last executing test programs: 6.272822782s ago: executing program 3 (id=4197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) 6.132067061s ago: executing program 3 (id=4198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x40, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_NEW(r3, 0x0, 0x0) 5.23747425s ago: executing program 1 (id=4203): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x2000, 0x0, 0x7}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x6}}}}}}, 0x0) 5.079780892s ago: executing program 4 (id=4204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)={0x4}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) 5.013455298s ago: executing program 1 (id=4205): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000440)={0x40, 0x17, 0x4, "3def448c"}, 0x0, 0x0}) 4.928313109s ago: executing program 3 (id=4206): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="09082bbd7000fedbdf251600000008000300", @ANYRES32], 0x34}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) socket$unix(0x1, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4.721209792s ago: executing program 2 (id=4207): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002h\x00', @ANYRES32=r1], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) 3.649268162s ago: executing program 4 (id=4208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000002080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f2a400000c2f00fe880000000000000000000000000001fe8000000000000000000000000000aa34"], 0x0) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x418180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x2, @vbi={0x97, 0x3, 0x101, 0x56544943, [0x6, 0x3], [0x2, 0x10000], 0x1}}) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000480)="46de06e33d8a61c19c274e33bb10a593764754749aa625d086a76f50fbf94064f61c294c87d825a59bc97bacb947eda054516cba33716d7fbdb94788b0c34f3e0bf11d0d0ee9826dbe36770ebd5b5bde4522aebe018e3bcc97f1a1bc8f3a8de5a26bca9debe77df961c30e8e569c0e9afb80ad5ae66c65ad9ce739cf044a4654b07c32d003dbca347d97297dc11f62b89cd7b12c2f9d17fb8d8bdd65d0a01e246addd421337f3afc30a4a6e828e06dbd6a38376430d0b56f945df924deed32497723ca20849ab22d34cdadba5c592f56d12d3666ae746961754a4b388d6370909a09102c", 0xe4}], 0x1, 0x6, 0x6) socket(0x22, 0x2, 0x21) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0xa00000000000000, 0x12) 3.648739041s ago: executing program 3 (id=4209): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x25}}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0xfffd, @broadcast}}]}, 0x80}}, 0x0) 3.624748613s ago: executing program 2 (id=4210): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100260e7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="26003300b098030008021100000108021100000050505050505057f9"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 3.518541592s ago: executing program 2 (id=4211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000dd4ecc33d4ae0a235b7f329b0e96144e3ff293750a0d03fd"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) 2.529423205s ago: executing program 1 (id=4212): r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.301378498s ago: executing program 1 (id=4213): r0 = io_uring_setup(0x21c8, &(0x7f0000000040)={0x0, 0xfdcb, 0xc1, 0x1, 0x36d}) vmsplice(r0, 0x0, 0x0, 0xc) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 2.145276789s ago: executing program 0 (id=4214): fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) fcntl$setstatus(r1, 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047454, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x7) 2.020214381s ago: executing program 3 (id=4215): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x20000253) 2.011310237s ago: executing program 2 (id=4216): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8085) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 1.940763514s ago: executing program 0 (id=4217): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.797505599s ago: executing program 3 (id=4218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1401000000010104ee45000000000000020000003c0001802c00018014000300fc01000000000000000000000000000014000400fe8800000000000000000000000000010c000280050001002100bb05ee550280060003010003000006000340000000000c00028005000100060000009c000e802c000180140003002001000000000000000000000000000114000400fc01000000000000000000000000000106000340000300001400018008000100e0000002080002006401010006000340000400000c000280050001002f0000000c00028005000100210000001400018008000100ac14143108000200e000000114000180080001006401010308000200ac1414"], 0x114}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc0402, 0x2bd) write$tcp_mem(r1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = memfd_create(0x0, 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0xa) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r10, 0x0, 0x10003, 0x0) readv(r9, &(0x7f00000000c0), 0x0) write$binfmt_elf64(r8, 0x0, 0x10034) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x880}}) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x3e) sendto$inet(r3, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.782826061s ago: executing program 2 (id=4219): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) dup(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) ppoll(&(0x7f0000000080)=[{r5, 0x202}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000b40), 0x0) 1.656766211s ago: executing program 4 (id=4220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$can_raw(r1, &(0x7f0000000200), 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 805.21144ms ago: executing program 0 (id=4221): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 581.534685ms ago: executing program 1 (id=4222): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 509.691099ms ago: executing program 0 (id=4223): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x12) 365.4564ms ago: executing program 1 (id=4224): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) 357.690194ms ago: executing program 0 (id=4225): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 299.442071ms ago: executing program 2 (id=4226): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioperm(0x284, 0x7f, 0xe3) setrlimit(0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) 185.291383ms ago: executing program 4 (id=4227): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0xe]}, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x80}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 181.195407ms ago: executing program 0 (id=4228): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf, 0xf}, {}, {0x10, 0x2}}}, 0x24}}, 0x0) 110.421214ms ago: executing program 4 (id=4229): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001e7"], 0x24}}, 0x8d0) 0s ago: executing program 4 (id=4230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) kernel console output (not intermixed with test programs): er 112 using dummy_hcd [ 1016.275619][ T5885] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1016.333334][ T24] usb 3-1: USB disconnect, device number 124 [ 1016.424739][T20393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.440373][T20393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.458797][T20393] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.508695][T20393] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.525643][T20393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.578119][T20393] usb 1-1: config 0 descriptor?? [ 1016.583351][ T5885] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1016.616411][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3828'. [ 1016.764192][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1016.771238][ T24] usb 5-1: USB disconnect, device number 10 [ 1016.785526][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1016.838323][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1016.975719][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1016.997226][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.042512][T20393] plantronics 0003:047F:FFFF.008A: No inputs registered, leaving [ 1017.052447][ T5885] usb 4-1: Product: syz [ 1017.061685][ T5885] usb 4-1: Manufacturer: syz [ 1017.068382][ T5885] usb 4-1: SerialNumber: syz [ 1017.086010][T20393] plantronics 0003:047F:FFFF.008A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1017.105700][ T5885] usb 4-1: config 0 descriptor?? [ 1017.126034][ T5885] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1017.178663][ T5885] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1017.251481][ T24] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1017.294450][T22626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.311910][T22626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.344930][ T47] usb 1-1: USB disconnect, device number 112 [ 1017.416119][ T24] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1017.432167][ T24] usb 3-1: config 0 has no interface number 0 [ 1017.438446][ T24] usb 3-1: config 0 interface 122 has no altsetting 0 [ 1017.453262][ T24] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1017.462879][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.474104][ T24] usb 3-1: Product: syz [ 1017.478557][ T24] usb 3-1: Manufacturer: syz [ 1017.484914][ T24] usb 3-1: SerialNumber: syz [ 1017.508978][ T24] usb 3-1: config 0 descriptor?? [ 1017.734617][ T5885] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1017.742724][ T5885] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1017.845940][T22631] ALSA: mixer_oss: invalid index 40000 [ 1017.856788][T20393] usb 2-1: USB disconnect, device number 99 [ 1018.071143][T16070] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1018.164702][T22633] netlink: 'syz.3.3826': attribute type 1 has an invalid length. [ 1018.172845][T22633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1018.200496][ T5885] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1018.208654][ T5885] em28xx 4-1:0.0: No AC97 audio processor [ 1018.237634][ T5885] usb 4-1: USB disconnect, device number 122 [ 1018.247074][ T5885] em28xx 4-1:0.0: Disconnecting em28xx [ 1018.258453][ T5885] em28xx 4-1:0.0: Freeing device [ 1018.286560][T16070] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1018.307024][T16070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.338061][T16070] usb 5-1: Product: syz [ 1018.343155][T16070] usb 5-1: Manufacturer: syz [ 1018.347792][T16070] usb 5-1: SerialNumber: syz [ 1018.365317][T16070] usb 5-1: config 0 descriptor?? [ 1018.517769][ T5885] usb 3-1: USB disconnect, device number 125 [ 1018.541689][ T5885] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1018.752538][ T5884] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1018.847785][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1018.847803][ T30] audit: type=1326 audit(1746931510.313:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1018.921241][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1018.946797][ T30] audit: type=1326 audit(1746931510.343:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1018.956357][ T5884] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1018.992051][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3831'. [ 1019.002462][ T5887] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1019.021322][ T30] audit: type=1326 audit(1746931510.343:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.074938][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.102831][ T5884] usb 2-1: Product: syz [ 1019.113381][ T30] audit: type=1326 audit(1746931510.343:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.137011][ T5884] usb 2-1: Manufacturer: syz [ 1019.141689][ T5884] usb 2-1: SerialNumber: syz [ 1019.159762][ T5884] usb 2-1: config 0 descriptor?? [ 1019.227669][ T30] audit: type=1326 audit(1746931510.343:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.228108][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 1019.249814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1019.302764][ T30] audit: type=1326 audit(1746931510.343:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.329087][ T30] audit: type=1326 audit(1746931510.343:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.356107][ T30] audit: type=1326 audit(1746931510.353:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.386170][ T30] audit: type=1326 audit(1746931510.363:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.408559][ T30] audit: type=1326 audit(1746931510.493:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22647 comm="syz.4.3831" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 1019.432917][ T5887] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.448877][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3840'. [ 1019.451039][ T5887] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1019.482405][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1019.498639][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.591068][ T5885] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1019.761720][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.795313][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.806713][ T5885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1019.816791][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1019.827029][ T5884] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input120 [ 1019.827974][ T5885] usb 4-1: SerialNumber: syz [ 1020.062902][T22662] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1020.074537][ T5885] usb 4-1: 0:2 : does not exist [ 1020.095400][T22662] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3836'. [ 1020.181695][ T5884] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1020.191284][ T5885] usb 4-1: USB disconnect, device number 123 [ 1020.218541][ T24] usb 2-1: USB disconnect, device number 100 [ 1020.324379][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.383408][ T5884] usb 3-1: config index 0 descriptor too short (expected 32804, got 36) [ 1020.406557][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1020.424536][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1020.440348][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1020.457352][ T5884] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1020.468860][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.480718][ T5884] usb 3-1: Product: syz [ 1020.481061][T16070] usb 5-1: Firmware version (0.0) predates our first public release. [ 1020.485573][ T5884] usb 3-1: Manufacturer: syz [ 1020.504312][ T5884] usb 3-1: SerialNumber: syz [ 1020.505877][T16070] usb 5-1: Please update to version 0.2 or newer [ 1020.517659][ T5884] usb 3-1: config 0 descriptor?? [ 1020.529292][T22678] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1020.548868][T22678] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1020.563976][ T5884] usb 3-1: ucan: probing device on interface #0 [ 1020.585885][T16070] usb 5-1: USB disconnect, device number 11 [ 1020.984597][ T5884] usb 3-1: ucan: device reported invalid device info [ 1020.992086][ T5884] usb 3-1: ucan: probe failed; try to update the device firmware [ 1021.031144][ T47] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1021.091102][ T5887] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1021.164825][ T47] usb 4-1: device descriptor read/64, error -71 [ 1021.244920][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.256968][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1021.270182][ T5887] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1021.279871][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1021.289251][ T5887] usb 2-1: SerialNumber: syz [ 1021.411343][ T47] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1021.461149][T16070] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1021.507343][ T5887] usb 2-1: 0:2 : does not exist [ 1021.534450][ T5887] usb 2-1: USB disconnect, device number 101 [ 1021.544223][ T47] usb 4-1: device descriptor read/64, error -71 [ 1021.580075][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.645820][T16070] usb 5-1: config index 0 descriptor too short (expected 32804, got 36) [ 1021.655093][T16070] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1021.664724][ T47] usb usb4-port1: attempt power cycle [ 1021.676954][T16070] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1021.689280][T16070] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1021.706975][T16070] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1021.723853][T16070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.728129][ T5884] usb 1-1: USB disconnect, device number 113 [ 1021.734411][T16070] usb 5-1: Product: syz [ 1021.746333][T16070] usb 5-1: Manufacturer: syz [ 1021.755210][T16070] usb 5-1: SerialNumber: syz [ 1021.762763][T16070] usb 5-1: config 0 descriptor?? [ 1021.770331][T22690] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1021.783463][T22690] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1021.806777][T16070] usb 5-1: ucan: probing device on interface #0 [ 1022.051039][ T47] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1022.071935][ T47] usb 4-1: device descriptor read/8, error -71 [ 1022.209222][T16070] usb 5-1: ucan: device reported invalid device info [ 1022.222737][T16070] usb 5-1: ucan: probe failed; try to update the device firmware [ 1022.312741][ T47] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1022.345060][ T47] usb 4-1: device descriptor read/8, error -71 [ 1022.401145][ T5887] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1022.463528][ T47] usb usb4-port1: unable to enumerate USB device [ 1022.551443][T16070] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1022.581076][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 1022.589598][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1022.601716][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1022.615371][ T5887] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1022.625212][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.633358][ T5887] usb 2-1: Product: syz [ 1022.637693][ T5887] usb 2-1: Manufacturer: syz [ 1022.642495][ T5887] usb 2-1: SerialNumber: syz [ 1022.649543][ T5887] usb 2-1: config 0 descriptor?? [ 1022.659749][ T5887] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1022.669100][ T5887] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1022.723045][T16070] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1022.732559][T16070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.743983][T16070] usb 1-1: config 0 descriptor?? [ 1022.817016][ T5886] usb 3-1: USB disconnect, device number 126 [ 1022.955856][T16070] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1022.965706][T16070] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1022.988273][T16070] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1022.996796][T16070] [drm] Initialized udl on minor 2 [ 1023.175950][T16070] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1023.185792][T16070] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1023.230788][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1023.234388][ T47] usb 1-1: USB disconnect, device number 114 [ 1023.253910][ T5886] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1023.265783][ T5887] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1023.272654][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1023.282596][ T5887] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1023.441155][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1023.451789][ T5886] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1023.461279][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.469339][ T5886] usb 3-1: Product: syz [ 1023.473853][ T5886] usb 3-1: Manufacturer: syz [ 1023.478491][ T5886] usb 3-1: SerialNumber: syz [ 1023.487503][ T5886] usb 3-1: config 0 descriptor?? [ 1023.500054][ T5886] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1023.701254][T22699] netlink: 'syz.1.3849': attribute type 1 has an invalid length. [ 1023.709105][T22699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1023.716422][T22699] IPv6: NLM_F_CREATE should be set when creating new route [ 1023.729390][ T5887] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1023.741001][ T5887] em28xx 2-1:0.0: No AC97 audio processor [ 1023.755877][ T5887] usb 2-1: USB disconnect, device number 102 [ 1023.765475][ T5887] em28xx 2-1:0.0: Disconnecting em28xx [ 1023.787491][ T5887] em28xx 2-1:0.0: Freeing device [ 1023.909658][ T5886] gspca_stk1135: reg_w 0x0 err -71 [ 1023.932824][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.939260][ T5886] gspca_stk1135: Sensor write failed [ 1023.954632][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.963533][ T5886] gspca_stk1135: Sensor write failed [ 1023.968885][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.977620][ T5886] gspca_stk1135: Sensor read failed [ 1023.985201][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1023.997645][ T5886] gspca_stk1135: Sensor read failed [ 1024.005286][ T5886] gspca_stk1135: Detected sensor type unknown (0x0) [ 1024.013745][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1024.023872][ T5886] gspca_stk1135: Sensor read failed [ 1024.030672][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1024.043791][ T5886] gspca_stk1135: Sensor read failed [ 1024.049267][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1024.056532][ T5886] gspca_stk1135: Sensor write failed [ 1024.065108][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1024.072559][ T5886] gspca_stk1135: Sensor write failed [ 1024.078050][ T5886] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1024.092462][ T5886] usb 3-1: USB disconnect, device number 127 [ 1024.152351][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1024.224372][T16070] usb 5-1: USB disconnect, device number 12 [ 1024.294445][T22712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1024.301259][ T5884] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1024.311935][T22712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3855'. [ 1024.329056][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.347533][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1024.367279][ T47] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1024.380489][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1024.390300][ T47] usb 4-1: SerialNumber: syz [ 1024.491436][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1024.507587][ T5884] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1024.562265][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.570343][ T5884] usb 1-1: Product: syz [ 1024.575130][ T5884] usb 1-1: Manufacturer: syz [ 1024.579831][ T5884] usb 1-1: SerialNumber: syz [ 1024.595969][ T5884] usb 1-1: config 0 descriptor?? [ 1024.616228][ T47] usb 4-1: 0:2 : does not exist [ 1024.624727][ T5884] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1024.670584][ T5884] usb 1-1: setting power ON [ 1024.690742][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 1024.711090][T16070] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1024.714012][ T47] usb 4-1: USB disconnect, device number 2 [ 1024.730167][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1024.749717][ T5886] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1024.761582][ T5884] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1024.788952][ T5884] usb 1-1: media controller created [ 1024.820847][T22710] dvb-usb: bulk message failed: -22 (3/0) [ 1024.826758][T22710] usb 1-1: gpio_write failed. [ 1024.834692][T22710] dvb-usb: bulk message failed: -22 (3/0) [ 1024.845691][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1024.898994][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1024.931365][T16070] usb 5-1: Using ep0 maxpacket: 8 [ 1024.955506][T16070] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1024.976978][ T5884] usb 1-1: selecting invalid altsetting 6 [ 1024.982236][T16070] usb 5-1: config 0 has no interface number 0 [ 1024.989858][ T5886] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.001312][ T5886] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1025.022431][T16070] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1025.032841][ T5884] usb 1-1: digital interface selection failed (-22) [ 1025.039477][ T5884] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1025.041670][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.069712][T16070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.091907][ T5884] usb 1-1: setting power OFF [ 1025.096560][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 1025.100808][T16070] usb 5-1: Product: syz [ 1025.117610][ T5884] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1025.121003][T16070] usb 5-1: Manufacturer: syz [ 1025.135842][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.151432][ T5884] (NULL device *): no alternate interface [ 1025.157869][T16070] usb 5-1: SerialNumber: syz [ 1025.224776][T16070] usb 5-1: config 0 descriptor?? [ 1025.416733][ T5884] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1025.432376][ T1208] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1025.450059][T16070] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1025.459630][ T5884] usb 1-1: USB disconnect, device number 115 [ 1025.498448][T16070] usb 5-1: Failed to initialize entity for entity 6 [ 1025.530183][T16070] usb 5-1: Failed to register entities (-22). [ 1025.615011][ T1208] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1025.623606][ T1208] usb 3-1: config 0 has no interface number 0 [ 1025.645601][ T1208] usb 3-1: config 0 interface 122 has no altsetting 0 [ 1025.673230][ T1208] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1025.688631][T16070] usb 5-1: USB disconnect, device number 13 [ 1025.691130][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.717292][ T1208] usb 3-1: Product: syz [ 1025.726475][ T1208] usb 3-1: Manufacturer: syz [ 1025.744274][ T1208] usb 3-1: SerialNumber: syz [ 1025.766395][ T1208] usb 3-1: config 0 descriptor?? [ 1026.011151][ T5884] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1026.019183][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1026.182774][ T5884] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1026.193029][ T5884] usb 1-1: config 0 has no interface number 0 [ 1026.199428][ T5884] usb 1-1: config 0 interface 122 has no altsetting 0 [ 1026.208045][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.230979][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.248719][ T5884] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1026.265881][ T47] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1026.276630][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.295945][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.305194][ T5884] usb 1-1: Product: syz [ 1026.309356][ T5884] usb 1-1: Manufacturer: syz [ 1026.317773][ T5885] usb 3-1: USB disconnect, device number 2 [ 1026.324424][ T47] usb 4-1: config 0 descriptor?? [ 1026.329422][ T5884] usb 1-1: SerialNumber: syz [ 1026.350782][ T5885] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1026.369895][ T5884] usb 1-1: config 0 descriptor?? [ 1026.447867][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 1026.457233][T22736] netlink: 'syz.4.3864': attribute type 2 has an invalid length. [ 1026.468460][T22736] netlink: 'syz.4.3864': attribute type 1 has an invalid length. [ 1026.481117][T22736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 1026.914268][T22739] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1026.941221][T22739] netlink: 'syz.2.3865': attribute type 21 has an invalid length. [ 1026.950799][T22739] netlink: 'syz.2.3865': attribute type 6 has an invalid length. [ 1026.960557][T22739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1026.979545][T22734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.999755][T22734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.022268][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1027.049935][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1027.075125][T22734] netlink: 'syz.3.3862': attribute type 18 has an invalid length. [ 1027.137113][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3862'. [ 1027.179408][T16070] usb 1-1: USB disconnect, device number 116 [ 1027.186245][T16070] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1027.428565][ T1208] usb 2-1: USB disconnect, device number 103 [ 1027.451856][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1027.613239][ T5885] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1027.626043][ T5885] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1027.646254][ T5885] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 1027.657400][ T5885] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1027.676988][ T5885] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1027.686219][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.777104][ T47] uclogic 0003:256C:006D.008B: v1 frame probing failed: -71 [ 1027.815006][ T47] uclogic 0003:256C:006D.008B: failed probing parameters: -71 [ 1027.856327][ T47] uclogic 0003:256C:006D.008B: probe with driver uclogic failed with error -71 [ 1027.916151][ T5885] ath6kl: Failed to submit usb control message: -71 [ 1027.938326][ T47] usb 4-1: USB disconnect, device number 3 [ 1027.941957][ T5885] ath6kl: unable to send the bmi data to the device: -71 [ 1027.987291][ T5885] ath6kl: Unable to send get target info: -71 [ 1028.018098][ T5885] ath6kl: Failed to init ath6kl core: -71 [ 1028.066262][ T5885] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1028.126913][ T5885] usb 5-1: USB disconnect, device number 14 [ 1028.421203][T16070] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1028.502405][ T5887] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1028.591594][T16070] usb 1-1: Using ep0 maxpacket: 8 [ 1028.598954][T16070] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1028.608051][T16070] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1028.617065][T16070] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.629229][T16070] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1028.638423][T16070] usb 1-1: config 250 has no interface number 0 [ 1028.641162][ T1208] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 1028.645033][T16070] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1028.662942][T16070] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1028.674812][T16070] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1028.688500][T16070] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1028.695648][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 1028.702956][T16070] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1028.712244][T16070] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1028.720767][T16070] usb 1-1: Product: syz [ 1028.725247][T16070] usb 1-1: SerialNumber: syz [ 1028.737048][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1028.747484][T16070] hub 1-1:250.228: bad descriptor, ignoring hub [ 1028.756037][ T5887] usb 3-1: config 0 has no interface number 0 [ 1028.762365][T16070] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1028.772688][ T5887] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1028.782075][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.790093][ T5887] usb 3-1: Product: syz [ 1028.794747][ T5887] usb 3-1: Manufacturer: syz [ 1028.799412][ T5887] usb 3-1: SerialNumber: syz [ 1028.807254][ T5887] usb 3-1: config 0 descriptor?? [ 1028.812499][ T5885] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1028.825570][ T1208] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1028.826431][ T5887] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1028.838002][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.845585][ T5887] usb 3-1: selecting invalid altsetting 1 [ 1028.859582][ T5887] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1028.876486][ T5887] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1028.877133][ T1208] usb 2-1: config 0 descriptor?? [ 1028.887921][ T5887] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1028.904845][ T5887] usb 3-1: media controller created [ 1028.933617][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1028.959783][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1028.979774][T16070] usblp 1-1:250.228: usblp0: USB Unidirectional printer dev 117 if 228 alt 255 proto 1 vid 0x0525 pid 0xD292 [ 1028.991967][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 1029.010587][ T5885] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1029.021189][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.033023][ T5885] usb 5-1: Product: syz [ 1029.038552][ T5885] usb 5-1: Manufacturer: syz [ 1029.043927][ T5885] usb 5-1: SerialNumber: syz [ 1029.058236][ T5885] usb 5-1: config 0 descriptor?? [ 1029.083599][ T5885] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1029.105648][ T1208] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1029.122783][ T1208] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1029.174567][ T1208] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1029.201206][ T1208] [drm] Initialized udl on minor 2 [ 1029.246151][ T5887] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1029.298001][ T5887] usb 3-1: USB disconnect, device number 3 [ 1029.337435][ T1208] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1029.382412][ T1208] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1029.401319][ T5884] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1029.409351][ T5884] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1029.428224][ T5892] usb 1-1: USB disconnect, device number 117 [ 1029.434428][ T1208] usb 2-1: USB disconnect, device number 104 [ 1029.441070][T16070] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1029.453239][ T5892] usblp0: removed [ 1029.489325][ T5885] gspca_stk1135: reg_w 0x0 err -71 [ 1029.509238][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.526339][ T5885] gspca_stk1135: Sensor write failed [ 1029.543786][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.566637][ T5885] gspca_stk1135: Sensor write failed [ 1029.573239][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.580440][ T5885] gspca_stk1135: Sensor read failed [ 1029.590220][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.597895][ T5885] gspca_stk1135: Sensor read failed [ 1029.607738][ T5885] gspca_stk1135: Detected sensor type unknown (0x0) [ 1029.615334][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.623094][ T5885] gspca_stk1135: Sensor read failed [ 1029.628638][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.636204][T16070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.647328][ T5885] gspca_stk1135: Sensor read failed [ 1029.655586][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.662109][T16070] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.672196][ T5885] gspca_stk1135: Sensor write failed [ 1029.677596][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1029.684085][T16070] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1029.693316][ T5885] gspca_stk1135: Sensor write failed [ 1029.698743][ T5885] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1029.706772][T16070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.719096][T16070] usb 4-1: config 0 descriptor?? [ 1029.729413][ T5885] usb 5-1: USB disconnect, device number 15 [ 1030.147911][T22768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.165332][T22768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.245095][T22768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.269854][T22768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.298975][T22768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1030.319678][T22768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1030.335935][T22779] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1030.365687][T22779] netlink: 'syz.4.3880': attribute type 21 has an invalid length. [ 1030.376638][T22779] netlink: 'syz.4.3880': attribute type 6 has an invalid length. [ 1030.391780][T22779] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1030.392670][T16070] usbhid 4-1:0.0: can't add hid device: -71 [ 1030.412152][T16070] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1030.444823][T16070] usb 4-1: USB disconnect, device number 4 [ 1030.451039][ T5892] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1030.461051][ T5885] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1030.468817][T20393] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1030.581103][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1030.623694][ T5885] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1030.641089][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.665621][T20393] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.679290][ T5885] usb 1-1: config 0 descriptor?? [ 1030.703648][T20393] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1030.714377][T20393] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.725298][T20393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.832368][ T5892] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1030.908333][ T5885] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1030.917822][ T5885] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1030.952085][ T5885] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1030.969190][ T5885] [drm] Initialized udl on minor 2 [ 1030.971418][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1031.002594][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1031.012109][T22782] netlink: 'syz.3.3881': attribute type 2 has an invalid length. [ 1031.020360][T22782] netlink: 'syz.3.3881': attribute type 1 has an invalid length. [ 1031.028597][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'. [ 1031.091399][ T5892] usb usb2-port1: attempt power cycle [ 1031.132727][ T5885] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1031.146307][ T5885] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1031.160150][T20393] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1031.183047][T20393] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1031.197325][ T5885] usb 1-1: USB disconnect, device number 118 [ 1031.212058][T20393] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1031.276509][T22785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1031.290977][T22785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1031.435293][ T5892] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1031.463084][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1031.633556][T22790] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3884'. [ 1031.711748][ T5892] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1031.741687][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1031.861795][ T5892] usb usb2-port1: unable to enumerate USB device [ 1031.941257][T20393] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1032.051143][ T5885] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1032.118195][T20393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.143160][T20393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.155211][T20393] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1032.187007][T20393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.203846][T20393] usb 4-1: config 0 descriptor?? [ 1032.215981][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.227316][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1032.263337][ T5885] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1032.333585][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1032.342341][ T5885] usb 1-1: SerialNumber: syz [ 1032.575307][ T5885] usb 1-1: 0:2 : does not exist [ 1032.697449][ T5885] usb 1-1: USB disconnect, device number 119 [ 1032.740777][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.864189][T22792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.901905][T22792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.932883][T22792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1032.942665][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1032.954826][T22792] netlink: 'syz.3.3885': attribute type 18 has an invalid length. [ 1033.217007][ T5892] usb 3-1: USB disconnect, device number 4 [ 1033.471134][T16070] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1033.519096][T22811] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1033.548314][T22811] netlink: 'syz.4.3892': attribute type 21 has an invalid length. [ 1033.556687][T22811] netlink: 'syz.4.3892': attribute type 6 has an invalid length. [ 1033.570411][T20393] uclogic 0003:256C:006D.008C: v1 frame probing failed: -71 [ 1033.578143][T20393] uclogic 0003:256C:006D.008C: failed probing parameters: -71 [ 1033.589980][T20393] uclogic 0003:256C:006D.008C: probe with driver uclogic failed with error -71 [ 1033.604755][T20393] usb 4-1: USB disconnect, device number 5 [ 1033.632751][T16070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.644046][T16070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.655059][T16070] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.669851][T16070] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.681055][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1033.684445][T16070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.699572][T16070] usb 1-1: config 0 descriptor?? [ 1033.741147][ T5886] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1033.833460][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.845906][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.857286][ T5892] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1033.866406][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.887304][ T5892] usb 3-1: config 0 descriptor?? [ 1033.891137][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 1033.912460][ T5886] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1033.925527][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.935447][T16070] usbhid 1-1:0.0: can't add hid device: -71 [ 1033.946933][ T5886] usb 2-1: Product: syz [ 1033.956374][T16070] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1033.966072][ T5886] usb 2-1: Manufacturer: syz [ 1033.970697][ T5886] usb 2-1: SerialNumber: syz [ 1033.982064][T16070] usb 1-1: USB disconnect, device number 120 [ 1033.991229][ T5886] usb 2-1: config 0 descriptor?? [ 1034.000816][ T5886] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1034.303147][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.320869][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.333204][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.344262][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.398904][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 1034.406564][ T5886] gspca_stk1135: reg_w 0x0 err -71 [ 1034.423399][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1034.425783][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.468224][ T5892] usb 3-1: USB disconnect, device number 5 [ 1034.515422][ T5886] gspca_stk1135: Sensor write failed [ 1034.520795][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.635882][T22819] netlink: 'syz.4.3895': attribute type 2 has an invalid length. [ 1034.656427][T22819] netlink: 'syz.4.3895': attribute type 1 has an invalid length. [ 1034.709946][ T5886] gspca_stk1135: Sensor write failed [ 1034.726714][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.741541][ T5886] gspca_stk1135: Sensor read failed [ 1034.798192][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.811391][ T5886] gspca_stk1135: Sensor read failed [ 1034.822348][ T5886] gspca_stk1135: Detected sensor type unknown (0x0) [ 1034.841061][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.856962][ T5886] gspca_stk1135: Sensor read failed [ 1034.870079][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.943948][ T5886] gspca_stk1135: Sensor read failed [ 1034.949368][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.956048][ T5886] gspca_stk1135: Sensor write failed [ 1034.961820][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1034.968573][ T5886] gspca_stk1135: Sensor write failed [ 1034.974958][ T5886] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1035.017052][ T5886] usb 2-1: USB disconnect, device number 109 [ 1035.565810][T16070] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1035.631240][ T5892] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1035.870444][T16070] usb 4-1: config index 0 descriptor too short (expected 32804, got 36) [ 1035.871468][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1035.879019][T16070] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1035.896463][T16070] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1035.932312][T16070] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1035.979661][T16070] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1035.993500][T16070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.005434][T16070] usb 4-1: Product: syz [ 1036.009798][T16070] usb 4-1: Manufacturer: syz [ 1036.015037][T16070] usb 4-1: SerialNumber: syz [ 1036.044763][T16070] usb 4-1: config 0 descriptor?? [ 1036.058099][T22832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1036.070243][T22832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1036.086457][T16070] usb 4-1: ucan: probing device on interface #0 [ 1036.211967][ T5892] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1036.241041][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1036.321337][ T5884] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1036.341490][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1036.403141][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.418162][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.497388][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1036.498609][T16070] usb 4-1: ucan: device reported invalid device info [ 1036.502765][ T5892] usb usb2-port1: attempt power cycle [ 1036.509514][ T5886] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1036.525639][T16070] usb 4-1: ucan: probe failed; try to update the device firmware [ 1036.539160][ T5884] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1036.539297][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.548726][ T5884] usb 1-1: config 0 has no interface number 0 [ 1036.569388][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1036.579409][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.590393][ T5884] usb 1-1: Product: syz [ 1036.594959][ T5884] usb 1-1: Manufacturer: syz [ 1036.599570][ T5884] usb 1-1: SerialNumber: syz [ 1036.634846][ T5884] usb 1-1: config 0 descriptor?? [ 1036.647395][ T5886] usb 3-1: config 0 descriptor?? [ 1036.855914][ T5884] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1036.863799][ T5884] usb 1-1: Failed to initialize entity for entity 6 [ 1036.870533][ T5884] usb 1-1: Failed to register entities (-22). [ 1036.877760][ T5892] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1036.902716][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1037.076124][ T1208] usb 1-1: USB disconnect, device number 121 [ 1037.151291][ T5892] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1037.172911][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1037.191408][ T5884] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1037.281623][ T5892] usb usb2-port1: unable to enumerate USB device [ 1037.316463][T22840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.328039][T22840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.338889][T22840] __nla_validate_parse: 10 callbacks suppressed [ 1037.338918][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1037.355625][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1037.365666][T22840] netlink: 'syz.2.3904': attribute type 18 has an invalid length. [ 1037.374175][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3904'. [ 1037.384846][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.396122][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.406725][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1037.420690][ T5884] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1037.429976][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.443871][ T5884] usb 5-1: config 0 descriptor?? [ 1037.671774][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 1037.677842][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1037.703615][ T5884] usb 5-1: USB disconnect, device number 16 [ 1037.703775][T22849] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3907'. [ 1037.795268][T22851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1037.806895][T22851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1038.018970][ T5886] uclogic 0003:256C:006D.008D: v1 frame probing failed: -71 [ 1038.026579][ T5886] uclogic 0003:256C:006D.008D: failed probing parameters: -71 [ 1038.034306][ T5886] uclogic 0003:256C:006D.008D: probe with driver uclogic failed with error -71 [ 1038.048520][ T5886] usb 3-1: USB disconnect, device number 6 [ 1038.131053][T16070] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1038.284004][T16070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.307028][T16070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.331132][T16070] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1038.355785][ T5886] usb 4-1: USB disconnect, device number 6 [ 1038.366012][T16070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.401939][T16070] usb 1-1: config 0 descriptor?? [ 1038.829102][T22853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.855973][T22853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.874098][ T5884] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1038.896918][T22853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.927782][T22853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.021149][ T5892] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1039.029151][T22853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1039.041260][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 1039.054050][T22853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3909'. [ 1039.074524][ T5884] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1039.088575][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.113280][T16070] usbhid 1-1:0.0: can't add hid device: -71 [ 1039.118302][ T5884] usb 4-1: Product: syz [ 1039.130944][ T5884] usb 4-1: Manufacturer: syz [ 1039.136594][ T5884] usb 4-1: SerialNumber: syz [ 1039.137445][T16070] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1039.164054][ T5884] usb 4-1: config 0 descriptor?? [ 1039.193526][T16070] usb 1-1: USB disconnect, device number 122 [ 1039.203209][ T5892] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1039.231261][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.242174][ T5884] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1039.253632][ T5892] usb 2-1: config 0 descriptor?? [ 1039.282156][T22875] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1039.555336][ T5892] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1039.567059][ T5892] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1039.608240][ T5892] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1039.645687][ T5892] [drm] Initialized udl on minor 2 [ 1039.659011][ T5884] gspca_stk1135: reg_w 0x0 err -71 [ 1039.676287][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1039.755412][ T5884] gspca_stk1135: Sensor write failed [ 1039.768002][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1039.780715][ T5892] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1039.793221][ T5884] gspca_stk1135: Sensor write failed [ 1039.799089][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1039.806140][ T5892] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1039.813924][ T5884] gspca_stk1135: Sensor read failed [ 1039.819596][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1039.826256][ T5884] gspca_stk1135: Sensor read failed [ 1039.831698][ T5884] gspca_stk1135: Detected sensor type unknown (0x0) [ 1039.838378][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1039.846257][ T5884] gspca_stk1135: Sensor read failed [ 1039.863199][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1039.925401][ T5884] gspca_stk1135: Sensor read failed [ 1040.062167][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1040.100158][ T5884] gspca_stk1135: Sensor write failed [ 1040.128046][ T1208] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1040.148606][ T5892] usb 2-1: USB disconnect, device number 114 [ 1040.157479][ T1208] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1040.165736][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1040.188600][ T1208] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1040.204008][ T5884] gspca_stk1135: Sensor write failed [ 1040.275126][ T5884] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1040.304840][ T5884] usb 4-1: USB disconnect, device number 7 [ 1040.357871][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 1040.731018][T22887] netlink: 'syz.4.3920': attribute type 2 has an invalid length. [ 1040.738824][T22887] netlink: 'syz.4.3920': attribute type 1 has an invalid length. [ 1040.892215][ T5892] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1040.951239][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1041.051244][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 1041.058292][ T5892] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1041.066561][ T5892] usb 1-1: config 0 has no interface number 0 [ 1041.078004][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1041.089564][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.091199][T20393] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1041.097737][ T5892] usb 1-1: Product: syz [ 1041.110730][ T5892] usb 1-1: Manufacturer: syz [ 1041.115468][ T5892] usb 1-1: SerialNumber: syz [ 1041.124382][ T5892] usb 1-1: config 0 descriptor?? [ 1041.153054][ T5886] usb 3-1: config index 0 descriptor too short (expected 32804, got 36) [ 1041.162770][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1041.173890][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1041.186975][ T5886] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1041.200677][ T5886] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1041.215657][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.227440][ T5886] usb 3-1: Product: syz [ 1041.231999][ T5886] usb 3-1: Manufacturer: syz [ 1041.236711][ T5886] usb 3-1: SerialNumber: syz [ 1041.245178][ T5886] usb 3-1: config 0 descriptor?? [ 1041.252238][T22889] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1041.262951][T22889] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1041.272052][ T5886] usb 3-1: ucan: probing device on interface #0 [ 1041.281297][T20393] usb 4-1: device descriptor read/64, error -71 [ 1041.342418][ T5892] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1041.360423][ T5892] usb 1-1: Failed to initialize entity for entity 6 [ 1041.386586][ T5892] usb 1-1: Failed to register entities (-22). [ 1041.541476][T20393] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1041.596605][ T24] usb 1-1: USB disconnect, device number 123 [ 1041.681141][T20393] usb 4-1: device descriptor read/64, error -71 [ 1041.687803][ T5886] usb 3-1: ucan: device reported invalid device info [ 1041.702195][ T5886] usb 3-1: ucan: probe failed; try to update the device firmware [ 1041.812178][T20393] usb usb4-port1: attempt power cycle [ 1042.161599][T20393] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1042.212906][T20393] usb 4-1: device descriptor read/8, error -71 [ 1042.491713][T20393] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1042.586005][T20393] usb 4-1: device descriptor read/8, error -71 [ 1042.702666][T20393] usb usb4-port1: unable to enumerate USB device [ 1042.961160][ T24] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1043.067025][T22924] __nla_validate_parse: 8 callbacks suppressed [ 1043.067048][T22924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3933'. [ 1043.083450][T22924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3933'. [ 1043.123874][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1043.156221][ T24] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1043.171592][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.180028][ T24] usb 1-1: Product: syz [ 1043.236583][ T24] usb 1-1: Manufacturer: syz [ 1043.257310][ T24] usb 1-1: SerialNumber: syz [ 1043.290787][ T24] usb 1-1: config 0 descriptor?? [ 1043.313949][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1043.621006][T20393] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1043.657514][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3935'. [ 1043.668796][T22929] netlink: 'syz.4.3935': attribute type 2 has an invalid length. [ 1043.681911][T22929] netlink: 'syz.4.3935': attribute type 1 has an invalid length. [ 1043.689678][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 1043.719601][ T24] gspca_stk1135: reg_w 0x0 err -71 [ 1043.748756][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.769403][ T24] gspca_stk1135: Sensor write failed [ 1043.783698][T20393] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1043.786976][ T5884] usb 3-1: USB disconnect, device number 7 [ 1043.800204][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.832086][ T24] gspca_stk1135: Sensor write failed [ 1043.853492][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.861242][T20393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.880109][ T24] gspca_stk1135: Sensor read failed [ 1043.896911][T20393] usb 2-1: config 0 descriptor?? [ 1043.901003][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.908286][ T24] gspca_stk1135: Sensor read failed [ 1043.938007][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 1043.954526][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.961990][ T24] gspca_stk1135: Sensor read failed [ 1043.968834][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.977845][ T24] gspca_stk1135: Sensor read failed [ 1043.983979][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1043.995022][ T24] gspca_stk1135: Sensor write failed [ 1044.000379][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1044.008638][ T24] gspca_stk1135: Sensor write failed [ 1044.019570][ T24] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1044.036951][ T24] usb 1-1: USB disconnect, device number 124 [ 1044.109042][T20393] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1044.129473][T20393] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1044.156462][T20393] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1044.163815][T20393] [drm] Initialized udl on minor 2 [ 1044.264685][ T5884] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1044.344902][T20393] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1044.352533][T20393] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1044.430996][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 1044.470244][ T5884] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1044.492934][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.534320][ T5884] usb 3-1: Product: syz [ 1044.575339][ T5884] usb 3-1: Manufacturer: syz [ 1044.580001][ T5884] usb 3-1: SerialNumber: syz [ 1044.633052][ T5884] usb 3-1: config 0 descriptor?? [ 1044.658318][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 1044.748864][ T5885] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1044.775013][T22944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1044.784297][ T5885] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1044.784866][ T5885] usb 2-1: USB disconnect, device number 115 [ 1044.827024][T22944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1044.874228][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1044.888218][T22946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3941'. [ 1045.078696][T22952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3944'. [ 1045.089017][T22952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3944'. [ 1045.131143][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1045.251343][ T5884] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input121 [ 1045.282887][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 1045.304677][ T5892] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1045.335717][ T5892] usb 5-1: config 0 has no interface number 0 [ 1045.386604][ T5892] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1045.435770][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.465995][T22932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1045.497695][T20393] usb 3-1: USB disconnect, device number 8 [ 1045.534369][ T5892] usb 5-1: Product: syz [ 1045.567116][ T5892] usb 5-1: Manufacturer: syz [ 1045.599292][ T5892] usb 5-1: SerialNumber: syz [ 1045.748354][ T5892] usb 5-1: config 0 descriptor?? [ 1045.892086][ T5884] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1045.996840][ T5892] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1046.006864][ T5892] usb 5-1: Failed to initialize entity for entity 6 [ 1046.015085][ T5892] usb 5-1: Failed to register entities (-22). [ 1046.083972][ T5884] usb 2-1: config index 0 descriptor too short (expected 32804, got 36) [ 1046.096611][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1046.097550][T22964] netlink: 'syz.3.3949': attribute type 2 has an invalid length. [ 1046.121761][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1046.126277][T22964] netlink: 'syz.3.3949': attribute type 1 has an invalid length. [ 1046.135888][ T5884] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1046.204136][ T5884] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1046.213471][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.222915][ T5884] usb 2-1: Product: syz [ 1046.231008][ T5884] usb 2-1: Manufacturer: syz [ 1046.237331][ T5884] usb 2-1: SerialNumber: syz [ 1046.248426][ T5892] usb 5-1: USB disconnect, device number 17 [ 1046.261292][T20393] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1046.308444][ T5884] usb 2-1: config 0 descriptor?? [ 1046.332857][T22958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1046.340327][T22958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1046.370322][ T5884] usb 2-1: ucan: probing device on interface #0 [ 1046.411233][T20393] usb 1-1: device descriptor read/64, error -71 [ 1046.653579][T20393] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1046.770400][ T5884] usb 2-1: ucan: device reported invalid device info [ 1046.781534][ T5884] usb 2-1: ucan: probe failed; try to update the device firmware [ 1046.811322][T20393] usb 1-1: device descriptor read/64, error -71 [ 1046.952054][T20393] usb usb1-port1: attempt power cycle [ 1047.051069][ T5886] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1047.141502][ T5884] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1047.211306][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1047.220456][ T5886] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1047.229682][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.238448][ T5886] usb 3-1: Product: syz [ 1047.242814][ T5886] usb 3-1: Manufacturer: syz [ 1047.250367][ T5886] usb 3-1: SerialNumber: syz [ 1047.258058][ T5886] usb 3-1: config 0 descriptor?? [ 1047.278735][ T5886] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1047.299214][ T5884] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.301432][T20393] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1047.325871][ T5884] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1047.336635][ T5884] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1047.342375][T20393] usb 1-1: device descriptor read/8, error -71 [ 1047.350226][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.603169][T20393] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1047.643756][T20393] usb 1-1: device descriptor read/8, error -71 [ 1047.677958][ T5886] gspca_stk1135: reg_w 0x0 err -71 [ 1047.683564][ T5885] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1047.702187][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.708723][ T5886] gspca_stk1135: Sensor write failed [ 1047.714937][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.722136][ T5886] gspca_stk1135: Sensor write failed [ 1047.727565][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.734134][ T5886] gspca_stk1135: Sensor read failed [ 1047.739445][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.746171][ T5886] gspca_stk1135: Sensor read failed [ 1047.752560][ T5886] gspca_stk1135: Detected sensor type unknown (0x0) [ 1047.759377][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.766199][T20393] usb usb1-port1: unable to enumerate USB device [ 1047.772885][ T5886] gspca_stk1135: Sensor read failed [ 1047.780677][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.787927][ T5886] gspca_stk1135: Sensor read failed [ 1047.799589][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.806201][ T5886] gspca_stk1135: Sensor write failed [ 1047.813116][ T5886] gspca_stk1135: serial bus timeout: status=0x00 [ 1047.819484][ T5886] gspca_stk1135: Sensor write failed [ 1047.825040][ T5886] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1047.837800][ T5886] usb 3-1: USB disconnect, device number 9 [ 1047.884275][ T5885] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.895847][ T5885] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.907350][ T5885] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1047.917844][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1047.928862][ T5885] usb 5-1: SerialNumber: syz [ 1048.154128][ T5885] usb 5-1: 0:2 : does not exist [ 1048.172881][ T5885] usb 5-1: USB disconnect, device number 18 [ 1048.208384][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.464212][T22994] __nla_validate_parse: 10 callbacks suppressed [ 1048.464233][T22994] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3959'. [ 1048.691628][ T5884] usb 2-1: USB disconnect, device number 116 [ 1049.386605][T23004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1049.396763][T23004] netlink: 'syz.2.3963': attribute type 2 has an invalid length. [ 1049.405387][T23004] netlink: 'syz.2.3963': attribute type 1 has an invalid length. [ 1049.416670][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 1049.882753][T23016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1049.892342][T23016] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1049.937694][ T5892] usb 4-1: USB disconnect, device number 12 [ 1050.062306][T23019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3968'. [ 1050.075497][T23019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3968'. [ 1050.134986][T23022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3967'. [ 1050.144084][T23022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3967'. [ 1050.442002][T23032] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3973'. [ 1050.455985][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1050.501152][ T5892] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1050.531145][ T5884] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1050.621102][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1050.631901][ T5892] usb 3-1: device descriptor read/64, error -71 [ 1050.647560][ T24] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1050.660452][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.670758][ T24] usb 1-1: Product: syz [ 1050.679652][ T24] usb 1-1: Manufacturer: syz [ 1050.685370][ T24] usb 1-1: SerialNumber: syz [ 1050.695637][ T5884] usb 5-1: config index 0 descriptor too short (expected 32804, got 36) [ 1050.713845][ T24] usb 1-1: config 0 descriptor?? [ 1050.720246][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1050.731763][ T1208] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1050.749050][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1050.759136][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1050.776010][ T5884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1050.790244][ T5884] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1050.804136][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.813856][ T5884] usb 5-1: Product: syz [ 1050.818358][ T5884] usb 5-1: Manufacturer: syz [ 1050.827467][ T5884] usb 5-1: SerialNumber: syz [ 1050.837406][ T5884] usb 5-1: config 0 descriptor?? [ 1050.847267][T23027] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1050.860851][T23027] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1050.881173][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1050.898780][ T5884] usb 5-1: ucan: probing device on interface #0 [ 1050.908954][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.936674][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.947423][ T1208] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1050.962395][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.982327][ T1208] usb 2-1: config 0 descriptor?? [ 1051.021818][ T5892] usb 3-1: device descriptor read/64, error -71 [ 1051.133930][ T5892] usb usb3-port1: attempt power cycle [ 1051.173799][ T24] gspca_stk1135: reg_w 0x0 err -71 [ 1051.180065][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.188828][ T24] gspca_stk1135: Sensor write failed [ 1051.197703][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.205931][ T24] gspca_stk1135: Sensor write failed [ 1051.221029][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.227594][ T24] gspca_stk1135: Sensor read failed [ 1051.247812][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.264187][ T24] gspca_stk1135: Sensor read failed [ 1051.269510][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 1051.276601][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.283676][ T5884] usb 5-1: ucan: device reported invalid device info [ 1051.290363][ T5884] usb 5-1: ucan: probe failed; try to update the device firmware [ 1051.300125][ T24] gspca_stk1135: Sensor read failed [ 1051.317106][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.325447][ T24] gspca_stk1135: Sensor read failed [ 1051.330756][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.337772][ T24] gspca_stk1135: Sensor write failed [ 1051.343398][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1051.351409][ T24] gspca_stk1135: Sensor write failed [ 1051.356831][ T24] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1051.389036][ T24] usb 1-1: USB disconnect, device number 3 [ 1051.473671][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1051.503398][ T5892] usb 3-1: device descriptor read/8, error -71 [ 1051.618156][T23034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.627193][T23034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.641416][T23034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.650393][T23034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.671331][ T1208] usbhid 2-1:0.0: can't add hid device: -71 [ 1051.677440][ T1208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1051.695027][ T1208] usb 2-1: USB disconnect, device number 117 [ 1051.731516][T20393] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1051.751077][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1051.772912][ T5892] usb 3-1: device descriptor read/8, error -71 [ 1051.883039][T20393] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1051.883920][ T5892] usb usb3-port1: unable to enumerate USB device [ 1051.892892][T20393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.909157][T20393] usb 4-1: config 0 descriptor?? [ 1052.118923][T20393] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1052.127886][T20393] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1052.147614][T20393] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1052.155360][T20393] [drm] Initialized udl on minor 2 [ 1052.282213][ T5886] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1052.457169][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.469612][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.482826][ T5886] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1052.494458][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.506466][ T5886] usb 1-1: config 0 descriptor?? [ 1052.549626][T20393] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1052.564114][T20393] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1052.574290][ T5885] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1052.584838][T20393] usb 4-1: USB disconnect, device number 13 [ 1052.592746][ T5885] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1053.121329][T20393] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1053.128800][T23039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.144050][T23039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.160787][T23039] netlink: 'syz.0.3976': attribute type 18 has an invalid length. [ 1053.297689][T20393] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.344210][ T5885] usb 5-1: USB disconnect, device number 19 [ 1053.369774][T20393] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1053.385063][T20393] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1053.399140][T20393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.523731][T23054] __nla_validate_parse: 7 callbacks suppressed [ 1053.523749][T23054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3981'. [ 1053.539854][T23054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3981'. [ 1053.575300][T23055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1053.588227][T23055] netlink: 'syz.2.3982': attribute type 2 has an invalid length. [ 1053.596656][T23055] netlink: 'syz.2.3982': attribute type 1 has an invalid length. [ 1053.605525][T23055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1053.639698][T23059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1053.653194][T23059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1053.771069][ T5885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1053.816786][ T5886] uclogic 0003:256C:006D.008E: v1 frame probing failed: -71 [ 1053.831006][ T5886] uclogic 0003:256C:006D.008E: failed probing parameters: -71 [ 1053.838961][ T5886] uclogic 0003:256C:006D.008E: probe with driver uclogic failed with error -71 [ 1053.862426][ T5886] usb 1-1: USB disconnect, device number 4 [ 1053.944431][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.956081][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.966756][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1053.979959][ T5885] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1053.989143][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.000006][ T5885] usb 5-1: config 0 descriptor?? [ 1054.361256][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.367660][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.421906][ T5885] plantronics 0003:047F:FFFF.008F: No inputs registered, leaving [ 1054.458521][T23066] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3985'. [ 1054.555038][ T5885] plantronics 0003:047F:FFFF.008F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1054.705626][ T5885] usb 5-1: USB disconnect, device number 20 [ 1055.067624][T23068] fido_id[23068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1055.231214][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1055.351233][ T5885] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1055.393819][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.429247][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.451838][ T5886] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1055.466530][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.488667][ T5886] usb 4-1: config 0 descriptor?? [ 1055.521491][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 1055.542746][ T5885] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1055.555377][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.576558][ T5885] usb 1-1: Product: syz [ 1055.586136][ T5885] usb 1-1: Manufacturer: syz [ 1055.599692][ T5885] usb 1-1: SerialNumber: syz [ 1055.619258][ T5885] usb 1-1: config 0 descriptor?? [ 1055.644992][ T5885] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1055.661532][ T1208] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1055.851446][ T1208] usb 3-1: device descriptor read/64, error -71 [ 1055.858101][ T5892] usb 2-1: USB disconnect, device number 118 [ 1056.091125][ T5885] gspca_stk1135: reg_w 0x0 err -71 [ 1056.102394][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.113625][T23072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.118981][ T5885] gspca_stk1135: Sensor write failed [ 1056.127663][ T1208] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1056.135450][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.142771][ T5885] gspca_stk1135: Sensor write failed [ 1056.148156][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.155825][ T5885] gspca_stk1135: Sensor read failed [ 1056.162831][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.177681][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.185175][ T5885] gspca_stk1135: Sensor read failed [ 1056.189042][T23072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.190519][ T5885] gspca_stk1135: Detected sensor type unknown (0x0) [ 1056.201515][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.213356][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.223308][ T5885] gspca_stk1135: Sensor read failed [ 1056.225366][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1056.228573][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.248396][ T5892] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1056.255516][ T5885] gspca_stk1135: Sensor read failed [ 1056.267154][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.278035][T23072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1056.287337][T23072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1056.301175][ T5885] gspca_stk1135: Sensor write failed [ 1056.306559][ T5885] gspca_stk1135: serial bus timeout: status=0x00 [ 1056.313319][ T5885] gspca_stk1135: Sensor write failed [ 1056.318754][ T5885] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1056.331386][ T1208] usb 3-1: device descriptor read/64, error -71 [ 1056.332829][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 1056.354451][ T5885] usb 1-1: USB disconnect, device number 5 [ 1056.362816][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1056.392882][ T5886] usb 4-1: USB disconnect, device number 14 [ 1056.437612][ T24] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1056.451255][ T1208] usb usb3-port1: attempt power cycle [ 1056.457688][ T24] usb 5-1: config 4 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1056.474426][ T24] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1056.489248][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1056.499276][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.507731][ T5892] usb 2-1: config index 0 descriptor too short (expected 32804, got 36) [ 1056.517704][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1056.529604][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1056.545663][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1056.559430][ T5892] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1056.568585][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.576834][ T5892] usb 2-1: Product: syz [ 1056.583409][ T5892] usb 2-1: Manufacturer: syz [ 1056.588049][ T5892] usb 2-1: SerialNumber: syz [ 1056.598183][ T5892] usb 2-1: config 0 descriptor?? [ 1056.604566][T23083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1056.613118][T23083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1056.624478][ T5892] usb 2-1: ucan: probing device on interface #0 [ 1056.744711][ T24] ath6kl: Failed to submit usb control message: -71 [ 1056.752497][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 1056.765159][ T24] ath6kl: Unable to send get target info: -71 [ 1056.772283][ T24] ath6kl: Failed to init ath6kl core: -71 [ 1056.778876][ T24] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1056.802532][ T24] usb 5-1: USB disconnect, device number 21 [ 1056.811236][ T1208] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1056.832176][ T1208] usb 3-1: device descriptor read/8, error -71 [ 1057.027241][ T5892] usb 2-1: ucan: device reported invalid device info [ 1057.035474][ T5892] usb 2-1: ucan: probe failed; try to update the device firmware [ 1057.076179][ T1208] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1057.116238][ T1208] usb 3-1: device descriptor read/8, error -71 [ 1057.129082][T23094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3994'. [ 1057.221382][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1057.233370][ T1208] usb usb3-port1: unable to enumerate USB device [ 1057.257553][T23096] netlink: 'syz.0.3995': attribute type 2 has an invalid length. [ 1057.271198][T23096] netlink: 'syz.0.3995': attribute type 1 has an invalid length. [ 1057.382646][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1057.393098][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.407125][ T24] usb 4-1: config 0 descriptor?? [ 1057.616048][ T24] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1057.625028][ T24] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1057.640429][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1057.649453][ T24] [drm] Initialized udl on minor 2 [ 1058.050735][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1058.066290][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1058.073354][ T1208] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1058.085518][ T1208] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1058.098476][ T24] usb 4-1: USB disconnect, device number 15 [ 1058.107044][ T1208] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1058.173937][ T5892] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1058.333737][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.345946][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.357206][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1058.370381][ T5892] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1058.379561][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.392187][ T5892] usb 5-1: config 0 descriptor?? [ 1058.539847][T23107] __nla_validate_parse: 3 callbacks suppressed [ 1058.539867][T23107] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1058.827385][ T5892] plantronics 0003:047F:FFFF.0090: No inputs registered, leaving [ 1058.862302][ T5892] plantronics 0003:047F:FFFF.0090: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1058.931813][ T5892] usb 2-1: USB disconnect, device number 119 [ 1059.122063][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1059.122077][ T30] audit: type=1326 audit(1746931550.593:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.198736][ T5886] usb 5-1: USB disconnect, device number 22 [ 1059.198959][ T30] audit: type=1326 audit(1746931550.623:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.292322][ T30] audit: type=1326 audit(1746931550.623:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.318402][ T30] audit: type=1326 audit(1746931550.623:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.349246][ T30] audit: type=1326 audit(1746931550.623:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.373343][ T30] audit: type=1326 audit(1746931550.623:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.396109][ T30] audit: type=1326 audit(1746931550.623:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.425958][ T30] audit: type=1326 audit(1746931550.623:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.449327][ T5892] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1059.501539][ T30] audit: type=1326 audit(1746931550.623:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.536639][ T30] audit: type=1326 audit(1746931550.623:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.3.4001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f66539 code=0x7ffc0000 [ 1059.664021][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.681049][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.728503][ T5892] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1059.782995][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.831028][ T5892] usb 2-1: config 0 descriptor?? [ 1059.977126][T23126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4005'. [ 1060.012540][ T5884] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1060.020583][T23126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4005'. [ 1060.212806][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 1060.217963][T23131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1060.218044][T23131] netlink: 'syz.3.4007': attribute type 2 has an invalid length. [ 1060.238404][ T5884] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1060.251350][T23131] netlink: 'syz.3.4007': attribute type 1 has an invalid length. [ 1060.259213][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1060.280535][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.289675][ T5884] usb 1-1: Product: syz [ 1060.314999][ T5884] usb 1-1: Manufacturer: syz [ 1060.327216][ T5884] usb 1-1: SerialNumber: syz [ 1060.359876][ T5884] usb 1-1: config 0 descriptor?? [ 1060.411075][ T5887] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1060.412554][ T5884] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1060.471553][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.484436][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.495492][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.504938][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.520495][T23114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1060.529954][T23114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1060.543081][ T5887] usb 3-1: device descriptor read/64, error -71 [ 1060.554563][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 1060.562748][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1060.573945][ T5892] usb 2-1: USB disconnect, device number 120 [ 1060.611064][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1060.742354][ T24] usb 5-1: device descriptor read/64, error -71 [ 1060.781606][ T5887] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1060.806992][ T5884] gspca_stk1135: reg_w 0x0 err -71 [ 1060.819039][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.825909][ T5884] gspca_stk1135: Sensor write failed [ 1060.833516][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.839940][ T5884] gspca_stk1135: Sensor write failed [ 1060.845512][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.853662][ T5884] gspca_stk1135: Sensor read failed [ 1060.859090][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.866859][ T5884] gspca_stk1135: Sensor read failed [ 1060.872315][ T5884] gspca_stk1135: Detected sensor type unknown (0x0) [ 1060.878943][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.888129][ T5884] gspca_stk1135: Sensor read failed [ 1060.894891][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.901515][ T5884] gspca_stk1135: Sensor read failed [ 1060.906791][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.914289][ T5884] gspca_stk1135: Sensor write failed [ 1060.919652][ T5884] gspca_stk1135: serial bus timeout: status=0x00 [ 1060.928063][ T5884] gspca_stk1135: Sensor write failed [ 1060.931056][ T5887] usb 3-1: device descriptor read/64, error -71 [ 1060.933637][ T5884] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1060.955327][ T5884] usb 1-1: USB disconnect, device number 6 [ 1060.982568][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1061.049300][T23138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1061.059023][ T5887] usb usb3-port1: attempt power cycle [ 1061.062450][T23138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4010'. [ 1061.131378][ T24] usb 5-1: device descriptor read/64, error -71 [ 1061.242763][ T24] usb usb5-port1: attempt power cycle [ 1061.421028][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1061.432511][ T5892] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1061.441556][ T5887] usb 3-1: device descriptor read/8, error -71 [ 1061.594129][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1061.609378][ T5892] usb 4-1: config index 0 descriptor too short (expected 32804, got 36) [ 1061.620139][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1061.630510][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1061.643241][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1061.653536][ T24] usb 5-1: device descriptor read/8, error -71 [ 1061.663385][ T5892] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1061.673533][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.681636][ T5892] usb 4-1: Product: syz [ 1061.685839][ T5892] usb 4-1: Manufacturer: syz [ 1061.690464][ T5892] usb 4-1: SerialNumber: syz [ 1061.695143][ T5887] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1061.706407][ T5892] usb 4-1: config 0 descriptor?? [ 1061.715008][T23142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1061.722902][T23142] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1061.730342][ T5887] usb 3-1: device descriptor read/8, error -71 [ 1061.738505][ T5892] usb 4-1: ucan: probing device on interface #0 [ 1061.831109][ T5885] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1061.854692][ T5887] usb usb3-port1: unable to enumerate USB device [ 1061.891248][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1061.913465][ T24] usb 5-1: device descriptor read/8, error -71 [ 1061.946848][T23148] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4014'. [ 1062.005112][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.021492][ T24] usb usb5-port1: unable to enumerate USB device [ 1062.022775][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.045206][ T5885] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1062.064007][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.084851][ T5885] usb 1-1: config 0 descriptor?? [ 1062.164355][ T5892] usb 4-1: ucan: device reported invalid device info [ 1062.176248][ T5892] usb 4-1: ucan: probe failed; try to update the device firmware [ 1062.713607][T23145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.722396][T23145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.737288][T23145] netlink: 'syz.0.4013': attribute type 18 has an invalid length. [ 1062.811077][ T5886] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1062.974049][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.987128][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.998810][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1063.013076][ T5886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1063.022309][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.038225][ T5886] usb 2-1: config 0 descriptor?? [ 1063.357796][ T5885] uclogic 0003:256C:006D.0091: v1 frame probing failed: -71 [ 1063.402475][ T5885] uclogic 0003:256C:006D.0091: failed probing parameters: -71 [ 1063.410285][ T5885] uclogic 0003:256C:006D.0091: probe with driver uclogic failed with error -71 [ 1063.441020][ T5885] usb 1-1: USB disconnect, device number 7 [ 1063.456940][ T5886] plantronics 0003:047F:FFFF.0092: No inputs registered, leaving [ 1063.513231][ T5886] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1063.717269][ T5892] usb 2-1: USB disconnect, device number 121 [ 1063.805260][ T5886] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1063.969640][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 1063.987307][ T5886] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1064.015376][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.039532][ T5886] usb 3-1: Product: syz [ 1064.052494][ T5886] usb 3-1: Manufacturer: syz [ 1064.059644][ T5886] usb 3-1: SerialNumber: syz [ 1064.077313][ T5886] usb 3-1: config 0 descriptor?? [ 1064.098053][ T5886] gspca_main: se401-2.14.0 probing 047d:5003 [ 1064.157452][T23168] __nla_validate_parse: 3 callbacks suppressed [ 1064.157473][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1064.175399][T23168] netlink: 'syz.4.4020': attribute type 2 has an invalid length. [ 1064.184865][T23168] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 1064.193409][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1064.243046][ T5885] usb 4-1: USB disconnect, device number 16 [ 1064.384150][T20393] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1064.564866][T20393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.576559][T20393] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.587884][T20393] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1064.599579][T20393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1064.607765][T20393] usb 1-1: SerialNumber: syz [ 1064.672353][ T5892] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1064.702550][ T5886] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input125 [ 1064.711106][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1064.831331][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 1064.844544][T20393] usb 1-1: 0:2 : does not exist [ 1064.848870][ T5892] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1064.863666][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.880019][ T5892] usb 2-1: Product: syz [ 1064.887097][ T5892] usb 2-1: Manufacturer: syz [ 1064.895067][T20393] usb 1-1: USB disconnect, device number 8 [ 1064.899402][ T5892] usb 2-1: SerialNumber: syz [ 1064.921994][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.928700][T23160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1064.946927][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.960154][ T5892] usb 2-1: config 0 descriptor?? [ 1064.964099][T23160] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1064.987588][ T5892] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1064.989328][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.024766][ T5885] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1065.029889][ T24] usb 3-1: USB disconnect, device number 22 [ 1065.049310][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.074168][ T5885] usb 4-1: config 0 descriptor?? [ 1065.389889][ T5892] gspca_stk1135: reg_w 0x0 err -71 [ 1065.396661][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.404360][ T5892] gspca_stk1135: Sensor write failed [ 1065.409986][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.423951][ T5892] gspca_stk1135: Sensor write failed [ 1065.429324][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.437406][ T5892] gspca_stk1135: Sensor read failed [ 1065.443181][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.451560][ T5892] gspca_stk1135: Sensor read failed [ 1065.456819][ T5892] gspca_stk1135: Detected sensor type unknown (0x0) [ 1065.465774][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.472321][ T5892] gspca_stk1135: Sensor read failed [ 1065.477788][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.484307][ T5892] gspca_stk1135: Sensor read failed [ 1065.489813][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.500126][ T5892] gspca_stk1135: Sensor write failed [ 1065.510466][ T5892] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.518371][ T5892] gspca_stk1135: Sensor write failed [ 1065.528752][ T5892] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1065.567714][ T5892] usb 2-1: USB disconnect, device number 122 [ 1065.708879][T23184] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4025'. [ 1065.734587][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.747137][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.827366][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.852218][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.905294][T23172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1065.931530][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1065.958318][T23172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1066.057559][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 1066.063765][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1066.075944][ T5885] usb 4-1: USB disconnect, device number 17 [ 1066.082775][ T24] usb 3-1: device descriptor read/64, error -71 [ 1066.263537][T23192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1066.275069][T23192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4029'. [ 1066.351138][ T5886] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1066.391028][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1066.483209][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1066.483227][ T30] audit: type=1326 audit(1746931557.953:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.531043][ T24] usb 3-1: device descriptor read/64, error -71 [ 1066.538789][ T30] audit: type=1326 audit(1746931557.953:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.545302][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1066.563183][ T30] audit: type=1326 audit(1746931557.953:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.640064][ T30] audit: type=1326 audit(1746931557.953:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.701294][ T24] usb usb3-port1: attempt power cycle [ 1066.726901][ T30] audit: type=1326 audit(1746931557.953:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.861294][ T5886] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1066.910437][ T30] audit: type=1326 audit(1746931557.953:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.953957][ T30] audit: type=1326 audit(1746931557.953:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1066.985444][ T30] audit: type=1326 audit(1746931557.983:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1067.009771][ T30] audit: type=1326 audit(1746931557.983:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1067.033346][ T5885] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1067.042902][ T5886] usb 5-1: device descriptor read/64, error -71 [ 1067.055149][ T30] audit: type=1326 audit(1746931557.983:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23193 comm="syz.1.4030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1067.111112][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1067.151592][ T5886] usb usb5-port1: attempt power cycle [ 1067.173800][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1067.202884][ T5885] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1067.205303][ T24] usb 3-1: device descriptor read/8, error -71 [ 1067.227064][ T5885] usb 4-1: config 0 has no interface number 0 [ 1067.236597][ T5885] usb 4-1: config 0 interface 122 has no altsetting 0 [ 1067.247440][ T5885] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 1067.259457][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.272996][ T5885] usb 4-1: Product: syz [ 1067.277986][ T5885] usb 4-1: Manufacturer: syz [ 1067.283405][ T5885] usb 4-1: SerialNumber: syz [ 1067.283568][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1067.299047][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.308298][ T5885] usb 4-1: config 0 descriptor?? [ 1067.341492][ T9] usb 1-1: config 0 descriptor?? [ 1067.451031][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1067.461046][T20393] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1067.472956][ T24] usb 3-1: device descriptor read/8, error -71 [ 1067.502775][ T5886] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1067.550219][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1067.561124][ T9] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1067.569673][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1067.581563][ T24] usb usb3-port1: unable to enumerate USB device [ 1067.596312][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1067.604043][ T9] [drm] Initialized udl on minor 2 [ 1067.624559][T20393] usb 2-1: config index 0 descriptor too short (expected 32804, got 36) [ 1067.633417][T20393] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1067.645828][T20393] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1067.657600][T20393] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1067.670273][T20393] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1067.679719][T20393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.688604][T20393] usb 2-1: Product: syz [ 1067.693030][T20393] usb 2-1: Manufacturer: syz [ 1067.697660][T20393] usb 2-1: SerialNumber: syz [ 1067.705307][T20393] usb 2-1: config 0 descriptor?? [ 1067.717009][T23205] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1067.725989][T23205] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1067.737899][T20393] usb 2-1: ucan: probing device on interface #0 [ 1067.804455][ T24] usb 4-1: USB disconnect, device number 18 [ 1067.812303][ T24] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 1067.831198][ T5886] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1067.864593][ T5886] usb 5-1: device descriptor read/8, error -71 [ 1067.981759][ T5886] usb usb5-port1: unable to enumerate USB device [ 1067.996188][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1068.008665][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1068.016620][ T5886] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1068.030588][ T5886] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1068.041422][ T9] usb 1-1: USB disconnect, device number 9 [ 1068.061081][ T5886] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1068.139376][T20393] usb 2-1: ucan: device reported invalid device info [ 1068.146244][T20393] usb 2-1: ucan: probe failed; try to update the device firmware [ 1068.418213][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4034'. [ 1068.427349][T23207] netlink: 'syz.3.4034': attribute type 2 has an invalid length. [ 1068.437591][T23207] netlink: 'syz.3.4034': attribute type 1 has an invalid length. [ 1068.445476][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4034'. [ 1068.961228][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1069.101137][ T9] usb 1-1: device descriptor read/64, error -71 [ 1069.111125][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1069.261105][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1069.290039][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1069.307473][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.321064][ T5886] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1069.325109][ T24] usb 3-1: Product: syz [ 1069.335519][ T24] usb 3-1: Manufacturer: syz [ 1069.340161][ T24] usb 3-1: SerialNumber: syz [ 1069.349932][ T24] usb 3-1: config 0 descriptor?? [ 1069.351067][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1069.360573][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1069.491021][ T9] usb 1-1: device descriptor read/64, error -71 [ 1069.499878][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.526396][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.547870][ T5886] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1069.574312][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.595996][ T5886] usb 4-1: config 0 descriptor?? [ 1069.608339][ T9] usb usb1-port1: attempt power cycle [ 1069.682471][ T5892] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1069.767226][ T24] gspca_stk1135: reg_w 0x0 err -71 [ 1069.802457][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1069.813039][ T24] gspca_stk1135: Sensor write failed [ 1069.818484][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1069.835685][ T24] gspca_stk1135: Sensor write failed [ 1069.846027][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1069.865359][ T24] gspca_stk1135: Sensor read failed [ 1069.870719][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1069.884041][ T5892] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.897038][ T24] gspca_stk1135: Sensor read failed [ 1069.922469][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 1069.952308][ T5892] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1069.967926][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1069.971170][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1069.975354][ T24] gspca_stk1135: Sensor read failed [ 1069.987267][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1070.003949][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1070.010423][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.020278][ T24] gspca_stk1135: Sensor read failed [ 1070.028950][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1070.056933][ T24] gspca_stk1135: Sensor write failed [ 1070.061902][ T9] usb 1-1: device descriptor read/8, error -71 [ 1070.071010][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 1070.131136][ T24] gspca_stk1135: Sensor write failed [ 1070.139490][ T5892] usb 2-1: USB disconnect, device number 123 [ 1070.167584][ T24] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1070.218848][ T24] usb 3-1: USB disconnect, device number 27 [ 1070.243356][T23223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.272783][T23223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.311710][T23223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.341107][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1070.349405][T23223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.392130][ T9] usb 1-1: device descriptor read/8, error -71 [ 1070.467105][T23223] __nla_validate_parse: 4 callbacks suppressed [ 1070.467121][T23223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1070.491174][T23223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4041'. [ 1070.517621][ T9] usb usb1-port1: unable to enumerate USB device [ 1070.542132][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 1070.559380][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1070.584055][ T5886] usb 4-1: USB disconnect, device number 19 [ 1072.408284][T23263] binder: 23245:23263 ioctl c0306201 0 returned -14 [ 1072.882618][ T24] usb 5-1: USB disconnect, device number 31 [ 1075.013480][T23304] syzkaller0: entered allmulticast mode [ 1075.042698][T23304] syzkaller0: entered promiscuous mode [ 1075.084457][T23304] syzkaller0 (unregistering): left promiscuous mode [ 1075.107087][T23304] syzkaller0 (unregistering): left allmulticast mode [ 1075.166651][T23308] netlink: 'syz.1.4074': attribute type 3 has an invalid length. [ 1075.441747][T23318] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1076.312595][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 1077.216518][T23355] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1077.656052][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1077.656073][ T30] audit: type=1326 audit(1746931569.123:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7fc00000 [ 1080.082345][T23396] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4102'. [ 1080.137526][T23396] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4102'. [ 1082.732624][ T1208] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1082.909212][ T1208] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1082.918058][ T1208] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1082.955708][ T1208] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.991127][ T1208] usb 4-1: config 220 has no interface number 2 [ 1083.012427][ T1208] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1083.051017][ T1208] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1083.061712][ T1208] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1083.068822][ T1208] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1083.081759][ T1208] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1083.093214][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.112002][ T1208] usb 4-1: Product: syz [ 1083.121189][ T1208] usb 4-1: Manufacturer: syz [ 1083.125815][ T1208] usb 4-1: SerialNumber: syz [ 1083.370473][ T1208] usb 4-1: selecting invalid altsetting 0 [ 1083.390687][ T1208] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1083.403557][ T1208] usb 4-1: No valid video chain found. [ 1083.438804][ T1208] usb 4-1: selecting invalid altsetting 0 [ 1083.451207][ T1208] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1083.484930][ T1208] usb 4-1: USB disconnect, device number 20 [ 1085.535914][T23483] netlink: 'syz.0.4130': attribute type 11 has an invalid length. [ 1085.551808][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1086.853607][T23503] input: syz0 as /devices/virtual/input/input126 [ 1089.091257][ T5886] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1089.257384][ T5886] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 1089.269510][ T5886] usb 2-1: config 0 has no interface number 0 [ 1089.287241][ T5886] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 1089.306632][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.330962][ T5886] usb 2-1: Product: syz [ 1089.335175][ T5886] usb 2-1: Manufacturer: syz [ 1089.354415][ T5886] usb 2-1: SerialNumber: syz [ 1089.375822][ T5886] usb 2-1: config 0 descriptor?? [ 1089.383072][ T5886] hub 2-1:0.30: bad descriptor, ignoring hub [ 1089.395765][ T5886] hub 2-1:0.30: probe with driver hub failed with error -5 [ 1089.412352][ T5886] keyspan 2-1:0.30: Keyspan - (without firmware) converter detected [ 1089.711779][ T5886] usb 2-1: USB disconnect, device number 124 [ 1089.718621][ T5886] keyspan 2-1:0.30: device disconnected [ 1090.141148][ T5886] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1090.303509][ T5886] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1090.315486][ T5886] usb 5-1: config 0 has no interface number 0 [ 1090.326691][ T5886] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1090.359214][ T5886] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1090.415477][ T5886] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1090.483020][ T5886] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1090.535936][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.572853][ T5886] usb 5-1: Product: syz [ 1090.586668][ T5886] usb 5-1: Manufacturer: syz [ 1090.597756][ T5886] usb 5-1: SerialNumber: syz [ 1090.617570][ T5886] usb 5-1: config 0 descriptor?? [ 1090.640769][ T5886] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1091.816283][ T24] usb 5-1: USB disconnect, device number 32 [ 1091.989331][T23574] netlink: 'syz.0.4163': attribute type 10 has an invalid length. [ 1093.440985][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1094.051162][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1094.064260][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1094.075262][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.085214][ T9] usb 2-1: Product: syz [ 1094.089499][ T9] usb 2-1: Manufacturer: syz [ 1094.094926][ T9] usb 2-1: SerialNumber: syz [ 1094.144168][ T9] usb 2-1: config 0 descriptor?? [ 1094.159840][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1095.302303][T23628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4184'. [ 1095.316998][T23628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4184'. [ 1096.586297][ T9] gspca_sonixj: reg_w1 err -71 [ 1096.641441][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1096.668480][ T9] usb 2-1: USB disconnect, device number 125 [ 1096.991092][ T5887] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1097.141281][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1097.157270][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1097.182625][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1097.202306][ T5887] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1097.211963][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.224064][ T5887] usb 3-1: config 0 descriptor?? [ 1097.543752][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1097.549924][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1097.571685][ T5887] usb 3-1: USB disconnect, device number 28 [ 1098.131047][ T1208] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1098.322942][ T1208] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1098.333639][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.354076][ T1208] usb 2-1: config 0 descriptor?? [ 1099.594290][ T1208] usb 2-1: Cannot set autoneg [ 1099.602192][ T1208] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1099.637955][ T1208] usb 2-1: USB disconnect, device number 126 [ 1100.402038][T23693] delete_channel: no stack [ 1100.911694][ T5887] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1101.074497][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 1101.085222][ T5887] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.108478][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.138765][ T5887] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1101.160391][ T5887] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.176942][T23721] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1101.178254][ T5887] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1101.196258][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.363840][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1101.448068][ T5887] usb 2-1: GET_CAPABILITIES returned 0 [ 1101.461035][ T5887] usbtmc 2-1:16.0: can't read capabilities [ 1101.659703][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1101.668860][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1101.678331][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1101.687446][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1101.709605][ T5887] usb 2-1: USB disconnect, device number 127 [ 1102.802607][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4228'. [ 1102.852710][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1102.925836][T23751] [ 1102.928563][T23751] ============================= [ 1102.933502][T23751] WARNING: suspicious RCU usage [ 1102.938406][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1102.945583][T23751] ----------------------------- [ 1102.950455][T23751] net/ipv6/ip6_fib.c:2024 suspicious rcu_dereference_protected() usage! [ 1102.958864][T23751] [ 1102.958864][T23751] other info that might help us debug this: [ 1102.958864][T23751] [ 1102.969164][T23751] [ 1102.969164][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1102.977294][T23751] 3 locks held by syz.0.4228/23751: [ 1102.982544][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1102.991625][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1103.001349][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1103.013571][T23751] [ 1103.013571][T23751] stack backtrace: [ 1103.019682][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1103.019713][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1103.019734][T23751] Call Trace: [ 1103.019745][T23751] [ 1103.019755][T23751] dump_stack_lvl+0x189/0x250 [ 1103.019795][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.019827][T23751] ? __pfx__printk+0x10/0x10 [ 1103.019852][T23751] ? print_lock_name+0xde/0x100 [ 1103.019891][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1103.019933][T23751] fib6_del+0x1516/0x1550 [ 1103.019963][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.020008][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1103.020030][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.020079][T23751] fib6_clean_node+0x29f/0x590 [ 1103.020142][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.020176][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1103.020216][T23751] fib6_walk_continue+0x678/0x910 [ 1103.020255][T23751] fib6_walk+0x149/0x290 [ 1103.020280][T23751] __fib6_clean_all+0x234/0x380 [ 1103.020302][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1103.020325][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.020351][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1103.020379][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.020402][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.020428][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.020468][T23751] rt6_disable_ip+0x120/0x720 [ 1103.020502][T23751] ? rcu_is_watching+0x15/0xb0 [ 1103.020534][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1103.020571][T23751] addrconf_ifdown+0x15d/0x1880 [ 1103.020593][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1103.020624][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1103.020651][T23751] ? tls_dev_event+0x717/0xec0 [ 1103.020682][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1103.020719][T23751] addrconf_notify+0x1bc/0x1010 [ 1103.020751][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.020781][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.020831][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.020879][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.020911][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1103.020947][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1103.020986][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1103.021022][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1103.021065][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.021103][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.021151][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.021196][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.021243][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1103.021267][T23751] rtnl_dellink+0x488/0x710 [ 1103.021296][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.021417][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.021438][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1103.021466][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1103.021486][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.021513][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1103.021533][T23751] ? __copy_skb_header+0xa7/0x550 [ 1103.021571][T23751] netlink_rcv_skb+0x219/0x490 [ 1103.021598][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.021623][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1103.021654][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 1103.021666][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.021689][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.021718][T23751] netlink_unicast+0x758/0x8d0 [ 1103.021755][T23751] netlink_sendmsg+0x805/0xb30 [ 1103.021794][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.021822][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1103.021851][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1103.021879][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1103.021904][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.021931][T23751] __sock_sendmsg+0x219/0x270 [ 1103.021957][T23751] ____sys_sendmsg+0x505/0x830 [ 1103.021994][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1103.022032][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1103.022071][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1103.022113][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.022186][T23751] ? __fget_files+0x2a/0x420 [ 1103.022215][T23751] ? __fget_files+0x3a0/0x420 [ 1103.022257][T23751] __sys_sendmsg+0x164/0x220 [ 1103.022289][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1103.022337][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1103.022366][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.022395][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1103.022425][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.022456][T23751] do_fast_syscall_32+0x34/0x80 [ 1103.022485][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.022513][T23751] RIP: 0023:0xf7f18539 [ 1103.022533][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.022554][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1103.022578][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1103.022594][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.022608][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.022622][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.022635][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.022669][T23751] [ 1103.022741][T23751] [ 1103.052695][ T5892] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1103.055045][T23751] ============================= [ 1103.060569][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.064858][T23751] WARNING: suspicious RCU usage [ 1103.064872][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1103.064885][T23751] ----------------------------- [ 1103.064895][T23751] net/ipv6/ip6_fib.c:2036 suspicious rcu_dereference_protected() usage! [ 1103.064911][T23751] [ 1103.064911][T23751] other info that might help us debug this: [ 1103.064911][T23751] [ 1103.064921][T23751] [ 1103.064921][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1103.064935][T23751] 3 locks held by syz.0.4228/23751: [ 1103.064948][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1103.065015][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1103.065076][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1103.065146][T23751] [ 1103.065146][T23751] stack backtrace: [ 1103.065158][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1103.065185][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1103.065198][T23751] Call Trace: [ 1103.065208][T23751] [ 1103.065218][T23751] dump_stack_lvl+0x189/0x250 [ 1103.065254][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.065285][T23751] ? __pfx__printk+0x10/0x10 [ 1103.065311][T23751] ? print_lock_name+0xde/0x100 [ 1103.065351][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1103.065389][T23751] fib6_del+0x595/0x1550 [ 1103.065436][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1103.065458][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.065506][T23751] fib6_clean_node+0x29f/0x590 [ 1103.065534][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.065567][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1103.065606][T23751] fib6_walk_continue+0x678/0x910 [ 1103.065645][T23751] fib6_walk+0x149/0x290 [ 1103.065672][T23751] __fib6_clean_all+0x234/0x380 [ 1103.065694][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1103.065717][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.065743][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1103.065770][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.065794][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.065820][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.065865][T23751] rt6_disable_ip+0x120/0x720 [ 1103.065901][T23751] ? rcu_is_watching+0x15/0xb0 [ 1103.065936][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1103.065977][T23751] addrconf_ifdown+0x15d/0x1880 [ 1103.066001][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1103.066034][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1103.066065][T23751] ? tls_dev_event+0x717/0xec0 [ 1103.066108][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1103.066147][T23751] addrconf_notify+0x1bc/0x1010 [ 1103.066181][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.066215][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.066277][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.066315][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.066351][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1103.066390][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1103.066431][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1103.066470][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1103.066517][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.066549][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.066600][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.066649][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.066700][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1103.066725][T23751] rtnl_dellink+0x488/0x710 [ 1103.066757][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.066888][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.066912][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1103.066941][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1103.066965][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.066994][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1103.067017][T23751] ? __copy_skb_header+0xa7/0x550 [ 1103.067059][T23751] netlink_rcv_skb+0x219/0x490 [ 1103.067094][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.067121][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1103.067170][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.067195][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.067227][T23751] netlink_unicast+0x758/0x8d0 [ 1103.067264][T23751] netlink_sendmsg+0x805/0xb30 [ 1103.067303][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.067333][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1103.067361][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1103.067388][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1103.067415][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.067442][T23751] __sock_sendmsg+0x219/0x270 [ 1103.067469][T23751] ____sys_sendmsg+0x505/0x830 [ 1103.067508][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1103.067546][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1103.067584][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1103.067618][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.067691][T23751] ? __fget_files+0x2a/0x420 [ 1103.067720][T23751] ? __fget_files+0x3a0/0x420 [ 1103.067762][T23751] __sys_sendmsg+0x164/0x220 [ 1103.067795][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1103.067844][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1103.067873][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.067903][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1103.067934][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.067966][T23751] do_fast_syscall_32+0x34/0x80 [ 1103.067996][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.068024][T23751] RIP: 0023:0xf7f18539 [ 1103.068044][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.068064][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1103.068095][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1103.068111][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.068125][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.068138][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.068153][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.068186][T23751] [ 1103.068198][T23751] [ 1103.140716][ T5892] usb 2-1: config 0 descriptor?? [ 1103.145603][T23751] ============================= [ 1103.145616][T23751] WARNING: suspicious RCU usage [ 1103.145627][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1103.145641][T23751] ----------------------------- [ 1103.145650][T23751] net/ipv6/ip6_fib.c:1922 suspicious rcu_dereference_protected() usage! [ 1103.145666][T23751] [ 1103.145666][T23751] other info that might help us debug this: [ 1103.145666][T23751] [ 1103.145675][T23751] [ 1103.145675][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1103.145690][T23751] 3 locks held by syz.0.4228/23751: [ 1103.145704][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1103.145768][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1103.145828][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1103.145884][T23751] [ 1103.145884][T23751] stack backtrace: [ 1103.145897][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1103.145921][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1103.145935][T23751] Call Trace: [ 1103.145944][T23751] [ 1103.145953][T23751] dump_stack_lvl+0x189/0x250 [ 1103.145988][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.146017][T23751] ? __pfx__printk+0x10/0x10 [ 1103.146042][T23751] ? print_lock_name+0xde/0x100 [ 1103.146080][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1103.146123][T23751] fib6_del+0x651/0x1550 [ 1103.146167][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1103.146189][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.146233][T23751] fib6_clean_node+0x29f/0x590 [ 1103.146260][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.146295][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1103.146338][T23751] fib6_walk_continue+0x678/0x910 [ 1103.146379][T23751] fib6_walk+0x149/0x290 [ 1103.146406][T23751] __fib6_clean_all+0x234/0x380 [ 1103.146429][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1103.146455][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.146482][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1103.146511][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.146536][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.146564][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.146604][T23751] rt6_disable_ip+0x120/0x720 [ 1103.146639][T23751] ? rcu_is_watching+0x15/0xb0 [ 1103.146673][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1103.146711][T23751] addrconf_ifdown+0x15d/0x1880 [ 1103.146734][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1103.146766][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1103.146795][T23751] ? tls_dev_event+0x717/0xec0 [ 1103.146826][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1103.146864][T23751] addrconf_notify+0x1bc/0x1010 [ 1103.146897][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.146929][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.146980][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.147017][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.147052][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1103.147108][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1103.147150][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1103.147188][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1103.147233][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.147263][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.147313][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.147361][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.147410][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1103.147434][T23751] rtnl_dellink+0x488/0x710 [ 1103.147465][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.147590][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.147613][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1103.147660][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1103.147684][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.147715][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1103.147740][T23751] ? __copy_skb_header+0xa7/0x550 [ 1103.147783][T23751] netlink_rcv_skb+0x219/0x490 [ 1103.147811][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.147838][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1103.147886][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.147911][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.147943][T23751] netlink_unicast+0x758/0x8d0 [ 1103.147979][T23751] netlink_sendmsg+0x805/0xb30 [ 1103.148016][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.148046][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1103.148075][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1103.148115][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1103.148141][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.148168][T23751] __sock_sendmsg+0x219/0x270 [ 1103.148195][T23751] ____sys_sendmsg+0x505/0x830 [ 1103.148233][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1103.148272][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1103.148311][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1103.148344][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.148416][T23751] ? __fget_files+0x2a/0x420 [ 1103.148444][T23751] ? __fget_files+0x3a0/0x420 [ 1103.148487][T23751] __sys_sendmsg+0x164/0x220 [ 1103.148520][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1103.148568][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1103.148599][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.148629][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1103.148660][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.148691][T23751] do_fast_syscall_32+0x34/0x80 [ 1103.148721][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.148751][T23751] RIP: 0023:0xf7f18539 [ 1103.148770][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.148791][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1103.148814][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1103.148831][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.148845][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.148858][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.148872][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.148906][T23751] [ 1103.148916][T23751] [ 1103.188752][ T5892] hso 2-1:0.0: Can't find BULK IN endpoint [ 1103.191157][T23751] ============================= [ 1103.191170][T23751] WARNING: suspicious RCU usage [ 1103.191182][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1103.191197][T23751] ----------------------------- [ 1103.506104][ T5892] usb 2-1: USB disconnect, device number 2 [ 1103.513863][T23751] net/ipv6/ip6_fib.c:1931 suspicious rcu_dereference_protected() usage! [ 1103.513884][T23751] [ 1103.513884][T23751] other info that might help us debug this: [ 1103.513884][T23751] [ 1103.513895][T23751] [ 1103.513895][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1103.513909][T23751] 3 locks held by syz.0.4228/23751: [ 1103.513922][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1103.513988][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1103.514048][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1103.514114][T23751] [ 1103.514114][T23751] stack backtrace: [ 1103.514127][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1103.514152][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1103.514165][T23751] Call Trace: [ 1103.514174][T23751] [ 1103.514183][T23751] dump_stack_lvl+0x189/0x250 [ 1103.514217][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.514248][T23751] ? __pfx__printk+0x10/0x10 [ 1103.514273][T23751] ? print_lock_name+0xde/0x100 [ 1103.514311][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1103.514347][T23751] fib6_del+0x67a/0x1550 [ 1103.514393][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1103.514413][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.514460][T23751] fib6_clean_node+0x29f/0x590 [ 1103.514487][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.514519][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1103.514556][T23751] fib6_walk_continue+0x678/0x910 [ 1103.514594][T23751] fib6_walk+0x149/0x290 [ 1103.514619][T23751] __fib6_clean_all+0x234/0x380 [ 1103.514640][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1103.514662][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.514687][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1103.514714][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1103.514736][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1103.514761][T23751] ? __lock_acquire+0xaac/0xd20 [ 1103.514799][T23751] rt6_disable_ip+0x120/0x720 [ 1103.514831][T23751] ? rcu_is_watching+0x15/0xb0 [ 1103.514862][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1103.514896][T23751] addrconf_ifdown+0x15d/0x1880 [ 1103.514917][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1103.514946][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1103.514975][T23751] ? tls_dev_event+0x717/0xec0 [ 1103.515007][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1103.515047][T23751] addrconf_notify+0x1bc/0x1010 [ 1103.515091][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.515123][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.515174][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.515210][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.515245][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1103.515283][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1103.515323][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1103.515360][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1103.515405][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1103.515436][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1103.515486][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1103.515533][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1103.515581][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1103.515605][T23751] rtnl_dellink+0x488/0x710 [ 1103.515636][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.515760][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1103.515783][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1103.515811][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1103.515835][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.515863][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1103.515885][T23751] ? __copy_skb_header+0xa7/0x550 [ 1103.515926][T23751] netlink_rcv_skb+0x219/0x490 [ 1103.515952][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1103.515978][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1103.516024][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.516047][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1103.516083][T23751] netlink_unicast+0x758/0x8d0 [ 1103.516117][T23751] netlink_sendmsg+0x805/0xb30 [ 1103.516153][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.516182][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1103.516209][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1103.516235][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1103.516260][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.516286][T23751] __sock_sendmsg+0x219/0x270 [ 1103.516311][T23751] ____sys_sendmsg+0x505/0x830 [ 1103.516348][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1103.516385][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1103.516423][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1103.516457][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.516528][T23751] ? __fget_files+0x2a/0x420 [ 1103.516555][T23751] ? __fget_files+0x3a0/0x420 [ 1103.516595][T23751] __sys_sendmsg+0x164/0x220 [ 1103.516627][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1103.516673][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1103.516702][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.516729][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1103.516759][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.516789][T23751] do_fast_syscall_32+0x34/0x80 [ 1103.516818][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.516847][T23751] RIP: 0023:0xf7f18539 [ 1103.516865][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1103.516886][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1103.516907][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1103.516923][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.516936][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.516950][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1103.516964][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.516996][T23751] [ 1103.517008][T23751] [ 1105.370130][T23751] ============================= [ 1105.375045][T23751] WARNING: suspicious RCU usage [ 1105.379921][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1105.387116][T23751] ----------------------------- [ 1105.392033][T23751] net/ipv6/ip6_fib.c:1976 suspicious rcu_dereference_protected() usage! [ 1105.400380][T23751] [ 1105.400380][T23751] other info that might help us debug this: [ 1105.400380][T23751] [ 1105.410673][T23751] [ 1105.410673][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1105.418795][T23751] 4 locks held by syz.0.4228/23751: [ 1105.424047][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1105.433134][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1105.442707][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1105.452375][T23751] #3: ffff88806463ad38 (&net->ipv6.fib6_walker_lock){++..}-{3:3}, at: fib6_del+0xb3f/0x1550 [ 1105.462631][T23751] [ 1105.462631][T23751] stack backtrace: [ 1105.468543][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1105.468563][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1105.468573][T23751] Call Trace: [ 1105.468580][T23751] [ 1105.468588][T23751] dump_stack_lvl+0x189/0x250 [ 1105.468615][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1105.468638][T23751] ? __pfx__printk+0x10/0x10 [ 1105.468651][T23751] ? fib6_del+0xb3f/0x1550 [ 1105.468670][T23751] ? print_lock_name+0xde/0x100 [ 1105.468706][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1105.468745][T23751] fib6_del+0xd5c/0x1550 [ 1105.468771][T23751] ? fib6_del+0x5a1/0x1550 [ 1105.468808][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1105.468824][T23751] ? __lock_acquire+0xaac/0xd20 [ 1105.468863][T23751] fib6_clean_node+0x29f/0x590 [ 1105.468884][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1105.468907][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1105.468935][T23751] fib6_walk_continue+0x678/0x910 [ 1105.468962][T23751] fib6_walk+0x149/0x290 [ 1105.468981][T23751] __fib6_clean_all+0x234/0x380 [ 1105.468996][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1105.469012][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1105.469033][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1105.469052][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1105.469069][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1105.469087][T23751] ? __lock_acquire+0xaac/0xd20 [ 1105.469117][T23751] rt6_disable_ip+0x120/0x720 [ 1105.469140][T23751] ? rcu_is_watching+0x15/0xb0 [ 1105.469175][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1105.469211][T23751] addrconf_ifdown+0x15d/0x1880 [ 1105.469234][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1105.469262][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1105.469282][T23751] ? tls_dev_event+0x717/0xec0 [ 1105.469304][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1105.469329][T23751] addrconf_notify+0x1bc/0x1010 [ 1105.469351][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1105.469373][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1105.469409][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1105.469434][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1105.469457][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1105.469483][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1105.469510][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1105.469536][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1105.469567][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1105.469588][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1105.469622][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1105.469655][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1105.469688][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1105.469705][T23751] rtnl_dellink+0x488/0x710 [ 1105.469726][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1105.469811][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1105.469834][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1105.469868][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1105.469892][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1105.469920][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1105.469936][T23751] ? __copy_skb_header+0xa7/0x550 [ 1105.469963][T23751] netlink_rcv_skb+0x219/0x490 [ 1105.469982][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1105.470000][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1105.470031][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1105.470047][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1105.470068][T23751] netlink_unicast+0x758/0x8d0 [ 1105.470092][T23751] netlink_sendmsg+0x805/0xb30 [ 1105.470118][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.470137][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1105.470156][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1105.470174][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1105.470191][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1105.470209][T23751] __sock_sendmsg+0x219/0x270 [ 1105.470226][T23751] ____sys_sendmsg+0x505/0x830 [ 1105.470251][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1105.470276][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1105.470301][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1105.470323][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1105.470370][T23751] ? __fget_files+0x2a/0x420 [ 1105.470389][T23751] ? __fget_files+0x3a0/0x420 [ 1105.470417][T23751] __sys_sendmsg+0x164/0x220 [ 1105.470438][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1105.470470][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1105.470489][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1105.470509][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1105.470529][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1105.470550][T23751] do_fast_syscall_32+0x34/0x80 [ 1105.470569][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.470588][T23751] RIP: 0023:0xf7f18539 [ 1105.470601][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1105.470615][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1105.470630][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1105.470641][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1105.470649][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1105.470658][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1105.470668][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.470689][T23751] [ 1105.470698][T23751] [ 1105.987729][T23751] ============================= [ 1105.992626][T23751] WARNING: suspicious RCU usage [ 1105.997483][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1106.004637][T23751] ----------------------------- [ 1106.009496][T23751] net/ipv6/ip6_fib.c:1806 suspicious rcu_dereference_protected() usage! [ 1106.017879][T23751] [ 1106.017879][T23751] other info that might help us debug this: [ 1106.017879][T23751] [ 1106.028153][T23751] [ 1106.028153][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1106.036281][T23751] 3 locks held by syz.0.4228/23751: [ 1106.041538][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1106.050556][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1106.060123][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1106.069782][T23751] [ 1106.069782][T23751] stack backtrace: [ 1106.075746][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1106.075772][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1106.075785][T23751] Call Trace: [ 1106.075793][T23751] [ 1106.075802][T23751] dump_stack_lvl+0x189/0x250 [ 1106.075857][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.075897][T23751] ? __pfx__printk+0x10/0x10 [ 1106.075925][T23751] ? print_lock_name+0xde/0x100 [ 1106.075967][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1106.076006][T23751] fib6_repair_tree+0xdad/0x11c0 [ 1106.076055][T23751] fib6_del+0xed2/0x1550 [ 1106.076082][T23751] ? fib6_del+0x5a1/0x1550 [ 1106.076122][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1106.076144][T23751] ? __lock_acquire+0xaac/0xd20 [ 1106.076194][T23751] fib6_clean_node+0x29f/0x590 [ 1106.076223][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1106.076256][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1106.076297][T23751] fib6_walk_continue+0x678/0x910 [ 1106.076338][T23751] fib6_walk+0x149/0x290 [ 1106.076365][T23751] __fib6_clean_all+0x234/0x380 [ 1106.076388][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1106.076413][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1106.076440][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1106.076469][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1106.076494][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1106.076520][T23751] ? __lock_acquire+0xaac/0xd20 [ 1106.076561][T23751] rt6_disable_ip+0x120/0x720 [ 1106.076594][T23751] ? rcu_is_watching+0x15/0xb0 [ 1106.076626][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1106.076662][T23751] addrconf_ifdown+0x15d/0x1880 [ 1106.076685][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1106.076716][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1106.076744][T23751] ? tls_dev_event+0x717/0xec0 [ 1106.076776][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1106.076812][T23751] addrconf_notify+0x1bc/0x1010 [ 1106.076845][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1106.076883][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1106.076935][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1106.076972][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1106.077006][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1106.077043][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1106.077082][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1106.077120][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1106.077165][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1106.077196][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1106.077246][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1106.077294][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1106.077342][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1106.077367][T23751] rtnl_dellink+0x488/0x710 [ 1106.077398][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1106.077520][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1106.077544][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1106.077573][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1106.077596][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.077624][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1106.077645][T23751] ? __copy_skb_header+0xa7/0x550 [ 1106.077685][T23751] netlink_rcv_skb+0x219/0x490 [ 1106.077712][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.077738][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.077784][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.077809][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.077839][T23751] netlink_unicast+0x758/0x8d0 [ 1106.077881][T23751] netlink_sendmsg+0x805/0xb30 [ 1106.077916][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.077945][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1106.077972][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1106.077998][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1106.078023][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.078049][T23751] __sock_sendmsg+0x219/0x270 [ 1106.078074][T23751] ____sys_sendmsg+0x505/0x830 [ 1106.078110][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.078146][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1106.078183][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1106.078217][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.078286][T23751] ? __fget_files+0x2a/0x420 [ 1106.078314][T23751] ? __fget_files+0x3a0/0x420 [ 1106.078354][T23751] __sys_sendmsg+0x164/0x220 [ 1106.078385][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1106.078431][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1106.078461][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.078489][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1106.078519][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.078549][T23751] do_fast_syscall_32+0x34/0x80 [ 1106.078577][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1106.078604][T23751] RIP: 0023:0xf7f18539 [ 1106.078623][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1106.078643][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1106.078665][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1106.078681][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1106.078694][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1106.078707][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1106.078719][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.078751][T23751] [ 1106.078761][T23751] [ 1106.596026][T23751] ============================= [ 1106.600931][T23751] WARNING: suspicious RCU usage [ 1106.605790][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1106.612942][T23751] ----------------------------- [ 1106.617806][T23751] net/ipv6/ip6_fib.c:1808 suspicious rcu_dereference_protected() usage! [ 1106.626199][T23751] [ 1106.626199][T23751] other info that might help us debug this: [ 1106.626199][T23751] [ 1106.636470][T23751] [ 1106.636470][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1106.644586][T23751] 3 locks held by syz.0.4228/23751: [ 1106.649799][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1106.658839][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1106.668522][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1106.678171][T23751] [ 1106.678171][T23751] stack backtrace: [ 1106.684128][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1106.684148][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1106.684159][T23751] Call Trace: [ 1106.684166][T23751] [ 1106.684173][T23751] dump_stack_lvl+0x189/0x250 [ 1106.684201][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.684224][T23751] ? __pfx__printk+0x10/0x10 [ 1106.684243][T23751] ? print_lock_name+0xde/0x100 [ 1106.684271][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1106.684298][T23751] fib6_repair_tree+0xdd6/0x11c0 [ 1106.684331][T23751] fib6_del+0xed2/0x1550 [ 1106.684349][T23751] ? fib6_del+0x5a1/0x1550 [ 1106.684377][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1106.684392][T23751] ? __lock_acquire+0xaac/0xd20 [ 1106.684425][T23751] fib6_clean_node+0x29f/0x590 [ 1106.684445][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1106.684468][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1106.684495][T23751] fib6_walk_continue+0x678/0x910 [ 1106.684522][T23751] fib6_walk+0x149/0x290 [ 1106.684541][T23751] __fib6_clean_all+0x234/0x380 [ 1106.684556][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1106.684573][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1106.684590][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1106.684610][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1106.684627][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1106.684645][T23751] ? __lock_acquire+0xaac/0xd20 [ 1106.684673][T23751] rt6_disable_ip+0x120/0x720 [ 1106.684696][T23751] ? rcu_is_watching+0x15/0xb0 [ 1106.684719][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1106.684745][T23751] addrconf_ifdown+0x15d/0x1880 [ 1106.684761][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1106.684784][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1106.684804][T23751] ? tls_dev_event+0x717/0xec0 [ 1106.684838][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1106.684862][T23751] addrconf_notify+0x1bc/0x1010 [ 1106.684888][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1106.684920][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1106.684969][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1106.685000][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1106.685034][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1106.685059][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1106.685084][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1106.685109][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1106.685139][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1106.685159][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1106.685191][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1106.685222][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1106.685254][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1106.685270][T23751] rtnl_dellink+0x488/0x710 [ 1106.685291][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1106.685371][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1106.685386][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1106.685404][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1106.685419][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.685438][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1106.685452][T23751] ? __copy_skb_header+0xa7/0x550 [ 1106.685479][T23751] netlink_rcv_skb+0x219/0x490 [ 1106.685497][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1106.685514][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1106.685543][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.685559][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1106.685579][T23751] netlink_unicast+0x758/0x8d0 [ 1106.685601][T23751] netlink_sendmsg+0x805/0xb30 [ 1106.685624][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.685643][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1106.685661][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1106.685679][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1106.685696][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1106.685732][T23751] __sock_sendmsg+0x219/0x270 [ 1106.685749][T23751] ____sys_sendmsg+0x505/0x830 [ 1106.685775][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1106.685800][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1106.685825][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1106.685847][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1106.685894][T23751] ? __fget_files+0x2a/0x420 [ 1106.685913][T23751] ? __fget_files+0x3a0/0x420 [ 1106.685940][T23751] __sys_sendmsg+0x164/0x220 [ 1106.685961][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1106.685992][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1106.686026][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.686056][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1106.686086][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.686113][T23751] do_fast_syscall_32+0x34/0x80 [ 1106.686133][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1106.686152][T23751] RIP: 0023:0xf7f18539 [ 1106.686164][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1106.686178][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1106.686194][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1106.686205][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1106.686214][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1106.686223][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1106.686232][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1106.686254][T23751] [ 1106.686261][T23751] [ 1107.203332][T23751] ============================= [ 1107.208294][T23751] WARNING: suspicious RCU usage [ 1107.213212][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1107.220340][T23751] ----------------------------- [ 1107.225247][T23751] net/ipv6/ip6_fib.c:1810 suspicious rcu_dereference_protected() usage! [ 1107.233724][T23751] [ 1107.233724][T23751] other info that might help us debug this: [ 1107.233724][T23751] [ 1107.244029][T23751] [ 1107.244029][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1107.252168][T23751] 3 locks held by syz.0.4228/23751: [ 1107.257391][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1107.266461][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1107.276049][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1107.285756][T23751] [ 1107.285756][T23751] stack backtrace: [ 1107.291705][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1107.291733][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1107.291753][T23751] Call Trace: [ 1107.291762][T23751] [ 1107.291772][T23751] dump_stack_lvl+0x189/0x250 [ 1107.291809][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.291841][T23751] ? __pfx__printk+0x10/0x10 [ 1107.291869][T23751] ? print_lock_name+0xde/0x100 [ 1107.291909][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1107.291948][T23751] fib6_repair_tree+0xdff/0x11c0 [ 1107.291997][T23751] fib6_del+0xed2/0x1550 [ 1107.292023][T23751] ? fib6_del+0x5a1/0x1550 [ 1107.292063][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1107.292085][T23751] ? __lock_acquire+0xaac/0xd20 [ 1107.292133][T23751] fib6_clean_node+0x29f/0x590 [ 1107.292162][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1107.292196][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1107.292236][T23751] fib6_walk_continue+0x678/0x910 [ 1107.292276][T23751] fib6_walk+0x149/0x290 [ 1107.292303][T23751] __fib6_clean_all+0x234/0x380 [ 1107.292325][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1107.292350][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1107.292375][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1107.292404][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1107.292428][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1107.292455][T23751] ? __lock_acquire+0xaac/0xd20 [ 1107.292496][T23751] rt6_disable_ip+0x120/0x720 [ 1107.292530][T23751] ? rcu_is_watching+0x15/0xb0 [ 1107.292562][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1107.292599][T23751] addrconf_ifdown+0x15d/0x1880 [ 1107.292622][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1107.292653][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1107.292682][T23751] ? tls_dev_event+0x717/0xec0 [ 1107.292714][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1107.292758][T23751] addrconf_notify+0x1bc/0x1010 [ 1107.292789][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1107.292821][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1107.292871][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1107.292908][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1107.292942][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1107.292991][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1107.293027][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1107.293064][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1107.293105][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1107.293135][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1107.293183][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1107.293229][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1107.293275][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1107.293298][T23751] rtnl_dellink+0x488/0x710 [ 1107.293327][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1107.293447][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1107.293469][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1107.293495][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1107.293516][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.293543][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1107.293563][T23751] ? __copy_skb_header+0xa7/0x550 [ 1107.293599][T23751] netlink_rcv_skb+0x219/0x490 [ 1107.293623][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.293646][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.293688][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.293709][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.293744][T23751] netlink_unicast+0x758/0x8d0 [ 1107.293776][T23751] netlink_sendmsg+0x805/0xb30 [ 1107.293812][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.293839][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1107.293865][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1107.293889][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.293913][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.293939][T23751] __sock_sendmsg+0x219/0x270 [ 1107.293963][T23751] ____sys_sendmsg+0x505/0x830 [ 1107.293997][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.294032][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1107.294066][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1107.294097][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.294163][T23751] ? __fget_files+0x2a/0x420 [ 1107.294189][T23751] ? __fget_files+0x3a0/0x420 [ 1107.294226][T23751] __sys_sendmsg+0x164/0x220 [ 1107.294255][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1107.294299][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1107.294326][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.294353][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1107.294380][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.294409][T23751] do_fast_syscall_32+0x34/0x80 [ 1107.294435][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1107.294460][T23751] RIP: 0023:0xf7f18539 [ 1107.294478][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1107.294497][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1107.294518][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1107.294533][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.294545][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.294557][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1107.294570][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.294601][T23751] [ 1107.294611][T23751] [ 1107.813189][T23751] ============================= [ 1107.818046][T23751] WARNING: suspicious RCU usage [ 1107.822942][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1107.830063][T23751] ----------------------------- [ 1107.834961][T23751] net/ipv6/ip6_fib.c:1812 suspicious rcu_dereference_protected() usage! [ 1107.843348][T23751] [ 1107.843348][T23751] other info that might help us debug this: [ 1107.843348][T23751] [ 1107.853632][T23751] [ 1107.853632][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1107.861747][T23751] 3 locks held by syz.0.4228/23751: [ 1107.866952][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1107.876000][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1107.885682][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1107.895382][T23751] [ 1107.895382][T23751] stack backtrace: [ 1107.901316][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1107.901336][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1107.901346][T23751] Call Trace: [ 1107.901353][T23751] [ 1107.901360][T23751] dump_stack_lvl+0x189/0x250 [ 1107.901388][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.901410][T23751] ? __pfx__printk+0x10/0x10 [ 1107.901429][T23751] ? print_lock_name+0xde/0x100 [ 1107.901457][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1107.901485][T23751] fib6_repair_tree+0xe28/0x11c0 [ 1107.901518][T23751] fib6_del+0xed2/0x1550 [ 1107.901535][T23751] ? fib6_del+0x5a1/0x1550 [ 1107.901563][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1107.901584][T23751] ? __lock_acquire+0xaac/0xd20 [ 1107.901631][T23751] fib6_clean_node+0x29f/0x590 [ 1107.901663][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1107.901695][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1107.901728][T23751] fib6_walk_continue+0x678/0x910 [ 1107.901756][T23751] fib6_walk+0x149/0x290 [ 1107.901774][T23751] __fib6_clean_all+0x234/0x380 [ 1107.901790][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1107.901807][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1107.901825][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1107.901844][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1107.901861][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1107.901879][T23751] ? __lock_acquire+0xaac/0xd20 [ 1107.901907][T23751] rt6_disable_ip+0x120/0x720 [ 1107.901930][T23751] ? rcu_is_watching+0x15/0xb0 [ 1107.901953][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1107.901980][T23751] addrconf_ifdown+0x15d/0x1880 [ 1107.901996][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1107.902019][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1107.902038][T23751] ? tls_dev_event+0x717/0xec0 [ 1107.902060][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1107.902085][T23751] addrconf_notify+0x1bc/0x1010 [ 1107.902107][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1107.902129][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1107.902164][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1107.902189][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1107.902213][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1107.902238][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1107.902265][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1107.902291][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1107.902321][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1107.902342][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1107.902376][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1107.902408][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1107.902441][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1107.902457][T23751] rtnl_dellink+0x488/0x710 [ 1107.902479][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1107.902562][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1107.902577][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1107.902596][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1107.902612][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.902631][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1107.902646][T23751] ? __copy_skb_header+0xa7/0x550 [ 1107.902674][T23751] netlink_rcv_skb+0x219/0x490 [ 1107.902692][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.902724][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.902770][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.902794][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.902820][T23751] netlink_unicast+0x758/0x8d0 [ 1107.902844][T23751] netlink_sendmsg+0x805/0xb30 [ 1107.902868][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.902887][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1107.902906][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1107.902924][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.902941][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.902959][T23751] __sock_sendmsg+0x219/0x270 [ 1107.902978][T23751] ____sys_sendmsg+0x505/0x830 [ 1107.903002][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.903027][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1107.903052][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1107.903074][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.903121][T23751] ? __fget_files+0x2a/0x420 [ 1107.903140][T23751] ? __fget_files+0x3a0/0x420 [ 1107.903168][T23751] __sys_sendmsg+0x164/0x220 [ 1107.903189][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1107.903220][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1107.903240][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.903259][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1107.903279][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1107.903300][T23751] do_fast_syscall_32+0x34/0x80 [ 1107.903319][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1107.903338][T23751] RIP: 0023:0xf7f18539 [ 1107.903351][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1107.903364][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1107.903380][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1107.903391][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1107.903400][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1107.903409][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1107.903418][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1107.903441][T23751] [ 1107.903449][T23751] [ 1108.421357][T23751] ============================= [ 1108.426210][T23751] WARNING: suspicious RCU usage [ 1108.431140][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1108.438272][T23751] ----------------------------- [ 1108.443173][T23751] net/ipv6/ip6_fib.c:1814 suspicious rcu_dereference_protected() usage! [ 1108.451548][T23751] [ 1108.451548][T23751] other info that might help us debug this: [ 1108.451548][T23751] [ 1108.461846][T23751] [ 1108.461846][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1108.469933][T23751] 3 locks held by syz.0.4228/23751: [ 1108.475190][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1108.484264][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1108.493840][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1108.503615][T23751] [ 1108.503615][T23751] stack backtrace: [ 1108.509520][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1108.509542][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.509553][T23751] Call Trace: [ 1108.509560][T23751] [ 1108.509569][T23751] dump_stack_lvl+0x189/0x250 [ 1108.509601][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.509627][T23751] ? __pfx__printk+0x10/0x10 [ 1108.509648][T23751] ? print_lock_name+0xde/0x100 [ 1108.509680][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1108.509710][T23751] fib6_repair_tree+0xe51/0x11c0 [ 1108.509748][T23751] fib6_del+0xed2/0x1550 [ 1108.509768][T23751] ? fib6_del+0x5a1/0x1550 [ 1108.509798][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1108.509816][T23751] ? __lock_acquire+0xaac/0xd20 [ 1108.509861][T23751] fib6_clean_node+0x29f/0x590 [ 1108.509883][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1108.509909][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1108.509940][T23751] fib6_walk_continue+0x678/0x910 [ 1108.509970][T23751] fib6_walk+0x149/0x290 [ 1108.509991][T23751] __fib6_clean_all+0x234/0x380 [ 1108.510009][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1108.510027][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1108.510048][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1108.510069][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1108.510088][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1108.510128][T23751] ? __lock_acquire+0xaac/0xd20 [ 1108.510158][T23751] rt6_disable_ip+0x120/0x720 [ 1108.510183][T23751] ? rcu_is_watching+0x15/0xb0 [ 1108.510208][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1108.510235][T23751] addrconf_ifdown+0x15d/0x1880 [ 1108.510252][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1108.510276][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1108.510296][T23751] ? tls_dev_event+0x717/0xec0 [ 1108.510319][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1108.510359][T23751] addrconf_notify+0x1bc/0x1010 [ 1108.510383][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1108.510407][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1108.510446][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1108.510487][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1108.510525][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1108.510563][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1108.510594][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1108.510622][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1108.510655][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1108.510678][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1108.510715][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1108.510749][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1108.510785][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1108.510803][T23751] rtnl_dellink+0x488/0x710 [ 1108.510833][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1108.510955][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1108.510974][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1108.510995][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1108.511012][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.511033][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1108.511050][T23751] ? __copy_skb_header+0xa7/0x550 [ 1108.511079][T23751] netlink_rcv_skb+0x219/0x490 [ 1108.511099][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.511118][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1108.511152][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.511170][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.511192][T23751] netlink_unicast+0x758/0x8d0 [ 1108.511217][T23751] netlink_sendmsg+0x805/0xb30 [ 1108.511244][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.511265][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1108.511285][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1108.511305][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1108.511323][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.511343][T23751] __sock_sendmsg+0x219/0x270 [ 1108.511361][T23751] ____sys_sendmsg+0x505/0x830 [ 1108.511388][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.511415][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1108.511442][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1108.511472][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.511566][T23751] ? __fget_files+0x2a/0x420 [ 1108.511602][T23751] ? __fget_files+0x3a0/0x420 [ 1108.511655][T23751] __sys_sendmsg+0x164/0x220 [ 1108.511702][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1108.511769][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1108.511793][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.511815][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1108.511856][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.511880][T23751] do_fast_syscall_32+0x34/0x80 [ 1108.511902][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1108.511923][T23751] RIP: 0023:0xf7f18539 [ 1108.511938][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1108.511953][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1108.511970][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1108.511982][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1108.511992][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.512002][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1108.512012][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1108.512037][T23751] [ 1109.025094][T23751] [ 1109.027454][T23751] ============================= [ 1109.032368][T23751] WARNING: suspicious RCU usage [ 1109.037242][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1109.044410][T23751] ----------------------------- [ 1109.049277][T23751] net/ipv6/ip6_fib.c:1816 suspicious rcu_dereference_protected() usage! [ 1109.057667][T23751] [ 1109.057667][T23751] other info that might help us debug this: [ 1109.057667][T23751] [ 1109.067937][T23751] [ 1109.067937][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1109.076057][T23751] 3 locks held by syz.0.4228/23751: [ 1109.081312][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1109.090325][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1109.099891][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1109.109553][T23751] [ 1109.109553][T23751] stack backtrace: [ 1109.115512][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1109.115551][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1109.115564][T23751] Call Trace: [ 1109.115579][T23751] [ 1109.115589][T23751] dump_stack_lvl+0x189/0x250 [ 1109.115626][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.115656][T23751] ? __pfx__printk+0x10/0x10 [ 1109.115682][T23751] ? print_lock_name+0xde/0x100 [ 1109.115722][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1109.115761][T23751] fib6_repair_tree+0xe7a/0x11c0 [ 1109.115809][T23751] fib6_del+0xed2/0x1550 [ 1109.115835][T23751] ? fib6_del+0x5a1/0x1550 [ 1109.115874][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1109.115897][T23751] ? __lock_acquire+0xaac/0xd20 [ 1109.115944][T23751] fib6_clean_node+0x29f/0x590 [ 1109.115973][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1109.116005][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1109.116044][T23751] fib6_walk_continue+0x678/0x910 [ 1109.116084][T23751] fib6_walk+0x149/0x290 [ 1109.116110][T23751] __fib6_clean_all+0x234/0x380 [ 1109.116132][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1109.116155][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.116180][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1109.116207][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1109.116230][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.116254][T23751] ? __lock_acquire+0xaac/0xd20 [ 1109.116292][T23751] rt6_disable_ip+0x120/0x720 [ 1109.116325][T23751] ? rcu_is_watching+0x15/0xb0 [ 1109.116357][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1109.116393][T23751] addrconf_ifdown+0x15d/0x1880 [ 1109.116416][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1109.116446][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1109.116474][T23751] ? tls_dev_event+0x717/0xec0 [ 1109.116504][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1109.116540][T23751] addrconf_notify+0x1bc/0x1010 [ 1109.116579][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1109.116610][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1109.116659][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1109.116695][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1109.116728][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1109.116765][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1109.116802][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1109.116839][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1109.116882][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1109.116912][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1109.116960][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1109.117005][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1109.117052][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1109.117075][T23751] rtnl_dellink+0x488/0x710 [ 1109.117105][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1109.117225][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1109.117247][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1109.117275][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1109.117296][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.117323][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1109.117344][T23751] ? __copy_skb_header+0xa7/0x550 [ 1109.117383][T23751] netlink_rcv_skb+0x219/0x490 [ 1109.117408][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.117433][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1109.117477][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.117501][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.117530][T23751] netlink_unicast+0x758/0x8d0 [ 1109.117563][T23751] netlink_sendmsg+0x805/0xb30 [ 1109.117604][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.117631][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1109.117657][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1109.117682][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1109.117706][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.117731][T23751] __sock_sendmsg+0x219/0x270 [ 1109.117755][T23751] ____sys_sendmsg+0x505/0x830 [ 1109.117789][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.117825][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1109.117860][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1109.117891][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.117957][T23751] ? __fget_files+0x2a/0x420 [ 1109.117984][T23751] ? __fget_files+0x3a0/0x420 [ 1109.118023][T23751] __sys_sendmsg+0x164/0x220 [ 1109.118053][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1109.118097][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1109.118126][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.118153][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1109.118181][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.118210][T23751] do_fast_syscall_32+0x34/0x80 [ 1109.118238][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.118263][T23751] RIP: 0023:0xf7f18539 [ 1109.118281][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1109.118300][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1109.118321][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1109.118335][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.118348][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.118360][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1109.118372][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.118403][T23751] [ 1109.118413][T23751] [ 1109.635637][T23751] ============================= [ 1109.640481][T23751] WARNING: suspicious RCU usage [ 1109.645391][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1109.652552][T23751] ----------------------------- [ 1109.657399][T23751] net/ipv6/ip6_fib.c:1818 suspicious rcu_dereference_protected() usage! [ 1109.665810][T23751] [ 1109.665810][T23751] other info that might help us debug this: [ 1109.665810][T23751] [ 1109.676086][T23751] [ 1109.676086][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1109.684201][T23751] 3 locks held by syz.0.4228/23751: [ 1109.689419][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1109.698453][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1109.708034][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1109.717748][T23751] [ 1109.717748][T23751] stack backtrace: [ 1109.723683][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1109.723712][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1109.723727][T23751] Call Trace: [ 1109.723737][T23751] [ 1109.723748][T23751] dump_stack_lvl+0x189/0x250 [ 1109.723791][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.723816][T23751] ? __pfx__printk+0x10/0x10 [ 1109.723835][T23751] ? print_lock_name+0xde/0x100 [ 1109.723864][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1109.723892][T23751] fib6_repair_tree+0xea3/0x11c0 [ 1109.723925][T23751] fib6_del+0xed2/0x1550 [ 1109.723943][T23751] ? fib6_del+0x5a1/0x1550 [ 1109.723970][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1109.723985][T23751] ? __lock_acquire+0xaac/0xd20 [ 1109.724019][T23751] fib6_clean_node+0x29f/0x590 [ 1109.724039][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1109.724062][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1109.724089][T23751] fib6_walk_continue+0x678/0x910 [ 1109.724116][T23751] fib6_walk+0x149/0x290 [ 1109.724135][T23751] __fib6_clean_all+0x234/0x380 [ 1109.724150][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1109.724167][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.724185][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1109.724204][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1109.724221][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1109.724240][T23751] ? __lock_acquire+0xaac/0xd20 [ 1109.724267][T23751] rt6_disable_ip+0x120/0x720 [ 1109.724291][T23751] ? rcu_is_watching+0x15/0xb0 [ 1109.724314][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1109.724340][T23751] addrconf_ifdown+0x15d/0x1880 [ 1109.724356][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1109.724378][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1109.724397][T23751] ? tls_dev_event+0x717/0xec0 [ 1109.724419][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1109.724444][T23751] addrconf_notify+0x1bc/0x1010 [ 1109.724467][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1109.724489][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1109.724524][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1109.724566][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1109.724589][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1109.724614][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1109.724640][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1109.724665][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1109.724695][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1109.724715][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1109.724748][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1109.724779][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1109.724812][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1109.724838][T23751] rtnl_dellink+0x488/0x710 [ 1109.724867][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1109.724963][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1109.724979][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1109.725016][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1109.725032][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.725051][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1109.725066][T23751] ? __copy_skb_header+0xa7/0x550 [ 1109.725093][T23751] netlink_rcv_skb+0x219/0x490 [ 1109.725111][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.725129][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1109.725160][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.725176][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.725197][T23751] netlink_unicast+0x758/0x8d0 [ 1109.725220][T23751] netlink_sendmsg+0x805/0xb30 [ 1109.725244][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.725263][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1109.725283][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1109.725300][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1109.725317][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.725335][T23751] __sock_sendmsg+0x219/0x270 [ 1109.725352][T23751] ____sys_sendmsg+0x505/0x830 [ 1109.725377][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.725402][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1109.725427][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1109.725449][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.725496][T23751] ? __fget_files+0x2a/0x420 [ 1109.725516][T23751] ? __fget_files+0x3a0/0x420 [ 1109.725542][T23751] __sys_sendmsg+0x164/0x220 [ 1109.725569][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1109.725600][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1109.725620][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.725639][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1109.725659][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.725679][T23751] do_fast_syscall_32+0x34/0x80 [ 1109.725698][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.725718][T23751] RIP: 0023:0xf7f18539 [ 1109.725731][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1109.725744][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1109.725760][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1109.725771][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1109.725780][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.725789][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1109.725798][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.725821][T23751] [ 1109.725874][T23751] [ 1110.243160][T23751] ============================= [ 1110.248010][T23751] WARNING: suspicious RCU usage [ 1110.252908][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1110.260035][T23751] ----------------------------- [ 1110.264948][T23751] net/ipv6/ip6_fib.c:1767 suspicious rcu_dereference_protected() usage! [ 1110.273339][T23751] [ 1110.273339][T23751] other info that might help us debug this: [ 1110.273339][T23751] [ 1110.283623][T23751] [ 1110.283623][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1110.291764][T23751] 3 locks held by syz.0.4228/23751: [ 1110.296977][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1110.306138][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1110.315739][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1110.325390][T23751] [ 1110.325390][T23751] stack backtrace: [ 1110.331427][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1110.331453][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.331463][T23751] Call Trace: [ 1110.331470][T23751] [ 1110.331477][T23751] dump_stack_lvl+0x189/0x250 [ 1110.331506][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.331529][T23751] ? __pfx__printk+0x10/0x10 [ 1110.331546][T23751] ? print_lock_name+0xde/0x100 [ 1110.331574][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1110.331601][T23751] fib6_find_prefix+0x1e8/0x3f0 [ 1110.331620][T23751] fib6_repair_tree+0x10bd/0x11c0 [ 1110.331652][T23751] fib6_del+0xed2/0x1550 [ 1110.331669][T23751] ? fib6_del+0x5a1/0x1550 [ 1110.331698][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1110.331714][T23751] ? __lock_acquire+0xaac/0xd20 [ 1110.331747][T23751] fib6_clean_node+0x29f/0x590 [ 1110.331767][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1110.331790][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1110.331821][T23751] fib6_walk_continue+0x678/0x910 [ 1110.331861][T23751] fib6_walk+0x149/0x290 [ 1110.331888][T23751] __fib6_clean_all+0x234/0x380 [ 1110.331911][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1110.331937][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.331956][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1110.331976][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1110.331993][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.332011][T23751] ? __lock_acquire+0xaac/0xd20 [ 1110.332039][T23751] rt6_disable_ip+0x120/0x720 [ 1110.332062][T23751] ? rcu_is_watching+0x15/0xb0 [ 1110.332085][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1110.332110][T23751] addrconf_ifdown+0x15d/0x1880 [ 1110.332127][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1110.332149][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1110.332169][T23751] ? tls_dev_event+0x717/0xec0 [ 1110.332190][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1110.332215][T23751] addrconf_notify+0x1bc/0x1010 [ 1110.332237][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1110.332259][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1110.332295][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1110.332320][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1110.332344][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1110.332369][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1110.332397][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1110.332422][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1110.332461][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1110.332482][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1110.332516][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1110.332548][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1110.332581][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1110.332598][T23751] rtnl_dellink+0x488/0x710 [ 1110.332619][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1110.332703][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1110.332719][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1110.332738][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1110.332754][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1110.332773][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1110.332789][T23751] ? __copy_skb_header+0xa7/0x550 [ 1110.332816][T23751] netlink_rcv_skb+0x219/0x490 [ 1110.332835][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1110.332852][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1110.332883][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1110.332899][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1110.332920][T23751] netlink_unicast+0x758/0x8d0 [ 1110.332943][T23751] netlink_sendmsg+0x805/0xb30 [ 1110.332977][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.333006][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1110.333034][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1110.333060][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1110.333077][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.333095][T23751] __sock_sendmsg+0x219/0x270 [ 1110.333112][T23751] ____sys_sendmsg+0x505/0x830 [ 1110.333136][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.333161][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1110.333186][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1110.333207][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.333254][T23751] ? __fget_files+0x2a/0x420 [ 1110.333272][T23751] ? __fget_files+0x3a0/0x420 [ 1110.333299][T23751] __sys_sendmsg+0x164/0x220 [ 1110.333321][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1110.333352][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1110.333372][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.333391][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1110.333411][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.333437][T23751] do_fast_syscall_32+0x34/0x80 [ 1110.333457][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.333475][T23751] RIP: 0023:0xf7f18539 [ 1110.333489][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1110.333502][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1110.333518][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1110.333529][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1110.333538][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.333547][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1110.333556][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.333578][T23751] [ 1110.333585][T23751] [ 1110.856396][T23751] ============================= [ 1110.861308][T23751] WARNING: suspicious RCU usage [ 1110.866177][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1110.873333][T23751] ----------------------------- [ 1110.878206][T23751] net/ipv6/ip6_fib.c:1769 suspicious rcu_dereference_protected() usage! [ 1110.886580][T23751] [ 1110.886580][T23751] other info that might help us debug this: [ 1110.886580][T23751] [ 1110.896950][T23751] [ 1110.896950][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1110.905076][T23751] 3 locks held by syz.0.4228/23751: [ 1110.910302][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1110.919352][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1110.929220][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1110.938873][T23751] [ 1110.938873][T23751] stack backtrace: [ 1110.944822][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1110.944841][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.944851][T23751] Call Trace: [ 1110.944857][T23751] [ 1110.944864][T23751] dump_stack_lvl+0x189/0x250 [ 1110.944904][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.944924][T23751] ? __pfx__printk+0x10/0x10 [ 1110.944940][T23751] ? print_lock_name+0xde/0x100 [ 1110.944965][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1110.944990][T23751] fib6_find_prefix+0x211/0x3f0 [ 1110.945008][T23751] fib6_repair_tree+0x10bd/0x11c0 [ 1110.945037][T23751] fib6_del+0xed2/0x1550 [ 1110.945052][T23751] ? fib6_del+0x5a1/0x1550 [ 1110.945077][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1110.945091][T23751] ? __lock_acquire+0xaac/0xd20 [ 1110.945121][T23751] fib6_clean_node+0x29f/0x590 [ 1110.945139][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1110.945160][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1110.945185][T23751] fib6_walk_continue+0x678/0x910 [ 1110.945211][T23751] fib6_walk+0x149/0x290 [ 1110.945237][T23751] __fib6_clean_all+0x234/0x380 [ 1110.945258][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1110.945280][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.945306][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1110.945325][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1110.945340][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1110.945356][T23751] ? __lock_acquire+0xaac/0xd20 [ 1110.945381][T23751] rt6_disable_ip+0x120/0x720 [ 1110.945402][T23751] ? rcu_is_watching+0x15/0xb0 [ 1110.945429][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1110.945452][T23751] addrconf_ifdown+0x15d/0x1880 [ 1110.945466][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1110.945486][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1110.945522][T23751] ? tls_dev_event+0x717/0xec0 [ 1110.945543][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1110.945568][T23751] addrconf_notify+0x1bc/0x1010 [ 1110.945589][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1110.945610][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1110.945644][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1110.945668][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1110.945693][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1110.945718][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1110.945744][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1110.945769][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1110.945798][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1110.945818][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1110.945850][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1110.945881][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1110.945913][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1110.945929][T23751] rtnl_dellink+0x488/0x710 [ 1110.945950][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1110.946030][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1110.946045][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1110.946064][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1110.946079][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1110.946097][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1110.946111][T23751] ? __copy_skb_header+0xa7/0x550 [ 1110.946138][T23751] netlink_rcv_skb+0x219/0x490 [ 1110.946155][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1110.946172][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1110.946202][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1110.946217][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1110.946237][T23751] netlink_unicast+0x758/0x8d0 [ 1110.946259][T23751] netlink_sendmsg+0x805/0xb30 [ 1110.946282][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.946301][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1110.946319][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1110.946344][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1110.946368][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.946411][T23751] __sock_sendmsg+0x219/0x270 [ 1110.946443][T23751] ____sys_sendmsg+0x505/0x830 [ 1110.946472][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.946497][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1110.946522][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1110.946544][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.946592][T23751] ? __fget_files+0x2a/0x420 [ 1110.946611][T23751] ? __fget_files+0x3a0/0x420 [ 1110.946638][T23751] __sys_sendmsg+0x164/0x220 [ 1110.946659][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1110.946692][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1110.946711][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.946730][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1110.946751][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.946771][T23751] do_fast_syscall_32+0x34/0x80 [ 1110.946791][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.946810][T23751] RIP: 0023:0xf7f18539 [ 1110.946824][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1110.946837][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1110.946853][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1110.946864][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1110.946873][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.946882][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1110.946891][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.946913][T23751] [ 1110.946920][T23751] [ 1111.469812][T23751] ============================= [ 1111.474731][T23751] WARNING: suspicious RCU usage [ 1111.479595][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1111.486761][T23751] ----------------------------- [ 1111.491651][T23751] net/ipv6/ip6_fib.c:1772 suspicious rcu_dereference_protected() usage! [ 1111.499975][T23751] [ 1111.499975][T23751] other info that might help us debug this: [ 1111.499975][T23751] [ 1111.510260][T23751] [ 1111.510260][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1111.518382][T23751] 3 locks held by syz.0.4228/23751: [ 1111.523625][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1111.532709][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1111.542280][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1111.551940][T23751] [ 1111.551940][T23751] stack backtrace: [ 1111.557830][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1111.557849][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1111.557859][T23751] Call Trace: [ 1111.557867][T23751] [ 1111.557874][T23751] dump_stack_lvl+0x189/0x250 [ 1111.557902][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.557925][T23751] ? __pfx__printk+0x10/0x10 [ 1111.557942][T23751] ? print_lock_name+0xde/0x100 [ 1111.557971][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1111.557998][T23751] fib6_find_prefix+0x399/0x3f0 [ 1111.558017][T23751] fib6_repair_tree+0x10bd/0x11c0 [ 1111.558054][T23751] fib6_del+0xed2/0x1550 [ 1111.558080][T23751] ? fib6_del+0x5a1/0x1550 [ 1111.558121][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1111.558159][T23751] ? __lock_acquire+0xaac/0xd20 [ 1111.558192][T23751] fib6_clean_node+0x29f/0x590 [ 1111.558211][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1111.558234][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1111.558260][T23751] fib6_walk_continue+0x678/0x910 [ 1111.558287][T23751] fib6_walk+0x149/0x290 [ 1111.558305][T23751] __fib6_clean_all+0x234/0x380 [ 1111.558320][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1111.558341][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1111.558359][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1111.558377][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1111.558394][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1111.558411][T23751] ? __lock_acquire+0xaac/0xd20 [ 1111.558438][T23751] rt6_disable_ip+0x120/0x720 [ 1111.558461][T23751] ? rcu_is_watching+0x15/0xb0 [ 1111.558483][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1111.558507][T23751] addrconf_ifdown+0x15d/0x1880 [ 1111.558523][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1111.558544][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1111.558563][T23751] ? tls_dev_event+0x717/0xec0 [ 1111.558585][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1111.558609][T23751] addrconf_notify+0x1bc/0x1010 [ 1111.558631][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1111.558669][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1111.558705][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1111.558730][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1111.558754][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1111.558780][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1111.558807][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1111.558832][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1111.558863][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1111.558885][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1111.558919][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1111.558951][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1111.558983][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1111.559000][T23751] rtnl_dellink+0x488/0x710 [ 1111.559021][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1111.559104][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1111.559120][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1111.559139][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1111.559155][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1111.559181][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1111.559204][T23751] ? __copy_skb_header+0xa7/0x550 [ 1111.559246][T23751] netlink_rcv_skb+0x219/0x490 [ 1111.559273][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1111.559297][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1111.559334][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1111.559350][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1111.559371][T23751] netlink_unicast+0x758/0x8d0 [ 1111.559393][T23751] netlink_sendmsg+0x805/0xb30 [ 1111.559418][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.559437][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1111.559455][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1111.559474][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1111.559491][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.559508][T23751] __sock_sendmsg+0x219/0x270 [ 1111.559526][T23751] ____sys_sendmsg+0x505/0x830 [ 1111.559550][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.559575][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1111.559603][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1111.559625][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.559672][T23751] ? __fget_files+0x2a/0x420 [ 1111.559691][T23751] ? __fget_files+0x3a0/0x420 [ 1111.559718][T23751] __sys_sendmsg+0x164/0x220 [ 1111.559740][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.559771][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1111.559791][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1111.559810][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1111.559831][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1111.559851][T23751] do_fast_syscall_32+0x34/0x80 [ 1111.559871][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1111.559890][T23751] RIP: 0023:0xf7f18539 [ 1111.559904][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1111.559918][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1111.559933][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1111.559944][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1111.559952][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1111.559961][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1111.559970][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1111.559992][T23751] [ 1111.560003][T23751] [ 1112.082314][T23751] ============================= [ 1112.087174][T23751] WARNING: suspicious RCU usage [ 1112.092089][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1112.099213][T23751] ----------------------------- [ 1112.104119][T23751] net/ipv6/ip6_fib.c:1049 suspicious rcu_dereference_protected() usage! [ 1112.112510][T23751] [ 1112.112510][T23751] other info that might help us debug this: [ 1112.112510][T23751] [ 1112.122880][T23751] [ 1112.122880][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1112.131000][T23751] 3 locks held by syz.0.4228/23751: [ 1112.136228][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1112.145438][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1112.155027][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1112.164694][T23751] [ 1112.164694][T23751] stack backtrace: [ 1112.170599][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1112.170618][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1112.170628][T23751] Call Trace: [ 1112.170635][T23751] [ 1112.170642][T23751] dump_stack_lvl+0x189/0x250 [ 1112.170670][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.170692][T23751] ? __pfx__printk+0x10/0x10 [ 1112.170710][T23751] ? print_lock_name+0xde/0x100 [ 1112.170739][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1112.170765][T23751] fib6_purge_rt+0x5db/0x830 [ 1112.170783][T23751] ? fib6_repair_tree+0x113e/0x11c0 [ 1112.170804][T23751] ? __pfx_fib6_purge_rt+0x10/0x10 [ 1112.170841][T23751] fib6_del+0xee1/0x1550 [ 1112.170873][T23751] ? fib6_del+0x5a1/0x1550 [ 1112.170911][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1112.170932][T23751] ? __lock_acquire+0xaac/0xd20 [ 1112.170980][T23751] fib6_clean_node+0x29f/0x590 [ 1112.171007][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1112.171040][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1112.171078][T23751] fib6_walk_continue+0x678/0x910 [ 1112.171118][T23751] fib6_walk+0x149/0x290 [ 1112.171144][T23751] __fib6_clean_all+0x234/0x380 [ 1112.171166][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1112.171190][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1112.171216][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1112.171244][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1112.171267][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1112.171300][T23751] ? __lock_acquire+0xaac/0xd20 [ 1112.171340][T23751] rt6_disable_ip+0x120/0x720 [ 1112.171373][T23751] ? rcu_is_watching+0x15/0xb0 [ 1112.171406][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1112.171443][T23751] addrconf_ifdown+0x15d/0x1880 [ 1112.171465][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1112.171496][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1112.171523][T23751] ? tls_dev_event+0x717/0xec0 [ 1112.171553][T23751] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1112.171590][T23751] addrconf_notify+0x1bc/0x1010 [ 1112.171621][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1112.171663][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1112.171711][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1112.171746][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1112.171778][T23751] ? netdev_upper_dev_unlink+0x83/0xd0 [ 1112.171813][T23751] ? ipvlan_link_delete+0x2bc/0x320 [ 1112.171850][T23751] ipvlan_device_event+0x9cb/0xa50 [ 1112.171903][T23751] ? __pfx_ipvlan_device_event+0x10/0x10 [ 1112.171947][T23751] notifier_call_chain+0x1b3/0x3e0 [ 1112.171977][T23751] unregister_netdevice_many_notify+0x15d8/0x2330 [ 1112.172025][T23751] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1112.172071][T23751] ? unregister_netdevice_queue+0x1b3/0x380 [ 1112.172118][T23751] ? __pfx_veth_dellink+0x10/0x10 [ 1112.172140][T23751] rtnl_dellink+0x488/0x710 [ 1112.172170][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1112.172295][T23751] ? __pfx_rtnl_dellink+0x10/0x10 [ 1112.172313][T23751] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1112.172332][T23751] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1112.172348][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1112.172367][T23751] ? ref_tracker_free+0x63a/0x7d0 [ 1112.172382][T23751] ? __copy_skb_header+0xa7/0x550 [ 1112.172410][T23751] netlink_rcv_skb+0x219/0x490 [ 1112.172428][T23751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1112.172445][T23751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1112.172477][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1112.172493][T23751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1112.172518][T23751] netlink_unicast+0x758/0x8d0 [ 1112.172543][T23751] netlink_sendmsg+0x805/0xb30 [ 1112.172568][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.172588][T23751] ? __import_iovec+0x5d4/0x7f0 [ 1112.172607][T23751] ? aa_sock_msg_perm+0x94/0x160 [ 1112.172624][T23751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1112.172642][T23751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.172660][T23751] __sock_sendmsg+0x219/0x270 [ 1112.172677][T23751] ____sys_sendmsg+0x505/0x830 [ 1112.172702][T23751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1112.172727][T23751] ? __pfx___futex_wait+0x10/0x10 [ 1112.172752][T23751] ___sys_sendmsg+0x21f/0x2a0 [ 1112.172774][T23751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.172822][T23751] ? __fget_files+0x2a/0x420 [ 1112.172841][T23751] ? __fget_files+0x3a0/0x420 [ 1112.172868][T23751] __sys_sendmsg+0x164/0x220 [ 1112.172889][T23751] ? __pfx___sys_sendmsg+0x10/0x10 [ 1112.172921][T23751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1112.172940][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1112.172960][T23751] __do_fast_syscall_32+0xb4/0x110 [ 1112.172980][T23751] ? lockdep_hardirqs_on+0x9c/0x150 [ 1112.173000][T23751] do_fast_syscall_32+0x34/0x80 [ 1112.173020][T23751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1112.173039][T23751] RIP: 0023:0xf7f18539 [ 1112.173052][T23751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1112.173066][T23751] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1112.173081][T23751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1112.173092][T23751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1112.173101][T23751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1112.173110][T23751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1112.173119][T23751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1112.173141][T23751] [ 1112.695979][T23751] [ 1112.698337][T23751] ============================= [ 1112.703255][T23751] WARNING: suspicious RCU usage [ 1112.708129][T23751] 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 Not tainted [ 1112.715288][T23751] ----------------------------- [ 1112.720138][T23751] net/ipv6/ip6_fib.c:1059 suspicious rcu_dereference_protected() usage! [ 1112.728627][T23751] [ 1112.728627][T23751] other info that might help us debug this: [ 1112.728627][T23751] [ 1112.738928][T23751] [ 1112.738928][T23751] rcu_scheduler_active = 2, debug_locks = 1 [ 1112.747070][T23751] 3 locks held by syz.0.4228/23751: [ 1112.752422][T23751] #0: ffffffff8f2f4a08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x331/0x710 [ 1112.761552][T23751] #1: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: __fib6_clean_all+0x9b/0x380 [ 1112.771127][T23751] #2: ffff8880511ec430 (&tb->tb6_lock){+...}-{3:3}, at: __fib6_clean_all+0x1ce/0x380 [ 1112.780828][T23751] [ 1112.780828][T23751] stack backtrace: [ 1112.786773][T23751] CPU: 0 UID: 0 PID: 23751 Comm: syz.0.4228 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1112.786799][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1112.786811][T23751] Call Trace: [ 1112.786819][T23751] [ 1112.786844][T23751] dump_stack_lvl+0x189/0x250 [ 1112.786879][T23751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1112.786920][T23751] ? __pfx__printk+0x10/0x10 [ 1112.786942][T23751] ? print_lock_name+0xde/0x100 [ 1112.786977][T23751] lockdep_rcu_suspicious+0x140/0x1d0 [ 1112.787010][T23751] fib6_purge_rt+0x604/0x830 [ 1112.787050][T23751] ? fib6_repair_tree+0x113e/0x11c0 [ 1112.787080][T23751] ? __pfx_fib6_purge_rt+0x10/0x10 [ 1112.787114][T23751] fib6_del+0xee1/0x1550 [ 1112.787140][T23751] ? fib6_del+0x5a1/0x1550 [ 1112.787178][T23751] ? __pfx_fib6_del+0x10/0x10 [ 1112.787212][T23751] ? __lock_acquire+0xaac/0xd20 [ 1112.787279][T23751] fib6_clean_node+0x29f/0x590 [ 1112.787309][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1112.787341][T23751] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1112.787381][T23751] fib6_walk_continue+0x678/0x910 [ 1112.787421][T23751] fib6_walk+0x149/0x290 [ 1112.787447][T23751] __fib6_clean_all+0x234/0x380 [ 1112.787470][T23751] ? __fib6_clean_all+0x9b/0x380 [ 1112.787494][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1112.787520][T23751] ? __pfx___fib6_clean_all+0x10/0x10 [ 1112.787548][T23751] ? __pfx_fib6_clean_node+0x10/0x10 [ 1112.787571][T23751] ? __pfx_fib6_ifdown+0x10/0x10 [ 1112.787597][T23751] ? __lock_acquire+0xaac/0xd20 [ 1112.787637][T23751] rt6_disable_ip+0x120/0x720 [ 1112.787670][T23751] ? rcu_is_watching+0x15/0xb0 [ 1112.787702][T23751] ? __pfx_rt6_disable_ip+0x10/0x10 [ 1112.787738][T23751] addrconf_ifdown+0x15d/0x1880 [ 1112.787760][T23751] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1112.787791][T23751] ? __pfx___mutex_lock+0x10/0x10 [ 1112.787818][T23751] ? tls_dev_event+0x717/0xec0