last executing test programs: 29.743975607s ago: executing program 1 (id=619): r0 = io_uring_setup(0x4ed6, &(0x7f0000000080)={0x0, 0x5523, 0x8, 0x3, 0x2df}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) (async) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x20000000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = getuid() (rerun: 64) ioctl$TUNSETOWNER(r1, 0x400454cc, r7) 24.59652868s ago: executing program 1 (id=622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1, &(0x7f0000000380)=""/203, 0xcb}, 0x101}], 0x1, 0x2100, &(0x7f0000000240)={0x77359400}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x5, 0x6, @vifc_lcl_ifindex, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00010000000000000000000a800000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000020000000000000000fdcd98834adb95896efa1b00"], 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r2, 0x0, 0xc9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000c40)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582", 0x72}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088", 0x18}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac9180", 0x3b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000780)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000ac0)="c4276463274cfc00b7e31e39077773e9d4b5c7a9809ab6d24c56aa11ca25ec2c3a98d1d5b554e9ffe3e759ebbee3f69f89b797169f33802dacbf554e874188d8f05e6407b267c40a82d3208b6bbe4caecf3ea8098a71ed1a737dd023472f857e7d91fb4f774f08b3884e22003a6386", 0x6f}, {0x0}], 0x6, &(0x7f0000000d40)}}], 0x2, 0x10) 22.690832317s ago: executing program 1 (id=623): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfffffffc]}}], 0x40000018) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0038a8039d002d6c90db63f2228687e4c1db52bbae3b3b73df954ef01a700d70118fedd60809adf3c8b715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x8, 0xc00, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x4060050}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x40}}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0xc0105500, &(0x7f00000000c0)={0x880, 0x0}) r6 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000003c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x40, 0x29, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x8}, {0xffe0, 0x6}, {0xc, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x36, 0x20}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x40) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x40, 0xf, 0xa8, {0xa8, 0x7, "f044f9c6c38c3a358cfaedbfa84a301c86506a67ef128e6401d500503c97e7ca2af3c06ff01fdd7a803794bf0163e60dcbc0c52524d4394b3beb9f504862f8ced785f85f46d712551e76b8f459be314f2552ba5af35a5a3795bd1f4d41baf7ff28379312f47ce0a8596b4c428d4af43c4c1d57f8e039be58ac7570612dec984ec8497be6fd266a1d9a95eb1c8a6531e25bac52b54814398c93f6617787ad2c4115850f4cb208"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x8b29b5239e271618, 0x31, 0xf9, "37a8f60f7b475296abc96325f588e848f8aeb793c9cc925b193341a645220de5b19a4ade00fb7714d59de45eba75fbe6f5627ccc453e9ec53fd1a093e349e9fc13188a1a9828c71cb7a70ba9fbac00db0bb4915518f5a4cc486b7201be891067d61e1441b7230d86f4de6ca8ced15c9b484439d3815068ef05c1b44a93eab2e363230365564931e4f57197f918a13dccf205f36e353c3735deeeba6cab71eda00f2fbe69993c5795e77186ef94d16db37fd4afc8bcb988b962fae190cc7e46e7b06782c3120b84e345ecffa9f14451541da726c909415da0bbd49da7148fd0279d531db10311296f07ed2f247b5aee443505e981ce11857ce8"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xff01, 0x2, 0x4, 0x81, 0x0, 0x9, 0xb2, 0xecd, 0x5, 0x0, 0x3, 0xfffb}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 14.195898429s ago: executing program 0 (id=625): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) 12.694492924s ago: executing program 0 (id=626): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, 0x0}]) dup3(r2, r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x5, 0xf2, 0x3, 0x10000, 0xd}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002d00000018000180140002"], 0x2c}}, 0x8000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8910, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000000500020002000000180001801400020073797a5f74756e000000000000000000050003"], 0x3c}}, 0x0) r10 = gettid() tkill(r10, 0x7) syz_open_procfs(r10, &(0x7f0000000000)='net/ip6_flowlabel\x00') 11.706202613s ago: executing program 1 (id=627): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) 8.284405004s ago: executing program 0 (id=628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x3000000, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xc, 0x3, "c27346e3580c3f0b"}, @NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 6.228699125s ago: executing program 0 (id=629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000002c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) mq_getsetattr(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x20001000, 0x1}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in=@loopback}, {@in=@remote}, @in=@local}}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) 3.698102151s ago: executing program 0 (id=630): r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x3f00000000000000, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 1.769123228s ago: executing program 0 (id=631): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfffffffc]}}], 0x40000018) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="0038a8039d002d6c90db63f2228687e4c1db52bbae3b3b73df954ef01a700d70118fedd60809adf3c8b715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x8, 0xc00, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x28}, 0x1, 0x0, 0x0, 0x4060050}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}]}, 0x40}}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r0, 0xc0105500, &(0x7f00000000c0)={0x880, 0x0}) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x40, 0x29, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x8}, {0xffe0, 0x6}, {0xc, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x36, 0x20}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x40) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x40, 0xf, 0xa8, {0xa8, 0x7, "f044f9c6c38c3a358cfaedbfa84a301c86506a67ef128e6401d500503c97e7ca2af3c06ff01fdd7a803794bf0163e60dcbc0c52524d4394b3beb9f504862f8ced785f85f46d712551e76b8f459be314f2552ba5af35a5a3795bd1f4d41baf7ff28379312f47ce0a8596b4c428d4af43c4c1d57f8e039be58ac7570612dec984ec8497be6fd266a1d9a95eb1c8a6531e25bac52b54814398c93f6617787ad2c4115850f4cb208"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x8b29b5239e271618, 0x31, 0xf9, "37a8f60f7b475296abc96325f588e848f8aeb793c9cc925b193341a645220de5b19a4ade00fb7714d59de45eba75fbe6f5627ccc453e9ec53fd1a093e349e9fc13188a1a9828c71cb7a70ba9fbac00db0bb4915518f5a4cc486b7201be891067d61e1441b7230d86f4de6ca8ced15c9b484439d3815068ef05c1b44a93eab2e363230365564931e4f57197f918a13dccf205f36e353c3735deeeba6cab71eda00f2fbe69993c5795e77186ef94d16db37fd4afc8bcb988b962fae190cc7e46e7b06782c3120b84e345ecffa9f14451541da726c909415da0bbd49da7148fd0279d531db10311296f07ed2f247b5aee443505e981ce11857ce8"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0xff01, 0x2, 0x4, 0x81, 0x0, 0x9, 0xb2, 0xecd, 0x5, 0x0, 0x3, 0xfffb}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}}) 1.417531488s ago: executing program 1 (id=632): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001400028006000e0004"], 0x4c}}, 0x40010) 0s ago: executing program 1 (id=633): r0 = io_uring_setup(0x4778, &(0x7f0000000140)={0x0, 0x5ff9, 0x2, 0x5, 0xce}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x2, &(0x7f0000000300), 0x0, 0x20000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x88f, @private0, 0x8}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xb}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xa, @remote, 0x7fff}], 0x84) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback={0x1000000}}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22802' (ED25519) to the list of known hosts. syzkaller login: [ 323.231790][ T3157] cgroup: Unknown subsys name 'net' [ 323.675865][ T3157] cgroup: Unknown subsys name 'cpuset' [ 323.765064][ T3157] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 371.522316][ T3157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 425.452354][ T3162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.551269][ T3162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.503599][ T3165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.664765][ T3165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.382326][ T3162] hsr_slave_0: entered promiscuous mode [ 435.437011][ T3162] hsr_slave_1: entered promiscuous mode [ 438.556696][ T3165] hsr_slave_0: entered promiscuous mode [ 438.600953][ T3165] hsr_slave_1: entered promiscuous mode [ 438.631461][ T3165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.634883][ T3165] Cannot create hsr debugfs directory [ 443.226103][ T3162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.333301][ T3162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.452157][ T3162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.505127][ T3162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.154986][ T3165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.253265][ T3165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.396332][ T3165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.457604][ T3165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.175093][ T3162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.203087][ T3165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.315667][ T3165] veth0_vlan: entered promiscuous mode [ 480.993698][ T3162] veth0_vlan: entered promiscuous mode [ 481.056983][ T3165] veth1_vlan: entered promiscuous mode [ 481.533590][ T3162] veth1_vlan: entered promiscuous mode [ 482.545089][ T3165] veth0_macvtap: entered promiscuous mode [ 482.829890][ T3165] veth1_macvtap: entered promiscuous mode [ 483.464803][ T3162] veth0_macvtap: entered promiscuous mode [ 483.841170][ T3162] veth1_macvtap: entered promiscuous mode [ 484.527013][ T3165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.532417][ T3165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.534009][ T3165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.535410][ T3165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.047290][ T3162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.055099][ T3162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.057358][ T3162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.079647][ T3162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.546958][ T3165] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 488.546974][ T3162] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 499.434391][ T34] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 499.820944][ T34] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.823851][ T34] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.037034][ T34] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.053618][ T34] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.065242][ T34] usb 2-1: SerialNumber: syz [ 502.837364][ T34] usb 2-1: 0:2 : does not exist [ 503.422179][ T34] usb 2-1: USB disconnect, device number 2 [ 505.727402][ T3891] xt_ecn: cannot match TCP bits for non-tcp packets [ 505.743484][ T3891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 511.452788][ T3849] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 511.629514][ T3849] usb 1-1: Using ep0 maxpacket: 32 [ 511.668093][ T3849] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 511.743528][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.104763][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.136444][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.252637][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.336569][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.533157][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.587149][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.652536][ T3849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.824718][ T3849] usb 1-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd [ 512.826290][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.827473][ T3849] usb 1-1: Product: syz [ 512.834029][ T3849] usb 1-1: Manufacturer: syz [ 512.835060][ T3849] usb 1-1: SerialNumber: syz [ 512.917884][ T3849] usb 1-1: config 0 descriptor?? [ 513.045043][ T3849] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 513.075807][ T3849] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 513.080444][ T3849] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 513.086719][ T3849] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 514.897390][ T3866] usb 1-1: USB disconnect, device number 2 [ 523.635471][ T3932] FAULT_INJECTION: forcing a failure. [ 523.635471][ T3932] name failslab, interval 1, probability 0, space 0, times 1 [ 523.646185][ T3932] CPU: 0 UID: 0 PID: 3932 Comm: syz.0.14 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 523.648061][ T3932] Hardware name: riscv-virtio,qemu (DT) [ 523.649067][ T3932] Call Trace: [ 523.649961][ T3932] [] dump_backtrace+0x2e/0x3c [ 523.652191][ T3932] [] show_stack+0x30/0x3c [ 523.653126][ T3932] [] dump_stack_lvl+0x12e/0x1a6 [ 523.654274][ T3932] [] dump_stack+0x1c/0x24 [ 523.655525][ T3932] [] should_fail_ex+0x3f8/0x4e0 [ 523.656653][ T3932] [] should_failslab+0xba/0x102 [ 523.657817][ T3932] [] __kmalloc_node_noprof+0xd0/0x5e8 [ 523.658839][ T3932] [] alloc_slab_obj_exts+0x40/0x96 [ 523.659859][ T3932] [] __memcg_slab_post_alloc_hook+0x346/0xa84 [ 523.660942][ T3932] [] kmem_cache_alloc_noprof+0x2e2/0x3da [ 523.661935][ T3932] [] vm_area_alloc+0xe2/0x1c8 [ 523.662768][ T3932] [] alloc_bprm+0x3c0/0xb82 [ 523.663730][ T3932] [] do_execveat_common.isra.0+0x1d6/0x5a0 [ 523.664783][ T3932] [] __riscv_sys_execveat+0xc2/0xf2 [ 523.666227][ T3932] [] syscall_handler+0x94/0x118 [ 523.667911][ T3932] [] do_trap_ecall_u+0x1aa/0x216 [ 523.669879][ T3932] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 523.701287][ T3932] process 'syz.0.14' launched '/dev/fd/3' with NULL argv: empty string added [ 528.593875][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 530.731126][ T3792] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 531.295053][ T3792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.310883][ T3792] usb 2-1: not running at top speed; connect to a high speed hub [ 531.385054][ T3792] usb 2-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 531.386700][ T3792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.394423][ T3792] usb 2-1: config 1 interface 0 has no altsetting 0 [ 531.743747][ T3792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.746465][ T3792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.750407][ T3792] usb 2-1: Product: syz [ 531.752103][ T3792] usb 2-1: Manufacturer: syz [ 531.753841][ T3792] usb 2-1: SerialNumber: syz [ 532.860908][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.935358][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.692614][ T3792] usb 2-1: USB disconnect, device number 3 [ 552.674557][ T3981] FAULT_INJECTION: forcing a failure. [ 552.674557][ T3981] name failslab, interval 1, probability 0, space 0, times 0 [ 552.678084][ T3981] CPU: 1 UID: 0 PID: 3981 Comm: syz.1.26 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 552.679348][ T3981] Hardware name: riscv-virtio,qemu (DT) [ 552.680092][ T3981] Call Trace: [ 552.680727][ T3981] [] dump_backtrace+0x2e/0x3c [ 552.681360][ T3981] [] show_stack+0x30/0x3c [ 552.681691][ T3981] [] dump_stack_lvl+0x12e/0x1a6 [ 552.684109][ T3981] [] dump_stack+0x1c/0x24 [ 552.685133][ T3981] [] should_fail_ex+0x3f8/0x4e0 [ 552.686105][ T3981] [] should_failslab+0xba/0x102 [ 552.687057][ T3981] [] kmem_cache_alloc_noprof+0x27c/0x3da [ 552.687921][ T3981] [] pagetable_pmd_ctor+0x62/0x29e [ 552.688993][ T3981] [] __pte_alloc+0xa6/0x406 [ 552.689914][ T3981] [] __handle_mm_fault+0x346a/0x4292 [ 552.690856][ T3981] [] handle_mm_fault+0x48c/0x886 [ 552.691794][ T3981] [] handle_page_fault+0x434/0x1584 [ 552.692737][ T3981] [] do_page_fault+0x20/0x56 [ 552.693707][ T3981] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 552.695084][ T3981] [] _copy_from_user+0xf4/0x2ae [ 554.243356][ T3980] Zero length message leads to an empty skb [ 554.637147][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 554.881639][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 555.563419][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 555.565293][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 555.566713][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 555.619370][ T8] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 555.620764][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.621874][ T8] usb 1-1: Product: syz [ 555.623264][ T8] usb 1-1: Manufacturer: syz [ 555.624161][ T8] usb 1-1: SerialNumber: syz [ 555.716271][ T8] usb 1-1: config 0 descriptor?? [ 555.761517][ T8] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 555.766936][ T8] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 563.932330][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 563.934088][ T3998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.29'. [ 566.783017][ T3792] usb 1-1: USB disconnect, device number 3 [ 570.255499][ T4013] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 575.613005][ T4030] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 576.392643][ T4030] binder_alloc: 4029: pid 4029 spamming oneway? 1 buffers allocated for a total size of 4096 [ 576.801804][ T3792] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 577.156686][ T3792] usb 2-1: config index 0 descriptor too short (expected 1343, got 63) [ 577.160200][ T3792] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 577.162209][ T3792] usb 2-1: config 0 has no interface number 0 [ 577.164300][ T3792] usb 2-1: config 0 interface 180 altsetting 0 endpoint 0xB has invalid maxpacket 2047, setting to 64 [ 577.166896][ T3792] usb 2-1: config 0 interface 180 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 577.172684][ T3792] usb 2-1: config 0 interface 180 altsetting 0 endpoint 0x3 has invalid maxpacket 56508, setting to 64 [ 577.175344][ T3792] usb 2-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=b7.c1 [ 577.177361][ T3792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.315699][ T3792] usb 2-1: config 0 descriptor?? [ 578.232711][ T3792] usb 2-1: string descriptor 0 read error: -71 [ 578.387034][ T3792] sierra 2-1:0.180: Sierra USB modem converter detected [ 578.532765][ T3792] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 578.614365][ T3792] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 578.763896][ T3792] usb 2-1: USB disconnect, device number 4 [ 579.070850][ T3792] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 579.329368][ T3792] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 579.407233][ T3792] sierra 2-1:0.180: device disconnected [ 588.559049][ T33] audit: type=1326 audit(587.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4064 comm="syz.0.37" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 590.385418][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'. [ 590.614464][ T4067] netlink: 200 bytes leftover after parsing attributes in process `syz.0.37'. [ 597.357637][ C1] vxcan1: j1939_tp_rxtimer: 0xff60000019060c00: rx timeout, send abort [ 597.383020][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xff60000019060c00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 599.096832][ T4089] bridge_slave_1: entered promiscuous mode [ 602.454339][ T4088] bridge_slave_1: left promiscuous mode [ 603.582544][ T25] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 603.953534][ T25] usb 1-1: device descriptor read/64, error -71 [ 604.296170][ T25] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 604.571977][ T25] usb 1-1: device descriptor read/64, error -71 [ 604.690842][ T25] usb usb1-port1: attempt power cycle [ 605.162895][ T25] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 605.202088][ T25] usb 1-1: device descriptor read/8, error -71 [ 605.602799][ T25] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 605.663009][ T25] usb 1-1: device descriptor read/8, error -71 [ 605.787521][ T25] usb usb1-port1: unable to enumerate USB device [ 610.893341][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 610.901274][ T4112] netlink: 2 bytes leftover after parsing attributes in process `syz.1.46'. [ 618.926460][ T33] audit: type=1326 audit(618.290:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4119 comm="syz.0.48" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 631.423187][ T4149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.54'. [ 634.133955][ T4153] blk-mq: reduced tag depth (128 -> 64) [ 634.241252][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 634.481417][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 634.600445][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 634.603588][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 634.607271][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 634.802992][ T8] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 634.804846][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.806494][ T8] usb 2-1: Product: syz [ 634.807579][ T8] usb 2-1: Manufacturer: syz [ 634.819591][ T8] usb 2-1: SerialNumber: syz [ 634.892686][ T8] usb 2-1: config 0 descriptor?? [ 635.226632][ T8] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 635.710570][ T8] usb 2-1: USB disconnect, device number 5 [ 646.977597][ T4184] CUSE: unknown device info "" [ 646.992634][ T4184] CUSE: unknown device info "appraise_type" [ 646.994437][ T4184] CUSE: DEVNAME unspecified [ 650.495777][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 650.967044][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.972687][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 650.975409][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.075797][ T9] usb 1-1: config 0 descriptor?? [ 652.203459][ T9] logitech 0003:046D:C626.0001: hidraw0: USB HID v10.00 Device [HID 046d:c626] on usb-dummy_hcd.0-1/input0 [ 652.690972][ T34] usb 1-1: USB disconnect, device number 8 [ 661.920701][ T3866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 662.101191][ T3866] usb 1-1: Using ep0 maxpacket: 32 [ 662.154773][ T3866] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 662.156248][ T3866] usb 1-1: config 0 has no interface number 0 [ 662.224514][ T3866] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 662.226039][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.227311][ T3866] usb 1-1: Product: syz [ 662.230387][ T3866] usb 1-1: Manufacturer: syz [ 662.231413][ T3866] usb 1-1: SerialNumber: syz [ 662.291076][ T3866] usb 1-1: config 0 descriptor?? [ 662.352871][ T3866] smsc95xx v2.0.0 [ 664.031151][ T3866] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 664.032835][ T3866] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 664.043345][ T3866] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 664.050335][ T3866] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 664.167216][ T3866] usb 1-1: USB disconnect, device number 9 [ 684.316139][ T4240] fuse: Bad value for 'group_id' [ 684.317387][ T4240] fuse: Bad value for 'group_id' [ 699.017092][ T4257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 699.675743][ T4259] fuse: Bad value for 'group_id' [ 699.679419][ T4259] fuse: Bad value for 'group_id' [ 702.762754][ T4257] binder: 4256:4257 ioctl c0306201 20000000 returned -14 [ 705.343975][ T4262] FAULT_INJECTION: forcing a failure. [ 705.343975][ T4262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 705.347269][ T4262] CPU: 1 UID: 0 PID: 4262 Comm: syz.1.72 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 705.349393][ T4262] Hardware name: riscv-virtio,qemu (DT) [ 705.350825][ T4262] Call Trace: [ 705.351901][ T4262] [] dump_backtrace+0x2e/0x3c [ 705.353617][ T4262] [] show_stack+0x30/0x3c [ 705.355106][ T4262] [] dump_stack_lvl+0x12e/0x1a6 [ 705.356792][ T4262] [] dump_stack+0x1c/0x24 [ 705.358671][ T4262] [] should_fail_ex+0x3f8/0x4e0 [ 705.360540][ T4262] [] should_fail+0xe/0x16 [ 705.362335][ T4262] [] should_fail_usercopy+0x1e/0x26 [ 705.364151][ T4262] [] filldir64+0x31e/0xab4 [ 705.365922][ T4262] [] dcache_readdir+0x446/0x642 [ 705.367805][ T4262] [] iterate_dir+0x476/0x998 [ 705.369129][ T4262] [] __riscv_sys_getdents64+0x134/0x450 [ 705.370088][ T4262] [] syscall_handler+0x94/0x118 [ 705.370903][ T4262] [] do_trap_ecall_u+0x1aa/0x216 [ 705.371774][ T4262] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 713.224067][ T4275] fuse: Bad value for 'group_id' [ 713.225276][ T4275] fuse: Bad value for 'group_id' [ 723.514000][ T4288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 723.577244][ T4286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.375053][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 730.154164][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.157243][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 730.177410][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 730.240790][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 730.243540][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 730.246299][ T9] usb 2-1: Manufacturer: syz [ 730.391909][ T9] usb 2-1: config 0 descriptor?? [ 731.434981][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 731.805143][ T9] usb 2-1: USB disconnect, device number 6 [ 734.880894][ T4324] trusted_key: syz.0.86 sent an empty control message without MSG_MORE. [ 743.630234][ T4339] netlink: 'syz.1.91': attribute type 5 has an invalid length. [ 748.511653][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 748.751902][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 749.070772][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 749.073323][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.075534][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 749.077622][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 749.215635][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb [ 749.219788][ T25] usb 2-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11 [ 749.221712][ T25] usb 2-1: Product: syz [ 749.223285][ T25] usb 2-1: Manufacturer: syz [ 749.224759][ T25] usb 2-1: SerialNumber: syz [ 749.373732][ T25] usb 2-1: config 0 descriptor?? [ 749.955550][ T4349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 750.305144][ T25] input: iMON Panel, Knob and Mouse(15c2:0040) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input1 [ 751.315102][ T3792] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 751.934204][ T25] imon:send_packet: packet tx failed (-71) [ 752.031895][ T25] imon 2-1:0.0: panel buttons/knobs setup failed [ 752.805379][ T3792] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 752.807123][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.811116][ T3792] usb 1-1: Product: syz [ 752.812139][ T3792] usb 1-1: Manufacturer: syz [ 752.826933][ T3792] usb 1-1: SerialNumber: syz [ 754.086294][ T3792] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 754.090808][ T3792] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 754.163845][ T3792] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 754.249881][ T3792] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 754.744120][ T9] usb 1-1: USB disconnect, device number 10 [ 754.822009][ T25] rc_core: IR keymap rc-imon-pad not found [ 754.824610][ T25] Registered IR keymap rc-empty [ 754.901000][ T25] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 754.904048][ T25] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 754.941519][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 755.005676][ T25] imon:send_packet: packet tx failed (-71) [ 755.064330][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 755.073938][ T9] visor 1-1:1.0: device disconnected [ 755.074400][ T25] imon 2-1:0.0: remote input dev register failed [ 755.123218][ T25] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 757.252982][ T25] imon 2-1:0.0: unable to initialize intf0, err 0 [ 757.255256][ T25] imon:imon_probe: failed to initialize context! [ 757.257131][ T25] imon 2-1:0.0: unable to register, err -19 [ 757.427023][ T25] usb 2-1: USB disconnect, device number 7 [ 764.697246][ T4408] sctp: [Deprecated]: syz.0.96 (pid 4408) Use of int in max_burst socket option. [ 764.697246][ T4408] Use struct sctp_assoc_value instead [ 765.270112][ T3866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 765.615138][ T3866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.616745][ T3866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.669782][ T3866] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 765.676587][ T3866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 765.679972][ T3866] usb 1-1: SerialNumber: syz [ 766.281569][ T3866] usb 1-1: 0:2 : does not exist [ 766.283320][ T3866] usb 1-1: unit 5 not found! [ 766.742290][ T3866] usb 1-1: USB disconnect, device number 11 [ 770.886844][ T4434] tmpfs: Bad value for 'mpol' [ 780.041206][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 787.821479][ T2997] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 787.942352][ T4465] lo: entered allmulticast mode [ 788.127150][ T2997] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 788.130119][ T2997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.132650][ T2997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.134080][ T2997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 788.241830][ T2997] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 788.251194][ T2997] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 788.253364][ T2997] usb 2-1: Manufacturer: syz [ 788.407625][ T2997] usb 2-1: config 0 descriptor?? [ 789.222629][ T4461] lo: left allmulticast mode [ 789.386659][ T2997] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 789.396303][ T2997] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 789.494732][ T2997] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 790.328055][ T4464] tmpfs: Unknown parameter 'usrquotX'.mf6a_inode_ha"rdlimit' [ 790.591417][ T25] usb 2-1: USB disconnect, device number 8 [ 806.322439][ T4508] syz.0.111 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 806.506739][ T3792] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 806.751463][ T3792] usb 2-1: Using ep0 maxpacket: 32 [ 806.840789][ T3792] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 806.843496][ T3792] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 806.846078][ T3792] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.871292][ T3792] usb 2-1: config 1 interface 1 has no altsetting 0 [ 807.191959][ T3792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.193422][ T3792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.194609][ T3792] usb 2-1: Product: syz [ 807.195535][ T3792] usb 2-1: Manufacturer: syz [ 807.196472][ T3792] usb 2-1: SerialNumber: syz [ 808.059714][ T3792] usb 2-1: failed to enable PITCH for EP 0x82 [ 808.480558][ T3792] usb 2-1: USB disconnect, device number 9 [ 816.543612][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 816.850524][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 816.941986][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 816.945840][ T25] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 816.987507][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 816.993178][ T25] usb 1-1: can't read configurations, error -61 [ 817.200235][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 817.426543][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 817.530288][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.534301][ T25] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 817.601653][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 817.604927][ T25] usb 1-1: can't read configurations, error -61 [ 817.630802][ T25] usb usb1-port1: attempt power cycle [ 818.112475][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 818.211408][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 818.337445][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 818.354762][ T25] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 818.444816][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 818.447944][ T25] usb 1-1: can't read configurations, error -61 [ 818.642047][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 818.740094][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 818.972199][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 818.977155][ T25] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 819.090536][ T25] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 819.093076][ T25] usb 1-1: can't read configurations, error -61 [ 819.111344][ T25] usb usb1-port1: unable to enumerate USB device [ 835.396532][ T4569] fuse: Bad value for 'fd' [ 837.847904][ T4575] Illegal XDP return value 1358671693 on prog (id 10) dev N/A, expect packet loss! [ 840.886625][ T4581] capability: warning: `syz.1.124' uses deprecated v2 capabilities in a way that may be insecure [ 850.523913][ T4598] kernel profiling enabled (shift: 63) [ 850.550568][ T4598] profiling shift: 63 too large [ 850.554090][ T4598] kernel profiling enabled (shift: 63) [ 850.555305][ T4598] profiling shift: 63 too large [ 850.556667][ T4598] kernel profiling enabled (shift: 63) [ 850.586904][ T4598] profiling shift: 63 too large [ 850.597673][ T4598] kernel profiling enabled (shift: 63) [ 850.604757][ T4598] profiling shift: 63 too large [ 850.607017][ T4598] kernel profiling enabled (shift: 63) [ 850.607946][ T4598] profiling shift: 63 too large [ 850.642245][ T4598] kernel profiling enabled (shift: 63) [ 850.644343][ T4598] profiling shift: 63 too large [ 850.646213][ T4598] kernel profiling enabled (shift: 63) [ 850.676874][ T4598] profiling shift: 63 too large [ 850.690880][ T4598] kernel profiling enabled (shift: 63) [ 850.692287][ T4598] profiling shift: 63 too large [ 850.694338][ T4598] kernel profiling enabled (shift: 63) [ 850.695767][ T4598] profiling shift: 63 too large [ 850.697897][ T4598] kernel profiling enabled (shift: 63) [ 850.722229][ T4598] profiling shift: 63 too large [ 850.724154][ T4598] kernel profiling enabled (shift: 63) [ 850.725402][ T4598] profiling shift: 63 too large [ 850.727420][ T4598] kernel profiling enabled (shift: 63) [ 850.770120][ T4598] profiling shift: 63 too large [ 850.771846][ T4598] kernel profiling enabled (shift: 63) [ 850.772739][ T4598] profiling shift: 63 too large [ 850.774268][ T4598] kernel profiling enabled (shift: 63) [ 850.775131][ T4598] profiling shift: 63 too large [ 850.776332][ T4598] kernel profiling enabled (shift: 63) [ 850.777196][ T4598] profiling shift: 63 too large [ 850.827505][ T4598] kernel profiling enabled (shift: 63) [ 850.839157][ T4598] profiling shift: 63 too large [ 850.841180][ T4598] kernel profiling enabled (shift: 63) [ 850.842146][ T4598] profiling shift: 63 too large [ 850.843415][ T4598] kernel profiling enabled (shift: 63) [ 850.844367][ T4598] profiling shift: 63 too large [ 850.846165][ T4598] kernel profiling enabled (shift: 63) [ 850.847567][ T4598] profiling shift: 63 too large [ 850.883061][ T4598] kernel profiling enabled (shift: 63) [ 850.884279][ T4598] profiling shift: 63 too large [ 850.885812][ T4598] kernel profiling enabled (shift: 63) [ 850.886789][ T4598] profiling shift: 63 too large [ 850.900022][ T4598] kernel profiling enabled (shift: 63) [ 850.901234][ T4598] profiling shift: 63 too large [ 850.902675][ T4598] kernel profiling enabled (shift: 63) [ 850.903620][ T4598] profiling shift: 63 too large [ 850.904933][ T4598] kernel profiling enabled (shift: 63) [ 850.905902][ T4598] profiling shift: 63 too large [ 850.907342][ T4598] kernel profiling enabled (shift: 63) [ 850.989851][ T4598] profiling shift: 63 too large [ 850.991619][ T4598] kernel profiling enabled (shift: 63) [ 851.004329][ T4598] profiling shift: 63 too large [ 851.041653][ T4598] kernel profiling enabled (shift: 63) [ 851.042941][ T4598] profiling shift: 63 too large [ 851.044443][ T4598] kernel profiling enabled (shift: 63) [ 851.046082][ T4598] profiling shift: 63 too large [ 851.061907][ T4598] kernel profiling enabled (shift: 63) [ 851.064116][ T4598] profiling shift: 63 too large [ 851.066997][ T4598] kernel profiling enabled (shift: 63) [ 851.091449][ T4598] profiling shift: 63 too large [ 851.094774][ T4598] kernel profiling enabled (shift: 63) [ 851.096588][ T4598] profiling shift: 63 too large [ 851.133068][ T4598] kernel profiling enabled (shift: 63) [ 851.134366][ T4598] profiling shift: 63 too large [ 851.136270][ T4598] kernel profiling enabled (shift: 63) [ 851.137334][ T4598] profiling shift: 63 too large [ 857.154373][ T4607] fuse: Unknown parameter '' [ 860.130430][ T3792] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 860.350531][ T3792] usb 2-1: Using ep0 maxpacket: 32 [ 860.881507][ T3792] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 860.885256][ T3792] usb 2-1: config 1 interface 0 has no altsetting 0 [ 862.795086][ T3792] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 862.797463][ T3792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.804758][ T3792] usb 2-1: Product: ᐄ [ 862.806690][ T3792] usb 2-1: Manufacturer:   [ 862.810225][ T3792] usb 2-1: SerialNumber: Щ [ 864.241528][ T4617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.134'. [ 864.244709][ T4617] netlink: 'syz.0.134': attribute type 7 has an invalid length. [ 864.246810][ T4617] netlink: 'syz.0.134': attribute type 8 has an invalid length. [ 864.291705][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 867.180918][ T4617] erspan0: entered promiscuous mode [ 867.687545][ T4617] batadv_slave_1: entered promiscuous mode [ 868.094833][ T4617] gretap0: entered promiscuous mode [ 872.480835][ T3792] usbhid 2-1:1.0: can't add hid device: -32 [ 872.486670][ T3792] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 872.721586][ T3792] usb 2-1: USB disconnect, device number 10 [ 876.482830][ T4634] nbd1: detected capacity change from 0 to 12 [ 877.475989][ T4637] block nbd1: NBD_DISCONNECT [ 877.564985][ T4637] block nbd1: Send disconnect failed -89 [ 877.752528][ T4637] block nbd1: Send control failed (result -89) [ 877.756583][ T4637] block nbd1: Request send failed, requeueing [ 877.814934][ T4637] block nbd1: Disconnected due to user request. [ 877.896080][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 877.905643][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 877.917310][ T4637] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 877.924919][ T4637] Buffer I/O error on dev nbd1, logical block 0, async page read [ 877.930748][ T4637] nbd1: unable to read partition table [ 890.091569][ T4658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'. [ 891.586946][ T33] audit: type=1326 audit(890.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4661 comm="syz.1.143" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 891.724505][ T4664] fuse: Unknown parameter 'rootm`de' [ 909.071037][ T4693] syzkaller1: entered promiscuous mode [ 909.072573][ T4693] syzkaller1: entered allmulticast mode [ 913.434487][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 913.690138][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 914.196454][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 914.202699][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.204916][ T9] usb 2-1: Product: syz [ 914.206693][ T9] usb 2-1: Manufacturer: syz [ 914.209856][ T9] usb 2-1: SerialNumber: syz [ 914.281513][ T9] usb 2-1: config 0 descriptor?? [ 915.704922][ T4704] binder: 4701:4704 ioctl c0306201 20000580 returned -14 [ 916.033847][ T9] usb 2-1: USB disconnect, device number 11 [ 917.353435][ T4741] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 917.654539][ T4741] netlink: 'syz.0.155': attribute type 4 has an invalid length. [ 935.634382][ T3866] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 936.121160][ T3866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.123724][ T3866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.170682][ T3866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 936.173064][ T3866] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 936.174999][ T3866] usb 1-1: Product: syz [ 936.335816][ T3866] usb 1-1: config 0 descriptor?? [ 939.400634][ T3866] usbhid 1-1:0.0: can't add hid device: -71 [ 939.407559][ T3866] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 939.516563][ T3866] usb 1-1: USB disconnect, device number 16 [ 955.113029][ T4759] syz.1.159 (4759): drop_caches: 3 [ 956.137771][ T4792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 958.042984][ T4792] binder: 4791:4792 ioctl 541b 0 returned -22 [ 958.621190][ T3792] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 958.790283][ T3792] usb 2-1: device descriptor read/64, error -71 [ 959.060407][ T3792] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 959.256365][ T3792] usb 2-1: device descriptor read/64, error -71 [ 959.297435][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.166'. [ 959.307484][ T4802] FAULT_INJECTION: forcing a failure. [ 959.307484][ T4802] name failslab, interval 1, probability 0, space 0, times 0 [ 959.310158][ T4802] CPU: 1 UID: 0 PID: 4802 Comm: syz.0.166 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 959.311381][ T4802] Hardware name: riscv-virtio,qemu (DT) [ 959.312155][ T4802] Call Trace: [ 959.312812][ T4802] [] dump_backtrace+0x2e/0x3c [ 959.314047][ T4802] [] show_stack+0x30/0x3c [ 959.315176][ T4802] [] dump_stack_lvl+0x12e/0x1a6 [ 959.316642][ T4802] [] dump_stack+0x1c/0x24 [ 959.318078][ T4802] [] should_fail_ex+0x3f8/0x4e0 [ 959.319124][ T4802] [] should_failslab+0xba/0x102 [ 959.320557][ T4802] [] __kmalloc_noprof+0xce/0x5ba [ 959.321888][ T4802] [] ethnl_default_notify+0x1b4/0x6d0 [ 959.322904][ T4802] [] ethtool_notify+0xe0/0x22c [ 959.323817][ T4802] [] ethnl_netdev_event+0xfa/0x174 [ 959.325016][ T4802] [] notifier_call_chain+0xa8/0x5f2 [ 959.326457][ T4802] [] raw_notifier_call_chain+0x2a/0x38 [ 959.327896][ T4802] [] call_netdevice_notifiers_info+0xbe/0x144 [ 959.329097][ T4802] [] netdev_update_features+0xdc/0xe6 [ 959.330091][ T4802] [] hsr_add_port+0x4d6/0x7e0 [ 959.331116][ T4802] [] hsr_dev_finalize+0x4be/0xc0c [ 959.332132][ T4802] [] hsr_newlink+0x3e2/0x8bc [ 959.333133][ T4802] [] rtnl_newlink+0xbb6/0x1ab6 [ 959.334358][ T4802] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 959.335547][ T4802] [] netlink_rcv_skb+0x216/0x3dc [ 959.336913][ T4802] [] rtnetlink_rcv+0x26/0x30 [ 959.338320][ T4802] [] netlink_unicast+0x4f0/0x82c [ 959.339583][ T4802] [] netlink_sendmsg+0x864/0xdc6 [ 959.340589][ T4802] [] __sock_sendmsg+0xcc/0x160 [ 959.341488][ T4802] [] ____sys_sendmsg+0x5ce/0x79e [ 959.342418][ T4802] [] ___sys_sendmsg+0x144/0x1e6 [ 959.343425][ T4802] [] __sys_sendmsg+0x188/0x22a [ 959.344409][ T4802] [] __riscv_sys_sendmsg+0x70/0xa2 [ 959.345522][ T4802] [] syscall_handler+0x94/0x118 [ 959.346805][ T4802] [] do_trap_ecall_u+0x1aa/0x216 [ 959.348235][ T4802] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 959.404051][ T3792] usb usb2-port1: attempt power cycle [ 960.111192][ T3792] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 960.164548][ T3792] usb 2-1: device descriptor read/8, error -71 [ 960.502080][ T3792] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 960.576810][ T3792] usb 2-1: device descriptor read/8, error -71 [ 960.711624][ T3792] usb usb2-port1: unable to enumerate USB device [ 976.227301][ T3792] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 976.931227][ T3792] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 976.935354][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.937394][ T3792] usb 1-1: Product: syz [ 976.949044][ T3792] usb 1-1: Manufacturer: syz [ 976.950893][ T3792] usb 1-1: SerialNumber: syz [ 977.095476][ T3792] usb 1-1: config 0 descriptor?? [ 985.195863][ T3792] mos7840 1-1:0.0: required endpoints missing [ 985.570655][ T3792] usb 1-1: USB disconnect, device number 17 [ 1010.095312][ T4883] fuse: Bad value for 'fd' [ 1019.571033][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1019.762320][ T8] usb 1-1: device descriptor read/64, error -71 [ 1020.052647][ T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1020.324128][ T8] usb 1-1: device descriptor read/64, error -71 [ 1020.451386][ T8] usb usb1-port1: attempt power cycle [ 1021.097547][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1021.204244][ T8] usb 1-1: device descriptor read/8, error -71 [ 1021.520890][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1021.600052][ T8] usb 1-1: device descriptor read/8, error -71 [ 1021.607379][ T4900] syzkaller0: entered promiscuous mode [ 1021.610756][ T4900] syzkaller0: entered allmulticast mode [ 1021.646719][ T4900] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1021.765241][ T8] usb usb1-port1: unable to enumerate USB device [ 1031.150383][ T2997] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1031.635001][ T2997] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1031.636540][ T2997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.637698][ T2997] usb 1-1: Product: syz [ 1031.647960][ T2997] usb 1-1: Manufacturer: syz [ 1031.650524][ T2997] usb 1-1: SerialNumber: syz [ 1031.767893][ T2997] usb 1-1: config 0 descriptor?? [ 1038.165456][ T4924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1040.168510][ T2997] mos7840 1-1:0.0: required endpoints missing [ 1040.353338][ T2997] usb 1-1: USB disconnect, device number 22 [ 1057.624793][ T4946] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 1059.960254][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1060.290207][ T25] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1060.292338][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.293709][ T25] usb 2-1: Product: syz [ 1060.294898][ T25] usb 2-1: Manufacturer: syz [ 1060.295905][ T25] usb 2-1: SerialNumber: syz [ 1060.444174][ T25] usb 2-1: config 0 descriptor?? [ 1062.013103][ T25] mos7840 2-1:0.0: required endpoints missing [ 1062.151452][ T25] usb 2-1: USB disconnect, device number 16 [ 1065.152486][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1065.541209][ T9] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1065.543271][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.544670][ T9] usb 1-1: Product: syz [ 1065.545722][ T9] usb 1-1: Manufacturer: syz [ 1065.546863][ T9] usb 1-1: SerialNumber: syz [ 1065.645037][ T9] usb 1-1: config 0 descriptor?? [ 1073.392691][ T9] mos7840 1-1:0.0: required endpoints missing [ 1073.851299][ T9] usb 1-1: USB disconnect, device number 23 [ 1079.862083][ T34] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1080.216575][ T34] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1080.233802][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.236578][ T34] usb 2-1: Product: syz [ 1080.249804][ T34] usb 2-1: Manufacturer: syz [ 1080.251758][ T34] usb 2-1: SerialNumber: syz [ 1080.403964][ T34] usb 2-1: config 0 descriptor?? [ 1082.037428][ T34] mos7840 2-1:0.0: required endpoints missing [ 1082.181148][ T34] usb 2-1: USB disconnect, device number 17 [ 1097.718845][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1098.116589][ T25] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1098.130456][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.132183][ T25] usb 1-1: Product: syz [ 1098.133377][ T25] usb 1-1: Manufacturer: syz [ 1098.134573][ T25] usb 1-1: SerialNumber: syz [ 1098.236055][ T25] usb 1-1: config 0 descriptor?? [ 1113.533020][ T25] mos7840 1-1:0.0: required endpoints missing [ 1114.413089][ T9] usb 1-1: USB disconnect, device number 24 [ 1124.702239][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1125.065131][ T25] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1125.066673][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.067853][ T25] usb 2-1: Product: syz [ 1125.097930][ T25] usb 2-1: Manufacturer: syz [ 1125.103688][ T25] usb 2-1: SerialNumber: syz [ 1125.152437][ T25] usb 2-1: config 0 descriptor?? [ 1126.375416][ T25] mos7840 2-1:0.0: required endpoints missing [ 1126.472022][ T25] usb 2-1: USB disconnect, device number 18 [ 1136.775915][ T5097] syzkaller1: entered promiscuous mode [ 1136.777215][ T5097] syzkaller1: entered allmulticast mode [ 1151.384472][ T5122] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 1161.992430][ T3792] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1162.222047][ T3792] usb 1-1: Using ep0 maxpacket: 32 [ 1162.310767][ T3792] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1162.313389][ T3792] usb 1-1: config 0 has no interface number 0 [ 1162.315600][ T3792] usb 1-1: config 0 interface 159 has no altsetting 0 [ 1162.794935][ T3792] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=f0.de [ 1162.797564][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.801011][ T3792] usb 1-1: Product: syz [ 1162.802715][ T3792] usb 1-1: Manufacturer: syz [ 1162.804308][ T3792] usb 1-1: SerialNumber: syz [ 1162.909519][ T3792] usb 1-1: config 0 descriptor?? [ 1175.399721][ T3792] usb 1-1: USB disconnect, device number 25 [ 1177.167748][ T5166] syz.0.248 (5166): attempted to duplicate a private mapping with mremap. This is not supported. [ 1177.344853][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 1178.233635][ T3792] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1178.440516][ T3792] usb 1-1: Using ep0 maxpacket: 32 [ 1178.531624][ T3792] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 1178.539335][ T3792] usb 1-1: config 0 has no interface number 0 [ 1178.540855][ T3792] usb 1-1: config 0 interface 182 has no altsetting 0 [ 1178.666621][ T3792] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 1178.675303][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 1178.679476][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.680723][ T3792] usb 1-1: Product: syz [ 1178.681843][ T3792] usb 1-1: Manufacturer: syz [ 1178.682884][ T3792] usb 1-1: SerialNumber: syz [ 1178.791937][ T3792] usb 1-1: config 0 descriptor?? [ 1178.916801][ T3792] usb-storage 1-1:0.182: USB Mass Storage device detected [ 1179.140464][ T3792] usb-storage 1-1:0.182: Quirks match for vid 07cf pid 1001: a [ 1179.703091][ T34] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1179.926878][ T34] usb 2-1: device descriptor read/64, error -71 [ 1180.284456][ T34] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1180.485549][ T34] usb 2-1: device descriptor read/64, error -71 [ 1180.611850][ T34] usb usb2-port1: attempt power cycle [ 1181.165901][ T34] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1181.226011][ T34] usb 2-1: device descriptor read/8, error -71 [ 1181.551524][ T34] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1181.602532][ T34] usb 2-1: device descriptor read/8, error -71 [ 1181.732612][ T34] usb usb2-port1: unable to enumerate USB device [ 1184.929517][ T3792] usb 1-1: USB disconnect, device number 26 [ 1195.564877][ T3866] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1196.136722][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.145020][ T3866] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1196.147448][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.261951][ T3866] usb 2-1: config 0 descriptor?? [ 1196.925823][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.933458][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.936092][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.941400][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.944466][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.947077][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.951810][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.954327][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.956856][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1196.960866][ T5214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1197.824480][ T3866] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 1198.386357][ T3866] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input3 [ 1199.233526][ T3866] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1210.835928][ T9] usb 2-1: USB disconnect, device number 23 [ 1214.439968][ T3866] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1214.701560][ T3866] usb 1-1: Using ep0 maxpacket: 32 [ 1214.740004][ T3866] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1214.807057][ T3866] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1214.813283][ T3866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.814549][ T3866] usb 1-1: Product: syz [ 1214.815547][ T3866] usb 1-1: Manufacturer: syz [ 1214.816477][ T3866] usb 1-1: SerialNumber: syz [ 1214.866047][ T3866] usb 1-1: config 0 descriptor?? [ 1214.891469][ T5245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1215.002917][ T3866] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1215.551761][ T3866] usb 1-1: USB disconnect, device number 27 [ 1233.696523][ T5306] binder: 5303:5306 ioctl c0306201 0 returned -14 [ 1234.004747][ T5306] binder: 5303:5306 ioctl c0a85322 200002c0 returned -22 [ 1238.226510][ T5310] net_ratelimit: 822 callbacks suppressed [ 1238.226962][ T5310] syzkaller0: mtu less than device minimum [ 1238.270717][ T5310] syzkaller0: entered allmulticast mode [ 1238.636719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.306846][ T3866] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1246.764531][ T3866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1246.767404][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1246.779633][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1246.911391][ T3866] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1246.914048][ T3866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.916227][ T3866] usb 2-1: Product: syz [ 1246.932894][ T3866] usb 2-1: Manufacturer: syz [ 1246.935004][ T3866] usb 2-1: SerialNumber: syz [ 1247.096076][ T3866] usb 2-1: config 0 descriptor?? [ 1247.153184][ T5328] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1247.295978][ T3866] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1251.930483][ T3792] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 1252.160686][ T3792] usb 1-1: device descriptor read/64, error -71 [ 1252.440358][ T3792] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 1253.000200][ T3792] usb 1-1: device descriptor read/64, error -71 [ 1253.123811][ T3792] usb usb1-port1: attempt power cycle [ 1253.566446][ T3792] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 1253.622681][ T3792] usb 1-1: device descriptor read/8, error -71 [ 1253.932906][ T3792] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 1254.170652][ T3792] usb 1-1: device descriptor read/8, error -71 [ 1254.303965][ T3792] usb usb1-port1: unable to enumerate USB device [ 1255.192029][ T3866] usb 2-1: USB disconnect, device number 24 [ 1261.557625][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 1261.563296][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 1268.880585][ T3866] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1269.681631][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.683341][ T3866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.684750][ T3866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1269.686447][ T3866] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1269.687636][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.729380][ T3866] usb 2-1: config 0 descriptor?? [ 1270.679929][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.681375][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.682684][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.683864][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.685012][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.712417][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.714596][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.715912][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.717119][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.755956][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.757383][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.766027][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.767195][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.793026][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.807177][ T3866] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 1270.870647][ T3866] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 1270.976773][ T3866] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1271.453545][ T25] usb 2-1: USB disconnect, device number 25 [ 1284.301551][ T3792] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1284.771084][ T3792] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=d3.5f [ 1284.773848][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.776040][ T3792] usb 1-1: Product: syz [ 1284.777700][ T3792] usb 1-1: Manufacturer: syz [ 1284.807835][ T3792] usb 1-1: SerialNumber: syz [ 1284.970221][ T3792] usb 1-1: config 0 descriptor?? [ 1285.161452][ T3792] kobil_sct 1-1:0.0: required endpoints missing [ 1285.847411][ T3792] usb 1-1: USB disconnect, device number 32 [ 1288.277001][ T5456] netlink: 'syz.1.287': attribute type 16 has an invalid length. [ 1288.284644][ T5456] netlink: 'syz.1.287': attribute type 3 has an invalid length. [ 1288.286089][ T5456] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.287'. [ 1290.895065][ T5459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.288'. [ 1290.897883][ T5459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.288'. [ 1296.140900][ T5466] fuse: Bad value for 'group_id' [ 1296.142324][ T5466] fuse: Bad value for 'group_id' [ 1307.150071][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.172095][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.412585][ T3866] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1307.843406][ T3866] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 1307.844989][ T3866] usb 2-1: config 0 has no interface number 0 [ 1307.846224][ T3866] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1307.847536][ T3866] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1307.861191][ T3866] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1307.862665][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.961965][ T3866] usb 2-1: config 0 descriptor?? [ 1308.183249][ T3866] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1308.185392][ T3866] usb 2-1: MIDIStreaming interface descriptor not found [ 1308.332566][ T5493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.297'. [ 1309.265889][ T3866] snd-usb-audio 2-1:0.156: probe with driver snd-usb-audio failed with error -12 [ 1309.376921][ T3866] usb 2-1: USB disconnect, device number 26 [ 1322.256130][ T33] audit: type=1326 audit(1321.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5548 comm="syz.1.305" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 1331.879431][ T3792] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1332.235192][ T3792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.236973][ T3792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.241042][ T3792] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1332.242770][ T3792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.367195][ T3792] usb 1-1: config 0 descriptor?? [ 1334.032486][ T5580] Process accounting resumed [ 1334.232945][ T3792] usbhid 1-1:0.0: can't add hid device: -71 [ 1334.236423][ T3792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1334.273538][ T3792] usb 1-1: USB disconnect, device number 33 [ 1354.381573][ T3792] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1356.276937][ T3792] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1356.279954][ T3792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.281417][ T3792] usb 2-1: Product: syz [ 1356.283180][ T3792] usb 2-1: Manufacturer: syz [ 1356.284329][ T3792] usb 2-1: SerialNumber: syz [ 1356.343115][ T3792] usb 2-1: config 0 descriptor?? [ 1357.534147][ T3792] mos7840 2-1:0.0: required endpoints missing [ 1357.701080][ T3792] usb 2-1: USB disconnect, device number 27 [ 1362.641656][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1362.871868][ T25] usb 1-1: device descriptor read/64, error -71 [ 1363.190638][ T25] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1363.402163][ T25] usb 1-1: device descriptor read/64, error -71 [ 1363.522069][ T25] usb usb1-port1: attempt power cycle [ 1364.249536][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1364.310910][ T25] usb 1-1: device descriptor read/8, error -71 [ 1364.641076][ T25] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1364.732572][ T25] usb 1-1: device descriptor read/8, error -71 [ 1364.881058][ T25] usb usb1-port1: unable to enumerate USB device [ 1375.625985][ T5672] fuse: Unknown parameter '0000000000000000000000400000000000000000004' [ 1378.660320][ T34] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1379.375549][ T34] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1379.377311][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.384089][ T34] usb 2-1: Product: syz [ 1379.385390][ T34] usb 2-1: Manufacturer: syz [ 1379.386608][ T34] usb 2-1: SerialNumber: syz [ 1379.511166][ T34] usb 2-1: config 0 descriptor?? [ 1382.505295][ T34] mos7840 2-1:0.0: required endpoints missing [ 1382.902105][ T34] usb 2-1: USB disconnect, device number 28 [ 1390.870301][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1391.277612][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1391.505519][ T8] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 1391.507162][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.521380][ T8] usb 2-1: Product: syz [ 1391.522602][ T8] usb 2-1: Manufacturer: syz [ 1391.523618][ T8] usb 2-1: SerialNumber: syz [ 1391.632322][ T8] usb 2-1: config 0 descriptor?? [ 1392.194656][ T8] usb 2-1: USB disconnect, device number 29 [ 1402.500289][ T3735] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1403.103747][ T3735] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1403.106577][ T3735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.123068][ T3735] usb 1-1: Product: syz [ 1403.125104][ T3735] usb 1-1: Manufacturer: syz [ 1403.126871][ T3735] usb 1-1: SerialNumber: syz [ 1403.235214][ T3735] usb 1-1: config 0 descriptor?? [ 1410.803830][ T3735] mos7840 1-1:0.0: required endpoints missing [ 1411.045525][ T3866] usb 1-1: USB disconnect, device number 38 [ 1420.321184][ T5753] netlink: 76 bytes leftover after parsing attributes in process `syz.1.342'. [ 1421.085878][ T5755] netlink: 'syz.0.343': attribute type 14 has an invalid length. [ 1424.580872][ T3866] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1425.013355][ T3866] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1425.015956][ T3866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.155093][ T3866] usb 2-1: config 0 descriptor?? [ 1425.305592][ T3866] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 1427.127011][ T8] usb 2-1: USB disconnect, device number 30 [ 1427.752276][ T3849] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1428.556467][ T3849] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1428.560555][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.561901][ T3849] usb 1-1: Product: syz [ 1428.563246][ T3849] usb 1-1: Manufacturer: syz [ 1428.583157][ T3849] usb 1-1: SerialNumber: syz [ 1428.682413][ T3849] usb 1-1: config 0 descriptor?? [ 1436.164727][ T3849] mos7840 1-1:0.0: required endpoints missing [ 1436.303628][ T3849] usb 1-1: USB disconnect, device number 39 [ 1437.721236][ T5799] FAULT_INJECTION: forcing a failure. [ 1437.721236][ T5799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.734462][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: syz.1.348 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 1437.736566][ T5799] Hardware name: riscv-virtio,qemu (DT) [ 1437.737767][ T5799] Call Trace: [ 1437.738969][ T5799] [] dump_backtrace+0x2e/0x3c [ 1437.740867][ T5799] [] show_stack+0x30/0x3c [ 1437.742444][ T5799] [] dump_stack_lvl+0x12e/0x1a6 [ 1437.744100][ T5799] [] dump_stack+0x1c/0x24 [ 1437.745780][ T5799] [] should_fail_ex+0x3f8/0x4e0 [ 1437.747455][ T5799] [] should_fail+0xe/0x16 [ 1437.749496][ T5799] [] should_fail_usercopy+0x1e/0x26 [ 1437.751927][ T5799] [] _copy_to_user+0x3e/0x25a [ 1437.754497][ T5799] [] simple_read_from_buffer+0xd0/0x154 [ 1437.756405][ T5799] [] proc_fail_nth_read+0x194/0x27c [ 1437.758247][ T5799] [] vfs_read+0x1c0/0x94a [ 1437.759697][ T5799] [] ksys_read+0x126/0x226 [ 1437.761140][ T5799] [] __riscv_sys_read+0x6e/0x94 [ 1437.762652][ T5799] [] syscall_handler+0x94/0x118 [ 1437.764596][ T5799] [] do_trap_ecall_u+0x1aa/0x216 [ 1437.767061][ T5799] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1448.118031][ T5816] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1449.781854][ T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1450.254972][ T25] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1450.257794][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.262064][ T25] usb 1-1: Product: syz [ 1450.263748][ T25] usb 1-1: Manufacturer: syz [ 1450.265486][ T25] usb 1-1: SerialNumber: syz [ 1450.410673][ T25] usb 1-1: config 0 descriptor?? [ 1457.594963][ T25] mos7840 1-1:0.0: required endpoints missing [ 1457.915680][ T3792] usb 1-1: USB disconnect, device number 40 [ 1464.591214][ T5844] hugetlbfs: syz.1.361 (5844): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1471.452723][ T3849] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1471.843619][ T3849] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1471.846277][ T3849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.855699][ T3849] usb 2-1: Product: syz [ 1471.857640][ T3849] usb 2-1: Manufacturer: syz [ 1471.882947][ T3849] usb 2-1: SerialNumber: syz [ 1471.995746][ T3849] usb 2-1: config 0 descriptor?? [ 1477.896465][ T3849] mos7840 2-1:0.0: required endpoints missing [ 1477.962163][ T3849] usb 2-1: USB disconnect, device number 31 [ 1488.226932][ T5895] netlink: 'syz.1.375': attribute type 3 has an invalid length. [ 1490.724914][ T8] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1491.103105][ T8] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1491.105804][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.107948][ T8] usb 1-1: Product: syz [ 1491.110753][ T8] usb 1-1: Manufacturer: syz [ 1491.112477][ T8] usb 1-1: SerialNumber: syz [ 1491.326647][ T8] usb 1-1: config 0 descriptor?? [ 1498.396662][ T8] mos7840 1-1:0.0: required endpoints missing [ 1498.793793][ T3866] usb 1-1: USB disconnect, device number 41 [ 1499.426514][ T5912] xt_hashlimit: invalid rate [ 1510.773082][ T5945] bond0: entered promiscuous mode [ 1510.774601][ T5945] bond_slave_0: entered promiscuous mode [ 1510.777699][ T5945] bond_slave_1: entered promiscuous mode [ 1510.783937][ T5945] bond0: entered allmulticast mode [ 1510.785243][ T5945] bond_slave_0: entered allmulticast mode [ 1510.786477][ T5945] bond_slave_1: entered allmulticast mode [ 1511.480704][ T8] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1512.030501][ T8] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1512.032027][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.033675][ T8] usb 1-1: Product: syz [ 1512.034804][ T8] usb 1-1: Manufacturer: syz [ 1512.035869][ T8] usb 1-1: SerialNumber: syz [ 1512.076006][ T8] usb 1-1: config 0 descriptor?? [ 1518.129976][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'. [ 1518.135520][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.387'. [ 1518.883259][ T8] mos7840 1-1:0.0: required endpoints missing [ 1519.077953][ T25] usb 1-1: USB disconnect, device number 42 [ 1526.973238][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 1529.299883][ T5977] netlink: 360 bytes leftover after parsing attributes in process `syz.0.389'. [ 1530.091743][ T5981] capability: warning: `syz.0.389' uses 32-bit capabilities (legacy support in use) [ 1534.529852][ T5527] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1535.061169][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.100237][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.915223][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 1542.174791][ C1] vxcan0: j1939_tp_txtimer: 0xff6000001aa00800: tx aborted with unknown reason: -2 [ 1554.914191][ T6023] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 1554.922759][ T6023] netlink: 216 bytes leftover after parsing attributes in process `syz.1.397'. [ 1562.001779][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'. [ 1564.352335][ T3849] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1564.603010][ T3849] usb 1-1: Using ep0 maxpacket: 16 [ 1564.716669][ T3849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.723772][ T3849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.726743][ T3849] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1564.741110][ T3849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.907535][ T3849] usb 1-1: config 0 descriptor?? [ 1570.584854][ T3849] usbhid 1-1:0.0: can't add hid device: -32 [ 1570.592214][ T3849] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1579.448088][ T3849] usb 1-1: USB disconnect, device number 44 [ 1589.673537][ T3735] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1590.402426][ T3735] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1590.403949][ T3735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.405858][ T3735] usb 1-1: Product: syz [ 1590.407483][ T3735] usb 1-1: Manufacturer: syz [ 1590.410960][ T3735] usb 1-1: SerialNumber: syz [ 1590.480290][ T3735] usb 1-1: config 0 descriptor?? [ 1597.161832][ T3735] mos7840 1-1:0.0: required endpoints missing [ 1597.644396][ T3849] usb 1-1: USB disconnect, device number 45 [ 1616.486208][ T6134] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 1617.295285][ T6134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1617.650337][ T6165] bond1: (slave ip6gretap1): making interface the new active one [ 1617.674219][ T6165] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1621.396710][ T6182] nbd: must specify a size in bytes for the device [ 1621.633596][ T33] audit: type=1326 audit(1620.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.1.426" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 1623.708969][ T6182] netlink: 256 bytes leftover after parsing attributes in process `syz.0.425'. [ 1630.887280][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 1664.346524][ T6288] netlink: 232 bytes leftover after parsing attributes in process `syz.0.447'. [ 1665.560977][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 1665.562550][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 1674.733700][ T5765] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1674.822071][ T6307] syzkaller0: entered promiscuous mode [ 1674.823383][ T6307] syzkaller0: entered allmulticast mode [ 1675.071961][ T5765] usb 2-1: not running at top speed; connect to a high speed hub [ 1675.104493][ T5765] usb 2-1: config 3 has an invalid interface number: 213 but max is 0 [ 1675.105957][ T5765] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.107116][ T5765] usb 2-1: config 3 has no interface number 0 [ 1675.111603][ T5765] usb 2-1: config 3 interface 213 has no altsetting 0 [ 1675.257261][ T5765] usb 2-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.18 [ 1675.262554][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.264719][ T5765] usb 2-1: Product: syz [ 1675.266465][ T5765] usb 2-1: Manufacturer: syz [ 1675.268162][ T5765] usb 2-1: SerialNumber: syz [ 1680.672920][ T5765] usb 2-1: bad CDC descriptors [ 1689.221292][ T8] usb 2-1: USB disconnect, device number 32 [ 1704.441840][ T6365] netlink: 'syz.1.461': attribute type 5 has an invalid length. [ 1704.546444][ T6365] xt_hashlimit: Unknown mode mask 8C, kernel too old? [ 1709.494380][ T6379] binder: Bad value for 'max' [ 1709.561260][ T6382] raw_sendmsg: syz.0.462 forgot to set AF_INET. Fix it! [ 1717.205509][ T6399] blk-mq: reduced tag depth (128 -> 64) [ 1723.620690][ T6411] Dead loop on virtual device ipvlan1, fix it urgently! [ 1726.643157][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 1736.136414][ T6434] nftables ruleset with unbound set [ 1736.583359][ T6434] bdev: Unknown parameter 'fd' [ 1748.173294][ T5527] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1748.424720][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 1748.763674][ T5527] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1748.927796][ T5527] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40 [ 1748.930106][ T5527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.931272][ T5527] usb 1-1: Product: И [ 1748.932342][ T5527] usb 1-1: Manufacturer: ᠊ [ 1748.933410][ T5527] usb 1-1: SerialNumber: 㰊 [ 1749.666087][ T5527] usbhid 1-1:1.0: can't add hid device: -71 [ 1749.670544][ T5527] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1749.894632][ T5527] usb 1-1: USB disconnect, device number 46 [ 1751.292292][ T6475] input: syz1 as /devices/virtual/input/input5 [ 1775.002485][ T5527] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1775.211372][ T5527] usb 2-1: Using ep0 maxpacket: 16 [ 1775.316357][ T5527] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1775.332113][ T5527] usb 2-1: config 0 has no interface number 0 [ 1775.334657][ T5527] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1775.337161][ T5527] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1775.529239][ T5527] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1775.530848][ T5527] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1775.532078][ T5527] usb 2-1: Product: syz [ 1775.533041][ T5527] usb 2-1: SerialNumber: syz [ 1775.687093][ T5527] usb 2-1: config 0 descriptor?? [ 1775.950757][ T5527] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1775.975404][ T5527] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 1777.239766][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1777.546105][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.650058][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.870403][ T6528] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1778.947985][ T5958] usb 2-1: USB disconnect, device number 33 [ 1779.006110][ T5958] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1794.423067][ T5958] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1794.732994][ T5958] usb 1-1: Using ep0 maxpacket: 8 [ 1794.861361][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1794.863004][ T5958] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1795.149796][ T5958] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1795.151399][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.152647][ T5958] usb 1-1: Product: syz [ 1795.153649][ T5958] usb 1-1: Manufacturer: syz [ 1795.154862][ T5958] usb 1-1: SerialNumber: syz [ 1795.254617][ T5958] usb 1-1: config 0 descriptor?? [ 1797.552279][ T5958] usb 1-1: USB disconnect, device number 47 [ 1799.245475][ T6573] : renamed from bond0 [ 1803.252578][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 1807.437816][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 1808.368803][ T6588] fuse: Invalid rootmode [ 1812.260265][ T6593] FAULT_INJECTION: forcing a failure. [ 1812.260265][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.261930][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.0.508 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 1812.262925][ T6593] Hardware name: riscv-virtio,qemu (DT) [ 1812.263569][ T6593] Call Trace: [ 1812.264133][ T6593] [] dump_backtrace+0x2e/0x3c [ 1812.265113][ T6593] [] show_stack+0x30/0x3c [ 1812.265992][ T6593] [] dump_stack_lvl+0x12e/0x1a6 [ 1812.266882][ T6593] [] dump_stack+0x1c/0x24 [ 1812.267698][ T6593] [] should_fail_ex+0x3f8/0x4e0 [ 1812.268737][ T6593] [] should_failslab+0xba/0x102 [ 1812.269852][ T6593] [] kmem_cache_alloc_noprof+0x62/0x3da [ 1812.270847][ T6593] [] skb_clone+0x180/0x3ce [ 1812.271714][ T6593] [] netlink_deliver_tap+0xb00/0xc78 [ 1812.272649][ T6593] [] netlink_unicast+0x592/0x82c [ 1812.273583][ T6593] [] netlink_sendmsg+0x864/0xdc6 [ 1812.274567][ T6593] [] __sock_sendmsg+0xcc/0x160 [ 1812.275437][ T6593] [] ____sys_sendmsg+0x5ce/0x79e [ 1812.276302][ T6593] [] ___sys_sendmsg+0x144/0x1e6 [ 1812.277245][ T6593] [] __sys_sendmsg+0x188/0x22a [ 1812.278343][ T6593] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1812.279437][ T6593] [] syscall_handler+0x94/0x118 [ 1812.280309][ T6593] [] do_trap_ecall_u+0x1aa/0x216 [ 1812.281288][ T6593] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1815.264063][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 1818.703201][ T6623] fuse: Invalid rootmode [ 1822.971488][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 1822.973282][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.515'. [ 1823.174779][ T6637] vlan2: entered allmulticast mode [ 1827.742405][ T6648] fuse: Invalid rootmode [ 1831.279967][ T3849] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1832.061969][ T3849] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1832.063487][ T3849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.065680][ T3849] usb 1-1: Product: syz [ 1832.066696][ T3849] usb 1-1: Manufacturer: syz [ 1832.068348][ T3849] usb 1-1: SerialNumber: syz [ 1832.133833][ T3849] usb 1-1: config 0 descriptor?? [ 1834.567003][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1834.860394][ T8] usb 2-1: device descriptor read/64, error -71 [ 1835.274680][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1836.446982][ T8] usb 2-1: device descriptor read/64, error -71 [ 1836.564659][ T8] usb usb2-port1: attempt power cycle [ 1837.155331][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1837.481609][ T8] usb 2-1: device descriptor read/8, error -71 [ 1837.768391][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1838.577340][ T8] usb 2-1: device descriptor read/8, error -71 [ 1838.699276][ T8] usb usb2-port1: unable to enumerate USB device [ 1839.666107][ T3849] mos7840 1-1:0.0: required endpoints missing [ 1839.894347][ T3849] usb 1-1: USB disconnect, device number 48 [ 1854.968146][ T5958] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1855.396700][ T5958] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1855.399606][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.401915][ T5958] usb 2-1: Product: syz [ 1855.409639][ T5958] usb 2-1: Manufacturer: syz [ 1855.411554][ T5958] usb 2-1: SerialNumber: syz [ 1855.501407][ T5958] usb 2-1: config 0 descriptor?? [ 1856.700728][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 1856.702488][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 1857.113160][ T5958] mos7840 2-1:0.0: required endpoints missing [ 1857.218987][ T5958] usb 2-1: USB disconnect, device number 38 [ 1859.451580][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1869.485376][ T6726] fuse: Bad value for 'rootmode' [ 1871.901527][ T6730] syz.1.534: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1871.907536][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.1.534 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 1871.908801][ T6730] Hardware name: riscv-virtio,qemu (DT) [ 1871.909608][ T6730] Call Trace: [ 1871.910322][ T6730] [] dump_backtrace+0x2e/0x3c [ 1871.911365][ T6730] [] show_stack+0x30/0x3c [ 1871.912292][ T6730] [] dump_stack_lvl+0x12e/0x1a6 [ 1871.913330][ T6730] [] dump_stack+0x1c/0x24 [ 1871.914325][ T6730] [] warn_alloc+0x170/0x292 [ 1871.915265][ T6730] [] __vmalloc_node_range_noprof+0xfb4/0x120c [ 1871.916338][ T6730] [] vmalloc_user_noprof+0xf8/0x126 [ 1871.917374][ T6730] [] xskq_create+0xf2/0x1ae [ 1871.918341][ T6730] [] xsk_setsockopt+0x682/0x8f0 [ 1871.919601][ T6730] [] do_sock_setsockopt+0x208/0x400 [ 1871.920641][ T6730] [] __sys_setsockopt+0x140/0x1cc [ 1871.921702][ T6730] [] __riscv_sys_setsockopt+0xa6/0x114 [ 1871.922781][ T6730] [] syscall_handler+0x94/0x118 [ 1871.923755][ T6730] [] do_trap_ecall_u+0x1aa/0x216 [ 1871.924776][ T6730] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1871.966073][ T6730] Mem-Info: [ 1871.967918][ T6730] active_anon:2318 inactive_anon:0 isolated_anon:0 [ 1871.967918][ T6730] active_file:618 inactive_file:2437 isolated_file:0 [ 1871.967918][ T6730] unevictable:768 dirty:74 writeback:0 [ 1871.967918][ T6730] slab_reclaimable:2313 slab_unreclaimable:26407 [ 1871.967918][ T6730] mapped:12738 shmem:833 pagetables:439 [ 1871.967918][ T6730] sec_pagetables:0 bounce:0 [ 1871.967918][ T6730] kernel_misc_reclaimable:0 [ 1871.967918][ T6730] free:262260 free_pcp:466 free_cma:52608 [ 1872.006168][ T6730] Node 0 active_anon:9272kB inactive_anon:0kB active_file:2472kB inactive_file:9748kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:50952kB dirty:296kB writeback:0kB shmem:3332kB writeback_tmp:0kB kernel_stack:5968kB pagetables:1756kB sec_pagetables:0kB all_unreclaimable? no [ 1872.031044][ T6730] Node 0 DMA32 free:1049040kB boost:0kB min:4784kB low:6212kB high:7640kB reserved_highatomic:0KB active_anon:9272kB inactive_anon:0kB active_file:2472kB inactive_file:9748kB unevictable:3072kB writepending:296kB present:2097152kB managed:1434260kB mlocked:0kB bounce:0kB free_pcp:1864kB local_pcp:1516kB free_cma:210432kB [ 1872.041573][ T6730] lowmem_reserve[]: 0 0 0 [ 1872.044270][ T6730] Node 0 DMA32: 80*4kB (UE) 60*8kB (U) 137*16kB (UME) 138*32kB (UME) 65*64kB (UME) 43*128kB (UM) 19*256kB (UM) 22*512kB (UMEC) 18*1024kB (UMC) 9*2048kB (UME) 239*4096kB (UMC) = 1049008kB [ 1872.077208][ T6730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1872.081913][ T6730] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1872.085637][ T6730] 3888 total pagecache pages [ 1872.088359][ T6730] 0 pages in swap cache [ 1872.094322][ T6730] Free swap = 124488kB [ 1872.095360][ T6730] Total swap = 124996kB [ 1872.096570][ T6730] 524288 pages RAM [ 1872.097528][ T6730] 0 pages HighMem/MovableOnly [ 1872.098539][ T6730] 165723 pages reserved [ 1872.113250][ T6730] 52736 pages cma reserved [ 1874.603639][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 1874.609194][ T6734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 1874.838979][ T6734] gretap0: entered promiscuous mode [ 1874.900709][ T6734] batadv_slave_1: entered promiscuous mode [ 1874.957251][ T6734] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1874.959029][ T6734] Cannot create hsr debugfs directory [ 1874.960777][ T6734] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 1874.962174][ T6734] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 1876.787747][ T6743] fuse: Unknown parameter 'use00000000000000000000' [ 1882.661522][ T6752] netlink: 'syz.0.540': attribute type 2 has an invalid length. [ 1882.664129][ T6752] netlink: 784 bytes leftover after parsing attributes in process `syz.0.540'. [ 1888.427667][ T3849] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1889.516138][ T3849] usb 1-1: Using ep0 maxpacket: 16 [ 1889.577436][ T3849] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1889.578983][ T3849] usb 1-1: config 0 has no interface number 0 [ 1889.580202][ T3849] usb 1-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1889.581571][ T3849] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1889.590937][ T3849] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1889.670604][ T6764] fuse: Unknown parameter 'use00000000000000000000' [ 1889.697789][ T3849] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1889.700035][ T3849] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1889.701613][ T3849] usb 1-1: Product: syz [ 1889.703187][ T3849] usb 1-1: Manufacturer: syz [ 1889.734535][ T3849] usb 1-1: SerialNumber: syz [ 1889.848633][ T3849] usb 1-1: config 0 descriptor?? [ 1889.931777][ T6759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1890.070856][ T3849] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 1890.088663][ T3849] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 1890.108998][ T3849] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 88 [ 1890.205509][ T3849] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 1890.298121][ T3849] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1890.469935][ T3849] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 1890.509865][ T3849] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1890.585012][ T3849] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 1890.667190][ T3849] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1890.746523][ T3849] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 1890.785690][ T3849] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1890.890703][ T3849] usb 1-1: USB disconnect, device number 49 [ 1891.342158][ T3849] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1891.535605][ T3849] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1891.717784][ T3849] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1891.837359][ T3849] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1891.915071][ T3849] keyspan 1-1:0.107: device disconnected [ 1899.496747][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 1899.656174][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 1900.341885][ T33] audit: type=1326 audit(134219628.183:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.1.546" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 1911.541909][ T6828] pim6reg: entered allmulticast mode [ 1928.113193][ T6899] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 1928.114731][ T6899] netlink: 216 bytes leftover after parsing attributes in process `syz.0.557'. [ 1930.311929][ T6901] block nbd1: NBD_DISCONNECT [ 1931.375288][ T6904] netlink: 277 bytes leftover after parsing attributes in process `syz.0.559'. [ 1935.535360][ T33] audit: type=1326 audit(134219663.386:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.0.561" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 1939.924512][ T6924] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1940.064968][ T6924] netlink: 'syz.0.563': attribute type 6 has an invalid length. [ 1959.431855][ T8] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1960.175966][ T6977] netlink: 128 bytes leftover after parsing attributes in process `syz.1.577'. [ 1960.393520][ T8] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 1960.395432][ T8] usb 1-1: config 0 has no interface number 0 [ 1960.398906][ T8] usb 1-1: config 0 interface 5 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1960.400466][ T8] usb 1-1: config 0 interface 5 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1960.401991][ T8] usb 1-1: config 0 interface 5 has no altsetting 0 [ 1960.522547][ T8] usb 1-1: New USB device found, idVendor=1435, idProduct=d182, bcdDevice=ed.ec [ 1960.524091][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.528412][ T8] usb 1-1: Product: syz [ 1960.531027][ T8] usb 1-1: Manufacturer: 霉ㄹ翾鋦ૻ㰤瓿 [ 1960.532851][ T8] usb 1-1: SerialNumber: syz [ 1960.623706][ T8] usb 1-1: config 0 descriptor?? [ 1961.638868][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1961.674302][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.661451][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 1963.670178][ T6992] FAULT_INJECTION: forcing a failure. [ 1963.670178][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.671657][ T6992] CPU: 0 UID: 0 PID: 6992 Comm: syz.1.578 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 1963.672679][ T6992] Hardware name: riscv-virtio,qemu (DT) [ 1963.673342][ T6992] Call Trace: [ 1963.673975][ T6992] [] dump_backtrace+0x2e/0x3c [ 1963.674923][ T6992] [] show_stack+0x30/0x3c [ 1963.675750][ T6992] [] dump_stack_lvl+0x12e/0x1a6 [ 1963.676990][ T6992] [] dump_stack+0x1c/0x24 [ 1963.678023][ T6992] [] should_fail_ex+0x3f8/0x4e0 [ 1963.678965][ T6992] [] should_failslab+0xba/0x102 [ 1963.679932][ T6992] [] kmem_cache_alloc_node_noprof+0x27e/0x3e8 [ 1963.680865][ T6992] [] __alloc_skb+0x32a/0x428 [ 1963.681817][ T6992] [] ethnl_default_notify+0x2e8/0x6d0 [ 1963.682767][ T6992] [] ethtool_notify+0xe0/0x22c [ 1963.683666][ T6992] [] ethnl_netdev_event+0xfa/0x174 [ 1963.684982][ T6992] [] notifier_call_chain+0xa8/0x5f2 [ 1963.685954][ T6992] [] raw_notifier_call_chain+0x2a/0x38 [ 1963.687273][ T6992] [] call_netdevice_notifiers_info+0xbe/0x144 [ 1963.688290][ T6992] [] netdev_update_features+0xdc/0xe6 [ 1963.689268][ T6992] [] hsr_add_port+0x4d6/0x7e0 [ 1963.690177][ T6992] [] hsr_dev_finalize+0x4be/0xc0c [ 1963.691090][ T6992] [] hsr_newlink+0x3e2/0x8bc [ 1963.691973][ T6992] [] rtnl_newlink+0xbb6/0x1ab6 [ 1963.692861][ T6992] [] rtnetlink_rcv_msg+0x9e2/0xdbe [ 1963.693762][ T6992] [] netlink_rcv_skb+0x216/0x3dc [ 1963.694726][ T6992] [] rtnetlink_rcv+0x26/0x30 [ 1963.695571][ T6992] [] netlink_unicast+0x4f0/0x82c [ 1963.696944][ T6992] [] netlink_sendmsg+0x864/0xdc6 [ 1963.697942][ T6992] [] __sock_sendmsg+0xcc/0x160 [ 1963.698882][ T6992] [] ____sys_sendmsg+0x5ce/0x79e [ 1963.699752][ T6992] [] ___sys_sendmsg+0x144/0x1e6 [ 1963.700744][ T6992] [] __sys_sendmsg+0x188/0x22a [ 1963.701640][ T6992] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1963.702610][ T6992] [] syscall_handler+0x94/0x118 [ 1963.703475][ T6992] [] do_trap_ecall_u+0x1aa/0x216 [ 1963.704421][ T6992] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 1972.692131][ T7005] veth0_to_hsr: entered promiscuous mode [ 1972.771751][ T7005] veth0_to_hsr: left promiscuous mode [ 1974.117210][ T8] usb 1-1: USB disconnect, device number 50 [ 1983.999898][ T7032] usb usb1: usbfs: process 7032 (syz.0.586) did not claim interface 0 before use [ 2002.557636][ T6984] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2003.042351][ T6984] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2003.045278][ T6984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.049022][ T6984] usb 1-1: Product: syz [ 2003.050752][ T6984] usb 1-1: Manufacturer: syz [ 2003.057579][ T6984] usb 1-1: SerialNumber: syz [ 2003.221496][ T6984] usb 1-1: config 0 descriptor?? [ 2009.824148][ T6984] mos7840 1-1:0.0: required endpoints missing [ 2010.162676][ T6984] usb 1-1: USB disconnect, device number 51 [ 2015.220989][ T6984] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2015.500803][ T6984] usb 2-1: Using ep0 maxpacket: 32 [ 2015.579839][ T6984] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.583159][ T6984] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2015.585679][ T6984] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2015.600657][ T6984] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2015.602974][ T6984] usb 2-1: config 1 interface 1 has no altsetting 0 [ 2015.755468][ T6984] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2015.758776][ T6984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.760552][ T6984] usb 2-1: Product: syz [ 2015.773909][ T6984] usb 2-1: Manufacturer: syz [ 2015.775223][ T6984] usb 2-1: SerialNumber: syz [ 2018.105711][ T6984] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 2018.112620][ T6984] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 2018.714714][ T6984] usb 2-1: USB disconnect, device number 39 [ 2034.675888][ T7135] netlink: 'syz.1.609': attribute type 6 has an invalid length. [ 2037.932856][ T33] audit: type=1804 audit(134219765.777:9): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.611" name="/newroot/301/file1/file0" dev="ramfs" ino=11467 res=1 errno=0 [ 2044.957859][ T7153] fuse: Bad value for 'fd' [ 2045.909365][ T6984] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2046.374292][ T6984] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2046.387472][ T6984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.389713][ T6984] usb 2-1: Product: syz [ 2046.391434][ T6984] usb 2-1: Manufacturer: syz [ 2046.393167][ T6984] usb 2-1: SerialNumber: syz [ 2046.630964][ T6984] usb 2-1: config 0 descriptor?? [ 2050.163458][ T6984] mos7840 2-1:0.0: required endpoints missing [ 2050.281474][ T6984] usb 2-1: USB disconnect, device number 40 [ 2054.805136][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 2055.705857][ T7177] bond1: entered promiscuous mode [ 2055.842645][ T7196] gretap1: entered promiscuous mode [ 2055.855215][ T7196] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2056.245292][ T7177] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 2056.291410][ T7177] gretap1: left promiscuous mode [ 2056.574676][ T7177] bond1 (unregistering): Released all slaves [ 2059.414261][ T7252] fuse: Bad value for 'fd' [ 2063.133480][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 2065.082540][ T5765] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2066.059931][ T5765] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2066.061448][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.062818][ T5765] usb 2-1: Product: syz [ 2066.063921][ T5765] usb 2-1: Manufacturer: syz [ 2066.065063][ T5765] usb 2-1: SerialNumber: syz [ 2066.154318][ T5765] usb 2-1: config 0 descriptor?? [ 2068.383835][ T5765] mos7840 2-1:0.0: required endpoints missing [ 2068.567700][ T5765] usb 2-1: USB disconnect, device number 41 [ 2075.469368][ T7285] fuse: Bad value for 'fd' [ 2082.006015][ T7294] binder: 7293:7294 ioctl c0306201 0 returned -14 [ 2082.122280][ T7294] binder: 7293:7294 ioctl c0a85322 200002c0 returned -22 [ 2082.393907][ T7294] netlink: 176 bytes leftover after parsing attributes in process `syz.0.629'. [ 2086.084904][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 2086.087906][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 2086.580348][ T6047] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2087.218193][ T6047] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 2087.220023][ T6047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.221336][ T6047] usb 1-1: Product: syz [ 2087.222991][ T6047] usb 1-1: Manufacturer: syz [ 2087.224109][ T6047] usb 1-1: SerialNumber: syz [ 2087.302610][ T6047] usb 1-1: config 0 descriptor?? [ 2088.919710][ T7307] Dead loop on virtual device ipvlan1, fix it urgently! [ 2088.920485][ T7307] Insufficient stack space to handle exception! [ 2088.921006][ T7307] Task stack: [0xff200000032b0000..0xff200000032b8000] [ 2088.921223][ T7307] Overflow stack: [0xff6000005cdbe070..0xff6000005cdbf070] [ 2088.921552][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.1.633 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 2088.921973][ T7307] Hardware name: riscv-virtio,qemu (DT) [ 2088.922175][ T7307] epc : __sanitizer_cov_trace_pc+0x2/0x7a [ 2088.922585][ T7307] ra : put_dec+0x22/0xae [ 2088.922925][ T7307] epc : ffffffff804b655c ra : ffffffff8619a71a sp : ff200000032afff0 [ 2088.923221][ T7307] gp : ffffffff899f4f80 tp : 0000000000000000 t0 : f2d34f20a8eedec7 [ 2088.923484][ T7307] t1 : ff200000032b0320 t2 : 0000000000000233 s0 : ff200000032b0040 [ 2088.923751][ T7307] s1 : 0000000000000828 a0 : ff200000032b0120 a1 : 0000000000000828 [ 2088.923991][ T7307] a2 : 0000000000080000 a3 : ffffffff8619b136 a4 : ff20000007c7eb80 [ 2088.924224][ T7307] a5 : 0000000000084b80 a6 : 0000000000000003 a7 : ff200000032b04a7 [ 2088.924452][ T7307] s2 : ff200000032b0120 s3 : 0000000005f5e000 s4 : ff200000832b054f [ 2088.924699][ T7307] s5 : 000000000000000a s6 : ff200000032b02a0 s7 : ff200000032b0180 [ 2088.924934][ T7307] s8 : ffffffff8753c304 s9 : 0000000000000009 s10: 000000007fffffff [ 2088.925163][ T7307] s11: 0000000000000000 t3 : 1fe4000000656064 t4 : ffe3ffff00656094 [ 2088.925422][ T7307] t5 : ffe3ffff00656095 t6 : ff200000032b0551 [ 2088.925632][ T7307] status: 0000000200000120 badaddr: ff200000032afff0 cause: 000000000000000f [ 2088.926465][ T7307] Kernel panic - not syncing: Kernel stack overflow [ 2088.926925][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.1.633 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 2088.927241][ T7307] Hardware name: riscv-virtio,qemu (DT) [ 2088.927379][ T7307] Call Trace: [ 2088.927556][ T7307] [] dump_backtrace+0x2e/0x3c [ 2088.927911][ T7307] [] show_stack+0x30/0x3c [ 2088.928187][ T7307] [] dump_stack_lvl+0x110/0x1a6 [ 2088.928563][ T7307] [] dump_stack+0x1c/0x24 [ 2088.928930][ T7307] [] panic+0x38c/0x86e [ 2088.929210][ T7307] [] handle_bad_stack+0xd4/0xfc [ 2088.929514][ T7307] [] put_dec+0x22/0xae [ 2088.930083][ T7307] SMP: stopping secondary CPUs VM DIAGNOSIS: 10:40:25 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff802d758a mhartid 0000000000000000 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000220 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e63e4 vstvec 0000000000000000 mepc ffffffff8008378a sepc ffffffff804b655c vsepc 0000000000000000 mcause 0000000000000009 scause 000000000000000f vscause 0000000000000000 mtval 0000000000000000 stval ff200000032afff0 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a04e7000000b187c x0/zero 0000000000000000 x1/ra ffffffff802d7586 x2/sp ff6000005cdbeb70 x3/gp ffffffff899f4f80 x4/tp ff6000001a3b3480 x5/t0 2000000000000000 x6/t1 0000000000000048 x7/t2 2065726177647261 x8/s0 ff6000005cdbed10 x9/s1 ffffffff88d4dc00 x10/a0 0000000000000007 x11/a1 0000000000000000 x12/a2 0000000000080000 x13/a3 ffffffff802d7586 x14/a4 ff20000007d213c0 x15/a5 00000000001273c0 x16/a6 0000000000000003 x17/a7 0000000000000038 x18/s2 1ffffffff11a9b8b x19/s3 0000000200000120 x20/s4 0000000000000000 x21/s5 0000000000000000 x22/s6 ff6000005cdbec40 x23/s7 ffffffff88d4dc58 x24/s8 1ffffffff11a9b8c x25/s9 ffffffff88d4dc60 x26/s10 dfffffff00000000 x27/s11 ff6000005cdbeca0 x28/t3 ffffffff90badcb7 x29/t4 ffffffff90badcb7 x30/t5 ffffffff90badcb8 x31/t6 ffffffff90badcb7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc ffffffff8007bb0a mhartid 0000000000000001 mstatus 0000000a000001a0 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000020 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e63e4 vstvec 0000000000000000 mepc ffffffff802b0856 sepc ffffffff861e4106 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000001 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch 0000000000000000 satp a0134000000ae642 x0/zero 0000000000000000 x1/ra ffffffff8007bb06 x2/sp ff20000000017e70 x3/gp ffffffff899f4f80 x4/tp ff60000012ea0000 x5/t0 4b952e4da9267483 x6/t1 fffffffef135f4d0 x7/t2 0000000000000005 x8/s0 ff20000000017ea0 x9/s1 ffffffff8660b548 x10/a0 0000000000000001 x11/a1 0000000000000004 x12/a2 00000000000f0000 x13/a3 ffffffff8007bb06 x14/a4 0000000000010000 x15/a5 ff60000012ea0000 x16/a6 fffffffef135f4d1 x17/a7 0000000000000003 x18/s2 0000000000000001 x19/s3 ffffffff90da1fc8 x20/s4 ff6000001147e400 x21/s5 0000000000000004 x22/s6 ffffffff86651a60 x23/s7 ffffffff86459000 x24/s8 ffffffff8007b8f6 x25/s9 1ffffffff1001618 x26/s10 00000000ffffffff x27/s11 ffffffff89afa7c0 x28/t3 ff60000012ea0b20 x29/t4 fffffffef135f4d0 x30/t5 fffffffef135f4d1 x31/t6 0000000000000009 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000