last executing test programs: 17.394543768s ago: executing program 1 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x800, 0x33}, 0xa, @in=@multicast1, 0x3506, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 2.93191823s ago: executing program 0 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x633, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0xffff, 0x4000, 0x0, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x2b}, @in6=@empty, {0x323, 0x0, 0x0, 0x0, 0x40000}, {0x1, 0x0, 0x0, 0x4}, {0x4000, 0x9, 0xfffffffe}, 0x70bd29, 0x0, 0xa, 0x1, 0x7}, [@algo_auth={0x48, 0x1, {{'cbcmac(aes)\x00'}}}]}, 0x138}}, 0x0) 2.772548647s ago: executing program 0 (id=30): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.585324789s ago: executing program 1 (id=31): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') flistxattr(r0, 0x0, 0xffffffffffffffd2) 1.585128489s ago: executing program 0 (id=32): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000000000) mlock(&(0x7f00000fc000/0x1000)=nil, 0x1000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) 1.391321598s ago: executing program 1 (id=33): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @loopback}, {0x2, 0x0, @broadcast}, 0x128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x800}) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.391079838s ago: executing program 0 (id=34): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x1}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.074752972s ago: executing program 0 (id=35): unshare(0x6a040000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 620.971372ms ago: executing program 1 (id=36): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 373.204064ms ago: executing program 0 (id=37): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380), &(0x7f0000000400)={0x40, 0x5, 0x2, "8666"}}) 323.977136ms ago: executing program 1 (id=38): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=39): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32915' (ED25519) to the list of known hosts. syzkaller login: [ 128.600433][ T3312] cgroup: Unknown subsys name 'net' [ 128.791290][ T3312] cgroup: Unknown subsys name 'cpuset' [ 128.826299][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 129.409895][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 140.934463][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.130762][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.238060][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.365736][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.882084][ T3317] hsr_slave_0: entered promiscuous mode [ 142.894320][ T3317] hsr_slave_1: entered promiscuous mode [ 143.299215][ T3318] hsr_slave_0: entered promiscuous mode [ 143.303523][ T3318] hsr_slave_1: entered promiscuous mode [ 143.310251][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 143.310976][ T3318] Cannot create hsr debugfs directory [ 144.572123][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.626232][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.690232][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.742302][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.950188][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.989448][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.011578][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.038993][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.620461][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.739358][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.151551][ T3317] veth0_vlan: entered promiscuous mode [ 152.235664][ T3317] veth1_vlan: entered promiscuous mode [ 152.436260][ T3317] veth0_macvtap: entered promiscuous mode [ 152.471583][ T3317] veth1_macvtap: entered promiscuous mode [ 152.792430][ T1973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.880503][ T1973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.881705][ T1973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.882117][ T1973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.167099][ T3318] veth0_vlan: entered promiscuous mode [ 153.264769][ T3318] veth1_vlan: entered promiscuous mode [ 153.442311][ T3318] veth0_macvtap: entered promiscuous mode [ 153.475595][ T3318] veth1_macvtap: entered promiscuous mode [ 153.542812][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 153.960096][ T1989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.961071][ T1989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.961440][ T1989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.961843][ T1989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.198543][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 155.377902][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 155.415329][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.422588][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 155.423316][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.468333][ T24] usb 1-1: config 0 descriptor?? [ 155.921376][ T3472] capability: warning: `syz.1.3' uses deprecated v2 capabilities in a way that may be insecure [ 155.973244][ T24] hid (null): invalid report_count 14909 [ 156.067630][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.068499][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.068704][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.068902][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.069092][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.069321][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.069531][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.069738][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.069964][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.070208][ T24] hid-generic 0003:056A:0331.0001: unknown main item tag 0x0 [ 156.074426][ T24] hid-generic 0003:056A:0331.0001: invalid report_count 14909 [ 156.074764][ T24] hid-generic 0003:056A:0331.0001: item 0 2 1 9 parsing failed [ 156.119223][ T24] hid-generic 0003:056A:0331.0001: probe with driver hid-generic failed with error -22 [ 156.218442][ T24] usb 1-1: USB disconnect, device number 2 [ 162.579578][ T3488] Zero length message leads to an empty skb [ 165.748349][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 166.414853][ T3510] capability: warning: `syz.0.19' uses 32-bit capabilities (legacy support in use) [ 167.927574][ T1913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.097432][ T1913] usb 1-1: Using ep0 maxpacket: 8 [ 168.116994][ T1913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.117689][ T1913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.118395][ T1913] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 168.118733][ T1913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.152144][ T1913] usb 1-1: config 0 descriptor?? [ 168.680097][ T1913] hid-generic 0003:5543:0004.0002: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 168.858739][ T1913] usb 1-1: USB disconnect, device number 3 [ 169.135773][ T3525] fido_id[3525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 172.172865][ T3544] input: syz1 as /devices/virtual/input/input1 [ 172.175454][ T3544] input: failed to attach handler leds to device input1, error: -6 [ 172.914977][ T3550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.939961][ T3550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.541344][ T3529] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.633534][ T3556] ================================================================== [ 173.637035][ T3556] BUG: KASAN: invalid-access in __memcpy+0xc/0x54 [ 173.639232][ T3556] Write at addr f5ff8000832dd630 by task syz.1.39/3556 [ 173.639777][ T3556] Pointer tag: [f5], memory tag: [fe] [ 173.639968][ T3556] [ 173.640774][ T3556] CPU: 0 UID: 0 PID: 3556 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT [ 173.641306][ T3556] Hardware name: linux,dummy-virt (DT) [ 173.641662][ T3556] Call trace: [ 173.642025][ T3556] show_stack+0x18/0x24 (C) [ 173.642498][ T3556] dump_stack_lvl+0x78/0x90 [ 173.642780][ T3556] print_report+0x108/0x61c [ 173.643013][ T3556] kasan_report+0x88/0xac [ 173.643234][ T3556] __do_kernel_fault+0x170/0x1c8 [ 173.643460][ T3556] do_bad_area+0x68/0x78 [ 173.643673][ T3556] do_tag_check_fault+0x34/0x44 [ 173.643952][ T3556] do_mem_abort+0x44/0x94 [ 173.644183][ T3556] el1_abort+0x44/0x68 [ 173.644411][ T3556] el1h_64_sync_handler+0x50/0xac [ 173.644619][ T3556] el1h_64_sync+0x6c/0x70 [ 173.644934][ T3556] __memcpy+0xc/0x54 (P) [ 173.645147][ T3556] do_misc_fixups+0x174/0x1aac [ 173.645359][ T3556] bpf_check+0x1348/0x2a24 [ 173.645563][ T3556] bpf_prog_load+0x63c/0xcd4 [ 173.645768][ T3556] __sys_bpf+0x2e0/0x1a88 [ 173.645962][ T3556] __arm64_sys_bpf+0x24/0x34 [ 173.646160][ T3556] invoke_syscall+0x48/0x110 [ 173.646417][ T3556] el0_svc_common.constprop.0+0x40/0xe0 [ 173.646622][ T3556] do_el0_svc+0x1c/0x28 [ 173.646821][ T3556] el0_svc+0x34/0x10c [ 173.647080][ T3556] el0t_64_sync_handler+0xa0/0xe4 [ 173.647301][ T3556] el0t_64_sync+0x1a4/0x1a8 [ 173.647732][ T3556] [ 173.648065][ T3556] The buggy address belongs to a 1-page vmalloc region starting at 0xf5ff8000832dd000 allocated at bpf_check+0x8c/0x2a24 [ 173.649607][ T3556] The buggy address belongs to the physical page: [ 173.650043][ T3556] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xfaf000000c865dc0 pfn:0x4c865 [ 173.650510][ T3556] flags: 0x1ffe80000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0xa) [ 173.651604][ T3556] raw: 01ffe80000000000 0000000000000000 dead000000000122 0000000000000000 SYZFAIL: failed to recv rpc [ 173.651798][ T3556] raw: faf000000c865dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 173.652052][ T3556] page dumped because: kasan: bad access detected fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.652167][ T3556] [ 173.652256][ T3556] Memory state around the buggy address: [ 173.652582][ T3556] ffff8000832dd400: f5 f5 fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 173.652778][ T3556] ffff8000832dd500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 173.652941][ T3556] >ffff8000832dd600: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 173.653105][ T3556] ^ [ 173.653436][ T3556] ffff8000832dd700: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 173.653565][ T3556] ffff8000832dd800: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 173.653732][ T3556] ================================================================== [ 173.655765][ T3556] Disabling lock debugging due to kernel taint [ 173.839135][ T3529] usb 1-1: Using ep0 maxpacket: 32 [ 173.904973][ T3529] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 173.911534][ T3529] usb 1-1: config 0 has no interface number 0 [ 173.915365][ T3529] usb 1-1: config 0 interface 184 has no altsetting 0 [ 173.986269][ T3529] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 173.989723][ T3529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.992604][ T3529] usb 1-1: Product: syz [ 173.994210][ T3529] usb 1-1: Manufacturer: syz [ 173.995979][ T3529] usb 1-1: SerialNumber: syz [ 174.082206][ T3529] usb 1-1: config 0 descriptor?? [ 174.157416][ T3529] smsc75xx v1.0.0 [ 175.059225][ T3529] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 175.063810][ T3529] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 175.110066][ T3529] usb 1-1: USB disconnect, device number 4 [ 175.312640][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.421974][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.530987][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.613037][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.654628][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.694606][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.754623][ T40] bond0 (unregistering): Released all slaves [ 176.963866][ T40] hsr_slave_0: left promiscuous mode [ 176.983725][ T40] hsr_slave_1: left promiscuous mode [ 177.030205][ T40] veth1_macvtap: left promiscuous mode [ 177.031294][ T40] veth0_macvtap: left promiscuous mode [ 177.032135][ T40] veth1_vlan: left promiscuous mode [ 177.032870][ T40] veth0_vlan: left promiscuous mode [ 179.028805][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.125842][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.294069][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.425347][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.722942][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.769214][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.828611][ T40] bond0 (unregistering): Released all slaves [ 180.992819][ T40] hsr_slave_0: left promiscuous mode [ 181.001901][ T40] hsr_slave_1: left promiscuous mode [ 181.020565][ T40] veth1_macvtap: left promiscuous mode [ 181.020955][ T40] veth0_macvtap: left promiscuous mode [ 181.023688][ T40] veth1_vlan: left promiscuous mode [ 181.024350][ T40] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 03:08:49 Registers: info registers vcpu 0 CPU#0 PC=ffff8000818804a0 X00=00000000000000ec X01=0000000000000010 X02=000000000000ffff X03=0000000000000006 X04=0000000000001a00 X05=00000000000000ec X06=f1f0000007876780 X07=f1f00000045adddc X08=ffff800082ceb6b8 X09=0000000000000009 X10=0000000000000000 X11=fff000007f8d6a40 X12=0000000000000000 X13=0000000000000001 X14=00000000000000f0 X15=ffff800081b63e30 X16=ffff800082ce8000 X17=fff07ffffcfd3000 X18=0000000000000000 X19=fcf000000abc5a00 X20=f6f00000079d1300 X21=fcf000000abc5a28 X22=0000000000000000 X23=f6f00000079d16a8 X24=ffff800082cb4ec0 X25=0000000000000020 X26=0000000000000000 X27=f1f000000787686c X28=000000000000cc0c X29=ffff800082ceb650 X30=64af80008184e910 SP=ffff800082ceb660 PSTATE=61402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000065676e616863:00746e657665752f Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffff000000000000:ff00000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ff000000f0000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000000000ff Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3303330333033303:3303330333033303 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bcbcbcbc00000003:bcbcbcbc00000003 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaae71ecc90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaae71e9f70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe69c5640:0000ffffe69c5640 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffe69c5610 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000809005f0 X00=0000000000000002 X01=0000000000000018 X02=ffff800082d15018 X03=ffff800082abef10 X04=fdf00000030e5880 X05=0000000000000020 X06=000000000000005d X07=0000000000000000 X08=7f7f7f7f7f7f7f7f X09=ffff800082abef40 X10=0000000000000001 X11=ffff8000830ebe20 X12=ffff8000829ff3c0 X13=ffff8000830ebb8d X14=ffff8000830ebb98 X15=ffff8000830eba00 X16=ffff800082cf0000 X17=fff07ffffcfec000 X18=00000000ffffffff X19=f3f0000003043003 X20=ffff800080900794 X21=fdf00000030e5880 X22=f3f0000003043003 X23=ffff800080900794 X24=000000000000003b X25=0000000000000001 X26=f8f00000032bb840 X27=0000000000000000 X28=0000000000000000 X29=ffff8000830ebca0 X30=ffff8000809007bc SP=ffff8000830ebca0 PSTATE=804020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00706d742e303a37:622f617461642f76 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c000000000000000:0003000000003000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00ff00000000ff00 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3303330333033303:3303330333033303 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c000000003000030:c000000003000030 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000073:0000aaaae71ecc90 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000074:0000aaaae71e9f70 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffe69c5040:0000ffffe69c5040 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffe69c5010 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000