa28 [ 1106.685908][T22209] [ 1107.122097][ T5914] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1107.193600][T22218] FAULT_INJECTION: forcing a failure. [ 1107.193600][T22218] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.209038][T22218] CPU: 1 UID: 0 PID: 22218 Comm: syz.1.4477 Not tainted syzkaller #0 PREEMPT(full) [ 1107.209052][T22218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1107.209059][T22218] Call Trace: [ 1107.209064][T22218] [ 1107.209068][T22218] dump_stack_lvl+0x189/0x250 [ 1107.209086][T22218] ? __pfx____ratelimit+0x10/0x10 [ 1107.209099][T22218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.209112][T22218] ? __pfx__printk+0x10/0x10 [ 1107.209126][T22218] ? __pfx___might_resched+0x10/0x10 [ 1107.209137][T22218] ? fs_reclaim_acquire+0x7d/0x100 [ 1107.209155][T22218] should_fail_ex+0x414/0x560 [ 1107.209173][T22218] should_failslab+0xa8/0x100 [ 1107.209184][T22218] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1107.209198][T22218] ? __alloc_skb+0x112/0x2d0 [ 1107.209211][T22218] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 1107.209227][T22218] __alloc_skb+0x112/0x2d0 [ 1107.209243][T22218] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1107.209259][T22218] rtmsg_ifinfo+0x8c/0x1a0 [ 1107.209275][T22218] netif_state_change+0x29e/0x3a0 [ 1107.209290][T22218] ? __pfx_netif_state_change+0x10/0x10 [ 1107.209306][T22218] ? netif_change_flags+0xe8/0x1a0 [ 1107.209318][T22218] do_setlink+0x35de/0x41c0 [ 1107.209330][T22218] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1107.209350][T22218] ? __pfx_do_setlink+0x10/0x10 [ 1107.209360][T22218] ? stack_trace_save+0x9c/0xe0 [ 1107.209371][T22218] ? __pfx_stack_trace_save+0x10/0x10 [ 1107.209389][T22218] ? __lock_acquire+0xab9/0xd20 [ 1107.209403][T22218] ? __mutex_trylock_common+0x153/0x260 [ 1107.209417][T22218] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1107.209431][T22218] ? rcu_is_watching+0x15/0xb0 [ 1107.209443][T22218] ? trace_contention_end+0x39/0x120 [ 1107.209455][T22218] ? __mutex_lock+0x335/0x1350 [ 1107.209476][T22218] ? rtnl_newlink+0x8e9/0x1c80 [ 1107.209492][T22218] ? __pfx___mutex_lock+0x10/0x10 [ 1107.209509][T22218] ? ns_capable+0x8a/0xf0 [ 1107.209521][T22218] ? rtnl_link_get_net_capable+0x16a/0x350 [ 1107.209533][T22218] rtnl_newlink+0x14ad/0x1c80 [ 1107.209545][T22218] ? netlink_deliver_tap+0x19c/0x1b0 [ 1107.209567][T22218] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.209594][T22218] ? kasan_quarantine_put+0xdd/0x220 [ 1107.209607][T22218] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.209623][T22218] ? nlmon_xmit+0xb0/0x100 [ 1107.209633][T22218] ? kmem_cache_free+0x19b/0x690 [ 1107.209652][T22218] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1107.209663][T22218] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.209675][T22218] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1107.209686][T22218] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1107.209698][T22218] ? __dev_queue_xmit+0x27b/0x3b50 [ 1107.209709][T22218] ? __dev_queue_xmit+0x27b/0x3b50 [ 1107.209719][T22218] ? __dev_queue_xmit+0x27b/0x3b50 [ 1107.209733][T22218] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1107.209743][T22218] ? kasan_save_track+0x3e/0x80 [ 1107.209756][T22218] ? __kasan_slab_alloc+0x6c/0x80 [ 1107.209772][T22218] ? __lock_acquire+0xab9/0xd20 [ 1107.209795][T22218] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.209808][T22218] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1107.209824][T22218] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1107.209841][T22218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.209853][T22218] ? ref_tracker_free+0x63a/0x7d0 [ 1107.209863][T22218] ? __asan_memcpy+0x40/0x70 [ 1107.209875][T22218] ? __pfx_ref_tracker_free+0x10/0x10 [ 1107.209884][T22218] ? __skb_clone+0x63/0x7a0 [ 1107.209899][T22218] netlink_rcv_skb+0x208/0x470 [ 1107.209916][T22218] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.209940][T22218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.209975][T22218] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.210007][T22218] netlink_unicast+0x82f/0x9e0 [ 1107.210026][T22218] ? __pfx_netlink_unicast+0x10/0x10 [ 1107.210040][T22218] ? netlink_sendmsg+0x642/0xb30 [ 1107.210048][T22218] ? skb_put+0x11b/0x210 [ 1107.210059][T22218] netlink_sendmsg+0x805/0xb30 [ 1107.210074][T22218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.210090][T22218] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1107.210106][T22218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.210116][T22218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.210131][T22218] __sock_sendmsg+0x21c/0x270 [ 1107.210146][T22218] ____sys_sendmsg+0x505/0x830 [ 1107.210159][T22218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.210174][T22218] ? import_iovec+0x74/0xa0 [ 1107.210188][T22218] ___sys_sendmsg+0x21f/0x2a0 [ 1107.210200][T22218] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.210229][T22218] ? __fget_files+0x2a/0x420 [ 1107.210238][T22218] ? __fget_files+0x3a0/0x420 [ 1107.210253][T22218] __x64_sys_sendmsg+0x19b/0x260 [ 1107.210265][T22218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.210281][T22218] ? __pfx_ksys_write+0x10/0x10 [ 1107.210297][T22218] ? do_syscall_64+0xbe/0xfa0 [ 1107.210311][T22218] do_syscall_64+0xfa/0xfa0 [ 1107.210322][T22218] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.210334][T22218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.210344][T22218] ? clear_bhb_loop+0x60/0xb0 [ 1107.210356][T22218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.210366][T22218] RIP: 0033:0x7f066d38efc9 [ 1107.210376][T22218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.210385][T22218] RSP: 002b:00007f066e13f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.210396][T22218] RAX: ffffffffffffffda RBX: 00007f066d5e5fa0 RCX: 00007f066d38efc9 [ 1107.210404][T22218] RDX: 0000000020000880 RSI: 0000200000000140 RDI: 0000000000000007 [ 1107.210410][T22218] RBP: 00007f066e13f090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.210417][T22218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1107.210423][T22218] R13: 00007f066d5e6038 R14: 00007f066d5e5fa0 R15: 00007f066d70fa28 [ 1107.210440][T22218] [ 1107.871022][ T5914] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1107.886773][ T5914] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1107.910224][ T5926] usb 5-1: USB disconnect, device number 108 [ 1108.128683][ T5914] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1108.192487][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.235153][ T5914] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1108.439532][ T5914] gspca_sn9c2028: read1 error -71 [ 1108.457986][ T5914] gspca_sn9c2028: read1 error -71 [ 1108.479745][ T5914] gspca_sn9c2028: read1 error -71 [ 1108.488073][ T5914] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1108.518417][ T5914] usb 3-1: USB disconnect, device number 124 [ 1108.559415][T22242] macsec1: entered promiscuous mode [ 1108.564719][T22242] macsec1: entered allmulticast mode [ 1108.932091][ T5926] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1109.291508][T22254] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1109.589247][T22251] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1109.744927][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.767104][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.844759][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.855165][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.878438][ T5926] usb 6-1: Product: syz [ 1109.887913][ T5926] usb 6-1: Manufacturer: syz [ 1109.895122][ T5926] usb 6-1: SerialNumber: syz [ 1110.273514][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1110.312977][ T43] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1110.540367][ T5926] usb 6-1: 0:2 : does not exist [ 1110.547904][T22276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1110.562846][ T5926] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1110.591268][ T5926] usb 6-1: USB disconnect, device number 21 [ 1110.601037][T22278] FAULT_INJECTION: forcing a failure. [ 1110.601037][T22278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.630575][T22278] CPU: 0 UID: 0 PID: 22278 Comm: syz.4.4497 Not tainted syzkaller #0 PREEMPT(full) [ 1110.630597][T22278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1110.630609][T22278] Call Trace: [ 1110.630617][T22278] [ 1110.630625][T22278] dump_stack_lvl+0x189/0x250 [ 1110.630653][T22278] ? __pfx____ratelimit+0x10/0x10 [ 1110.630673][T22278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.630696][T22278] ? __pfx__printk+0x10/0x10 [ 1110.630715][T22278] ? __might_fault+0xb0/0x130 [ 1110.630749][T22278] should_fail_ex+0x414/0x560 [ 1110.630778][T22278] _copy_from_user+0x2d/0xb0 [ 1110.630801][T22278] ___sys_sendmsg+0x158/0x2a0 [ 1110.630823][T22278] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.630884][T22278] ? __might_fault+0xb0/0x130 [ 1110.630910][T22278] __sys_sendmmsg+0x227/0x430 [ 1110.630935][T22278] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1110.630962][T22278] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1110.631002][T22278] ? ksys_write+0x22a/0x250 [ 1110.631029][T22278] ? __pfx_ksys_write+0x10/0x10 [ 1110.631057][T22278] __x64_sys_sendmmsg+0xa0/0xc0 [ 1110.631077][T22278] do_syscall_64+0xfa/0xfa0 [ 1110.631097][T22278] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.631116][T22278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.631126][T22278] ? clear_bhb_loop+0x60/0xb0 [ 1110.631138][T22278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.631147][T22278] RIP: 0033:0x7f9aced8efc9 [ 1110.631157][T22278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.631170][T22278] RSP: 002b:00007f9acfd13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1110.631181][T22278] RAX: ffffffffffffffda RBX: 00007f9acefe5fa0 RCX: 00007f9aced8efc9 [ 1110.631189][T22278] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1110.631196][T22278] RBP: 00007f9acfd13090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.631203][T22278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.631209][T22278] R13: 00007f9acefe6038 R14: 00007f9acefe5fa0 R15: 00007f9acf10fa28 [ 1110.631225][T22278] [ 1110.732354][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1111.030191][ T43] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 1111.038514][ T43] usb 3-1: config 4 has no interface number 0 [ 1111.095625][ T43] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 1111.230118][ T43] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1111.263712][ T43] usb 3-1: config 4 interface 51 has no altsetting 0 [ 1111.290693][ T43] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1111.300932][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.309417][ T43] usb 3-1: Product: syz [ 1111.316003][ T43] usb 3-1: Manufacturer: syz [ 1111.320808][ T43] usb 3-1: SerialNumber: syz [ 1111.331336][T22270] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1111.339073][T22270] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1111.554059][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1111.587074][T22270] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1111.831071][T22281] delete_channel: no stack [ 1112.199071][T22270] bond0 (unregistering): Released all slaves [ 1112.358684][ T43] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 1112.472528][ T43] usb 3-1: USB disconnect, device number 125 [ 1112.974742][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1112.974759][ T30] audit: type=1326 audit(1761290757.571:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.003264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.046073][ T30] audit: type=1326 audit(1761290757.641:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.068507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.089612][ T30] audit: type=1326 audit(1761290757.641:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.090752][T22326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1113.314368][ T30] audit: type=1326 audit(1761290757.641:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.353994][ T30] audit: type=1326 audit(1761290757.641:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.381304][ T30] audit: type=1326 audit(1761290757.641:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.450749][ T30] audit: type=1326 audit(1761290757.641:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.732245][T22307] delete_channel: no stack [ 1113.801636][ T30] audit: type=1326 audit(1761290757.681:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f24b558efc9 code=0x7ffc0000 [ 1113.857636][ T30] audit: type=1326 audit(1761290757.681:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24b558f003 code=0x7ffc0000 [ 1113.882177][T22341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1113.893774][T22341] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1113.935673][T22341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1113.945203][T22341] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1113.992095][ T30] audit: type=1326 audit(1761290757.681:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22309 comm="syz.5.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24b558f003 code=0x7ffc0000 [ 1114.082031][T16659] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1114.260445][T16659] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1114.271988][T16659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.332675][T22349] FAULT_INJECTION: forcing a failure. [ 1114.332675][T22349] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.398652][T16659] usb 3-1: config 0 descriptor?? [ 1114.409594][T22349] CPU: 1 UID: 0 PID: 22349 Comm: syz.1.4518 Not tainted syzkaller #0 PREEMPT(full) [ 1114.409614][T22349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1114.409625][T22349] Call Trace: [ 1114.409633][T22349] [ 1114.409641][T22349] dump_stack_lvl+0x189/0x250 [ 1114.409669][T22349] ? __pfx____ratelimit+0x10/0x10 [ 1114.409692][T22349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.409715][T22349] ? __pfx__printk+0x10/0x10 [ 1114.409732][T22349] ? __sock_sendmsg+0x21c/0x270 [ 1114.409754][T22349] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1114.409773][T22349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.409801][T22349] should_fail_ex+0x414/0x560 [ 1114.409831][T22349] should_failslab+0xa8/0x100 [ 1114.409852][T22349] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1114.409876][T22349] ? skb_clone+0x212/0x3a0 [ 1114.409900][T22349] skb_clone+0x212/0x3a0 [ 1114.409921][T22349] __netlink_deliver_tap+0x404/0x850 [ 1114.409960][T22349] ? netlink_deliver_tap+0x2e/0x1b0 [ 1114.409988][T22349] netlink_deliver_tap+0x19c/0x1b0 [ 1114.410015][T22349] netlink_sendskb+0x68/0x140 [ 1114.410041][T22349] netlink_unicast+0x397/0x9e0 [ 1114.410062][T22349] ? __asan_memcpy+0x40/0x70 [ 1114.410093][T22349] ? __pfx_netlink_unicast+0x10/0x10 [ 1114.410127][T22349] netlink_rcv_skb+0x28c/0x470 [ 1114.410154][T22349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1114.410181][T22349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1114.410217][T22349] ? netlink_deliver_tap+0x2e/0x1b0 [ 1114.410258][T22349] netlink_unicast+0x82f/0x9e0 [ 1114.410294][T22349] ? __pfx_netlink_unicast+0x10/0x10 [ 1114.410320][T22349] ? netlink_sendmsg+0x642/0xb30 [ 1114.410335][T22349] ? skb_put+0x11b/0x210 [ 1114.410355][T22349] netlink_sendmsg+0x805/0xb30 [ 1114.410382][T22349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.410411][T22349] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1114.410439][T22349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1114.410457][T22349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.410484][T22349] __sock_sendmsg+0x21c/0x270 [ 1114.410509][T22349] ____sys_sendmsg+0x52d/0x830 [ 1114.410533][T22349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.410561][T22349] ? import_iovec+0x74/0xa0 [ 1114.410586][T22349] ___sys_sendmsg+0x21f/0x2a0 [ 1114.410608][T22349] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.410667][T22349] ? __fget_files+0x2a/0x420 [ 1114.410685][T22349] ? __fget_files+0x3a0/0x420 [ 1114.410713][T22349] __sys_sendmmsg+0x227/0x430 [ 1114.410738][T22349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1114.410767][T22349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1114.410810][T22349] ? ksys_write+0x22a/0x250 [ 1114.410836][T22349] ? __pfx_ksys_write+0x10/0x10 [ 1114.410865][T22349] __x64_sys_sendmmsg+0xa0/0xc0 [ 1114.410886][T22349] do_syscall_64+0xfa/0xfa0 [ 1114.410906][T22349] ? lockdep_hardirqs_on+0x9c/0x150 [ 1114.410928][T22349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.410946][T22349] ? clear_bhb_loop+0x60/0xb0 [ 1114.410968][T22349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.410986][T22349] RIP: 0033:0x7f066d38efc9 [ 1114.411003][T22349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.411019][T22349] RSP: 002b:00007f066e13f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1114.411039][T22349] RAX: ffffffffffffffda RBX: 00007f066d5e5fa0 RCX: 00007f066d38efc9 [ 1114.411053][T22349] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 1114.411066][T22349] RBP: 00007f066e13f090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.411078][T22349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.411089][T22349] R13: 00007f066d5e6038 R14: 00007f066d5e5fa0 R15: 00007f066d70fa28 [ 1114.411122][T22349] [ 1114.812271][T16659] usb 3-1: selecting invalid altsetting 1 [ 1114.832179][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4517'. [ 1115.017641][T22344] delete_channel: no stack [ 1115.033643][T22354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.064598][T16659] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1115.067566][T22354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.121472][T16659] usb 3-1: USB disconnect, device number 126 [ 1115.362194][T22358] vlan3: entered promiscuous mode [ 1115.783394][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.792080][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.873569][T22471] __nla_validate_parse: 1 callbacks suppressed [ 1118.873588][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1118.928549][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1120.065575][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1120.065593][ T30] audit: type=1326 audit(1761290764.661:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.111861][ T30] audit: type=1326 audit(1761290764.661:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.159623][ T30] audit: type=1326 audit(1761290764.661:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.184933][ T30] audit: type=1326 audit(1761290764.661:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.214603][ T30] audit: type=1326 audit(1761290764.661:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.242105][ T30] audit: type=1326 audit(1761290764.661:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e7b18d810 code=0x7ffc0000 [ 1120.318583][ T30] audit: type=1326 audit(1761290764.661:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.360509][ T30] audit: type=1326 audit(1761290764.661:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.392013][ T30] audit: type=1326 audit(1761290764.661:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1120.417912][ T30] audit: type=1326 audit(1761290764.661:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.2.4593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1e7b18efc9 code=0x7ffc0000 [ 1121.492401][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1121.515076][T22579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1122.056320][T22606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1122.722228][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4638'. [ 1123.127829][T22656] netlink: 'syz.0.4646': attribute type 13 has an invalid length. [ 1123.942469][T22700] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1126.008410][T22792] syzkaller0: entered promiscuous mode [ 1126.022035][T22792] syzkaller0: entered allmulticast mode [ 1126.495644][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1126.796749][T22832] syzkaller0: entered promiscuous mode [ 1126.812090][T22832] syzkaller0: entered allmulticast mode [ 1126.907708][T22838] gretap0: entered promiscuous mode [ 1126.913876][T22838] vlan3: entered promiscuous mode [ 1126.940460][T22840] erspan0: entered promiscuous mode [ 1127.054103][T22842] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 1127.081774][T22844] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1127.473189][T22868] syzkaller0: entered promiscuous mode [ 1127.487935][T22868] syzkaller0: entered allmulticast mode [ 1129.932062][T22955] sctp: [Deprecated]: syz.1.4778 (pid 22955) Use of int in maxseg socket option. [ 1129.932062][T22955] Use struct sctp_assoc_value instead [ 1130.438843][T22974] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4785'. [ 1131.029278][T22998] syzkaller0: entered promiscuous mode [ 1131.035383][T22998] syzkaller0: entered allmulticast mode [ 1131.262597][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 1131.262615][ T30] audit: type=1326 audit(1761290775.861:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.322117][ T30] audit: type=1326 audit(1761290775.891:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.377553][ T30] audit: type=1326 audit(1761290775.891:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.445084][ T30] audit: type=1326 audit(1761290775.891:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.546811][ T30] audit: type=1326 audit(1761290775.891:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.629980][ T30] audit: type=1326 audit(1761290775.891:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.742355][ T30] audit: type=1326 audit(1761290775.891:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.813921][ T30] audit: type=1326 audit(1761290775.891:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.890655][ T30] audit: type=1326 audit(1761290775.891:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1131.917126][ T30] audit: type=1326 audit(1761290775.891:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23010 comm="syz.0.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964d78efc9 code=0x7ffc0000 [ 1132.748554][T23046] syzkaller0: entered promiscuous mode [ 1132.755730][T23046] syzkaller0: entered allmulticast mode [ 1134.537277][T23129] [ 1134.539645][T23129] ===================================================== [ 1134.546571][T23129] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1134.554033][T23129] syzkaller #0 Not tainted [ 1134.558445][T23129] ----------------------------------------------------- [ 1134.565374][T23129] syz.0.4847/23129 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1134.573091][T23129] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1134.581724][T23129] [ 1134.581724][T23129] and this task is already holding: [ 1134.589080][T23129] ffff88807d150020 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1134.597696][T23129] which would create a new lock dependency: [ 1134.603580][T23129] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1134.611172][T23129] [ 1134.611172][T23129] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1134.620614][T23129] (&client->buffer_lock){..-.}-{3:3} [ 1134.620647][T23129] [ 1134.620647][T23129] ... which became SOFTIRQ-irq-safe at: [ 1134.633715][T23129] lock_acquire+0x120/0x360 [ 1134.638306][T23129] _raw_spin_lock+0x2e/0x40 [ 1134.642902][T23129] evdev_pass_values+0xb9/0xbd0 [ 1134.647843][T23129] evdev_events+0x1e6/0x340 [ 1134.652432][T23129] input_pass_values+0x288/0x890 [ 1134.657456][T23129] input_event_dispose+0x3e5/0x6b0 [ 1134.662660][T23129] input_event+0x89/0xe0 [ 1134.666995][T23129] hidinput_hid_event+0x145e/0x1dd0 [ 1134.672292][T23129] hid_process_event+0x4be/0x620 [ 1134.677324][T23129] hid_report_raw_event+0xe91/0x16d0 [ 1134.682704][T23129] hid_input_report+0x43e/0x520 [ 1134.687642][T23129] hid_irq_in+0x47e/0x6d0 [ 1134.692057][T23129] __usb_hcd_giveback_urb+0x376/0x540 [ 1134.697514][T23129] dummy_timer+0x85f/0x44c0 [ 1134.702101][T23129] __hrtimer_run_queues+0x52c/0xc60 [ 1134.707386][T23129] hrtimer_run_softirq+0x187/0x2b0 [ 1134.712584][T23129] handle_softirqs+0x286/0x870 [ 1134.717432][T23129] __irq_exit_rcu+0xca/0x1f0 [ 1134.722116][T23129] irq_exit_rcu+0x9/0x30 [ 1134.726445][T23129] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1134.732167][T23129] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1134.738235][T23129] finish_task_switch+0x26b/0x950 [ 1134.743363][T23129] __schedule+0x17a0/0x4cc0 [ 1134.747955][T23129] schedule+0x165/0x360 [ 1134.752203][T23129] smpboot_thread_fn+0x5bd/0xa60 [ 1134.757238][T23129] kthread+0x711/0x8a0 [ 1134.761398][T23129] ret_from_fork+0x4bc/0x870 [ 1134.766072][T23129] ret_from_fork_asm+0x1a/0x30 [ 1134.770919][T23129] [ 1134.770919][T23129] to a SOFTIRQ-irq-unsafe lock: [ 1134.777930][T23129] (tasklist_lock){.+.+}-{3:3} [ 1134.777962][T23129] [ 1134.777962][T23129] ... which became SOFTIRQ-irq-unsafe at: [ 1134.790574][T23129] ... [ 1134.790583][T23129] lock_acquire+0x120/0x360 [ 1134.797741][T23129] _raw_read_lock+0x36/0x50 [ 1134.802336][T23129] __do_wait+0xde/0x740 [ 1134.806585][T23129] do_wait+0x1f8/0x510 [ 1134.810744][T23129] kernel_wait+0xab/0x170 [ 1134.815172][T23129] call_usermodehelper_exec_work+0xbe/0x230 [ 1134.821151][T23129] process_scheduled_works+0xae1/0x17b0 [ 1134.826799][T23129] worker_thread+0x8a0/0xda0 [ 1134.831475][T23129] kthread+0x711/0x8a0 [ 1134.835632][T23129] ret_from_fork+0x4bc/0x870 [ 1134.840308][T23129] ret_from_fork_asm+0x1a/0x30 [ 1134.845155][T23129] [ 1134.845155][T23129] other info that might help us debug this: [ 1134.845155][T23129] [ 1134.855376][T23129] Chain exists of: [ 1134.855376][T23129] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1134.855376][T23129] [ 1134.868596][T23129] Possible interrupt unsafe locking scenario: [ 1134.868596][T23129] [ 1134.876905][T23129] CPU0 CPU1 [ 1134.882261][T23129] ---- ---- [ 1134.887621][T23129] lock(tasklist_lock); [ 1134.891868][T23129] local_irq_disable(); [ 1134.898615][T23129] lock(&client->buffer_lock); [ 1134.906001][T23129] lock(&f_owner->lock); [ 1134.912864][T23129] [ 1134.916323][T23129] lock(&client->buffer_lock); [ 1134.921348][T23129] [ 1134.921348][T23129] *** DEADLOCK *** [ 1134.921348][T23129] [ 1134.929485][T23129] 6 locks held by syz.0.4847/23129: [ 1134.934674][T23129] #0: ffff888074c8feb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1134.943747][T23129] #1: ffff888076628420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 1134.952655][T23129] #2: ffff88804fff6a48 (&sb->s_type->i_mutex_key#13){++++}-{4:4}, at: shmem_file_write_iter+0x7f/0x120 [ 1134.963824][T23129] #3: ffffffff9980c710 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x735/0x1a80 [ 1134.973318][T23129] #4: ffff88807530ca60 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1134.982992][T23129] #5: ffff88807d150020 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1134.992056][T23129] [ 1134.992056][T23129] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1135.002455][T23129] -> (&client->buffer_lock){..-.}-{3:3} { [ 1135.008371][T23129] IN-SOFTIRQ-W at: [ 1135.012532][T23129] lock_acquire+0x120/0x360 [ 1135.019038][T23129] _raw_spin_lock+0x2e/0x40 [ 1135.025541][T23129] evdev_pass_values+0xb9/0xbd0 [ 1135.032390][T23129] evdev_events+0x1e6/0x340 [ 1135.038888][T23129] input_pass_values+0x288/0x890 [ 1135.045817][T23129] input_event_dispose+0x3e5/0x6b0 [ 1135.052915][T23129] input_event+0x89/0xe0 [ 1135.059151][T23129] hidinput_hid_event+0x145e/0x1dd0 [ 1135.066345][T23129] hid_process_event+0x4be/0x620 [ 1135.073274][T23129] hid_report_raw_event+0xe91/0x16d0 [ 1135.080547][T23129] hid_input_report+0x43e/0x520 [ 1135.087386][T23129] hid_irq_in+0x47e/0x6d0 [ 1135.093692][T23129] __usb_hcd_giveback_urb+0x376/0x540 [ 1135.101049][T23129] dummy_timer+0x85f/0x44c0 [ 1135.107536][T23129] __hrtimer_run_queues+0x52c/0xc60 [ 1135.114717][T23129] hrtimer_run_softirq+0x187/0x2b0 [ 1135.121820][T23129] handle_softirqs+0x286/0x870 [ 1135.128573][T23129] __irq_exit_rcu+0xca/0x1f0 [ 1135.135146][T23129] irq_exit_rcu+0x9/0x30 [ 1135.141369][T23129] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1135.148981][T23129] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1135.156945][T23129] finish_task_switch+0x26b/0x950 [ 1135.163954][T23129] __schedule+0x17a0/0x4cc0 [ 1135.170436][T23129] schedule+0x165/0x360 [ 1135.176569][T23129] smpboot_thread_fn+0x5bd/0xa60 [ 1135.183484][T23129] kthread+0x711/0x8a0 [ 1135.189535][T23129] ret_from_fork+0x4bc/0x870 [ 1135.196103][T23129] ret_from_fork_asm+0x1a/0x30 [ 1135.202845][T23129] INITIAL USE at: [ 1135.206893][T23129] lock_acquire+0x120/0x360 [ 1135.213287][T23129] _raw_spin_lock+0x2e/0x40 [ 1135.219682][T23129] evdev_pass_values+0xb9/0xbd0 [ 1135.226428][T23129] evdev_events+0x1e6/0x340 [ 1135.232826][T23129] input_pass_values+0x288/0x890 [ 1135.239660][T23129] input_event_dispose+0x330/0x6b0 [ 1135.246669][T23129] input_inject_event+0x1dd/0x340 [ 1135.253590][T23129] evdev_write+0x2fc/0x480 [ 1135.259902][T23129] vfs_write+0x27e/0xb30 [ 1135.266043][T23129] ksys_write+0x145/0x250 [ 1135.272269][T23129] do_syscall_64+0xfa/0xfa0 [ 1135.278667][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.286449][T23129] } [ 1135.289101][T23129] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1135.297416][T23129] -> (&new->fa_lock){....}-{3:3} { [ 1135.302616][T23129] INITIAL USE at: [ 1135.306576][T23129] lock_acquire+0x120/0x360 [ 1135.312806][T23129] _raw_write_lock_irq+0xa2/0xf0 [ 1135.319476][T23129] fasync_remove_entry+0xf1/0x1c0 [ 1135.326222][T23129] lease_modify+0x1ca/0x3c0 [ 1135.332456][T23129] locks_remove_file+0x4bf/0xea0 [ 1135.339117][T23129] __fput+0x3ab/0xa70 [ 1135.344820][T23129] task_work_run+0x1d4/0x260 [ 1135.351133][T23129] do_exit+0x6b5/0x2300 [ 1135.357009][T23129] do_group_exit+0x21c/0x2d0 [ 1135.363343][T23129] get_signal+0x1285/0x1340 [ 1135.369564][T23129] arch_do_signal_or_restart+0xa0/0x790 [ 1135.376835][T23129] exit_to_user_mode_loop+0x72/0x130 [ 1135.383848][T23129] do_syscall_64+0x2bd/0xfa0 [ 1135.390171][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.397784][T23129] INITIAL READ USE at: [ 1135.402192][T23129] lock_acquire+0x120/0x360 [ 1135.408854][T23129] _raw_read_lock_irqsave+0xaf/0x100 [ 1135.416298][T23129] kill_fasync+0x199/0x4d0 [ 1135.422871][T23129] lease_break_callback+0x26/0x30 [ 1135.430053][T23129] __break_lease+0x6a5/0x1620 [ 1135.436887][T23129] vfs_truncate+0x428/0x520 [ 1135.443547][T23129] do_sys_truncate+0xdb/0x190 [ 1135.450380][T23129] __x64_sys_truncate+0x5b/0x70 [ 1135.457389][T23129] do_syscall_64+0xfa/0xfa0 [ 1135.464076][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.472127][T23129] } [ 1135.474693][T23129] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1135.483436][T23129] ... acquired at: [ 1135.487304][T23129] lock_acquire+0x120/0x360 [ 1135.491963][T23129] _raw_read_lock_irqsave+0xaf/0x100 [ 1135.497416][T23129] kill_fasync+0x199/0x4d0 [ 1135.502001][T23129] evdev_pass_values+0x627/0xbd0 [ 1135.507098][T23129] evdev_events+0x1e6/0x340 [ 1135.511757][T23129] input_pass_values+0x288/0x890 [ 1135.516867][T23129] input_event_dispose+0x330/0x6b0 [ 1135.522141][T23129] input_inject_event+0x1dd/0x340 [ 1135.527327][T23129] evdev_write+0x2fc/0x480 [ 1135.531898][T23129] vfs_write+0x27e/0xb30 [ 1135.536306][T23129] ksys_write+0x145/0x250 [ 1135.540797][T23129] do_syscall_64+0xfa/0xfa0 [ 1135.545458][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.551504][T23129] [ 1135.553807][T23129] -> (&f_owner->lock){....}-{3:3} { [ 1135.559006][T23129] INITIAL USE at: [ 1135.562901][T23129] lock_acquire+0x120/0x360 [ 1135.568948][T23129] _raw_write_lock_irq+0xa2/0xf0 [ 1135.575432][T23129] __f_setown+0x67/0x370 [ 1135.581218][T23129] fcntl_dirnotify+0x3fa/0x6a0 [ 1135.587528][T23129] do_fcntl+0x6d0/0x1910 [ 1135.593317][T23129] __se_sys_fcntl+0xc8/0x150 [ 1135.599454][T23129] do_syscall_64+0xfa/0xfa0 [ 1135.605506][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.612944][T23129] INITIAL READ USE at: [ 1135.617256][T23129] lock_acquire+0x120/0x360 [ 1135.623740][T23129] _raw_read_lock_irqsave+0xaf/0x100 [ 1135.631008][T23129] send_sigio+0x38/0x370 [ 1135.637239][T23129] kill_fasync+0x24d/0x4d0 [ 1135.643645][T23129] lease_break_callback+0x26/0x30 [ 1135.650657][T23129] __break_lease+0x6a5/0x1620 [ 1135.657316][T23129] vfs_truncate+0x428/0x520 [ 1135.663833][T23129] do_sys_truncate+0xdb/0x190 [ 1135.670498][T23129] __x64_sys_truncate+0x5b/0x70 [ 1135.677333][T23129] do_syscall_64+0xfa/0xfa0 [ 1135.683821][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.691704][T23129] } [ 1135.694193][T23129] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1135.703030][T23129] ... acquired at: [ 1135.706813][T23129] lock_acquire+0x120/0x360 [ 1135.711469][T23129] _raw_read_lock_irqsave+0xaf/0x100 [ 1135.716911][T23129] send_sigio+0x38/0x370 [ 1135.721328][T23129] kill_fasync+0x24d/0x4d0 [ 1135.725900][T23129] lease_break_callback+0x26/0x30 [ 1135.731086][T23129] __break_lease+0x6a5/0x1620 [ 1135.735922][T23129] vfs_truncate+0x428/0x520 [ 1135.740586][T23129] do_sys_truncate+0xdb/0x190 [ 1135.745423][T23129] __x64_sys_truncate+0x5b/0x70 [ 1135.750432][T23129] do_syscall_64+0xfa/0xfa0 [ 1135.755093][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.761139][T23129] [ 1135.763446][T23129] [ 1135.763446][T23129] the dependencies between the lock to be acquired [ 1135.763455][T23129] and SOFTIRQ-irq-unsafe lock: [ 1135.776931][T23129] -> (tasklist_lock){.+.+}-{3:3} { [ 1135.782041][T23129] HARDIRQ-ON-R at: [ 1135.786000][T23129] lock_acquire+0x120/0x360 [ 1135.792133][T23129] _raw_read_lock+0x36/0x50 [ 1135.798270][T23129] __do_wait+0xde/0x740 [ 1135.804062][T23129] do_wait+0x1f8/0x510 [ 1135.809769][T23129] kernel_wait+0xab/0x170 [ 1135.815732][T23129] call_usermodehelper_exec_work+0xbe/0x230 [ 1135.823256][T23129] process_scheduled_works+0xae1/0x17b0 [ 1135.830434][T23129] worker_thread+0x8a0/0xda0 [ 1135.836658][T23129] kthread+0x711/0x8a0 [ 1135.842362][T23129] ret_from_fork+0x4bc/0x870 [ 1135.848586][T23129] ret_from_fork_asm+0x1a/0x30 [ 1135.854980][T23129] SOFTIRQ-ON-R at: [ 1135.858941][T23129] lock_acquire+0x120/0x360 [ 1135.865075][T23129] _raw_read_lock+0x36/0x50 [ 1135.871214][T23129] __do_wait+0xde/0x740 [ 1135.877009][T23129] do_wait+0x1f8/0x510 [ 1135.882719][T23129] kernel_wait+0xab/0x170 [ 1135.888687][T23129] call_usermodehelper_exec_work+0xbe/0x230 [ 1135.896225][T23129] process_scheduled_works+0xae1/0x17b0 [ 1135.903411][T23129] worker_thread+0x8a0/0xda0 [ 1135.909635][T23129] kthread+0x711/0x8a0 [ 1135.915347][T23129] ret_from_fork+0x4bc/0x870 [ 1135.921568][T23129] ret_from_fork_asm+0x1a/0x30 [ 1135.927970][T23129] INITIAL USE at: [ 1135.931854][T23129] lock_acquire+0x120/0x360 [ 1135.937908][T23129] _raw_write_lock_irq+0xa2/0xf0 [ 1135.944392][T23129] copy_process+0x224f/0x3c00 [ 1135.950617][T23129] kernel_clone+0x21e/0x840 [ 1135.956671][T23129] user_mode_thread+0xdd/0x140 [ 1135.962986][T23129] rest_init+0x23/0x300 [ 1135.968688][T23129] start_kernel+0x3ae/0x410 [ 1135.974741][T23129] x86_64_start_reservations+0x24/0x30 [ 1135.981747][T23129] x86_64_start_kernel+0x143/0x1c0 [ 1135.988402][T23129] common_startup_64+0x13e/0x147 [ 1135.994891][T23129] INITIAL READ USE at: [ 1135.999202][T23129] lock_acquire+0x120/0x360 [ 1136.005681][T23129] _raw_read_lock+0x36/0x50 [ 1136.012168][T23129] __do_wait+0xde/0x740 [ 1136.018306][T23129] do_wait+0x1f8/0x510 [ 1136.024357][T23129] kernel_wait+0xab/0x170 [ 1136.030670][T23129] call_usermodehelper_exec_work+0xbe/0x230 [ 1136.038547][T23129] process_scheduled_works+0xae1/0x17b0 [ 1136.046074][T23129] worker_thread+0x8a0/0xda0 [ 1136.052644][T23129] kthread+0x711/0x8a0 [ 1136.058699][T23129] ret_from_fork+0x4bc/0x870 [ 1136.065268][T23129] ret_from_fork_asm+0x1a/0x30 [ 1136.072013][T23129] } [ 1136.074494][T23129] ... key at: [] tasklist_lock+0x18/0x40 [ 1136.082280][T23129] ... acquired at: [ 1136.086062][T23129] lock_acquire+0x120/0x360 [ 1136.090728][T23129] _raw_read_lock+0x36/0x50 [ 1136.095386][T23129] send_sigio+0x101/0x370 [ 1136.099873][T23129] dnotify_handle_event+0x169/0x440 [ 1136.105231][T23129] fsnotify+0x1671/0x1a80 [ 1136.109712][T23129] __fsnotify_parent+0x3fe/0x540 [ 1136.114802][T23129] notify_change+0xc55/0xf40 [ 1136.119552][T23129] file_remove_privs_flags+0x38d/0x5f0 [ 1136.125169][T23129] shmem_file_write_iter+0xa7/0x120 [ 1136.130538][T23129] vfs_write+0x5c9/0xb30 [ 1136.134953][T23129] ksys_write+0x145/0x250 [ 1136.139440][T23129] do_syscall_64+0xfa/0xfa0 [ 1136.144100][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.150157][T23129] [ 1136.152469][T23129] [ 1136.152469][T23129] stack backtrace: [ 1136.158343][T23129] CPU: 1 UID: 0 PID: 23129 Comm: syz.0.4847 Not tainted syzkaller #0 PREEMPT(full) [ 1136.158361][T23129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1136.158371][T23129] Call Trace: [ 1136.158379][T23129] [ 1136.158387][T23129] dump_stack_lvl+0x189/0x250 [ 1136.158410][T23129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1136.158429][T23129] ? __pfx__printk+0x10/0x10 [ 1136.158447][T23129] validate_chain+0x1f05/0x2140 [ 1136.158470][T23129] __lock_acquire+0xab9/0xd20 [ 1136.158486][T23129] ? send_sigio+0x101/0x370 [ 1136.158502][T23129] lock_acquire+0x120/0x360 [ 1136.158514][T23129] ? send_sigio+0x101/0x370 [ 1136.158531][T23129] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1136.158548][T23129] ? dnotify_handle_event+0x62/0x440 [ 1136.158567][T23129] _raw_read_lock+0x36/0x50 [ 1136.158582][T23129] ? send_sigio+0x101/0x370 [ 1136.158597][T23129] send_sigio+0x101/0x370 [ 1136.158614][T23129] dnotify_handle_event+0x169/0x440 [ 1136.158634][T23129] fsnotify+0x1671/0x1a80 [ 1136.158648][T23129] ? take_dentry_name_snapshot+0x157/0x500 [ 1136.158666][T23129] ? fsnotify+0x735/0x1a80 [ 1136.158679][T23129] ? __pfx_fsnotify+0x10/0x10 [ 1136.158698][T23129] ? take_dentry_name_snapshot+0x29/0x500 [ 1136.158714][T23129] __fsnotify_parent+0x3fe/0x540 [ 1136.158729][T23129] ? __pfx___fsnotify_parent+0x10/0x10 [ 1136.158745][T23129] ? fsnotify_change+0x228/0x2c0 [ 1136.158764][T23129] notify_change+0xc55/0xf40 [ 1136.158785][T23129] file_remove_privs_flags+0x38d/0x5f0 [ 1136.158802][T23129] ? shmem_file_write_iter+0x7f/0x120 [ 1136.158823][T23129] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 1136.158844][T23129] ? generic_write_checks+0xc8/0x110 [ 1136.158860][T23129] shmem_file_write_iter+0xa7/0x120 [ 1136.158880][T23129] vfs_write+0x5c9/0xb30 [ 1136.158900][T23129] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1136.158920][T23129] ? __pfx_vfs_write+0x10/0x10 [ 1136.158941][T23129] ? __fget_files+0x2a/0x420 [ 1136.158957][T23129] ksys_write+0x145/0x250 [ 1136.158977][T23129] ? __pfx_ksys_write+0x10/0x10 [ 1136.158996][T23129] ? do_syscall_64+0xbe/0xfa0 [ 1136.159015][T23129] do_syscall_64+0xfa/0xfa0 [ 1136.159033][T23129] ? lockdep_hardirqs_on+0x9c/0x150 [ 1136.159049][T23129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.159064][T23129] ? clear_bhb_loop+0x60/0xb0 [ 1136.159080][T23129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.159094][T23129] RIP: 0033:0x7f964d78efc9 [ 1136.159108][T23129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.159121][T23129] RSP: 002b:00007f964e543038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1136.159138][T23129] RAX: ffffffffffffffda RBX: 00007f964d9e5fa0 RCX: 00007f964d78efc9 [ 1136.159149][T23129] RDX: 000000000000000b RSI: 0000200000000080 RDI: 0000000000000004 [ 1136.159158][T23129] RBP: 00007f964d811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1136.159167][T23129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.159176][T23129] R13: 00007f964d9e6038 R14: 00007f964d9e5fa0 R15: 00007f964db0fa28 [ 1136.159192][T23129] [ 1136.578203][T23128] syzkaller0: entered promiscuous mode [ 1136.583866][T23128] syzkaller0: entered allmulticast mode