last executing test programs: 8.552617693s ago: executing program 0 (id=3459): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x2000) ioctl$EVIOCGVERSION(r0, 0x5452, &(0x7f0000002200)=""/188) 7.06698582s ago: executing program 0 (id=3460): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x20, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c) 6.679386631s ago: executing program 0 (id=3461): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x0, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.050416451s ago: executing program 0 (id=3464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x40000) syz_emit_ethernet(0xfc1, &(0x7f0000001840)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, {[@cipso={0x86, 0xd, 0x3, [{0x0, 0x7, "8fc443b02d"}]}]}}, "dd9dec79219eb549dbd024c796335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c7"}}}}, 0x0) 5.787723671s ago: executing program 0 (id=3466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x2) 4.598183086s ago: executing program 1 (id=3473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x0) 4.489712794s ago: executing program 1 (id=3474): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x4000}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) 4.049880229s ago: executing program 1 (id=3475): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4040) 3.020871791s ago: executing program 1 (id=3476): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000001"], 0x0) 2.680419397s ago: executing program 1 (id=3477): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x11c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, r2, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xfffe}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0x81, @remote, 0xc}}}, 0x84) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x4, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "591d7cdef587db96689afc7f9fcdd57c"}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) 1.00115631s ago: executing program 0 (id=3478): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffff08, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000b8fb9a0565800000000f20000"], &(0x7f00000003c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x2a, 0x2, 0x0) 0s ago: executing program 1 (id=3479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x4, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x2, 0x0}]}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r5, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8}], 0x1c) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="00aea9cb2aa0befd3800fdff369cff704816ca2452867078f707a1978f2b0fa2756f3f319fb3a6c714bace795437d63c1506fbc0adea238d9bb27d12366d80f1a28f022feb6c03f8434c9910779d22a3aa3360ef11bb2217f5936ce631fb80aece24a61fbd2499f3d70563310d56d636224ab2916340219853066b", @ANYRES16=r5], 0x28}}, 0x40044) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}], 0x10) r10 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(r9, &(0x7f00000003c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000400000000040000000000400009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x25, &(0x7f0000000100)=""/95, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xe, "57dee2a603ae81f26908efea4644"}, &(0x7f0000000200)=0x16) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r11, 0x7}, 0x8) dup3(r3, r10, 0x0) mq_unlink(&(0x7f0000000180)='\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x22010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): .062099][ T8275] dump_backtrace+0x94/0xec [ 1371.062819][ T8275] show_stack+0x18/0x24 [ 1371.063392][ T8275] dump_stack_lvl+0x78/0x90 [ 1371.064049][ T8275] dump_stack+0x18/0x24 [ 1371.064746][ T8275] should_fail_ex+0x18c/0x1e0 [ 1371.065488][ T8275] should_failslab+0x54/0x80 [ 1371.066367][ T8275] kmem_cache_alloc_lru_noprof+0x5c/0x2d0 [ 1371.067089][ T8275] sock_alloc_inode+0x24/0x78 [ 1371.067762][ T8275] alloc_inode+0x28/0xd0 [ 1371.068428][ T8275] new_inode_pseudo+0x10/0x1c [ 1371.069100][ T8275] sock_alloc+0x1c/0x8c [ 1371.069763][ T8275] __sock_create+0xbc/0x244 [ 1371.070469][ T8275] __sys_socketpair+0x16c/0x2d0 [ 1371.071176][ T8275] __arm64_sys_socketpair+0x24/0x34 [ 1371.072010][ T8275] invoke_syscall+0x48/0x110 [ 1371.072887][ T8275] el0_svc_common.constprop.0+0x40/0xe0 [ 1371.073607][ T8275] do_el0_svc+0x1c/0x28 [ 1371.074232][ T8275] el0_svc+0x34/0xec [ 1371.074882][ T8275] el0t_64_sync_handler+0x100/0x12c [ 1371.075805][ T8275] el0t_64_sync+0x19c/0x1a0 [ 1371.077862][ T8275] socket: no more sockets [ 1371.552401][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.588796][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.092364][ T8371] input: syz1 as /devices/virtual/input/input56 [ 1397.742929][ T8443] input: syz1 as /devices/virtual/input/input57 [ 1409.596938][ T4815] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1409.756839][ T4815] usb 1-1: device descriptor read/64, error -71 [ 1409.997440][ T4815] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1410.137061][ T4815] usb 1-1: device descriptor read/64, error -71 [ 1410.250199][ T4815] usb usb1-port1: attempt power cycle [ 1410.618953][ T4815] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1410.652585][ T4815] usb 1-1: device descriptor read/8, error -71 [ 1410.907900][ T4815] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1410.942553][ T4815] usb 1-1: device descriptor read/8, error -71 [ 1411.050165][ T4815] usb usb1-port1: unable to enumerate USB device [ 1420.185810][ T8480] input: syz1 as /devices/virtual/input/input58 [ 1435.228566][ T3263] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1435.397495][ T3263] usb 1-1: device descriptor read/64, error -71 [ 1435.657582][ T3263] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1435.827433][ T3263] usb 1-1: device descriptor read/64, error -71 [ 1435.965336][ T3263] usb usb1-port1: attempt power cycle [ 1436.396946][ T3263] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 1436.439407][ T3263] usb 1-1: device descriptor read/8, error -71 [ 1436.687266][ T3263] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1436.753457][ T3263] usb 1-1: device descriptor read/8, error -71 [ 1436.867239][ T3263] usb usb1-port1: unable to enumerate USB device [ 1438.617066][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.659446][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.327316][ T6554] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1459.588201][ T6554] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 45942, setting to 1024 [ 1459.589799][ T6554] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1459.590882][ T6554] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 8 [ 1459.591862][ T6554] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1459.722374][ T6554] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.723539][ T6554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.724484][ T6554] usb 1-1: Product: syz [ 1459.725146][ T6554] usb 1-1: Manufacturer: ோ檂௙嚙꭭ᰪ섉࿖ㄉ㘤㴏 [ 1459.732656][ T6554] usb 1-1: SerialNumber: syz [ 1459.783911][ T8655] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1459.797651][ T8655] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1460.097308][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.163184][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.232261][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.284134][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.931986][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.998740][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.052094][ T6554] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1462.092745][ T6554] usb 1-1: USB disconnect, device number 49 [ 1463.354351][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.410639][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.435699][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.494979][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.282710][ T8704] FAULT_INJECTION: forcing a failure. [ 1466.282710][ T8704] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.283987][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.0.1577 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1466.285237][ T8704] Tainted: [B]=BAD_PAGE [ 1466.285895][ T8704] Hardware name: linux,dummy-virt (DT) [ 1466.286629][ T8704] Call trace: [ 1466.287170][ T8704] dump_backtrace+0x94/0xec [ 1466.287874][ T8704] show_stack+0x18/0x24 [ 1466.288547][ T8704] dump_stack_lvl+0x78/0x90 [ 1466.289259][ T8704] dump_stack+0x18/0x24 [ 1466.289910][ T8704] should_fail_ex+0x18c/0x1e0 [ 1466.290610][ T8704] should_failslab+0x54/0x80 [ 1466.291298][ T8704] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1466.292094][ T8704] dst_alloc+0x40/0x98 [ 1466.292935][ T8704] rt_dst_alloc+0x40/0xac [ 1466.293566][ T8704] ip_route_output_key_hash_rcu+0x1b8/0x794 [ 1466.294312][ T8704] ip_route_output_key_hash+0x68/0xa4 [ 1466.295032][ T8704] tcp_v4_connect+0x298/0x4a4 [ 1466.295676][ T8704] __inet_stream_connect+0xf8/0x3cc [ 1466.296577][ T8704] inet_stream_connect+0x48/0x70 [ 1466.297244][ T8704] __sys_connect_file+0x80/0xb4 [ 1466.297852][ T8704] __sys_connect+0xac/0xcc [ 1466.298567][ T8704] __arm64_sys_connect+0x20/0x30 [ 1466.299284][ T8704] invoke_syscall+0x48/0x110 [ 1466.299977][ T8704] el0_svc_common.constprop.0+0x40/0xe0 [ 1466.300783][ T8704] do_el0_svc+0x1c/0x28 [ 1466.301446][ T8704] el0_svc+0x34/0xec [ 1466.302091][ T8704] el0t_64_sync_handler+0x100/0x12c [ 1466.302799][ T8704] el0t_64_sync+0x19c/0x1a0 [ 1468.203721][ T8721] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1470.266814][ T8734] FAULT_INJECTION: forcing a failure. [ 1470.266814][ T8734] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.267786][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.1.1589 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1470.268671][ T8734] Tainted: [B]=BAD_PAGE [ 1470.269006][ T8734] Hardware name: linux,dummy-virt (DT) [ 1470.269433][ T8734] Call trace: [ 1470.269736][ T8734] dump_backtrace+0x94/0xec [ 1470.270186][ T8734] show_stack+0x18/0x24 [ 1470.270560][ T8734] dump_stack_lvl+0x78/0x90 [ 1470.270968][ T8734] dump_stack+0x18/0x24 [ 1470.271485][ T8734] should_fail_ex+0x18c/0x1e0 [ 1470.271985][ T8734] should_failslab+0x54/0x80 [ 1470.272554][ T8734] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1470.272999][ T8734] dst_alloc+0x40/0x98 [ 1470.273378][ T8734] rt_dst_alloc+0x40/0xac [ 1470.273754][ T8734] ip_route_output_key_hash_rcu+0x1b8/0x794 [ 1470.274197][ T8734] ip_route_output_flow+0x68/0xe0 [ 1470.274614][ T8734] tcp_v4_connect+0x124/0x4a4 [ 1470.274987][ T8734] __inet_stream_connect+0xf8/0x3cc [ 1470.275520][ T8734] inet_stream_connect+0x48/0x70 [ 1470.275969][ T8734] __sys_connect_file+0x80/0xb4 [ 1470.276699][ T8734] __sys_connect+0xac/0xcc [ 1470.277168][ T8734] __arm64_sys_connect+0x20/0x30 [ 1470.277694][ T8734] invoke_syscall+0x48/0x110 [ 1470.278183][ T8734] el0_svc_common.constprop.0+0x40/0xe0 [ 1470.278690][ T8734] do_el0_svc+0x1c/0x28 [ 1470.279198][ T8734] el0_svc+0x34/0xec [ 1470.279675][ T8734] el0t_64_sync_handler+0x100/0x12c [ 1470.280056][ T8734] el0t_64_sync+0x19c/0x1a0 [ 1471.947074][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.969364][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.273914][ T8764] FAULT_INJECTION: forcing a failure. [ 1472.273914][ T8764] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.275615][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.1.1600 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1472.277001][ T8764] Tainted: [B]=BAD_PAGE [ 1472.278195][ T8764] Hardware name: linux,dummy-virt (DT) [ 1472.278870][ T8764] Call trace: [ 1472.279384][ T8764] dump_backtrace+0x94/0xec [ 1472.280028][ T8764] show_stack+0x18/0x24 [ 1472.280694][ T8764] dump_stack_lvl+0x78/0x90 [ 1472.281393][ T8764] dump_stack+0x18/0x24 [ 1472.282073][ T8764] should_fail_ex+0x18c/0x1e0 [ 1472.282791][ T8764] should_failslab+0x54/0x80 [ 1472.283503][ T8764] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1472.284310][ T8764] __inet_hash_connect+0x204/0x6a0 [ 1472.285645][ T8764] inet_hash_connect+0x38/0xf4 [ 1472.286590][ T8764] tcp_v4_connect+0x1d8/0x4a4 [ 1472.288649][ T8764] __inet_stream_connect+0xf8/0x3cc [ 1472.289550][ T8764] inet_stream_connect+0x48/0x70 [ 1472.290995][ T8764] __sys_connect_file+0x80/0xb4 [ 1472.291736][ T8764] __sys_connect+0xac/0xcc [ 1472.293108][ T8764] __arm64_sys_connect+0x20/0x30 [ 1472.294452][ T8764] invoke_syscall+0x48/0x110 [ 1472.295092][ T8764] el0_svc_common.constprop.0+0x40/0xe0 [ 1472.295846][ T8764] do_el0_svc+0x1c/0x28 [ 1472.296698][ T8764] el0_svc+0x34/0xec [ 1472.297521][ T8764] el0t_64_sync_handler+0x100/0x12c [ 1472.298284][ T8764] el0t_64_sync+0x19c/0x1a0 [ 1473.857181][ T8783] FAULT_INJECTION: forcing a failure. [ 1473.857181][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.857960][ T8783] CPU: 1 UID: 0 PID: 8783 Comm: syz.1.1607 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1473.858723][ T8783] Tainted: [B]=BAD_PAGE [ 1473.859216][ T8783] Hardware name: linux,dummy-virt (DT) [ 1473.859615][ T8783] Call trace: [ 1473.860020][ T8783] dump_backtrace+0x94/0xec [ 1473.860511][ T8783] show_stack+0x18/0x24 [ 1473.860964][ T8783] dump_stack_lvl+0x78/0x90 [ 1473.861328][ T8783] dump_stack+0x18/0x24 [ 1473.861672][ T8783] should_fail_ex+0x18c/0x1e0 [ 1473.862107][ T8783] should_failslab+0x54/0x80 [ 1473.862553][ T8783] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1473.863007][ T8783] inet_bind2_bucket_create+0x30/0xe4 [ 1473.863443][ T8783] __inet_hash_connect+0x488/0x6a0 [ 1473.863816][ T8783] inet_hash_connect+0x38/0xf4 [ 1473.864404][ T8783] tcp_v4_connect+0x1d8/0x4a4 [ 1473.864998][ T8783] __inet_stream_connect+0xf8/0x3cc [ 1473.865521][ T8783] inet_stream_connect+0x48/0x70 [ 1473.866052][ T8783] __sys_connect_file+0x80/0xb4 [ 1473.866685][ T8783] __sys_connect+0xac/0xcc [ 1473.867154][ T8783] __arm64_sys_connect+0x20/0x30 [ 1473.867606][ T8783] invoke_syscall+0x48/0x110 [ 1473.867965][ T8783] el0_svc_common.constprop.0+0x40/0xe0 [ 1473.868445][ T8783] do_el0_svc+0x1c/0x28 [ 1473.868792][ T8783] el0_svc+0x34/0xec [ 1473.869155][ T8783] el0t_64_sync_handler+0x100/0x12c [ 1473.869528][ T8783] el0t_64_sync+0x19c/0x1a0 [ 1475.747748][ T4359] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1475.900938][ T4359] usb 1-1: device descriptor read/64, error -71 [ 1476.150430][ T4359] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1476.286632][ T4359] usb 1-1: device descriptor read/64, error -71 [ 1476.398205][ T4359] usb usb1-port1: attempt power cycle [ 1476.756925][ T4359] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1476.781058][ T4359] usb 1-1: device descriptor read/8, error -71 [ 1477.017281][ T4359] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1477.043512][ T4359] usb 1-1: device descriptor read/8, error -71 [ 1477.148464][ T4359] usb usb1-port1: unable to enumerate USB device [ 1480.072633][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.118996][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.488323][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.531455][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.604686][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.609349][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.614091][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.629663][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.650732][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.655116][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.689753][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.701735][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.769851][ T8877] input: syz0 as /devices/virtual/input/input59 [ 1486.786565][ T53] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1486.947797][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 1487.101165][ T53] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1487.102364][ T53] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1487.150538][ T53] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.40 [ 1487.151595][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.152400][ T53] usb 1-1: Product: ⵄ媎雠㡛煏潶㾞ꖰ搢ꑱ᱂齸遼䟪羕欷ﴓ郍炄눸ㅮ垄꼆뎈⸻Εᏽ刏獚ꕅꂿဘ瘜汴垐ⅆ⮢숈ᱱ㨍띏滋휬⡊겈 [ 1487.153625][ T53] usb 1-1: Manufacturer: ᠌ [ 1487.154307][ T53] usb 1-1: SerialNumber: 將붙ᨿ騊璔珳멼䛅馅쐜섗槽뼳쁣䫻駴溡൩恚ڋ㈠㸡⁄羏盌䧾櫘䆑戌獑ⳗ펶曙觅､䃈ե멟순挊醓廚䋾艐鴭ꮎ黂슆쿕舘᳼㖦꽊坩崟䘢Ꚋ䣕뗰﵈힦琙ᴉ罷힆魦♎䨆⧀ᬿ깦衮쑺㯯竞ꃈ⾾ᰈ療툶쿨狺ᨮ䦷劓㐐蓮⇩頽뛼⊕蝛뻣ﳽꂂ蔳蟍⺔ [ 1488.126996][ T53] usbhid 1-1:1.0: can't add hid device: -71 [ 1488.128359][ T53] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1488.158121][ T53] usb 1-1: USB disconnect, device number 54 [ 1489.728335][ T8907] input: syz1 as /devices/virtual/input/input60 [ 1499.592942][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.648686][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.878175][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.924802][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.033052][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.102274][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.837494][ T8978] input: syz1 as /devices/virtual/input/input61 [ 1519.606909][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.670604][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.057067][ T53] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1520.243186][ T9052] input: syz1 as /devices/virtual/input/input62 [ 1520.287182][ T53] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 45942, setting to 1024 [ 1520.291454][ T53] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1520.292532][ T53] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 8 [ 1520.293755][ T53] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1520.368843][ T53] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1520.369495][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.369953][ T53] usb 1-1: Product: syz [ 1520.370291][ T53] usb 1-1: Manufacturer: syz [ 1520.370648][ T53] usb 1-1: SerialNumber: syz [ 1520.389879][ T9049] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1520.391325][ T9049] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1520.655691][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.722419][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.836567][ T53] usb 1-1: USB disconnect, device number 55 [ 1523.327617][ T53] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1523.537649][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 1523.613616][ T53] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1523.615103][ T53] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1523.653533][ T53] usb 1-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.40 [ 1523.655031][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.663404][ T53] usb 1-1: Product: syz [ 1523.664360][ T53] usb 1-1: Manufacturer: 烚阕㙶ⷣ붺縞ַჍꑤ갑⋧凸딼䲓ަ㍺驴툑枳雩⸬⦼뭮퐆ಊ鷘藶⵵懙尽硕布뛐屲琡⤚ഭ띚 [ 1523.669895][ T53] usb 1-1: SerialNumber: syz [ 1523.693078][ T53] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1523.694493][ T53] usb 1-1: no configuration chosen from 1 choice [ 1531.920975][ T9070] FAULT_INJECTION: forcing a failure. [ 1531.920975][ T9070] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1531.922506][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.1.1677 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1531.923810][ T9070] Tainted: [B]=BAD_PAGE [ 1531.924394][ T9070] Hardware name: linux,dummy-virt (DT) [ 1531.925056][ T9070] Call trace: [ 1531.925573][ T9070] dump_backtrace+0x94/0xec [ 1531.926638][ T9070] show_stack+0x18/0x24 [ 1531.927382][ T9070] dump_stack_lvl+0x78/0x90 [ 1531.928081][ T9070] dump_stack+0x18/0x24 [ 1531.928753][ T9070] should_fail_ex+0x18c/0x1e0 [ 1531.929415][ T9070] should_fail_alloc_page+0x60/0x78 [ 1531.930137][ T9070] __alloc_pages_noprof+0xdc/0xd34 [ 1531.931241][ T9070] alloc_pages_mpol_noprof+0x8c/0x230 [ 1531.932059][ T9070] folio_alloc_mpol_noprof+0x14/0x64 [ 1531.932792][ T9070] vma_alloc_folio_noprof+0x7c/0xcc [ 1531.933492][ T9070] vma_alloc_zeroed_movable_folio+0x3c/0x48 [ 1531.934249][ T9070] __handle_mm_fault+0x13b4/0x1990 [ 1531.934955][ T9070] handle_mm_fault+0x164/0x314 [ 1531.935630][ T9070] do_page_fault+0x114/0x4f4 [ 1531.936559][ T9070] do_translation_fault+0xac/0xbc [ 1531.937259][ T9070] do_mem_abort+0x44/0x94 [ 1531.938140][ T9070] el0_da+0x78/0xa8 [ 1531.938821][ T9070] el0t_64_sync_handler+0xb8/0x12c [ 1531.939477][ T9070] el0t_64_sync+0x19c/0x1a0 [ 1531.943658][ T9070] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1531.962287][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.000245][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.493062][ T9072] FAULT_INJECTION: forcing a failure. [ 1532.493062][ T9072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.497525][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.1.1678 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1532.499038][ T9072] Tainted: [B]=BAD_PAGE [ 1532.499564][ T9072] Hardware name: linux,dummy-virt (DT) [ 1532.500104][ T9072] Call trace: [ 1532.500656][ T9072] dump_backtrace+0x94/0xec [ 1532.501292][ T9072] show_stack+0x18/0x24 [ 1532.501948][ T9072] dump_stack_lvl+0x78/0x90 [ 1532.502742][ T9072] dump_stack+0x18/0x24 [ 1532.503535][ T9072] should_fail_ex+0x18c/0x1e0 [ 1532.504154][ T9072] should_fail+0x14/0x20 [ 1532.504737][ T9072] should_fail_usercopy+0x1c/0x28 [ 1532.505278][ T9072] __sys_bpf+0xd8/0x1fcc [ 1532.505998][ T9072] __arm64_sys_bpf+0x24/0x34 [ 1532.507671][ T9072] invoke_syscall+0x48/0x110 [ 1532.508382][ T9072] el0_svc_common.constprop.0+0x40/0xe0 [ 1532.509183][ T9072] do_el0_svc+0x1c/0x28 [ 1532.509867][ T9072] el0_svc+0x34/0xec [ 1532.510449][ T9072] el0t_64_sync_handler+0x100/0x12c [ 1532.511155][ T9072] el0t_64_sync+0x19c/0x1a0 [ 1533.053777][ T53] usb 1-1: USB disconnect, device number 56 [ 1533.407742][ T9082] input: syz1 as /devices/virtual/input/input63 [ 1534.418020][ T9090] FAULT_INJECTION: forcing a failure. [ 1534.418020][ T9090] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.419487][ T9090] CPU: 0 UID: 0 PID: 9090 Comm: syz.0.1684 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1534.420661][ T9090] Tainted: [B]=BAD_PAGE [ 1534.421258][ T9090] Hardware name: linux,dummy-virt (DT) [ 1534.421891][ T9090] Call trace: [ 1534.422431][ T9090] dump_backtrace+0x94/0xec [ 1534.423192][ T9090] show_stack+0x18/0x24 [ 1534.423816][ T9090] dump_stack_lvl+0x78/0x90 [ 1534.424618][ T9090] dump_stack+0x18/0x24 [ 1534.425335][ T9090] should_fail_ex+0x18c/0x1e0 [ 1534.426418][ T9090] should_failslab+0x54/0x80 [ 1534.427406][ T9090] __kmalloc_noprof+0xa8/0x360 [ 1534.428180][ T9090] sve_alloc+0x5c/0x70 [ 1534.429188][ T9090] do_sve_acc+0x50/0x120 [ 1534.430163][ T9090] el0_sve_acc+0x78/0xa8 [ 1534.430894][ T9090] el0t_64_sync_handler+0xf4/0x12c [ 1534.431636][ T9090] el0t_64_sync+0x19c/0x1a0 [ 1536.696869][ T53] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1536.935121][ T53] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 45942, setting to 1024 [ 1536.939743][ T53] usb 1-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1536.940920][ T53] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1536.942146][ T53] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1536.996520][ T53] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1536.997829][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.998644][ T53] usb 1-1: Product: syz [ 1537.000443][ T53] usb 1-1: Manufacturer: syz [ 1537.001234][ T53] usb 1-1: SerialNumber: syz [ 1537.224264][ T9110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1537.261558][ T9110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1537.524343][ T53] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1537.552050][ T53] usb 1-1: USB disconnect, device number 57 [ 1538.226757][ T5673] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1538.366497][ T5673] usb 1-1: device descriptor read/64, error -71 [ 1538.617472][ T5673] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1538.756600][ T5673] usb 1-1: device descriptor read/64, error -71 [ 1538.867917][ T5673] usb usb1-port1: attempt power cycle [ 1539.216855][ T5673] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1539.249584][ T5673] usb 1-1: device descriptor read/8, error -71 [ 1539.487179][ T5673] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1539.547251][ T5673] usb 1-1: device descriptor read/8, error -71 [ 1539.658503][ T5673] usb usb1-port1: unable to enumerate USB device [ 1548.477801][ T9133] input: syz1 as /devices/virtual/input/input64 [ 1550.647292][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1550.691732][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.941704][ T9159] FAULT_INJECTION: forcing a failure. [ 1554.941704][ T9159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.943164][ T9159] CPU: 0 UID: 0 PID: 9159 Comm: syz.1.1706 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1554.944568][ T9159] Tainted: [B]=BAD_PAGE [ 1554.945117][ T9159] Hardware name: linux,dummy-virt (DT) [ 1554.945857][ T9159] Call trace: [ 1554.946560][ T9159] dump_backtrace+0x94/0xec [ 1554.947509][ T9159] show_stack+0x18/0x24 [ 1554.948169][ T9159] dump_stack_lvl+0x78/0x90 [ 1554.948972][ T9159] dump_stack+0x18/0x24 [ 1554.949642][ T9159] should_fail_ex+0x18c/0x1e0 [ 1554.950284][ T9159] should_fail+0x14/0x20 [ 1554.951142][ T9159] should_fail_usercopy+0x1c/0x28 [ 1554.951907][ T9159] _copy_from_iter+0x5c/0x68c [ 1554.952721][ T9159] skb_copy_datagram_from_iter+0x80/0x20c [ 1554.953524][ T9159] unix_stream_sendmsg+0x18c/0x5c0 [ 1554.954244][ T9159] __sock_sendmsg+0x54/0x60 [ 1554.954909][ T9159] ____sys_sendmsg+0x274/0x2ac [ 1554.955560][ T9159] ___sys_sendmsg+0xac/0x100 [ 1554.956518][ T9159] __sys_sendmsg+0x84/0xe0 [ 1554.957298][ T9159] __arm64_sys_sendmsg+0x24/0x30 [ 1554.958047][ T9159] invoke_syscall+0x48/0x110 [ 1554.958690][ T9159] el0_svc_common.constprop.0+0x40/0xe0 [ 1554.959468][ T9159] do_el0_svc+0x1c/0x28 [ 1554.960133][ T9159] el0_svc+0x34/0xec [ 1554.960854][ T9159] el0t_64_sync_handler+0x100/0x12c [ 1554.961883][ T9159] el0t_64_sync+0x19c/0x1a0 [ 1559.261122][ T9175] FAULT_INJECTION: forcing a failure. [ 1559.261122][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.262475][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.1.1711 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1559.263831][ T9175] Tainted: [B]=BAD_PAGE [ 1559.264539][ T9175] Hardware name: linux,dummy-virt (DT) [ 1559.265124][ T9175] Call trace: [ 1559.265649][ T9175] dump_backtrace+0x94/0xec [ 1559.266595][ T9175] show_stack+0x18/0x24 [ 1559.267258][ T9175] dump_stack_lvl+0x78/0x90 [ 1559.268049][ T9175] dump_stack+0x18/0x24 [ 1559.268740][ T9175] should_fail_ex+0x18c/0x1e0 [ 1559.269386][ T9175] should_failslab+0x54/0x80 [ 1559.270049][ T9175] kmem_cache_alloc_node_noprof+0x5c/0x2e4 [ 1559.270823][ T9175] __alloc_skb+0x150/0x194 [ 1559.271534][ T9175] alloc_skb_with_frags+0x50/0x1e4 [ 1559.272283][ T9175] sock_alloc_send_pskb+0x284/0x2b4 [ 1559.273030][ T9175] unix_stream_sendmsg+0x440/0x5c0 [ 1559.273724][ T9175] __sock_sendmsg+0x54/0x60 [ 1559.274399][ T9175] ____sys_sendmsg+0x274/0x2ac [ 1559.275239][ T9175] ___sys_sendmsg+0xac/0x100 [ 1559.275919][ T9175] __sys_sendmsg+0x84/0xe0 [ 1559.276708][ T9175] __arm64_sys_sendmsg+0x24/0x30 [ 1559.277491][ T9175] invoke_syscall+0x48/0x110 [ 1559.278238][ T9175] el0_svc_common.constprop.0+0x40/0xe0 [ 1559.279009][ T9175] do_el0_svc+0x1c/0x28 [ 1559.279679][ T9175] el0_svc+0x34/0xec [ 1559.280318][ T9175] el0t_64_sync_handler+0x100/0x12c [ 1559.280994][ T9175] el0t_64_sync+0x19c/0x1a0 [ 1560.084497][ T9181] FAULT_INJECTION: forcing a failure. [ 1560.084497][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.089500][ T9181] CPU: 1 UID: 0 PID: 9181 Comm: syz.1.1714 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1560.092528][ T9181] Tainted: [B]=BAD_PAGE [ 1560.093664][ T9181] Hardware name: linux,dummy-virt (DT) [ 1560.095086][ T9181] Call trace: [ 1560.096175][ T9181] dump_backtrace+0x94/0xec [ 1560.097794][ T9181] show_stack+0x18/0x24 [ 1560.098871][ T9181] dump_stack_lvl+0x78/0x90 [ 1560.100667][ T9181] dump_stack+0x18/0x24 [ 1560.101409][ T9181] should_fail_ex+0x18c/0x1e0 [ 1560.102789][ T9181] should_failslab+0x54/0x80 [ 1560.104258][ T9181] __kmalloc_noprof+0xa8/0x360 [ 1560.105565][ T9181] tomoyo_encode2+0x7c/0x140 [ 1560.106499][ T9181] tomoyo_realpath_from_path+0x9c/0x1d0 [ 1560.107262][ T9181] tomoyo_path_number_perm+0xd8/0x224 [ 1560.108075][ T9181] tomoyo_file_ioctl+0x1c/0x28 [ 1560.108820][ T9181] security_file_ioctl+0x8c/0x19c [ 1560.109537][ T9181] __arm64_sys_ioctl+0x4c/0xf0 [ 1560.110276][ T9181] invoke_syscall+0x48/0x110 [ 1560.111021][ T9181] el0_svc_common.constprop.0+0x40/0xe0 [ 1560.112583][ T9181] do_el0_svc+0x1c/0x28 [ 1560.113973][ T9181] el0_svc+0x34/0xec [ 1560.115139][ T9181] el0t_64_sync_handler+0x100/0x12c [ 1560.116985][ T9181] el0t_64_sync+0x19c/0x1a0 [ 1560.124429][ T9181] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1581.436888][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.489250][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.939329][ T9343] FAULT_INJECTION: forcing a failure. [ 1581.939329][ T9343] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1581.940643][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: syz.1.1770 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1581.941871][ T9343] Tainted: [B]=BAD_PAGE [ 1581.942435][ T9343] Hardware name: linux,dummy-virt (DT) [ 1581.944081][ T9343] Call trace: [ 1581.944975][ T9343] dump_backtrace+0x94/0xec [ 1581.945702][ T9343] show_stack+0x18/0x24 [ 1581.946596][ T9343] dump_stack_lvl+0x78/0x90 [ 1581.947270][ T9343] dump_stack+0x18/0x24 [ 1581.947954][ T9343] should_fail_ex+0x18c/0x1e0 [ 1581.948676][ T9343] should_fail_alloc_page+0x60/0x78 [ 1581.949357][ T9343] __alloc_pages_noprof+0xdc/0xd34 [ 1581.950044][ T9343] alloc_pages_mpol_noprof+0x8c/0x230 [ 1581.950786][ T9343] folio_alloc_mpol_noprof+0x14/0x64 [ 1581.951523][ T9343] vma_alloc_folio_noprof+0x7c/0xcc [ 1581.952215][ T9343] vma_alloc_zeroed_movable_folio+0x3c/0x48 [ 1581.952957][ T9343] __handle_mm_fault+0x13b4/0x1990 [ 1581.953710][ T9343] handle_mm_fault+0x164/0x314 [ 1581.954572][ T9343] do_page_fault+0x114/0x4f4 [ 1581.955401][ T9343] do_translation_fault+0xac/0xbc [ 1581.956403][ T9343] do_mem_abort+0x44/0x94 [ 1581.957233][ T9343] el0_da+0x78/0xa8 [ 1581.957855][ T9343] el0t_64_sync_handler+0xb8/0x12c [ 1581.958579][ T9343] el0t_64_sync+0x19c/0x1a0 [ 1581.960375][ T9343] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1583.998339][ T9355] FAULT_INJECTION: forcing a failure. [ 1583.998339][ T9355] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.999677][ T9355] CPU: 1 UID: 0 PID: 9355 Comm: syz.1.1773 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1584.000844][ T9355] Tainted: [B]=BAD_PAGE [ 1584.001469][ T9355] Hardware name: linux,dummy-virt (DT) [ 1584.002222][ T9355] Call trace: [ 1584.002799][ T9355] dump_backtrace+0x94/0xec [ 1584.003551][ T9355] show_stack+0x18/0x24 [ 1584.004980][ T9355] dump_stack_lvl+0x78/0x90 [ 1584.005710][ T9355] dump_stack+0x18/0x24 [ 1584.006599][ T9355] should_fail_ex+0x18c/0x1e0 [ 1584.007312][ T9355] should_failslab+0x54/0x80 [ 1584.007870][ T9355] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1584.008596][ T9355] security_inode_alloc+0x30/0x190 [ 1584.009281][ T9355] inode_init_always_gfp+0x160/0x240 [ 1584.009977][ T9355] alloc_inode+0x40/0xd0 [ 1584.010789][ T9355] new_inode_pseudo+0x10/0x1c [ 1584.011436][ T9355] sock_alloc+0x1c/0x8c [ 1584.012041][ T9355] do_accept+0xb0/0x1b0 [ 1584.012691][ T9355] __sys_accept4+0x84/0xfc [ 1584.013335][ T9355] __arm64_sys_accept4+0x20/0x30 [ 1584.014017][ T9355] invoke_syscall+0x48/0x110 [ 1584.014673][ T9355] el0_svc_common.constprop.0+0x40/0xe0 [ 1584.015356][ T9355] do_el0_svc+0x1c/0x28 [ 1584.016069][ T9355] el0_svc+0x34/0xec [ 1584.016836][ T9355] el0t_64_sync_handler+0x100/0x12c [ 1584.017604][ T9355] el0t_64_sync+0x19c/0x1a0 [ 1584.160666][ T9357] FAULT_INJECTION: forcing a failure. [ 1584.160666][ T9357] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.163106][ T9357] CPU: 1 UID: 0 PID: 9357 Comm: syz.1.1774 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1584.164311][ T9357] Tainted: [B]=BAD_PAGE [ 1584.164876][ T9357] Hardware name: linux,dummy-virt (DT) [ 1584.165498][ T9357] Call trace: [ 1584.166142][ T9357] dump_backtrace+0x94/0xec [ 1584.167030][ T9357] show_stack+0x18/0x24 [ 1584.167842][ T9357] dump_stack_lvl+0x78/0x90 [ 1584.168550][ T9357] dump_stack+0x18/0x24 [ 1584.169145][ T9357] should_fail_ex+0x18c/0x1e0 [ 1584.169763][ T9357] should_failslab+0x54/0x80 [ 1584.170479][ T9357] __kmalloc_noprof+0xa8/0x360 [ 1584.171286][ T9357] sve_alloc+0x5c/0x70 [ 1584.171976][ T9357] do_sve_acc+0x50/0x120 [ 1584.172637][ T9357] el0_sve_acc+0x78/0xa8 [ 1584.173260][ T9357] el0t_64_sync_handler+0xf4/0x12c [ 1584.173875][ T9357] el0t_64_sync+0x19c/0x1a0 [ 1587.672471][ T9387] FAULT_INJECTION: forcing a failure. [ 1587.672471][ T9387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.676732][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.1.1781 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1587.678061][ T9387] Tainted: [B]=BAD_PAGE [ 1587.678619][ T9387] Hardware name: linux,dummy-virt (DT) [ 1587.679321][ T9387] Call trace: [ 1587.679847][ T9387] dump_backtrace+0x94/0xec [ 1587.680592][ T9387] show_stack+0x18/0x24 [ 1587.681238][ T9387] dump_stack_lvl+0x78/0x90 [ 1587.681805][ T9387] dump_stack+0x18/0x24 [ 1587.682398][ T9387] should_fail_ex+0x18c/0x1e0 [ 1587.683048][ T9387] should_fail+0x14/0x20 [ 1587.683703][ T9387] should_fail_usercopy+0x1c/0x28 [ 1587.684441][ T9387] copy_msghdr_from_user+0x48/0x110 [ 1587.685157][ T9387] ___sys_sendmsg+0x8c/0x100 [ 1587.686136][ T9387] __sys_sendmsg+0x84/0xe0 [ 1587.687122][ T9387] __arm64_sys_sendmsg+0x24/0x30 [ 1587.687868][ T9387] invoke_syscall+0x48/0x110 [ 1587.688607][ T9387] el0_svc_common.constprop.0+0x40/0xe0 [ 1587.689414][ T9387] do_el0_svc+0x1c/0x28 [ 1587.690103][ T9387] el0_svc+0x34/0xec [ 1587.690754][ T9387] el0t_64_sync_handler+0x100/0x12c [ 1587.691438][ T9387] el0t_64_sync+0x19c/0x1a0 [ 1596.844495][ T9410] FAULT_INJECTION: forcing a failure. [ 1596.844495][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.845722][ T9410] CPU: 1 UID: 0 PID: 9410 Comm: syz.1.1789 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1596.847467][ T9410] Tainted: [B]=BAD_PAGE [ 1596.848139][ T9410] Hardware name: linux,dummy-virt (DT) [ 1596.848727][ T9410] Call trace: [ 1596.849117][ T9410] dump_backtrace+0x94/0xec [ 1596.849626][ T9410] show_stack+0x18/0x24 [ 1596.850323][ T9410] dump_stack_lvl+0x78/0x90 [ 1596.850973][ T9410] dump_stack+0x18/0x24 [ 1596.851477][ T9410] should_fail_ex+0x18c/0x1e0 [ 1596.852009][ T9410] should_failslab+0x54/0x80 [ 1596.852459][ T9410] __kmalloc_noprof+0xa8/0x360 [ 1596.852870][ T9410] sk_prot_alloc+0xe8/0x12c [ 1596.853259][ T9410] sk_alloc+0x3c/0x200 [ 1596.853710][ T9410] af_alg_accept+0x54/0x1f4 [ 1596.854195][ T9410] alg_accept+0x14/0x20 [ 1596.854648][ T9410] do_accept+0x130/0x1b0 [ 1596.855093][ T9410] __sys_accept4+0x84/0xfc [ 1596.855623][ T9410] __arm64_sys_accept4+0x20/0x30 [ 1596.856715][ T9410] invoke_syscall+0x48/0x110 [ 1596.858802][ T9410] el0_svc_common.constprop.0+0x40/0xe0 [ 1596.859535][ T9410] do_el0_svc+0x1c/0x28 [ 1596.860424][ T9410] el0_svc+0x34/0xec [ 1596.860874][ T9410] el0t_64_sync_handler+0x100/0x12c [ 1596.861687][ T9410] el0t_64_sync+0x19c/0x1a0 [ 1601.658837][ T9427] FAULT_INJECTION: forcing a failure. [ 1601.658837][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.660408][ T9427] CPU: 0 UID: 0 PID: 9427 Comm: syz.1.1794 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1601.662040][ T9427] Tainted: [B]=BAD_PAGE [ 1601.662731][ T9427] Hardware name: linux,dummy-virt (DT) [ 1601.663500][ T9427] Call trace: [ 1601.664052][ T9427] dump_backtrace+0x94/0xec [ 1601.664878][ T9427] show_stack+0x18/0x24 [ 1601.665667][ T9427] dump_stack_lvl+0x78/0x90 [ 1601.666476][ T9427] dump_stack+0x18/0x24 [ 1601.667342][ T9427] should_fail_ex+0x18c/0x1e0 [ 1601.668183][ T9427] should_failslab+0x54/0x80 [ 1601.668956][ T9427] __kmalloc_noprof+0xa8/0x360 [ 1601.669618][ T9427] lsm_blob_alloc+0x40/0x64 [ 1601.670409][ T9427] security_sk_alloc+0x30/0x1d4 [ 1601.671395][ T9427] sk_prot_alloc+0xfc/0x12c [ 1601.672065][ T9427] sk_alloc+0x3c/0x200 [ 1601.672769][ T9427] af_alg_accept+0x54/0x1f4 [ 1601.673461][ T9427] alg_accept+0x14/0x20 [ 1601.674123][ T9427] do_accept+0x130/0x1b0 [ 1601.675513][ T9427] __sys_accept4+0x84/0xfc [ 1601.676473][ T9427] __arm64_sys_accept4+0x20/0x30 [ 1601.677340][ T9427] invoke_syscall+0x48/0x110 [ 1601.678911][ T9427] el0_svc_common.constprop.0+0x40/0xe0 [ 1601.680581][ T9427] do_el0_svc+0x1c/0x28 [ 1601.681601][ T9427] el0_svc+0x34/0xec [ 1601.682374][ T9427] el0t_64_sync_handler+0x100/0x12c [ 1601.683196][ T9427] el0t_64_sync+0x19c/0x1a0 [ 1609.752186][ T4359] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1609.896764][ T4359] usb 1-1: device descriptor read/64, error -71 [ 1610.157128][ T4359] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1610.308385][ T4359] usb 1-1: device descriptor read/64, error -71 [ 1610.418504][ T4359] usb usb1-port1: attempt power cycle [ 1610.788494][ T4359] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1610.810559][ T4359] usb 1-1: device descriptor read/8, error -71 [ 1611.067202][ T4359] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1611.095541][ T4359] usb 1-1: device descriptor read/8, error -71 [ 1611.209602][ T4359] usb usb1-port1: unable to enumerate USB device [ 1627.402673][ T9518] FAULT_INJECTION: forcing a failure. [ 1627.402673][ T9518] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.404741][ T9518] CPU: 1 UID: 0 PID: 9518 Comm: syz.1.1825 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1627.406884][ T9518] Tainted: [B]=BAD_PAGE [ 1627.407496][ T9518] Hardware name: linux,dummy-virt (DT) [ 1627.408184][ T9518] Call trace: [ 1627.408774][ T9518] dump_backtrace+0x94/0xec [ 1627.409504][ T9518] show_stack+0x18/0x24 [ 1627.410276][ T9518] dump_stack_lvl+0x78/0x90 [ 1627.411002][ T9518] dump_stack+0x18/0x24 [ 1627.411642][ T9518] should_fail_ex+0x18c/0x1e0 [ 1627.412628][ T9518] should_failslab+0x54/0x80 [ 1627.413524][ T9518] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1627.414441][ T9518] security_file_alloc+0x28/0x1a0 [ 1627.415219][ T9518] init_file+0x3c/0x104 [ 1627.416173][ T9518] alloc_empty_file+0x7c/0x140 [ 1627.417280][ T9518] path_openat+0x44/0x1050 [ 1627.417915][ T9518] do_filp_open+0x9c/0x150 [ 1627.418591][ T9518] do_sys_openat2+0xc0/0xf4 [ 1627.419299][ T9518] __arm64_sys_openat+0x64/0xa4 [ 1627.419909][ T9518] invoke_syscall+0x48/0x110 [ 1627.420638][ T9518] el0_svc_common.constprop.0+0x40/0xe0 [ 1627.421434][ T9518] do_el0_svc+0x1c/0x28 [ 1627.422100][ T9518] el0_svc+0x34/0xec [ 1627.422738][ T9518] el0t_64_sync_handler+0x100/0x12c [ 1627.424122][ T9518] el0t_64_sync+0x19c/0x1a0 [ 1629.775305][ T9544] FAULT_INJECTION: forcing a failure. [ 1629.775305][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.778088][ T9544] CPU: 1 UID: 0 PID: 9544 Comm: syz.1.1834 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1629.778711][ T9544] Tainted: [B]=BAD_PAGE [ 1629.778991][ T9544] Hardware name: linux,dummy-virt (DT) [ 1629.779718][ T9544] Call trace: [ 1629.780037][ T9544] dump_backtrace+0x94/0xec [ 1629.780437][ T9544] show_stack+0x18/0x24 [ 1629.780755][ T9544] dump_stack_lvl+0x78/0x90 [ 1629.781080][ T9544] dump_stack+0x18/0x24 [ 1629.781396][ T9544] should_fail_ex+0x18c/0x1e0 [ 1629.781748][ T9544] should_failslab+0x54/0x80 [ 1629.782325][ T9544] __kmalloc_noprof+0xa8/0x360 [ 1629.783278][ T9544] tomoyo_realpath_from_path+0x48/0x1d0 [ 1629.784030][ T9544] tomoyo_path_number_perm+0xd8/0x224 [ 1629.784869][ T9544] tomoyo_file_ioctl+0x1c/0x28 [ 1629.785646][ T9544] security_file_ioctl+0x8c/0x19c [ 1629.786388][ T9544] __arm64_sys_ioctl+0x4c/0xf0 [ 1629.787106][ T9544] invoke_syscall+0x48/0x110 [ 1629.787875][ T9544] el0_svc_common.constprop.0+0x40/0xe0 [ 1629.788577][ T9544] do_el0_svc+0x1c/0x28 [ 1629.789195][ T9544] el0_svc+0xac/0xec [ 1629.789848][ T9544] el0t_64_sync_handler+0x100/0x12c [ 1629.790616][ T9544] el0t_64_sync+0x19c/0x1a0 [ 1629.793212][ T9544] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1630.691889][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.730068][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.670757][ T9561] FAULT_INJECTION: forcing a failure. [ 1632.670757][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.671898][ T9561] CPU: 0 UID: 0 PID: 9561 Comm: syz.0.1842 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1632.672723][ T9561] Tainted: [B]=BAD_PAGE [ 1632.673068][ T9561] Hardware name: linux,dummy-virt (DT) [ 1632.673578][ T9561] Call trace: [ 1632.674201][ T9561] dump_backtrace+0x94/0xec [ 1632.674758][ T9561] show_stack+0x18/0x24 [ 1632.675418][ T9561] dump_stack_lvl+0x78/0x90 [ 1632.676409][ T9561] dump_stack+0x18/0x24 [ 1632.676872][ T9561] should_fail_ex+0x18c/0x1e0 [ 1632.677431][ T9561] should_fail+0x14/0x20 [ 1632.677928][ T9561] should_fail_usercopy+0x1c/0x28 [ 1632.678416][ T9561] copy_msghdr_from_user+0x48/0x110 [ 1632.678771][ T9561] ___sys_sendmsg+0x8c/0x100 [ 1632.679123][ T9561] __sys_sendmsg+0x84/0xe0 [ 1632.679780][ T9561] __arm64_sys_sendmsg+0x24/0x30 [ 1632.680416][ T9561] invoke_syscall+0x48/0x110 [ 1632.680831][ T9561] el0_svc_common.constprop.0+0x40/0xe0 [ 1632.681218][ T9561] do_el0_svc+0x1c/0x28 [ 1632.681618][ T9561] el0_svc+0x34/0xec [ 1632.681987][ T9561] el0t_64_sync_handler+0x100/0x12c [ 1632.682424][ T9561] el0t_64_sync+0x19c/0x1a0 [ 1676.793728][ T9738] binder: Unknown parameter 'rootcontext' [ 1676.814388][ T9738] binder: Bad value for 'max' [ 1677.000708][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.068714][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.137549][ T9738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.297963][ T9738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.307637][ T9738] binder: Unknown parameter 'subj_role' [ 1678.547869][ T9750] FAULT_INJECTION: forcing a failure. [ 1678.547869][ T9750] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.549108][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.0.1910 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1678.550223][ T9750] Tainted: [B]=BAD_PAGE [ 1678.550746][ T9750] Hardware name: linux,dummy-virt (DT) [ 1678.551346][ T9750] Call trace: [ 1678.551824][ T9750] dump_backtrace+0x94/0xec [ 1678.552496][ T9750] show_stack+0x18/0x24 [ 1678.553048][ T9750] dump_stack_lvl+0x78/0x90 [ 1678.553653][ T9750] dump_stack+0x18/0x24 [ 1678.554261][ T9750] should_fail_ex+0x18c/0x1e0 [ 1678.554889][ T9750] should_failslab+0x54/0x80 [ 1678.555891][ T9750] kmem_cache_alloc_lru_noprof+0x5c/0x2d0 [ 1678.556772][ T9750] sock_alloc_inode+0x24/0x78 [ 1678.557452][ T9750] alloc_inode+0x28/0xd0 [ 1678.558078][ T9750] new_inode_pseudo+0x10/0x1c [ 1678.558741][ T9750] sock_alloc+0x1c/0x8c [ 1678.559347][ T9750] __sock_create+0xbc/0x244 [ 1678.560013][ T9750] __sys_socket+0x98/0x12c [ 1678.560753][ T9750] __arm64_sys_socket+0x20/0x30 [ 1678.561402][ T9750] invoke_syscall+0x48/0x110 [ 1678.562371][ T9750] el0_svc_common.constprop.0+0x40/0xe0 [ 1678.563582][ T9750] do_el0_svc+0x1c/0x28 [ 1678.564271][ T9750] el0_svc+0x34/0xec [ 1678.565042][ T9750] el0t_64_sync_handler+0x100/0x12c [ 1678.566050][ T9750] el0t_64_sync+0x19c/0x1a0 [ 1678.567929][ T9750] socket: no more sockets [ 1680.394429][ T9766] serio: Serial port pts0 [ 1680.481691][ T9769] FAULT_INJECTION: forcing a failure. [ 1680.481691][ T9769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.483172][ T9769] CPU: 1 UID: 0 PID: 9769 Comm: syz.0.1918 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1680.484375][ T9769] Tainted: [B]=BAD_PAGE [ 1680.484930][ T9769] Hardware name: linux,dummy-virt (DT) [ 1680.485568][ T9769] Call trace: [ 1680.486232][ T9769] dump_backtrace+0x94/0xec [ 1680.487054][ T9769] show_stack+0x18/0x24 [ 1680.487657][ T9769] dump_stack_lvl+0x78/0x90 [ 1680.488277][ T9769] dump_stack+0x18/0x24 [ 1680.488881][ T9769] should_fail_ex+0x18c/0x1e0 [ 1680.489515][ T9769] should_fail+0x14/0x20 [ 1680.490264][ T9769] should_fail_usercopy+0x1c/0x28 [ 1680.490962][ T9769] _copy_from_iter+0x5c/0x68c [ 1680.491763][ T9769] netlink_sendmsg+0x16c/0x3f4 [ 1680.492502][ T9769] __sock_sendmsg+0x54/0x60 [ 1680.493092][ T9769] ____sys_sendmsg+0x274/0x2ac [ 1680.493746][ T9769] ___sys_sendmsg+0xac/0x100 [ 1680.494358][ T9769] __sys_sendmsg+0x84/0xe0 [ 1680.494957][ T9769] __arm64_sys_sendmsg+0x24/0x30 [ 1680.495567][ T9769] invoke_syscall+0x48/0x110 [ 1680.497279][ T9769] el0_svc_common.constprop.0+0x40/0xe0 [ 1680.497997][ T9769] do_el0_svc+0x1c/0x28 [ 1680.498599][ T9769] el0_svc+0x34/0xec [ 1680.499195][ T9769] el0t_64_sync_handler+0x100/0x12c [ 1680.499880][ T9769] el0t_64_sync+0x19c/0x1a0 [ 1681.272299][ T9773] FAULT_INJECTION: forcing a failure. [ 1681.272299][ T9773] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.273494][ T9773] CPU: 1 UID: 0 PID: 9773 Comm: syz.0.1920 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1681.274804][ T9773] Tainted: [B]=BAD_PAGE [ 1681.275427][ T9773] Hardware name: linux,dummy-virt (DT) [ 1681.276461][ T9773] Call trace: [ 1681.277158][ T9773] dump_backtrace+0x94/0xec [ 1681.277918][ T9773] show_stack+0x18/0x24 [ 1681.278637][ T9773] dump_stack_lvl+0x78/0x90 [ 1681.279393][ T9773] dump_stack+0x18/0x24 [ 1681.280362][ T9773] should_fail_ex+0x18c/0x1e0 [ 1681.281343][ T9773] should_failslab+0x54/0x80 [ 1681.283090][ T9773] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1681.283878][ T9773] security_inode_alloc+0x30/0x190 [ 1681.284605][ T9773] inode_init_always_gfp+0x160/0x240 [ 1681.285299][ T9773] alloc_inode+0x40/0xd0 [ 1681.285954][ T9773] new_inode_pseudo+0x10/0x1c [ 1681.286798][ T9773] sock_alloc+0x1c/0x8c [ 1681.287394][ T9773] __sock_create+0xbc/0x244 [ 1681.287990][ T9773] __sys_socket+0x98/0x12c [ 1681.288609][ T9773] __arm64_sys_socket+0x20/0x30 [ 1681.289302][ T9773] invoke_syscall+0x48/0x110 [ 1681.289918][ T9773] el0_svc_common.constprop.0+0x40/0xe0 [ 1681.290584][ T9773] do_el0_svc+0x1c/0x28 [ 1681.291167][ T9773] el0_svc+0x34/0xec [ 1681.291838][ T9773] el0t_64_sync_handler+0x100/0x12c [ 1681.292830][ T9773] el0t_64_sync+0x19c/0x1a0 [ 1681.294636][ T9773] socket: no more sockets [ 1683.386864][ T9791] FAULT_INJECTION: forcing a failure. [ 1683.386864][ T9791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.388181][ T9791] CPU: 0 UID: 0 PID: 9791 Comm: syz.0.1926 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1683.389357][ T9791] Tainted: [B]=BAD_PAGE [ 1683.389917][ T9791] Hardware name: linux,dummy-virt (DT) [ 1683.390560][ T9791] Call trace: [ 1683.391060][ T9791] dump_backtrace+0x94/0xec [ 1683.391740][ T9791] show_stack+0x18/0x24 [ 1683.392395][ T9791] dump_stack_lvl+0x78/0x90 [ 1683.393068][ T9791] dump_stack+0x18/0x24 [ 1683.393723][ T9791] should_fail_ex+0x18c/0x1e0 [ 1683.394397][ T9791] should_fail+0x14/0x20 [ 1683.395048][ T9791] should_fail_usercopy+0x1c/0x28 [ 1683.395752][ T9791] simple_read_from_buffer+0x68/0x118 [ 1683.396679][ T9791] proc_fail_nth_read+0xac/0x12c [ 1683.397395][ T9791] vfs_read+0xc0/0x318 [ 1683.398054][ T9791] ksys_read+0x70/0x104 [ 1683.398727][ T9791] __arm64_sys_read+0x1c/0x28 [ 1683.399355][ T9791] invoke_syscall+0x48/0x110 [ 1683.400028][ T9791] el0_svc_common.constprop.0+0x40/0xe0 [ 1683.400777][ T9791] do_el0_svc+0x1c/0x28 [ 1683.401413][ T9791] el0_svc+0x34/0xec [ 1683.402099][ T9791] el0t_64_sync_handler+0x100/0x12c [ 1683.402771][ T9791] el0t_64_sync+0x19c/0x1a0 [ 1704.994010][ T8790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.099775][ T8790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.183073][ T8790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.312950][ T8790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.499163][ T8790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.556591][ T8790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.608904][ T8790] bond0 (unregistering): Released all slaves [ 1706.877808][ T8790] hsr_slave_0: left promiscuous mode [ 1706.949242][ T8790] hsr_slave_1: left promiscuous mode [ 1707.053679][ T8790] veth1_macvtap: left promiscuous mode [ 1707.055595][ T8790] veth0_macvtap: left promiscuous mode [ 1707.058747][ T8790] veth1_vlan: left promiscuous mode [ 1707.059955][ T8790] veth0_vlan: left promiscuous mode [ 1707.412122][ T8790] pimreg (unregistering): left allmulticast mode [ 1710.133031][ T9916] FAULT_INJECTION: forcing a failure. [ 1710.133031][ T9916] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.134064][ T9916] CPU: 1 UID: 0 PID: 9916 Comm: syz.1.1960 Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 1710.134659][ T9916] Tainted: [B]=BAD_PAGE [ 1710.134925][ T9916] Hardware name: linux,dummy-virt (DT) [ 1710.135269][ T9916] Call trace: [ 1710.135531][ T9916] dump_backtrace+0x94/0xec [ 1710.135960][ T9916] show_stack+0x18/0x24 [ 1710.136492][ T9916] dump_stack_lvl+0x78/0x90 [ 1710.136853][ T9916] dump_stack+0x18/0x24 [ 1710.137245][ T9916] should_fail_ex+0x18c/0x1e0 [ 1710.137864][ T9916] should_failslab+0x54/0x80 [ 1710.138575][ T9916] kmem_cache_alloc_noprof+0x54/0x2c4 [ 1710.138999][ T9916] security_file_alloc+0x28/0x1a0 [ 1710.139387][ T9916] init_file+0x3c/0x104 [ 1710.139725][ T9916] alloc_empty_file+0x7c/0x140 [ 1710.140192][ T9916] alloc_file_pseudo+0x9c/0x100 [ 1710.140748][ T9916] sock_alloc_file+0x40/0xc8 [ 1710.141167][ T9916] __sys_socket+0xd8/0x12c [ 1710.141510][ T9916] __arm64_sys_socket+0x20/0x30 [ 1710.141936][ T9916] invoke_syscall+0x48/0x110 [ 1710.142421][ T9916] el0_svc_common.constprop.0+0x40/0xe0 [ 1710.142765][ T9916] do_el0_svc+0x1c/0x28 [ 1710.143083][ T9916] el0_svc+0x34/0xec [ 1710.143412][ T9916] el0t_64_sync_handler+0x100/0x12c [ 1710.143776][ T9916] el0t_64_sync+0x19c/0x1a0 [ 1711.707139][ T9889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.735693][ T9889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.278691][ T9889] hsr_slave_0: entered promiscuous mode [ 1715.318039][ T9889] hsr_slave_1: entered promiscuous mode [ 1717.844451][ T9889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1717.892946][ T9889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1718.003800][ T9889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1718.051344][ T9889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1720.335488][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.223178][ T9889] veth0_vlan: entered promiscuous mode [ 1729.282934][ T9889] veth1_vlan: entered promiscuous mode [ 1729.415073][ T9889] veth0_macvtap: entered promiscuous mode [ 1729.431423][ T9889] veth1_macvtap: entered promiscuous mode [ 1729.559185][ T9889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.560708][ T9889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.561773][ T9889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.562855][ T9889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.725361][T10055] : renamed from bond0 (while UP) [ 1731.649006][ T8791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.708884][ T8791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.741351][ T8791] bond0 (unregistering): Released all slaves [ 1731.849405][T10067] netlink: 'syz.0.1977': attribute type 29 has an invalid length. [ 1731.869519][T10067] netlink: 'syz.0.1977': attribute type 29 has an invalid length. [ 1732.110638][ T8791] hsr_slave_0: left promiscuous mode [ 1732.168619][ T8791] hsr_slave_1: left promiscuous mode [ 1733.962712][T10085] veth1: entered promiscuous mode [ 1735.668931][T10109] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1988'. [ 1735.670128][T10109] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1988'. [ 1735.671258][T10109] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1988'. [ 1735.672610][T10109] tc_dump_action: action bad kind [ 1736.797204][T10129] netlink: 'syz.0.1993': attribute type 29 has an invalid length. [ 1736.809590][T10129] netlink: 'syz.0.1993': attribute type 29 has an invalid length. [ 1736.822261][T10129] netlink: 'syz.0.1993': attribute type 29 has an invalid length. [ 1737.252865][T10050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.284268][T10050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.893270][ T29] audit: type=1326 audit(1738.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10144 comm="syz.0.1998" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b4a9a8 code=0x0 [ 1739.413843][T10050] hsr_slave_0: entered promiscuous mode [ 1739.468865][T10050] hsr_slave_1: entered promiscuous mode [ 1739.498255][T10050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1739.499561][T10050] Cannot create hsr debugfs directory [ 1741.723102][T10050] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1741.759669][T10050] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1741.780055][T10050] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1741.805033][T10050] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1743.999734][T10050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.454350][T10050] veth0_vlan: entered promiscuous mode [ 1750.520349][T10050] veth1_vlan: entered promiscuous mode [ 1750.643173][T10050] veth0_macvtap: entered promiscuous mode [ 1750.663327][T10050] veth1_macvtap: entered promiscuous mode [ 1750.861927][T10050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.863183][T10050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.864411][T10050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.865753][T10050] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.628264][T10308] syzkaller0: entered allmulticast mode [ 1753.262712][T10320] syzkaller0: entered promiscuous mode [ 1753.263622][T10320] syzkaller0: entered allmulticast mode [ 1755.273163][T10366] syzkaller0: entered promiscuous mode [ 1755.274060][T10366] syzkaller0: entered allmulticast mode [ 1760.191311][T10411] process 'syz.0.2076' launched './file1' with NULL argv: empty string added [ 1761.719033][ T4359] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1761.921638][ T4359] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.922878][ T4359] usb 1-1: config 0 has no interfaces? [ 1761.924146][ T4359] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1761.925106][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.968722][ T4359] usb 1-1: config 0 descriptor?? [ 1763.499389][T10442] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1765.978017][T10460] lo: entered allmulticast mode [ 1766.008786][T10460] tunl0: entered allmulticast mode [ 1766.029492][T10460] gre0: entered allmulticast mode [ 1766.046325][T10460] gretap0: entered allmulticast mode [ 1766.058203][T10460] erspan0: entered allmulticast mode [ 1766.073839][T10460] ip_vti0: entered allmulticast mode [ 1766.088924][T10460] ip6_vti0: entered allmulticast mode [ 1766.101158][T10460] sit0: entered allmulticast mode [ 1766.123337][T10460] ip6tnl0: entered allmulticast mode [ 1766.142690][T10460] ip6gre0: entered allmulticast mode [ 1766.187345][T10460] syz_tun: entered allmulticast mode [ 1766.205542][T10460] ip6gretap0: entered allmulticast mode [ 1766.232689][T10460] vcan0: entered allmulticast mode [ 1766.244975][T10460] bond0: entered allmulticast mode [ 1766.246735][T10460] bond_slave_0: entered allmulticast mode [ 1766.247538][T10460] bond_slave_1: entered allmulticast mode [ 1766.269324][T10460] dummy0: entered allmulticast mode [ 1766.292385][T10460] nlmon0: entered allmulticast mode [ 1766.310579][T10460] vxcan0: entered allmulticast mode [ 1766.321683][T10460] vxcan1: entered allmulticast mode [ 1766.330683][T10460] veth0: entered allmulticast mode [ 1766.351398][T10460] veth1: entered allmulticast mode [ 1766.487767][T10460] wg0: entered allmulticast mode [ 1766.607739][T10460] wg1: entered allmulticast mode [ 1766.717525][T10460] wg2: entered allmulticast mode [ 1766.729396][T10460] veth0_to_bridge: entered allmulticast mode [ 1766.753363][T10460] bridge_slave_0: entered allmulticast mode [ 1766.770853][T10460] veth1_to_bridge: entered allmulticast mode [ 1766.794059][T10460] bridge_slave_1: entered allmulticast mode [ 1766.807964][T10460] veth0_to_bond: entered allmulticast mode [ 1766.840178][T10460] veth1_to_bond: entered allmulticast mode [ 1766.868454][T10460] veth0_to_team: entered allmulticast mode [ 1766.877166][T10460] team_slave_0: entered allmulticast mode [ 1766.882243][T10460] veth1_to_team: entered allmulticast mode [ 1766.890036][T10460] team_slave_1: entered allmulticast mode [ 1766.900601][T10460] veth0_to_batadv: entered allmulticast mode [ 1766.918864][T10460] batadv_slave_0: entered allmulticast mode [ 1766.931291][T10460] veth1_to_batadv: entered allmulticast mode [ 1766.954162][T10460] batadv_slave_1: entered allmulticast mode [ 1766.978191][T10460] xfrm0: entered allmulticast mode [ 1767.009980][T10460] veth0_to_hsr: entered allmulticast mode [ 1767.059230][T10460] hsr_slave_0: entered allmulticast mode [ 1767.085188][T10460] veth1_to_hsr: entered allmulticast mode [ 1767.108884][T10460] hsr_slave_1: entered allmulticast mode [ 1767.123944][T10460] hsr0: entered allmulticast mode [ 1767.143067][T10460] veth1_virt_wifi: entered allmulticast mode [ 1767.165376][T10460] veth0_virt_wifi: entered allmulticast mode [ 1767.189549][T10460] veth1_vlan: entered allmulticast mode [ 1767.207897][T10460] veth0_vlan: entered allmulticast mode [ 1767.258410][T10460] vlan0: entered allmulticast mode [ 1767.260016][T10460] vlan1: entered allmulticast mode [ 1767.309028][T10460] macvlan0: entered allmulticast mode [ 1767.369970][T10460] macvlan1: entered allmulticast mode [ 1767.390214][T10460] ipvlan0: entered allmulticast mode [ 1767.391988][T10460] ipvlan1: entered allmulticast mode [ 1767.397850][T10460] veth1_macvtap: entered allmulticast mode [ 1767.423068][T10460] veth0_macvtap: entered allmulticast mode [ 1767.488998][T10460] macvtap0: entered allmulticast mode [ 1767.511571][T10460] macsec0: entered allmulticast mode [ 1767.607290][T10460] geneve0: entered allmulticast mode [ 1767.634189][T10460] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.635443][T10460] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.638579][T10460] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.641206][T10460] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.677473][T10460] geneve1: entered allmulticast mode [ 1767.700467][T10460] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1767.723368][T10460] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1767.754488][T10460] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 1767.780378][T10460] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 1767.793182][T10460] syztnl0: entered allmulticast mode [ 1769.217349][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.270007][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.008898][T10491] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1775.175144][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.251361][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.076566][ T4359] usb 1-1: USB disconnect, device number 66 [ 1777.594027][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2102'. [ 1780.320445][T10556] : (slave bond_slave_0): Releasing backup interface [ 1780.411330][T10556] : (slave bond_slave_1): Releasing backup interface [ 1781.327620][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.368302][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.594228][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.643125][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1782.149464][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2126'. [ 1783.082703][T10566] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.083893][T10566] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.084899][T10566] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.092681][T10566] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.384365][T10585] trusted_key: syz.0.2129 sent an empty control message without MSG_MORE. [ 1784.025590][T10590] veth1_vlan: left promiscuous mode [ 1784.028342][T10590] veth1_vlan: left allmulticast mode [ 1787.029647][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2156'. [ 1796.243704][T10750] wg1: entered promiscuous mode [ 1796.244574][T10750] wg1: left allmulticast mode [ 1798.710307][T10773] xt_cgroup: path and classid specified [ 1801.625285][T10809] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1801.627473][T10809] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1801.628454][T10809] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1801.629493][T10809] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1801.631218][T10809] vxlan0: entered promiscuous mode [ 1801.631949][T10809] vxlan0: entered allmulticast mode [ 1801.669565][T10809] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.671001][T10809] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.671988][T10809] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1801.672975][T10809] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1802.459474][T10833] netlink: 'syz.0.2228': attribute type 2 has an invalid length. [ 1802.460731][T10833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2228'. [ 1802.688186][T10839] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1802.692199][T10838] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1804.129157][T10860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1807.071110][T10907] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.072454][T10907] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.073901][T10907] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.074701][T10907] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.084916][T10907] vxlan0: entered promiscuous mode [ 1807.085702][T10907] vxlan0: entered allmulticast mode [ 1807.137838][T10907] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1807.139135][T10907] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1807.140864][T10907] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1807.142194][T10907] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1811.053352][T10942] bridge_slave_0: entered promiscuous mode [ 1811.067309][T10942] bridge_slave_0: entered allmulticast mode [ 1811.187548][T10940] bridge_slave_0: left allmulticast mode [ 1811.188573][T10940] bridge_slave_0: left promiscuous mode [ 1814.031254][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 1814.919950][T10966] veth1_to_bridge: left allmulticast mode [ 1818.344687][T10999] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2298'. [ 1821.169997][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1821.171938][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1821.173046][T11031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1821.239473][ T49] block nbd0: Receive control failed (result -107) [ 1824.668997][T11054] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2317'. [ 1826.548319][T11076] pimreg: entered allmulticast mode [ 1826.557840][T11076] pimreg: left allmulticast mode [ 1829.976683][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2333'. [ 1833.923949][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'. [ 1835.350052][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 1837.310575][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2353'. [ 1837.353519][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2353'. [ 1838.258236][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2357'. [ 1838.886938][ T4359] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1839.047161][ T4359] usb 1-1: Using ep0 maxpacket: 16 [ 1839.067351][ T4359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.068716][ T4359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1839.070462][ T4359] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1839.072037][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.089913][ T4359] usb 1-1: config 0 descriptor?? [ 1839.544892][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.588410][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.601858][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.635451][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.648884][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.704573][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.705084][ T4359] hid-generic 0003:05AC:8241.0005: hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 1839.891214][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.948137][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.971942][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.015654][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.230220][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.278745][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.452144][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.487569][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.584798][T11214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.638616][T11214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.762415][T11216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.808582][T11216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.158705][T11221] netlink: 'syz.1.2367': attribute type 2 has an invalid length. [ 1841.159612][T11221] netlink: 'syz.1.2367': attribute type 8 has an invalid length. [ 1841.160308][T11221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2367'. [ 1843.465325][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.508653][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1844.539923][T11232] sctp: [Deprecated]: syz.1.2371 (pid 11232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1844.539923][T11232] Use struct sctp_sack_info instead [ 1847.836857][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.888574][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.903068][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.937928][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.950503][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.009236][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.227403][T11248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.268150][T11248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.566304][ T4359] usb 1-1: USB disconnect, device number 67 [ 1854.645305][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.689516][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.742060][T11293] netlink: 'syz.1.2393': attribute type 3 has an invalid length. [ 1855.743239][T11293] netlink: 'syz.1.2393': attribute type 3 has an invalid length. [ 1855.744375][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2393'. [ 1855.865435][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'. [ 1855.957712][T11295] wg1: left promiscuous mode [ 1855.970213][T11295] netlink: 'syz.1.2394': attribute type 2 has an invalid length. [ 1855.971282][T11295] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1857.279201][T11316] binder: 11315:11316 tried to acquire reference to desc 0, got 1 instead [ 1857.293139][ T4359] binder: release 11315:11316 transaction 6 out, still active [ 1857.294564][ T4359] binder: undelivered TRANSACTION_COMPLETE [ 1857.321781][ T53] binder: send failed reply for transaction 6, target dead [ 1859.159448][T11325] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2406'. [ 1859.211591][T11325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.264505][T11325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.302695][T11348] netlink: 'syz.0.2415': attribute type 12 has an invalid length. [ 1875.457469][T11384] syzkaller0: entered promiscuous mode [ 1875.460467][T11384] syzkaller0: entered allmulticast mode [ 1875.799223][T11388] wg2: entered promiscuous mode [ 1875.800143][T11388] wg2: entered allmulticast mode [ 1875.983288][T11394] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 1876.550791][T11402] pim6reg1: entered promiscuous mode [ 1876.551900][T11402] pim6reg1: entered allmulticast mode [ 1880.047534][ T53] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1880.260015][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 1880.306912][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.308201][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.309178][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1880.310513][ T53] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1880.311352][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.335604][ T53] usb 1-1: config 0 descriptor?? [ 1880.817964][ T53] hid-generic 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1881.005736][ T4359] usb 1-1: USB disconnect, device number 68 [ 1881.647938][T11464] syzkaller0: entered promiscuous mode [ 1881.648883][T11464] syzkaller0: entered allmulticast mode [ 1885.601648][T11497] ipvlan1: entered allmulticast mode [ 1885.602814][T11497] veth0_vlan: entered allmulticast mode [ 1891.869096][ T41] (unregistering): Released all slaves [ 1892.086504][ T41] hsr_slave_0: left promiscuous mode [ 1892.138325][ T41] hsr_slave_1: left promiscuous mode [ 1892.485553][T11552] input: syz0 as /devices/virtual/input/input69 [ 1896.442542][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.453879][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1897.011035][T11601] xt_hashlimit: size too large, truncated to 1048576 [ 1899.959829][T11533] hsr_slave_0: entered promiscuous mode [ 1899.998625][T11533] hsr_slave_1: entered promiscuous mode [ 1902.171469][T11533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1902.213185][T11533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1902.243366][T11533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1902.267539][T11533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1904.271195][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1911.018279][T11533] veth0_vlan: entered promiscuous mode [ 1911.072063][T11533] veth1_vlan: entered promiscuous mode [ 1911.268903][T11533] veth0_macvtap: entered promiscuous mode [ 1911.312178][T11533] veth1_macvtap: entered promiscuous mode [ 1911.502516][T11533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.503682][T11533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.504777][T11533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.513417][T11533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.097305][T11701] input: syz0 as /devices/virtual/input/input70 [ 1912.554831][ T29] audit: type=1107 audit(1912.330:5): pid=11705 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1914.218554][T11724] input: syz0 as /devices/virtual/input/input71 [ 1917.477756][T11787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1925.807979][ T5673] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1925.977796][ T5673] usb 1-1: Using ep0 maxpacket: 16 [ 1926.008695][ T5673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.010324][ T5673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.011440][ T5673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1926.012959][ T5673] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1926.013986][ T5673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.030701][ T5673] usb 1-1: config 0 descriptor?? [ 1926.491179][ T5673] hid-generic 0003:1E7D:31CE.0007: unknown main item tag 0x0 [ 1926.492309][ T5673] hid-generic 0003:1E7D:31CE.0007: unbalanced delimiter at end of report description [ 1926.494479][ T5673] hid-generic 0003:1E7D:31CE.0007: probe with driver hid-generic failed with error -22 [ 1926.560730][T11846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1926.608923][T11846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1926.690887][ T5673] usb 1-1: USB disconnect, device number 69 [ 1927.670592][T11863] binder: 11862:11863 tried to acquire reference to desc 0, got 1 instead [ 1927.680540][T11863] binder: 11862:11863 got transaction with invalid handle, 32 [ 1927.681640][T11863] binder: 11863:11862 translate handle failed [ 1927.689658][T11863] binder: 11862:11863 transaction call to 11862:0 failed 11/29201/-22, size 72-24 line 3496 [ 1927.694536][ T5673] binder: undelivered TRANSACTION_ERROR: 29201 [ 1928.237457][ T4815] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1928.342288][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.380154][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.453389][ T4815] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1928.454558][ T4815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.455604][ T4815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1928.457629][ T4815] usb 1-1: config 0 has no interface number 0 [ 1928.458610][ T4815] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1928.459846][ T4815] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1928.461366][ T4815] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1928.477843][ T4815] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1928.481105][ T4815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 1928.481727][ T4815] usb 1-1: SerialNumber: syz [ 1928.491518][ T4815] usb 1-1: config 0 descriptor?? [ 1928.523128][ T4815] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1928.523932][ T4815] usb 1-1: MIDIStreaming interface descriptor not found [ 1928.829965][ T7400] usb 1-1: USB disconnect, device number 70 [ 1929.750535][T11885] udevd[11885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1937.567000][ T5673] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1937.824902][ T5673] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1937.834773][ T5673] usb 1-1: config 0 has no interface number 0 [ 1937.835699][ T5673] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.838163][ T5673] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.839203][ T5673] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1937.840068][ T5673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.885194][ T5673] usb 1-1: config 0 descriptor?? [ 1938.433724][ T5673] hid-generic 0003:04D9:A055.0008: unknown main item tag 0x0 [ 1938.434692][ T5673] hid-generic 0003:04D9:A055.0008: unknown main item tag 0x0 [ 1938.435527][ T5673] hid-generic 0003:04D9:A055.0008: unknown main item tag 0x0 [ 1938.455478][ T5673] hid-generic 0003:04D9:A055.0008: unknown main item tag 0x0 [ 1938.461633][ T5673] hid-generic 0003:04D9:A055.0008: unknown main item tag 0x0 [ 1938.493764][ T5673] hid-generic 0003:04D9:A055.0008: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 1938.764016][ T5673] usb 1-1: USB disconnect, device number 71 [ 1949.267139][ T5673] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1949.457001][ T5673] usb 1-1: Using ep0 maxpacket: 8 [ 1949.494490][ T5673] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1949.495645][ T5673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.520787][ T5673] usb 1-1: config 0 descriptor?? [ 1952.003259][ T5673] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1952.005559][ T5673] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1952.049184][ T5673] usb 1-1: USB disconnect, device number 72 [ 1952.382820][T11937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2599'. [ 1953.409840][T11944] binder: 11943:11944 tried to acquire reference to desc 0, got 1 instead [ 1955.513548][T11948] binder: BINDER_SET_CONTEXT_MGR already set [ 1955.514807][T11948] binder: 11945:11948 ioctl 4018620d 200002c0 returned -16 [ 1955.521545][T11948] binder: 11945:11948 BC_FREE_BUFFER u0000000000000000 no match [ 1963.112382][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.169059][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.978514][T11988] binder: 11987:11988 tried to acquire reference to desc 0, got 1 instead [ 1964.981070][T11988] binder: 11987:11988 got transaction with invalid parent offset or type [ 1964.982891][T11988] binder: 11987:11988 transaction call to 11987:0 failed 23/29201/-22, size 96-24 line 3542 [ 1964.985762][ T7400] binder: undelivered TRANSACTION_ERROR: 29201 [ 1965.198438][T11992] syz.1.2620 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1968.927263][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.969627][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.166544][T12064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2644'. [ 1982.396739][T12061] binder: 12060:12061 tried to acquire reference to desc 0, got 1 instead [ 1983.839678][ T53] binder: release 12060:12061 transaction 30 out, still active [ 1983.840832][ T53] binder: undelivered TRANSACTION_COMPLETE [ 1983.943057][ T53] binder: send failed reply for transaction 30, target dead [ 1984.239933][T12073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2649'. [ 1984.417678][T12077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.490564][T12077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.295777][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.339483][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.946646][ T25] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1992.124035][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1992.125277][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1992.140259][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1992.141463][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1992.142611][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1992.143457][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.168608][ T25] usb 1-1: config 0 descriptor?? [ 1992.185100][T12135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1992.663857][ T25] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0xd [ 1992.672899][ T25] hid-generic 0003:047F:FFFF.0009: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1992.902077][ T53] usb 1-1: USB disconnect, device number 73 [ 2000.408490][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 2001.264454][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.298447][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.176968][ T4815] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2003.539020][ T4815] usb 1-1: config 46 has too many interfaces: 103, using maximum allowed: 32 [ 2003.539341][ T4815] usb 1-1: config 46 has an invalid descriptor of length 112, skipping remainder of the config [ 2003.539569][ T4815] usb 1-1: config 46 has 0 interfaces, different from the descriptor's value: 103 [ 2003.644589][ T4815] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2003.646757][ T4815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.647815][ T4815] usb 1-1: Product: syz [ 2003.648618][ T4815] usb 1-1: Manufacturer: syz [ 2003.649443][ T4815] usb 1-1: SerialNumber: syz [ 2016.888687][ T4815] usb 1-1: USB disconnect, device number 74 [ 2017.503996][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2717'. [ 2018.624484][T12278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2018.977395][ T25] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2019.127231][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 2019.149812][ T25] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2019.151389][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2019.153156][ T25] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2019.154772][ T25] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2019.163160][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2019.186790][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2019.187896][ T25] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2019.188963][ T25] usb 1-1: Product: syz [ 2019.189651][ T25] usb 1-1: Manufacturer: syz [ 2019.190265][ T25] usb 1-1: SerialNumber: syz [ 2019.204528][ T25] usb 1-1: config 0 descriptor?? [ 2019.224358][ T25] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2019.232522][ T25] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2020.924177][ T25] usb 1-1: USB disconnect, device number 75 [ 2020.947947][ T25] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2021.174863][T12293] pim6reg: entered allmulticast mode [ 2021.188626][T12292] pim6reg: left allmulticast mode [ 2022.687093][ T4815] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2022.847089][ T4815] usb 1-1: Using ep0 maxpacket: 8 [ 2022.862509][ T4815] usb 1-1: config 0 has no interfaces? [ 2022.863432][ T4815] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2022.866911][ T4815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.888079][ T4815] usb 1-1: config 0 descriptor?? [ 2025.700323][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 2030.950200][T12359] netlink: 'syz.1.2753': attribute type 1 has an invalid length. [ 2035.930872][T12390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2035.948747][T12390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2036.732033][ T53] usb 1-1: USB disconnect, device number 76 [ 2037.685712][T12390] hsr_slave_0: entered promiscuous mode [ 2037.741514][T12390] hsr_slave_1: entered promiscuous mode [ 2037.777186][T12390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2037.778198][T12390] Cannot create hsr debugfs directory [ 2039.854377][T12390] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2039.912054][T12390] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2039.936395][T12390] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2039.959292][T12390] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2041.723238][ T8357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.764960][T12390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2041.853234][ T8357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2041.979701][ T8357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.082194][ T8357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.344774][ T8357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2043.420704][ T8357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2043.487275][ T8357] bond0 (unregistering): Released all slaves [ 2043.707311][ T8357] hsr_slave_0: left promiscuous mode [ 2043.741365][ T8357] hsr_slave_1: left promiscuous mode [ 2043.847802][ T8357] veth1_macvtap: left promiscuous mode [ 2043.848674][ T8357] veth0_macvtap: left promiscuous mode [ 2043.849742][ T8357] veth1_vlan: left promiscuous mode [ 2043.850847][ T8357] veth0_vlan: left promiscuous mode [ 2045.103404][T12390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2045.104793][T12390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2048.740917][T12465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2048.770405][T12465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.897183][T12390] veth0_vlan: entered promiscuous mode [ 2050.923726][T12390] veth1_vlan: entered promiscuous mode [ 2051.143922][T12390] veth0_macvtap: entered promiscuous mode [ 2051.194084][T12390] veth1_macvtap: entered promiscuous mode [ 2051.364757][T12390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.365564][T12390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.374843][T12390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.375647][T12390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.690223][T12465] hsr_slave_0: entered promiscuous mode [ 2051.729378][T12465] hsr_slave_1: entered promiscuous mode [ 2053.561874][T12465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2053.595585][T12465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2053.621829][T12465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2053.644367][T12465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2055.482778][T12465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2063.705054][T12465] veth0_vlan: entered promiscuous mode [ 2063.759037][T12465] veth1_vlan: entered promiscuous mode [ 2063.914853][T12465] veth0_macvtap: entered promiscuous mode [ 2063.947923][T12465] veth1_macvtap: entered promiscuous mode [ 2064.151885][T12465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.153392][T12465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.154535][T12465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2064.159123][T12465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.638818][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 2070.330031][T12700] netlink: 'syz.0.2812': attribute type 4 has an invalid length. [ 2070.400905][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 2070.405643][T12700] netlink: 'syz.0.2812': attribute type 17 has an invalid length. [ 2071.183194][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x7 [ 2071.191450][T12654] hid-generic 0000:FFFFFFFE:0000.000A: ignoring exceeding usage max [ 2071.192905][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.194236][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.194857][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.195463][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.205042][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.207720][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.208501][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.209110][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.209625][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.210897][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.211605][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.212312][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.212918][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.213562][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.214212][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.214914][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.215640][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.220201][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.222899][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.223572][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.224331][T12654] hid-generic 0000:FFFFFFFE:0000.000A: unknown main item tag 0x0 [ 2071.247520][T12654] hid-generic 0000:FFFFFFFE:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2074.079732][T12758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.129182][T12758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.474848][T12770] netlink: 'syz.0.2835': attribute type 21 has an invalid length. [ 2084.638544][T12821] netlink: 'syz.1.2855': attribute type 24 has an invalid length. [ 2084.887332][ T7400] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2085.060897][ T7400] usb 1-1: config 0 has no interfaces? [ 2085.087593][ T7400] usb 1-1: New USB device found, idVendor=1ad7, idProduct=0001, bcdDevice=cc.19 [ 2085.088345][ T7400] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.088876][ T7400] usb 1-1: Product: syz [ 2085.089729][ T7400] usb 1-1: Manufacturer: syz [ 2085.090435][ T7400] usb 1-1: SerialNumber: syz [ 2085.108768][ T7400] usb 1-1: config 0 descriptor?? [ 2085.327165][ T7400] usb 1-1: USB disconnect, device number 77 [ 2086.065221][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'. [ 2086.797162][ T6554] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2086.968179][ T6554] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.969265][ T6554] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 2086.970595][ T6554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.994089][ T6554] usb 1-1: config 0 descriptor?? [ 2087.240617][ T6554] usb 1-1: USB disconnect, device number 78 [ 2088.368554][T12860] xt_cluster: node mask cannot exceed total number of nodes [ 2101.372654][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'. [ 2105.927978][T12929] vlan2: entered promiscuous mode [ 2110.766742][ T53] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2110.927544][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.929095][ T53] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2110.930560][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2110.979532][ T53] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2110.980570][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.981368][ T53] usb 1-1: Product: syz [ 2110.982007][ T53] usb 1-1: Manufacturer: syz [ 2110.982665][ T53] usb 1-1: SerialNumber: syz [ 2110.999811][ T53] usb 1-1: config 0 descriptor?? [ 2111.030010][ T53] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 2115.785787][T12948] binder: 12943:12948 tried to acquire reference to desc 0, got 1 instead [ 2115.801656][T12948] binder: 12943:12948 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 2115.803211][T12948] binder: 12948 RLIMIT_NICE not set [ 2119.591803][T12967] IPv6: addrconf: prefix option has invalid lifetime [ 2120.331706][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 2124.068265][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 2124.646972][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 2125.661714][ T53] binder: undelivered TRANSACTION_COMPLETE [ 2125.672573][ T53] usb 1-1: USB disconnect, device number 79 [ 2128.646961][ T53] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2128.842801][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 2128.900558][ T53] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2128.912214][ T53] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2128.913445][ T53] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2128.914622][ T53] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2128.959521][ T53] usb 1-1: string descriptor 0 read error: -22 [ 2128.961130][ T53] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2128.962116][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.045916][ T53] usb 1-1: 0:2 : does not exist [ 2129.670661][ T53] usb 1-1: USB disconnect, device number 80 [ 2131.146784][ T53] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2131.386693][ T53] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.387771][ T53] usb 1-1: config 0 has no interfaces? [ 2131.412104][ T53] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2131.417538][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.418361][ T53] usb 1-1: Product: syz [ 2131.419474][ T53] usb 1-1: Manufacturer: syz [ 2131.420029][ T53] usb 1-1: SerialNumber: syz [ 2131.449830][ T53] usb 1-1: config 0 descriptor?? [ 2142.182633][T13084] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2952'. [ 2144.950292][ T53] usb 1-1: USB disconnect, device number 81 [ 2145.374514][T13097] random: crng reseeded on system resumption [ 2145.817396][ T4359] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2145.977052][ T4359] usb 1-1: Using ep0 maxpacket: 8 [ 2146.039593][ T4359] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 2146.040693][ T4359] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 2146.041599][ T4359] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 2146.042594][ T4359] usb 1-1: config 250 has no interface number 0 [ 2146.043780][ T4359] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 2146.044972][ T4359] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2146.060013][ T4359] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2146.061084][ T4359] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 2146.062103][ T4359] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 2146.067092][ T4359] usb 1-1: config 250 interface 228 has no altsetting 0 [ 2146.110272][ T4359] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 2146.111433][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 2146.113844][ T4359] usb 1-1: Product: syz [ 2146.114538][ T4359] usb 1-1: SerialNumber: syz [ 2146.188823][ T4359] hub 1-1:250.228: bad descriptor, ignoring hub [ 2146.189883][ T4359] hub 1-1:250.228: probe with driver hub failed with error -5 [ 2146.363735][ T4359] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 82 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 2146.650394][ T4359] usb 1-1: USB disconnect, device number 82 [ 2146.668863][ T4359] usblp0: removed [ 2147.267506][ T6554] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2147.417307][ T6554] usb 1-1: Using ep0 maxpacket: 8 [ 2147.438734][ T6554] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 2147.439333][ T6554] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2147.439864][ T6554] usb 1-1: config 0 has no interface number 0 [ 2147.440531][ T6554] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2147.441229][ T6554] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2147.442277][ T6554] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2147.443913][ T6554] usb 1-1: config 0 interface 52 has no altsetting 0 [ 2147.459708][ T6554] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2147.460810][ T6554] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2147.461510][ T6554] usb 1-1: Product: syz [ 2147.461898][ T6554] usb 1-1: SerialNumber: syz [ 2147.475256][ T6554] usb 1-1: config 0 descriptor?? [ 2150.487167][T13129] tmpfs: Bad value for 'mpol' [ 2151.663925][T13145] netlink: 'syz.1.2977': attribute type 4 has an invalid length. [ 2151.807208][T13147] input: syz1 as /devices/virtual/input/input73 [ 2154.342387][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2983'. [ 2161.363375][ T7400] usb 1-1: USB disconnect, device number 83 [ 2163.233318][T13187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.269142][T13187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.281460][T13187] random: crng reseeded on system resumption [ 2164.403843][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 2164.906188][T13208] input: syz1 as /devices/virtual/input/input74 [ 2165.597753][T13217] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3006'. [ 2165.789257][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.851220][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2170.865715][T13242] binder: 13241:13242 ioctl 4018620d 0 returned -22 [ 2181.901414][T13323] block device autoloading is deprecated and will be removed. [ 2182.094067][T13345] input: syz0 as /devices/virtual/input/input75 [ 2190.508581][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2196.011686][ T29] audit: type=1326 audit(2196.217:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.015586][ T29] audit: type=1326 audit(2196.217:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=4 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.023609][ T29] audit: type=1326 audit(2196.227:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.025499][ T29] audit: type=1326 audit(2196.227:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.027259][ T29] audit: type=1326 audit(2196.227:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.037243][ T29] audit: type=1326 audit(2196.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.038877][ T29] audit: type=1326 audit(2196.227:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.044464][ T29] audit: type=1326 audit(2196.227:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.050705][ T29] audit: type=1326 audit(2196.227:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2196.059085][ T29] audit: type=1326 audit(2196.227:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13388 comm="syz.1.3067" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x7fc00000 [ 2197.353911][T13400] syzkaller0: entered allmulticast mode [ 2215.861310][T12654] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2216.093460][T12654] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2216.094765][T12654] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2216.095752][T12654] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2216.096880][T12654] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 2216.097930][T12654] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 2216.151243][T12654] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2216.152491][T12654] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2216.153320][T12654] usb 1-1: Product: syz [ 2216.154005][T12654] usb 1-1: Manufacturer: syz [ 2216.238585][T13553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2216.264606][T12654] cdc_wdm 1-1:1.0: skipping garbage [ 2216.265111][T12654] cdc_wdm 1-1:1.0: skipping garbage [ 2216.278677][T12654] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2216.466855][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.467911][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.469295][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.470394][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.472822][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.473718][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.475854][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.476739][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.478085][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.478848][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.481213][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.482106][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.483636][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.484390][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.485586][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.486645][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.487856][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.488754][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2216.490818][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2216.491585][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2217.475040][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2217.476309][T12654] usb 1-1: USB disconnect, device number 84 [ 2218.129685][T13561] binder: 13560:13561 tried to acquire reference to desc 0, got 1 instead [ 2218.134246][T13561] binder: 13560:13561 got transaction with invalid data ptr [ 2218.137278][T13561] binder: 13560:13561 transaction call to 13560:0 failed 40/29201/-14, size 12288-0 line 3667 [ 2218.159315][T12654] binder: undelivered TRANSACTION_ERROR: 29201 [ 2228.465080][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2228.503250][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2229.771204][ T4359] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2230.001885][ T4359] usb 1-1: config 0 has no interfaces? [ 2230.015914][ T4359] usb 1-1: New USB device found, idVendor=1ad7, idProduct=0001, bcdDevice=cc.19 [ 2230.016855][ T4359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.017521][ T4359] usb 1-1: Product: syz [ 2230.018151][ T4359] usb 1-1: Manufacturer: syz [ 2230.018627][ T4359] usb 1-1: SerialNumber: syz [ 2230.027601][ T4359] usb 1-1: config 0 descriptor?? [ 2230.243535][ T7400] usb 1-1: USB disconnect, device number 85 [ 2232.550692][T13656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.601245][T13656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.627596][T13658] sctp: [Deprecated]: syz.0.3160 (pid 13658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2232.627596][T13658] Use struct sctp_sack_info instead [ 2233.980801][T13670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.067805][T13670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.605255][ T25] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2238.859802][ T25] usb 1-1: config 0 has no interfaces? [ 2238.942305][ T25] usb 1-1: New USB device found, idVendor=1ad7, idProduct=0001, bcdDevice=cc.19 [ 2238.943341][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.944174][ T25] usb 1-1: Product: syz [ 2238.944826][ T25] usb 1-1: Manufacturer: syz [ 2238.945489][ T25] usb 1-1: SerialNumber: syz [ 2238.981118][ T25] usb 1-1: config 0 descriptor?? [ 2239.221791][ T25] usb 1-1: USB disconnect, device number 86 [ 2244.723206][T13719] input: syz0 as /devices/virtual/input/input76 [ 2246.080826][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 2246.089413][T13729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3181'. [ 2246.807217][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2246.807460][ T29] audit: type=1326 audit(2247.063:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13735 comm="syz.1.3184" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874a9a8 code=0x0 [ 2249.665397][T13749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2249.708907][T13749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2249.738115][T13745] team_slave_0: entered promiscuous mode [ 2249.738649][T13745] team_slave_0: entered allmulticast mode [ 2250.929918][T13770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3197'. [ 2251.247682][T13777] netlink: 'syz.0.3200': attribute type 11 has an invalid length. [ 2263.789358][T13836] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2263.881918][T13836] syzkaller0: entered promiscuous mode [ 2263.882870][T13836] syzkaller0: entered allmulticast mode [ 2268.952427][T13885] KVM: debugfs: duplicate directory 13885-4 [ 2269.810362][ T29] audit: type=1326 audit(2270.065:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13900 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2269.822952][ T29] audit: type=1326 audit(2270.085:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13900 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2269.835347][ T29] audit: type=1326 audit(2270.095:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13900 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2269.839256][ T29] audit: type=1326 audit(2270.095:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13900 comm="syz.0.3241" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2270.331254][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 2270.681760][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 2271.305925][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.347333][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.861567][T13923] block device autoloading is deprecated and will be removed. [ 2279.565906][T13936] binder: 13933:13936 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 2281.710069][T13940] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 2285.897539][T13961] input: syz1 as /devices/virtual/input/input77 [ 2287.655035][T13966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.686635][T13966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2288.422204][T13981] netlink: 'syz.0.3273': attribute type 1 has an invalid length. [ 2288.553702][T13981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2288.562139][T13981] bond1: (slave bond2): making interface the new active one [ 2288.565164][T13981] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2288.589414][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3273'. [ 2288.590934][T13981] bond1: entered promiscuous mode [ 2288.591525][T13981] bond2: entered promiscuous mode [ 2296.682751][T14022] input: syz1 as /devices/virtual/input/input78 [ 2300.474801][ T53] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2300.675149][ T53] usb 1-1: device descriptor read/64, error -71 [ 2300.915335][ T53] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2301.054967][ T53] usb 1-1: device descriptor read/64, error -71 [ 2301.166636][ T53] usb usb1-port1: attempt power cycle [ 2301.504961][ T53] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2301.528433][ T53] usb 1-1: device descriptor read/8, error -71 [ 2301.764929][ T53] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2301.788692][ T53] usb 1-1: device descriptor read/8, error -71 [ 2301.895911][ T53] usb usb1-port1: unable to enumerate USB device [ 2306.546195][T14058] tc_dump_action: action bad kind [ 2316.847101][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.928611][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2318.666932][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2318.727003][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2320.175695][T14121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2320.225500][T14121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.075288][T14056] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 2324.236676][T14056] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.238323][T14056] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2324.239592][T14056] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2324.241846][T14056] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2324.242861][T14056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.267055][T14139] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2324.293265][T14056] hub 1-1:1.0: bad descriptor, ignoring hub [ 2324.295290][T14056] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2324.300786][T14056] cdc_wdm 1-1:1.0: skipping garbage [ 2324.301699][T14056] cdc_wdm 1-1:1.0: skipping garbage [ 2324.321514][T14056] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2324.558166][ C1] wdm_int_callback: 1912 callbacks suppressed [ 2324.558382][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.559989][ C1] wdm_int_callback: 1912 callbacks suppressed [ 2324.560104][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.562780][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.563626][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.566111][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.566907][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.568280][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.569048][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.570217][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.571008][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.572389][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.573288][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.576062][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.577452][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.578831][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.579633][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.581027][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.582303][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.583699][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2324.584817][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2324.866001][ T53] usb 1-1: USB disconnect, device number 91 [ 2335.421410][T14153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.521230][T14153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2342.965981][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2343.029842][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.116483][ T3263] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2356.295166][ T3263] usb 1-1: Using ep0 maxpacket: 8 [ 2356.332450][ T3263] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2356.333307][ T3263] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2356.336413][ T3263] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2356.339144][ T3263] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2356.339952][ T3263] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2356.340988][ T3263] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2356.341713][ T3263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2356.631172][ T3263] usb 1-1: usb_control_msg returned -32 [ 2356.631733][ T3263] usbtmc 1-1:16.0: can't read capabilities [ 2361.039339][T14242] usbtmc 1-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 2361.261135][ T25] usb 1-1: USB disconnect, device number 92 [ 2362.542364][T14250] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3350'. [ 2367.969123][T14268] "syz.0.3357" (14268) uses obsolete ecb(arc4) skcipher [ 2371.003935][T14285] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3362'. [ 2376.435478][T14307] input: syz1 as /devices/virtual/input/input79 [ 2378.499648][T14326] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 2398.195196][T14388] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 2398.196574][T14388] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 2419.944499][T14056] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2420.155798][T14056] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2420.156911][T14056] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2420.157863][T14056] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2420.158937][T14056] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2420.160077][T14056] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2420.286705][T14056] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2420.287771][T14056] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2420.289738][T14056] usb 1-1: Product: syz [ 2420.290445][T14056] usb 1-1: Manufacturer: syz [ 2420.359170][T14056] cdc_wdm 1-1:1.0: skipping garbage [ 2420.359962][T14056] cdc_wdm 1-1:1.0: skipping garbage [ 2420.396333][T14056] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2420.574921][ T7400] usb 1-1: USB disconnect, device number 93 [ 2421.165337][ T7400] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2421.373031][ T7400] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2421.375781][ T7400] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2421.377158][ T7400] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2421.378227][ T7400] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2421.379283][ T7400] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2421.425507][ T7400] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2421.426532][ T7400] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2421.427390][ T7400] usb 1-1: Product: syz [ 2421.428048][ T7400] usb 1-1: Manufacturer: syz [ 2421.533801][ T7400] cdc_wdm 1-1:1.0: skipping garbage [ 2421.545205][ T7400] cdc_wdm 1-1:1.0: skipping garbage [ 2421.562116][ T7400] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2425.971092][ C0] wdm_int_callback: 19 callbacks suppressed [ 2425.971331][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2425.973041][ C0] wdm_int_callback: 19 callbacks suppressed [ 2425.973171][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2425.975681][T14056] usb 1-1: USB disconnect, device number 94 [ 2425.977668][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2425.978559][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2425.979460][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2430.498293][ T29] audit: type=1326 audit(2430.760:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.512934][ T29] audit: type=1326 audit(2430.770:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.522578][ T29] audit: type=1326 audit(2430.780:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.534640][ T29] audit: type=1326 audit(2430.790:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.536832][ T29] audit: type=1326 audit(2430.790:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.549468][ T29] audit: type=1326 audit(2430.800:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.558656][ T29] audit: type=1326 audit(2430.800:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.560399][ T29] audit: type=1326 audit(2430.810:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.562309][ T29] audit: type=1326 audit(2430.810:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2430.570958][ T29] audit: type=1326 audit(2430.820:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14483 comm="syz.0.3426" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb614a9a8 code=0x7ffc0000 [ 2433.328016][T14491] netlink: 'syz.0.3427': attribute type 10 has an invalid length. [ 2436.440101][T14503] pim6reg1: entered promiscuous mode [ 2436.440662][T14503] pim6reg1: entered allmulticast mode [ 2443.071380][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.076356][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.079317][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.081935][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.083342][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.092057][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.093588][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.096813][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.099318][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.100784][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.102835][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.104301][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.105429][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.106517][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.107612][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.108769][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.109855][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.110967][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.112073][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.114671][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.115776][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.116908][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.117962][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.118993][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.120032][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.121135][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.122177][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.123198][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.174378][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.175565][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.176730][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.177911][T12654] hid-generic 0000:04AD:0000.000B: unknown main item tag 0x0 [ 2443.329476][T12654] hid-generic 0000:04AD:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2443.430100][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2443.604642][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.730876][T14529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.898246][T14529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2458.497765][T14561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2458.718169][T14561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2468.440179][T14577] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3453'. [ 2479.852325][T14619] binder: binder_mmap: 14618 20400000-21000000 bad vm_flags failed -1 [ 2481.062137][T14640] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3471'. [ 2483.262043][T14656] UHID_CREATE from different security context by process 898 (syz.1.3477), this is not allowed. [ 2489.053062][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2489.202280][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2490.016187][ T17] ------------[ cut here ]------------ [ 2490.017318][ T17] WARNING: CPU: 0 PID: 17 at kernel/sched/deadline.c:1995 enqueue_dl_entity+0x47c/0x590 [ 2490.019197][ T17] Modules linked in: [ 2490.021209][ T17] CPU: 0 UID: 0 PID: 17 Comm: rcu_preempt Tainted: G B 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 2490.023425][ T17] Tainted: [B]=BAD_PAGE [ 2490.024654][ T17] Hardware name: linux,dummy-virt (DT) [ 2490.025919][ T17] pstate: a14000c9 (NzCv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 2490.028303][ T17] pc : enqueue_dl_entity+0x47c/0x590 [ 2490.030585][ T17] lr : dl_server_start+0x44/0x12c [ 2490.031379][ T17] sp : ffff800082b4b920 [ 2490.032088][ T17] x29: ffff800082b4b920 x28: faf000000570b780 x27: 0000000000000000 [ 2490.035543][ T17] x26: 0000000000000001 x25: 0000000000000000 x24: 0000000000000048 [ 2490.036870][ T17] x23: fff000007f8d5800 x22: 0000000000000001 x21: 000000000016e360 [ 2490.038079][ T17] x20: 0000000000000001 x19: fff000007f8d6168 x18: 0000000000000001 [ 2490.039309][ T17] x17: 0000000000000400 x16: 0000000000000006 x15: 0000000000000000 [ 2490.040557][ T17] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 2490.041800][ T17] x11: fff000007f8d5880 x10: 0000000000000000 x9 : 0000000000000001 [ 2490.043113][ T17] x8 : 0000000000100000 x7 : fff000007f8d5880 x6 : f7f00000092a1800 [ 2490.044769][ T17] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 [ 2490.045972][ T17] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000001 [ 2490.047391][ T17] Call trace: [ 2490.047956][ T17] enqueue_dl_entity+0x47c/0x590 [ 2490.048813][ T17] dl_server_start+0x44/0x12c [ 2490.049521][ T17] enqueue_task_fair+0x11c/0x3a4 [ 2490.050218][ T17] enqueue_task+0x3c/0xe0 [ 2490.051077][ T17] activate_task+0x68/0x80 [ 2490.051773][ T17] attach_task+0x4c/0x74 [ 2490.052461][ T17] sched_balance_rq+0x580/0xc74 [ 2490.053111][ T17] sched_balance_newidle.constprop.0+0x1b0/0x3e4 [ 2490.053893][ T17] pick_next_task_fair+0x50/0x320 [ 2490.054610][ T17] __schedule+0x15c/0x8f8 [ 2490.055261][ T17] schedule+0x34/0x104 [ 2490.055888][ T17] schedule_timeout+0x80/0xf4 [ 2490.056595][ T17] rcu_gp_fqs_loop+0x138/0x48c [ 2490.057274][ T17] rcu_gp_kthread+0x130/0x15c [ 2490.057932][ T17] kthread+0x114/0x118 [ 2490.058582][ T17] ret_from_fork+0x10/0x20 [ 2490.059462][ T17] ---[ end trace 0000000000000000 ]--- [ 2490.060669][ T17] ------------[ cut here ]------------ [ 2490.061317][ T17] WARNING: CPU: 0 PID: 17 at kernel/sched/deadline.c:1971 enqueue_dl_entity+0x4b0/0x590 [ 2490.062361][ T17] Modules linked in: [ 2490.063033][ T17] CPU: 0 UID: 0 PID: 17 Comm: rcu_preempt Tainted: G B W 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 2490.064848][ T17] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2490.065487][ T17] Hardware name: linux,dummy-virt (DT) [ 2490.066122][ T17] pstate: a14000c9 (NzCv daIF +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 2490.066981][ T17] pc : enqueue_dl_entity+0x4b0/0x590 [ 2490.067679][ T17] lr : enqueue_dl_entity+0x348/0x590 [ 2490.068386][ T17] sp : ffff800082b4b920 [ 2490.068951][ T17] x29: ffff800082b4b920 x28: faf000000570b780 x27: 0000000000000000 [ 2490.070155][ T17] x26: 0000000000000001 x25: 0000000000000000 x24: 0000000000000048 [ 2490.071358][ T17] x23: fff000007f8d5800 x22: 0000000000000001 x21: fff000007f8d6100 [ 2490.072627][ T17] x20: fff000007f8d5800 x19: fff000007f8d6168 x18: 0000000000000001 [ 2490.073863][ T17] x17: 0000000000000400 x16: 0000000000000006 x15: 0000000000000000 [ 2490.075044][ T17] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 2490.076261][ T17] x11: fff000007f8d5880 x10: 0000000000000000 x9 : 0000000000000001 [ 2490.077522][ T17] x8 : 00000000000ee468 x7 : 00000000000ee6b2 x6 : fff000007f8d6168 [ 2490.078739][ T17] x5 : 0000000b1874ec60 x4 : 000000044d720f38 x3 : 000000b000000000 [ 2490.079951][ T17] x2 : 000000003b9aca00 x1 : 000000003b91a0a0 x0 : 0000000000000001 [ 2490.081210][ T17] Call trace: [ 2490.081751][ T17] enqueue_dl_entity+0x4b0/0x590 [ 2490.082513][ T17] dl_server_start+0x44/0x12c [ 2490.083213][ T17] enqueue_task_fair+0x11c/0x3a4 [ 2490.084166][ T17] enqueue_task+0x3c/0xe0 [ 2490.084860][ T17] activate_task+0x68/0x80 [ 2490.085240][ T17] attach_task+0x4c/0x74 [ 2490.085578][ T17] sched_balance_rq+0x580/0xc74 [ 2490.086206][ T17] sched_balance_newidle.constprop.0+0x1b0/0x3e4 [ 2490.086788][ T17] pick_next_task_fair+0x50/0x320 [ 2490.087145][ T17] __schedule+0x15c/0x8f8 [ 2490.087483][ T17] schedule+0x34/0x104 [ 2490.087807][ T17] schedule_timeout+0x80/0xf4 [ 2490.088146][ T17] rcu_gp_fqs_loop+0x138/0x48c [ 2490.088639][ T17] rcu_gp_kthread+0x130/0x15c [ 2490.089257][ T17] kthread+0x114/0x118 [ 2490.089852][ T17] ret_from_fork+0x10/0x20 [ 2490.090521][ T17] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) VM DIAGNOSIS: 19:57:39 Registers: info registers vcpu 0 CPU#0 PC=ffff800081a488c4 X00=ffff80008274e520 X01=00000000000003c0 X02=ffff80008274e528 X03=0000000000000001 X04=ffff8000826f5400 X05=0000000000009744 X06=0000000000000c9b X07=ffff8000827fe638 X08=00000000ffffec9b X09=ffff80008274e638 X10=ffff8000828114c0 X11=0000000000000c9b X12=00000000000025d1 X13=ffff80008274e638 X14=2074706d65657270 X15=3a6465746e696154 X16=2042202020204720 X17=2020202020202020 X18=ffffffffffffffff X19=ffff80008274e520 X20=ffff80008298fba8 X21=ffff80008274e4a8 X22=0000000000000000 X23=00000000000003c0 X24=ffff80008274e520 X25=ffff80008249dea8 X26=ffff800082747000 X27=0000000000000001 X28=faf000000323a480 X29=ffff800082b4b2d0 X30=ffff800081a443c8 SP=ffff800082b4b2d0 PSTATE=624003c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081331c30 X00=000000000000000d X01=fff000007f8f2840 X02=ffff800081331c30 X03=fff07ffffd1ef000 X04=ffff80008000bf70 X05=fff07ffffd1ef000 X06=00000000014c43ad X07=f1f0000007d57700 X08=0000000000000060 X09=0000000000000aef X10=0000000000000051 X11=000000002c3da9ca X12=00000000ea3dc21c X13=00000000e1354183 X14=0000000000000001 X15=000000004f457505 X16=ffff800080008000 X17=fff07ffffd1ef000 X18=0000000000000014 X19=f3f0000003041000 X20=ffff800081ba75f8 X21=f6f000000300e600 X22=000000000000000d X23=ffff8000826fcb70 X24=00000000000000e8 X25=ffff800081572cfc X26=f1f0000007d577d0 X27=ffff800082720000 X28=f9f00000057c4900 X29=ffff80008000bf70 X30=ffff80008012f750 SP=ffff80008000bf70 PSTATE=204008c9 --C- EL2h SVCR=00000000 -- BTYPE=2 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0300000000000000:0300000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000300000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000003:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000003:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffde54a560:0000ffffde54a560 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffde54a530 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000