last executing test programs: 34m42.994460462s ago: executing program 1 (id=133): socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 34m42.923090423s ago: executing program 1 (id=134): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) writev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)='4', 0x1}], 0x1) 34m42.862033123s ago: executing program 1 (id=135): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34m39.902767163s ago: executing program 1 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 34m39.773221664s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000300)={0x80, 0x2, 0x1e00, 0xdb1, 0x4, "f21059be8b65aca30f3dbbdf7065bfeea59c28", 0x9, 0x1}) 34m39.542799376s ago: executing program 1 (id=148): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) 34m39.542649076s ago: executing program 32 (id=148): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r0, 0x4000) 24m32.560591033s ago: executing program 2 (id=2080): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) pipe2$9p(0x0, 0x80) 24m31.985103346s ago: executing program 2 (id=2081): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 24m31.821556607s ago: executing program 2 (id=2083): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) 24m30.561143406s ago: executing program 2 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0xa, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fb, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0x2, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7fd, 0x8, 0x7, 0x7fbffffe, 0x4da5, 0x8, 0xfffffa71, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0xa, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x40008000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x1000004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0xa, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x3, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x6, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x8, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x5, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x7, 0x6, 0xc, 0x1003, 0x9, 0x9, 0xe7, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x6a, 0x80000001, 0x6, 0x9bd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 24m29.804273101s ago: executing program 2 (id=2088): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 24m29.603330853s ago: executing program 2 (id=2089): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) 23m44.085503638s ago: executing program 33 (id=2089): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) 43.542397318s ago: executing program 0 (id=3708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x80000038, 0xfff, 0x3fffa, 0x180, 0x2, 0xfffffffffffffffe, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xeeee8000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 43.053098682s ago: executing program 0 (id=3710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="f01bec2c", 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 42.691833615s ago: executing program 0 (id=3712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) 42.314099867s ago: executing program 0 (id=3714): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) readv(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[0x0]) 42.0036627s ago: executing program 0 (id=3716): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r0, &(0x7f0000000840)='8', 0x1) 41.233061725s ago: executing program 0 (id=3717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 41.232895645s ago: executing program 34 (id=3717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) 9.880266287s ago: executing program 3 (id=3726): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x1, 0x3}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 8.19375995s ago: executing program 3 (id=3727): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) 4.12461103s ago: executing program 3 (id=3728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000000, 0x9d8}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x3501, 0x4, 0x0, 0x0, 0xfffffff7}]}]}, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, 0x0, 0x0) 1.566168468s ago: executing program 4 (id=3721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x2, 0x0) 1.063780762s ago: executing program 3 (id=3729): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) 861.896513ms ago: executing program 4 (id=3730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, &(0x7f0000000580)=0x0) timer_settime(r2, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000640)) 252.281748ms ago: executing program 3 (id=3731): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xc07c, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x3f60f1d7, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x3fe00, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, &(0x7f0000000040)) 0s ago: executing program 3 (id=3732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000786dd"], 0x4a) kernel console output (not intermixed with test programs): 740076][ T802] usb 1-1: Manufacturer: syz [ 857.743396][ T802] usb 1-1: SerialNumber: syz [ 857.766885][ T802] usb 1-1: config 0 descriptor?? [ 858.512977][ T9] usb 1-1: USB disconnect, device number 31 [ 862.332421][ T9653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.342493][ T9653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.402683][ T9653] hsr_slave_0: entered promiscuous mode [ 863.407862][ T9653] hsr_slave_1: entered promiscuous mode [ 863.415367][ T9653] debugfs: 'hsr0' already exists in 'hsr' [ 863.417875][ T9653] Cannot create hsr debugfs directory [ 865.253166][ T9653] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.292023][ T9653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.308170][ T9653] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.358303][ T9653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.373814][ T9653] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.418179][ T9653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.426906][ T9653] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.485376][ T9653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.171333][ T9711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2345'. [ 867.634826][ T9653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.682104][ T9653] veth0_vlan: entered promiscuous mode [ 875.667434][ T9653] veth1_vlan: entered promiscuous mode [ 880.694717][ T9653] veth0_macvtap: entered promiscuous mode [ 882.161371][ T9653] veth1_macvtap: entered promiscuous mode [ 882.580401][ T4218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.584178][ T4218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.604307][ T4218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.615051][ T4218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.799479][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 882.806693][ T28] audit: type=1326 audit(883.672:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9768 comm="syz.3.2355" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x0 [ 886.361255][ T802] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 886.526390][ T802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 886.533590][ T802] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.534490][ T802] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 886.536852][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.770082][ T802] usb 1-1: USB disconnect, device number 32 [ 889.070521][ T802] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 889.251845][ T802] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 889.272253][ T802] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 889.273177][ T802] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.273995][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.304907][ T802] hub 1-1:4.0: USB hub found [ 889.516823][ T802] hub 1-1:4.0: 2 ports detected [ 889.517285][ T802] usb 1-1: selecting invalid altsetting 1 [ 889.517484][ T802] hub 1-1:4.0: Using single TT (err -22) [ 889.764872][ T802] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 889.896246][ T802] usb 1-1: USB disconnect, device number 33 [ 890.082461][ T9836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.085779][ T9836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.218065][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.226065][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.129478][ T9861] binder: 9860:9861 ioctl 4018620d 0 returned -22 [ 900.143144][ T9861] binder: 9860:9861 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 900.143568][ T9861] binder: 9861 RLIMIT_NICE not set [ 900.840039][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 900.989946][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 901.034055][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 901.036519][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 901.052136][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 901.053674][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 901.102160][ T9] usb 1-1: string descriptor 0 read error: -22 [ 901.103742][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.155097][ T9868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 901.221176][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 901.222922][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 901.560013][ T9] usb 1-1: USB disconnect, device number 34 [ 902.266307][ T9874] udevd[9874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.930098][ T9951] ubi0: attaching mtd0 [ 909.018765][ T9951] ubi0: scanning is finished [ 909.027379][ T9951] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 909.080631][ T9951] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 912.595853][ T7982] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 912.751528][ T7982] usb 1-1: Using ep0 maxpacket: 8 [ 912.806666][ T7982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 912.808520][ T7982] usb 1-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 912.853540][ T7982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.855251][ T7982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 912.859240][ T7982] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 912.976097][ T7982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.977497][ T7982] usb 1-1: Product: syz [ 912.980835][ T7982] usb 1-1: Manufacturer: syz [ 912.992330][ T7982] usb 1-1: SerialNumber: syz [ 913.402687][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.408018][ T7982] usb 1-1: can't set first interface for hiFace device. [ 913.409401][ T7982] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 913.421054][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.474141][ T7982] usb 1-1: USB disconnect, device number 35 [ 913.930621][ T7982] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 914.082818][ T7982] usb 1-1: Using ep0 maxpacket: 8 [ 914.147239][ T7982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 914.148600][ T7982] usb 1-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 914.186941][ T7982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.188600][ T7982] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 914.192007][ T7982] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 914.278968][ T7982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.280720][ T7982] usb 1-1: Product: syz [ 914.282876][ T7982] usb 1-1: Manufacturer: syz [ 914.286362][ T7982] usb 1-1: SerialNumber: syz [ 914.858704][ T7982] usb 1-1: can't set first interface for hiFace device. [ 914.860697][ T7982] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 914.894017][ T7982] usb 1-1: USB disconnect, device number 36 [ 915.146886][ T9976] futex_wake_op: syz.0.2439 tries to shift op by 144; fix this program [ 915.155133][ T9976] futex_wake_op: syz.0.2439 tries to shift op by 144; fix this program [ 915.953538][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 916.120297][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 916.126147][ T9] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 916.153604][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 916.153998][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 916.154239][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 916.154364][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 916.215926][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.216281][ T9] usb 1-1: Product: syz [ 916.216501][ T9] usb 1-1: Manufacturer: syz [ 916.216625][ T9] usb 1-1: SerialNumber: syz [ 916.236115][ T9] usb 1-1: config 0 descriptor?? [ 916.265398][ T9982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 916.345171][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 916.521899][ T9] usb 1-1: USB disconnect, device number 37 [ 917.481655][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 917.641348][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 917.646504][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 917.681507][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.713236][ T9] usb 1-1: config 0 descriptor?? [ 921.952089][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.953840][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.877469][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.882793][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.912297][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.921327][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.264540][T10028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.266274][T10028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.400719][T10030] syzkaller0: entered promiscuous mode [ 924.401458][T10030] syzkaller0: entered allmulticast mode [ 924.888517][T10037] input: syz0 as /devices/virtual/input/input11 [ 925.154258][T10040] loop0: detected capacity change from 0 to 2049 [ 925.193550][T10040] loop0: [ 927.122577][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.124505][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.339404][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.343172][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.975348][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.995752][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.102016][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.104697][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.175752][ T10] usb 1-1: USB disconnect, device number 38 [ 932.870586][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 933.044842][ T10] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 933.083505][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 933.085944][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 933.091673][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 933.097997][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.145025][T10089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 933.183808][ T10] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 933.240618][ T10] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 933.496909][T10089] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 933.562931][ T10] usb 1-1: USB disconnect, device number 39 [ 933.642324][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 933.654071][ T10] cyberjack 1-1:1.0: device disconnected [ 934.217642][ T10] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 934.380068][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 934.385913][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 934.406927][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.408890][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.413632][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.437820][ T10] usb 1-1: config 0 descriptor?? [ 934.467403][ T10] hub 1-1:0.0: USB hub found [ 934.668693][ T10] hub 1-1:0.0: 1 port detected [ 935.405278][ T10] usb 1-1: USB disconnect, device number 40 [ 936.393310][ T29] bond0 (unregistering): Released all slaves [ 936.417730][ T29] bond1 (unregistering): Released all slaves [ 937.271218][T10106] tap0: tun_chr_ioctl cmd 2147767517 [ 938.358754][T10112] FAULT_INJECTION: forcing a failure. [ 938.358754][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 938.362038][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.0.2487 Tainted: G W syzkaller #0 PREEMPT [ 938.362210][T10112] Tainted: [W]=WARN [ 938.362250][T10112] Hardware name: linux,dummy-virt (DT) [ 938.362291][T10112] Call trace: [ 938.362326][T10112] show_stack+0x18/0x24 (C) [ 938.362440][T10112] dump_stack_lvl+0x60/0x80 [ 938.362519][T10112] dump_stack+0x18/0x24 [ 938.362592][T10112] should_fail_ex+0x1e0/0x238 [ 938.362672][T10112] should_failslab+0x54/0x80 [ 938.362747][T10112] kmem_cache_alloc_noprof+0x54/0x458 [ 938.362827][T10112] do_getname+0x3c/0x1a0 [ 938.362898][T10112] __arm64_sys_symlinkat+0x3c/0x80 [ 938.362979][T10112] invoke_syscall+0x54/0x10c [ 938.363054][T10112] el0_svc_common.constprop.0+0x40/0xe0 [ 938.363190][T10112] do_el0_svc+0x1c/0x34 [ 938.363264][T10112] el0_svc+0x38/0x1fc [ 938.363360][T10112] el0t_64_sync_handler+0xa0/0xe4 [ 938.363440][T10112] el0t_64_sync+0x1a4/0x1a8 [ 939.231524][T10094] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 940.673183][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 940.835091][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 940.838655][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 940.848450][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 940.848634][ T9] usb 1-1: config 0 has no interface number 0 [ 940.848799][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 940.848871][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 940.878570][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.878736][ T9] usb 1-1: Product: syz [ 940.878850][ T9] usb 1-1: Manufacturer: syz [ 940.878956][ T9] usb 1-1: SerialNumber: syz [ 940.891555][ T9] usb 1-1: config 0 descriptor?? [ 940.912780][T10128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 940.924378][T10128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 941.143832][T10128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 941.148325][T10128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 941.385570][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 941.475245][T10138] binder: 10137:10138 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 941.476599][T10138] binder: 10137:10138 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 941.485927][T10138] binder: 10137:10138 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 941.487527][T10138] binder: 10138 RLIMIT_NICE not set [ 942.060594][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 942.061436][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 942.087064][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 942.102489][ T9] usb 1-1: USB disconnect, device number 41 [ 942.511242][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.526324][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.887059][T10153] random: crng reseeded on system resumption [ 943.574663][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.576385][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.975200][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 944.143838][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 944.144089][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 944.154490][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 944.187492][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.192604][ T9] usb 1-1: Product: syz [ 944.205528][ T9] usb 1-1: Manufacturer: syz [ 944.206252][ T9] usb 1-1: SerialNumber: syz [ 944.578263][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 945.432499][ T9] usb 1-1: failed to enable PITCH for EP 0x82 [ 945.434843][ T9] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 945.439430][ T9] usb 1-1: clock source 0 is not valid, cannot use [ 945.448231][ T9] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 945.457082][ T9] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 945.708162][ T9] usb 1-1: USB disconnect, device number 42 [ 945.821119][T10090] udevd[10090]: setting owner of /dev/bus/usb/001/042 to uid=0, gid=0 failed: No such file or directory [ 946.130496][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 946.332387][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 946.334846][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.358582][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.391271][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.393090][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.412210][T10006] udevd[10006]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.423361][ T9] usb 1-1: config 0 descriptor?? [ 946.732894][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 946.733508][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 946.778880][ T9] usb 1-1: USB disconnect, device number 43 [ 947.137872][T10193] fuse: Bad value for 'fd' [ 947.284792][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 947.455947][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 947.507667][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.508011][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.523837][ T9] usb 1-1: config 0 descriptor?? [ 951.132999][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.154057][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.388718][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.399273][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.416882][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.421007][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.818619][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.826426][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.852409][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.859040][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.652288][ T10] usb 1-1: USB disconnect, device number 44 [ 961.176679][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 961.342787][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 961.360487][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.362256][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.366453][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.386352][ T10] usb 1-1: config 0 descriptor?? [ 961.660925][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 961.661571][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 961.691499][ T10] usb 1-1: USB disconnect, device number 45 [ 962.180469][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 962.340328][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 962.372613][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.374810][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.378599][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.402335][ T10] usb 1-1: config 0 descriptor?? [ 962.934048][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.934389][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.934628][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.934764][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.934892][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.935018][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.935192][ T10] hid-generic 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 962.970989][ T10] hid-generic 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 964.211705][T10229] binder: 10228:10229 ioctl c080661a 0 returned -22 [ 964.462646][T10231] FAULT_INJECTION: forcing a failure. [ 964.462646][T10231] name failslab, interval 1, probability 0, space 0, times 0 [ 964.465966][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.3.2534 Tainted: G W syzkaller #0 PREEMPT [ 964.466133][T10231] Tainted: [W]=WARN [ 964.466171][T10231] Hardware name: linux,dummy-virt (DT) [ 964.466213][T10231] Call trace: [ 964.466247][T10231] show_stack+0x18/0x24 (C) [ 964.466358][T10231] dump_stack_lvl+0x60/0x80 [ 964.466434][T10231] dump_stack+0x18/0x24 [ 964.466508][T10231] should_fail_ex+0x1e0/0x238 [ 964.466585][T10231] should_failslab+0x54/0x80 [ 964.466669][T10231] kmem_cache_alloc_noprof+0x54/0x458 [ 964.466749][T10231] __anon_vma_prepare+0x108/0x1c0 [ 964.466824][T10231] __vmf_anon_prepare+0x64/0x90 [ 964.466901][T10231] do_wp_page+0x2d0/0x11e0 [ 964.466969][T10231] __handle_mm_fault+0x9e8/0xec0 [ 964.467038][T10231] handle_mm_fault+0x98/0x338 [ 964.467148][T10231] do_page_fault+0x378/0x77c [ 964.467214][T10231] do_mem_abort+0x40/0x90 [ 964.467273][T10231] el0_da+0x38/0xf0 [ 964.467345][T10231] el0t_64_sync_handler+0xd0/0xe4 [ 964.467412][T10231] el0t_64_sync+0x1a4/0x1a8 [ 964.506547][T10231] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 973.147171][ T7982] usb 1-1: USB disconnect, device number 46 [ 974.027674][T10248] random: crng reseeded on system resumption [ 975.639213][T10263] random: crng reseeded on system resumption [ 975.922228][ T9] hid-generic 0005:046D:B012.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 976.412740][T10268] fido_id[10268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 978.158091][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.164170][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.394544][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.401890][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.207858][ T7982] hid-generic 0005:057E:0330.000A: item fetching failed at offset 3/4 [ 979.224226][ T7982] hid-generic 0005:057E:0330.000A: probe with driver hid-generic failed with error -22 [ 981.096466][T10299] FAULT_INJECTION: forcing a failure. [ 981.096466][T10299] name fail_futex, interval 1, probability 0, space 0, times 0 [ 981.098577][T10299] CPU: 0 UID: 0 PID: 10299 Comm: syz.3.2561 Tainted: G W syzkaller #0 PREEMPT [ 981.098737][T10299] Tainted: [W]=WARN [ 981.098776][T10299] Hardware name: linux,dummy-virt (DT) [ 981.098817][T10299] Call trace: [ 981.098852][T10299] show_stack+0x18/0x24 (C) [ 981.098961][T10299] dump_stack_lvl+0x60/0x80 [ 981.099037][T10299] dump_stack+0x18/0x24 [ 981.099178][T10299] should_fail_ex+0x1e0/0x238 [ 981.099257][T10299] should_fail+0x14/0x40 [ 981.099327][T10299] get_futex_key+0xdc/0x620 [ 981.099401][T10299] futex_wake+0x68/0x240 [ 981.099501][T10299] do_futex+0x178/0x210 [ 981.099575][T10299] __arm64_sys_futex+0x100/0x1a0 [ 981.099657][T10299] invoke_syscall+0x54/0x10c [ 981.099729][T10299] el0_svc_common.constprop.0+0x40/0xe0 [ 981.099801][T10299] do_el0_svc+0x1c/0x34 [ 981.099869][T10299] el0_svc+0x38/0x1fc [ 981.099950][T10299] el0t_64_sync_handler+0xa0/0xe4 [ 981.100027][T10299] el0t_64_sync+0x1a4/0x1a8 [ 981.972653][ T7982] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 982.023342][ T7982] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 982.575143][T10306] futex_wake_op: syz.0.2564 tries to shift op by 144; fix this program [ 982.576099][T10306] futex_wake_op: syz.0.2564 tries to shift op by 144; fix this program [ 994.094013][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.095628][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.095836][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.095908][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.095971][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.096038][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.096100][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.096161][ T10] hid-generic 0000:0000:0001.000C: unknown main item tag 0x0 [ 994.103792][ T10] hid-generic 0000:0000:0001.000C: hidraw0: HID v0.10 Device [syz0] on syz1 [ 994.131039][ T7982] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 994.281699][ T7982] usb 1-1: Using ep0 maxpacket: 16 [ 994.284229][ T7982] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 994.316449][ T7982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.317777][ T7982] usb 1-1: Product: syz [ 994.320796][ T7982] usb 1-1: Manufacturer: syz [ 994.324694][ T7982] usb 1-1: SerialNumber: syz [ 995.295158][ T7982] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 995.326362][ T7982] usb 1-1: USB disconnect, device number 47 [ 995.768346][T10322] fido_id[10322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 995.859251][ T7982] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 996.025819][ T7982] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 996.034163][ T7982] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 996.035015][ T7982] usb 1-1: config 0 has no interface number 0 [ 996.035983][ T7982] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 996.092063][ T7982] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 996.092899][ T7982] usb 1-1: Manufacturer: syz [ 996.095192][ T7982] usb 1-1: SerialNumber: syz [ 996.106423][ T7982] usb 1-1: config 0 descriptor?? [ 1006.377872][ T7982] usb 1-1: USB disconnect, device number 48 [ 1006.980225][ T7982] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1007.130578][ T7982] usb 1-1: Using ep0 maxpacket: 32 [ 1007.144233][ T7982] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1007.157844][ T7982] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1007.160817][ T7982] usb 1-1: config 0 has no interface number 0 [ 1007.167998][ T7982] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.173002][ T7982] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1007.211442][ T7982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.213316][ T7982] usb 1-1: Product: syz [ 1007.216482][ T7982] usb 1-1: Manufacturer: syz [ 1007.221179][ T7982] usb 1-1: SerialNumber: syz [ 1007.237297][ T7982] usb 1-1: config 0 descriptor?? [ 1007.812390][ T7982] usb 1-1: USB disconnect, device number 49 [ 1012.379257][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 1015.198438][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.212298][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.530610][T10446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1020.390119][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1020.566319][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1020.578262][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 1020.581045][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 1020.597552][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1020.600306][ T9] usb 1-1: config 1 has no interface number 0 [ 1020.604485][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1020.607669][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1020.652735][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.654060][ T9] usb 1-1: Product: syz [ 1020.658169][ T9] usb 1-1: Manufacturer: syz [ 1020.664058][ T9] usb 1-1: SerialNumber: syz [ 1021.191771][ T9] usb 1-1: 1:0 : does not exist [ 1021.198063][ T9] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1021.444278][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1021.453478][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1021.468175][ T9] snd_usb_pod 1-1:1.1: set_interface failed [ 1021.468873][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1021.477728][ T9] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1021.530247][ T9] usb 1-1: USB disconnect, device number 50 [ 1021.855256][T10457] udevd[10457]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.902820][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1022.064314][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1022.080791][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.082646][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1022.086945][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1022.090644][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.125589][ T9] usb 1-1: config 0 descriptor?? [ 1022.673823][ T9] hid-generic 0003:06CB:73F5.000D: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 1022.858422][ T9] usb 1-1: USB disconnect, device number 51 [ 1023.089108][T10461] fido_id[10461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1028.518898][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 1028.540763][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1029.503529][T10491] fido_id[10491]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1031.315120][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1031.480429][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1031.492504][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.498903][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.503468][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1031.508845][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1031.530574][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1031.580212][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1031.580514][ T9] usb 1-1: SerialNumber: syz [ 1031.684155][T10520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1031.712162][T10520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1031.757862][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 1031.765263][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1032.001840][T10520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1032.002546][T10520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1032.438495][ T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1032.791467][ T802] usb 1-1: USB disconnect, device number 52 [ 1032.796713][ T802] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1033.910488][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1034.104659][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1034.106074][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1034.123833][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.218142][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1034.220649][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1035.294647][T10550] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2652'. [ 1035.295049][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 1038.345694][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2657'. [ 1039.393727][ T9] input: syz0 as /devices/virtual/misc/uhid/0003:056A:003F.000F/input/input13 [ 1039.419781][ T9] hid-generic 0003:056A:003F.000F: input,hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 1039.868918][T10584] udc dummy_udc.0: unsupported command '' [ 1039.989208][T10580] fido_id[10580]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1048.564694][ T802] usb 1-1: USB disconnect, device number 53 [ 1051.370365][ T802] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1051.528496][ T802] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1051.543262][ T802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.545677][ T802] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1051.549030][ T802] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.553342][ T802] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1051.556352][ T802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1051.556773][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.576172][ T802] usb 1-1: config 0 descriptor?? [ 1052.077227][ T802] input: HID 046d:c53a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C53A.0010/input/input14 [ 1052.193143][ T802] hid-generic 0003:046D:C53A.0010: input,hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 1052.276510][ T9] usb 1-1: USB disconnect, device number 54 [ 1052.985768][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1053.079434][T10625] fido_id[10625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1053.166451][ T9] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1053.174028][ T9] usb 1-1: config 0 has no interfaces? [ 1053.174434][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.192388][ T9] usb 1-1: config 0 descriptor?? [ 1053.409054][ T7982] usb 1-1: USB disconnect, device number 55 [ 1068.910406][ T7982] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1069.080275][ T7982] usb 1-1: Using ep0 maxpacket: 16 [ 1069.146114][ T7982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1069.146501][ T7982] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1069.170809][ T7982] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 1069.171352][ T7982] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1069.171659][ T7982] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.218750][ T7982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.220555][ T7982] usb 1-1: Product: syz [ 1069.221444][ T7982] usb 1-1: Manufacturer: syz [ 1069.222253][ T7982] usb 1-1: SerialNumber: syz [ 1069.526519][ T7982] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1069.622979][ T7982] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1070.240135][ T7982] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1070.266833][ T7982] usb 1-1: USB disconnect, device number 56 [ 1072.032167][T10700] udevd[10700]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.100828][T10717] syz_tun: entered allmulticast mode [ 1082.193233][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1082.353953][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 1082.361917][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.364473][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1082.367477][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.374241][ T9] usb 1-1: config 0 descriptor?? [ 1082.915020][ T9] hid-generic 0003:056A:0039.0011: hidraw0: USB HID v0.7a Device [HID 056a:0039] on usb-dummy_hcd.0-1/input0 [ 1083.079263][ T9] usb 1-1: USB disconnect, device number 57 [ 1083.984867][T10744] fido_id[10744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1087.302753][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'. [ 1087.637432][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.642199][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.960278][ T802] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1091.109862][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 1091.114042][ T802] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1091.122845][ T802] usb 1-1: config 0 has an invalid interface number: 105 but max is 16 [ 1091.123562][ T802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.125268][ T802] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1091.127763][ T802] usb 1-1: config 0 has no interface number 0 [ 1091.144718][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 1091.145440][ T802] usb 1-1: Product: syz [ 1091.147190][ T802] usb 1-1: Manufacturer: syz [ 1091.154057][ T802] usb 1-1: SerialNumber: syz [ 1091.163321][ T802] usb 1-1: config 0 descriptor?? [ 1091.385224][ T10] usb 1-1: USB disconnect, device number 58 [ 1093.091785][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.094150][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.500635][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1093.683684][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1093.684273][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.740511][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.740844][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1093.741158][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1093.800509][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.801042][ T9] usb 1-1: Product: syz [ 1093.801402][ T9] usb 1-1: Manufacturer: syz [ 1093.801521][ T9] usb 1-1: SerialNumber: syz [ 1094.099332][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1094.118936][ T9] cdc_ncm 1-1:1.0: bind() failure [ 1094.217690][ T9] usb 1-1: USB disconnect, device number 59 [ 1095.050611][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1095.231226][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1095.232606][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1095.249054][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1095.276288][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.276622][ T9] usb 1-1: Product: syz [ 1095.276834][ T9] usb 1-1: Manufacturer: syz [ 1095.276941][ T9] usb 1-1: SerialNumber: syz [ 1095.584943][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1095.790832][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1095.792879][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1096.219437][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1096.511838][ T9] usb 1-1: USB disconnect, device number 60 [ 1097.195358][T10728] udevd[10728]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1098.640719][T10846] FAULT_INJECTION: forcing a failure. [ 1098.640719][T10846] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.640978][T10846] CPU: 0 UID: 60929 PID: 10846 Comm: syz.3.2767 Tainted: G W L syzkaller #0 PREEMPT [ 1098.641055][T10846] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1098.641075][T10846] Hardware name: linux,dummy-virt (DT) [ 1098.641096][T10846] Call trace: [ 1098.641117][T10846] show_stack+0x18/0x24 (C) [ 1098.641177][T10846] dump_stack_lvl+0x60/0x80 [ 1098.641214][T10846] dump_stack+0x18/0x24 [ 1098.641248][T10846] should_fail_ex+0x1e0/0x238 [ 1098.641286][T10846] should_failslab+0x54/0x80 [ 1098.641337][T10846] __kmalloc_cache_noprof+0x58/0x470 [ 1098.641401][T10846] key_user_lookup+0x84/0x18c [ 1098.641438][T10846] key_alloc+0x78/0x5a0 [ 1098.641470][T10846] keyring_alloc+0x54/0xb0 [ 1098.641503][T10846] install_process_keyring_to_cred+0x54/0x64 [ 1098.641540][T10846] keyctl_set_reqkey_keyring+0x80/0xd8 [ 1098.641575][T10846] __arm64_sys_keyctl+0x11c/0x290 [ 1098.641620][T10846] invoke_syscall+0x54/0x10c [ 1098.641656][T10846] el0_svc_common.constprop.0+0x40/0xe0 [ 1098.641691][T10846] do_el0_svc+0x1c/0x34 [ 1098.641724][T10846] el0_svc+0x38/0x1fc [ 1098.641765][T10846] el0t_64_sync_handler+0xa0/0xe4 [ 1098.641801][T10846] el0t_64_sync+0x1a4/0x1a8 [ 1099.355929][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.357936][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.903439][T10903] binder: 10902:10903 Acquire 1 refcount change on invalid ref 0 ret -22 [ 1107.906466][T10903] binder: 10902:10903 ioctl c0306201 200003c0 returned -14 [ 1108.713956][T10906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2790'. [ 1108.745762][T10906] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2790'. [ 1113.837542][T10930] xt_hashlimit: max too large, truncated to 1048576 [ 1115.938107][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.946473][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.667147][T10950] binder: 10949:10950 tried to acquire reference to desc 0, got 1 instead [ 1118.679866][T10950] binder: 10949:10950 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1118.681567][T10950] binder: 10950 RLIMIT_NICE not set [ 1118.685840][T10950] binder: 10950 RLIMIT_NICE not set [ 1118.694947][T10950] binder: release 10949:10950 transaction 42 out, still active [ 1118.695191][T10950] binder: release 10949:10950 transaction 35 in, still active [ 1118.697174][T10950] binder: undelivered TRANSACTION_COMPLETE [ 1118.892398][ T9] binder: release 10949:10950 transaction 35 out, still active [ 1118.892639][ T9] binder: undelivered TRANSACTION_COMPLETE [ 1118.892820][ T9] binder: send failed reply for transaction 42, target dead [ 1118.893029][ T9] binder: send failed reply for transaction 35, target dead [ 1119.742374][T10955] pim6reg1: entered promiscuous mode [ 1119.742590][T10955] pim6reg1: entered allmulticast mode [ 1120.546593][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1123.272842][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1123.921683][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1123.923745][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.945286][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.953058][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1123.958058][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.981262][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.983203][ T10] usb 1-1: Product: syz [ 1123.985849][ T10] usb 1-1: Manufacturer: syz [ 1123.994153][ T10] usb 1-1: SerialNumber: syz [ 1124.241718][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 1124.248336][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 1124.248501][ T10] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 1124.248613][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1124.248713][ T10] cdc_ncm 1-1:1.0: bind() failure [ 1124.290280][ T10] usb 1-1: USB disconnect, device number 61 [ 1126.996957][T11007] No such timeout policy "syz1" [ 1128.129956][T11021] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1128.132498][T11021] binder: 11020:11021 ioctl 4018620d 20004a80 returned -1 [ 1128.297340][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2844'. [ 1131.057466][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1131.221888][ T9] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=c8.51 [ 1131.230265][ T9] usb 1-1: config 2 has an invalid interface number: 255 but max is 0 [ 1131.232408][ T9] usb 1-1: config 2 has no interface number 0 [ 1131.234723][ T9] usb 1-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1131.236901][ T9] usb 1-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1131.241542][ T9] usb 1-1: config 2 interface 255 has no altsetting 0 [ 1131.256465][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.257354][ T9] usb 1-1: Product: syz [ 1131.260158][ T9] usb 1-1: Manufacturer: syz [ 1131.261783][ T9] usb 1-1: SerialNumber: syz [ 1131.500566][ T802] usb 1-1: USB disconnect, device number 62 [ 1132.128909][T11050] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1135.785288][T11080] fuse: Invalid rootmode [ 1136.152103][T11082] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2868' sets config #688 [ 1137.050680][T11093] FAULT_INJECTION: forcing a failure. [ 1137.050680][T11093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1137.051051][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.0.2873 Tainted: G W L syzkaller #0 PREEMPT [ 1137.051217][T11093] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1137.051258][T11093] Hardware name: linux,dummy-virt (DT) [ 1137.051300][T11093] Call trace: [ 1137.051332][T11093] show_stack+0x18/0x24 (C) [ 1137.051443][T11093] dump_stack_lvl+0x60/0x80 [ 1137.051518][T11093] dump_stack+0x18/0x24 [ 1137.051601][T11093] should_fail_ex+0x1e0/0x238 [ 1137.051678][T11093] should_fail_alloc_page+0x60/0x80 [ 1137.051753][T11093] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 1137.051828][T11093] alloc_pages_mpol+0x74/0x1b8 [ 1137.051898][T11093] alloc_frozen_pages_noprof+0x4c/0xd4 [ 1137.051972][T11093] alloc_pages_noprof+0x10/0x28 [ 1137.052040][T11093] anon_pipe_prefill_and_lock+0x88/0x1d4 [ 1137.052125][T11093] anon_pipe_write+0x60/0x5e0 [ 1137.052205][T11093] vfs_write+0x30c/0x36c [ 1137.052289][T11093] ksys_write+0xec/0x108 [ 1137.052367][T11093] __arm64_sys_write+0x18/0x24 [ 1137.052446][T11093] invoke_syscall+0x54/0x10c [ 1137.052524][T11093] el0_svc_common.constprop.0+0x40/0xe0 [ 1137.052613][T11093] do_el0_svc+0x1c/0x34 [ 1137.052681][T11093] el0_svc+0x38/0x1fc [ 1137.052766][T11093] el0t_64_sync_handler+0xa0/0xe4 [ 1137.052841][T11093] el0t_64_sync+0x1a4/0x1a8 [ 1138.468389][T11095] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2874'. [ 1139.421677][T11103] fuse: Bad value for 'rootmode' [ 1142.817168][T11123] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1143.318778][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e88dc972: rx timeout, send abort [ 1143.821112][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c1679b76: rx timeout, send abort [ 1143.821723][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e88dc972: abort rx timeout. Force session deactivation [ 1144.323843][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c1679b76: abort rx timeout. Force session deactivation [ 1145.881256][T11148] device-mapper: ioctl: Empty message received. [ 1153.138957][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1153.139394][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1155.409642][T11247] fuse: Unknown parameter 'use00000000000000000000' [ 1167.883903][T11269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1167.888220][T11269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1167.894210][T11269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1168.245209][T11276] netlink: 'syz.0.2951': attribute type 10 has an invalid length. [ 1168.246768][T11276] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1170.776463][T11300] netlink: 'syz.0.2960': attribute type 10 has an invalid length. [ 1172.462906][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.466067][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.139549][T11313] input: syz1 as /devices/virtual/input/input15 [ 1173.900173][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.924162][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.213604][T11320] loop8: detected capacity change from 0 to 7 [ 1180.517501][T11374] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.644424][T11384] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2994'. [ 1183.449881][ T802] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1183.600327][ T802] usb 1-1: Using ep0 maxpacket: 32 [ 1183.605489][ T802] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1183.621628][ T802] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.624437][ T802] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.628141][ T802] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1183.634988][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.653808][ T802] usb 1-1: config 0 descriptor?? [ 1184.172221][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.172520][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.172747][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.172877][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173002][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173123][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173242][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173360][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173491][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173611][ T802] hid-generic 0003:20BC:5500.0012: unknown main item tag 0x0 [ 1184.173795][ T802] hid-generic 0003:20BC:5500.0012: unbalanced collection at end of report description [ 1184.193967][ T802] hid-generic 0003:20BC:5500.0012: probe with driver hid-generic failed with error -22 [ 1184.375111][ T10] usb 1-1: USB disconnect, device number 63 [ 1190.164879][ T10] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 1190.214211][T11419] xt_hashlimit: size too large, truncated to 1048576 [ 1190.360519][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1190.361335][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1190.386222][ T10] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt [ 1190.387400][ T10] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt [ 1190.389644][ T10] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.392075][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1190.424145][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1190.425642][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.443245][T11413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1190.457493][T11413] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1190.489926][ T10] usb 1-1: No union descriptors [ 1191.705749][ T802] usb 1-1: USB disconnect, device number 64 [ 1193.837605][T11431] xt_cgroup: invalid path, errno=-2 [ 1193.849680][ T28] audit: type=1326 audit(1194.355:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.864171][ T28] audit: type=1326 audit(1194.375:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.870573][ T28] audit: type=1326 audit(1194.375:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.875027][ T28] audit: type=1326 audit(1194.375:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.878424][ T28] audit: type=1326 audit(1194.375:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=151 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.880897][ T28] audit: type=1326 audit(1194.375:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.883842][ T28] audit: type=1326 audit(1194.375:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.886884][ T28] audit: type=1326 audit(1194.375:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.894672][ T28] audit: type=1326 audit(1194.405:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1193.895152][ T28] audit: type=1326 audit(1194.405:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11430 comm="syz.3.3009" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1194.039277][T11431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.084122][T11431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.850362][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.871357][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.861799][T11455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.865915][T11455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.882705][T11455] netlink: 'syz.3.3019': attribute type 4 has an invalid length. [ 1196.894053][T11455] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1196.909892][T11455] .`: renamed from dummy0 (while UP) [ 1197.176366][T11457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.177946][T11457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.769455][T11463] syzkaller0: entered promiscuous mode [ 1198.773771][T11463] syzkaller0: entered allmulticast mode [ 1206.867345][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1207.034862][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1207.070166][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.092510][ T10] usb 1-1: config 0 descriptor?? [ 1207.378957][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1207.704461][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1207.709319][ T10] [drm] Initialized udl on minor 2 [ 1207.998601][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1208.004853][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1208.094656][ T802] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1208.113803][ T802] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1208.114675][ T802] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1208.123355][ T10] usb 1-1: USB disconnect, device number 65 [ 1208.780462][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1208.945477][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=2202, bcdDevice= 0.40 [ 1208.965159][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.998185][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.999715][ T9] usb 1-1: Product: syz [ 1209.001521][ T9] usb 1-1: Manufacturer: syz [ 1209.003168][ T9] usb 1-1: SerialNumber: syz [ 1209.287820][ T9] usb 1-1: USB disconnect, device number 66 [ 1210.752651][ T802] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1210.906354][ T802] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1210.913088][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.914108][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.920048][ T802] usb 1-1: config 0 descriptor?? [ 1211.215788][ T802] usbhid 1-1:0.0: can't add hid device: -71 [ 1211.216261][ T802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1211.225157][ T802] usb 1-1: USB disconnect, device number 67 [ 1211.713602][ T802] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1211.880267][ T802] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1211.885337][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.885589][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.893457][ T802] usb 1-1: config 0 descriptor?? [ 1213.483932][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.485560][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.714489][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.722691][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.080621][T11506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.103644][T11506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.877569][T11514] fuse: Unknown parameter 'fd0x0000000000000003' [ 1218.432168][T11528] fuse: Unknown parameter 'fd0x0000000000000003' [ 1221.370102][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.375418][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.213218][ T9] usb 1-1: USB disconnect, device number 68 [ 1224.421552][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1224.571881][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1224.577740][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1224.586235][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1224.587717][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1224.609060][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.611973][ T9] usb 1-1: Product: syz [ 1224.614976][ T9] usb 1-1: Manufacturer: syz [ 1224.617809][ T9] usb 1-1: SerialNumber: syz [ 1224.637542][ T9] usb 1-1: config 0 descriptor?? [ 1227.770276][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.771236][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.793291][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.794976][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.940939][T11588] xt_hashlimit: size too large, truncated to 1048576 [ 1231.806538][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 1231.808272][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 1232.622866][T11623] syzkaller0: entered promiscuous mode [ 1232.624147][T11623] syzkaller0: entered allmulticast mode [ 1236.220194][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.226905][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.273748][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.296856][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.992441][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.007247][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.653963][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 1237.656095][ T28] audit: type=1326 audit(1238.091:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.669724][ T28] audit: type=1326 audit(1238.101:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.679303][ T28] audit: type=1326 audit(1238.121:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.681135][ T28] audit: type=1326 audit(1238.121:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.686204][ T28] audit: type=1326 audit(1238.121:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.692328][ T28] audit: type=1326 audit(1238.131:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.698517][ T28] audit: type=1326 audit(1238.131:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.711055][ T28] audit: type=1326 audit(1238.151:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.713400][ T28] audit: type=1326 audit(1238.151:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1237.719712][ T28] audit: type=1326 audit(1238.151:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.3087" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1238.839247][ T10] usb 1-1: USB disconnect, device number 69 [ 1239.638194][ T802] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1239.802312][ T802] usb 1-1: Using ep0 maxpacket: 8 [ 1239.811549][ T802] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1239.864030][ T802] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1239.865534][ T802] usb 1-1: config 179 has no interface number 0 [ 1239.866815][ T802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1239.871701][ T802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1239.885252][ T802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1239.885668][ T802] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1239.885811][ T802] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1239.886055][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.963473][T11661] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1241.078287][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1241.078533][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1241.079357][ T10] usb 1-1: USB disconnect, device number 70 [ 1242.649330][T11680] nvme nvme0: failed to connect socket: -101 [ 1243.133851][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.153770][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.547264][ T28] audit: type=1326 audit(1244.984:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.550832][ T28] audit: type=1326 audit(1244.984:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.585624][ T28] audit: type=1326 audit(1245.024:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.588648][ T28] audit: type=1326 audit(1245.024:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.591226][ T28] audit: type=1326 audit(1245.024:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.601862][ T28] audit: type=1326 audit(1245.034:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.613283][ T28] audit: type=1326 audit(1245.034:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.625965][ T28] audit: type=1326 audit(1245.054:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=174 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.629408][ T28] audit: type=1326 audit(1245.054:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.643311][ T28] audit: type=1326 audit(1245.054:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11695 comm="syz.3.3106" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac979368 code=0x7ffc0000 [ 1244.939558][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.954491][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.904002][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.910064][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.952486][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1250.955828][T11726] hsr_slave_0: left promiscuous mode [ 1250.970019][T11726] hsr_slave_1: left promiscuous mode [ 1251.711033][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.715525][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.960874][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1254.124725][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1254.151008][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.152629][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.154351][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.174671][ T10] usb 1-1: config 0 descriptor?? [ 1255.017348][ T10] hid-generic 0003:1E7D:2CF6.0013: item fetching failed at offset 4/7 [ 1255.030437][ T10] hid-generic 0003:1E7D:2CF6.0013: probe with driver hid-generic failed with error -22 [ 1255.250589][ T10] usb 1-1: USB disconnect, device number 71 [ 1257.014508][T11774] syzkaller1: entered promiscuous mode [ 1257.017445][T11774] syzkaller1: entered allmulticast mode [ 1257.709528][T11777] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1258.214390][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1258.373790][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1258.386135][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1258.387267][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1258.401323][ T10] usb 1-1: config 9 has an invalid interface number: 57 but max is 0 [ 1258.404132][ T10] usb 1-1: config 9 has no interface number 0 [ 1258.410519][ T10] usb 1-1: config 9 interface 57 has no altsetting 0 [ 1258.441079][ T10] usb 1-1: string descriptor 0 read error: -22 [ 1258.445585][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.493415][ T10] usbhid 1-1:9.57: couldn't find an input interrupt endpoint [ 1268.727467][ T802] usb 1-1: USB disconnect, device number 72 [ 1269.304477][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.312982][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.742298][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1271.062535][ T802] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1271.218991][ T802] usb 1-1: New USB device found, idVendor=047f, idProduct=6352, bcdDevice= 0.ef [ 1271.233600][ T802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.235143][ T802] usb 1-1: config 0 has no interfaces? [ 1271.237895][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.255447][ T802] usb 1-1: config 0 descriptor?? [ 1271.671137][ T802] usb 1-1: USB disconnect, device number 73 [ 1271.905937][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1273.820631][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1275.944214][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1275.952637][T11879] bridge_slave_0: default FDB implementation only supports local addresses [ 1276.661135][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.669686][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1277.011266][T11889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.014079][T11889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.851586][ T28] audit: type=1326 audit(1279.251:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.855870][ T28] audit: type=1326 audit(1279.251:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.867823][ T28] audit: type=1326 audit(1279.251:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.872898][ T28] audit: type=1326 audit(1279.271:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.889398][ T28] audit: type=1326 audit(1279.291:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.889860][ T28] audit: type=1326 audit(1279.301:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.890066][ T28] audit: type=1326 audit(1279.301:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.911182][ T28] audit: type=1326 audit(1279.321:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.915761][ T28] audit: type=1326 audit(1279.321:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1278.929682][ T28] audit: type=1326 audit(1279.321:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11898 comm="syz.0.3191" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x7ffc0000 [ 1279.731324][ T10] hid-generic 0003:046D:C082.0014: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1281.134502][T11909] fido_id[11909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1282.219996][ T802] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1282.382892][ T802] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1282.413313][ T802] usb 1-1: config 2 has an invalid interface number: 4 but max is 0 [ 1282.417427][ T802] usb 1-1: config 2 has no interface number 0 [ 1282.418436][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.507160][ T802] ums-realtek 1-1:2.4: USB Mass Storage device detected [ 1282.696080][ T10] usb 1-1: USB disconnect, device number 74 [ 1283.964762][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a8780151: rx timeout, send abort [ 1284.465473][ C0] vcan0: j1939_tp_rxtimer: 0x00000000785d6a11: rx timeout, send abort [ 1284.465778][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a8780151: abort rx timeout. Force session deactivation [ 1284.976003][ C0] vcan0: j1939_tp_rxtimer: 0x00000000785d6a11: abort rx timeout. Force session deactivation [ 1285.489975][ T802] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1285.639986][ T802] usb 1-1: Using ep0 maxpacket: 16 [ 1285.646086][ T802] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1285.664686][ T802] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 1285.666070][ T802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.671147][ T802] usb 1-1: config 0 has no interface number 0 [ 1285.674620][ T802] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1285.677944][ T802] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1285.685782][ T802] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1285.689106][ T802] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1285.692839][ T802] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1285.696666][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.721550][ T802] usb 1-1: config 0 descriptor?? [ 1285.759480][T11951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1285.814655][ T802] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.338954][ T802] usb 1-1: USB disconnect, device number 75 [ 1286.506423][T11491] udevd[11491]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1286.837215][ C0] vcan0: j1939_tp_rxtimer: 0x000000001f2b9d88: rx timeout, send abort [ 1287.337724][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e452db51: rx timeout, send abort [ 1287.338991][ C0] vcan0: j1939_tp_rxtimer: 0x000000001f2b9d88: abort rx timeout. Force session deactivation [ 1287.782630][T11963] binder: 11962:11963 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1287.838832][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e452db51: abort rx timeout. Force session deactivation [ 1289.742929][ C0] vcan0: j1939_tp_rxtimer: 0x00000000162a8bf9: rx timeout, send abort [ 1290.243587][ C0] vcan0: j1939_tp_rxtimer: 0x000000006db20312: rx timeout, send abort [ 1290.243853][ C0] vcan0: j1939_tp_rxtimer: 0x00000000162a8bf9: abort rx timeout. Force session deactivation [ 1290.744331][ C0] vcan0: j1939_tp_rxtimer: 0x000000006db20312: abort rx timeout. Force session deactivation [ 1292.112286][T11979] bond1: Unable to set up delay as MII monitoring is disabled [ 1292.131649][T11979] bond1 (unregistering): Released all slaves [ 1292.750888][ C0] vcan0: j1939_tp_rxtimer: 0x000000001f5facef: rx timeout, send abort [ 1292.773721][ T802] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1292.929773][ T802] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1292.951237][ T802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1292.951644][ T802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1292.986237][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1292.987722][ T802] usb 1-1: Product: syz [ 1292.990587][ T802] usb 1-1: Manufacturer: syz [ 1293.037366][ T802] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1293.251249][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a3dee9d2: rx timeout, send abort [ 1293.253374][ C0] vcan0: j1939_tp_rxtimer: 0x000000001f5facef: abort rx timeout. Force session deactivation [ 1293.752124][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a3dee9d2: abort rx timeout. Force session deactivation [ 1293.758967][ T802] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 1293.850373][ T802] usb 1-1: USB disconnect, device number 76 [ 1293.916499][ T802] mos7840 1-1:1.0: device disconnected [ 1293.971891][T11472] udevd[11472]: setting mode of /dev/bus/usb/001/076 to 020664 failed: No such file or directory [ 1293.989270][T11472] udevd[11472]: setting owner of /dev/bus/usb/001/076 to uid=0, gid=0 failed: No such file or directory [ 1299.227259][ C0] vcan0: j1939_tp_rxtimer: 0x000000000882c29c: rx timeout, send abort [ 1299.727743][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d447ad4e: rx timeout, send abort [ 1299.728300][ C0] vcan0: j1939_tp_rxtimer: 0x000000000882c29c: abort rx timeout. Force session deactivation [ 1300.228505][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d447ad4e: abort rx timeout. Force session deactivation [ 1300.353179][T12011] FAULT_INJECTION: forcing a failure. [ 1300.353179][T12011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1300.353559][T12011] CPU: 0 UID: 0 PID: 12011 Comm: syz.3.3232 Tainted: G W L syzkaller #0 PREEMPT [ 1300.353693][T12011] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1300.353734][T12011] Hardware name: linux,dummy-virt (DT) [ 1300.353777][T12011] Call trace: [ 1300.353810][T12011] show_stack+0x18/0x24 (C) [ 1300.353918][T12011] dump_stack_lvl+0x60/0x80 [ 1300.353993][T12011] dump_stack+0x18/0x24 [ 1300.354064][T12011] should_fail_ex+0x1e0/0x238 [ 1300.354151][T12011] should_fail+0x14/0x40 [ 1300.354221][T12011] should_fail_usercopy+0x1c/0x40 [ 1300.354293][T12011] strncpy_from_user+0x24/0x1c0 [ 1300.354366][T12011] __arm64_sys_add_key+0x60/0x21c [ 1300.354446][T12011] invoke_syscall+0x54/0x10c [ 1300.354520][T12011] el0_svc_common.constprop.0+0x40/0xe0 [ 1300.354598][T12011] do_el0_svc+0x1c/0x34 [ 1300.354672][T12011] el0_svc+0x38/0x1fc [ 1300.354750][T12011] el0t_64_sync_handler+0xa0/0xe4 [ 1300.354817][T12011] el0t_64_sync+0x1a4/0x1a8 [ 1308.337065][T12036] input: syz0 as /devices/virtual/input/input16 [ 1313.025469][T12047] fuse: Bad value for 'fd' [ 1319.327939][T12062] fuse: Bad value for 'fd' [ 1321.791572][T12068] input: syz0 as /devices/virtual/input/input17 [ 1325.182573][T12079] input: syz0 as /devices/virtual/input/input18 [ 1341.728072][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1341.878196][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1341.925877][ T10] usb 1-1: New USB device found, idVendor=16d8, idProduct=6281, bcdDevice=73.36 [ 1341.944441][ T10] usb 1-1: config 5 has an invalid interface number: 100 but max is 3 [ 1341.945879][ T10] usb 1-1: config 5 has an invalid interface number: 243 but max is 3 [ 1341.949070][ T10] usb 1-1: config 5 has an invalid interface number: 178 but max is 3 [ 1341.952079][ T10] usb 1-1: config 5 has an invalid interface number: 202 but max is 3 [ 1341.955321][ T10] usb 1-1: config 5 has an invalid interface number: 130 but max is 3 [ 1341.962196][ T10] usb 1-1: config 5 has 5 interfaces, different from the descriptor's value: 4 [ 1341.965935][ T10] usb 1-1: config 5 has no interface number 0 [ 1341.969448][ T10] usb 1-1: config 5 has no interface number 1 [ 1341.976262][ T10] usb 1-1: config 5 has no interface number 2 [ 1341.976625][ T10] usb 1-1: config 5 has no interface number 3 [ 1341.976735][ T10] usb 1-1: config 5 has no interface number 4 [ 1341.977060][ T10] usb 1-1: config 5 interface 100 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1341.977614][ T10] usb 1-1: config 5 interface 100 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 1341.977791][ T10] usb 1-1: config 5 interface 100 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1341.978006][ T10] usb 1-1: config 5 interface 100 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 64 [ 1341.978144][ T10] usb 1-1: config 5 interface 100 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1341.978269][ T10] usb 1-1: config 5 interface 100 altsetting 5 has 7 endpoint descriptors, different from the interface descriptor's value: 11 [ 1341.978396][ T10] usb 1-1: too many endpoints for config 5 interface 243 altsetting 145: 116, using maximum allowed: 30 [ 1341.978589][ T10] usb 1-1: config 5 interface 243 altsetting 145 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1341.978738][ T10] usb 1-1: config 5 interface 243 altsetting 145 bulk endpoint 0x7 has invalid maxpacket 16 [ 1341.978869][ T10] usb 1-1: config 5 interface 243 altsetting 145 has a duplicate endpoint with address 0x5, skipping [ 1341.978997][ T10] usb 1-1: config 5 interface 243 altsetting 145 has a duplicate endpoint with address 0x1, skipping [ 1341.979171][ T10] usb 1-1: config 5 interface 243 altsetting 145 has 4 endpoint descriptors, different from the interface descriptor's value: 116 [ 1341.979355][ T10] usb 1-1: config 5 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1341.979495][ T10] usb 1-1: config 5 interface 202 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1341.979642][ T10] usb 1-1: config 5 interface 202 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1341.979757][ T10] usb 1-1: config 5 interface 202 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1341.979887][ T10] usb 1-1: config 5 interface 202 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 1341.980009][ T10] usb 1-1: config 5 interface 202 altsetting 7 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 1341.980140][ T10] usb 1-1: config 5 interface 202 altsetting 7 endpoint 0x8C has an invalid bInterval 38, changing to 7 [ 1341.980268][ T10] usb 1-1: config 5 interface 202 altsetting 7 endpoint 0x8C has invalid maxpacket 25684, setting to 1024 [ 1341.980405][ T10] usb 1-1: config 5 interface 202 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1341.980539][ T10] usb 1-1: config 5 interface 202 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1341.980669][ T10] usb 1-1: config 5 interface 202 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1341.980787][ T10] usb 1-1: config 5 interface 202 altsetting 7 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1341.980961][ T10] usb 1-1: config 5 interface 100 has no altsetting 0 [ 1341.981080][ T10] usb 1-1: config 5 interface 243 has no altsetting 0 [ 1341.981191][ T10] usb 1-1: config 5 interface 178 has no altsetting 0 [ 1341.981308][ T10] usb 1-1: config 5 interface 202 has no altsetting 0 [ 1341.981427][ T10] usb 1-1: config 5 interface 130 has no altsetting 0 [ 1342.086754][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.087045][ T10] usb 1-1: Product: Եಘ㙴䯍䌱퍌추討뫆淌뛑ሶ㵐䌿붯褎樨뻏᳷屢솷푞钀ꔽ襎ỳ朌⬘շ蕆ﾃ䌛殂잡㸩ᛣ椄稐ꤨ藖刚 [ 1342.087510][ T10] usb 1-1: Manufacturer: Ь [ 1342.087636][ T10] usb 1-1: SerialNumber: ᡞ뚊騫洈䝦阓䕇ݛ擧䋊啐渚㽉댃扈튨꼮烕쒙⢑맦ቷ㫀ꄢܤ憹䘂羶ᄮ࿹ﵘ揮㧐皁见㘅봮僭蚸ҽꦟ羮ᦤ睟ዔ⨇䙆战찎䯪࣬쀽縁ݶ䅔髢띢愵쩓書椐꫕ [ 1342.119107][T12091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1342.143241][T12091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1344.599028][ T10] option 1-1:5.100: GSM modem (1-port) converter detected [ 1344.715800][ T10] option 1-1:5.243: GSM modem (1-port) converter detected [ 1344.815587][ T10] option 1-1:5.178: GSM modem (1-port) converter detected [ 1344.882499][ T10] option 1-1:5.202: GSM modem (1-port) converter detected [ 1344.973655][ T10] option 1-1:5.130: GSM modem (1-port) converter detected [ 1345.039800][ T10] usb 1-1: USB disconnect, device number 77 [ 1345.089256][ T10] option 1-1:5.100: device disconnected [ 1345.141539][ T10] option 1-1:5.243: device disconnected [ 1345.162653][ T10] option 1-1:5.178: device disconnected [ 1345.205488][ T10] option 1-1:5.202: device disconnected [ 1345.259425][ T10] option 1-1:5.130: device disconnected [ 1347.692096][T12118] input: syz0 as /devices/virtual/input/input19 [ 1349.502527][T12121] input: syz0 as /devices/virtual/input/input20 [ 1367.225645][T12137] input: syz0 as /devices/virtual/input/input21 [ 1404.787689][T12187] input: syz0 as /devices/virtual/input/input24 [ 1425.669993][T12214] input: syz0 as /devices/virtual/input/input26 [ 1431.422770][T12238] input: syz0 as /devices/virtual/input/input27 [ 1442.581417][T12248] input: syz0 as /devices/virtual/input/input28 [ 1460.100440][T12274] input: syz0 as /devices/virtual/input/input29 [ 1460.278297][T12271] input: syz0 as /devices/virtual/input/input30 [ 1472.097076][T12289] input: syz0 as /devices/virtual/input/input31 [ 1485.518862][T12300] sock: sock_set_timeout: `syz.0.3315' (pid 12300) tries to set negative timeout [ 1492.626342][T11334] syz_tun (unregistering): left allmulticast mode [ 1496.570451][T12302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1496.595539][T12302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.558206][T12302] hsr_slave_0: entered promiscuous mode [ 1498.568338][T12302] hsr_slave_1: entered promiscuous mode [ 1499.713765][T12302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.823233][T12302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.903204][T12302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.994644][T12302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.498039][T12302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1500.546472][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1500.564804][T12302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1500.599167][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1500.617137][T12302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1500.652768][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1500.661691][T12302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1500.692460][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1502.121567][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.947360][T12302] veth0_vlan: entered promiscuous mode [ 1505.996237][T12302] veth1_vlan: entered promiscuous mode [ 1506.158524][T12302] veth0_macvtap: entered promiscuous mode [ 1506.198446][T12302] veth1_macvtap: entered promiscuous mode [ 1506.560414][ T9742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.561398][ T9742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.563432][ T9742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.589217][ T9742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.067507][T12412] FAULT_INJECTION: forcing a failure. [ 1522.067507][T12412] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.069093][T12412] CPU: 0 UID: 0 PID: 12412 Comm: syz.3.3327 Tainted: G W L syzkaller #0 PREEMPT [ 1522.069183][T12412] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1522.069204][T12412] Hardware name: linux,dummy-virt (DT) [ 1522.069225][T12412] Call trace: [ 1522.069242][T12412] show_stack+0x18/0x24 (C) [ 1522.069303][T12412] dump_stack_lvl+0x60/0x80 [ 1522.069340][T12412] dump_stack+0x18/0x24 [ 1522.069374][T12412] should_fail_ex+0x1e0/0x238 [ 1522.069412][T12412] should_failslab+0x54/0x80 [ 1522.069448][T12412] kmem_cache_alloc_noprof+0x54/0x458 [ 1522.069486][T12412] security_file_alloc+0x30/0x1a0 [ 1522.069524][T12412] init_file+0x3c/0x10c [ 1522.069562][T12412] alloc_empty_file+0x74/0x130 [ 1522.069595][T12412] alloc_file_pseudo+0xb0/0x160 [ 1522.069628][T12412] anon_inode_getfile+0x70/0xf0 [ 1522.069664][T12412] bpf_link_prime+0xcc/0x168 [ 1522.069702][T12412] bpf_xdp_link_attach+0xc8/0x274 [ 1522.069740][T12412] __sys_bpf+0x19ec/0x1d1c [ 1522.069776][T12412] __arm64_sys_bpf+0x2c/0x40 [ 1522.069811][T12412] invoke_syscall+0x54/0x10c [ 1522.069845][T12412] el0_svc_common.constprop.0+0x40/0xe0 [ 1522.069880][T12412] do_el0_svc+0x1c/0x34 [ 1522.069913][T12412] el0_svc+0x38/0x1fc [ 1522.069952][T12412] el0t_64_sync_handler+0xa0/0xe4 [ 1522.069989][T12412] el0t_64_sync+0x1a4/0x1a8 [ 1529.485142][T12447] input: syz0 as /devices/virtual/input/input34 [ 1530.750415][T12452] input: syz0 as /devices/virtual/input/input35 [ 1548.860914][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.870508][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.681363][T12467] fuse: Bad value for 'fd' [ 1551.746014][T12469] input: syz0 as /devices/virtual/input/input36 [ 1555.711131][T12479] input: syz0 as /devices/virtual/input/input37 [ 1566.580766][T12498] input: syz0 as /devices/virtual/input/input38 [ 1569.081037][T12504] input: syz0 as /devices/virtual/input/input39 [ 1584.174909][T12521] input: syz0 as /devices/virtual/input/input40 [ 1588.424078][T12531] input: syz0 as /devices/virtual/input/input41 [ 1588.940483][T12533] input: syz0 as /devices/virtual/input/input42 [ 1596.913080][T12545] input: syz0 as /devices/virtual/input/input43 [ 1621.228340][T12582] input: syz0 as /devices/virtual/input/input44 [ 1629.980389][T12599] input: syz0 as /devices/virtual/input/input45 [ 1649.524853][T12626] input: syz0 as /devices/virtual/input/input46 [ 1653.973689][T12636] input: syz0 as /devices/virtual/input/input47 [ 1669.949905][ T10] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1670.119885][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1670.127822][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 1670.144521][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1670.167244][ T10] usb 1-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1670.170003][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1670.226036][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.227645][ T10] usb 1-1: Product: d [ 1670.234168][ T10] usb 1-1: Manufacturer: У [ 1670.236977][ T10] usb 1-1: SerialNumber: ៬໛枕삩떐⽤꓌訑달齏怒㣀뫣鳯禥槛䗯眓皕札獝癯⬳ꖜ컰랇ⱇﰂ⸶菉ᰕ䥡겨矟숏⹦ꡧꔖ⮔舍坘ꈫꃻ衄뿁ꔰ畈둪㢽鰀࢙꩞큛઱㍆鐺皦瀭早ꞷ挙帻褭Ĉេ誷歩꽕㈑覔鋯쪉跫ᇷ嗚 [ 1670.574575][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1670.602347][ T10] usb 1-1: USB disconnect, device number 78 [ 1675.177847][T12663] FAULT_INJECTION: forcing a failure. [ 1675.177847][T12663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1675.178240][T12663] CPU: 0 UID: 0 PID: 12663 Comm: syz.0.3402 Tainted: G W L syzkaller #0 PREEMPT [ 1675.178371][T12663] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1675.178423][T12663] Hardware name: linux,dummy-virt (DT) [ 1675.178465][T12663] Call trace: [ 1675.178498][T12663] show_stack+0x18/0x24 (C) [ 1675.178606][T12663] dump_stack_lvl+0x60/0x80 [ 1675.178681][T12663] dump_stack+0x18/0x24 [ 1675.178752][T12663] should_fail_ex+0x1e0/0x238 [ 1675.178829][T12663] should_fail_alloc_page+0x60/0x80 [ 1675.178903][T12663] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 1675.178983][T12663] alloc_pages_mpol+0x74/0x1b8 [ 1675.179054][T12663] folio_alloc_mpol_noprof+0x14/0x68 [ 1675.179181][T12663] vma_alloc_folio_noprof+0x80/0xcc [ 1675.179253][T12663] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 1675.179327][T12663] do_anonymous_page+0x2b0/0x9b8 [ 1675.179448][T12663] __handle_mm_fault+0xa5c/0xec0 [ 1675.179530][T12663] handle_mm_fault+0x98/0x338 [ 1675.179604][T12663] do_page_fault+0x23c/0x77c [ 1675.179672][T12663] do_translation_fault+0x5c/0x6c [ 1675.179740][T12663] do_mem_abort+0x40/0x90 [ 1675.179805][T12663] el1_abort+0x44/0x64 [ 1675.179878][T12663] el1h_64_sync_handler+0x50/0xac [ 1675.179953][T12663] el1h_64_sync+0x6c/0x70 [ 1675.180131][T12663] setup_rt_frame+0x168/0x1120 (P) [ 1675.180213][T12663] arch_do_signal_or_restart+0x220/0x3dc [ 1675.180283][T12663] exit_to_user_mode_loop+0x114/0x19c [ 1675.180356][T12663] el0_svc+0x1f0/0x1fc [ 1675.180446][T12663] el0t_64_sync_handler+0xa0/0xe4 [ 1675.180520][T12663] el0t_64_sync+0x1a4/0x1a8 [ 1681.558719][T12680] input: syz0 as /devices/virtual/input/input49 [ 1689.692035][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1694.032919][T12692] fuse: root generation should be zero [ 1701.270908][T12704] input: syz0 as /devices/virtual/input/input50 [ 1704.730369][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.732046][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.291226][T12719] input: syz0 as /devices/virtual/input/input51 [ 1721.855791][T12726] input: syz0 as /devices/virtual/input/input52 [ 1734.310376][T12744] input: syz0 as /devices/virtual/input/input53 [ 1735.672007][T12746] FAULT_INJECTION: forcing a failure. [ 1735.672007][T12746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.672435][T12746] CPU: 0 UID: 0 PID: 12746 Comm: syz.3.3423 Tainted: G W L syzkaller #0 PREEMPT [ 1735.672571][T12746] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1735.672612][T12746] Hardware name: linux,dummy-virt (DT) [ 1735.672653][T12746] Call trace: [ 1735.672684][T12746] show_stack+0x18/0x24 (C) [ 1735.672795][T12746] dump_stack_lvl+0x60/0x80 [ 1735.672870][T12746] dump_stack+0x18/0x24 [ 1735.672938][T12746] should_fail_ex+0x1e0/0x238 [ 1735.673011][T12746] should_fail+0x14/0x40 [ 1735.673086][T12746] should_fail_usercopy+0x1c/0x40 [ 1735.673151][T12746] restore_altstack+0x34/0x128 [ 1735.673215][T12746] __arm64_sys_rt_sigreturn+0xd4/0x224 [ 1735.673281][T12746] invoke_syscall+0x54/0x10c [ 1735.673348][T12746] el0_svc_common.constprop.0+0x40/0xe0 [ 1735.673414][T12746] do_el0_svc+0x1c/0x34 [ 1735.673481][T12746] el0_svc+0x38/0x1fc [ 1735.673557][T12746] el0t_64_sync_handler+0xa0/0xe4 [ 1735.673635][T12746] el0t_64_sync+0x1a4/0x1a8 [ 1742.964925][T12753] input: syz0 as /devices/virtual/input/input54 [ 1752.243149][T12759] input: syz0 as /devices/virtual/input/input55 [ 1766.586041][T12771] FAULT_INJECTION: forcing a failure. [ 1766.586041][T12771] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.594144][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.0.3427 Tainted: G W L syzkaller #0 PREEMPT [ 1766.594349][T12771] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1766.594393][T12771] Hardware name: linux,dummy-virt (DT) [ 1766.594439][T12771] Call trace: [ 1766.594478][T12771] show_stack+0x18/0x24 (C) [ 1766.594600][T12771] dump_stack_lvl+0x60/0x80 [ 1766.594680][T12771] dump_stack+0x18/0x24 [ 1766.594757][T12771] should_fail_ex+0x1e0/0x238 [ 1766.594838][T12771] should_failslab+0x54/0x80 [ 1766.594928][T12771] kmem_cache_alloc_noprof+0x54/0x458 [ 1766.595012][T12771] skb_clone+0x60/0xc4 [ 1766.595118][T12771] __netlink_deliver_tap+0x1cc/0x294 [ 1766.595208][T12771] netlink_unicast+0x380/0x3ac [ 1766.595289][T12771] netlink_sendmsg+0x194/0x410 [ 1766.595371][T12771] __sock_sendmsg+0x54/0x60 [ 1766.595445][T12771] ____sys_sendmsg+0x250/0x2a8 [ 1766.595519][T12771] ___sys_sendmsg+0xb0/0x108 [ 1766.595592][T12771] __sys_sendmsg+0x9c/0x100 [ 1766.595667][T12771] __arm64_sys_sendmsg+0x20/0x38 [ 1766.595743][T12771] invoke_syscall+0x54/0x10c [ 1766.595824][T12771] el0_svc_common.constprop.0+0x40/0xe0 [ 1766.595912][T12771] do_el0_svc+0x1c/0x34 [ 1766.595985][T12771] el0_svc+0x38/0x1fc [ 1766.596069][T12771] el0t_64_sync_handler+0xa0/0xe4 [ 1766.596149][T12771] el0t_64_sync+0x1a4/0x1a8 [ 1766.971835][T12774] input: syz0 as /devices/virtual/input/input56 [ 1780.844179][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.862285][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.908215][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.945749][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.976928][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.994865][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.033102][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.038893][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.818542][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.820174][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.838368][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.842743][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.761797][T12820] fuse: Unknown parameter 'user_id00000000000000000000' [ 1803.552847][T12836] input: syz0 as /devices/virtual/input/input58 [ 1804.102767][T12838] fuse: Unknown parameter 'user_id00000000000000000000' [ 1804.333187][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.354995][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.540045][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1804.644106][T12851] input: syz0 as /devices/virtual/input/input59 [ 1804.695470][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1804.703919][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 0.40 [ 1804.723603][ T10] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.723971][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1804.752745][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.752936][ T10] usb 1-1: Product: Л [ 1804.753057][ T10] usb 1-1: Manufacturer: Ј [ 1804.753115][ T10] usb 1-1: SerialNumber: syz [ 1809.912536][ T10] usbhid 1-1:1.0: can't add hid device: -32 [ 1809.918525][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1815.082882][ T9] usb 1-1: USB disconnect, device number 79 [ 1817.888773][T12870] fuse: Bad value for 'fd' [ 1821.611697][T12875] input: syz0 as /devices/virtual/input/input60 [ 1834.259915][T12887] fuse: Bad value for 'fd' [ 1835.951879][T12891] input: syz0 as /devices/virtual/input/input61 [ 1843.530148][T12904] input: syz0 as /devices/virtual/input/input62 [ 1861.613462][T12938] input: syz0 as /devices/virtual/input/input63 [ 1870.601033][T12941] input: syz0 as /devices/virtual/input/input64 [ 1886.820258][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1886.973154][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1886.992834][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1887.041014][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.043662][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1887.046882][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1887.074390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.075975][ T9] usb 1-1: Product: ךּ箫ఙ窧륲⇖徝晏鞙哥䥯䳚嫊閼쳳〳쨣燑鳒秹デ愬₂㳟怼澎蒕塁䞒⏓㸛릲毣ბ槖龟俗랩뤳材嶪㨋丞ᰫᢟ嵏뎜剴⛶ᘶ쟮ఉ⿂艁ꂅ脹ੌﻈ虤蒹鸈꭪ޔ✰Ɬ犸똯ﰊ뢶ۈ鳈霉ᙆ䛻踒翢蓤웴뷠྆컬삽 [ 1887.088858][ T9] usb 1-1: Manufacturer: ␁ [ 1887.091970][ T9] usb 1-1: SerialNumber: syz [ 1887.675595][ T9] cdc_ncm 1-1:1.0: bind() failure [ 1887.724272][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1887.760924][ T9] cdc_ncm 1-1:1.1: bind() failure [ 1887.835671][ T9] usb 1-1: USB disconnect, device number 80 [ 1888.225301][T12957] input: syz0 as /devices/virtual/input/input65 [ 1915.140054][T12853] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1915.290009][T12853] usb 1-1: Using ep0 maxpacket: 8 [ 1915.293400][T12853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1915.310597][T12853] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1915.311517][T12853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1915.313995][T12853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1915.315814][T12853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1915.317448][T12853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1915.320719][T12853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.681395][T13023] LUN: removable file: (no medium) [ 1917.684463][T13023] LUN: removable file: (no medium) [ 1919.316442][T13008] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.317318][T13008] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.322290][T13008] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.324695][T13008] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.336578][T13027] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 1919.345089][ T802] usb 1-1: USB disconnect, device number 81 [ 1929.711751][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1930.010298][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1930.016881][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1930.043269][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 1930.045131][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1930.049484][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1930.060108][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1930.069182][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1930.073937][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1930.077469][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.363790][ T9] usb 1-1: usb_control_msg returned -32 [ 1930.364208][ T9] usbtmc 1-1:16.0: can't read capabilities [ 1931.901556][T13065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1931.906578][T13065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.445025][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1932.446204][T13073] FAULT_INJECTION: forcing a failure. [ 1932.446204][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 1932.452047][T13073] CPU: 0 UID: 0 PID: 13073 Comm: syz.3.3510 Tainted: G W L syzkaller #0 PREEMPT [ 1932.452176][T13073] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1932.452199][T13073] Hardware name: linux,dummy-virt (DT) [ 1932.452223][T13073] Call trace: [ 1932.452240][T13073] show_stack+0x18/0x24 (C) [ 1932.452323][T13073] dump_stack_lvl+0x60/0x80 [ 1932.452387][T13073] dump_stack+0x18/0x24 [ 1932.452423][T13073] should_fail_ex+0x1e0/0x238 [ 1932.452473][T13073] should_failslab+0x54/0x80 [ 1932.452544][T13073] __kvmalloc_node_noprof+0xc8/0x65c [ 1932.452585][T13073] nf_hook_entries_grow+0xd4/0x280 [ 1932.452639][T13073] __nf_register_net_hook+0x80/0x1b4 [ 1932.452680][T13073] nf_register_net_hook+0x68/0xb0 [ 1932.452717][T13073] nf_register_net_hooks+0x58/0xd0 [ 1932.452754][T13073] nf_ct_netns_do_get+0x188/0x220 [ 1932.452793][T13073] nf_ct_netns_get+0x2c/0xe0 [ 1932.452868][T13073] nft_ct_timeout_obj_init+0x114/0x1a4 [ 1932.452911][T13073] nft_obj_init+0xc8/0x174 [ 1932.452949][T13073] nf_tables_newobj+0x2b8/0x78c [ 1932.452983][T13073] nfnetlink_rcv_batch+0x7a8/0x9e0 [ 1932.453017][T13073] nfnetlink_rcv+0x164/0x1b8 [ 1932.453049][T13073] netlink_unicast+0x328/0x3ac [ 1932.453090][T13073] netlink_sendmsg+0x194/0x410 [ 1932.453128][T13073] __sock_sendmsg+0x54/0x60 [ 1932.453166][T13073] ____sys_sendmsg+0x250/0x2a8 [ 1932.453222][T13073] ___sys_sendmsg+0xb0/0x108 [ 1932.453263][T13073] __sys_sendmsg+0x9c/0x100 [ 1932.453298][T13073] __arm64_sys_sendmsg+0x20/0x38 [ 1932.453333][T13073] invoke_syscall+0x54/0x10c [ 1932.453368][T13073] el0_svc_common.constprop.0+0x40/0xe0 [ 1932.453403][T13073] do_el0_svc+0x1c/0x34 [ 1932.453456][T13073] el0_svc+0x38/0x1fc [ 1932.453505][T13073] el0t_64_sync_handler+0xa0/0xe4 [ 1932.453550][T13073] el0t_64_sync+0x1a4/0x1a8 [ 1933.931193][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1933.935044][T13077] usbtmc 1-1:16.0: Unable to send data, error -71 [ 1935.327287][T13079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.343201][T13079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.128960][T13087] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1936.398101][T13089] lo: entered promiscuous mode [ 1936.399332][T13089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1939.253867][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1939.262716][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1940.135698][T13126] FAULT_INJECTION: forcing a failure. [ 1940.135698][T13126] name failslab, interval 1, probability 0, space 0, times 0 [ 1940.136728][T13126] CPU: 0 UID: 0 PID: 13126 Comm: syz.3.3528 Tainted: G W L syzkaller #0 PREEMPT [ 1940.136815][T13126] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1940.136836][T13126] Hardware name: linux,dummy-virt (DT) [ 1940.136859][T13126] Call trace: [ 1940.136877][T13126] show_stack+0x18/0x24 (C) [ 1940.136937][T13126] dump_stack_lvl+0x60/0x80 [ 1940.136976][T13126] dump_stack+0x18/0x24 [ 1940.137010][T13126] should_fail_ex+0x1e0/0x238 [ 1940.137049][T13126] should_failslab+0x54/0x80 [ 1940.137085][T13126] kmem_cache_alloc_noprof+0x54/0x458 [ 1940.137124][T13126] security_inode_alloc+0x30/0x1a0 [ 1940.137162][T13126] inode_init_always_gfp+0x174/0x254 [ 1940.137199][T13126] alloc_inode+0x40/0xdc [ 1940.137233][T13126] sock_alloc+0x20/0xa0 [ 1940.137270][T13126] __sock_create+0xa4/0x260 [ 1940.137303][T13126] __sys_socketpair+0x150/0x2c0 [ 1940.137337][T13126] __arm64_sys_socketpair+0x20/0x30 [ 1940.137373][T13126] invoke_syscall+0x54/0x10c [ 1940.137415][T13126] el0_svc_common.constprop.0+0x40/0xe0 [ 1940.137451][T13126] do_el0_svc+0x1c/0x34 [ 1940.137485][T13126] el0_svc+0x38/0x1fc [ 1940.137534][T13126] el0t_64_sync_handler+0xa0/0xe4 [ 1940.137576][T13126] el0t_64_sync+0x1a4/0x1a8 [ 1940.150850][T13126] socket: no more sockets [ 1943.578449][ T9] usb 1-1: USB disconnect, device number 82 [ 1944.474957][T13146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3535'. [ 1983.013308][ T28] audit: type=1326 audit(1983.387:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13187 comm="syz.0.3546" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e579368 code=0x0 [ 1983.272246][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3549'. [ 1995.880172][ T802] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1996.036201][ T802] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1996.051875][ T802] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1996.053287][ T802] usb 1-1: config 0 has no interface number 0 [ 1996.083979][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.085902][ T802] usb 1-1: Product: syz [ 1996.089011][ T802] usb 1-1: Manufacturer: syz [ 1996.096905][ T802] usb 1-1: SerialNumber: syz [ 1996.123022][ T802] usb 1-1: config 0 descriptor?? [ 1997.019182][ T802] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1997.022556][ T802] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1997.026419][ T802] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1997.074702][ T802] usb 1-1: USB disconnect, device number 83 [ 2008.777698][T13343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3597'. [ 2020.986117][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.991813][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.936357][T13387] syzkaller0: entered promiscuous mode [ 2026.946168][T13387] syzkaller0: entered allmulticast mode [ 2039.780791][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2039.949445][ T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 2039.967560][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2039.978384][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2040.046977][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.047309][ T9] usb 1-1: Product: syz [ 2040.047532][ T9] usb 1-1: Manufacturer: syz [ 2040.047641][ T9] usb 1-1: SerialNumber: syz [ 2040.333607][ T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 2040.390338][ T802] usb 1-1: USB disconnect, device number 84 [ 2040.412298][ T802] usblp0: removed [ 2066.143669][T13470] syzkaller1: entered promiscuous mode [ 2066.161808][T13470] syzkaller1: entered allmulticast mode [ 2069.200430][ T802] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2069.592560][ T802] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2069.601879][ T802] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2069.622326][ T802] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2069.641150][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.641942][ T802] usb 1-1: Product: syz [ 2069.643820][ T802] usb 1-1: Manufacturer: syz [ 2069.645830][ T802] usb 1-1: SerialNumber: syz [ 2069.692884][ T802] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 2069.710960][ T802] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2069.732801][ T802] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2069.908268][ T802] usb 1-1: USB disconnect, device number 85 [ 2069.958849][ T802] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2069.993571][ T802] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2069.996593][ T802] ti_usb_3410_5052 1-1:2.0: device disconnected [ 2070.669993][T13442] udevd[13442]: setting mode of /dev/ttyUSB1 to 020660 failed: No such file or directory [ 2070.670411][T13442] udevd[13442]: setting owner of /dev/ttyUSB1 to uid=0, gid=18 failed: No such file or directory [ 2071.520880][T13494] FAULT_INJECTION: forcing a failure. [ 2071.520880][T13494] name failslab, interval 1, probability 0, space 0, times 0 [ 2071.525998][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.0.3642 Tainted: G W L syzkaller #0 PREEMPT [ 2071.526173][T13494] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2071.526215][T13494] Hardware name: linux,dummy-virt (DT) [ 2071.526254][T13494] Call trace: [ 2071.526290][T13494] show_stack+0x18/0x24 (C) [ 2071.526405][T13494] dump_stack_lvl+0x60/0x80 [ 2071.526479][T13494] dump_stack+0x18/0x24 [ 2071.526548][T13494] should_fail_ex+0x1e0/0x238 [ 2071.526627][T13494] should_failslab+0x54/0x80 [ 2071.526702][T13494] __kmalloc_cache_noprof+0x58/0x470 [ 2071.526779][T13494] snd_seq_pool_new+0x28/0x78 [ 2071.526858][T13494] snd_seq_fifo_new+0x38/0xc0 [ 2071.526941][T13494] snd_seq_open+0x12c/0x1ac [ 2071.527008][T13494] snd_open+0x98/0x198 [ 2071.527109][T13494] chrdev_open+0xac/0x220 [ 2071.527190][T13494] do_dentry_open+0x128/0x4fc [ 2071.527262][T13494] vfs_open+0x2c/0xe8 [ 2071.527335][T13494] path_openat+0x5b4/0x960 [ 2071.527412][T13494] do_file_open+0xb0/0x168 [ 2071.527479][T13494] do_sys_openat2+0x84/0x104 [ 2071.527553][T13494] __arm64_sys_openat+0x64/0xc0 [ 2071.527626][T13494] invoke_syscall+0x54/0x10c [ 2071.527695][T13494] el0_svc_common.constprop.0+0x40/0xe0 [ 2071.527767][T13494] do_el0_svc+0x1c/0x34 [ 2071.527834][T13494] el0_svc+0x38/0x1fc [ 2071.527925][T13494] el0t_64_sync_handler+0xa0/0xe4 [ 2071.528000][T13494] el0t_64_sync+0x1a4/0x1a8 [ 2079.121688][T13530] syzkaller1: entered promiscuous mode [ 2079.122955][T13530] syzkaller1: entered allmulticast mode [ 2079.757026][T13537] syzkaller0: entered promiscuous mode [ 2079.760849][T13537] syzkaller0: entered allmulticast mode [ 2079.773164][T13008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.777221][T13537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2088.703159][T13008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.793918][T13008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.883461][T13008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.946987][T13008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2089.926322][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2089.948745][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2089.954421][T13008] bond0 (unregistering): Released all slaves [ 2090.075820][T13008] hsr_slave_0: left promiscuous mode [ 2090.101492][T13008] hsr_slave_1: left promiscuous mode [ 2090.165538][T13008] veth1_macvtap: left promiscuous mode [ 2090.180437][T13008] veth0_macvtap: left promiscuous mode [ 2090.180822][T13008] veth1_vlan: left promiscuous mode [ 2090.181006][T13008] veth0_vlan: left promiscuous mode [ 2094.540668][ T3223] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2095.808267][T13566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2095.859270][T13566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2100.912774][ T3223] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2107.853844][T13566] hsr_slave_0: entered promiscuous mode [ 2107.865888][T13566] hsr_slave_1: entered promiscuous mode [ 2107.870258][T13566] debugfs: 'hsr0' already exists in 'hsr' [ 2107.873607][T13566] Cannot create hsr debugfs directory [ 2109.582003][T13566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2109.655492][T13566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2109.821236][T13566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2109.902504][T13566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2109.916069][T13566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2109.926011][T13566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2109.960074][T13566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2110.013910][T13566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2110.211765][T13645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 2112.096779][T13566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2125.755987][T13566] veth0_vlan: entered promiscuous mode [ 2125.857333][T13566] veth1_vlan: entered promiscuous mode [ 2126.138978][T13566] veth0_macvtap: entered promiscuous mode [ 2126.235471][T13566] veth1_macvtap: entered promiscuous mode [ 2126.830826][ T9764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.831260][ T9764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.835453][ T9764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2126.836307][ T9764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.458144][T13717] xt_hashlimit: size too large, truncated to 1048576 [ 2128.457763][T13727] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3683'. [ 2129.686501][T13735] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2136.201721][T13754] input: syz0 as /devices/virtual/input/input66 [ 2136.442438][T12853] hid_parser_main: 4 callbacks suppressed [ 2136.444373][T12853] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2136.458658][T12853] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2137.663715][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2137.665718][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2144.091980][T13785] pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 conventional PCI endpoint [ 2144.978096][T13781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2149.024690][T13009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.116425][T13009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.183492][T13009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2149.257527][T13009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.183402][T13009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2165.191253][T13009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2165.194950][T13009] bond0 (unregistering): Released all slaves [ 2165.336730][T13009] hsr_slave_0: left promiscuous mode [ 2165.343564][T13009] hsr_slave_1: left promiscuous mode [ 2165.396739][T13009] veth1_macvtap: left promiscuous mode [ 2165.396970][T13009] veth0_macvtap: left promiscuous mode [ 2165.397250][T13009] veth1_vlan: left promiscuous mode [ 2165.397464][T13009] veth0_vlan: left promiscuous mode [ 2165.591259][T13829] device-mapper: table: 248:4: integrity: Error reading superblock (-EIO) [ 2165.591492][T13829] device-mapper: ioctl: error adding target to table [ 2173.023981][ T3223] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2175.586035][T13820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2175.628459][T13820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2175.898267][ T3223] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2177.232433][T13820] hsr_slave_0: entered promiscuous mode [ 2177.256065][T13820] hsr_slave_1: entered promiscuous mode [ 2177.258360][T13820] debugfs: 'hsr0' already exists in 'hsr' [ 2177.258550][T13820] Cannot create hsr debugfs directory [ 2177.757960][ T3223] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2178.944628][T13820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2179.008782][T13820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2179.016843][T13820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2179.061488][T13820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2179.073032][T13820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2179.108050][T13820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2179.112491][T13820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2179.142560][T13820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2180.159522][ T3223] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2180.768310][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2187.223956][T13820] veth0_vlan: entered promiscuous mode [ 2187.278679][T13820] veth1_vlan: entered promiscuous mode [ 2188.367985][T13820] veth0_macvtap: entered promiscuous mode [ 2188.412119][T13820] veth1_macvtap: entered promiscuous mode [ 2188.580219][T13008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.581719][T13008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.584477][T13008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.600667][T10861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.005532][T13997] ------------[ cut here ]------------ [ 2191.007813][T13997] WARNING: ./include/linux/skbuff.h:3243 at tcf_skbmod_act+0x4b0/0x4e0, CPU#0: syz.3.3732/13997 [ 2191.012172][T13997] Modules linked in: [ 2191.013999][T13997] CPU: 0 UID: 0 PID: 13997 Comm: syz.3.3732 Tainted: G W L syzkaller #0 PREEMPT [ 2191.014472][T13997] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 2191.014611][T13997] Hardware name: linux,dummy-virt (DT) [ 2191.015000][T13997] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 2191.015295][T13997] pc : tcf_skbmod_act+0x4b0/0x4e0 [ 2191.015435][T13997] lr : tcf_action_exec+0xb0/0x1d4 [ 2191.015618][T13997] sp : ffff800088cab850 [ 2191.015782][T13997] x29: ffff800088cab850 x28: fcf000000e6f5e08 x27: fcf000000e6f5e00 [ 2191.016209][T13997] x26: 0000000000000001 x25: 0000000020000000 x24: 0000000010000000 [ 2191.016469][T13997] x23: 0000000000000000 x22: 0000000000000010 x21: fcf0000018caf480 [ 2191.016711][T13997] x20: f6f000000e6f5f00 x19: fbf0000018ff5f00 x18: 0000000000000000 [ 2191.016950][T13997] x17: 0000000000000000 x16: 0000000000000000 x15: 000000002000014e [ 2191.017196][T13997] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 2191.017418][T13997] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 2191.017683][T13997] x8 : ffff800088cabac8 x7 : 0000000000000000 x6 : fff07ffffcd05000 [ 2191.017914][T13997] x5 : 0000000000000000 x4 : 0000000000000001 x3 : fbf000000bbdd540 [ 2191.018149][T13997] x2 : ffffc1ffbf76fed0 x1 : 000000000000ffff x0 : 000000000000ffff [ 2191.018510][T13997] Call trace: [ 2191.018802][T13997] tcf_skbmod_act+0x4b0/0x4e0 (P) [ 2191.019191][T13997] tcf_action_exec+0xb0/0x1d4 [ 2191.019368][T13997] basic_classify+0x80/0xc4 [ 2191.019504][T13997] tcf_classify+0x1dc/0x410 [ 2191.019666][T13997] tc_run+0x108/0x1e0 [ 2191.019822][T13997] __netif_receive_skb_core.constprop.0+0x4d8/0xc40 [ 2191.020031][T13997] __netif_receive_skb_one_core+0x40/0x8c [ 2191.020228][T13997] __netif_receive_skb+0x18/0x60 [ 2191.020406][T13997] netif_receive_skb+0x3c/0xd8 [ 2191.020573][T13997] tun_get_user+0xbbc/0xf70 [ 2191.020741][T13997] tun_chr_write_iter+0x5c/0xf0 [ 2191.020898][T13997] vfs_write+0x244/0x36c [ 2191.021055][T13997] ksys_write+0x70/0x108 [ 2191.021203][T13997] __arm64_sys_write+0x18/0x24 [ 2191.021402][T13997] invoke_syscall+0x54/0x10c [ 2191.021549][T13997] el0_svc_common.constprop.0+0x40/0xe0 [ 2191.021747][T13997] do_el0_svc+0x1c/0x34 [ 2191.021912][T13997] el0_svc+0x38/0x1fc [ 2191.022056][T13997] el0t_64_sync_handler+0xa0/0xe4 [ 2191.022235][T13997] el0t_64_sync+0x1a4/0x1a8 [ 2191.022578][T13997] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2192.251987][T13008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.329019][T13008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.416122][T13008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.526522][T13008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.142176][T13008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2194.166748][T13008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2194.174880][T13008] bond0 (unregistering): Released all slaves [ 2194.320680][T13008] hsr_slave_0: left promiscuous mode [ 2194.324549][T13008] hsr_slave_1: left promiscuous mode [ 2194.362675][T13008] veth1_macvtap: left promiscuous mode [ 2194.363913][T13008] veth0_macvtap: left promiscuous mode [ 2194.367487][T13008] veth1_vlan: left promiscuous mode [ 2194.368691][T13008] veth0_vlan: left promiscuous mode [ 2197.013846][ T3223] 8021q: adding VLAN 0 to HW filter on device eth9 [ 2199.259481][ T3223] 8021q: adding VLAN 0 to HW filter on device eth11 [ 2200.238565][ T3223] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2200.815266][ T3223] 8021q: adding VLAN 0 to HW filter on device eth12