last executing test programs: 5.621728562s ago: executing program 0 (id=206): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) 5.172437475s ago: executing program 0 (id=208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000001000)) 4.968325544s ago: executing program 0 (id=209): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r0, 0x4004480d, 0x0) 1.881723214s ago: executing program 0 (id=216): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) 1.881506544s ago: executing program 1 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc80c0}, 0x0) 1.550964564s ago: executing program 0 (id=218): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010102, 0x4d3, 0x3c}, 0x2, @in=@multicast2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.550686725s ago: executing program 1 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x3, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffffa, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x0) 1.424993197s ago: executing program 0 (id=220): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r0, 0x4004480d, 0x0) 1.218424916s ago: executing program 1 (id=221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r0, &(0x7f00000004c0)}, 0x20) 891.006297ms ago: executing program 1 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d85b0ba, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 349.207708ms ago: executing program 1 (id=223): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x800, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40004) 0s ago: executing program 1 (id=224): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12559' (ED25519) to the list of known hosts. syzkaller login: [ 149.304750][ T3312] cgroup: Unknown subsys name 'net' [ 149.630217][ T3312] cgroup: Unknown subsys name 'cpuset' [ 149.677342][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 150.467868][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.643485][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.676744][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.096638][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.135059][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.819649][ T3317] hsr_slave_0: entered promiscuous mode [ 165.834838][ T3317] hsr_slave_1: entered promiscuous mode [ 166.260656][ T3318] hsr_slave_0: entered promiscuous mode [ 166.274947][ T3318] hsr_slave_1: entered promiscuous mode [ 166.285002][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 166.288505][ T3318] Cannot create hsr debugfs directory [ 168.047669][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.134347][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.189812][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.267696][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.570375][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.629067][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.664152][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.697208][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.145724][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.460670][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.068841][ T3318] veth0_vlan: entered promiscuous mode [ 177.132336][ T3318] veth1_vlan: entered promiscuous mode [ 177.488129][ T3317] veth0_vlan: entered promiscuous mode [ 177.617804][ T3318] veth0_macvtap: entered promiscuous mode [ 177.662227][ T3318] veth1_macvtap: entered promiscuous mode [ 177.709886][ T3317] veth1_vlan: entered promiscuous mode [ 178.131392][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.138978][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.179387][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.185576][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.279824][ T3317] veth0_macvtap: entered promiscuous mode [ 178.379878][ T3317] veth1_macvtap: entered promiscuous mode [ 178.937842][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.940411][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.940870][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.941267][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.124143][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 181.325793][ T3471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.329865][ T3471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.334254][ T1919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 182.513960][ T1919] usb 1-1: Using ep0 maxpacket: 32 [ 182.537462][ T1919] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 182.538359][ T1919] usb 1-1: config 0 has no interface number 0 [ 182.539751][ T1919] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 182.540410][ T1919] usb 1-1: config 0 interface 196 has no altsetting 0 [ 182.718447][ T1919] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 182.719259][ T1919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.724826][ T1919] usb 1-1: Product: syz [ 182.725086][ T1919] usb 1-1: Manufacturer: syz [ 182.725343][ T1919] usb 1-1: SerialNumber: syz [ 182.781515][ T1919] usb 1-1: config 0 descriptor?? [ 182.899984][ T3477] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.700462][ T1919] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 183.774069][ T1919] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 183.931645][ T9] usb 1-1: USB disconnect, device number 2 [ 184.173925][ T9] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 192.564543][ T3492] binder: 3487:3492 got transaction to context manager from process owning it [ 192.565806][ T3492] binder: 3487:3492 transaction call to 3487:0 failed 2/29201/-22, code 0 size 72-24 line 3223 [ 193.577873][ T40] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.614003][ T3498] binder: 3497:3498 ioctl c018620c 0 returned -14 [ 198.098488][ T3506] syz_tun: entered allmulticast mode [ 198.135043][ T3505] syz_tun: left allmulticast mode [ 200.486664][ T995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.660553][ T995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.821486][ T995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.016046][ T995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.569545][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 202.313766][ T3418] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.503164][ T3418] usb 1-1: Using ep0 maxpacket: 8 [ 202.585481][ T3418] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 202.586510][ T3418] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.586882][ T3418] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.587174][ T3418] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.587484][ T3418] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.587938][ T3418] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.588183][ T3418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.987823][ T3418] usb 1-1: usb_control_msg returned -32 [ 202.988434][ T3418] usbtmc 1-1:16.0: can't read capabilities [ 203.209494][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.265741][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.316333][ T995] bond0 (unregistering): Released all slaves [ 203.540937][ T995] hsr_slave_0: left promiscuous mode [ 203.549685][ T995] hsr_slave_1: left promiscuous mode [ 203.587634][ T995] veth1_macvtap: left promiscuous mode [ 203.588757][ T995] veth0_macvtap: left promiscuous mode [ 203.589622][ T995] veth1_vlan: left promiscuous mode [ 203.590386][ T995] veth0_vlan: left promiscuous mode [ 209.269593][ T3526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.291589][ T3526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.076708][ T3579] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 210.287129][ T9] usb 1-1: USB disconnect, device number 3 [ 211.228799][ T3588] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 212.285276][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 213.388347][ T3526] hsr_slave_0: entered promiscuous mode [ 213.409274][ T3526] hsr_slave_1: entered promiscuous mode [ 213.417333][ T3526] debugfs: 'hsr0' already exists in 'hsr' [ 213.417996][ T3526] Cannot create hsr debugfs directory [ 213.740266][ T3603] syzkaller0: entered promiscuous mode [ 213.754746][ T3603] syzkaller0: entered allmulticast mode [ 216.140138][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 216.418952][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.419713][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.420013][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.420435][ T9] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 216.420738][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.495097][ T9] usb 1-1: config 0 descriptor?? [ 217.117760][ T9] hid-generic 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 217.231910][ T3526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.246109][ T40] usb 1-1: USB disconnect, device number 4 [ 217.362198][ T3526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.505619][ T3526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.577193][ T3526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.783956][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 217.964377][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 218.001261][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.002264][ T40] usb 1-1: too many configurations: 129, using maximum allowed: 8 [ 218.322074][ T40] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c5.ff [ 218.323232][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.323787][ T40] usb 1-1: Product: syz [ 218.324008][ T40] usb 1-1: Manufacturer: syz [ 218.324208][ T40] usb 1-1: SerialNumber: syz [ 218.670945][ T40] mdc800 1-1:7.0: probe fails -> wrong Number of Configuration [ 218.728145][ T40] usb 1-1: USB disconnect, device number 5 [ 219.161321][ T3623] fido_id[3623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 219.465552][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 219.640847][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 219.880380][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 219.881014][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.881627][ T9] usb 1-1: Product: syz [ 219.881832][ T9] usb 1-1: Manufacturer: syz [ 219.882036][ T9] usb 1-1: SerialNumber: syz [ 219.917923][ T9] usb 1-1: config 0 descriptor?? [ 221.231684][ T3526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.871355][ T3526] veth0_vlan: entered promiscuous mode [ 227.935291][ T3526] veth1_vlan: entered promiscuous mode [ 228.129961][ T3526] veth0_macvtap: entered promiscuous mode [ 228.176078][ T3526] veth1_macvtap: entered promiscuous mode [ 228.588383][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.598497][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.599379][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.599912][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.299505][ T3418] usb 1-1: USB disconnect, device number 6 [ 230.963930][ T3418] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 231.164907][ T3418] usb 1-1: Using ep0 maxpacket: 32 [ 231.337611][ T3418] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 231.338291][ T3418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.338543][ T3418] usb 1-1: Product: syz [ 231.338824][ T3418] usb 1-1: Manufacturer: syz [ 231.339031][ T3418] usb 1-1: SerialNumber: syz [ 231.379294][ T3418] usb 1-1: config 0 descriptor?? [ 232.888726][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.899381][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.041202][ T3725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.048708][ T3725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.637695][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.642248][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.184329][ T3734] netlink: 80 bytes leftover after parsing attributes in process `syz.1.43'. [ 235.771759][ T3740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.775546][ T3740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.117275][ T3742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.122071][ T3742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.444497][ T3744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.456773][ T3744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.016121][ T3746] syzkaller0: entered promiscuous mode [ 237.019713][ T3746] syzkaller0: entered allmulticast mode [ 238.139370][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.141944][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.672211][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 239.740893][ T3755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.804105][ T3755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.861637][ T3755] bond0 (unregistering): Released all slaves [ 240.791627][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.809220][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.235976][ T3764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.240482][ T3764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.501889][ T3766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.510476][ T3766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.000946][ T3770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.004850][ T3770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.268897][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.280945][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.491856][ T3775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.495033][ T3775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.350669][ T9] usb 1-1: USB disconnect, device number 7 [ 246.309282][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.324856][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.347631][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.470349][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.523828][ T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 246.749198][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 246.944989][ T3790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.957023][ T3790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.971106][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.971852][ T11] usb 1-1: config 0 has no interfaces? [ 247.170282][ T11] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 247.171038][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.175368][ T11] usb 1-1: Product: syz [ 247.175586][ T11] usb 1-1: Manufacturer: syz [ 247.175764][ T11] usb 1-1: SerialNumber: syz [ 247.258492][ T11] usb 1-1: config 0 descriptor?? [ 247.682014][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.706955][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.084542][ T11] usb 1-1: USB disconnect, device number 8 [ 248.539269][ T40] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 248.564764][ T40] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.090307][ T3802] fido_id[3802]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 252.037408][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 252.178636][ T3811] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.324705][ T9] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.325505][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 252.337674][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 252.338365][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.380114][ T9] usb 1-1: config 0 descriptor?? [ 252.624714][ T3813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.629318][ T3813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.733812][ T9] usb 1-1: USB disconnect, device number 9 [ 253.374083][ T3819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.396677][ T3819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.594508][ T1919] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.785259][ T1919] usb 1-1: Using ep0 maxpacket: 8 [ 254.847498][ T1919] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 254.858980][ T1919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.865421][ T1919] usb 1-1: Product: syz [ 254.865940][ T1919] usb 1-1: Manufacturer: syz [ 254.866268][ T1919] usb 1-1: SerialNumber: syz [ 254.954879][ T1919] usb 1-1: config 0 descriptor?? [ 255.102182][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.108012][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.924732][ T3840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.927222][ T3840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.166148][ T3840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.168707][ T3840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.594505][ T3844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.598923][ T3844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.657151][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.659827][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.314701][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.317242][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.237981][ T3891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.242006][ T3891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.524762][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.527375][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.399771][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.407895][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.635000][ T3902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.652412][ T3902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.841688][ T3904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.851178][ T3904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.265806][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.270261][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.776637][ T3910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.780924][ T3910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.256993][ T40] usb 1-1: USB disconnect, device number 10 [ 265.883787][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 266.113706][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.114636][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.122257][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.174547][ T9] usb 1-1: config 0 descriptor?? [ 268.173462][ T3930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.195192][ T3930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.993930][ T3935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.005839][ T3935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.555625][ T11] usb 1-1: USB disconnect, device number 11 [ 277.083694][ T40] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 277.253648][ T40] usb 1-1: Using ep0 maxpacket: 16 [ 277.292981][ T40] usb 1-1: config 0 has no interfaces? [ 277.304465][ T40] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 277.305233][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 277.305581][ T40] usb 1-1: SerialNumber: syz [ 277.331610][ T40] usb 1-1: config 0 descriptor?? [ 277.636174][ T40] usb 1-1: USB disconnect, device number 12 [ 278.264622][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.285515][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.484937][ T40] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 278.696001][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 278.810943][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.998059][ T40] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 278.998830][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.999442][ T40] usb 1-1: Product: syz [ 278.999696][ T40] usb 1-1: Manufacturer: syz [ 278.999951][ T40] usb 1-1: SerialNumber: syz [ 279.041916][ T40] usb 1-1: config 0 descriptor?? [ 279.314146][ T40] usb 1-1: USB disconnect, device number 13 [ 279.407075][ T3963] syzkaller0: entered allmulticast mode [ 279.914572][ T40] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 280.083666][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 280.163087][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.163706][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.164584][ T40] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.164858][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.210911][ T40] usb 1-1: config 0 descriptor?? [ 280.395679][ T40] hub 1-1:0.0: USB hub found [ 280.537458][ T3967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.560786][ T3967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.694554][ T40] hub 1-1:0.0: 1 port detected [ 281.389263][ T995] hub 1-1:0.0: activate --> -90 [ 281.420273][ T3971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.445271][ T3971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.812004][ T3418] usb 1-1-port1: config error [ 281.818716][ T40] usb 1-1: USB disconnect, device number 14 [ 282.293823][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.296381][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.516842][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.538323][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.608432][ T3995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.611326][ T3995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.072064][ T3999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.104375][ T3999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.948768][ T4018] netlink: 104 bytes leftover after parsing attributes in process `syz.1.156'. [ 288.567833][ T11] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 288.726299][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 288.748956][ T11] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 288.753187][ T11] usb 1-1: config 179 has no interface number 0 [ 288.754132][ T11] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 288.754654][ T11] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 288.755117][ T11] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 288.755552][ T11] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 288.755985][ T11] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 288.756364][ T11] usb 1-1: config 179 interface 65 has no altsetting 0 [ 288.756820][ T11] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 288.757164][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.136964][ T11] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input1 [ 289.961929][ T4033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.985104][ T4033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.246297][ T11] usb 1-1: USB disconnect, device number 15 [ 290.247226][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 290.753534][ T11] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 290.923119][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 290.936660][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.937366][ T11] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 290.937601][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.959770][ T11] usb 1-1: config 0 descriptor?? [ 291.436498][ T11] hid-generic 0003:0458:5011.0003: item fetching failed at offset 2/5 [ 291.438965][ T11] hid-generic 0003:0458:5011.0003: probe with driver hid-generic failed with error -22 [ 291.580092][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.604207][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.617922][ T40] usb 1-1: USB disconnect, device number 16 [ 294.435283][ T4058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.445449][ T4058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.133638][ T40] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 297.327340][ T40] usb 1-1: Using ep0 maxpacket: 8 [ 297.506034][ T40] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 297.513563][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.517276][ T40] usb 1-1: Product: syz [ 297.519511][ T40] usb 1-1: Manufacturer: syz [ 297.522083][ T40] usb 1-1: SerialNumber: syz [ 297.561268][ T40] usb 1-1: config 0 descriptor?? [ 299.855068][ T4078] syzkaller1: entered promiscuous mode [ 299.855623][ T4078] syzkaller1: entered allmulticast mode [ 304.604564][ T4083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.647983][ T4083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.576317][ T4083] hsr_slave_0: entered promiscuous mode [ 306.589637][ T4083] hsr_slave_1: entered promiscuous mode [ 306.599150][ T4083] debugfs: 'hsr0' already exists in 'hsr' [ 306.599671][ T4083] Cannot create hsr debugfs directory [ 307.311745][ T4083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.437787][ T4083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.589133][ T4083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.715190][ T4083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.862189][ T11] usb 1-1: USB disconnect, device number 17 [ 308.485258][ T4083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.525513][ T4083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.567843][ T4083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.603738][ T11] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 308.664929][ T4083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.980678][ T11] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 308.981206][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.981530][ T11] usb 1-1: Product: syz [ 308.981696][ T11] usb 1-1: Manufacturer: syz [ 308.981829][ T11] usb 1-1: SerialNumber: syz [ 309.057445][ T11] usb 1-1: config 0 descriptor?? [ 310.530305][ T4083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.091588][ T4083] veth0_vlan: entered promiscuous mode [ 316.163084][ T4083] veth1_vlan: entered promiscuous mode [ 316.425122][ T4083] veth0_macvtap: entered promiscuous mode [ 316.471956][ T4083] veth1_macvtap: entered promiscuous mode [ 316.746960][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.747539][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.747994][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.748298][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.209108][ T4165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.210850][ T4165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.485212][ T4168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.490130][ T4168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.820289][ T4171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.836341][ T4171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.204651][ T4173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.207307][ T4173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.075563][ T4176] netlink: 'syz.1.189': attribute type 13 has an invalid length. [ 319.076295][ T4176] netlink: 'syz.1.189': attribute type 17 has an invalid length. [ 319.357627][ T40] usb 1-1: USB disconnect, device number 18 [ 323.227940][ T4202] wg1 speed is unknown, defaulting to 1000 [ 323.230210][ T4202] wg1 speed is unknown, defaulting to 1000 [ 323.237254][ T4202] wg1 speed is unknown, defaulting to 1000 [ 323.269994][ T4202] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 323.311747][ T4202] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 323.429871][ T4202] wg1 speed is unknown, defaulting to 1000 [ 323.441486][ T4202] wg1 speed is unknown, defaulting to 1000 [ 323.461256][ T4202] wg1 speed is unknown, defaulting to 1000 [ 323.508861][ T4202] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 323.525604][ T4202] xt_TCPMSS: Only works on TCP SYN packets [ 329.372008][ T4236] syzkaller0: entered promiscuous mode [ 329.374710][ T4236] syzkaller0: entered allmulticast mode [ 332.581908][ T4256] netlink: 'syz.1.214': attribute type 21 has an invalid length. [ 333.155386][ T4261] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 333.179117][ T4261] ipvlan0: entered promiscuous mode [ 333.186054][ T4260] ipvlan0: left promiscuous mode [ 335.055951][ T4277] ================================================================== [ 335.059661][ T4277] BUG: KASAN: invalid-access in __memcpy+0xc/0x54 [ 335.062135][ T4277] Write at addr f8ff80008ba63528 by task syz.1.224/4277 [ 335.062918][ T4277] Pointer tag: [f8], memory tag: [fe] [ 335.063109][ T4277] [ 335.063959][ T4277] CPU: 1 UID: 0 PID: 4277 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT [ 335.064482][ T4277] Hardware name: linux,dummy-virt (DT) [ 335.064886][ T4277] Call trace: [ 335.065283][ T4277] show_stack+0x18/0x24 (C) [ 335.065787][ T4277] dump_stack_lvl+0x78/0x90 [ 335.066116][ T4277] print_report+0x108/0x61c [ 335.066362][ T4277] kasan_report+0x88/0xac [ 335.066582][ T4277] __do_kernel_fault+0x170/0x1c8 [ 335.066843][ T4277] do_bad_area+0x68/0x78 [ 335.067048][ T4277] do_tag_check_fault+0x34/0x44 [ 335.067292][ T4277] do_mem_abort+0x44/0x94 [ 335.067495][ T4277] el1_abort+0x44/0x68 [ 335.067708][ T4277] el1h_64_sync_handler+0x50/0xac [ 335.067916][ T4277] el1h_64_sync+0x6c/0x70 [ 335.068255][ T4277] __memcpy+0xc/0x54 (P) [ 335.068461][ T4277] do_misc_fixups+0x174/0x1aac [ 335.068654][ T4277] bpf_check+0x1348/0x2a24 [ 335.068842][ T4277] bpf_prog_load+0x63c/0xcd4 [ 335.069047][ T4277] __sys_bpf+0x2e0/0x1a88 [ 335.069259][ T4277] __arm64_sys_bpf+0x24/0x34 [ 335.069471][ T4277] invoke_syscall+0x48/0x110 [ 335.069683][ T4277] el0_svc_common.constprop.0+0x40/0xe0 [ 335.069888][ T4277] do_el0_svc+0x1c/0x28 [ 335.070134][ T4277] el0_svc+0x34/0x10c [ 335.070362][ T4277] el0t_64_sync_handler+0xa0/0xe4 [ 335.070632][ T4277] el0t_64_sync+0x1a4/0x1a8 [ 335.071087][ T4277] [ 335.071407][ T4277] The buggy address belongs to a 1-page vmalloc region starting at 0xf8ff80008ba63000 allocated at bpf_check+0x8c/0x2a24 [ 335.073378][ T4277] The buggy address belongs to the physical page: [ 335.073995][ T4277] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a793 [ 335.074982][ T4277] flags: 0x1ffdc0000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x7) [ 335.076209][ T4277] raw: 01ffdc0000000000 0000000000000000 dead000000000122 0000000000000000 [ 335.076394][ T4277] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 335.076604][ T4277] page dumped because: kasan: bad access detected [ 335.076721][ T4277] [ 335.076808][ T4277] Memory state around the buggy address: [ 335.077171][ T4277] ffff80008ba63300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.077380][ T4277] ffff80008ba63400: f8 f8 fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 335.077541][ T4277] >ffff80008ba63500: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 335.077691][ T4277] ^ [ 335.078056][ T4277] ffff80008ba63600: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 335.078189][ T4277] ffff80008ba63700: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 335.078355][ T4277] ================================================================== [ 335.080133][ T4277] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 336.556990][ T995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.698864][ T995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.838536][ T995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.038452][ T995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.225218][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.266027][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.319215][ T995] bond0 (unregistering): Released all slaves [ 338.536237][ T995] hsr_slave_0: left promiscuous mode [ 338.549584][ T995] hsr_slave_1: left promiscuous mode [ 338.589060][ T995] veth1_macvtap: left promiscuous mode [ 338.596429][ T995] veth0_macvtap: left promiscuous mode [ 338.601552][ T995] veth1_vlan: left promiscuous mode [ 338.609162][ T995] veth0_vlan: left promiscuous mode [ 341.038737][ T995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.089978][ T1919] wg1 speed is unknown, defaulting to 1000 [ 341.091006][ T1919] syz0: Port: 1 Link DOWN [ 341.158526][ T995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.261571][ T995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.370264][ T995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.591839][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.661139][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.713672][ T995] bond0 (unregistering): Released all slaves [ 342.913370][ T995] hsr_slave_0: left promiscuous mode [ 342.918279][ T995] hsr_slave_1: left promiscuous mode [ 342.953923][ T995] veth1_macvtap: left promiscuous mode [ 342.954760][ T995] veth0_macvtap: left promiscuous mode [ 342.955413][ T995] veth1_vlan: left promiscuous mode [ 342.955974][ T995] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 19:34:55 Registers: info registers vcpu 0 CPU#0 PC=ffff800081890f74 X00=f5f0000007f52600 X01=0000000000000000 X02=0000000000000000 X03=0000000000000000 X04=000000000116ae36 X05=f9f00000032bb840 X06=000000000000000d X07=fdf00000033fd55c X08=ffff800082d6b7b8 X09=000000000000000e X10=0000000000000000 X11=fff000007f8d6a40 X12=0000000000000001 X13=0000000000000001 X14=0000000000000290 X15=ffff800081bb4330 X16=ffff800082d68000 X17=fff07ffffcf73000 X18=00000000ffffffff X19=f5f0000007f52600 X20=f6f0000008e41500 X21=f6f0000008e41528 X22=0000000000000014 X23=000000000116ae36 X24=0000004de7107356 X25=0000000000000000 X26=000000000006cb50 X27=f6f00000067b0aec X28=000000000006cb74 X29=ffff800082d6b680 X30=a5df8000818911c8 SP=ffff800082d6b680 PSTATE=40402009 -Z-- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00524f5252450040:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffd172cd0:0000fffffd172cd0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000fffffd172ca0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000801de98c X00=0000000000000095 X01=0000000000000085 X02=0000000000000580 X03=0000000000000005 X04=fdf000000e458aec X05=fcff80008ba610e0 X06=0000000000000060 X07=0000000000000001 X08=0000000000000010 X09=00000000ffffffff X10=0000000000000011 X11=0000000000000005 X12=0000000000000010 X13=ffffffffffff8000 X14=000000000000000b X15=000000000000f0ff X16=0000000000006200 X17=ffff80008295fa60 X18=ffff80008ba539e8 X19=fdf000000e458aa8 X20=0000000000000000 X21=fdf000000e45e520 X22=000000000000000b X23=000000000000f0ff X24=fdf000000e45e600 X25=0000000000000005 X26=fcff80008ba61000 X27=fdf000000e458000 X28=000000000000000b X29=ffff80008ba53940 X30=ffff8000801de6c8 SP=ffff80008ba53940 PSTATE=81402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6572207265767265:730073250a0d0a0d Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00ff00ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000f0f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3d3d3d3d3d3d3d3d:3d3d3d3d3d3d3d3d Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:646e756f66206563:6976656420425355 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2c663535303d726f:646e65566469202c Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffd40a7010:0000ffffd40a7010 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffd40a6fe0 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000