last executing test programs: 2.207047531s ago: executing program 0 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 1.819578293s ago: executing program 0 (id=442): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 1.611949759s ago: executing program 1 (id=443): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x4d81c835) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xa) 1.179265443s ago: executing program 1 (id=444): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x19, 0x2, @thr={0x0, 0x0}}) 927.961721ms ago: executing program 1 (id=445): setrlimit(0x8, &(0x7f0000000180)={0x0, 0xacc}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 830.236844ms ago: executing program 0 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) 726.950507ms ago: executing program 1 (id=447): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000005c0)='\xfep\xd6\xf7\xdb{\x1dJ\xd4T\x1fP-\x8d\x05c\xfb\x9a\xf7!\xb7\xeb\n\xd5d\x9d\xbdXi\xd1\x8f}U\xbf@P9H\xe5<\xe8Q\xc2\x01\xf6\xfe\xcf\xdb9\xab/\x94a\x9f2\x91C\x121uOU\xb4\xe4\xb0\x17>\a\x94\xca\xc1\x12\xdc\xdbOP-3\xf3\xa1,\xb5n\x96\x8e\xa6\x05\x1a\x8d\xb1\x00\x16p\aN\x87>wP\xe5\xc9\xe9\xc0\x158\xc6\r\xd3\xf0\xb5\xa5\xa1\x11\xbe\xf0\xb7F\xe8B=[\x97}\xd0W\xb2\x0f/5w\xd2J\xd3\xfe\x1e>\x04*p\f\xb5o\x9c\x86L1I\xb3\x80~\xb2^\x9d\x00\x00\x00\x00\x00\x00\x00\x00\xcd-\x88Q\xc8x\xd52@!1\xc4y\xc0\xa8\xbcC\xad{\xaa\x9e\xcf\xfc\xf1\'ks\x9au\xe9c\x00\x19\xf1\a\"\xc2`Is\x1d]\x8e\x83\x9biuE\x9f-h\xcd\xfdB\xcf\xef\xaf0\xb3~j47v\xe2\xfd\xcc\xa3Q6c\x84\b\x14\x06\x00\b\xc1QQ\x00\xb9\x16\x04\xa1\x1cj\xc1S4\xe8\x8d(B0\xcc\xdf5.\xdd\x18\xfas\xf0\xfc\xa5{\x9f9=\xb9\xfc\x81\t\t\x9aZ\xed\ruG\xdb\xb1\xd0\xb0\xf9\xb7\xe5\xb1T\xf92Y\'\x86\x83\xbe\bf\xb1\xdb\xacp\x87\xba\xd5\bn*{GZ\x91}\xc0\xbc}R\x1c\xb3p\x02\x90Z\x95\n:\x8cI\x80\xbe\x0e\xef\xa3\x9bc\x92\x95\x93\xb4\x9bq\xd0*Z\xb2\x14\x89\"G\x03\xea\xe6/\xe0\xb5\xe9WN\xb9\x03\xb3\x98\xc3\xb4\xea\xb4\xc5\xfe\x05\xffR\"?\xf0,\x99\x00\xd8\xdc\x8aj \x13w\n\x96?}\xa1-)\t;18>3\xbd\x83=\x9a\x89\xe8\xca\x04\x9cB\xc1\xcb\xf4;rL\xeby\x17\xf2hVBS\xf6\xbeXaZ$\x04\xb4\xb1;\xb2\r_\x89\x9f\'\"n:xhQ\xae\xcf\x8b[\xd8\x10\xf0\xc8\xaa \xe8\xe9M\xea\x13\x00Zet\xa8\xeb\xc2hijF\x1a\xd2R\x1b\xf6y\xcc\x99\x19&@\xbb\xffd\xd4\x8c\xa8\t\xae\xd8\x197d\xb0K\xd2\x13\xbbo\xc4\x9b\x89\x94Y\xffv\xa6\x93\xe5\xbe2\xa7\x8cL \'X\xc8\xc4lvD~\xff\xc0?\xc1\xc7\x17\x93\xf6wP\x15\xbb\xe9\xecP\xacQ!\xecQ>\t\xfa(fm\xe2m\x15\n\xdb\x00%\x82S?L[\xc1\xd7f\xa8\xac\x7fw\xdc\xd2n\x8e\x8fmh\xc6\xc2\xa1K\xa2\x18\xfd\xe7:\xe4y\xd1\xfb>B\x94\xff\x82\xfd\xa9\xb9\xa3\x827%\x9a}(\xbe\xe6r\x80t\xd6\xe5\xd0w\bO\xcfs\xbb\xe6J\xf3b\x05\xaa\xc8\xee\xc0gZ\x05\xfe\xff\x8a\xb6}}\x9b\xa0\x97=\'\x92M0v\xd7\x82PM\xb8m!\x86\x9aQ|4\x06L3\x10\xca\xb0Umz\xec\xbf\xb2pEp\xebP\x89\xc5\xc4\x13\v\xd8\x94?\x04\xaf\xa8\xc3\xc5\xdd\xbbT\xceq\x9f\x06\xfc\xbe\x8eX\xaf/L\a\xebYd\x11\xc4Fu\x80\xdf\xd8\xed\xce\xb5\b\xa3\xc8c\xa7q\a\xfbm=\xe5\x84\x05x\xa7p\xac\x04\"\xa6a\x8a\xc8{{\x91\x80\x17]y\xd8\xa5A\x96t\x97O\x1b\xdbog\x01B\xbf%9\xf1\x1dT_,:E\xb6\xd6\xa2`\x12M/bLz\xdc\x03\xeb\x1fm\x1f]C\xe7;\x18u-Z\xc3\xb2\x00\x00\x00\x00\x00\x00\x00\x00\x00') 508.850484ms ago: executing program 1 (id=448): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000044c0)=[{}], &(0x7f0000004500)=0x8) 298.899801ms ago: executing program 0 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0}) 298.621861ms ago: executing program 1 (id=450): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) 159.856105ms ago: executing program 0 (id=451): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) 0s ago: executing program 0 (id=452): r0 = fsopen(&(0x7f0000000080)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a80)='w\xffcr\xcfKd\xd8LV\xed\xae\x9fe\f\xa1\xd1\x84R\v\vs\x1b\xf8\xae\xf4\xdd<\xf1\xddE\x02n\x008b\x14\xc0\xdaS\xf0\xc3\xf2\xcc\x15\x02I\x12\xc4\x0e\xf4\x10\xach\xbf@\xc1p\x95@\xc7\x8a\x9c\xfb\xe0@\x89\xbb\xfb\xfar\xc2\x18\x01uU[\xc6$\x15\x9a$cPl;\xd2GU\x83\xab\xf9\t\xdbe\x12\xd0\xc9/\xe7\xbd\xa0\xa8F]>\xd6\xf4\n\xff\x06\xffL\x02M\x9a\xf0\xe35\xf5K\xc2\xf8\xb6\x92\x0e*\x98\xf0\x1f\x19+\x0fJ\xb0F\x8f*k\xbd\xcc`\xe2\xc3\xcc\xd7gi=\xc6mw\x18uM\x94\x04 \xfan\x00\xbcg`J\xcb\xeb\x85\x82\xab\xd3t\a\xaf\xd3\xe5^\xcf\x81\xa8\x12\x1151 \x03\x80\xf8PxY\xa7ct\v\xe6fC^\xa19\x8d\x18\x80\xd4x(z\xb28\xc9\xfc\xb7)JS\xf9PP\x06\xbcd\x12\x16\x9a\xce\x9awl\xf0I@Bd\xaa\x1c\x13\xd3~\xdc7w\xc2\xc1a\x8b\xd7\x10_\x16\xddSL*\x05\xc8i\xec}\xe3\x84\x00\x94\r$\x05Q\xf7qG\xbb\xae\xe5Z\xc3\x91\x89\xdcqq\"\xbc 43?\xed\xd8\\w\xdb s\xb4A\n\x02\xc9\xbd[^\xb5 3\x85\x9f\xd7^\xd1\xc8A\x84nB)\xfb\xd7G\x10\xaa\xee\x8e;\xf9\x04)\xa2v\xf7g\x0fI\xc0e\xa2\x93\x7f\x9f\x02\xb6\xfc>\xb3ic%&a8\x8e\xd5\xb0\xf6\xa8\xde=2\xe2([Q\b]\xd7\xaefP%\xf6\x8a\xa2p\x98\xfd\x8c\f\xcf[Z', &(0x7f0000000180)="bbde53", 0x3) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34703' (ED25519) to the list of known hosts. syzkaller login: [ 112.855747][ T3267] cgroup: Unknown subsys name 'net' [ 113.226338][ T3267] cgroup: Unknown subsys name 'cpuset' [ 113.269313][ T3267] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 114.066121][ T3267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 122.244773][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.275350][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.644881][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.683982][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.953026][ T3273] hsr_slave_0: entered promiscuous mode [ 124.023625][ T3273] hsr_slave_1: entered promiscuous mode [ 124.537762][ T3272] hsr_slave_0: entered promiscuous mode [ 124.581882][ T3272] hsr_slave_1: entered promiscuous mode [ 124.620767][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.622802][ T3272] Cannot create hsr debugfs directory [ 125.996306][ T3273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.046208][ T3273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.090973][ T3273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.120235][ T3273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.286169][ T3272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.337463][ T3272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.373999][ T3272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.421983][ T3272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.571182][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.938928][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.147929][ T3273] veth0_vlan: entered promiscuous mode [ 132.273380][ T3273] veth1_vlan: entered promiscuous mode [ 132.303229][ T3272] veth0_vlan: entered promiscuous mode [ 132.383569][ T3272] veth1_vlan: entered promiscuous mode [ 132.569336][ T3273] veth0_macvtap: entered promiscuous mode [ 132.616604][ T3272] veth0_macvtap: entered promiscuous mode [ 132.635991][ T3273] veth1_macvtap: entered promiscuous mode [ 132.675642][ T3272] veth1_macvtap: entered promiscuous mode [ 132.962188][ T3273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.963796][ T3273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.964964][ T3273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.966008][ T3273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.997157][ T3272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.999299][ T3272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.000514][ T3272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.001699][ T3272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.871437][ T3272] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 136.356613][ T3428] Zero length message leads to an empty skb [ 146.224327][ T3476] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 150.107258][ T3488] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.981884][ T3492] infiniband syz2: set down [ 153.983048][ T3492] infiniband syz2: added team_slave_1 [ 153.996390][ T3492] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 154.004774][ T3492] infiniband syz2: Couldn't open port 1 [ 154.172069][ T3492] RDS/IB: syz2: added [ 154.173514][ T3492] smc: adding ib device syz2 with port count 1 [ 154.174607][ T3492] smc: ib device syz2 port 1 has pnetid [ 156.222035][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.224927][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.514193][ T3509] syz.0.38 uses obsolete (PF_INET,SOCK_PACKET) [ 157.432717][ T3522] process 'syz.0.42' launched '/dev/fd/3' with NULL argv: empty string added [ 157.599906][ T29] audit: type=1326 audit(157.400:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.618855][ T29] audit: type=1326 audit(157.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.621071][ T29] audit: type=1326 audit(157.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.629176][ T29] audit: type=1326 audit(157.430:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.631586][ T29] audit: type=1326 audit(157.430:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.633516][ T29] audit: type=1326 audit(157.430:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.635584][ T29] audit: type=1326 audit(157.430:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=80 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.637592][ T29] audit: type=1326 audit(157.430:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.668893][ T29] audit: type=1326 audit(157.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3521 comm="syz.1.43" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x7ffc0000 [ 157.915128][ T3525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.939438][ T3525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.581086][ T29] audit: type=1326 audit(158.400:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3520 comm="syz.0.42" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae352ba8 code=0x0 [ 162.745584][ T3553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.763724][ T3553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.309804][ T3372] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.469400][ T3372] usb 1-1: Using ep0 maxpacket: 32 [ 164.494172][ T3372] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 164.495607][ T3372] usb 1-1: config 0 has no interface number 0 [ 164.498859][ T3372] usb 1-1: config 0 interface 12 has no altsetting 0 [ 164.550194][ T3372] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 164.552251][ T3372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.553420][ T3372] usb 1-1: Product: syz [ 164.554246][ T3372] usb 1-1: Manufacturer: syz [ 164.555156][ T3372] usb 1-1: SerialNumber: syz [ 164.579626][ T3372] usb 1-1: config 0 descriptor?? [ 168.340418][ T3372] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 168.341985][ T3372] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 168.343206][ T3372] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 168.345299][ T3372] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 168.434581][ T3372] usb 1-1: USB disconnect, device number 2 [ 168.851179][ T3568] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.267715][ T3576] netlink: 37 bytes leftover after parsing attributes in process `syz.0.64'. [ 173.520461][ T3606] capability: warning: `syz.0.67' uses 32-bit capabilities (legacy support in use) [ 181.975683][ T3641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 182.137361][ T3641] bond1: entered promiscuous mode [ 182.153988][ T3641] infiniband syz2: set active [ 182.163534][ T3641] team_slave_1: entered promiscuous mode [ 182.169030][ T3641] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 182.221156][ T11] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:6066:feff:fe80:20bf error=-28 [ 182.267314][ T11] infiniband syz2: set active [ 182.288015][ T42] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:6066:feff:fe80:20bf error=-28 [ 182.310715][ T3644] loop2: detected capacity change from 0 to 7 [ 193.010843][ T3698] block nbd1: shutting down sockets [ 193.708650][ T3701] syz_tun: entered promiscuous mode [ 193.773356][ T3701] syz_tun: left promiscuous mode [ 194.423451][ T29] audit: type=1326 audit(194.240:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3702 comm="syz.1.102" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffafb52ba8 code=0x0 [ 203.621379][ T3720] netlink: 'syz.0.105': attribute type 29 has an invalid length. [ 203.631021][ T3720] netlink: 'syz.0.105': attribute type 29 has an invalid length. [ 203.643493][ T3720] netlink: 516 bytes leftover after parsing attributes in process `syz.0.105'. [ 210.636334][ T3755] IPv6: addrconf: prefix option has invalid lifetime [ 210.637596][ T3755] IPv6: addrconf: prefix option has invalid lifetime [ 219.269824][ T1883] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 220.399174][ T1883] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 220.409922][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.411080][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.411823][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.412618][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.429803][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.430745][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 220.431517][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.432236][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.412421][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.414298][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.415458][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 221.416430][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 221.459478][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.460483][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.461430][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 221.462356][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.407308][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.408785][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.410081][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 222.410706][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.420044][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.420807][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.421503][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 222.422180][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.441762][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.442624][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.443415][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 222.444139][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.455309][ T1883] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 222.456296][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 222.457131][ T1883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 222.457809][ T1883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.487464][ T1883] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 222.488917][ T1883] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 222.489500][ T1883] usb 1-1: Product: syz [ 222.489902][ T1883] usb 1-1: Manufacturer: syz [ 222.490306][ T1883] usb 1-1: SerialNumber: syz [ 222.501096][ T1883] usb 1-1: config 0 descriptor?? [ 222.515062][ T1883] yurex 1-1:0.0: Could not submitting URB [ 222.516327][ T1883] yurex 1-1:0.0: probe with driver yurex failed with error -5 [ 222.763587][ T3372] usb 1-1: USB disconnect, device number 3 [ 223.855543][ T3805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 224.489818][ T1883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 224.659656][ T1883] usb 1-1: Using ep0 maxpacket: 16 [ 224.833060][ T1883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 224.836882][ T1883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.986642][ T1883] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.991634][ T1883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.992714][ T1883] usb 1-1: Product: syz [ 224.993470][ T1883] usb 1-1: Manufacturer: syz [ 224.994281][ T1883] usb 1-1: SerialNumber: syz [ 225.046749][ T1883] usb 1-1: config 0 descriptor?? [ 235.364793][ T3369] usb 1-1: USB disconnect, device number 4 [ 237.294075][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.295983][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.012817][ T3872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.014712][ T3872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.486599][ T3900] netlink: 260 bytes leftover after parsing attributes in process `syz.1.171'. [ 239.487557][ T3900] netlink: 260 bytes leftover after parsing attributes in process `syz.1.171'. [ 240.180377][ T3909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.183109][ T3909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.352258][ T3911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 241.452683][ T29] audit: type=1326 audit(241.260:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3889 comm="syz.0.166" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae352ba8 code=0x7fc00000 [ 244.446599][ T3945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 244.665889][ T3945] infiniband syz2: set active [ 244.671018][ T3945] infiniband syz2: set active [ 245.023773][ T3945] bond1: left promiscuous mode [ 245.024416][ T3945] team_slave_1: left promiscuous mode [ 245.037496][ T3945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.861818][ T3958] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 250.394081][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.395696][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.549108][ T3369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 258.731044][ T3369] usb 1-1: Using ep0 maxpacket: 32 [ 258.889700][ T3369] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 258.891431][ T3369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.892702][ T3369] usb 1-1: Product: syz [ 258.893464][ T3369] usb 1-1: Manufacturer: syz [ 258.894234][ T3369] usb 1-1: SerialNumber: syz [ 258.937132][ T3369] usb 1-1: config 0 descriptor?? [ 259.687362][ T4036] bond2: entered promiscuous mode [ 259.689122][ T4036] bond2: entered allmulticast mode [ 259.692214][ T4036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.737322][ T4036] bond2 (unregistering): Released all slaves [ 259.994223][ T4039] capability: warning: `syz.1.228' uses deprecated v2 capabilities in a way that may be insecure [ 261.222109][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.223914][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.329556][ T4055] binder: 4054:4055 got reply transaction with no transaction stack [ 261.330272][ T4055] binder: 4054:4055 transaction reply to 0:0 failed 3/29201/-71, size 0-0 line 3052 [ 261.334139][ T30] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.174801][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.177650][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.623756][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.624453][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.624986][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.625497][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.626011][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.626546][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.627170][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.627711][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.637445][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.638799][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.639398][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.639932][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.640453][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.641024][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.641535][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.642260][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.642816][ T3372] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.653632][ T3372] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 268.340327][ T4109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.343152][ T4109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.240566][ T3372] usb 1-1: USB disconnect, device number 5 [ 270.199430][ T4133] hsr0: entered promiscuous mode [ 270.253701][ T4133] hsr_slave_0: left promiscuous mode [ 270.311833][ T4133] hsr_slave_1: left promiscuous mode [ 270.422151][ T4133] hsr0 (unregistering): left promiscuous mode [ 274.319899][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 274.519329][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 274.562760][ T30] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 274.564029][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.565636][ T30] usb 1-1: Product: syz [ 274.566373][ T30] usb 1-1: Manufacturer: syz [ 274.567566][ T30] usb 1-1: SerialNumber: syz [ 274.610577][ T30] usb 1-1: config 0 descriptor?? [ 274.639921][ T30] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 274.651412][ T30] usb 1-1: Detected FT-X [ 274.849748][ T30] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 275.321878][ T30] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.505743][ T30] usb 1-1: USB disconnect, device number 6 [ 275.607456][ T30] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.630304][ T30] ftdi_sio 1-1:0.0: device disconnected [ 276.319092][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 276.329710][ T4181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 281.394737][ T4202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 282.349368][ T3369] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 282.529918][ T3369] usb 1-1: Using ep0 maxpacket: 32 [ 282.612454][ T3369] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 282.613769][ T3369] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 282.614774][ T3369] usb 1-1: config 0 has no interface number 0 [ 282.615820][ T3369] usb 1-1: config 0 interface 12 has no altsetting 0 [ 282.686394][ T3369] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 282.689604][ T3369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.692014][ T3369] usb 1-1: Product: syz [ 282.692847][ T3369] usb 1-1: Manufacturer: syz [ 282.693696][ T3369] usb 1-1: SerialNumber: syz [ 282.729056][ T3369] usb 1-1: config 0 descriptor?? [ 283.441935][ T3369] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 283.443149][ T3369] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 283.444111][ T3369] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 283.445431][ T3369] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 283.512405][ T3369] usb 1-1: USB disconnect, device number 7 [ 284.269534][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 284.526180][ T8] usb 1-1: config index 0 descriptor too short (expected 42027, got 43) [ 284.532379][ T8] usb 1-1: config 0 has too many interfaces: 173, using maximum allowed: 32 [ 284.533658][ T8] usb 1-1: config 0 has an invalid interface descriptor of length 3, skipping [ 284.534789][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.536149][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 173 [ 284.537384][ T8] usb 1-1: config 0 has no interface number 0 [ 284.545141][ T8] usb 1-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 9814, setting to 64 [ 284.546666][ T8] usb 1-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.612988][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 284.615503][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.617181][ T8] usb 1-1: Product: syz [ 284.617920][ T8] usb 1-1: Manufacturer: syz [ 284.625178][ T8] usb 1-1: SerialNumber: syz [ 284.645510][ T8] usb 1-1: config 0 descriptor?? [ 284.702210][ T8] port100 1-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 284.905778][ T8] usb 1-1: USB disconnect, device number 8 [ 285.697126][ T4216] syzkaller0: entered promiscuous mode [ 285.699029][ T4216] syzkaller0: entered allmulticast mode [ 286.394433][ T4231] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 287.084858][ T4244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.115237][ T4244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.062602][ T4256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 288.063762][ T4256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 288.399077][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 288.599134][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 288.638380][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.640289][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.642563][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.643667][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.681499][ T30] usb 1-1: config 0 descriptor?? [ 288.741770][ T30] hub 1-1:0.0: USB hub found [ 288.930081][ T30] hub 1-1:0.0: 1 port detected [ 289.623275][ T2071] hub 1-1:0.0: activate --> -90 [ 289.749837][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.754412][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.871332][ T30] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 289.872591][ T8] usb 1-1: USB disconnect, device number 9 [ 290.093615][ T4273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.095318][ T4273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.454256][ T30] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 290.715980][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.718935][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.800951][ T30] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.802159][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.803163][ T30] usb 1-1: Product: syz [ 290.804190][ T30] usb 1-1: Manufacturer: syz [ 290.804908][ T30] usb 1-1: SerialNumber: syz [ 291.062560][ T30] usb 1-1: 0:2 : does not exist [ 291.125493][ T30] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 291.297826][ T4285] netlink: 'syz.0.336': attribute type 2 has an invalid length. [ 291.519214][ T30] usb 1-1: USB disconnect, device number 10 [ 292.207443][ T3874] udevd[3874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.045760][ T4302] netlink: 'syz.0.342': attribute type 19 has an invalid length. [ 293.046939][ T4302] netlink: 'syz.0.342': attribute type 15 has an invalid length. [ 293.533851][ T3055] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 293.970062][ T3055] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 293.971620][ T3055] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.972835][ T3055] usb 1-1: Product: syz [ 293.973682][ T3055] usb 1-1: Manufacturer: syz [ 293.974456][ T3055] usb 1-1: SerialNumber: syz [ 294.072889][ T3055] usb 1-1: config 0 descriptor?? [ 299.924956][ T4327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.927931][ T4327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.106023][ T4366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.111382][ T4366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.373921][ T1883] usb 1-1: USB disconnect, device number 11 [ 304.979028][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 305.308877][ T1883] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 305.479307][ T1883] usb 1-1: Using ep0 maxpacket: 16 [ 305.526615][ T1883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 305.585317][ T1883] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.586683][ T1883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.587842][ T1883] usb 1-1: Product: syz [ 305.593061][ T1883] usb 1-1: Manufacturer: syz [ 305.593906][ T1883] usb 1-1: SerialNumber: syz [ 305.617978][ T1883] usb 1-1: config 0 descriptor?? [ 308.546632][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.561608][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.626144][ T4411] netlink: 'syz.1.386': attribute type 16 has an invalid length. [ 309.627451][ T4411] netlink: 64114 bytes leftover after parsing attributes in process `syz.1.386'. [ 311.178985][ T4427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.183778][ T4427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.487044][ T4431] netlink: 56 bytes leftover after parsing attributes in process `syz.1.395'. [ 315.950166][ T8] usb 1-1: USB disconnect, device number 12 [ 316.639749][ T30] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 316.871240][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 316.939341][ T30] usb 1-1: config 0 has no interfaces? [ 317.009253][ T30] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=e1.2d [ 317.010118][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.011094][ T30] usb 1-1: Product: syz [ 317.011983][ T30] usb 1-1: Manufacturer: syz [ 317.012793][ T30] usb 1-1: SerialNumber: syz [ 317.037123][ T30] usb 1-1: config 0 descriptor?? [ 317.276657][ T8] usb 1-1: USB disconnect, device number 13 [ 319.009340][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 319.183018][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.183794][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.184449][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 319.185048][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.211795][ T10] usb 1-1: config 0 descriptor?? [ 319.733549][ T10] hid-generic 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 319.734672][ T10] hid-generic 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 319.735749][ T10] hid-generic 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 319.736765][ T10] hid-generic 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 319.737761][ T10] hid-generic 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 319.763981][ T10] hid-generic 0003:06CB:81A7.0002: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 319.925426][ T30] usb 1-1: USB disconnect, device number 14 [ 323.326104][ T4503] netlink: 52 bytes leftover after parsing attributes in process `syz.1.421'. [ 324.539280][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.540906][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.150673][ T4534] input: syz1 as /devices/virtual/input/input1 [ 325.542369][ T4538] loop9: detected capacity change from 0 to 7 [ 327.652611][ T4562] Unable to handle kernel paging request at virtual address ffffffffc0000000 [ 327.654271][ T4562] Mem abort info: [ 327.655237][ T4562] ESR = 0x0000000096000006 [ 327.655982][ T4562] EC = 0x25: DABT (current EL), IL = 32 bits [ 327.656796][ T4562] SET = 0, FnV = 0 [ 327.661011][ T4562] EA = 0, S1PTW = 0 [ 327.661862][ T4562] FSC = 0x06: level 2 translation fault [ 327.663135][ T4562] Data abort info: [ 327.663966][ T4562] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 327.664914][ T4562] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 327.665751][ T4562] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 327.666782][ T4562] swapper pgtable: 4k pages, 52-bit VAs, pgdp=00000000427ee000 [ 327.667682][ T4562] [ffffffffc0000000] pgd=1000000042cdc003, p4d=0000000042be8403, pud=0000000042be9403, pmd=0000000000000000 [ 327.673038][ T4562] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 327.674210][ T4562] Modules linked in: [ 327.675909][ T4562] CPU: 1 UID: 0 PID: 4562 Comm: syz.1.450 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 327.677433][ T4562] Hardware name: linux,dummy-virt (DT) [ 327.678755][ T4562] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 327.679865][ T4562] pc : trans_pgd_create_copy+0x21c/0x82c [ 327.681367][ T4562] lr : trans_pgd_create_copy+0x34/0x82c [ 327.682317][ T4562] sp : ffff80008b0d3c30 [ 327.683140][ T4562] x29: ffff80008b0d3c30 x28: fff0008000000000 x27: ffff8000825ee000 [ 327.684814][ T4562] x26: fff000007fdff000 x25: fff1000000000000 x24: 0000000000000001 [ 327.686394][ T4562] x23: ffff800000000000 x22: fff0000000000000 x21: ffff80008b0d3d68 [ 327.687839][ T4562] x20: f5f000000a0e8000 x19: ffff800000000000 x18: 0000000000000000 [ 327.689378][ T4562] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 327.690764][ T4562] x14: 0000000000000000 x13: 0000000000000002 x12: 0000000000070712 [ 327.692152][ T4562] x11: 0000000000000000 x10: b7a83343fb1c743b x9 : 00000000000000f5 [ 327.693620][ T4562] x8 : f5f000000a0e9000 x7 : 0000000000000000 x6 : 000000004a0e8fff [ 327.695036][ T4562] x5 : 000000004a0e8000 x4 : ffffc1ffc02839c8 x3 : fff000007fdff000 [ 327.696408][ T4562] x2 : ffffffffc0000000 x1 : fff0ffffffffffff x0 : 18000000bfdfe403 [ 327.698188][ T4562] Call trace: [ 327.699397][ T4562] trans_pgd_create_copy+0x21c/0x82c (P) [ 327.700485][ T4562] machine_kexec_post_load+0x158/0x2c0 [ 327.701436][ T4562] do_kexec_load+0x28c/0x2e4 [ 327.702299][ T4562] __arm64_sys_kexec_load+0x9c/0xe8 [ 327.703207][ T4562] invoke_syscall+0x48/0x110 [ 327.704094][ T4562] el0_svc_common.constprop.0+0x40/0xe0 [ 327.705047][ T4562] do_el0_svc+0x1c/0x28 [ 327.705918][ T4562] el0_svc+0x30/0xe0 [ 327.706764][ T4562] el0t_64_sync_handler+0x10c/0x138 [ 327.707648][ T4562] el0t_64_sync+0x1a4/0x1a8 [ 327.709411][ T4562] Code: f900027c a94573fb 1400017a b40007c0 (f9400040) [ 327.710805][ T4562] ---[ end trace 0000000000000000 ]--- [ 327.712062][ T4562] Kernel panic - not syncing: Oops: Fatal exception [ 327.713322][ T4562] SMP: stopping secondary CPUs [ 327.714934][ T4562] Kernel Offset: disabled [ 327.715623][ T4562] CPU features: 0x000,000000d0,60bef2f8,2b7ffebf [ 327.716617][ T4562] Memory Limit: none [ 327.717604][ T4562] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:38:26 Registers: info registers vcpu 0 CPU#0 PC=ffff80008178b8ac X00=0000000000000145 X01=ffffffffffffffff X02=0000000000000000 X03=00000000ffffffff X04=00000000e8ac2422 X05=0000000000000000 X06=ffff800081599378 X07=fff000007f8d5780 X08=f5f0000005fd11d8 X09=3abd8c50fee8c08f X10=4807d711f0419e1b X11=0000004c49ea9ca1 X12=0000000000000001 X13=0000000000000001 X14=00000000000003af X15=0000fffff7362c38 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff800088c63b18 X20=faf00000072f9180 X21=f9f000000355e700 X22=0000000000000000 X23=ffff800088c63a18 X24=0000000000000001 X25=f4f00000072f9f00 X26=f4f00000072f9f00 X27=0000000000000019 X28=ffff800088c63a44 X29=ffff800088c63970 X30=bacf80008036d148 SP=ffff800088c63940 PSTATE=81402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffff7362c50:0000fffff7362c50 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffff7362c20 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081a7e25c X00=ffff800081a7e258 X01=f2f00000097b5b40 X02=0000000000000001 X03=ffff80008000bea0 X04=0000000000800000 X05=0000004c3fecd480 X06=0000004c3f543e00 X07=7fffffffffffffff X08=0000004c3f543e00 X09=0000000000000400 X10=000000000000018c X11=0000000000000002 X12=0000000000000001 X13=0000000000000001 X14=000000000000018c X15=ffff80008b0d3410 X16=ffff800080008000 X17=fff07ffffd18c000 X18=ffffffffffffffff X19=0000000000000000 X20=ffff800082890d48 X21=ffff800082890d40 X22=f2f00000097b5b40 X23=0000000000000004 X24=ffff800082890d48 X25=0000000000000028 X26=0000000000000000 X27=ffff8000828d3688 X28=f2f00000097b5b40 X29=ffff80008b0d34a0 X30=ffff8000801702bc SP=ffff80008b0d34a0 PSTATE=204020c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0100000000000000:0100000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000100000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00d000a800000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000002 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000001:0000000000000002 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffef12f150:0000ffffef12f150 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffef12f120 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000