last executing test programs: 7.176512239s ago: executing program 0 (id=3833): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 7.043074313s ago: executing program 0 (id=3834): mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) 6.972408085s ago: executing program 0 (id=3835): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000400)={0x1, 0x1, 0x0, 0x0, 0x2, 0x1002}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x430b02, 0x0) r1 = fanotify_init(0x202, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) readv(r2, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 4.969696851s ago: executing program 1 (id=3842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.855779954s ago: executing program 1 (id=3843): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) 4.743141757s ago: executing program 1 (id=3844): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000002200)=[{0x84, 0x77, 0xfe, 0x0, @time={0x0, 0xf1}, {}, {}, @raw32={[0x2, 0x0, 0x20000000]}}, {0x2, 0x0, 0x2, 0x83, @time={0x7, 0x10000}, {0xfd}, {}, @note={0x81}}, {0x0, 0x0, 0x0, 0x0, @tick=0x8001, {}, {}, @ext={0x0, 0x0}}], 0x54) 4.612463371s ago: executing program 1 (id=3845): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x1000400, 0x0) 4.450079955s ago: executing program 1 (id=3846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004640)={0x2020}, 0x2020) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000000300)="a4ef8446034b60e230488174eae84f94fd4355c49a97f527884430ec4818b69ad7a6cb53dcfc26a95f336443aad30489bc4a7d7d9483cc279b4061acc498843ed104be70a7fefeb3ae980055a13451ba1b31afdfb6be9dc0a16ba8d80b724c9bebf91a6e40bda70ae6379afa2fa651b5067877331eec2d5fecdb2820d7b49758b65012be2208bcccc93ca1204ea8495baa070188ff1b4efa9f41d61738f556e938e0d85c4ab7953a0e86eaddca5ad9255f3eb0a5ca49a708b296f7b7afefb145508c7b35d918eb551f295059ee5716fca7090c34c931dfacdb94ea940b2132c824c873e48cbe7bfcbd57a3bf492ec24b3854bc", &(0x7f0000000400)=""/189}, 0x20) syz_genetlink_get_family_id$nl802154(0x0, r0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2b, @loopback}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000280)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000080)={0x1, 0x10}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 4.344052088s ago: executing program 0 (id=3847): syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000010000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000004000000e27f0000010000ed00000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES8=0x0, @ANYBLOB="00000000000000f985000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000826f0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) io_setup(0x4, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000eb0000000a2000003c3e2e86030000000000bc132786ba62e617b97b24a196000000020014000000110001"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 3.720210506s ago: executing program 0 (id=3848): sched_setscheduler(0xffffffffffffffff, 0x6, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x4e, 0x73, 0xd0, 0x10, 0x424, 0xc001, 0xfbb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x80, 0xe0, 0xf, [{{0x9, 0x4, 0x43, 0x9, 0x2, 0x97, 0x9d, 0x6b, 0x8, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x4, 0x6, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xf, 0xff, 0x8}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x250, 0x1, 0x9, 0x1, 0x10, 0x3}, 0x0, 0x0}) syncfs(0xffffffffffffffff) 112.505677ms ago: executing program 0 (id=3849): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff28}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x41, &(0x7f0000000080)=@generic={0x3, 0x2, 0x39, "9c0f91e5", "d01e86403040f602f852f0def26789d3f61374a1c35ffcfa0d19a7dadd2b5549904cc72cf5e1542722f1373750761f948bcff6436360b6c4fd"}) 0s ago: executing program 1 (id=3850): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00000cf000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x800000000000, 0x0, 0x0, 0x0, 0x2a, 0x53, 0x8, 0x6}) kernel console output (not intermixed with test programs): [ T6340] show_stack+0x18/0x24 (C) [ 567.654232][ T6340] dump_stack_lvl+0x78/0x90 [ 567.654901][ T6340] dump_stack+0x18/0x24 [ 567.655387][ T6340] should_fail_ex+0x18c/0x1e0 [ 567.656382][ T6340] should_fail+0x14/0x20 [ 567.657273][ T6340] should_fail_usercopy+0x1c/0x28 [ 567.658140][ T6340] simple_read_from_buffer+0x68/0x118 [ 567.658692][ T6340] proc_fail_nth_read+0xac/0x12c [ 567.659166][ T6340] vfs_read+0xc0/0x318 [ 567.659603][ T6340] ksys_read+0x6c/0x100 [ 567.660277][ T6340] __arm64_sys_read+0x1c/0x28 [ 567.661141][ T6340] invoke_syscall+0x48/0x110 [ 567.661997][ T6340] el0_svc_common.constprop.0+0x40/0xe0 [ 567.662934][ T6340] do_el0_svc+0x1c/0x28 [ 567.663810][ T6340] el0_svc+0x30/0xe0 [ 567.664591][ T6340] el0t_64_sync_handler+0x10c/0x138 [ 567.665547][ T6340] el0t_64_sync+0x1a4/0x1a8 [ 568.534485][ T6353] FAULT_INJECTION: forcing a failure. [ 568.534485][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.535406][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.0.864 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 568.536809][ T6353] Hardware name: linux,dummy-virt (DT) [ 568.537719][ T6353] Call trace: [ 568.538280][ T6353] show_stack+0x18/0x24 (C) [ 568.539260][ T6353] dump_stack_lvl+0x78/0x90 [ 568.539764][ T6353] dump_stack+0x18/0x24 [ 568.540251][ T6353] should_fail_ex+0x18c/0x1e0 [ 568.540721][ T6353] should_fail+0x14/0x20 [ 568.541157][ T6353] should_fail_usercopy+0x1c/0x28 [ 568.541649][ T6353] simple_read_from_buffer+0x68/0x118 [ 568.542117][ T6353] proc_fail_nth_read+0xac/0x12c [ 568.542586][ T6353] vfs_read+0xc0/0x318 [ 568.543538][ T6353] ksys_read+0x6c/0x100 [ 568.544046][ T6353] __arm64_sys_read+0x1c/0x28 [ 568.544529][ T6353] invoke_syscall+0x48/0x110 [ 568.545005][ T6353] el0_svc_common.constprop.0+0x40/0xe0 [ 568.545564][ T6353] do_el0_svc+0x1c/0x28 [ 568.546082][ T6353] el0_svc+0x30/0xe0 [ 568.546496][ T6353] el0t_64_sync_handler+0x10c/0x138 [ 568.546959][ T6353] el0t_64_sync+0x1a4/0x1a8 [ 572.337638][ T6408] FAULT_INJECTION: forcing a failure. [ 572.337638][ T6408] name failslab, interval 1, probability 0, space 0, times 0 [ 572.338509][ T6408] CPU: 1 UID: 0 PID: 6408 Comm: syz.1.884 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 572.339142][ T6408] Hardware name: linux,dummy-virt (DT) [ 572.339537][ T6408] Call trace: [ 572.339852][ T6408] show_stack+0x18/0x24 (C) [ 572.340404][ T6408] dump_stack_lvl+0x78/0x90 [ 572.340843][ T6408] dump_stack+0x18/0x24 [ 572.341291][ T6408] should_fail_ex+0x18c/0x1e0 [ 572.341744][ T6408] should_failslab+0x54/0x80 [ 572.342172][ T6408] __kmalloc_noprof+0xa8/0x430 [ 572.342617][ T6408] tomoyo_encode2+0x7c/0x140 [ 572.343052][ T6408] tomoyo_realpath_from_path+0x9c/0x1d0 [ 572.343557][ T6408] tomoyo_path_number_perm+0xd8/0x224 [ 572.344040][ T6408] tomoyo_file_ioctl+0x1c/0x28 [ 572.344504][ T6408] security_file_ioctl+0x8c/0x19c [ 572.344959][ T6408] __arm64_sys_ioctl+0x48/0xec [ 572.345451][ T6408] invoke_syscall+0x48/0x110 [ 572.345939][ T6408] el0_svc_common.constprop.0+0x40/0xe0 [ 572.346549][ T6408] do_el0_svc+0x1c/0x28 [ 572.347010][ T6408] el0_svc+0x30/0xe0 [ 572.347432][ T6408] el0t_64_sync_handler+0x10c/0x138 [ 572.347897][ T6408] el0t_64_sync+0x1a4/0x1a8 [ 572.349815][ T6408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 574.663903][ T6423] FAULT_INJECTION: forcing a failure. [ 574.663903][ T6423] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.665024][ T6423] CPU: 0 UID: 0 PID: 6423 Comm: syz.0.889 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 574.665841][ T6423] Hardware name: linux,dummy-virt (DT) [ 574.666407][ T6423] Call trace: [ 574.666785][ T6423] show_stack+0x18/0x24 (C) [ 574.667252][ T6423] dump_stack_lvl+0x78/0x90 [ 574.667702][ T6423] dump_stack+0x18/0x24 [ 574.668132][ T6423] should_fail_ex+0x18c/0x1e0 [ 574.668581][ T6423] should_fail_alloc_page+0x60/0x78 [ 574.669048][ T6423] __alloc_pages_noprof+0xdc/0xd38 [ 574.669602][ T6423] alloc_pages_mpol_noprof+0x8c/0x230 [ 574.670087][ T6423] folio_alloc_mpol_noprof+0x14/0x64 [ 574.670550][ T6423] vma_alloc_folio_noprof+0x7c/0xcc [ 574.671020][ T6423] vma_alloc_zeroed_movable_folio+0x38/0x44 [ 574.671512][ T6423] __handle_mm_fault+0x134c/0x1950 [ 574.671982][ T6423] handle_mm_fault+0x164/0x314 [ 574.672424][ T6423] do_page_fault+0x118/0x538 [ 574.672872][ T6423] do_translation_fault+0xac/0xbc [ 574.673427][ T6423] do_mem_abort+0x44/0x94 [ 574.673868][ T6423] el0_da+0x78/0xa8 [ 574.674500][ T6423] el0t_64_sync_handler+0xc4/0x138 [ 574.675051][ T6423] el0t_64_sync+0x1a4/0x1a8 [ 574.681244][ T6423] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 574.896914][ T6427] fuse: Bad value for 'fd' [ 575.517420][ T6436] FAULT_INJECTION: forcing a failure. [ 575.517420][ T6436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.520810][ T6436] CPU: 1 UID: 0 PID: 6436 Comm: syz.0.894 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 575.521601][ T6436] Hardware name: linux,dummy-virt (DT) [ 575.522008][ T6436] Call trace: [ 575.522321][ T6436] show_stack+0x18/0x24 (C) [ 575.522778][ T6436] dump_stack_lvl+0x78/0x90 [ 575.523210][ T6436] dump_stack+0x18/0x24 [ 575.523628][ T6436] should_fail_ex+0x18c/0x1e0 [ 575.524063][ T6436] should_fail+0x14/0x20 [ 575.524491][ T6436] should_fail_usercopy+0x1c/0x28 [ 575.524931][ T6436] simple_read_from_buffer+0x68/0x118 [ 575.525571][ T6436] proc_fail_nth_read+0xac/0x12c [ 575.526095][ T6436] vfs_read+0xc0/0x318 [ 575.526563][ T6436] ksys_read+0x6c/0x100 [ 575.526990][ T6436] __arm64_sys_read+0x1c/0x28 [ 575.527552][ T6436] invoke_syscall+0x48/0x110 [ 575.528000][ T6436] el0_svc_common.constprop.0+0x40/0xe0 [ 575.528490][ T6436] do_el0_svc+0x1c/0x28 [ 575.528922][ T6436] el0_svc+0x30/0xe0 [ 575.529422][ T6436] el0t_64_sync_handler+0x10c/0x138 [ 575.530115][ T6436] el0t_64_sync+0x1a4/0x1a8 [ 579.018208][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.021898][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.575748][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.578139][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.727387][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.732395][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.869542][ T6659] FAULT_INJECTION: forcing a failure. [ 609.869542][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.872400][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.1.959 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 609.873272][ T6659] Hardware name: linux,dummy-virt (DT) [ 609.873692][ T6659] Call trace: [ 609.874009][ T6659] show_stack+0x18/0x24 (C) [ 609.874461][ T6659] dump_stack_lvl+0x78/0x90 [ 609.874896][ T6659] dump_stack+0x18/0x24 [ 609.875306][ T6659] should_fail_ex+0x18c/0x1e0 [ 609.875744][ T6659] should_fail+0x14/0x20 [ 609.876563][ T6659] should_fail_usercopy+0x1c/0x28 [ 609.877616][ T6659] simple_read_from_buffer+0x68/0x118 [ 609.878096][ T6659] proc_fail_nth_read+0xac/0x12c [ 609.878593][ T6659] vfs_read+0xc0/0x318 [ 609.879040][ T6659] ksys_read+0x6c/0x100 [ 609.879496][ T6659] __arm64_sys_read+0x1c/0x28 [ 609.879941][ T6659] invoke_syscall+0x48/0x110 [ 609.880410][ T6659] el0_svc_common.constprop.0+0x40/0xe0 [ 609.880943][ T6659] do_el0_svc+0x1c/0x28 [ 609.881447][ T6659] el0_svc+0x30/0xe0 [ 609.881902][ T6659] el0t_64_sync_handler+0x10c/0x138 [ 609.882369][ T6659] el0t_64_sync+0x1a4/0x1a8 [ 611.669910][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.671424][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.140117][ T6694] fuse: Bad value for 'user_id' [ 612.140633][ T6694] fuse: Bad value for 'user_id' [ 612.339205][ T6698] fuse: Bad value for 'fd' [ 612.573540][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.587156][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.174882][ T6710] fuse: Bad value for 'fd' [ 620.566402][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.568227][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.598796][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.600322][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.610565][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.612066][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.625514][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.630662][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.638668][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.640143][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.952898][ T6736] fuse: Bad value for 'fd' [ 623.888629][ T6751] fuse: Bad value for 'fd' [ 625.023859][ T6762] fuse: Bad value for 'fd' [ 638.414809][ T6847] fuse: Bad value for 'fd' [ 638.504952][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.508073][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.416912][ T8] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 640.577301][ T8] usb 1-1: Invalid ep0 maxpacket: 32 [ 640.707277][ T8] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 640.936893][ T8] usb 1-1: Invalid ep0 maxpacket: 32 [ 640.940975][ T8] usb usb1-port1: attempt power cycle [ 641.286915][ T8] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 641.329121][ T8] usb 1-1: Invalid ep0 maxpacket: 32 [ 641.457693][ T8] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 641.484230][ T8] usb 1-1: Invalid ep0 maxpacket: 32 [ 641.497235][ T8] usb usb1-port1: unable to enumerate USB device [ 643.013612][ T6871] fuse: Bad value for 'fd' [ 660.264436][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.266825][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.622318][ T7007] fuse: Unknown parameter 'user_id00000000000000000000' [ 668.017783][ T7036] fuse: Unknown parameter '3ϊυH h*Dr֨QAa [ 668.017783][ T7036] fztT3XH?ɼwuݶ2`ɷB*};.k7n⯎ܽ1y}Y]Wn{񠸥hv+2zFQ![. a֍!SQa7ȴL'r̪r~KډLl/r' [ 671.358975][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.360640][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.371360][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.381663][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.392155][ T7055] sctp: [Deprecated]: syz.1.1072 (pid 7055) Use of int in maxseg socket option. [ 671.392155][ T7055] Use struct sctp_assoc_value instead [ 671.405403][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.409540][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.418956][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.420493][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.432364][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.433879][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.450973][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.452465][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.547103][ T25] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 674.714902][ T25] usb 1-1: config 0 has no interfaces? [ 674.717097][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 674.718427][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.731190][ T25] usb 1-1: config 0 descriptor?? [ 675.483870][ T3404] usb 1-1: USB disconnect, device number 35 [ 675.627355][ T7087] fuse: Unknown parameter 'group_i00000000000000000000' [ 675.840498][ T7092] fuse: Bad value for 'fd' [ 678.986898][ T3404] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 679.161188][ T3404] usb 1-1: config 0 has no interfaces? [ 679.161879][ T3404] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 679.162501][ T3404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.181921][ T3404] usb 1-1: config 0 descriptor?? [ 679.969835][ T3404] usb 1-1: USB disconnect, device number 36 [ 680.093148][ T7104] fuse: Unknown parameter 'group_i00000000000000000000' [ 680.341140][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.342729][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.497556][ T1882] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 681.654516][ T1882] usb 1-1: config 0 has no interfaces? [ 681.655242][ T1882] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 681.657167][ T1882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.675901][ T1882] usb 1-1: config 0 descriptor?? [ 682.426778][ T1882] usb 1-1: USB disconnect, device number 37 [ 682.582852][ T7122] fuse: Unknown parameter 'group_i00000000000000000000' [ 683.236714][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.238495][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.625771][ T1882] hid (null): unknown global tag 0xe [ 683.627650][ T1882] hid (null): global environment stack underflow [ 683.628146][ T1882] hid (null): global environment stack underflow [ 683.628838][ T1882] hid (null): global environment stack underflow [ 683.629357][ T1882] hid (null): global environment stack underflow [ 683.655293][ T1882] hid-generic 0006:03FF:0003.0001: unknown global tag 0xe [ 683.662201][ T1882] hid-generic 0006:03FF:0003.0001: item 0 0 1 14 parsing failed [ 683.664191][ T1882] hid-generic 0006:03FF:0003.0001: probe with driver hid-generic failed with error -22 [ 683.873498][ T7140] fuse: Unknown parameter 'group_id00000000000000000000' [ 685.606653][ T7150] fuse: Unknown parameter '0x0000000000000003' [ 685.710729][ T7152] fuse: Unknown parameter 'group_id00000000000000000000' [ 691.065269][ T7204] fuse: Unknown parameter 'grou00000000000000000000' [ 691.478831][ T7206] cgroup: fork rejected by pids controller in /syz0 [ 692.713353][ T7349] fuse: Unknown parameter 'grou00000000000000000000' [ 696.346726][ T7370] fuse: Unknown parameter 'grou00000000000000000000' [ 706.122000][ T7403] fuse: Unknown parameter 'group_i00000000000000000000' [ 706.751555][ T7414] fuse: Unknown parameter 'group_i00000000000000000000' [ 707.548982][ T7427] fuse: Unknown parameter 'group_id00000000000000000000' [ 708.571961][ T7442] fuse: Unknown parameter 'group_id00000000000000000000' [ 709.122302][ T29] audit: type=1326 audit(708.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.0.1160" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9934d528 code=0x0 [ 710.386949][ T1882] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 710.544843][ T1882] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 710.547091][ T1882] usb 1-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 710.547888][ T1882] usb 1-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.548690][ T1882] usb 1-1: config 1 interface 0 has no altsetting 0 [ 710.569793][ T1882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.570512][ T1882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.571151][ T1882] usb 1-1: Product: ﳷ⸜獲½ᵪ臯崒쁑䝙븙벳舫ꎟিū읖邦ꩰ⭣䒥䪗ᗶ䡋虌皙㎉౪룪赵斗獁ᡞ펱᚟㬙越ă힐弭敛퉑ᜂ説访郁ҧ͠断엂虙篆务顫謔惓㨊두䷋᧿烧䝄컎쇬罷飫栫塞䍮䞚譨ⶼ輼ʢꝒﱖ찲㈚먹둆ᲅ㏑㠚㰇痭ౝ᰿锠蛊 [ 710.572631][ T1882] usb 1-1: Manufacturer: 䀸鱗㤟꒓騯ꇚ夃鰷楃ᛯᓺ醖돤䙪̴霋鄋橷뚢㡖쇡ሖ䤏㽈㧅뙨ⴊ䖥찡洫濿尒謪诮䌡킒ꨞ엂䶭郅鱮ೋ쳇뀀뇖὆荴ᆉ嗣譆柗⮙ꑘ琉氞舩技ꢥᣋ竨銅꺂Ⱦ鎆ꖲ쮄Ფ䉙ت恂봧猥㣗왴元쯑ﺸ풦쾪썥⽰础쯒ᛆ垭뛢嵛칓␯窔↖♷䇍ꍛ嶾ꛅऴ嬝쭄⏫䭷軷︵驒ᷲ﹠ [ 710.574299][ T1882] usb 1-1: SerialNumber: Ў [ 710.595081][ T7452] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 710.813430][ T29] audit: type=1326 audit(710.660:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.0.1160" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9934d528 code=0x0 [ 711.514323][ T7457] fuse: Unknown parameter 'group_id00000000000000000000' [ 715.681986][ T1882] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 721.906946][ T5978] usb 1-1: USB disconnect, device number 38 [ 722.064193][ T7479] fuse: Bad value for 'user_id' [ 722.065006][ T7479] fuse: Bad value for 'user_id' [ 725.789668][ T7517] can: request_module (can-proto-0) failed. [ 726.719062][ T7533] FAULT_INJECTION: forcing a failure. [ 726.719062][ T7533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.720340][ T7533] CPU: 0 UID: 0 PID: 7533 Comm: syz.1.1180 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 726.721432][ T7533] Hardware name: linux,dummy-virt (DT) [ 726.722204][ T7533] Call trace: [ 726.722667][ T7533] show_stack+0x18/0x24 (C) [ 726.723689][ T7533] dump_stack_lvl+0x78/0x90 [ 726.724317][ T7533] dump_stack+0x18/0x24 [ 726.724924][ T7533] should_fail_ex+0x18c/0x1e0 [ 726.725666][ T7533] should_fail+0x14/0x20 [ 726.726752][ T7533] should_fail_usercopy+0x1c/0x28 [ 726.727394][ T7533] simple_read_from_buffer+0x68/0x118 [ 726.728067][ T7533] proc_fail_nth_read+0xac/0x12c [ 726.728720][ T7533] vfs_read+0xc0/0x318 [ 726.729369][ T7533] ksys_read+0x6c/0x100 [ 726.729913][ T7533] __arm64_sys_read+0x1c/0x28 [ 726.730563][ T7533] invoke_syscall+0x48/0x110 [ 726.731175][ T7533] el0_svc_common.constprop.0+0x40/0xe0 [ 726.731919][ T7533] do_el0_svc+0x1c/0x28 [ 726.732501][ T7533] el0_svc+0x30/0xe0 [ 726.733063][ T7533] el0t_64_sync_handler+0x10c/0x138 [ 726.733889][ T7533] el0t_64_sync+0x1a4/0x1a8 [ 732.055338][ T7576] FAULT_INJECTION: forcing a failure. [ 732.055338][ T7576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.056983][ T7576] CPU: 0 UID: 0 PID: 7576 Comm: syz.1.1193 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 732.057764][ T7576] Hardware name: linux,dummy-virt (DT) [ 732.058174][ T7576] Call trace: [ 732.058558][ T7576] show_stack+0x18/0x24 (C) [ 732.059035][ T7576] dump_stack_lvl+0x78/0x90 [ 732.059886][ T7576] dump_stack+0x18/0x24 [ 732.060427][ T7576] should_fail_ex+0x18c/0x1e0 [ 732.060950][ T7576] should_fail+0x14/0x20 [ 732.061388][ T7576] should_fail_usercopy+0x1c/0x28 [ 732.061877][ T7576] copy_msghdr_from_user+0x48/0x110 [ 732.062557][ T7576] ___sys_sendmsg+0x8c/0x100 [ 732.063127][ T7576] __sys_sendmsg+0x98/0xf4 [ 732.063573][ T7576] __arm64_sys_sendmsg+0x24/0x30 [ 732.064037][ T7576] invoke_syscall+0x48/0x110 [ 732.064500][ T7576] el0_svc_common.constprop.0+0x40/0xe0 [ 732.065002][ T7576] do_el0_svc+0x1c/0x28 [ 732.065453][ T7576] el0_svc+0x30/0xe0 [ 732.065881][ T7576] el0t_64_sync_handler+0x10c/0x138 [ 732.066507][ T7576] el0t_64_sync+0x1a4/0x1a8 [ 735.712989][ T7613] fuse: Bad value for 'user_id' [ 735.713548][ T7613] fuse: Bad value for 'user_id' [ 747.380763][ T7688] fuse: Bad value for 'rootmode' [ 749.161396][ T7710] fuse: Unknown parameter 'use00000000000000000000' [ 752.953453][ T7733] fuse: Unknown parameter 'use00000000000000000000' [ 754.686942][ T25] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 754.817020][ T25] usb 1-1: device descriptor read/64, error -71 [ 755.056873][ T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 755.192983][ T25] usb 1-1: device descriptor read/64, error -71 [ 755.298734][ T25] usb usb1-port1: attempt power cycle [ 755.646929][ T25] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 755.672339][ T25] usb 1-1: device descriptor read/8, error -71 [ 755.907434][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 755.930285][ T25] usb 1-1: device descriptor read/8, error -71 [ 756.048080][ T25] usb usb1-port1: unable to enumerate USB device [ 766.917493][ T3404] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 767.076988][ T3404] usb 1-1: Using ep0 maxpacket: 16 [ 767.132560][ T3404] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.40 [ 767.134003][ T3404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.135527][ T3404] usb 1-1: Product: syz [ 767.138012][ T3404] usb 1-1: Manufacturer: syz [ 767.138872][ T3404] usb 1-1: SerialNumber: syz [ 767.590174][ T3404] usbhid 1-1:1.0: can't add hid device: -71 [ 767.590997][ T3404] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 767.608234][ T3404] usb 1-1: USB disconnect, device number 43 [ 777.096657][ T1882] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 777.253569][ T1882] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 777.254323][ T1882] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 777.255251][ T1882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 777.256619][ T1882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 777.257376][ T1882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 777.268644][ T1882] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 777.269403][ T1882] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 777.270000][ T1882] usb 1-1: Product: syz [ 777.270426][ T1882] usb 1-1: Manufacturer: syz [ 777.294614][ T1882] cdc_wdm 1-1:1.0: skipping garbage [ 777.295153][ T1882] cdc_wdm 1-1:1.0: skipping garbage [ 777.308852][ T1882] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 778.224512][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.225224][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.227243][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.227823][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.229333][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.230014][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.231285][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.231847][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.233024][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.233727][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.234798][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.235341][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.236722][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.237400][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.238236][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.238776][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.239591][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.240130][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.240937][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 778.241445][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 778.244768][ T3404] usb 1-1: USB disconnect, device number 44 [ 778.245078][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 778.321370][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.401060][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.485782][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.570617][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.563736][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.605017][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.654546][ T12] bond0 (unregistering): Released all slaves [ 779.880801][ T12] hsr_slave_0: left promiscuous mode [ 779.932985][ T12] hsr_slave_1: left promiscuous mode [ 780.014924][ T12] veth1_macvtap: left promiscuous mode [ 780.015878][ T12] veth0_macvtap: left promiscuous mode [ 780.017954][ T12] veth1_vlan: left promiscuous mode [ 780.018667][ T12] veth0_vlan: left promiscuous mode [ 783.264287][ T7862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.284171][ T7862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.126848][ T2038] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 784.307726][ T2038] usb 1-1: Using ep0 maxpacket: 32 [ 784.322971][ T2038] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 784.324086][ T2038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 784.325141][ T2038] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 784.405922][ T2038] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 784.407367][ T2038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.407984][ T2038] usb 1-1: Product: syz [ 784.408428][ T2038] usb 1-1: Manufacturer: syz [ 784.408817][ T2038] usb 1-1: SerialNumber: syz [ 784.670446][ T7862] hsr_slave_0: entered promiscuous mode [ 784.689975][ T2038] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 784.698524][ T7862] hsr_slave_1: entered promiscuous mode [ 784.891852][ T2038] usb 1-1: USB disconnect, device number 45 [ 784.900892][ T2038] usblp0: removed [ 785.357254][ T2038] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 785.530118][ T2038] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 785.530837][ T2038] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.531467][ T2038] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 785.532494][ T2038] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.554431][ T2038] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 785.555220][ T2038] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 785.556878][ T2038] usb 1-1: Product: syz [ 785.557378][ T2038] usb 1-1: Manufacturer: syz [ 785.587244][ T2038] cdc_wdm 1-1:1.0: skipping garbage [ 785.587801][ T2038] cdc_wdm 1-1:1.0: skipping garbage [ 785.601825][ T2038] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 785.822398][ T10] usb 1-1: USB disconnect, device number 46 [ 786.087646][ T7862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.110501][ T7862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.144532][ T7862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.179875][ T7862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.168203][ T2038] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 787.327108][ T2038] usb 1-1: Using ep0 maxpacket: 8 [ 787.353049][ T2038] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 787.354032][ T2038] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 787.354766][ T2038] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 787.357743][ T2038] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.358659][ T2038] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 787.359259][ T2038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.400723][ T7862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.612916][ T2038] usb 1-1: GET_CAPABILITIES returned 0 [ 787.613682][ T2038] usbtmc 1-1:16.0: can't read capabilities [ 787.829904][ T2038] usb 1-1: USB disconnect, device number 47 [ 791.023186][ T7862] veth0_vlan: entered promiscuous mode [ 791.075656][ T7862] veth1_vlan: entered promiscuous mode [ 791.223867][ T7862] veth0_macvtap: entered promiscuous mode [ 791.240496][ T7862] veth1_macvtap: entered promiscuous mode [ 791.384613][ T7862] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.385428][ T7862] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.391098][ T7862] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.391807][ T7862] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.319330][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.469777][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.605681][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.713559][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.655289][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.697857][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.755596][ T11] bond0 (unregistering): Released all slaves [ 794.784460][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 794.895700][ T11] hsr_slave_0: left promiscuous mode [ 794.940840][ T11] hsr_slave_1: left promiscuous mode [ 795.030868][ T11] veth1_macvtap: left promiscuous mode [ 795.031524][ T11] veth0_macvtap: left promiscuous mode [ 795.032524][ T11] veth1_vlan: left promiscuous mode [ 795.033423][ T11] veth0_vlan: left promiscuous mode [ 797.188930][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.190565][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.307695][ T8128] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.308528][ T8128] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.309183][ T8128] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.309937][ T8128] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.857102][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.871543][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.052901][ T8059] hsr_slave_0: entered promiscuous mode [ 801.098227][ T8059] hsr_slave_1: entered promiscuous mode [ 801.136876][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.137665][ T8059] Cannot create hsr debugfs directory [ 803.169629][ T8059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 803.188681][ T8059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 803.205044][ T8059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 803.224751][ T8059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 804.483926][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.525619][ T8059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.693908][ T8059] veth0_vlan: entered promiscuous mode [ 807.724157][ T8059] veth1_vlan: entered promiscuous mode [ 807.822853][ T8059] veth0_macvtap: entered promiscuous mode [ 807.841912][ T8059] veth1_macvtap: entered promiscuous mode [ 807.961427][ T8059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.962229][ T8059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.962934][ T8059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.963738][ T8059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.507162][ T5978] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 814.667032][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 814.724523][ T5978] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 814.725833][ T5978] usb 1-1: config 0 has no interface number 0 [ 814.759380][ T5978] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 814.760291][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.760901][ T5978] usb 1-1: Product: syz [ 814.761982][ T5978] usb 1-1: Manufacturer: syz [ 814.762673][ T5978] usb 1-1: SerialNumber: syz [ 814.778928][ T5978] usb 1-1: config 0 descriptor?? [ 814.794019][ T5978] smsc95xx v2.0.0 [ 814.794637][ T5978] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 814.795834][ T5978] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 815.001970][ T5978] usb 1-1: USB disconnect, device number 48 [ 817.878142][ T8389] input: syz0 as /devices/virtual/input/input15 [ 818.127096][ T8] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 818.296996][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 818.314327][ T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 818.315278][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 818.347058][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 818.347833][ T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 818.348356][ T8] usb 1-1: Product: syz [ 818.350915][ T8] usb 1-1: Manufacturer: syz [ 818.351372][ T8] usb 1-1: SerialNumber: syz [ 818.368477][ T8] usb 1-1: config 0 descriptor?? [ 818.402623][ T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 818.411556][ T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 818.625502][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 818.626814][ T8] usb 1-1: USB disconnect, device number 49 [ 818.640559][ T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 818.724389][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 818.732099][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'. [ 818.821523][ T8385] ldusb: No device or device unplugged -19 [ 823.400057][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.404960][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.255247][ T8486] binder: 8483:8486 tried to acquire reference to desc 0, got 1 instead [ 829.260406][ T8486] binder: 8483:8486 got transaction with out-of-order buffer fixup [ 829.261073][ T8486] binder: 8486:8483 failed to fixup parent [ 829.269038][ T8486] binder: 8483:8486 transaction call to 8483:0 failed 8/29201/-22, size 120-24 line 3648 [ 829.317633][ T4797] binder: undelivered TRANSACTION_ERROR: 29201 [ 829.434958][ T8489] snd_dummy snd_dummy.0: control 3:184:1024:syz1:2107285500 is already present [ 854.790951][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.792502][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.916604][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.918139][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.819342][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1473'. [ 863.919943][ T8722] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1481'. [ 865.764648][ T29] audit: type=1326 audit(865.610:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 865.774989][ T29] audit: type=1326 audit(865.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 865.783919][ T29] audit: type=1326 audit(865.630:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 865.785147][ T29] audit: type=1326 audit(865.630:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 865.797692][ T29] audit: type=1326 audit(865.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 865.804558][ T29] audit: type=1326 audit(865.650:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9d54504c code=0x7ffc0000 [ 865.811719][ T29] audit: type=1326 audit(865.650:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9e368804 code=0x7ffc0000 [ 865.827932][ T29] audit: type=1326 audit(865.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9d54504c code=0x7ffc0000 [ 865.838257][ T29] audit: type=1326 audit(865.680:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9e368804 code=0x7ffc0000 [ 865.839375][ T29] audit: type=1326 audit(865.680:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8735 comm="syz.1.1487" exe="/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9d54504c code=0x7ffc0000 [ 868.550737][ T8756] binder: 8755:8756 tried to acquire reference to desc 0, got 1 instead [ 874.807256][ T5978] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 874.956896][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 874.970362][ T5978] usb 1-1: config 0 has no interfaces? [ 874.994031][ T5978] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 874.994994][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.997564][ T5978] usb 1-1: Product: syz [ 874.997990][ T5978] usb 1-1: Manufacturer: syz [ 874.998447][ T5978] usb 1-1: SerialNumber: syz [ 875.010125][ T5978] usb 1-1: config 0 descriptor?? [ 875.283323][ T8136] usb 1-1: USB disconnect, device number 50 [ 875.961496][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 875.961664][ T29] audit: type=1326 audit(875.810:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8809 comm="syz.0.1511" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae14d528 code=0x0 [ 883.540650][ T8982] syz.0.1587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 889.024894][ T9053] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 894.295793][ T9097] : renamed from ipvlan1 [ 897.873308][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1656'. [ 898.423088][ T9166] input: syz1 as /devices/virtual/input/input16 [ 898.444817][ T9167] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1664'. [ 899.160988][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 899.927469][ T8] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 900.107163][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 900.123123][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.127308][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 900.130629][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.154792][ T8] usb 1-1: config 0 descriptor?? [ 900.592946][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x6 [ 900.593623][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x4 [ 900.594468][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.594973][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.595445][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.598246][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.598870][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.599345][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.599823][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.600293][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.600770][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.601261][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.601738][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.602203][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.602676][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.603141][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.603606][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.604082][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.604545][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.605015][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.605505][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.608894][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.609482][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.609965][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.610436][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.610938][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.611408][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.611881][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.612349][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.612820][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.613309][ T8] hid-generic 0003:05AC:024B.0002: unknown main item tag 0x0 [ 900.624354][ T8] hid-generic 0003:05AC:024B.0002: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 900.843784][ T8] usb 1-1: USB disconnect, device number 51 [ 901.534093][ T9235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1693'. [ 901.623242][ T9239] xt_hashlimit: size too large, truncated to 1048576 [ 904.331026][ T9276] cgroup: noprefix used incorrectly [ 905.519900][ T9290] batadv_slave_1: entered promiscuous mode [ 905.530636][ T9289] batadv_slave_1: left promiscuous mode [ 906.752584][ T9296] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1717'. [ 911.475356][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.477760][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.584817][ T29] audit: type=1326 audit(911.430:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9324 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 911.587602][ T29] audit: type=1326 audit(911.430:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9324 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 911.588958][ T29] audit: type=1326 audit(911.430:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9324 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=83 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 911.590247][ T29] audit: type=1326 audit(911.430:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9324 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 911.591834][ T29] audit: type=1326 audit(911.430:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9324 comm="syz.1.1730" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 912.181933][ T29] audit: type=1326 audit(912.030:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9336 comm="syz.1.1736" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x0 [ 914.116983][ T4797] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 914.283634][ T4797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.284401][ T4797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.285108][ T4797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.293534][ T4797] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.294263][ T4797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.310041][ T4797] usb 1-1: config 0 descriptor?? [ 914.789809][ T4797] hid-generic 0003:047F:FFFF.0003: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 914.992325][ T4797] usb 1-1: USB disconnect, device number 52 [ 916.333426][ T9399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1763'. [ 920.320881][ T29] audit: type=1326 audit(920.160:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9474 comm="syz.1.1795" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x0 [ 922.328139][ T3404] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 922.491617][ T3404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 922.492403][ T3404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.493074][ T3404] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 922.493716][ T3404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.512095][ T3404] usb 1-1: config 0 descriptor?? [ 922.951637][ T3404] hid-generic 0003:054C:0268.0004: unbalanced collection at end of report description [ 922.953311][ T3404] hid-generic 0003:054C:0268.0004: probe with driver hid-generic failed with error -22 [ 923.158874][ T3404] usb 1-1: USB disconnect, device number 53 [ 924.236932][ T1882] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 924.386747][ T1882] usb 1-1: Using ep0 maxpacket: 16 [ 924.398459][ T1882] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 924.399442][ T1882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.418144][ T1882] usb 1-1: config 0 descriptor?? [ 924.859198][ T1882] hid-generic 0003:056A:037A.0005: item fetching failed at offset 2/5 [ 924.861537][ T1882] hid-generic 0003:056A:037A.0005: probe with driver hid-generic failed with error -22 [ 925.059372][ T1882] usb 1-1: USB disconnect, device number 54 [ 928.464899][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.467349][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.747490][ T8136] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 930.960941][ T8136] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.961810][ T8136] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 930.974919][ T8136] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 930.975640][ T8136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 930.981865][ T8136] usb 1-1: SerialNumber: syz [ 931.226921][ T8136] usb 1-1: 0:2 : does not exist [ 931.287765][ T8136] usb 1-1: USB disconnect, device number 55 [ 931.592467][ T9527] udevd[9527]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 932.243930][ T9585] syzkaller0: entered promiscuous mode [ 932.244626][ T9585] syzkaller0: entered allmulticast mode [ 932.477811][ T9589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.479280][ T9589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.510690][ T9609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.512253][ T9609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.422160][ T29] audit: type=1326 audit(936.270:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9629 comm="syz.1.1858" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x0 [ 936.711841][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.713377][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.854863][ T9637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.859776][ T9637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.433936][ T29] audit: type=1326 audit(134218665.271:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.0.1866" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae14d528 code=0x0 [ 943.055339][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 943.153406][ T9685] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 945.910392][ T29] audit: type=1326 audit(134218673.751:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9751 comm="syz.1.1905" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x0 [ 950.122511][ T9782] cgroup: Unknown subsys name 'cpuset' [ 953.349642][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 953.462012][ T9838] binder_alloc: binder_alloc_mmap_handler: 9837 20ffd000-21000000 already mapped failed -16 [ 966.824330][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.831573][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.960839][ T9922] netlink: 'syz.0.1971': attribute type 3 has an invalid length. [ 966.961902][ T9922] netlink: 'syz.0.1971': attribute type 3 has an invalid length. [ 967.071829][ T9925] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1972'. [ 967.282672][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1974'. [ 968.124189][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.125722][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.188648][ T8] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 968.365719][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 968.380717][ T8] usb 1-1: config 3 has an invalid interface number: 156 but max is 0 [ 968.381517][ T8] usb 1-1: config 3 has no interface number 0 [ 968.382095][ T8] usb 1-1: config 3 interface 156 has no altsetting 0 [ 968.396579][ T8] usb 1-1: string descriptor 0 read error: -71 [ 968.397796][ T8] usb 1-1: New USB device found, idVendor=19d2, idProduct=1261, bcdDevice=db.c4 [ 968.398503][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.431698][ T8] usb 1-1: can't set config #3, error -71 [ 968.455557][ T8] usb 1-1: USB disconnect, device number 56 [ 968.569016][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 968.872782][ T9976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.875520][ T9976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.887028][ T25] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 969.077791][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.078886][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 969.080203][ T25] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 969.080862][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.125750][ T25] usb 1-1: config 0 descriptor?? [ 969.143873][ T9980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.147726][ T9980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.558554][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.560009][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.654823][ T9995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2003'. [ 974.993487][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.998336][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.391577][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.398527][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.831001][ T3404] usb 1-1: USB disconnect, device number 57 [ 990.389348][T10045] xt_hashlimit: size too large, truncated to 1048576 [ 996.836767][T10063] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 1005.511221][T10164] lo: entered allmulticast mode [ 1008.276859][ T8136] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1010.022155][ T8136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.022993][ T8136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.023625][ T8136] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.024458][ T8136] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.025072][ T8136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.034637][ T8136] usb 1-1: config 0 descriptor?? [ 1010.488668][ T8136] hid-generic 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1010.495172][ T8136] hid-generic 0003:047F:FFFF.0006: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1015.077986][ T29] audit: type=1326 audit(134218742.921:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.079642][ T29] audit: type=1326 audit(134218742.921:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.081871][ T29] audit: type=1326 audit(134218742.921:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.085581][ T29] audit: type=1326 audit(134218742.921:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.089845][ T29] audit: type=1326 audit(134218742.921:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.091752][ T29] audit: type=1326 audit(134218742.921:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.093094][ T29] audit: type=1326 audit(134218742.921:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=227 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1015.094384][ T29] audit: type=1326 audit(134218742.921:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.1.2088" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1019.563536][T10219] binder: 10218:10219 ioctl c018620c 20000280 returned -22 [ 1023.414128][ T8136] usb 1-1: USB disconnect, device number 58 [ 1024.627874][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.642553][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.742084][T10292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.743977][T10292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.296845][ T25] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1040.386784][T10321] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2128'. [ 1040.472153][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.472944][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.473920][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1040.500189][ T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.500920][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.501544][ T25] usb 1-1: Product: syz [ 1040.502183][ T25] usb 1-1: Manufacturer: syz [ 1040.502631][ T25] usb 1-1: SerialNumber: syz [ 1040.770176][ T25] usb 1-1: cannot find UAC_HEADER [ 1040.862087][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1040.888671][ T25] usb 1-1: USB disconnect, device number 59 [ 1041.154772][T10313] udevd[10313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1043.203262][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.204850][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.656748][ T5978] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1054.819979][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.822099][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.823565][ T5978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1054.825300][ T5978] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1054.833267][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.849951][ T5978] usb 1-1: config 0 descriptor?? [ 1055.298765][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.299492][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.300029][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.300588][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.301155][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.301902][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.302511][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.303320][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.303849][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.304487][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.305032][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.305637][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.306609][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.307364][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.307886][ T5978] hid-generic 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 1055.314272][ T5978] hid-generic 0003:047F:FFFF.0007: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1055.497986][ T8136] usb 1-1: USB disconnect, device number 60 [ 1055.788526][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2174'. [ 1055.850049][T10435] bond0: (slave bond_slave_0): Releasing backup interface [ 1057.346989][ T25] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1057.517569][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1057.566956][ T25] usb 1-1: config 0 has no interfaces? [ 1057.576636][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1057.577513][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1057.578107][ T25] usb 1-1: SerialNumber: syz [ 1057.587133][ T25] usb 1-1: config 0 descriptor?? [ 1057.807797][ T25] usb 1-1: USB disconnect, device number 61 [ 1058.097303][T10458] syzkaller0: entered promiscuous mode [ 1058.098035][T10458] syzkaller0: entered allmulticast mode [ 1058.747739][ T25] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1058.927597][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1058.978074][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.978888][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.979829][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1058.981202][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1058.982311][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.992071][ T25] usb 1-1: config 0 descriptor?? [ 1059.443468][ T25] hid-generic 0003:045E:07DA.0008: unbalanced collection at end of report description [ 1059.448399][ T25] hid-generic 0003:045E:07DA.0008: probe with driver hid-generic failed with error -22 [ 1059.645391][ T4797] usb 1-1: USB disconnect, device number 62 [ 1060.688245][ T8136] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1060.856930][ T8136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.861845][ T8136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.863220][ T8136] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1060.864495][ T8136] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1060.868131][ T8136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.900751][ T8136] usb 1-1: config 0 descriptor?? [ 1061.350935][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.351565][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.352270][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.352898][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.353515][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.354102][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.354694][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.355204][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.355719][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.363559][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.364161][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.364678][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.365172][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.365709][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.366843][ T8136] hid-generic 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1061.376672][ T8136] hid-generic 0003:047F:FFFF.0009: hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1061.553285][ T4797] usb 1-1: USB disconnect, device number 63 [ 1062.332022][ T29] audit: type=1326 audit(134218790.131:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.1.2210" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1062.333312][ T29] audit: type=1326 audit(134218790.131:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.1.2210" exe="/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1062.334463][ T29] audit: type=1326 audit(134218790.131:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.1.2210" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x7ffc0000 [ 1065.097345][T10540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.099159][T10540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.425049][T10550] binder: 10549:10550 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 1065.429685][T10550] binder: 10550 RLIMIT_NICE not set [ 1065.942941][ T4797] binder: undelivered death notification, 0000000000000000 [ 1066.127973][T10555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.130826][T10555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.102838][T10580] binder: 10579:10580 ioctl c0306201 200001c0 returned -14 [ 1073.137100][ T8] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1073.286555][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1073.303760][ T8] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1073.304506][ T8] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.305111][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1073.305689][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 1073.311664][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.330486][ T8] usb 1-1: config 0 descriptor?? [ 1073.793136][ T8] hid-generic 0003:056A:0301.000A: hidraw0: USB HID v0.00 Device [HID 056a:0301] on usb-dummy_hcd.0-1/input0 [ 1073.986963][ T8] usb 1-1: USB disconnect, device number 64 [ 1074.886814][ T5978] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1075.090278][ T5978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.094648][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1075.095835][ T5978] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1075.151827][ T5978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1075.152644][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.153299][ T5978] usb 1-1: Product: syz [ 1075.153723][ T5978] usb 1-1: Manufacturer: syz [ 1075.154152][ T5978] usb 1-1: SerialNumber: syz [ 1075.196801][ T5978] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1075.197616][ T5978] cdc_ncm 1-1:1.0: bind() failure [ 1075.391148][ T5978] usb 1-1: USB disconnect, device number 65 [ 1076.009934][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.011511][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.672121][T10684] binder: 10683:10684 tried to acquire reference to desc 0, got 1 instead [ 1080.674771][T10684] binder: 10683:10684 got transaction with invalid data ptr [ 1080.675625][T10684] binder: 10683:10684 transaction async to 10683:0 failed 22/29201/-14, size 0-24 line 3442 [ 1080.678901][T10684] binder_alloc: 10683: pid 10683 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1080.682567][ T8] binder: undelivered TRANSACTION_COMPLETE [ 1080.694180][ T8] binder: undelivered transaction 23, process died. [ 1082.095537][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.101981][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.315683][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.323819][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.688297][ T4797] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1082.872807][ T4797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1082.873853][ T4797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.874445][ T4797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.905258][ T4797] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1082.911060][ T4797] usb 1-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1082.912149][ T4797] usb 1-1: Manufacturer: syz [ 1082.945196][ T4797] usb 1-1: config 0 descriptor?? [ 1083.463766][ T4797] hid-generic 0003:056A:0045.000B: ignoring exceeding usage max [ 1083.504635][ T4797] hid-generic 0003:056A:0045.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1083.661593][ T4797] usb 1-1: USB disconnect, device number 66 [ 1089.695113][T10752] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2300'. [ 1094.011493][T10786] binder: 10785:10786 tried to acquire reference to desc 0, got 1 instead [ 1094.013572][T10786] binder: cannot allocate buffer: no space left [ 1094.013832][T10786] binder: 10785:10786 transaction async to 10785:0 failed 28/29201/-28, size 0-0 line 3339 [ 1094.023208][ T8136] binder: undelivered TRANSACTION_ERROR: 29201 [ 1095.383581][T10814] process 'syz.1.2326' launched '/dev/fd/6' with NULL argv: empty string added [ 1096.560524][ T29] audit: type=1326 audit(134218824.401:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10833 comm="syz.1.2335" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d54d528 code=0x0 [ 1099.855788][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.859711][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.457864][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.460447][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.210728][ T8] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1104.059847][ T8] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 1104.060750][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.061697][ T8] usb 1-1: config 0 has no interface number 1 [ 1104.062549][ T8] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1104.064159][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1105.063545][ T8] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1105.064281][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.064911][ T8] usb 1-1: Product: syz [ 1105.065445][ T8] usb 1-1: Manufacturer: syz [ 1105.077465][ T8] usb 1-1: SerialNumber: syz [ 1105.172535][ T8] usb 1-1: config 0 descriptor?? [ 1106.064993][ T8] usb-storage 1-1:0.127: USB Mass Storage device detected [ 1107.428548][ T8] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1108.052196][ T8] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1108.198621][ T8] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1114.902935][ T25] usb 1-1: USB disconnect, device number 67 [ 1114.982692][T10895] tun0: tun_chr_ioctl cmd 37728 [ 1116.707598][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.709188][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.694307][T10954] xt_SECMARK: unable to map security context 'unconfined' [ 1122.985564][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.991977][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.625441][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 1141.511200][ T29] audit: type=1326 audit(134218869.351:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11074 comm="syz.0.2415" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae14d528 code=0x0 [ 1153.002381][T11126] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2432'. [ 1153.573765][T11144] input: syz1 as /devices/virtual/input/input23 [ 1159.543538][T11175] IPv6: NLM_F_CREATE should be specified when creating new route [ 1163.037030][ T4797] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1163.227246][ T4797] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.227967][ T4797] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1163.245772][ T4797] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1163.248823][ T4797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1163.249429][ T4797] usb 1-1: SerialNumber: syz [ 1163.504988][ T4797] usb 1-1: 0:2 : does not exist [ 1163.569847][ T4797] usb 1-1: USB disconnect, device number 68 [ 1163.794224][T11195] udevd[11195]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1164.822374][T11215] binder: 11214:11215 tried to acquire reference to desc 0, got 1 instead [ 1164.840243][ T8136] binder: release 11214:11215 transaction 33 out, still active [ 1164.840938][ T8136] binder: undelivered TRANSACTION_COMPLETE [ 1164.854379][ T8136] binder: send failed reply for transaction 33, target dead [ 1170.137169][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.138897][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.954755][T11267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.967238][T11267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.123041][T11267] hsr_slave_0: entered promiscuous mode [ 1179.158222][T11267] hsr_slave_1: entered promiscuous mode [ 1179.196703][T11267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.197421][T11267] Cannot create hsr debugfs directory [ 1179.690555][T11267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.755068][T11267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.811010][T11267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.898874][T11267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.278141][T11267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1180.320278][T11267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1180.335831][T11267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1180.354683][T11267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1181.222458][T11267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.072968][T11267] veth0_vlan: entered promiscuous mode [ 1184.101116][T11267] veth1_vlan: entered promiscuous mode [ 1184.193702][T11267] veth0_macvtap: entered promiscuous mode [ 1184.210570][T11267] veth1_macvtap: entered promiscuous mode [ 1184.394289][T11267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.395668][T11267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.397769][T11267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.398987][T11267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.218600][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.220478][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.027969][ T25] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1187.218669][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.219536][ T25] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1187.220156][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.230262][ T25] usb 1-1: config 0 descriptor?? [ 1187.484653][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 1187.485823][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1187.584733][ T25] usb 1-1: USB disconnect, device number 69 [ 1188.057267][ T29] audit: type=1326 audit(134218915.901:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.060052][ T29] audit: type=1326 audit(134218915.901:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.062663][ T29] audit: type=1326 audit(134218915.901:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.070882][ T29] audit: type=1326 audit(134218915.911:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.074379][ T29] audit: type=1326 audit(134218915.911:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.080181][ T29] audit: type=1326 audit(134218915.921:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.082931][ T29] audit: type=1326 audit(134218915.921:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.086672][ T29] audit: type=1326 audit(134218915.921:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.092598][ T29] audit: type=1326 audit(134218915.931:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.095045][ T29] audit: type=1326 audit(134218915.931:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11411 comm="syz.0.2504" exe="/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1188.991885][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.010610][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.140201][T11393] hsr_slave_0: entered promiscuous mode [ 1190.178044][T11393] hsr_slave_1: entered promiscuous mode [ 1190.233704][T11393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1190.234341][T11393] Cannot create hsr debugfs directory [ 1191.292971][T11393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1191.323552][T11393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1191.354538][T11393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1191.380577][T11393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1192.422094][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1195.411597][T11393] veth0_vlan: entered promiscuous mode [ 1195.458849][T11393] veth1_vlan: entered promiscuous mode [ 1195.575278][T11393] veth0_macvtap: entered promiscuous mode [ 1195.589893][T11393] veth1_macvtap: entered promiscuous mode [ 1195.690538][T11393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.691442][T11393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.692342][T11393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1195.693146][T11393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.188146][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.190987][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.997162][ T5978] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1204.156694][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 1204.180144][ T5978] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.180946][ T5978] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.182529][ T5978] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1204.183307][ T5978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1204.183892][ T5978] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1204.184489][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.200978][ T5978] usb 1-1: config 0 descriptor?? [ 1204.657555][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.658498][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x3 [ 1204.659067][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.659702][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.660202][ T5978] hid-generic 0003:045E:05DA.000C: ignoring exceeding usage max [ 1204.664179][ T5978] hid-generic 0003:045E:05DA.000C: ignoring exceeding usage max [ 1204.665217][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.665725][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.667549][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.670103][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.672291][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.672861][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.673410][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.673957][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.674474][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.674985][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.675550][ T5978] hid-generic 0003:045E:05DA.000C: unknown main item tag 0x0 [ 1204.687456][ T5978] hid-generic 0003:045E:05DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.0-1/input0 [ 1204.849824][ T1882] usb 1-1: USB disconnect, device number 70 [ 1206.600917][T11597] binder: 11597:11596 cannot find target node [ 1206.601606][T11597] binder: 11596:11597 transaction call to 0:0 failed 34/29189/-22, size 0-0 line 3151 [ 1206.603496][ T1882] binder: undelivered TRANSACTION_ERROR: 29189 [ 1207.207686][T11609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.209474][T11609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.758597][ T3404] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1212.917717][ T3404] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.918484][ T3404] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.949331][ T3404] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1212.950082][ T3404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.950673][ T3404] usb 1-1: Product: syz [ 1212.951068][ T3404] usb 1-1: Manufacturer: syz [ 1212.951467][ T3404] usb 1-1: SerialNumber: syz [ 1213.424722][ T3404] usb 1-1: cannot find UAC_HEADER [ 1213.492707][ T3404] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1213.507845][ T3404] usb 1-1: USB disconnect, device number 71 [ 1213.672136][T11668] netlink: 'syz.1.2573': attribute type 3 has an invalid length. [ 1213.728971][T11635] udevd[11635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1214.943378][ T25] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1215.137999][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.138876][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1215.148420][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1215.149223][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1215.149998][ T25] usb 1-1: SerialNumber: syz [ 1215.394468][ T25] usb 1-1: 0:2 : does not exist [ 1215.407206][ T25] usb 1-1: unit 32 not found! [ 1215.407793][ T25] usb 1-1: unit 120 not found! [ 1215.408248][ T25] usb 1-1: unit 37 not found! [ 1215.493437][ T25] usb 1-1: USB disconnect, device number 72 [ 1216.198999][T11635] udevd[11635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1220.237433][ T1882] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1220.387854][ T1882] usb 1-1: Using ep0 maxpacket: 16 [ 1220.447642][ T1882] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1220.448833][ T1882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.449721][ T1882] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1220.450373][ T1882] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1220.450986][ T1882] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1220.475214][ T1882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1220.477202][ T1882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1220.477854][ T1882] usb 1-1: SerialNumber: syz [ 1220.499046][T11707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1220.500250][T11707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1220.727948][ T1882] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1220.749543][ T1882] usb 1-1: USB disconnect, device number 73 [ 1221.092342][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.093939][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1222.277319][ T1882] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1222.406866][ T1882] usb 1-1: device descriptor read/64, error -71 [ 1222.646671][ T1882] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1222.777397][ T1882] usb 1-1: device descriptor read/64, error -71 [ 1222.895434][ T1882] usb usb1-port1: attempt power cycle [ 1223.477572][ T1882] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1223.897506][ T1882] usb 1-1: device descriptor read/8, error -71 [ 1224.157478][ T1882] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1224.783504][ T1882] usb 1-1: device descriptor read/8, error -71 [ 1224.888426][ T1882] usb usb1-port1: unable to enumerate USB device [ 1226.882522][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.884004][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.898030][T11769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.899669][T11769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.085413][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.290418][ T4923] bond0 (unregistering): Released all slaves [ 1248.477902][ T4923] hsr_slave_0: left promiscuous mode [ 1248.528634][ T4923] hsr_slave_1: left promiscuous mode [ 1248.629572][ T4923] veth1_macvtap: left promiscuous mode [ 1248.630286][ T4923] veth0_macvtap: left promiscuous mode [ 1248.631056][ T4923] veth1_vlan: left promiscuous mode [ 1248.631752][ T4923] veth0_vlan: left promiscuous mode [ 1259.307751][T11890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2654'. [ 1259.309045][T11890] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1264.367097][T11911] input: syz1 as /devices/virtual/input/input24 [ 1265.544405][T11924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.547047][T11924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.635760][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.637903][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.145848][T11938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.148735][T11938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.699659][T11965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1272.767150][T11499] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1272.937544][T11499] usb 1-1: Using ep0 maxpacket: 32 [ 1272.976850][T11499] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1272.977699][T11499] usb 1-1: config 0 has no interface number 0 [ 1272.991198][T11499] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1272.991963][T11499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.997459][T11499] usb 1-1: Product: syz [ 1272.997910][T11499] usb 1-1: Manufacturer: syz [ 1272.998447][T11499] usb 1-1: SerialNumber: syz [ 1273.020430][T11499] usb 1-1: config 0 descriptor?? [ 1273.033094][T11499] smsc95xx v2.0.0 [ 1273.497535][T11499] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1273.498420][T11499] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1274.985774][T11499] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 1274.987600][T11499] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1275.019439][T11499] usb 1-1: USB disconnect, device number 78 [ 1278.289922][T12001] could not allocate digest TFM handle sha384-avx [ 1279.640444][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1279.640558][ T29] audit: type=1326 audit(134219007.481:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12009 comm="syz.1.2699" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef4d528 code=0x7ffc0000 [ 1279.655499][ T29] audit: type=1326 audit(134219007.481:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12009 comm="syz.1.2699" exe="/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffff7ef4d528 code=0x7ffc0000 [ 1279.659617][ T29] audit: type=1326 audit(134219007.481:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12009 comm="syz.1.2699" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef4d528 code=0x7ffc0000 [ 1279.664948][ T29] audit: type=1326 audit(134219007.491:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12009 comm="syz.1.2699" exe="/syz-executor" sig=0 arch=c00000b7 syscall=188 compat=0 ip=0xffff7ef4d528 code=0x7ffc0000 [ 1279.669041][ T29] audit: type=1326 audit(134219007.491:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12009 comm="syz.1.2699" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef4d528 code=0x7ffc0000 [ 1280.621519][T12025] netlink: 'syz.1.2705': attribute type 5 has an invalid length. [ 1297.961799][T12133] netlink: 'syz.0.2748': attribute type 12 has an invalid length. [ 1298.383342][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'. [ 1298.473435][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2750'. [ 1305.197896][T12194] xt_hashlimit: size too large, truncated to 1048576 [ 1312.394732][T12222] wireguard0: entered promiscuous mode [ 1312.395285][T12222] wireguard0: entered allmulticast mode [ 1316.083231][T12238] pimreg: entered allmulticast mode [ 1316.090224][T12238] pimreg: left allmulticast mode [ 1326.624340][T12286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2805'. [ 1331.952546][T12326] tap0: tun_chr_ioctl cmd 1074025675 [ 1331.953250][T12326] tap0: persist enabled [ 1339.558732][T12384] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1344.714867][T12423] serio: Serial port pts0 [ 1348.305642][T12456] input: syz0 as /devices/virtual/input/input26 [ 1348.476907][T12459] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1348.901586][ T29] audit: type=1326 audit(134219076.741:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12448 comm="syz.1.2866" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef4d528 code=0x7fc00000 [ 1349.589390][ T29] audit: type=1326 audit(134219077.431:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12471 comm="syz.1.2876" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef4d528 code=0x0 [ 1350.739573][T12481] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1352.616935][T12501] wg2: entered promiscuous mode [ 1352.617984][T12501] wg2: entered allmulticast mode [ 1355.805183][T12523] binfmt_misc: register: failed to install interpreter file ./file0 [ 1356.556931][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1358.665037][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2910'. [ 1359.013806][T12561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2913'. [ 1359.484092][T12565] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2915'. [ 1360.963035][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2918'. [ 1366.671700][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1378.819561][ T29] audit: type=1326 audit(134219106.661:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12670 comm="syz.1.2955" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef4d528 code=0x0 [ 1385.119496][ T29] audit: type=1107 audit(134219112.961:667): pid=12709 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1388.162387][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1389.703554][T12743] input: syz1 as /devices/virtual/input/input29 [ 1394.790041][ T29] audit: type=1326 audit(134219122.631:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.805189][ T29] audit: type=1326 audit(134219122.641:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.818049][ T29] audit: type=1326 audit(134219122.651:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.823029][ T29] audit: type=1326 audit(134219122.661:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.829557][ T29] audit: type=1326 audit(134219122.671:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.840969][ T29] audit: type=1326 audit(134219122.681:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.842213][ T29] audit: type=1326 audit(134219122.681:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.843302][ T29] audit: type=1326 audit(134219122.681:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=433 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1394.844672][ T29] audit: type=1326 audit(134219122.681:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12782 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9014d528 code=0x7ffc0000 [ 1395.137051][T12785] geneve0: entered allmulticast mode [ 1398.529993][T11393] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1398.531090][T11393] CPU: 1 UID: 0 PID: 11393 Comm: syz-executor Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 1398.531803][T11393] Hardware name: linux,dummy-virt (DT) [ 1398.532229][T11393] Call trace: [ 1398.532554][T11393] show_stack+0x18/0x24 (C) [ 1398.533377][T11393] dump_stack_lvl+0x78/0x90 [ 1398.534108][T11393] dump_stack+0x18/0x24 [ 1398.534597][T11393] dump_header+0x3c/0x1a0 [ 1398.535036][T11393] oom_kill_process+0x134/0x350 [ 1398.535481][T11393] out_of_memory+0xe0/0x56c [ 1398.535977][T11393] mem_cgroup_out_of_memory+0x12c/0x144 [ 1398.536789][T11393] try_charge_memcg+0x3dc/0x670 [ 1398.537338][T11393] charge_memcg+0x48/0x88 [ 1398.537790][T11393] mem_cgroup_swapin_charge_folio+0x6c/0x1b4 [ 1398.538408][T11393] __read_swap_cache_async+0x200/0x2a4 [ 1398.538907][T11393] swap_cluster_readahead+0x164/0x34c [ 1398.539369][T11393] swapin_readahead+0x340/0x500 [ 1398.539838][T11393] do_swap_page+0x594/0x18e0 [ 1398.540306][T11393] __handle_mm_fault+0x7b4/0x1950 [ 1398.540800][T11393] handle_mm_fault+0x164/0x314 [ 1398.541295][T11393] do_page_fault+0x1b8/0x538 [ 1398.541800][T11393] do_translation_fault+0xac/0xbc [ 1398.542270][T11393] do_mem_abort+0x44/0x94 [ 1398.542720][T11393] el0_da+0x78/0xa8 [ 1398.543135][T11393] el0t_64_sync_handler+0xc4/0x138 [ 1398.543671][T11393] el0t_64_sync+0x1a4/0x1a8 [ 1398.557296][T11393] memory: usage 307200kB, limit 307200kB, failcnt 2794 [ 1398.558001][T11393] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 1398.558599][T11393] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1398.559136][T11393] Memory cgroup stats for /syz1: [ 1398.560675][T11393] cache 0 [ 1398.561346][T11393] rss 0 [ 1398.561756][T11393] rss_huge 0 [ 1398.562081][T11393] shmem 0 [ 1398.562426][T11393] mapped_file 0 [ 1398.562814][T11393] dirty 0 [ 1398.563196][T11393] writeback 0 [ 1398.563560][T11393] workingset_refault_anon 1 [ 1398.563960][T11393] workingset_refault_file 0 [ 1398.564410][T11393] swap 315392 [ 1398.564730][T11393] swapcached 4096 [ 1398.565053][T11393] pgpgin 795147 [ 1398.565410][T11393] pgpgout 795146 [ 1398.565731][T11393] pgfault 671736 [ 1398.591245][T11393] pgmajfault 3 [ 1398.591723][T11393] inactive_anon 4096 [ 1398.592124][T11393] active_anon 0 [ 1398.592445][T11393] inactive_file 0 [ 1398.592770][T11393] active_file 0 [ 1398.593089][T11393] unevictable 0 [ 1398.593439][T11393] hierarchical_memory_limit 314572800 [ 1398.593835][T11393] hierarchical_memsw_limit 9223372036854771712 [ 1398.594303][T11393] total_cache 0 [ 1398.594628][T11393] total_rss 0 [ 1398.594942][T11393] total_rss_huge 0 [ 1398.607369][T11393] total_shmem 0 [ 1398.607829][T11393] total_mapped_file 0 [ 1398.608188][T11393] total_dirty 0 [ 1398.608532][T11393] total_writeback 0 [ 1398.608902][T11393] total_workingset_refault_anon 1 [ 1398.609290][T11393] total_workingset_refault_file 0 [ 1398.609675][T11393] total_swap 315392 [ 1398.610005][T11393] total_swapcached 4096 [ 1398.610345][T11393] total_pgpgin 795147 [ 1398.610737][T11393] total_pgpgout 795146 [ 1398.611077][T11393] total_pgfault 671736 [ 1398.611427][T11393] total_pgmajfault 3 [ 1398.611767][T11393] total_inactive_anon 4096 [ 1398.612120][T11393] total_active_anon 0 [ 1398.612460][T11393] total_inactive_file 0 [ 1398.612835][T11393] total_active_file 0 [ 1398.613259][T11393] total_unevictable 0 [ 1398.614053][T11393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2999,pid=12779,uid=0 [ 1398.627209][T11393] Memory cgroup out of memory: Killed process 12780 (syz.1.2999) total-vm:41912kB, anon-rss:604kB, file-rss:1032kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 1400.752503][ T30] oom_reaper: reaped process 12780 (syz.1.2999), now anon-rss:24kB, file-rss:72kB, shmem-rss:0kB [ 1402.368430][T12840] geneve2: entered promiscuous mode [ 1402.369190][T12840] geneve2: entered allmulticast mode [ 1404.437091][T12874] geneve0: entered allmulticast mode [ 1408.530854][T12920] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1408.738188][T12922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3061'. [ 1409.362480][T12932] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1409.531740][T12934] xt_hashlimit: size too large, truncated to 1048576 [ 1428.583462][T13087] pim6reg: entered allmulticast mode [ 1430.147767][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3129'. [ 1437.160679][T13177] syzkaller1: entered promiscuous mode [ 1437.162846][T13177] syzkaller1: entered allmulticast mode [ 1438.371150][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1439.669501][T13219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3155'. [ 1442.267177][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1442.268151][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1442.269116][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1442.270198][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1446.950170][T13295] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 1447.083212][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1448.024339][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1459.034061][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 1463.052248][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1463.197006][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1463.198120][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'. [ 1465.061167][T13439] netlink: 'syz.1.3226': attribute type 1 has an invalid length. [ 1465.061928][T13439] netlink: 'syz.1.3226': attribute type 2 has an invalid length. [ 1465.503423][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 1468.741810][T13499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1469.318682][T13514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3254'. [ 1469.917443][T13528] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 1470.907167][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3270'. [ 1470.907913][T13558] netlink: 'syz.0.3270': attribute type 7 has an invalid length. [ 1470.908437][T13558] netlink: 'syz.0.3270': attribute type 8 has an invalid length. [ 1470.908948][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'. [ 1470.963052][T13558] erspan0: entered promiscuous mode [ 1471.000457][T13558] batadv_slave_1: entered promiscuous mode [ 1471.037117][T13558] gretap0: entered promiscuous mode [ 1472.612500][T13588] veth1_to_bridge: entered allmulticast mode [ 1476.420298][T13632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.422004][T13632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.057602][T13642] pim6reg: entered allmulticast mode [ 1480.079064][T13642] pim6reg: left allmulticast mode [ 1481.100621][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1481.101381][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1481.139170][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1481.188134][T13655] bond0: (slave bond_slave_0): Releasing backup interface [ 1488.687968][T13707] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 1488.692001][T13707] netlink: 'syz.0.3329': attribute type 10 has an invalid length. [ 1491.922599][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3337'. [ 1492.435893][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.440575][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.877360][T13790] ip6tnl1: entered allmulticast mode [ 1504.652202][T13797] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1504.722882][T13797] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1511.230799][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1511.231655][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1512.313088][T13894] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1519.313522][T13945] netlink: 'syz.1.3421': attribute type 3 has an invalid length. [ 1520.345046][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1520.701064][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3430'. [ 1523.062735][T14026] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 1524.901410][T14036] netlink: 'syz.1.3455': attribute type 10 has an invalid length. [ 1525.335578][T14044] xt_CT: No such helper "snmp" [ 1527.064504][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 1533.219894][T14112] bond0: (slave bond_slave_0): Releasing backup interface [ 1533.315613][T14112] bond0: (slave bond_slave_1): Releasing backup interface [ 1533.847493][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1536.075480][T14160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3504'. [ 1542.072432][T14210] lo speed is unknown, defaulting to 1000 [ 1542.074041][T14210] lo speed is unknown, defaulting to 1000 [ 1542.078469][T14210] lo speed is unknown, defaulting to 1000 [ 1542.091097][T14210] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1542.109963][T14210] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1542.162862][T14210] lo speed is unknown, defaulting to 1000 [ 1542.168441][T14210] lo speed is unknown, defaulting to 1000 [ 1542.172625][T14210] lo speed is unknown, defaulting to 1000 [ 1546.984377][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1547.404364][T14291] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3553'. [ 1547.524306][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1547.525404][T14293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1547.531017][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1547.532204][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3549'. [ 1549.232756][ T8136] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1549.496629][ T8136] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 1549.497566][ T8136] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.498250][ T8136] usb 1-1: config 0 has no interface number 1 [ 1549.498919][ T8136] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1549.499841][ T8136] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1549.560282][ T8136] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1549.561064][ T8136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.561927][ T8136] usb 1-1: Product: syz [ 1549.562508][ T8136] usb 1-1: Manufacturer: syz [ 1549.563460][ T8136] usb 1-1: SerialNumber: syz [ 1549.598784][ T8136] usb 1-1: config 0 descriptor?? [ 1549.620828][ T8136] usb-storage 1-1:0.127: USB Mass Storage device detected [ 1549.650962][ T8136] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1549.695058][ T8136] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1549.733383][ T8136] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1549.869813][T14312] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3558'. [ 1550.502981][T14322] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1551.356330][T14332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1563.030349][T11499] usb 1-1: USB disconnect, device number 79 [ 1563.281268][T14347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1567.186814][T11499] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1567.381524][T11499] usb 1-1: config 0 has an invalid interface number: 127 but max is 1 [ 1567.382235][T11499] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.382854][T11499] usb 1-1: config 0 has no interface number 1 [ 1567.383445][T11499] usb 1-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1567.384293][T11499] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1567.407997][T11499] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1567.408765][T11499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.409337][T11499] usb 1-1: Product: syz [ 1567.409762][T11499] usb 1-1: Manufacturer: syz [ 1567.410287][T11499] usb 1-1: SerialNumber: syz [ 1567.438952][T11499] usb 1-1: config 0 descriptor?? [ 1567.468978][T11499] usb-storage 1-1:0.127: USB Mass Storage device detected [ 1567.498306][T11499] usb-storage 1-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1567.531867][T11499] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1567.542151][T11499] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1568.247684][T14374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3579'. [ 1574.262155][T14388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1576.299061][T14416] GUP no longer grows the stack in syz.1.3587 (14416): 20006000-2000a000 (20005000) [ 1576.301112][T14416] CPU: 0 UID: 0 PID: 14416 Comm: syz.1.3587 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 1576.301824][T14416] Hardware name: linux,dummy-virt (DT) [ 1576.302246][T14416] Call trace: [ 1576.302560][T14416] show_stack+0x18/0x24 (C) [ 1576.303034][T14416] dump_stack_lvl+0x78/0x90 [ 1576.303463][T14416] dump_stack+0x18/0x24 [ 1576.303945][T14416] gup_vma_lookup+0x98/0xac [ 1576.304369][T14416] __get_user_pages+0xc0/0xca8 [ 1576.304797][T14416] __gup_longterm_locked+0x1ec/0x840 [ 1576.305251][T14416] pin_user_pages+0x78/0xa0 [ 1576.305696][T14416] xdp_umem_create+0x17c/0x3b0 [ 1576.306597][T14416] xsk_setsockopt+0x25c/0x2d0 [ 1576.307202][T14416] do_sock_setsockopt+0xa0/0x18c [ 1576.307671][T14416] __sys_setsockopt+0x80/0xdc [ 1576.308104][T14416] __arm64_sys_setsockopt+0x28/0x38 [ 1576.308581][T14416] invoke_syscall+0x48/0x110 [ 1576.309153][T14416] el0_svc_common.constprop.0+0x40/0xe0 [ 1576.309676][T14416] do_el0_svc+0x1c/0x28 [ 1576.310099][T14416] el0_svc+0x30/0xe0 [ 1576.310528][T14416] el0t_64_sync_handler+0x10c/0x138 [ 1576.311515][T14416] el0t_64_sync+0x1a4/0x1a8 [ 1577.897073][ T5978] usb 1-1: USB disconnect, device number 80 [ 1577.929828][T14438] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1578.559901][T14455] lo: entered allmulticast mode [ 1578.579821][T14455] pimreg: entered allmulticast mode [ 1579.385080][T14463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1579.418977][T14463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1579.548988][T14473] lo speed is unknown, defaulting to 1000 [ 1586.548667][T14512] syzkaller1: entered promiscuous mode [ 1586.549345][T14512] syzkaller1: entered allmulticast mode [ 1588.474453][T14525] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1590.138697][T14548] veth1_to_bridge: left allmulticast mode [ 1590.271002][T14548] geneve0: left allmulticast mode [ 1590.312462][T14548] ip6tnl1: left allmulticast mode [ 1590.377101][T14545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.379630][T14545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.851332][T14588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.852943][T14588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.752453][T14615] macsec1: entered promiscuous mode [ 1601.753448][T14615] geneve0: entered promiscuous mode [ 1601.754608][T14615] macsec1: entered allmulticast mode [ 1601.855431][T14617] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3657'. [ 1602.065150][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1602.066447][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1602.067931][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1602.068696][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1602.859917][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 1602.860739][T14623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3660'. [ 1603.653007][ T5872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.733528][ T5872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.829094][ T5872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.933857][ T5872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.937084][ T5872] geneve0 (unregistering): left promiscuous mode [ 1605.000068][ T5872] bond0 (unregistering): Released all slaves [ 1605.016626][T14628] lo speed is unknown, defaulting to 1000 [ 1605.318708][ T5872] hsr_slave_0: left promiscuous mode [ 1605.358142][ T5872] hsr_slave_1: left promiscuous mode [ 1605.450307][ T5872] veth1_macvtap: left promiscuous mode [ 1605.451023][ T5872] veth0_macvtap: left promiscuous mode [ 1605.451773][ T5872] veth1_vlan: left promiscuous mode [ 1605.452411][ T5872] veth0_vlan: left promiscuous mode [ 1605.774778][ T5872] pim6reg (unregistering): left allmulticast mode [ 1606.356791][ T25] lo speed is unknown, defaulting to 1000 [ 1608.424807][T14628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.451482][T14628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.857831][T14628] hsr_slave_0: entered promiscuous mode [ 1609.909101][T14628] hsr_slave_1: entered promiscuous mode [ 1609.947177][T14628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1609.947928][T14628] Cannot create hsr debugfs directory [ 1611.146775][ T25] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1611.307310][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1611.338359][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1611.339385][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1611.340446][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1611.342999][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1611.344581][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1611.351390][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.582131][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 1611.582777][ T25] usbtmc 1-1:16.0: can't read capabilities [ 1611.768362][T14628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1611.807559][T14628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1611.838798][ T5978] usb 1-1: USB disconnect, device number 81 [ 1611.851017][T14628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1611.892145][T14628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1612.973458][T14628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.356825][T11499] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1613.550355][T11499] usb 1-1: config 0 has an invalid interface number: 100 but max is 0 [ 1613.551013][T11499] usb 1-1: config 0 has no interface number 0 [ 1613.596949][T11499] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 1613.597683][T11499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.598392][T11499] usb 1-1: Product: syz [ 1613.598794][T11499] usb 1-1: Manufacturer: syz [ 1613.599202][T11499] usb 1-1: SerialNumber: syz [ 1613.620042][T11499] usb 1-1: config 0 descriptor?? [ 1613.630501][T11499] port100 1-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 1613.830892][T11499] usb 1-1: USB disconnect, device number 82 [ 1614.191676][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'. [ 1617.843473][T14628] veth0_vlan: entered promiscuous mode [ 1617.885595][T14628] veth1_vlan: entered promiscuous mode [ 1618.005092][T14628] veth0_macvtap: entered promiscuous mode [ 1618.036016][T14628] veth1_macvtap: entered promiscuous mode [ 1618.173185][T14628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.174603][T14628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.175764][T14628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.188381][T14628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.915114][T14868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1618.917344][T14868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.452986][T14896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.455726][T14896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.451626][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1621.471375][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1622.542907][T14874] hsr_slave_0: entered promiscuous mode [ 1622.578578][T14874] hsr_slave_1: entered promiscuous mode [ 1622.617691][T14874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1622.618399][T14874] Cannot create hsr debugfs directory [ 1623.022920][T14874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.115566][T14874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.227770][T14874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.299006][T14874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.663234][T14874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1623.690618][T14874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1623.705647][T14874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1623.736412][T14874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1624.671972][T14874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.713011][T14874] veth0_vlan: entered promiscuous mode [ 1627.742422][T14874] veth1_vlan: entered promiscuous mode [ 1627.855602][T14874] veth0_macvtap: entered promiscuous mode [ 1627.883247][T14874] veth1_macvtap: entered promiscuous mode [ 1627.992486][T14874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.993298][T14874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.993979][T14874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.994621][T14874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.639663][T14984] binder: 14983:14984 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 1634.899952][T14965] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1635.067163][T14965] usb 1-1: Using ep0 maxpacket: 8 [ 1635.126781][T14965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1635.129666][T14965] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1635.171334][T14965] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1635.172187][T14965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.172731][T14965] usb 1-1: Product: syz [ 1635.173134][T14965] usb 1-1: Manufacturer: syz [ 1635.173563][T14965] usb 1-1: SerialNumber: syz [ 1635.221030][T14965] usb 1-1: config 0 descriptor?? [ 1635.660228][T14965] usb 1-1: USB disconnect, device number 83 [ 1637.711354][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.712923][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.900680][T15010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1637.903283][T15010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.751009][T15022] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1638.819077][T15023] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1639.485783][ T29] audit: type=1326 audit(134219367.321:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15036 comm="syz.1.3743" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd4d528 code=0x7ffc0000 [ 1639.488626][ T29] audit: type=1326 audit(134219367.321:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15036 comm="syz.1.3743" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd4d528 code=0x7ffc0000 [ 1639.490718][ T29] audit: type=1326 audit(134219367.331:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15036 comm="syz.1.3743" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9cd4d528 code=0x7ffc0000 [ 1639.492335][ T29] audit: type=1326 audit(134219367.331:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15036 comm="syz.1.3743" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd4d528 code=0x7ffc0000 [ 1639.493781][ T29] audit: type=1326 audit(134219367.331:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15036 comm="syz.1.3743" exe="/syz-executor" sig=0 arch=c00000b7 syscall=7 compat=0 ip=0xffff9cd4d528 code=0x7ffc0000 [ 1639.495194][ T29] audit: type=1326 audit(134219367.331:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15036 comm="syz.1.3743" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd4d528 code=0x7ffc0000 [ 1643.681118][T15077] netlink: 'syz.1.3759': attribute type 4 has an invalid length. [ 1643.712109][T15077] netlink: 'syz.1.3759': attribute type 4 has an invalid length. [ 1645.024381][T15099] syzkaller1: entered promiscuous mode [ 1645.036904][T15099] syzkaller1: entered allmulticast mode [ 1649.214597][T15126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3776'. [ 1649.991195][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.992735][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.177243][T15148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.178790][T15148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.656831][T15157] block device autoloading is deprecated and will be removed. [ 1656.358104][ T4797] hid-generic 0000:0006:0008.000D: hidraw0: HID v7fffff.ff Device [syz1] on syz1 [ 1657.156705][T15186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3803'. [ 1657.237858][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1662.927295][T15239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.930545][T15239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.355869][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1668.528604][T15284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.530297][T15284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.156757][T14765] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1672.298213][T14765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1672.314807][T14765] usb 1-1: not running at top speed; connect to a high speed hub [ 1672.483241][T14765] usb 1-1: config 5 has an invalid interface number: 67 but max is 0 [ 1672.483961][T14765] usb 1-1: config 5 has no interface number 0 [ 1672.484695][T14765] usb 1-1: config 5 interface 67 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1672.485511][T14765] usb 1-1: config 5 interface 67 has no altsetting 0 [ 1672.510230][T14765] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=fb.b5 [ 1672.511188][T14765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.511899][T14765] usb 1-1: Product: syz [ 1672.512437][T14765] usb 1-1: Manufacturer: syz [ 1672.513393][T14765] usb 1-1: SerialNumber: syz [ 1674.567591][T14765] usb 1-1: USB disconnect, device number 84 [ 1674.579301][T14765] ================================================================== [ 1674.584702][T14765] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x5c/0xa0 [ 1674.586468][T14765] Read at addr f2f000002a0fdb60 by task kworker/1:2/14765 [ 1674.587325][T14765] Pointer tag: [f2], memory tag: [fe] [ 1674.587717][T14765] [ 1674.588580][T14765] CPU: 1 UID: 0 PID: 14765 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 1674.590859][T14765] Hardware name: linux,dummy-virt (DT) [ 1674.591921][T14765] Workqueue: usb_hub_wq hub_event [ 1674.593062][T14765] Call trace: [ 1674.593580][T14765] show_stack+0x18/0x24 (C) [ 1674.594215][T14765] dump_stack_lvl+0x78/0x90 [ 1674.594695][T14765] print_report+0x108/0x618 [ 1674.595118][T14765] kasan_report+0x88/0xac [ 1674.595523][T14765] __do_kernel_fault+0x170/0x1c8 [ 1674.596026][T14765] do_tag_check_fault+0x78/0x8c [ 1674.596665][T14765] do_mem_abort+0x44/0x94 [ 1674.597080][T14765] el1_abort+0x40/0x60 [ 1674.597592][T14765] el1h_64_sync_handler+0xa4/0x120 [ 1674.598044][T14765] el1h_64_sync+0x6c/0x70 [ 1674.598547][T14765] hdm_disconnect+0x5c/0xa0 (P) [ 1674.598986][T14765] hdm_disconnect+0x5c/0xa0 (L) [ 1674.599407][T14765] usb_unbind_interface+0x78/0x28c [ 1674.599844][T14765] device_remove+0x70/0x80 [ 1674.600258][T14765] device_release_driver_internal+0x1d4/0x230 [ 1674.600721][T14765] device_release_driver+0x18/0x24 [ 1674.601136][T14765] bus_remove_device+0xcc/0x10c [ 1674.601605][T14765] device_del+0x150/0x388 [ 1674.601980][T14765] usb_disable_device+0xd8/0x1b0 [ 1674.602343][T14765] usb_disconnect+0xd8/0x2bc [ 1674.602745][T14765] hub_event+0x98c/0x1558 [ 1674.603127][T14765] process_one_work+0x15c/0x29c [ 1674.603528][T14765] worker_thread+0x24c/0x354 [ 1674.603919][T14765] kthread+0x114/0x118 [ 1674.604288][T14765] ret_from_fork+0x10/0x20 [ 1674.604845][T14765] [ 1674.605120][T14765] Allocated by task 14765: [ 1674.605673][T14765] kasan_save_stack+0x3c/0x64 [ 1674.606357][T14765] save_stack_info+0x40/0x158 [ 1674.606786][T14765] kasan_save_alloc_info+0x14/0x20 [ 1674.607192][T14765] __kasan_kmalloc+0xb4/0xb8 [ 1674.607569][T14765] __kmalloc_cache_noprof+0x174/0x390 [ 1674.608033][T14765] hdm_probe+0x3c/0x498 [ 1674.608408][T14765] usb_probe_interface+0x130/0x314 [ 1674.608859][T14765] really_probe+0xbc/0x298 [ 1674.609297][T14765] __driver_probe_device+0x78/0x12c [ 1674.609682][T14765] driver_probe_device+0x3c/0x10c [ 1674.610086][T14765] __device_attach_driver+0xb8/0xf8 [ 1674.610548][T14765] bus_for_each_drv+0x84/0xe0 [ 1674.610945][T14765] __device_attach+0x9c/0x188 [ 1674.611295][T14765] device_initial_probe+0x14/0x20 [ 1674.611671][T14765] bus_probe_device+0xac/0xb0 [ 1674.612025][T14765] device_add+0x5cc/0x78c [ 1674.612422][T14765] usb_set_configuration+0x4f0/0x8d8 [ 1674.612832][T14765] usb_generic_driver_probe+0x60/0x88 [ 1674.613320][T14765] usb_probe_device+0x3c/0x118 [ 1674.613704][T14765] really_probe+0xbc/0x298 [ 1674.614046][T14765] __driver_probe_device+0x78/0x12c [ 1674.614456][T14765] driver_probe_device+0x3c/0x10c [ 1674.614807][T14765] __device_attach_driver+0xb8/0xf8 [ 1674.615283][T14765] bus_for_each_drv+0x84/0xe0 [ 1674.615689][T14765] __device_attach+0x9c/0x188 [ 1674.616157][T14765] device_initial_probe+0x14/0x20 [ 1674.616650][T14765] bus_probe_device+0xac/0xb0 [ 1674.617024][T14765] device_add+0x5cc/0x78c [ 1674.617392][T14765] usb_new_device+0x27c/0x64c [ 1674.617754][T14765] hub_event+0xe20/0x1558 [ 1674.618097][T14765] process_one_work+0x15c/0x29c [ 1674.618488][T14765] worker_thread+0x24c/0x354 [ 1674.618845][T14765] kthread+0x114/0x118 [ 1674.619219][T14765] ret_from_fork+0x10/0x20 [ 1674.619636][T14765] [ 1674.619935][T14765] Freed by task 14765: [ 1674.620332][T14765] kasan_save_stack+0x3c/0x64 [ 1674.620731][T14765] save_stack_info+0x40/0x158 [ 1674.621155][T14765] kasan_save_free_info+0x18/0x24 [ 1674.621636][T14765] __kasan_slab_free+0x74/0x8c [ 1674.621996][T14765] kfree+0xfc/0x30c [ 1674.622397][T14765] release_mdev+0x10/0x1c [ 1674.622757][T14765] device_release+0x34/0x90 [ 1674.623113][T14765] kobject_put+0xa4/0x114 [ 1674.623615][T14765] device_unregister+0x24/0x34 [ 1674.624043][T14765] most_deregister_interface+0xf8/0x108 [ 1674.624475][T14765] hdm_disconnect+0x5c/0xa0 [ 1674.624838][T14765] usb_unbind_interface+0x78/0x28c [ 1674.625296][T14765] device_remove+0x70/0x80 [ 1674.625692][T14765] device_release_driver_internal+0x1d4/0x230 [ 1674.626315][T14765] device_release_driver+0x18/0x24 [ 1674.626729][T14765] bus_remove_device+0xcc/0x10c [ 1674.627171][T14765] device_del+0x150/0x388 [ 1674.627599][T14765] usb_disable_device+0xd8/0x1b0 [ 1674.627992][T14765] usb_disconnect+0xd8/0x2bc [ 1674.628382][T14765] hub_event+0x98c/0x1558 [ 1674.628891][T14765] process_one_work+0x15c/0x29c [ 1674.629300][T14765] worker_thread+0x24c/0x354 [ 1674.629772][T14765] kthread+0x114/0x118 [ 1674.630171][T14765] ret_from_fork+0x10/0x20 [ 1674.630566][T14765] [ 1674.630875][T14765] The buggy address belongs to the object at fff000002a0fd000 [ 1674.630875][T14765] which belongs to the cache kmalloc-4k of size 4096 [ 1674.631729][T14765] The buggy address is located 2912 bytes inside of SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1674.631729][T14765] 4096-byte region [fff000002a0fd000, fff000002a0fe000) [ 1674.632958][T14765] [ 1674.633373][T14765] The buggy address belongs to the physical page: [ 1674.634136][T14765] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xf9f000002a0fc000 pfn:0x6a0f8 [ 1674.634961][T14765] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1674.635595][T14765] flags: 0x1ffc00000000040(head|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 1674.636680][T14765] page_type: f5(slab) [ 1674.637469][T14765] raw: 01ffc00000000040 f4f0000003001c00 ffffc1ffc013ee00 dead000000000002 [ 1674.638073][T14765] raw: f9f000002a0fc000 0000000080080004 00000001f5000000 0000000000000000 [ 1674.638726][T14765] head: 01ffc00000000040 f4f0000003001c00 ffffc1ffc013ee00 dead000000000002 [ 1674.639261][T14765] head: f9f000002a0fc000 0000000080080004 00000001f5000000 0000000000000000 [ 1674.639824][T14765] head: 01ffc00000000003 ffffc1ffc0a83e01 ffffffffffffffff 0000000000000000 [ 1674.640320][T14765] head: f7f0000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1674.640949][T14765] page dumped because: kasan: bad access detected [ 1674.641411][T14765] [ 1674.641713][T14765] Memory state around the buggy address: [ 1674.642302][T14765] fff000002a0fd900: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1674.642854][T14765] fff000002a0fda00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1674.643365][T14765] >fff000002a0fdb00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1674.643892][T14765] ^ [ 1674.644534][T14765] fff000002a0fdc00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1674.645233][T14765] fff000002a0fdd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1674.645790][T14765] ================================================================== [ 1674.648071][T14765] Disabling lock debugging due to kernel taint [ 1674.724813][T14765] ------------[ cut here ]------------ [ 1674.725344][T14765] kobject: '(null)' (00000000be0f6e22): is not initialized, yet kobject_put() is being called. [ 1674.777814][T14765] WARNING: CPU: 1 PID: 14765 at lib/kobject.c:734 kobject_put+0xe0/0x114 [ 1674.778478][T14765] Modules linked in: [ 1674.779136][T14765] CPU: 1 UID: 0 PID: 14765 Comm: kworker/1:2 Tainted: G B 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 1674.779773][T14765] Tainted: [B]=BAD_PAGE [ 1674.780070][T14765] Hardware name: linux,dummy-virt (DT) [ 1674.780438][T14765] Workqueue: usb_hub_wq hub_event [ 1674.781058][T14765] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1674.781645][T14765] pc : kobject_put+0xe0/0x114 [ 1674.782017][T14765] lr : kobject_put+0xe0/0x114 [ 1674.782396][T14765] sp : ffff8000883f39a0 [ 1674.782694][T14765] x29: ffff8000883f39a0 x28: 0000000000000000 x27: f6f0000044602000 [ 1674.783380][T14765] x26: f1f0000008c70000 x25: f1f0000008c700a8 x24: ffff80008297d3e0 [ 1674.783966][T14765] x23: 0000000000000000 x22: f6f00000446020d0 x21: f2f000002a0fdb68 [ 1674.784585][T14765] x20: f6f0000044602050 x19: f2f000002a0fd000 x18: 0000000000000001 [ 1674.785188][T14765] x17: 00000000000003a6 x16: 0000000000000003 x15: 0000000000000000 [ 1674.785829][T14765] x14: 00000000000003e8 x13: 0000000000000000 x12: 000000000000001d [ 1674.786618][T14765] x11: 00000185f07f9850 x10: ee1b791a8a994e11 x9 : 53cb777e2803f009 [ 1674.787269][T14765] x8 : f7f00000066fa418 x7 : fff000007f8ed780 x6 : fff07ffffd18c000 [ 1674.787880][T14765] x5 : ffff8000827833f0 x4 : 0000000000000001 x3 : 0000000000000000 [ 1674.788535][T14765] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7f00000066f9240 [ 1674.789264][T14765] Call trace: [ 1674.789597][T14765] kobject_put+0xe0/0x114 (P) [ 1674.789985][T14765] kobject_put+0xe0/0x114 (L) [ 1674.790351][T14765] put_device+0x14/0x24 [ 1674.790711][T14765] hdm_disconnect+0x8c/0xa0 [ 1674.791075][T14765] usb_unbind_interface+0x78/0x28c [ 1674.791452][T14765] device_remove+0x70/0x80 [ 1674.791878][T14765] device_release_driver_internal+0x1d4/0x230 [ 1674.792321][T14765] device_release_driver+0x18/0x24 [ 1674.792754][T14765] bus_remove_device+0xcc/0x10c [ 1674.793124][T14765] device_del+0x150/0x388 [ 1674.793501][T14765] usb_disable_device+0xd8/0x1b0 [ 1674.793878][T14765] usb_disconnect+0xd8/0x2bc [ 1674.794236][T14765] hub_event+0x98c/0x1558 [ 1674.794591][T14765] process_one_work+0x15c/0x29c [ 1674.794966][T14765] worker_thread+0x24c/0x354 [ 1674.795327][T14765] kthread+0x114/0x118 [ 1674.795681][T14765] ret_from_fork+0x10/0x20 [ 1674.796222][T14765] ---[ end trace 0000000000000000 ]--- [ 1674.836737][T14765] ------------[ cut here ]------------ [ 1674.837148][T14765] refcount_t: underflow; use-after-free. [ 1674.837654][T14765] WARNING: CPU: 1 PID: 14765 at lib/refcount.c:28 refcount_warn_saturate+0xf4/0x144 [ 1674.838253][T14765] Modules linked in: [ 1674.838765][T14765] CPU: 1 UID: 0 PID: 14765 Comm: kworker/1:2 Tainted: G B W 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 1674.839468][T14765] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1674.839836][T14765] Hardware name: linux,dummy-virt (DT) [ 1674.840205][T14765] Workqueue: usb_hub_wq hub_event [ 1674.840625][T14765] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1674.841124][T14765] pc : refcount_warn_saturate+0xf4/0x144 [ 1674.841546][T14765] lr : refcount_warn_saturate+0xf4/0x144 [ 1674.841951][T14765] sp : ffff8000883f3990 [ 1674.842281][T14765] x29: ffff8000883f3990 x28: 0000000000000000 x27: f6f0000044602000 [ 1674.842915][T14765] x26: f1f0000008c70000 x25: f1f0000008c700a8 x24: ffff80008297d3e0 [ 1674.843545][T14765] x23: 0000000000000000 x22: f6f00000446020d0 x21: f2f000002a0fdb68 [ 1674.844183][T14765] x20: f6f0000044602050 x19: f2f000002a0fd000 x18: ffffffffffffffff [ 1674.844787][T14765] x17: 00000000000003a6 x16: 0000000000000003 x15: ffff8000883f33d0 [ 1674.845403][T14765] x14: ffff8000883f3548 x13: ffff8000827ae740 x12: 000000000000273c [ 1674.846191][T14765] x11: 0000000000000d14 x10: ffff80008285e740 x9 : ffff8000827ae740 [ 1674.846862][T14765] x8 : 00000000ffffdfff x7 : ffff80008285e740 x6 : 80000000ffffe000 [ 1674.847464][T14765] x5 : 0000000000017ff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 1674.848075][T14765] x2 : 0000000000000000 x1 : 0000000000000000 x0 : f7f00000066f9240 [ 1674.848694][T14765] Call trace: [ 1674.848965][T14765] refcount_warn_saturate+0xf4/0x144 (P) [ 1674.849398][T14765] refcount_warn_saturate+0xf4/0x144 (L) [ 1674.850070][T14765] kobject_put+0x110/0x114 [ 1674.850470][T14765] put_device+0x14/0x24 [ 1674.850839][T14765] hdm_disconnect+0x8c/0xa0 [ 1674.851214][T14765] usb_unbind_interface+0x78/0x28c [ 1674.851607][T14765] device_remove+0x70/0x80 [ 1674.852030][T14765] device_release_driver_internal+0x1d4/0x230 [ 1674.852483][T14765] device_release_driver+0x18/0x24 [ 1674.852926][T14765] bus_remove_device+0xcc/0x10c [ 1674.853326][T14765] device_del+0x150/0x388 [ 1674.853696][T14765] usb_disable_device+0xd8/0x1b0 [ 1674.854086][T14765] usb_disconnect+0xd8/0x2bc [ 1674.854458][T14765] hub_event+0x98c/0x1558 [ 1674.854826][T14765] process_one_work+0x15c/0x29c [ 1674.855213][T14765] worker_thread+0x24c/0x354 [ 1674.855594][T14765] kthread+0x114/0x118 [ 1674.856001][T14765] ret_from_fork+0x10/0x20 [ 1674.856538][T14765] ---[ end trace 0000000000000000 ]--- [ 1675.288197][T14765] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1675.504347][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.609443][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.703299][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.761760][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.433199][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1676.497033][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1676.543596][ T11] bond0 (unregistering): Released all slaves [ 1676.711049][ T11] hsr_slave_0: left promiscuous mode [ 1676.749450][ T11] hsr_slave_1: left promiscuous mode [ 1676.825718][ T11] veth1_macvtap: left promiscuous mode [ 1676.827204][ T11] veth0_macvtap: left promiscuous mode [ 1676.828107][ T11] veth1_vlan: left promiscuous mode [ 1676.828951][ T11] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 04:37:33 Registers: info registers vcpu 0 CPU#0 PC=ffff8000800122d4 X00=0000000000000003 X01=0000ffffa5973b89 X02=0000000000000d41 X03=00000000000001b6 X04=0000000000000000 X05=0000ffffa5984070 X06=000000007fffffff X07=0000000000050eec X08=0000000000000038 X09=75205d3536373431 X10=6373696420425355 X11=202c7463656e6e6f X12=6e20656369766564 X13=3438207265626d75 X14=203a312d31206273 X15=6373696420425355 X16=0000ffffa5980c80 X17=0000ffffa580dacc X18=0000000000000001 X19=0000000000000d41 X20=00000000000001b6 X21=0000ffffa5973b89 X22=0000ffffa56cce60 X23=0000aaaae44c6a60 X24=0000ffffa5981000 X25=0000aaaadebd2800 X26=0000aaaae44c696b X27=0000ffffa59818d4 X28=0000000000000000 X29=0000ffffedfb6510 X30=0000ffffa590a7ac SP=ffff800088b84000 PSTATE=414003c9 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=000000000000ffff P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:7564000a34382072:65626d756e206563 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000f00000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00f0000000000000:00f0000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0f00f00f00000f00:0f00f00f00000f00 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000300:0000000000000300 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff80008088e4a0 X00=0000000000000002 X01=0000000000000018 X02=ffff800082b15018 X03=ffff8000828d3638 X04=f2f0000004188480 X05=0000000000000031 X06=0000000000000029 X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff8000883f3150 X10=ffff800082871238 X11=0000000000000c75 X12=000000000000255f X13=ffff8000883f31cd X14=ffff8000883f31d8 X15=ffff8000883f3060 X16=0000000000000000 X17=0000000000000000 X18=ffffffffffffffff X19=ffff8000829f380b X20=ffff80008088e550 X21=f2f0000004188480 X22=ffff8000829f3844 X23=0000000000000001 X24=000000000000003c X25=ffff800082780080 X26=00000000000000c0 X27=ffff8000828d3668 X28=f7f00000066f9240 X29=ffff8000883f32e0 X30=ffff80008088e578 SP=ffff8000883f32e0 PSTATE=824000c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0a0a0a0a0a0a0a0a:0a0a0a0a0a0a0a0a Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6375646f72506469:202c340000343820 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000ff0000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000000ff000:00000000000ff000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:cccccccccc00c300:cccccccccc00c300 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000