last executing test programs: 3.52325636s ago: executing program 1 (id=3792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xffffffffffffff5c}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) close_range(r3, r3, 0x0) 3.326210196s ago: executing program 1 (id=3794): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x1ffffe, 0x10100, 0x0, 0x154}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}, 0x0, 0x20000000, 0x2}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2.965760906s ago: executing program 0 (id=3796): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000530404"], 0x14}}, 0x0) 2.762584612s ago: executing program 0 (id=3797): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"/28], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x640, 0xffffffff, 0x0, 0x238, 0x238, 0xffffffff, 0xffffffff, 0x5a0, 0x5a0, 0x5a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0xf5, [0x8000, 0x6], 0x1000, 0x10, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x43}, @dev={0xfe, 0x80, '\x00', 0x2c}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xb}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @empty, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0x0, 0xffffffff], 'vxcan1\x00', 'macsec0\x00', {0xff}, {}, 0x2f, 0x1, 0x4, 0x33}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x8, 0x40], 0x7, 0x0, 0x2, [@mcast2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x44}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x1d}, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x772c3576de517ad, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xff000000], 'team0\x00', 'macvlan1\x00', {}, {0xff}, 0x8, 0x5, 0x4}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x400, 0x4, 0x1, [0x6, 0x3, 0x4, 0xffff, 0xe, 0x9, 0x5, 0x4c, 0x6902, 0x7f, 0xe, 0x8, 0x7f, 0x5c, 0x7, 0xc], 0x9}}, @common=@hbh={{0x48}, {0x48f, 0x2, 0x0, [0x8, 0x7, 0xfff7, 0x200, 0x1000, 0x5, 0x0, 0x4, 0x43b, 0x7, 0x2, 0x4, 0x6, 0x4, 0x3, 0x2], 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r2}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) read(r1, &(0x7f0000000600)=""/235, 0xeb) 2.762130242s ago: executing program 1 (id=3798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7, 0x80) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000040)={0x0, 0x0, 0x80000001}) syz_open_dev$usbfs(0x0, 0x205, 0x0) 2.553226988s ago: executing program 0 (id=3799): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.44410249s ago: executing program 1 (id=3800): syz_clone(0x40005080, 0x0, 0x0, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="adbdac82a67198ce579499982873d21c5803f0ac6ce2e6791293750a210e49d054e222127a041a70b6d3d120dc3fa754865428d357dd11f71e572dcbc152951732261db3d22a9ab8ce9381a751568821cb9a041b6ba35f217ff404d8ace21d92861548d57b72d4fc8f99cf") 719.162459ms ago: executing program 0 (id=3801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 542.795544ms ago: executing program 0 (id=3802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') close_range(r1, 0xffffffffffffffff, 0x0) 347.20819ms ago: executing program 0 (id=3803): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 229.292793ms ago: executing program 1 (id=3804): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000180)={0x0, 0x114b, 0xc01, 0x81, 0x3d8}, &(0x7f0000ff0000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=3805): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x1, 0x1000, 0x21, 0x3bc}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 2393.821570][ T883] usb 1-1: SerialNumber: syz [ 2394.096857][ T883] cdc_ncm 1-1:1.0: bind() failure [ 2394.189695][ T883] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2394.191404][ T883] cdc_ncm 1-1:1.1: bind() failure [ 2394.252760][ T883] usb 1-1: USB disconnect, device number 33 [ 2397.078871][ T883] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2397.268940][ T883] usb 1-1: Using ep0 maxpacket: 8 [ 2397.315699][ T883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2397.316492][ T883] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 903 [ 2397.336902][ T883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2397.339300][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.339873][ T883] usb 1-1: Product: syz [ 2397.340328][ T883] usb 1-1: Manufacturer: syz [ 2397.340878][ T883] usb 1-1: SerialNumber: syz [ 2397.643825][ T883] cdc_ncm 1-1:1.0: bind() failure [ 2397.677121][ T883] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2397.689839][ T883] cdc_ncm 1-1:1.1: bind() failure [ 2397.779843][ T883] usb 1-1: USB disconnect, device number 34 [ 2398.379451][ T883] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 2398.756074][ T883] usb 1-1: not running at top speed; connect to a high speed hub [ 2398.773984][ T883] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2398.794621][ T883] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 2398.795345][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.795918][ T883] usb 1-1: Product: ࠔ [ 2398.796376][ T883] usb 1-1: Manufacturer: 냫흗ᣗ뵤妜➐建Ꜹ䳡㤸㵰ꀩ༆㿥ኡ㘡瀖㻒䌗愳䆑魔Ẽ쬅텥뽑༐ۡ⎷昻뱳⁺뮻֩ᥣ轄ᅯ癠ⶆ聕ꛕ듘쭪﹯ᦴ㲇貼蓭扶騦膤༖陙뾳ִ髢 [ 2398.800251][ T883] usb 1-1: SerialNumber: ᠊ [ 2399.551344][ T883] usbhid 1-1:1.0: can't add hid device: -71 [ 2399.552983][ T883] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2399.595542][ T883] usb 1-1: USB disconnect, device number 35 [ 2414.210861][ C1] vkms_vblank_simulate: vblank timer overrun [ 2415.493986][ C1] vkms_vblank_simulate: vblank timer overrun [ 2415.594216][ C1] vkms_vblank_simulate: vblank timer overrun [ 2415.792661][ C1] vkms_vblank_simulate: vblank timer overrun [ 2420.647081][T10979] FAULT_INJECTION: forcing a failure. [ 2420.647081][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 2420.669832][T10979] CPU: 0 UID: 0 PID: 10979 Comm: syz.0.2371 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2420.671862][T10979] Hardware name: linux,dummy-virt (DT) [ 2420.672691][T10979] Call trace: [ 2420.673270][T10979] show_stack+0x18/0x24 (C) [ 2420.674104][T10979] dump_stack_lvl+0x78/0x90 [ 2420.674937][T10979] dump_stack+0x18/0x24 [ 2420.675734][T10979] should_fail_ex+0x18c/0x1e0 [ 2420.676563][T10979] should_failslab+0x54/0x80 [ 2420.677442][T10979] kmem_cache_alloc_lru_noprof+0x5c/0x378 [ 2420.678548][T10979] __d_alloc+0x34/0x1b8 [ 2420.679229][T10979] d_alloc_pseudo+0x18/0x6c [ 2420.680033][T10979] alloc_file_pseudo+0x68/0x100 [ 2420.680930][T10979] sock_alloc_file+0x40/0xc8 [ 2420.681699][T10979] __sys_socket+0xd8/0x12c [ 2420.682488][T10979] __arm64_sys_socket+0x20/0x30 [ 2420.683751][T10979] invoke_syscall+0x48/0x110 [ 2420.684772][T10979] el0_svc_common.constprop.0+0x40/0xe0 [ 2420.685775][T10979] do_el0_svc+0x1c/0x28 [ 2420.686631][T10979] el0_svc+0x30/0xe0 [ 2420.687573][T10979] el0t_64_sync_handler+0x10c/0x138 [ 2420.688672][T10979] el0t_64_sync+0x1a4/0x1a8 [ 2436.459618][T10060] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2436.624590][T10060] usb 1-1: Using ep0 maxpacket: 8 [ 2436.703299][T10060] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2436.705240][T10060] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2436.706854][T10060] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2436.809878][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2436.824241][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2441.839671][T10060] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2441.841069][T10060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.842055][T10060] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2441.843235][T10060] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2441.846040][T10060] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2441.902905][T11061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2442.299477][T10060] usb 1-1: USB disconnect, device number 36 [ 2447.648945][T10060] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2447.828690][T10060] usb 1-1: Using ep0 maxpacket: 8 [ 2447.892042][T10060] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2447.892890][T10060] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2447.894138][T10060] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2453.335048][T10060] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2453.339745][T10060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.341223][T10060] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2453.342912][T10060] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2453.346262][T10060] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2453.401123][T11107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2453.701595][T10060] usb 1-1: USB disconnect, device number 37 [ 2460.988534][T11167] serio: Serial port pts0 [ 2470.757424][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2470.763356][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2470.900503][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2470.902907][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2471.109813][T11213] serio: Serial port pts0 [ 2474.748869][T11119] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2474.959062][T11119] usb 1-1: Using ep0 maxpacket: 8 [ 2475.011040][T11119] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2475.012469][T11119] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2475.013924][T11119] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2476.956703][T11235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.980839][T11235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2483.121507][T11119] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2483.123811][T11119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2483.126804][T11119] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2483.130230][T11119] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2483.133025][T11119] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2483.222003][T11229] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2483.575576][T11119] usb 1-1: USB disconnect, device number 38 [ 2483.727044][T11259] serio: Serial port pts0 [ 2484.092881][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.097344][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2489.789511][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2489.793390][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2490.031060][T11289] input: syz0 as /devices/virtual/input/input83 [ 2495.463901][ T6500] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 2495.854796][ T6500] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2495.856864][ T6500] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 2495.862366][ T6500] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2495.863811][ T6500] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 2501.003236][ T6500] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2501.005796][ T6500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2501.007102][ T6500] usb 1-1: Product: Њ [ 2501.008848][ T6500] usb 1-1: Manufacturer: 佧剏煬ﭔ掤茣Ţ䰄ꃨഔꃱ黱뾰鍭ㅯ鮒嫴覝劷vὸ㝹〡衡癚ᆖ⹐굧殽袞ꔧ鵜廥廘鿦ᦅ䛰쐸緗㊁눷䋻ᑣ趓妫澜쥯쪺闍襀⁇줖雲‣걊詣롐凯栥摶頓럔單൅︳뱝愝⮤덉苉ᄛ옠嘤獄鐭㪄텂﨣絜⟎෼൱릌藿㓎ﲙꍯ㒻ퟐ酘棓骦혓䮐뿆[⒈䪽冒䒶쇢 [ 2501.013761][ T6500] usb 1-1: SerialNumber: ﳿ [ 2506.207452][ T6500] usb 1-1: low speed audio streaming not supported [ 2510.094138][ T6500] usb 1-1: USB disconnect, device number 39 [ 2510.663284][T11350] FAULT_INJECTION: forcing a failure. [ 2510.663284][T11350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2510.666551][T11350] CPU: 0 UID: 0 PID: 11350 Comm: syz.0.2466 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2510.668168][T11350] Hardware name: linux,dummy-virt (DT) [ 2510.669067][T11350] Call trace: [ 2510.669705][T11350] show_stack+0x18/0x24 (C) [ 2510.670619][T11350] dump_stack_lvl+0x78/0x90 [ 2510.671499][T11350] dump_stack+0x18/0x24 [ 2510.672325][T11350] should_fail_ex+0x18c/0x1e0 [ 2510.673458][T11350] should_fail+0x14/0x20 [ 2510.674373][T11350] should_fail_usercopy+0x1c/0x28 [ 2510.675399][T11350] simple_read_from_buffer+0x68/0x118 [ 2510.676355][T11350] proc_fail_nth_read+0xac/0x12c [ 2510.677485][T11350] vfs_read+0xc0/0x318 [ 2510.678344][T11350] ksys_read+0x6c/0x100 [ 2510.679163][T11350] __arm64_sys_read+0x1c/0x28 [ 2510.680024][T11350] invoke_syscall+0x48/0x110 [ 2510.680907][T11350] el0_svc_common.constprop.0+0x40/0xe0 [ 2510.681837][T11350] do_el0_svc+0x1c/0x28 [ 2510.682600][T11350] el0_svc+0x30/0xe0 [ 2510.683995][T11350] el0t_64_sync_handler+0x10c/0x138 [ 2510.685053][T11350] el0t_64_sync+0x1a4/0x1a8 [ 2513.557472][T11364] x_tables: duplicate underflow at hook 1 [ 2525.863574][T11470] serio: Serial port pts0 [ 2528.318636][T11484] FAULT_INJECTION: forcing a failure. [ 2528.318636][T11484] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.321729][T11484] CPU: 0 UID: 0 PID: 11484 Comm: syz.1.2512 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2528.323967][T11484] Hardware name: linux,dummy-virt (DT) [ 2528.325243][T11484] Call trace: [ 2528.325910][T11484] show_stack+0x18/0x24 (C) [ 2528.327028][T11484] dump_stack_lvl+0x78/0x90 [ 2528.328029][T11484] dump_stack+0x18/0x24 [ 2528.329077][T11484] should_fail_ex+0x18c/0x1e0 [ 2528.329931][T11484] should_failslab+0x54/0x80 [ 2528.330777][T11484] __kmalloc_noprof+0xa8/0x430 [ 2528.331635][T11484] tomoyo_realpath_from_path+0x48/0x1d0 [ 2528.332550][T11484] tomoyo_path_number_perm+0xd8/0x224 [ 2528.333564][T11484] tomoyo_file_ioctl+0x1c/0x28 [ 2528.334517][T11484] security_file_ioctl+0x8c/0x19c [ 2528.335409][T11484] __arm64_sys_ioctl+0x48/0xec [ 2528.336417][T11484] invoke_syscall+0x48/0x110 [ 2528.337518][T11484] el0_svc_common.constprop.0+0x40/0xe0 [ 2528.338688][T11484] do_el0_svc+0x1c/0x28 [ 2528.339818][T11484] el0_svc+0x30/0xe0 [ 2528.340568][T11484] el0t_64_sync_handler+0x10c/0x138 [ 2528.341524][T11484] el0t_64_sync+0x1a4/0x1a8 [ 2528.343633][T11484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2528.598620][T11486] fuse: Bad value for 'fd' [ 2531.656162][T11499] input: syz1 as /devices/virtual/input/input84 [ 2535.636876][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2535.641536][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2539.600302][T10060] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 2539.825750][T10060] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2539.840814][T10060] usb 1-1: not running at top speed; connect to a high speed hub [ 2539.861580][T10060] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2539.896910][T10060] usb 1-1: string descriptor 0 read error: -22 [ 2539.900374][T10060] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 2539.901646][T10060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2540.166989][T10060] usbhid 1-1:1.0: can't add hid device: -71 [ 2540.168440][T10060] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2540.200580][T10060] usb 1-1: USB disconnect, device number 40 [ 2542.535388][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2542.541963][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2543.032049][T11555] FAULT_INJECTION: forcing a failure. [ 2543.032049][T11555] name failslab, interval 1, probability 0, space 0, times 0 [ 2543.034893][T11555] CPU: 1 UID: 0 PID: 11555 Comm: syz.1.2536 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2543.037379][T11555] Hardware name: linux,dummy-virt (DT) [ 2543.038350][T11555] Call trace: [ 2543.038924][T11555] show_stack+0x18/0x24 (C) [ 2543.039811][T11555] dump_stack_lvl+0x78/0x90 [ 2543.040679][T11555] dump_stack+0x18/0x24 [ 2543.041462][T11555] should_fail_ex+0x18c/0x1e0 [ 2543.042206][T11555] should_failslab+0x54/0x80 [ 2543.043214][T11555] kmem_cache_alloc_node_noprof+0x5c/0x370 [ 2543.044869][T11555] __alloc_skb+0x150/0x194 [ 2543.046048][T11555] alloc_skb_with_frags+0x50/0x1e8 [ 2543.046975][T11555] sock_alloc_send_pskb+0x284/0x2b4 [ 2543.048455][T11555] isotp_sendmsg+0x228/0x7b0 [ 2543.049533][T11555] __sock_sendmsg+0x54/0x60 [ 2543.050422][T11555] ____sys_sendmsg+0x280/0x2a8 [ 2543.051497][T11555] ___sys_sendmsg+0xac/0x100 [ 2543.052250][T11555] __sys_sendmsg+0x98/0xf4 [ 2543.053179][T11555] __arm64_sys_sendmsg+0x24/0x30 [ 2543.054170][T11555] invoke_syscall+0x48/0x110 [ 2543.055125][T11555] el0_svc_common.constprop.0+0x40/0xe0 [ 2543.057407][T11555] do_el0_svc+0x1c/0x28 [ 2543.058754][T11555] el0_svc+0x30/0xe0 [ 2543.060716][T11555] el0t_64_sync_handler+0x10c/0x138 [ 2543.061768][T11555] el0t_64_sync+0x1a4/0x1a8 [ 2543.626456][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2543.630342][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2545.325120][T11566] input: syz0 as /devices/virtual/input/input85 [ 2561.173602][T11602] FAULT_INJECTION: forcing a failure. [ 2561.173602][T11602] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.183649][T11602] CPU: 1 UID: 0 PID: 11602 Comm: syz.1.2552 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2561.185173][T11602] Hardware name: linux,dummy-virt (DT) [ 2561.186083][T11602] Call trace: [ 2561.186740][T11602] show_stack+0x18/0x24 (C) [ 2561.188973][T11602] dump_stack_lvl+0x78/0x90 [ 2561.190538][T11602] dump_stack+0x18/0x24 [ 2561.191557][T11602] should_fail_ex+0x18c/0x1e0 [ 2561.192473][T11602] should_failslab+0x54/0x80 [ 2561.193427][T11602] __kmalloc_noprof+0xa8/0x430 [ 2561.194293][T11602] tomoyo_realpath_from_path+0x48/0x1d0 [ 2561.195346][T11602] tomoyo_check_open_permission+0x120/0x188 [ 2561.196405][T11602] tomoyo_file_open+0x30/0x3c [ 2561.197397][T11602] security_file_open+0x74/0x148 [ 2561.198642][T11602] do_dentry_open+0xe4/0x674 [ 2561.199451][T11602] vfs_open+0x2c/0xe4 [ 2561.200266][T11602] path_openat+0x7a8/0x1050 [ 2561.201068][T11602] do_filp_open+0xa4/0x160 [ 2561.201972][T11602] do_sys_openat2+0xc0/0xf4 [ 2561.202886][T11602] __arm64_sys_openat+0x64/0xa4 [ 2561.203707][T11602] invoke_syscall+0x48/0x110 [ 2561.204605][T11602] el0_svc_common.constprop.0+0x40/0xe0 [ 2561.205522][T11602] do_el0_svc+0x1c/0x28 [ 2561.206401][T11602] el0_svc+0x30/0xe0 [ 2561.207245][T11602] el0t_64_sync_handler+0x10c/0x138 [ 2561.208679][T11602] el0t_64_sync+0x1a4/0x1a8 [ 2561.212656][T11602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2561.224241][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2561.230187][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.021458][T11610] FAULT_INJECTION: forcing a failure. [ 2562.021458][T11610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2562.023117][T11610] CPU: 1 UID: 0 PID: 11610 Comm: syz.1.2556 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2562.024555][T11610] Hardware name: linux,dummy-virt (DT) [ 2562.025504][T11610] Call trace: [ 2562.026249][T11610] show_stack+0x18/0x24 (C) [ 2562.027205][T11610] dump_stack_lvl+0x78/0x90 [ 2562.028658][T11610] dump_stack+0x18/0x24 [ 2562.029513][T11610] should_fail_ex+0x18c/0x1e0 [ 2562.030429][T11610] should_fail+0x14/0x20 [ 2562.031292][T11610] should_fail_usercopy+0x1c/0x28 [ 2562.032189][T11610] copy_msghdr_from_user+0x48/0x110 [ 2562.033156][T11610] ___sys_sendmsg+0x8c/0x100 [ 2562.033994][T11610] __sys_sendmsg+0x98/0xf4 [ 2562.034829][T11610] __arm64_sys_sendmsg+0x24/0x30 [ 2562.035763][T11610] invoke_syscall+0x48/0x110 [ 2562.036782][T11610] el0_svc_common.constprop.0+0x40/0xe0 [ 2562.038106][T11610] do_el0_svc+0x1c/0x28 [ 2562.039101][T11610] el0_svc+0x30/0xe0 [ 2562.039952][T11610] el0t_64_sync_handler+0x10c/0x138 [ 2562.040926][T11610] el0t_64_sync+0x1a4/0x1a8 [ 2563.802435][T11625] FAULT_INJECTION: forcing a failure. [ 2563.802435][T11625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2563.803385][T11625] CPU: 0 UID: 0 PID: 11625 Comm: syz.1.2561 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2563.804098][T11625] Hardware name: linux,dummy-virt (DT) [ 2563.804601][T11625] Call trace: [ 2563.804983][T11625] show_stack+0x18/0x24 (C) [ 2563.805451][T11625] dump_stack_lvl+0x78/0x90 [ 2563.805994][T11625] dump_stack+0x18/0x24 [ 2563.806841][T11625] should_fail_ex+0x18c/0x1e0 [ 2563.807503][T11625] should_fail+0x14/0x20 [ 2563.808018][T11625] should_fail_usercopy+0x1c/0x28 [ 2563.808515][T11625] copy_msghdr_from_user+0x48/0x110 [ 2563.809045][T11625] ___sys_sendmsg+0x8c/0x100 [ 2563.809498][T11625] __sys_sendmsg+0x98/0xf4 [ 2563.809946][T11625] __arm64_sys_sendmsg+0x24/0x30 [ 2563.810401][T11625] invoke_syscall+0x48/0x110 [ 2563.810852][T11625] el0_svc_common.constprop.0+0x40/0xe0 [ 2563.811709][T11625] do_el0_svc+0x1c/0x28 [ 2563.812495][T11625] el0_svc+0x30/0xe0 [ 2563.813344][T11625] el0t_64_sync_handler+0x10c/0x138 [ 2563.814240][T11625] el0t_64_sync+0x1a4/0x1a8 [ 2565.473996][T11638] FAULT_INJECTION: forcing a failure. [ 2565.473996][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.475614][T11638] CPU: 1 UID: 0 PID: 11638 Comm: syz.0.2566 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2565.476929][T11638] Hardware name: linux,dummy-virt (DT) [ 2565.477701][T11638] Call trace: [ 2565.478444][T11638] show_stack+0x18/0x24 (C) [ 2565.479372][T11638] dump_stack_lvl+0x78/0x90 [ 2565.480243][T11638] dump_stack+0x18/0x24 [ 2565.481102][T11638] should_fail_ex+0x18c/0x1e0 [ 2565.482001][T11638] should_failslab+0x54/0x80 [ 2565.482879][T11638] __kmalloc_noprof+0xa8/0x430 [ 2565.484567][T11638] tomoyo_encode2+0x7c/0x140 [ 2565.485585][T11638] tomoyo_realpath_from_path+0x9c/0x1d0 [ 2565.486584][T11638] tomoyo_check_open_permission+0x120/0x188 [ 2565.487529][T11638] tomoyo_file_open+0x30/0x3c [ 2565.488849][T11638] security_file_open+0x74/0x148 [ 2565.490263][T11638] do_dentry_open+0xe4/0x674 [ 2565.491438][T11638] vfs_open+0x2c/0xe4 [ 2565.492290][T11638] path_openat+0x7a8/0x1050 [ 2565.493200][T11638] do_filp_open+0xa4/0x160 [ 2565.494024][T11638] do_sys_openat2+0xc0/0xf4 [ 2565.494818][T11638] __arm64_sys_openat+0x64/0xa4 [ 2565.495754][T11638] invoke_syscall+0x48/0x110 [ 2565.498544][T11638] el0_svc_common.constprop.0+0x40/0xe0 [ 2565.499439][T11638] do_el0_svc+0x1c/0x28 [ 2565.500239][T11638] el0_svc+0x30/0xe0 [ 2565.502447][T11638] el0t_64_sync_handler+0x10c/0x138 [ 2565.503393][T11638] el0t_64_sync+0x1a4/0x1a8 [ 2565.510097][T11638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2565.778817][ T7303] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 2565.957419][ T7303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2565.973746][ T7303] usb 1-1: not running at top speed; connect to a high speed hub [ 2566.006400][ T7303] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2566.042203][ T7303] usb 1-1: string descriptor 0 read error: -22 [ 2566.044072][ T7303] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 2566.045440][ T7303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2566.322930][ T7303] usbhid 1-1:1.0: can't add hid device: -71 [ 2566.324692][ T7303] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2566.365014][ T7303] usb 1-1: USB disconnect, device number 41 [ 2566.571452][T11642] FAULT_INJECTION: forcing a failure. [ 2566.571452][T11642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2566.573062][T11642] CPU: 1 UID: 0 PID: 11642 Comm: syz.0.2567 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2566.574372][T11642] Hardware name: linux,dummy-virt (DT) [ 2566.575133][T11642] Call trace: [ 2566.575694][T11642] show_stack+0x18/0x24 (C) [ 2566.576218][T11642] dump_stack_lvl+0x78/0x90 [ 2566.576719][T11642] dump_stack+0x18/0x24 [ 2566.577181][T11642] should_fail_ex+0x18c/0x1e0 [ 2566.577854][T11642] should_fail+0x14/0x20 [ 2566.578408][T11642] should_fail_usercopy+0x1c/0x28 [ 2566.578899][T11642] move_addr_to_kernel+0x44/0x124 [ 2566.579371][T11642] __copy_msghdr+0xd0/0xf0 [ 2566.579971][T11642] copy_msghdr_from_user+0xcc/0x110 [ 2566.580665][T11642] ___sys_sendmsg+0x8c/0x100 [ 2566.581278][T11642] __sys_sendmsg+0x98/0xf4 [ 2566.582022][T11642] __arm64_sys_sendmsg+0x24/0x30 [ 2566.582851][T11642] invoke_syscall+0x48/0x110 [ 2566.583675][T11642] el0_svc_common.constprop.0+0x40/0xe0 [ 2566.584598][T11642] do_el0_svc+0x1c/0x28 [ 2566.585505][T11642] el0_svc+0x30/0xe0 [ 2566.586342][T11642] el0t_64_sync_handler+0x10c/0x138 [ 2566.587299][T11642] el0t_64_sync+0x1a4/0x1a8 [ 2568.290264][T11655] FAULT_INJECTION: forcing a failure. [ 2568.290264][T11655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2568.292014][T11655] CPU: 0 UID: 0 PID: 11655 Comm: syz.1.2571 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2568.293420][T11655] Hardware name: linux,dummy-virt (DT) [ 2568.294236][T11655] Call trace: [ 2568.294861][T11655] show_stack+0x18/0x24 (C) [ 2568.296040][T11655] dump_stack_lvl+0x78/0x90 [ 2568.297246][T11655] dump_stack+0x18/0x24 [ 2568.298872][T11655] should_fail_ex+0x18c/0x1e0 [ 2568.299783][T11655] should_fail+0x14/0x20 [ 2568.300773][T11655] should_fail_usercopy+0x1c/0x28 [ 2568.301734][T11655] simple_read_from_buffer+0x68/0x118 [ 2568.302651][T11655] proc_fail_nth_read+0xac/0x12c [ 2568.303591][T11655] vfs_read+0xc0/0x318 [ 2568.304463][T11655] ksys_read+0x6c/0x100 [ 2568.305337][T11655] __arm64_sys_read+0x1c/0x28 [ 2568.306216][T11655] invoke_syscall+0x48/0x110 [ 2568.307088][T11655] el0_svc_common.constprop.0+0x40/0xe0 [ 2568.308322][T11655] do_el0_svc+0x1c/0x28 [ 2568.309300][T11655] el0_svc+0x30/0xe0 [ 2568.310135][T11655] el0t_64_sync_handler+0x10c/0x138 [ 2568.311489][T11655] el0t_64_sync+0x1a4/0x1a8 [ 2569.270826][T11661] FAULT_INJECTION: forcing a failure. [ 2569.270826][T11661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2569.272895][T11661] CPU: 0 UID: 0 PID: 11661 Comm: syz.0.2574 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2569.274288][T11661] Hardware name: linux,dummy-virt (DT) [ 2569.275083][T11661] Call trace: [ 2569.275860][T11661] show_stack+0x18/0x24 (C) [ 2569.277239][T11661] dump_stack_lvl+0x78/0x90 [ 2569.278587][T11661] dump_stack+0x18/0x24 [ 2569.279783][T11661] should_fail_ex+0x18c/0x1e0 [ 2569.280876][T11661] should_fail+0x14/0x20 [ 2569.281833][T11661] should_fail_usercopy+0x1c/0x28 [ 2569.282794][T11661] move_addr_to_kernel+0x44/0x124 [ 2569.283706][T11661] __copy_msghdr+0xd0/0xf0 [ 2569.284505][T11661] copy_msghdr_from_user+0xcc/0x110 [ 2569.285444][T11661] ___sys_sendmsg+0x8c/0x100 [ 2569.286287][T11661] __sys_sendmsg+0x98/0xf4 [ 2569.287174][T11661] __arm64_sys_sendmsg+0x24/0x30 [ 2569.288257][T11661] invoke_syscall+0x48/0x110 [ 2569.289194][T11661] el0_svc_common.constprop.0+0x40/0xe0 [ 2569.290213][T11661] do_el0_svc+0x1c/0x28 [ 2569.291065][T11661] el0_svc+0x30/0xe0 [ 2569.291911][T11661] el0t_64_sync_handler+0x10c/0x138 [ 2569.293130][T11661] el0t_64_sync+0x1a4/0x1a8 [ 2571.414945][T11670] FAULT_INJECTION: forcing a failure. [ 2571.414945][T11670] name failslab, interval 1, probability 0, space 0, times 0 [ 2571.415819][T11670] CPU: 1 UID: 0 PID: 11670 Comm: syz.1.2577 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2571.416504][T11670] Hardware name: linux,dummy-virt (DT) [ 2571.417039][T11670] Call trace: [ 2571.417370][T11670] show_stack+0x18/0x24 (C) [ 2571.418022][T11670] dump_stack_lvl+0x78/0x90 [ 2571.418478][T11670] dump_stack+0x18/0x24 [ 2571.419019][T11670] should_fail_ex+0x18c/0x1e0 [ 2571.419486][T11670] should_failslab+0x54/0x80 [ 2571.419936][T11670] __kmalloc_noprof+0xa8/0x430 [ 2571.420388][T11670] tomoyo_realpath_from_path+0x48/0x1d0 [ 2571.420935][T11670] tomoyo_path_number_perm+0xd8/0x224 [ 2571.421566][T11670] tomoyo_file_ioctl+0x1c/0x28 [ 2571.422175][T11670] security_file_ioctl+0x8c/0x19c [ 2571.422743][T11670] __arm64_sys_ioctl+0x48/0xec [ 2571.423351][T11670] invoke_syscall+0x48/0x110 [ 2571.423808][T11670] el0_svc_common.constprop.0+0x40/0xe0 [ 2571.424316][T11670] do_el0_svc+0x1c/0x28 [ 2571.424809][T11670] el0_svc+0x30/0xe0 [ 2571.425243][T11670] el0t_64_sync_handler+0x10c/0x138 [ 2571.425705][T11670] el0t_64_sync+0x1a4/0x1a8 [ 2571.430368][T11670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2571.969619][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2571.974080][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2573.234158][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2573.236894][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.052793][T11700] FAULT_INJECTION: forcing a failure. [ 2576.052793][T11700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2576.056330][T11700] CPU: 1 UID: 0 PID: 11700 Comm: syz.1.2588 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2576.058265][T11700] Hardware name: linux,dummy-virt (DT) [ 2576.059158][T11700] Call trace: [ 2576.059763][T11700] show_stack+0x18/0x24 (C) [ 2576.060705][T11700] dump_stack_lvl+0x78/0x90 [ 2576.061525][T11700] dump_stack+0x18/0x24 [ 2576.062397][T11700] should_fail_ex+0x18c/0x1e0 [ 2576.063365][T11700] should_fail+0x14/0x20 [ 2576.064246][T11700] should_fail_usercopy+0x1c/0x28 [ 2576.065284][T11700] simple_read_from_buffer+0x68/0x118 [ 2576.066333][T11700] proc_fail_nth_read+0xac/0x12c [ 2576.067273][T11700] vfs_read+0xc0/0x318 [ 2576.068770][T11700] ksys_read+0x6c/0x100 [ 2576.076114][T11700] __arm64_sys_read+0x1c/0x28 [ 2576.077304][T11700] invoke_syscall+0x48/0x110 [ 2576.078948][T11700] el0_svc_common.constprop.0+0x40/0xe0 [ 2576.080247][T11700] do_el0_svc+0x1c/0x28 [ 2576.081208][T11700] el0_svc+0x30/0xe0 [ 2576.082154][T11700] el0t_64_sync_handler+0x10c/0x138 [ 2576.083034][T11700] el0t_64_sync+0x1a4/0x1a8 [ 2576.443780][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.449687][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.623512][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.637068][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.815266][T11708] capability: warning: `syz.1.2591' uses deprecated v2 capabilities in a way that may be insecure [ 2580.329688][T11716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.332160][T11716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.269240][T11119] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2581.458819][T11119] usb 1-1: Using ep0 maxpacket: 8 [ 2581.508956][T11119] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2581.510438][T11119] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 903 [ 2581.536665][T11119] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2581.538708][T11119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.539723][T11119] usb 1-1: Product: syz [ 2581.540469][T11119] usb 1-1: Manufacturer: syz [ 2581.541225][T11119] usb 1-1: SerialNumber: syz [ 2581.818999][T11119] cdc_ncm 1-1:1.0: bind() failure [ 2581.838706][T11119] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2581.839824][T11119] cdc_ncm 1-1:1.1: bind() failure [ 2581.860822][T11119] usb 1-1: USB disconnect, device number 42 [ 2584.551626][T11744] FAULT_INJECTION: forcing a failure. [ 2584.551626][T11744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2584.552798][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.1.2602 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2584.553569][T11744] Hardware name: linux,dummy-virt (DT) [ 2584.554008][T11744] Call trace: [ 2584.554331][T11744] show_stack+0x18/0x24 (C) [ 2584.555189][T11744] dump_stack_lvl+0x78/0x90 [ 2584.555669][T11744] dump_stack+0x18/0x24 [ 2584.556118][T11744] should_fail_ex+0x18c/0x1e0 [ 2584.556725][T11744] should_fail+0x14/0x20 [ 2584.557178][T11744] should_fail_usercopy+0x1c/0x28 [ 2584.558282][T11744] simple_read_from_buffer+0x68/0x118 [ 2584.559089][T11744] proc_fail_nth_read+0xac/0x12c [ 2584.559859][T11744] vfs_read+0xc0/0x318 [ 2584.560457][T11744] ksys_read+0x6c/0x100 [ 2584.561344][T11744] __arm64_sys_read+0x1c/0x28 [ 2584.562190][T11744] invoke_syscall+0x48/0x110 [ 2584.563029][T11744] el0_svc_common.constprop.0+0x40/0xe0 [ 2584.563912][T11744] do_el0_svc+0x1c/0x28 [ 2584.564824][T11744] el0_svc+0x30/0xe0 [ 2584.565270][T11744] el0t_64_sync_handler+0x10c/0x138 [ 2584.565739][T11744] el0t_64_sync+0x1a4/0x1a8 [ 2584.752280][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2584.761683][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2585.701731][T11754] FAULT_INJECTION: forcing a failure. [ 2585.701731][T11754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2585.703479][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.1.2605 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2585.705704][T11754] Hardware name: linux,dummy-virt (DT) [ 2585.706556][T11754] Call trace: [ 2585.707203][T11754] show_stack+0x18/0x24 (C) [ 2585.708450][T11754] dump_stack_lvl+0x78/0x90 [ 2585.709735][T11754] dump_stack+0x18/0x24 [ 2585.710868][T11754] should_fail_ex+0x18c/0x1e0 [ 2585.712041][T11754] should_fail+0x14/0x20 [ 2585.713164][T11754] should_fail_usercopy+0x1c/0x28 [ 2585.714162][T11754] simple_read_from_buffer+0x68/0x118 [ 2585.715200][T11754] proc_fail_nth_read+0xac/0x12c [ 2585.716399][T11754] vfs_read+0xc0/0x318 [ 2585.717351][T11754] ksys_read+0x6c/0x100 [ 2585.718478][T11754] __arm64_sys_read+0x1c/0x28 [ 2585.719382][T11754] invoke_syscall+0x48/0x110 [ 2585.720217][T11754] el0_svc_common.constprop.0+0x40/0xe0 [ 2585.722572][T11754] do_el0_svc+0x1c/0x28 [ 2585.723467][T11754] el0_svc+0x30/0xe0 [ 2585.724305][T11754] el0t_64_sync_handler+0x10c/0x138 [ 2585.725321][T11754] el0t_64_sync+0x1a4/0x1a8 [ 2589.869293][T11773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2589.890044][T11773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2591.215501][T11784] x_tables: duplicate underflow at hook 1 [ 2592.230538][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.234950][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2593.301610][T11800] fuse: Bad value for 'fd' [ 2595.654991][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2595.660320][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2596.018990][T11816] serio: Serial port pts0 [ 2598.242240][T11823] serio: Serial port pts1 [ 2620.305247][T11859] netlink: 'syz.0.2640': attribute type 4 has an invalid length. [ 2639.875762][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2639.883365][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2647.474956][T11925] FAULT_INJECTION: forcing a failure. [ 2647.474956][T11925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2647.476813][T11925] CPU: 0 UID: 0 PID: 11925 Comm: syz.1.2661 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2647.478308][T11925] Hardware name: linux,dummy-virt (DT) [ 2647.479091][T11925] Call trace: [ 2647.479692][T11925] show_stack+0x18/0x24 (C) [ 2647.480604][T11925] dump_stack_lvl+0x78/0x90 [ 2647.481441][T11925] dump_stack+0x18/0x24 [ 2647.482189][T11925] should_fail_ex+0x18c/0x1e0 [ 2647.483002][T11925] should_fail_alloc_page+0x60/0x78 [ 2647.483831][T11925] __alloc_pages_noprof+0xdc/0xd38 [ 2647.484708][T11925] alloc_pages_mpol_noprof+0x8c/0x230 [ 2647.485553][T11925] alloc_pages_noprof+0x48/0xc0 [ 2647.486506][T11925] __pte_alloc+0x38/0x13c [ 2647.487549][T11925] __handle_mm_fault+0x162c/0x1950 [ 2647.488469][T11925] handle_mm_fault+0x164/0x314 [ 2647.489298][T11925] do_page_fault+0x118/0x538 [ 2647.490103][T11925] do_translation_fault+0xac/0xbc [ 2647.490928][T11925] do_mem_abort+0x44/0x94 [ 2647.491697][T11925] el0_da+0x78/0xa8 [ 2647.492431][T11925] el0t_64_sync_handler+0xc4/0x138 [ 2647.493283][T11925] el0t_64_sync+0x1a4/0x1a8 [ 2647.499380][T11925] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2647.550438][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2647.553334][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.643574][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.650482][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2669.360360][ T883] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 2669.613036][ T883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2669.624344][ T883] usb 1-1: not running at top speed; connect to a high speed hub [ 2669.661198][ T883] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2669.719526][ T883] usb 1-1: string descriptor 0 read error: -22 [ 2669.721301][ T883] usb 1-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 2669.722618][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.981702][ T883] usbhid 1-1:1.0: can't add hid device: -71 [ 2669.983669][ T883] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2670.018873][ T883] usb 1-1: USB disconnect, device number 43 [ 2677.473391][T12046] FAULT_INJECTION: forcing a failure. [ 2677.473391][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 2677.474207][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.1.2699 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2677.474911][T12046] Hardware name: linux,dummy-virt (DT) [ 2677.475634][T12046] Call trace: [ 2677.476237][T12046] show_stack+0x18/0x24 (C) [ 2677.477096][T12046] dump_stack_lvl+0x78/0x90 [ 2677.478180][T12046] dump_stack+0x18/0x24 [ 2677.478851][T12046] should_fail_ex+0x18c/0x1e0 [ 2677.479490][T12046] should_failslab+0x54/0x80 [ 2677.480148][T12046] __kmalloc_noprof+0xa8/0x430 [ 2677.481068][T12046] tomoyo_realpath_from_path+0x48/0x1d0 [ 2677.482532][T12046] tomoyo_path_number_perm+0xd8/0x224 [ 2677.483587][T12046] tomoyo_file_ioctl+0x1c/0x28 [ 2677.484315][T12046] security_file_ioctl+0x8c/0x19c [ 2677.485006][T12046] __arm64_sys_ioctl+0x48/0xec [ 2677.485681][T12046] invoke_syscall+0x48/0x110 [ 2677.486517][T12046] el0_svc_common.constprop.0+0x40/0xe0 [ 2677.487714][T12046] do_el0_svc+0x1c/0x28 [ 2677.488904][T12046] el0_svc+0x30/0xe0 [ 2677.490261][T12046] el0t_64_sync_handler+0x10c/0x138 [ 2677.490998][T12046] el0t_64_sync+0x1a4/0x1a8 [ 2677.503860][T12046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2685.119832][T12083] FAULT_INJECTION: forcing a failure. [ 2685.119832][T12083] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.121794][T12083] CPU: 1 UID: 0 PID: 12083 Comm: syz.1.2709 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2685.123407][T12083] Hardware name: linux,dummy-virt (DT) [ 2685.124389][T12083] Call trace: [ 2685.125012][T12083] show_stack+0x18/0x24 (C) [ 2685.126044][T12083] dump_stack_lvl+0x78/0x90 [ 2685.127033][T12083] dump_stack+0x18/0x24 [ 2685.128047][T12083] should_fail_ex+0x18c/0x1e0 [ 2685.129064][T12083] should_failslab+0x54/0x80 [ 2685.130017][T12083] kmem_cache_alloc_noprof+0x54/0x368 [ 2685.131030][T12083] getname_flags.part.0+0x2c/0x1bc [ 2685.131939][T12083] getname_flags+0x38/0x60 [ 2685.132897][T12083] __arm64_sys_mkdirat+0x20/0x44 [ 2685.133911][T12083] invoke_syscall+0x48/0x110 [ 2685.134801][T12083] el0_svc_common.constprop.0+0x40/0xe0 [ 2685.135978][T12083] do_el0_svc+0x1c/0x28 [ 2685.136936][T12083] el0_svc+0x30/0xe0 [ 2685.137895][T12083] el0t_64_sync_handler+0x10c/0x138 [ 2685.138882][T12083] el0t_64_sync+0x1a4/0x1a8 [ 2686.890651][T12104] FAULT_INJECTION: forcing a failure. [ 2686.890651][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2686.892554][T12104] CPU: 1 UID: 0 PID: 12104 Comm: syz.1.2715 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2686.893905][T12104] Hardware name: linux,dummy-virt (DT) [ 2686.894705][T12104] Call trace: [ 2686.895332][T12104] show_stack+0x18/0x24 (C) [ 2686.896693][T12104] dump_stack_lvl+0x78/0x90 [ 2686.897655][T12104] dump_stack+0x18/0x24 [ 2686.898526][T12104] should_fail_ex+0x18c/0x1e0 [ 2686.899447][T12104] should_fail+0x14/0x20 [ 2686.900269][T12104] should_fail_usercopy+0x1c/0x28 [ 2686.901289][T12104] strncpy_from_user+0x24/0x198 [ 2686.902113][T12104] getname_flags.part.0+0x48/0x1bc [ 2686.903140][T12104] getname_flags+0x38/0x60 [ 2686.903991][T12104] __arm64_sys_mkdirat+0x20/0x44 [ 2686.904980][T12104] invoke_syscall+0x48/0x110 [ 2686.905876][T12104] el0_svc_common.constprop.0+0x40/0xe0 [ 2686.906763][T12104] do_el0_svc+0x1c/0x28 [ 2686.907872][T12104] el0_svc+0x30/0xe0 [ 2686.908868][T12104] el0t_64_sync_handler+0x10c/0x138 [ 2686.909864][T12104] el0t_64_sync+0x1a4/0x1a8 [ 2687.350349][T10060] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2687.529982][T10060] usb 1-1: Using ep0 maxpacket: 8 [ 2687.645756][T10060] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 2687.647126][T10060] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 903 [ 2687.685252][T10060] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2687.687202][T10060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.694961][T10060] usb 1-1: Product: syz [ 2687.695858][T10060] usb 1-1: Manufacturer: 㠁 [ 2687.696678][T10060] usb 1-1: SerialNumber: syz [ 2688.023420][T12111] input: syz0 as /devices/virtual/input/input86 [ 2692.794433][T10060] cdc_ncm 1-1:1.0: bind() failure [ 2692.829611][T10060] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 2692.830977][T10060] cdc_ncm 1-1:1.1: bind() failure [ 2709.753667][T12158] ALSA: seq_lock: waiting [1 left] in sound/core/seq/seq_fifo.c:90 [ 2711.723264][ T7303] usb 1-1: USB disconnect, device number 44 [ 2713.548949][ T7303] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2713.740812][ T7303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2713.742776][ T7303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2713.775467][ T7303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2713.776999][ T7303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.780400][ T7303] usb 1-1: Product: 釭㸳Ʉ꺬ࡩ┪蛯䶛䩛ࢎ衭䤺쒲랩訨ꅵ囀馂ᷰ⯣䐳잢︔⿢ꚻ⼶盲⪝痱唷㉩၍㊹෷ꆬ팢磎麟潴뀺毈롟ꭜ橫녬㉮ᚹ鹌㺄稂잴톽⵺ⳬ薁Ṳ왜죥ꍕ㕭頱톺臍떶ډޫ [ 2713.785468][ T7303] usb 1-1: Manufacturer: 澄쥆嫼卲롲끯䊄訏ቫ왜ꛬ녹션 [ 2713.786682][ T7303] usb 1-1: SerialNumber: ꚲ촤㬵┖㴂ˉဢ朑⢒ᝎⰅ牔繠瀋媃ኢ勳ﴵ朰鉰ઑꐄ഑玜ﵔ삿ꈰ๦㗌ퟒ퍻貁숗⾚嚿ㄩۮ稸쌥咆锞᳈据猓⁓岷㩈츳ퟲ潨㵻ᘧኧ죢릡悬搻ધ銻秇냍繈㧤곾役䣛橚띊౒⸙ຼ摵 [ 2714.063757][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2714.066998][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2714.289553][ T7303] usb 1-1: 0:2 : does not exist [ 2714.410950][ T7303] usb 1-1: USB disconnect, device number 45 [ 2714.678481][T12170] udevd[12170]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2715.685670][T12192] serio: Serial port pts0 [ 2716.568894][ T7303] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2716.749447][ T7303] usb 1-1: Using ep0 maxpacket: 8 [ 2716.781166][ T7303] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2716.782639][ T7303] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2716.784087][ T7303] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2721.902637][ T7303] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2721.904151][ T7303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2721.905184][ T7303] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2721.906390][ T7303] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2721.911543][ T7303] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2721.952664][T12195] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2722.224179][ T7303] usb 1-1: USB disconnect, device number 46 [ 2727.339964][ T3782] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2727.508836][ T3782] usb 1-1: Using ep0 maxpacket: 8 [ 2727.573254][ T3782] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2727.574735][ T3782] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2727.576093][ T3782] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2732.705219][ T3782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2732.707063][ T3782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2732.709491][ T3782] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2732.710991][ T3782] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2732.715935][ T3782] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2732.776555][T12222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2733.061236][ T3782] usb 1-1: USB disconnect, device number 47 [ 2733.941359][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 2734.719837][ T3782] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2734.929360][ T3782] usb 1-1: Using ep0 maxpacket: 8 [ 2734.988681][ T3782] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2734.990151][ T3782] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2734.992039][ T3782] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2737.349791][T12273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2737.353555][T12273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2740.156423][ T3782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2740.158776][ T3782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.160038][ T3782] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2740.161634][ T3782] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2740.164785][ T3782] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2740.213313][T12248] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2740.481523][ T3782] usb 1-1: USB disconnect, device number 48 [ 2742.729368][ T3782] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2742.899324][ T3782] usb 1-1: Using ep0 maxpacket: 8 [ 2743.163774][ T3782] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2743.165613][ T3782] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2743.167368][ T3782] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2748.296741][ T3782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2748.300086][ T3782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2748.302119][ T3782] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2748.303412][ T3782] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2748.306822][ T3782] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2748.352844][T12300] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2748.619396][ T3782] usb 1-1: USB disconnect, device number 49 [ 2750.062170][T11331] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2750.238832][T11331] usb 1-1: Using ep0 maxpacket: 8 [ 2750.302879][T11331] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2750.304425][T11331] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2750.306059][T11331] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2755.252304][T12366] serio: Serial port pts0 [ 2755.421753][T11331] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2755.423061][T11331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2755.424021][T11331] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2755.425239][T11331] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2755.429259][T11331] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2755.461491][T12343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2755.744753][T11331] usb 1-1: USB disconnect, device number 50 [ 2760.501929][T12400] FAULT_INJECTION: forcing a failure. [ 2760.501929][T12400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2760.503585][T12400] CPU: 1 UID: 0 PID: 12400 Comm: syz.0.2792 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2760.504973][T12400] Hardware name: linux,dummy-virt (DT) [ 2760.505778][T12400] Call trace: [ 2760.506514][T12400] show_stack+0x18/0x24 (C) [ 2760.507507][T12400] dump_stack_lvl+0x78/0x90 [ 2760.508662][T12400] dump_stack+0x18/0x24 [ 2760.509471][T12400] should_fail_ex+0x18c/0x1e0 [ 2760.510315][T12400] should_fail+0x14/0x20 [ 2760.511170][T12400] should_fail_usercopy+0x1c/0x28 [ 2760.512198][T12400] copy_msghdr_from_user+0x48/0x110 [ 2760.513210][T12400] ___sys_sendmsg+0x8c/0x100 [ 2760.514079][T12400] __sys_sendmsg+0x98/0xf4 [ 2760.514977][T12400] __arm64_sys_sendmsg+0x24/0x30 [ 2760.516342][T12400] invoke_syscall+0x48/0x110 [ 2760.517329][T12400] el0_svc_common.constprop.0+0x40/0xe0 [ 2760.518412][T12400] do_el0_svc+0x1c/0x28 [ 2760.519271][T12400] el0_svc+0x30/0xe0 [ 2760.520469][T12400] el0t_64_sync_handler+0x10c/0x138 [ 2760.521758][T12400] el0t_64_sync+0x1a4/0x1a8 [ 2764.250443][T12411] FAULT_INJECTION: forcing a failure. [ 2764.250443][T12411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2764.253337][T12411] CPU: 0 UID: 0 PID: 12411 Comm: syz.0.2797 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2764.256599][T12411] Hardware name: linux,dummy-virt (DT) [ 2764.257515][T12411] Call trace: [ 2764.258142][T12411] show_stack+0x18/0x24 (C) [ 2764.259218][T12411] dump_stack_lvl+0x78/0x90 [ 2764.260286][T12411] dump_stack+0x18/0x24 [ 2764.261297][T12411] should_fail_ex+0x18c/0x1e0 [ 2764.262343][T12411] should_fail_alloc_page+0x60/0x78 [ 2764.263547][T12411] __alloc_pages_noprof+0xdc/0xd38 [ 2764.264517][T12411] alloc_pages_mpol_noprof+0x8c/0x230 [ 2764.265476][T12411] folio_alloc_mpol_noprof+0x14/0x64 [ 2764.266471][T12411] vma_alloc_folio_noprof+0x7c/0xcc [ 2764.267715][T12411] vma_alloc_zeroed_movable_folio+0x38/0x44 [ 2764.268778][T12411] __handle_mm_fault+0x134c/0x1950 [ 2764.270347][T12411] handle_mm_fault+0x164/0x314 [ 2764.271333][T12411] do_page_fault+0x118/0x538 [ 2764.272125][T12411] do_translation_fault+0xac/0xbc [ 2764.273007][T12411] do_mem_abort+0x44/0x94 [ 2764.273840][T12411] el0_da+0x78/0xa8 [ 2764.274972][T12411] el0t_64_sync_handler+0xc4/0x138 [ 2764.275865][T12411] el0t_64_sync+0x1a4/0x1a8 [ 2771.792773][T12437] serio: Serial port pts0 [ 2773.318879][ T6500] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 2773.492124][ T6500] usb 1-1: not running at top speed; connect to a high speed hub [ 2773.530392][ T6500] usb 1-1: config 4 has an invalid interface number: 168 but max is 2 [ 2773.531842][ T6500] usb 1-1: config 4 has an invalid interface number: 71 but max is 2 [ 2773.533245][ T6500] usb 1-1: config 4 has an invalid interface number: 226 but max is 2 [ 2773.534471][ T6500] usb 1-1: config 4 has an invalid interface number: 83 but max is 2 [ 2773.535639][ T6500] usb 1-1: config 4 has 4 interfaces, different from the descriptor's value: 3 [ 2773.536878][ T6500] usb 1-1: config 4 has no interface number 0 [ 2773.540763][ T6500] usb 1-1: config 4 has no interface number 1 [ 2773.541717][ T6500] usb 1-1: config 4 has no interface number 2 [ 2773.542685][ T6500] usb 1-1: config 4 has no interface number 3 [ 2773.543973][ T6500] usb 1-1: config 4 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2773.545602][ T6500] usb 1-1: config 4 interface 168 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2773.547106][ T6500] usb 1-1: too many endpoints for config 4 interface 71 altsetting 230: 97, using maximum allowed: 30 [ 2773.550887][ T6500] usb 1-1: config 4 interface 71 altsetting 230 has a duplicate endpoint with address 0xD, skipping [ 2773.552289][ T6500] usb 1-1: config 4 interface 71 altsetting 230 endpoint 0xE has invalid maxpacket 80, setting to 64 [ 2773.554346][ T6500] usb 1-1: config 4 interface 71 altsetting 230 has an invalid descriptor for endpoint zero, skipping [ 2773.555857][ T6500] usb 1-1: config 4 interface 71 altsetting 230 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2773.557379][ T6500] usb 1-1: config 4 interface 71 altsetting 230 has 4 endpoint descriptors, different from the interface descriptor's value: 97 [ 2773.560411][ T6500] usb 1-1: config 4 interface 226 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 2773.562316][ T6500] usb 1-1: config 4 interface 226 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 2773.563818][ T6500] usb 1-1: config 4 interface 226 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2773.565358][ T6500] usb 1-1: config 4 interface 226 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2773.567003][ T6500] usb 1-1: config 4 interface 226 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2773.569589][ T6500] usb 1-1: config 4 interface 226 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2773.571096][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 2773.572398][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 2773.573856][ T6500] usb 1-1: config 4 interface 83 altsetting 8 endpoint 0x8 has an invalid bInterval 48, changing to 4 [ 2773.575544][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 2773.576844][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 2773.579202][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 2773.580850][ T6500] usb 1-1: config 4 interface 83 altsetting 8 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 2773.582452][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 2773.584205][ T6500] usb 1-1: config 4 interface 83 altsetting 8 has a duplicate endpoint with address 0x8E, skipping [ 2773.585878][ T6500] usb 1-1: config 4 interface 168 has no altsetting 0 [ 2773.586882][ T6500] usb 1-1: config 4 interface 71 has no altsetting 0 [ 2773.590857][ T6500] usb 1-1: config 4 interface 83 has no altsetting 0 [ 2773.674339][ T6500] usb 1-1: New USB device found, idVendor=0403, idProduct=ed22, bcdDevice=36.e3 [ 2773.680273][ T6500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.682240][ T6500] usb 1-1: Product: syz [ 2773.683799][ T6500] usb 1-1: Manufacturer: 覹ﶌ⥲荀噝몰ꏚ넿烢躩템뒹엝狩ᢪ둾즺ꢼ美䷖匳箐ᾌ揜쵟ಱ컚ﺈ쓣搙筽Ỗߝ뗶㫽ᏽ讼ۮド羝竜뎡䳦쀤嬎䖒চᨦ峏Ⲿ⺙믩馲㿚뱲图建䟈主ग़禠꼜┭ˎ鰼 [ 2773.687063][ T6500] usb 1-1: SerialNumber: syz [ 2773.745512][T12445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2774.374124][ T6500] ftdi_sio 1-1:4.168: FTDI USB Serial Device converter detected [ 2774.380555][ T6500] ftdi_sio ttyUSB0: unknown device type: 0x36e3 [ 2774.401062][ T6500] ftdi_sio 1-1:4.71: FTDI USB Serial Device converter detected [ 2774.407548][ T6500] ftdi_sio ttyUSB1: unknown device type: 0x36e3 [ 2774.437288][ T6500] ftdi_sio 1-1:4.226: FTDI USB Serial Device converter detected [ 2774.455109][ T6500] ftdi_sio ttyUSB2: unknown device type: 0x36e3 [ 2774.501784][ T6500] ftdi_sio 1-1:4.83: FTDI USB Serial Device converter detected [ 2774.506514][ T6500] ftdi_sio ttyUSB3: unknown device type: 0x36e3 [ 2774.543423][ T6500] usb 1-1: USB disconnect, device number 51 [ 2774.553323][ T6500] ftdi_sio 1-1:4.168: device disconnected [ 2774.568462][ T6500] ftdi_sio 1-1:4.71: device disconnected [ 2774.620840][ T6500] ftdi_sio 1-1:4.226: device disconnected [ 2774.662040][ T6500] ftdi_sio 1-1:4.83: device disconnected [ 2788.572986][T12486] serio: Serial port pts0 [ 2825.906111][T12571] fuse: Bad value for 'fd' [ 2832.290556][T12587] fuse: Bad value for 'fd' [ 2837.212066][T12600] fuse: Bad value for 'fd' [ 2845.403768][T12616] FAULT_INJECTION: forcing a failure. [ 2845.403768][T12616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2845.408886][T12616] CPU: 1 UID: 0 PID: 12616 Comm: syz.1.2862 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2845.412884][T12616] Hardware name: linux,dummy-virt (DT) [ 2845.415071][T12616] Call trace: [ 2845.416226][T12616] show_stack+0x18/0x24 (C) [ 2845.418058][T12616] dump_stack_lvl+0x78/0x90 [ 2845.419437][T12616] dump_stack+0x18/0x24 [ 2845.421334][T12616] should_fail_ex+0x18c/0x1e0 [ 2845.423285][T12616] should_fail+0x14/0x20 [ 2845.425151][T12616] should_fail_usercopy+0x1c/0x28 [ 2845.427269][T12616] simple_read_from_buffer+0x68/0x118 [ 2845.428480][T12616] proc_fail_nth_read+0xac/0x12c [ 2845.429434][T12616] vfs_read+0xc0/0x318 [ 2845.430244][T12616] ksys_read+0x6c/0x100 [ 2845.431100][T12616] __arm64_sys_read+0x1c/0x28 [ 2845.432061][T12616] invoke_syscall+0x48/0x110 [ 2845.433391][T12616] el0_svc_common.constprop.0+0x40/0xe0 [ 2845.434525][T12616] do_el0_svc+0x1c/0x28 [ 2845.435863][T12616] el0_svc+0x30/0xe0 [ 2845.436796][T12616] el0t_64_sync_handler+0x10c/0x138 [ 2845.438046][T12616] el0t_64_sync+0x1a4/0x1a8 [ 2845.439609][ C1] vkms_vblank_simulate: vblank timer overrun [ 2860.245219][T12683] FAULT_INJECTION: forcing a failure. [ 2860.245219][T12683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2860.246173][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.1.2883 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2860.247017][T12683] Hardware name: linux,dummy-virt (DT) [ 2860.247828][T12683] Call trace: [ 2860.248444][T12683] show_stack+0x18/0x24 (C) [ 2860.249366][T12683] dump_stack_lvl+0x78/0x90 [ 2860.250183][T12683] dump_stack+0x18/0x24 [ 2860.250817][T12683] should_fail_ex+0x18c/0x1e0 [ 2860.251541][T12683] should_fail+0x14/0x20 [ 2860.252189][T12683] should_fail_usercopy+0x1c/0x28 [ 2860.252968][T12683] simple_read_from_buffer+0x68/0x118 [ 2860.253748][T12683] proc_fail_nth_read+0xac/0x12c [ 2860.254303][T12683] vfs_read+0xc0/0x318 [ 2860.254749][T12683] ksys_read+0x6c/0x100 [ 2860.255189][T12683] __arm64_sys_read+0x1c/0x28 [ 2860.255654][T12683] invoke_syscall+0x48/0x110 [ 2860.256091][T12683] el0_svc_common.constprop.0+0x40/0xe0 [ 2860.256580][T12683] do_el0_svc+0x1c/0x28 [ 2860.257472][T12683] el0_svc+0x30/0xe0 [ 2860.257998][T12683] el0t_64_sync_handler+0x10c/0x138 [ 2860.258553][T12683] el0t_64_sync+0x1a4/0x1a8 [ 2864.160496][T12721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2864.173224][T12721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.009867][ T6500] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2869.249301][ T6500] usb 1-1: Using ep0 maxpacket: 8 [ 2869.323056][ T6500] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2869.325997][ T6500] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2869.334253][ T6500] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2874.473401][ T6500] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2874.474699][ T6500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2874.475754][ T6500] usb 1-1: Product: ᝯꔫ諘坹闃哭覿ƞ㈌Ⴘ젱顕ヘ뷻옪覉ⓥ⏛ꚰ阙쮼鯢ᮠ暵 [ 2874.476987][ T6500] usb 1-1: Manufacturer: Àᤇ눳瞷㕩█碃쭂繀봥⩉䶗扦廣ㅾꐐඑ‿ﯪォ㗗覤⾍璀䍆릜י肸훟램䪚䬒诎﷬编쇎똗࠰隰旂郦ὂ훝=槉圢ᄐ珇큷刧몁耤䃓犜ꃎꂴꓭ昂ْ풌퇄뗡劐㎳聄츄爛悍]싪肈纅色Ꭽ藥ꯏ࿄䒇ꕔꍧ䷷溡뒋穏櫫덓ጸﬨ锳쭏Ồ䏯韝㬸赡ϩ镖ዑ誺΅ꜻ檆笭顔萑璧鄋 [ 2874.493832][ T6500] usb 1-1: SerialNumber: 䥮ᬅ偿垢㿘ꡯ灢캠岓ⱴ︱梪㲑ᬜ슠꣱竮墑뀖ៜ뷢鍔㯤㎆珌觔䓵ꈣ縀讀鬿艤华㫆잡᣽奷ਬ柦쵟諲增噕㺨㽘䲽蒏鉎땉鰼톬뾾ᇬ㌐趽㩼氷 [ 2874.555595][T12737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2874.880791][ T6500] usb 1-1: USB disconnect, device number 52 [ 2877.626657][T12814] serio: Serial port pts0 [ 2889.197346][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2889.205283][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2892.722479][T12874] FAULT_INJECTION: forcing a failure. [ 2892.722479][T12874] name failslab, interval 1, probability 0, space 0, times 0 [ 2892.724855][T12874] CPU: 1 UID: 0 PID: 12874 Comm: syz.1.2945 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2892.726530][T12874] Hardware name: linux,dummy-virt (DT) [ 2892.728043][T12874] Call trace: [ 2892.728856][T12874] show_stack+0x18/0x24 (C) [ 2892.730147][T12874] dump_stack_lvl+0x78/0x90 [ 2892.731327][T12874] dump_stack+0x18/0x24 [ 2892.732108][T12874] should_fail_ex+0x18c/0x1e0 [ 2892.732902][T12874] should_failslab+0x54/0x80 [ 2892.733762][T12874] kmem_cache_alloc_lru_noprof+0x5c/0x378 [ 2892.734891][T12874] __d_alloc+0x34/0x1b8 [ 2892.735841][T12874] d_alloc_pseudo+0x18/0x6c [ 2892.736802][T12874] alloc_file_pseudo+0x68/0x100 [ 2892.737983][T12874] __anon_inode_getfile+0x98/0x178 [ 2892.739047][T12874] anon_inode_getfd+0x54/0x90 [ 2892.740601][T12874] __arm64_sys_fsopen+0xd0/0x14c [ 2892.741643][T12874] invoke_syscall+0x48/0x110 [ 2892.742696][T12874] el0_svc_common.constprop.0+0x40/0xe0 [ 2892.743784][T12874] do_el0_svc+0x1c/0x28 [ 2892.744853][T12874] el0_svc+0x30/0xe0 [ 2892.745823][T12874] el0t_64_sync_handler+0x10c/0x138 [ 2892.746744][T12874] el0t_64_sync+0x1a4/0x1a8 [ 2894.826590][T12899] FAULT_INJECTION: forcing a failure. [ 2894.826590][T12899] name failslab, interval 1, probability 0, space 0, times 0 [ 2894.831534][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.1.2953 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2894.833162][T12899] Hardware name: linux,dummy-virt (DT) [ 2894.834021][T12899] Call trace: [ 2894.835157][T12899] show_stack+0x18/0x24 (C) [ 2894.836086][T12899] dump_stack_lvl+0x78/0x90 [ 2894.836958][T12899] dump_stack+0x18/0x24 [ 2894.838026][T12899] should_fail_ex+0x18c/0x1e0 [ 2894.839105][T12899] should_failslab+0x54/0x80 [ 2894.839966][T12899] kmem_cache_alloc_noprof+0x54/0x368 [ 2894.842675][T12899] getname_flags.part.0+0x2c/0x1bc [ 2894.843603][T12899] getname+0x34/0x5c [ 2894.844393][T12899] do_sys_openat2+0x80/0xf4 [ 2894.845218][T12899] __arm64_sys_openat+0x64/0xa4 [ 2894.846051][T12899] invoke_syscall+0x48/0x110 [ 2894.846910][T12899] el0_svc_common.constprop.0+0x40/0xe0 [ 2894.848037][T12899] do_el0_svc+0x1c/0x28 [ 2894.848824][T12899] el0_svc+0x30/0xe0 [ 2894.849597][T12899] el0t_64_sync_handler+0x10c/0x138 [ 2894.850588][T12899] el0t_64_sync+0x1a4/0x1a8 [ 2895.156254][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.172806][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2899.832200][T12925] FAULT_INJECTION: forcing a failure. [ 2899.832200][T12925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2899.836906][T12925] CPU: 1 UID: 0 PID: 12925 Comm: syz.0.2963 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2899.841671][T12925] Hardware name: linux,dummy-virt (DT) [ 2899.843792][T12925] Call trace: [ 2899.845252][T12925] show_stack+0x18/0x24 (C) [ 2899.846941][T12925] dump_stack_lvl+0x78/0x90 [ 2899.848139][T12925] dump_stack+0x18/0x24 [ 2899.850402][T12925] should_fail_ex+0x18c/0x1e0 [ 2899.852023][T12925] should_fail+0x14/0x20 [ 2899.853499][T12925] should_fail_usercopy+0x1c/0x28 [ 2899.855947][T12925] strncpy_from_user+0x24/0x198 [ 2899.857824][T12925] getname_flags.part.0+0x48/0x1bc [ 2899.860510][T12925] getname+0x34/0x5c [ 2899.862607][T12925] do_sys_openat2+0x80/0xf4 [ 2899.864100][T12925] __arm64_sys_openat+0x64/0xa4 [ 2899.867286][T12925] invoke_syscall+0x48/0x110 [ 2899.868801][T12925] el0_svc_common.constprop.0+0x40/0xe0 [ 2899.869748][T12925] do_el0_svc+0x1c/0x28 [ 2899.870888][T12925] el0_svc+0x30/0xe0 [ 2899.871987][T12925] el0t_64_sync_handler+0x10c/0x138 [ 2899.872851][T12925] el0t_64_sync+0x1a4/0x1a8 [ 2900.618700][T12927] FAULT_INJECTION: forcing a failure. [ 2900.618700][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2900.620549][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.1.2964 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2900.622425][T12927] Hardware name: linux,dummy-virt (DT) [ 2900.623243][T12927] Call trace: [ 2900.624250][T12927] show_stack+0x18/0x24 (C) [ 2900.625439][T12927] dump_stack_lvl+0x78/0x90 [ 2900.626176][T12927] dump_stack+0x18/0x24 [ 2900.626850][T12927] should_fail_ex+0x18c/0x1e0 [ 2900.627734][T12927] should_fail+0x14/0x20 [ 2900.628961][T12927] should_fail_usercopy+0x1c/0x28 [ 2900.630167][T12927] simple_read_from_buffer+0x68/0x118 [ 2900.631102][T12927] proc_fail_nth_read+0xac/0x12c [ 2900.632046][T12927] vfs_read+0xc0/0x318 [ 2900.632919][T12927] ksys_read+0x6c/0x100 [ 2900.634292][T12927] __arm64_sys_read+0x1c/0x28 [ 2900.635458][T12927] invoke_syscall+0x48/0x110 [ 2900.636304][T12927] el0_svc_common.constprop.0+0x40/0xe0 [ 2900.637425][T12927] do_el0_svc+0x1c/0x28 [ 2900.638775][T12927] el0_svc+0x30/0xe0 [ 2900.639612][T12927] el0t_64_sync_handler+0x10c/0x138 [ 2900.640576][T12927] el0t_64_sync+0x1a4/0x1a8 [ 2900.841200][T12936] input: syz0 as /devices/virtual/input/input88 [ 2905.973565][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2906.049000][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2906.936412][T12946] fuse: Bad value for 'group_id' [ 2906.939497][T12946] fuse: Bad value for 'group_id' [ 2927.120317][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2927.131399][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2932.410348][ T883] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 2932.681429][ T883] usb 1-1: not running at top speed; connect to a high speed hub [ 2932.749661][ T883] usb 1-1: config 4 has an invalid interface number: 168 but max is 0 [ 2932.750924][ T883] usb 1-1: config 4 has no interface number 0 [ 2932.751983][ T883] usb 1-1: config 4 interface 168 has no altsetting 0 [ 2932.859725][ T883] usb 1-1: New USB device found, idVendor=0403, idProduct=ed22, bcdDevice=36.e3 [ 2932.861495][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2932.862559][ T883] usb 1-1: Product: syz [ 2932.863427][ T883] usb 1-1: Manufacturer: syz [ 2932.864208][ T883] usb 1-1: SerialNumber: syz [ 2933.205204][ T883] ftdi_sio 1-1:4.168: FTDI USB Serial Device converter detected [ 2933.214114][ T883] ftdi_sio ttyUSB0: unknown device type: 0x36e3 [ 2933.252833][ T883] usb 1-1: USB disconnect, device number 53 [ 2933.289668][ T883] ftdi_sio 1-1:4.168: device disconnected [ 2938.869532][T12779] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2939.050291][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 2939.109427][T12779] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 2939.110760][T12779] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2939.112120][T12779] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2939.146036][T12779] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.40 [ 2939.147228][T12779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2939.161322][T12779] usb 1-1: Product: ь [ 2939.162175][T12779] usb 1-1: Manufacturer: ᠌ [ 2939.162907][T12779] usb 1-1: SerialNumber: й [ 2939.518487][T12779] usbhid 1-1:1.0: can't add hid device: -71 [ 2939.521833][T12779] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 2939.569917][T12779] usb 1-1: USB disconnect, device number 54 [ 2955.224226][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2955.227698][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2956.137913][T13127] FAULT_INJECTION: forcing a failure. [ 2956.137913][T13127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2956.139084][T13127] CPU: 0 UID: 0 PID: 13127 Comm: syz.1.3018 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2956.140276][T13127] Hardware name: linux,dummy-virt (DT) [ 2956.140725][T13127] Call trace: [ 2956.141045][T13127] show_stack+0x18/0x24 (C) [ 2956.141519][T13127] dump_stack_lvl+0x78/0x90 [ 2956.141956][T13127] dump_stack+0x18/0x24 [ 2956.142369][T13127] should_fail_ex+0x18c/0x1e0 [ 2956.142810][T13127] should_fail+0x14/0x20 [ 2956.143229][T13127] should_fail_usercopy+0x1c/0x28 [ 2956.143716][T13127] move_addr_to_kernel+0x44/0x124 [ 2956.144183][T13127] __copy_msghdr+0xd0/0xf0 [ 2956.144672][T13127] copy_msghdr_from_user+0xcc/0x110 [ 2956.145141][T13127] ___sys_sendmsg+0x8c/0x100 [ 2956.145584][T13127] __sys_sendmsg+0x98/0xf4 [ 2956.146258][T13127] __arm64_sys_sendmsg+0x24/0x30 [ 2956.147322][T13127] invoke_syscall+0x48/0x110 [ 2956.148671][T13127] el0_svc_common.constprop.0+0x40/0xe0 [ 2956.149589][T13127] do_el0_svc+0x1c/0x28 [ 2956.150427][T13127] el0_svc+0x30/0xe0 [ 2956.151261][T13127] el0t_64_sync_handler+0x10c/0x138 [ 2956.152193][T13127] el0t_64_sync+0x1a4/0x1a8 [ 2956.403987][T13129] fuse: Bad value for 'fd' [ 2957.799626][T13137] FAULT_INJECTION: forcing a failure. [ 2957.799626][T13137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2957.801783][T13137] CPU: 0 UID: 0 PID: 13137 Comm: syz.0.3023 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2957.803140][T13137] Hardware name: linux,dummy-virt (DT) [ 2957.803942][T13137] Call trace: [ 2957.804585][T13137] show_stack+0x18/0x24 (C) [ 2957.805860][T13137] dump_stack_lvl+0x78/0x90 [ 2957.806705][T13137] dump_stack+0x18/0x24 [ 2957.807660][T13137] should_fail_ex+0x18c/0x1e0 [ 2957.808817][T13137] should_fail+0x14/0x20 [ 2957.809654][T13137] should_fail_usercopy+0x1c/0x28 [ 2957.810635][T13137] copy_msghdr_from_user+0x48/0x110 [ 2957.811537][T13137] ___sys_sendmsg+0x8c/0x100 [ 2957.812376][T13137] __sys_sendmsg+0x98/0xf4 [ 2957.813231][T13137] __arm64_sys_sendmsg+0x24/0x30 [ 2957.814114][T13137] invoke_syscall+0x48/0x110 [ 2957.815153][T13137] el0_svc_common.constprop.0+0x40/0xe0 [ 2957.816079][T13137] do_el0_svc+0x1c/0x28 [ 2957.816947][T13137] el0_svc+0x30/0xe0 [ 2957.818124][T13137] el0t_64_sync_handler+0x10c/0x138 [ 2957.819096][T13137] el0t_64_sync+0x1a4/0x1a8 [ 2958.649882][ T7303] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2958.799478][ T7303] usb 1-1: device descriptor read/64, error -71 [ 2958.915660][T13145] FAULT_INJECTION: forcing a failure. [ 2958.915660][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2958.916523][T13145] CPU: 0 UID: 0 PID: 13145 Comm: syz.1.3025 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2958.917339][T13145] Hardware name: linux,dummy-virt (DT) [ 2958.918866][T13145] Call trace: [ 2958.919607][T13145] show_stack+0x18/0x24 (C) [ 2958.921858][T13145] dump_stack_lvl+0x78/0x90 [ 2958.923099][T13145] dump_stack+0x18/0x24 [ 2958.924166][T13145] should_fail_ex+0x18c/0x1e0 [ 2958.925440][T13145] should_fail+0x14/0x20 [ 2958.926426][T13145] should_fail_usercopy+0x1c/0x28 [ 2958.927436][T13145] simple_read_from_buffer+0x68/0x118 [ 2958.928526][T13145] proc_fail_nth_read+0xac/0x12c [ 2958.929661][T13145] vfs_read+0xc0/0x318 [ 2958.930582][T13145] ksys_read+0x6c/0x100 [ 2958.931454][T13145] __arm64_sys_read+0x1c/0x28 [ 2958.932685][T13145] invoke_syscall+0x48/0x110 [ 2958.933628][T13145] el0_svc_common.constprop.0+0x40/0xe0 [ 2958.934624][T13145] do_el0_svc+0x1c/0x28 [ 2958.935517][T13145] el0_svc+0x30/0xe0 [ 2958.936770][T13145] el0t_64_sync_handler+0x10c/0x138 [ 2958.938035][T13145] el0t_64_sync+0x1a4/0x1a8 [ 2959.071135][ T7303] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2959.289620][ T7303] usb 1-1: device descriptor read/64, error -71 [ 2959.402522][ T7303] usb usb1-port1: attempt power cycle [ 2959.759585][ T7303] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2959.784190][ T7303] usb 1-1: device descriptor read/8, error -71 [ 2960.019181][ T7303] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2960.043993][ T7303] usb 1-1: device descriptor read/8, error -71 [ 2960.161432][ T7303] usb usb1-port1: unable to enumerate USB device [ 2962.501177][T13152] FAULT_INJECTION: forcing a failure. [ 2962.501177][T13152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2962.504597][T13152] CPU: 1 UID: 0 PID: 13152 Comm: syz.1.3028 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2962.506208][T13152] Hardware name: linux,dummy-virt (DT) [ 2962.507530][T13152] Call trace: [ 2962.508242][T13152] show_stack+0x18/0x24 (C) [ 2962.509251][T13152] dump_stack_lvl+0x78/0x90 [ 2962.510232][T13152] dump_stack+0x18/0x24 [ 2962.511065][T13152] should_fail_ex+0x18c/0x1e0 [ 2962.511978][T13152] should_fail+0x14/0x20 [ 2962.512887][T13152] should_fail_usercopy+0x1c/0x28 [ 2962.513873][T13152] move_addr_to_kernel+0x44/0x124 [ 2962.514784][T13152] __copy_msghdr+0xd0/0xf0 [ 2962.515648][T13152] copy_msghdr_from_user+0xcc/0x110 [ 2962.516514][T13152] ___sys_sendmsg+0x8c/0x100 [ 2962.517415][T13152] __sys_sendmsg+0x98/0xf4 [ 2962.518407][T13152] __arm64_sys_sendmsg+0x24/0x30 [ 2962.519370][T13152] invoke_syscall+0x48/0x110 [ 2962.520602][T13152] el0_svc_common.constprop.0+0x40/0xe0 [ 2962.521555][T13152] do_el0_svc+0x1c/0x28 [ 2962.522353][T13152] el0_svc+0x30/0xe0 [ 2962.523177][T13152] el0t_64_sync_handler+0x10c/0x138 [ 2962.524054][T13152] el0t_64_sync+0x1a4/0x1a8 [ 2965.780797][T13173] fuse: Bad value for 'fd' [ 2966.710687][T13185] fuse: Bad value for 'fd' [ 2970.677170][T13216] serio: Serial port pts0 [ 2972.234117][T13223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2972.241762][T13223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2978.434211][T13253] serio: Serial port pts0 [ 2981.591296][T13268] FAULT_INJECTION: forcing a failure. [ 2981.591296][T13268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2981.591608][T13268] CPU: 0 UID: 0 PID: 13268 Comm: syz.1.3063 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2981.591900][T13268] Hardware name: linux,dummy-virt (DT) [ 2981.592040][T13268] Call trace: [ 2981.592150][T13268] show_stack+0x18/0x24 (C) [ 2981.592463][T13268] dump_stack_lvl+0x78/0x90 [ 2981.592785][T13268] dump_stack+0x18/0x24 [ 2981.593044][T13268] should_fail_ex+0x18c/0x1e0 [ 2981.593308][T13268] should_fail+0x14/0x20 [ 2981.593661][T13268] should_fail_usercopy+0x1c/0x28 [ 2981.593916][T13268] copy_msghdr_from_user+0x48/0x110 [ 2981.594199][T13268] ___sys_sendmsg+0x8c/0x100 [ 2981.594437][T13268] __sys_sendmsg+0x98/0xf4 [ 2981.594688][T13268] __arm64_sys_sendmsg+0x24/0x30 [ 2981.594958][T13268] invoke_syscall+0x48/0x110 [ 2981.595216][T13268] el0_svc_common.constprop.0+0x40/0xe0 [ 2981.595477][T13268] do_el0_svc+0x1c/0x28 [ 2981.595733][T13268] el0_svc+0x30/0xe0 [ 2981.595996][T13268] el0t_64_sync_handler+0x10c/0x138 [ 2981.596235][T13268] el0t_64_sync+0x1a4/0x1a8 [ 2981.896435][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2981.910861][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2983.389788][T13283] FAULT_INJECTION: forcing a failure. [ 2983.389788][T13283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2983.398676][T13283] CPU: 0 UID: 0 PID: 13283 Comm: syz.1.3069 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 2983.401621][T13283] Hardware name: linux,dummy-virt (DT) [ 2983.403282][T13283] Call trace: [ 2983.404532][T13283] show_stack+0x18/0x24 (C) [ 2983.406333][T13283] dump_stack_lvl+0x78/0x90 [ 2983.408191][T13283] dump_stack+0x18/0x24 [ 2983.410184][T13283] should_fail_ex+0x18c/0x1e0 [ 2983.412601][T13283] should_fail+0x14/0x20 [ 2983.414224][T13283] should_fail_usercopy+0x1c/0x28 [ 2983.415896][T13283] copy_msghdr_from_user+0x48/0x110 [ 2983.417777][T13283] ___sys_sendmsg+0x8c/0x100 [ 2983.420596][T13283] __sys_sendmsg+0x98/0xf4 [ 2983.422208][T13283] __arm64_sys_sendmsg+0x24/0x30 [ 2983.423078][T13283] invoke_syscall+0x48/0x110 [ 2983.423939][T13283] el0_svc_common.constprop.0+0x40/0xe0 [ 2983.424956][T13283] do_el0_svc+0x1c/0x28 [ 2983.425810][T13283] el0_svc+0x30/0xe0 [ 2983.426651][T13283] el0t_64_sync_handler+0x10c/0x138 [ 2983.427780][T13283] el0t_64_sync+0x1a4/0x1a8 [ 2985.181978][ T3782] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2985.339169][ T3782] usb 1-1: Using ep0 maxpacket: 8 [ 2985.372121][ T3782] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2985.403037][ T3782] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2985.404372][ T3782] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2985.405801][ T3782] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2985.483579][ T3782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2985.484929][ T3782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2985.485938][ T3782] usb 1-1: Product: syz [ 2985.486770][ T3782] usb 1-1: Manufacturer: syz [ 2985.492553][ T3782] usb 1-1: SerialNumber: syz [ 2985.543426][T13290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2985.955042][ T3782] usb 1-1: USB disconnect, device number 59 [ 2986.713943][T13306] fuse: Bad value for 'rootmode' [ 2987.257318][T13318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2987.260032][T13318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2989.801624][T13336] fuse: Unknown parameter 'use00000000000000000000' [ 2991.312737][T13350] fuse: Unknown parameter 'use00000000000000000000' [ 2994.445244][T13366] input: syz0 as /devices/virtual/input/input89 [ 2997.872812][T13383] serio: Serial port pts0 [ 3003.461229][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3003.463819][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3012.090258][T13453] sctp: [Deprecated]: syz.1.3127 (pid 13453) Use of int in max_burst socket option. [ 3012.090258][T13453] Use struct sctp_assoc_value instead [ 3012.605659][T13449] nft_compat: unsupported protocol 1 [ 3012.807416][T13449] 8021q: VLANs not supported on ipvlan1 [ 3013.730773][T13467] input: syz0 as /devices/virtual/input/input90 [ 3014.629637][T12779] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3014.848894][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 3014.955804][T12779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3015.027081][T12779] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3015.038339][T12779] usb 1-1: can't read configurations, error -61 [ 3015.179457][T12779] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3015.348645][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 3015.453508][T12779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3015.504522][T12779] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3015.506102][T12779] usb 1-1: can't read configurations, error -61 [ 3015.514391][T12779] usb usb1-port1: attempt power cycle [ 3015.868910][T12779] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3015.906846][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 3015.999982][T12779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3016.043917][T12779] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3016.045788][T12779] usb 1-1: can't read configurations, error -61 [ 3016.188928][T12779] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3016.225352][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 3016.318507][T12779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3016.386154][T12779] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 3016.391247][T12779] usb 1-1: can't read configurations, error -61 [ 3016.395794][T12779] usb usb1-port1: unable to enumerate USB device [ 3027.230962][T13485] serio: Serial port pts0 [ 3032.159205][T13498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3032.164052][T13498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.106286][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3034.111128][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.145338][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3034.149050][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.359592][ T6500] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 3034.532780][ T6500] usb 1-1: not running at top speed; connect to a high speed hub [ 3034.568601][ T6500] usb 1-1: config 4 has an invalid interface number: 168 but max is 0 [ 3034.569625][ T6500] usb 1-1: config 4 has no interface number 0 [ 3034.570716][ T6500] usb 1-1: config 4 interface 168 has no altsetting 0 [ 3034.639295][ T6500] usb 1-1: New USB device found, idVendor=0403, idProduct=ed22, bcdDevice=36.e3 [ 3034.640709][ T6500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3034.641484][ T6500] usb 1-1: Product: syz [ 3034.642100][ T6500] usb 1-1: Manufacturer: syz [ 3034.642826][ T6500] usb 1-1: SerialNumber: syz [ 3034.912919][T13515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3034.917400][T13515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3034.960304][T13525] input: syz0 as /devices/virtual/input/input91 [ 3035.044805][ T6500] ftdi_sio 1-1:4.168: FTDI USB Serial Device converter detected [ 3035.053451][ T6500] ftdi_sio ttyUSB0: unknown device type: 0x36e3 [ 3035.129054][ T6500] usb 1-1: USB disconnect, device number 64 [ 3035.136436][ T6500] ftdi_sio 1-1:4.168: device disconnected [ 3037.688920][T13533] FAULT_INJECTION: forcing a failure. [ 3037.688920][T13533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3037.690979][T13533] CPU: 0 UID: 0 PID: 13533 Comm: syz.0.3150 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 3037.692264][T13533] Hardware name: linux,dummy-virt (DT) [ 3037.693043][T13533] Call trace: [ 3037.693797][T13533] show_stack+0x18/0x24 (C) [ 3037.694776][T13533] dump_stack_lvl+0x78/0x90 [ 3037.695602][T13533] dump_stack+0x18/0x24 [ 3037.696421][T13533] should_fail_ex+0x18c/0x1e0 [ 3037.697245][T13533] should_fail+0x14/0x20 [ 3037.698131][T13533] should_fail_usercopy+0x1c/0x28 [ 3037.699198][T13533] move_addr_to_kernel+0x44/0x124 [ 3037.700210][T13533] __copy_msghdr+0xd0/0xf0 [ 3037.701216][T13533] copy_msghdr_from_user+0xcc/0x110 [ 3037.702489][T13533] ___sys_sendmsg+0x8c/0x100 [ 3037.703810][T13533] __sys_sendmsg+0x98/0xf4 [ 3037.704936][T13533] __arm64_sys_sendmsg+0x24/0x30 [ 3037.705695][T13533] invoke_syscall+0x48/0x110 [ 3037.706410][T13533] el0_svc_common.constprop.0+0x40/0xe0 [ 3037.707133][T13533] do_el0_svc+0x1c/0x28 [ 3037.707652][T13533] el0_svc+0x30/0xe0 [ 3037.708210][T13533] el0t_64_sync_handler+0x10c/0x138 [ 3037.708827][T13533] el0t_64_sync+0x1a4/0x1a8 [ 3043.033037][T13547] FAULT_INJECTION: forcing a failure. [ 3043.033037][T13547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3043.034761][T13547] CPU: 0 UID: 0 PID: 13547 Comm: syz.0.3154 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 3043.036293][T13547] Hardware name: linux,dummy-virt (DT) [ 3043.037203][T13547] Call trace: [ 3043.038292][T13547] show_stack+0x18/0x24 (C) [ 3043.040190][T13547] dump_stack_lvl+0x78/0x90 [ 3043.041192][T13547] dump_stack+0x18/0x24 [ 3043.042064][T13547] should_fail_ex+0x18c/0x1e0 [ 3043.042947][T13547] should_fail+0x14/0x20 [ 3043.043805][T13547] should_fail_usercopy+0x1c/0x28 [ 3043.044756][T13547] simple_read_from_buffer+0x68/0x118 [ 3043.045730][T13547] proc_fail_nth_read+0xac/0x12c [ 3043.046659][T13547] vfs_read+0xc0/0x318 [ 3043.047548][T13547] ksys_read+0x6c/0x100 [ 3043.048709][T13547] __arm64_sys_read+0x1c/0x28 [ 3043.049542][T13547] invoke_syscall+0x48/0x110 [ 3043.050428][T13547] el0_svc_common.constprop.0+0x40/0xe0 [ 3043.051537][T13547] do_el0_svc+0x1c/0x28 [ 3043.052495][T13547] el0_svc+0x30/0xe0 [ 3043.053307][T13547] el0t_64_sync_handler+0x10c/0x138 [ 3043.054211][T13547] el0t_64_sync+0x1a4/0x1a8 [ 3046.589414][T13560] x_tables: duplicate underflow at hook 3 [ 3049.330250][T13571] fuse: Unknown parameter 'fd00000000000000000003' [ 3050.989047][ T3782] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3051.179291][ T3782] usb 1-1: device descriptor read/64, error -71 [ 3051.948203][ T3782] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3052.529595][ T3782] usb 1-1: device descriptor read/64, error -71 [ 3052.643833][ T3782] usb usb1-port1: attempt power cycle [ 3053.009700][ T3782] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3053.044780][ T3782] usb 1-1: device descriptor read/8, error -71 [ 3053.290571][ T3782] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3053.333939][ T3782] usb 1-1: device descriptor read/8, error -71 [ 3053.441092][ T3782] usb usb1-port1: unable to enumerate USB device [ 3055.860126][T13587] fuse: Unknown parameter 'fd00000000000000000003' [ 3057.876577][T13598] FAULT_INJECTION: forcing a failure. [ 3057.876577][T13598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3057.891413][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.1.3173 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 3057.892688][T13598] Hardware name: linux,dummy-virt (DT) [ 3057.893434][T13598] Call trace: [ 3057.894026][T13598] show_stack+0x18/0x24 (C) [ 3057.894894][T13598] dump_stack_lvl+0x78/0x90 [ 3057.895728][T13598] dump_stack+0x18/0x24 [ 3057.896512][T13598] should_fail_ex+0x18c/0x1e0 [ 3057.897399][T13598] should_fail+0x14/0x20 [ 3057.898415][T13598] should_fail_usercopy+0x1c/0x28 [ 3057.899319][T13598] simple_read_from_buffer+0x68/0x118 [ 3057.900223][T13598] proc_fail_nth_read+0xac/0x12c [ 3057.901217][T13598] vfs_read+0xc0/0x318 [ 3057.902004][T13598] ksys_read+0x6c/0x100 [ 3057.902791][T13598] __arm64_sys_read+0x1c/0x28 [ 3057.903609][T13598] invoke_syscall+0x48/0x110 [ 3057.904472][T13598] el0_svc_common.constprop.0+0x40/0xe0 [ 3057.905374][T13598] do_el0_svc+0x1c/0x28 [ 3057.906150][T13598] el0_svc+0x30/0xe0 [ 3057.906928][T13598] el0t_64_sync_handler+0x10c/0x138 [ 3057.908003][T13598] el0t_64_sync+0x1a4/0x1a8 [ 3058.101353][T13600] fuse: Unknown parameter 'fd00000000000000000003' [ 3059.115445][T13607] binder: Unknown parameter 'appraise_type' [ 3065.260163][ T7559] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3065.406618][ T7559] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3065.539418][ T7559] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3065.664304][ T7559] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.499860][ T7559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3068.599410][ T7559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3068.663451][ T7559] bond0 (unregistering): Released all slaves [ 3069.252177][ T7559] hsr_slave_0: left promiscuous mode [ 3069.303571][ T7559] hsr_slave_1: left promiscuous mode [ 3069.405092][ T7559] veth1_macvtap: left promiscuous mode [ 3069.412366][ T7559] veth0_macvtap: left promiscuous mode [ 3069.415101][ T7559] veth1_vlan: left promiscuous mode [ 3069.416350][ T7559] veth0_vlan: left promiscuous mode [ 3070.916274][ T7559] lo (unregistering): left allmulticast mode [ 3079.117098][T13631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3079.160279][T13631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3083.664218][T13631] hsr_slave_0: entered promiscuous mode [ 3083.721489][T13631] hsr_slave_1: entered promiscuous mode [ 3087.182650][T13631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3087.243156][T13631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3087.322133][T13631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3087.369603][T13631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3092.911295][T13631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3106.421691][T13631] veth0_vlan: entered promiscuous mode [ 3106.478482][T13631] veth1_vlan: entered promiscuous mode [ 3106.684669][T13631] veth0_macvtap: entered promiscuous mode [ 3106.725701][T13631] veth1_macvtap: entered promiscuous mode [ 3107.010004][T13631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.011434][T13631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.014080][T13631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.015424][T13631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3108.909517][ T29] audit: type=1326 audit(3364.697:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13822 comm="syz.0.3203" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3108.917040][ T29] audit: type=1326 audit(3364.707:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13822 comm="syz.0.3203" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3108.945568][ T29] audit: type=1326 audit(3364.737:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13822 comm="syz.0.3203" exe="/syz-executor" sig=0 arch=c00000b7 syscall=189 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3108.966841][ T29] audit: type=1326 audit(3364.737:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13822 comm="syz.0.3203" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3114.088708][ T7559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3114.214116][ T7559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3114.263469][ T7559] bond0 (unregistering): Released all slaves [ 3114.767055][ T7559] hsr_slave_0: left promiscuous mode [ 3114.842925][ T7559] hsr_slave_1: left promiscuous mode [ 3116.759863][T12779] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3116.909595][T12779] usb 1-1: Using ep0 maxpacket: 32 [ 3117.076554][T12779] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 3117.078061][T12779] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3117.078837][T12779] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3117.079746][T12779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3117.080683][T12779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3117.081606][T12779] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3117.082790][T12779] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3117.083677][T12779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3117.110277][T12779] usb 1-1: config 0 descriptor?? [ 3117.509597][T12779] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3117.764320][T12779] usb 1-1: USB disconnect, device number 69 [ 3117.811491][T12779] usblp0: removed [ 3118.782871][T13864] mmap: syz.0.3208 (13864) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3121.466255][T13827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3122.085326][T13881] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 3122.526477][T13827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3127.081234][T13827] hsr_slave_0: entered promiscuous mode [ 3127.142764][T13827] hsr_slave_1: entered promiscuous mode [ 3127.189704][T13827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3127.190822][T13827] Cannot create hsr debugfs directory [ 3127.255625][T13901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3211'. [ 3132.115713][T13827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3132.255220][T13827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3132.374560][T13827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3132.482120][T13827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3136.233771][T13827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3144.806390][T13985] gretap0: entered promiscuous mode [ 3144.827009][T13985] vlan2: entered promiscuous mode [ 3144.882877][T13985] gretap0: left promiscuous mode [ 3146.388674][T12779] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3146.639139][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 3146.662861][T12779] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3146.664977][T12779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3146.713087][T12779] usb 1-1: config 0 descriptor?? [ 3147.695164][T13827] veth0_vlan: entered promiscuous mode [ 3147.741637][T13827] veth1_vlan: entered promiscuous mode [ 3147.892524][T13827] veth0_macvtap: entered promiscuous mode [ 3147.920815][T13827] veth1_macvtap: entered promiscuous mode [ 3148.193726][T12779] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3148.195185][T12779] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 3148.197357][T12779] asix 1-1:0.0: probe with driver asix failed with error -71 [ 3148.294582][T12779] usb 1-1: USB disconnect, device number 70 [ 3148.482523][T13827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.484235][T13827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.485997][T13827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.519599][T13827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3156.889347][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3228'. [ 3156.907052][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3156.912760][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3169.434340][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'. [ 3178.584945][T14167] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3275'. [ 3178.949893][ T6500] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 3179.212364][ T6500] usb 1-1: config 1 interface 0 has no altsetting 0 [ 3179.264968][ T6500] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3179.266256][ T6500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3179.273242][ T6500] usb 1-1: Product: syz [ 3179.274066][ T6500] usb 1-1: Manufacturer: syz [ 3179.274795][ T6500] usb 1-1: SerialNumber: syz [ 3180.071452][ T6500] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 3180.295591][T11119] usb 1-1: USB disconnect, device number 71 [ 3180.323657][T11119] usblp0: removed [ 3180.576803][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3180.601754][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3180.889924][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3180.892532][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3181.269239][T11119] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3181.458886][T11119] usb 1-1: Using ep0 maxpacket: 16 [ 3181.483579][T11119] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 3181.485119][T11119] usb 1-1: config 0 has no interface number 0 [ 3181.486503][T11119] usb 1-1: config 0 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 3181.491828][T11119] usb 1-1: config 0 interface 13 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 3181.578764][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3181.581513][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3181.584321][T11119] usb 1-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 3181.585529][T11119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3181.586542][T11119] usb 1-1: Product: syz [ 3181.588594][T11119] usb 1-1: Manufacturer: syz [ 3181.589555][T11119] usb 1-1: SerialNumber: syz [ 3181.613094][T11119] usb 1-1: config 0 descriptor?? [ 3181.638682][T14190] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 3181.641927][T14190] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 3181.663625][T14192] loop8: detected capacity change from 0 to 7 [ 3181.663854][T11119] option 1-1:0.13: GSM modem (1-port) converter detected [ 3181.875143][T11119] usb 1-1: USB disconnect, device number 72 [ 3181.913536][T11119] option 1-1:0.13: device disconnected [ 3182.415968][ T29] audit: type=1326 audit(3438.207:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14200 comm="syz.0.3289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3182.449120][ T29] audit: type=1326 audit(3438.237:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14200 comm="syz.0.3289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3182.459386][ T29] audit: type=1326 audit(3438.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14200 comm="syz.0.3289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3182.461710][ T29] audit: type=1326 audit(3438.247:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14200 comm="syz.0.3289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3182.509555][ T29] audit: type=1326 audit(3438.287:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14200 comm="syz.0.3289" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3182.815535][T14206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3182.966075][T14206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3183.096417][T14206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3183.235589][T14206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3183.595653][T14206] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3183.664676][T14206] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3183.741233][T14206] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3183.825717][T14206] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3184.798678][T14229] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3185.629979][T14242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3185.654198][T14242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3186.069235][T11331] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3186.238930][T11331] usb 1-1: Using ep0 maxpacket: 32 [ 3186.294404][T11331] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 3186.295619][T11331] usb 1-1: config 0 has no interface number 0 [ 3186.296850][T11331] usb 1-1: config 0 interface 60 altsetting 9 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3186.311143][T11331] usb 1-1: config 0 interface 60 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 3186.312643][T11331] usb 1-1: config 0 interface 60 has no altsetting 0 [ 3186.369581][T11331] usb 1-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=6d.c9 [ 3186.370808][T11331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.372341][T11331] usb 1-1: Product: syz [ 3186.373208][T11331] usb 1-1: Manufacturer: syz [ 3186.374287][T11331] usb 1-1: SerialNumber: syz [ 3186.400520][T11331] usb 1-1: config 0 descriptor?? [ 3186.681518][T11331] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3186.825407][T11331] snd-usb-audio 1-1:0.60: probe with driver snd-usb-audio failed with error -2 [ 3186.872060][T11331] usb 1-1: USB disconnect, device number 73 [ 3187.167040][T14170] udevd[14170]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.60/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3189.222238][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3189.225550][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3190.138876][ T883] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 3190.336975][ T883] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 3190.341094][ T883] usb 1-1: config 0 has no interface number 0 [ 3190.342282][ T883] usb 1-1: config 0 interface 235 has no altsetting 0 [ 3190.462950][ T883] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 3190.464392][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3190.465523][ T883] usb 1-1: Product: syz [ 3190.466475][ T883] usb 1-1: Manufacturer: syz [ 3190.467253][ T883] usb 1-1: SerialNumber: syz [ 3190.504759][ T883] usb 1-1: config 0 descriptor?? [ 3190.585360][ T883] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 3190.596922][ T883] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 3190.602051][ T883] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 3190.619593][ T883] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 3190.621263][ T883] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 3190.622986][ T883] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 2 [ 3190.625340][ T883] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 3190.639369][ T883] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 3190.785873][T11119] usb 1-1: USB disconnect, device number 74 [ 3190.874903][T11119] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 3190.902841][T11119] keyspan 1-1:0.235: device disconnected [ 3191.509834][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 3191.513705][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 3191.859484][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 3191.861022][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 3191.882993][T14307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3191.885799][T14307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3192.270655][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 3192.272847][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'. [ 3195.192889][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3195.196170][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3195.813309][T14364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3356'. [ 3197.185430][T14388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3366'. [ 3199.045959][T14408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3199.053301][T14408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3200.088292][T14415] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 3201.835639][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3201.851834][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3203.325855][ T29] audit: type=1326 audit(3459.117:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14427 comm="syz.1.3381" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x0 [ 3208.264690][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3402'. [ 3211.129284][ T29] audit: type=1326 audit(3466.917:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14475 comm="syz.0.3403" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7fc00000 [ 3214.277397][T14485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3214.290149][T14485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3214.735246][T14488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3214.754266][T14488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3214.974756][T14490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3407'. [ 3216.629065][T14503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3412'. [ 3219.191632][T14516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3417'. [ 3220.539847][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3424'. [ 3220.868867][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3428'. [ 3222.036797][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3432'. [ 3223.302583][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3437'. [ 3224.094137][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3442'. [ 3224.302386][T14578] TCP: TCP_TX_DELAY enabled [ 3230.469008][T14646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3230.480127][T14646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3233.915818][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3485'. [ 3236.140287][T14692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3236.144899][T14692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3236.848960][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3237.374262][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3237.377105][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3238.283237][T14732] pim6reg1: entered promiscuous mode [ 3238.284297][T14732] pim6reg1: entered allmulticast mode [ 3238.612559][T14736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3511'. [ 3238.926682][T14742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3513'. [ 3240.939449][T14769] xt_hashlimit: max too large, truncated to 1048576 [ 3240.946461][T14769] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3241.600063][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'. [ 3241.644728][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3530'. [ 3241.892310][ T29] audit: type=1326 audit(3497.687:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.0.3531" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3241.900458][ T29] audit: type=1326 audit(3497.687:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.0.3531" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3241.906815][ T29] audit: type=1326 audit(3497.697:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.0.3531" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3241.919085][ T29] audit: type=1326 audit(3497.697:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.0.3531" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3241.919471][ T29] audit: type=1326 audit(3497.707:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.0.3531" exe="/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3241.919808][ T29] audit: type=1326 audit(3497.707:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14780 comm="syz.0.3531" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3243.741273][ T29] audit: type=1326 audit(3499.537:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14794 comm="syz.1.3537" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3243.744421][ T29] audit: type=1326 audit(3499.537:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14794 comm="syz.1.3537" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3243.752840][ T29] audit: type=1326 audit(3499.537:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14794 comm="syz.1.3537" exe="/syz-executor" sig=0 arch=c00000b7 syscall=24 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3243.754804][ T29] audit: type=1326 audit(3499.547:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14794 comm="syz.1.3537" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3244.319942][T14802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3244.322774][T14802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3245.156121][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 3246.383093][T14818] process 'syz.1.3546' launched './file0' with NULL argv: empty string added [ 3254.570408][T14855] serio: Serial port ptm0 [ 3255.035613][T14861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3562'. [ 3255.540113][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 3255.540383][ T29] audit: type=1326 audit(3511.337:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.0.3565" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3255.546543][ T29] audit: type=1326 audit(3511.337:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.0.3565" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3255.558271][ T29] audit: type=1326 audit(3511.347:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.0.3565" exe="/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3255.560875][ T29] audit: type=1326 audit(3511.347:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.0.3565" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3255.562967][ T29] audit: type=1326 audit(3511.357:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.0.3565" exe="/syz-executor" sig=0 arch=c00000b7 syscall=24 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3255.565050][ T29] audit: type=1326 audit(3511.357:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14866 comm="syz.0.3565" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3255.802980][T14871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3567'. [ 3256.419642][ T29] audit: type=1326 audit(3512.147:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.0.3571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3256.422242][ T29] audit: type=1326 audit(3512.147:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.0.3571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=61 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3256.424236][ T29] audit: type=1326 audit(3512.147:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14878 comm="syz.0.3571" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3259.010163][T14900] netlink: 'syz.0.3579': attribute type 10 has an invalid length. [ 3259.011368][T14900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3579'. [ 3260.462544][ T29] audit: type=1326 audit(3516.257:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14924 comm="syz.1.3591" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3260.651728][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3592'. [ 3261.273161][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 3261.273513][ T29] audit: type=1326 audit(3517.067:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.276988][ T29] audit: type=1326 audit(3517.067:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.296436][ T29] audit: type=1326 audit(3517.087:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.301648][ T29] audit: type=1326 audit(3517.087:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.306325][ T29] audit: type=1326 audit(3517.097:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.314713][ T29] audit: type=1326 audit(3517.107:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.322333][ T29] audit: type=1326 audit(3517.107:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.324898][ T29] audit: type=1326 audit(3517.107:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.327124][ T29] audit: type=1326 audit(3517.107:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3261.333992][ T29] audit: type=1326 audit(3517.117:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14941 comm="syz.0.3598" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3262.210781][T14959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3605'. [ 3262.917356][T14972] x_tables: duplicate underflow at hook 2 [ 3264.956818][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 3264.961372][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 3264.963402][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3264.964734][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3264.966150][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3264.967216][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3264.985580][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3264.987063][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.000644][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.001973][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.002959][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.004133][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.018602][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.020065][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.021136][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.022154][ T883] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 3265.048724][ T883] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 3270.786774][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 3270.786985][ T29] audit: type=1326 audit(3526.577:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.807339][ T29] audit: type=1326 audit(3526.597:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.829100][ T29] audit: type=1326 audit(3526.607:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.831267][ T29] audit: type=1326 audit(3526.627:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.833702][ T29] audit: type=1326 audit(3526.627:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.849061][ T29] audit: type=1326 audit(3526.627:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.852037][ T29] audit: type=1326 audit(3526.637:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.854694][ T29] audit: type=1326 audit(3526.647:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.869335][ T29] audit: type=1326 audit(3526.657:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3270.871627][ T29] audit: type=1326 audit(3526.657:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15021 comm="syz.0.3634" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3271.158712][T15027] rdma_op 00000000d20fe591 conn xmit_rdma 0000000000000000 [ 3277.307068][T15094] bond1: entered promiscuous mode [ 3277.310791][T15094] bond1: entered allmulticast mode [ 3277.315227][T15094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3277.371463][T15094] bond1 (unregistering): Released all slaves [ 3277.669570][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 3277.669759][ T29] audit: type=1326 audit(3533.457:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15098 comm="syz.0.3667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3277.673256][ T29] audit: type=1326 audit(3533.467:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15098 comm="syz.0.3667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3277.676378][ T29] audit: type=1326 audit(3533.467:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15098 comm="syz.0.3667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=152 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3277.723052][ T29] audit: type=1326 audit(3533.467:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15098 comm="syz.0.3667" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3277.842165][T15103] netlink: 'syz.0.3669': attribute type 29 has an invalid length. [ 3277.850197][T15103] netlink: 'syz.0.3669': attribute type 29 has an invalid length. [ 3277.862945][T15103] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3669'. [ 3278.383344][T15112] IPv6: NLM_F_CREATE should be specified when creating new route [ 3280.750346][T15140] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3684'. [ 3281.947060][T15151] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3689'. [ 3283.177454][T15163] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3694'. [ 3289.937000][T15178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3699'. [ 3291.047448][T15184] bond1: entered promiscuous mode [ 3291.059664][T15184] bond1: entered allmulticast mode [ 3291.064915][T15184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3291.135176][T15184] bond1 (unregistering): Released all slaves [ 3291.908718][T15189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3704'. [ 3294.611391][T15214] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 3294.656993][T15214] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 3296.763215][T15236] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3725'. [ 3296.765415][T15236] 0X: renamed from veth0 (while UP) [ 3296.801604][T15236] 0X: entered allmulticast mode [ 3296.813926][T15236] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 3299.408750][T15265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3739'. [ 3299.410147][T15265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3739'. [ 3300.391715][ T29] audit: type=1326 audit(3556.187:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15276 comm="syz.0.3745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3300.398899][ T29] audit: type=1326 audit(3556.187:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15276 comm="syz.0.3745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3300.400994][ T29] audit: type=1326 audit(3556.187:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15276 comm="syz.0.3745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3303.991956][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'. [ 3306.513589][T15333] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3766'. [ 3307.582585][ T29] audit: type=1326 audit(3563.377:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15347 comm="syz.0.3773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3307.609780][ T29] audit: type=1326 audit(3563.377:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15347 comm="syz.0.3773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=140 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3307.612005][ T29] audit: type=1326 audit(3563.387:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15347 comm="syz.0.3773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3307.614424][ T29] audit: type=1326 audit(3563.387:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15347 comm="syz.0.3773" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8974ce68 code=0x7ffc0000 [ 3307.821681][ T29] audit: type=1326 audit(3563.617:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15350 comm="syz.1.3774" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3307.826500][ T29] audit: type=1326 audit(3563.617:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15350 comm="syz.1.3774" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3307.856898][ T29] audit: type=1326 audit(3563.627:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15350 comm="syz.1.3774" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3307.870290][ T29] audit: type=1326 audit(3563.627:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15350 comm="syz.1.3774" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3307.876985][ T29] audit: type=1326 audit(3563.657:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15350 comm="syz.1.3774" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3307.889402][ T29] audit: type=1326 audit(3563.667:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15350 comm="syz.1.3774" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8134ce68 code=0x7ffc0000 [ 3308.096229][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'. [ 3308.099139][T15358] bridge_slave_0: entered promiscuous mode [ 3310.756803][T15407] netlink: 18 bytes leftover after parsing attributes in process `syz.0.3797'. [ 3313.485650][T15421] Unable to handle kernel paging request at virtual address ffffffffc0000000 [ 3313.486930][T15421] Mem abort info: [ 3313.493001][T15421] ESR = 0x0000000096000006 [ 3313.493689][T15421] EC = 0x25: DABT (current EL), IL = 32 bits [ 3313.494475][T15421] SET = 0, FnV = 0 [ 3313.494965][T15421] EA = 0, S1PTW = 0 [ 3313.495461][T15421] FSC = 0x06: level 2 translation fault [ 3313.496233][T15421] Data abort info: [ 3313.496769][T15421] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 3313.500823][T15421] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 3313.501500][T15421] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 3313.502706][T15421] swapper pgtable: 4k pages, 52-bit VAs, pgdp=00000000427ec000 [ 3313.503792][T15421] [ffffffffc0000000] pgd=1000000042cdc003, p4d=0000000042be8403, pud=0000000042be9403, pmd=0000000000000000 [ 3313.505626][T15421] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 3313.506880][T15421] Modules linked in: [ 3313.507843][T15421] CPU: 1 UID: 0 PID: 15421 Comm: syz.0.3803 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 3313.509054][T15421] Hardware name: linux,dummy-virt (DT) [ 3313.510190][T15421] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3313.511728][T15421] pc : trans_pgd_create_copy+0x21c/0x82c [ 3313.512958][T15421] lr : trans_pgd_create_copy+0x34/0x82c [ 3313.513754][T15421] sp : ffff800089913c30 [ 3313.514204][T15421] x29: ffff800089913c30 x28: fff0008000000000 x27: ffff8000825ec000 [ 3313.515164][T15421] x26: fff000007fdff000 x25: fff1000000000000 x24: 0000000000000001 [ 3313.516068][T15421] x23: ffff800000000000 x22: fff0000000000000 x21: ffff800089913d68 [ 3313.516847][T15421] x20: f4f0000021b08000 x19: ffff800000000000 x18: 0000000000000000 [ 3313.517824][T15421] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 3313.518870][T15421] x14: 0000000000000000 x13: 0000000000000002 x12: 0000000000068875 [ 3313.519735][T15421] x11: 0000000000000000 x10: 8a5f4a718ea7bb38 x9 : 00000000000000f4 [ 3313.520513][T15421] x8 : f4f0000021b09000 x7 : 0000000000000000 x6 : 0000000061b08fff [ 3313.521302][T15421] x5 : 0000000061b08000 x4 : ffffc1ffc086c248 x3 : fff000007fdff000 [ 3313.522035][T15421] x2 : ffffffffc0000000 x1 : fff0ffffffffffff x0 : 18000000bfdfe403 [ 3313.522829][T15421] Call trace: [ 3313.523198][T15421] trans_pgd_create_copy+0x21c/0x82c (P) [ 3313.523742][T15421] trans_pgd_create_copy+0x34/0x82c (L) [ 3313.524244][T15421] machine_kexec_post_load+0x158/0x2c0 [ 3313.524865][T15421] do_kexec_load+0x28c/0x2e4 [ 3313.525404][T15421] __arm64_sys_kexec_load+0x9c/0xe8 [ 3313.525996][T15421] invoke_syscall+0x48/0x110 [ 3313.526462][T15421] el0_svc_common.constprop.0+0x40/0xe0 [ 3313.527241][T15421] do_el0_svc+0x1c/0x28 [ 3313.527866][T15421] el0_svc+0x30/0xe0 [ 3313.528377][T15421] el0t_64_sync_handler+0x10c/0x138 [ 3313.528962][T15421] el0t_64_sync+0x1a4/0x1a8 [ 3313.529825][T15421] Code: f900027c a94573fb 1400017a b40007c0 (f9400040) [ 3313.530797][T15421] ---[ end trace 0000000000000000 ]--- [ 3313.531678][T15421] Kernel panic - not syncing: Oops: Fatal exception [ 3313.532514][T15421] SMP: stopping secondary CPUs [ 3313.533812][T15421] Kernel Offset: disabled [ 3313.534277][T15421] CPU features: 0x000,000000d0,60bef2f8,2b7ffebf [ 3313.535056][T15421] Memory Limit: none [ 3313.535776][T15421] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:46:10 Registers: info registers vcpu 0 CPU#0 PC=ffff80008083d0a4 X00=0000000000000003 X01=f0f0000005e082c0 X02=0000000000006010 X03=0000000000000029 X04=f0f0000005da75e0 X05=0000000000000600 X06=00000000fffffffe X07=000000008696da10 X08=f0f0000005e082f0 X09=fcf000004062a862 X10=ffffc1ffc11a51c0 X11=ffffc1ffc11a51c0 X12=0000000000000001 X13=0000000000000000 X14=0000000000000370 X15=0000000000000001 X16=ffff800080000000 X17=fff07ffffd174000 X18=ffffffffffffffff X19=f0f0000005da7000 X20=fcf0000003fb0000 X21=f7f0000004087300 X22=0000000000000001 X23=0000000000000600 X24=ffffc1ffc0000000 X25=00003e0040000000 X26=0000000000000600 X27=0000000000000000 X28=f0f0000005e082c0 X29=ffff800080003c90 X30=ffff800080c647cc SP=ffff800080003bf0 PSTATE=00402009 ---- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff03b4850:0000fffff03b4850 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffff03b4820 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081a7f174 X00=ffff800081a7f170 X01=fbf0000004961240 X02=fff07ffffd18c000 X03=0000000000000001 X04=0000000000000021 X05=0000000000000000 X06=000000000016e360 X07=fff000007f8ed780 X08=fff000007f8ed800 X09=0000000000000bc0 X10=000000000016e360 X11=0000000000000001 X12=0000000000000000 X13=ffff8000827ae740 X14=f9f0000003fc8080 X15=ffff800089913410 X16=0000000000000000 X17=0000000000000000 X18=ffffffffffffffff X19=0000000000000000 X20=ffff800082890d48 X21=ffff800082890d40 X22=fff07ffffd18c000 X23=0000000000000004 X24=ffff800082890d48 X25=0000000000000028 X26=ffff8000827a7000 X27=fbf0000004961240 X28=fbf0000004961240 X29=ffff8000899136c0 X30=ffff80008017003c SP=ffff8000899136c0 PSTATE=204020c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffda2f40a0:0000ffffda2f40a0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffda2f4070 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000