last executing test programs: 7m8.099902812s ago: executing program 0 (id=6236): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8}, 0x28) 7m8.010315994s ago: executing program 0 (id=6238): r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) r1 = fanotify_init(0x40, 0x40000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, 0x0, 0x0) 7m7.348937352s ago: executing program 0 (id=6243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0005"], 0xfdef) 7m7.160200426s ago: executing program 0 (id=6245): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r0, 0x15, 0x0, @void}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f0000000280)) 7m7.06942412s ago: executing program 0 (id=6248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900012001000000fedbdf250a10"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 7m6.478175195s ago: executing program 0 (id=6250): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) fcntl$addseals(r0, 0x409, 0xe) 7m6.477977085s ago: executing program 32 (id=6250): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_create(&(0x7f0000000040)='-&:{-\xaa]{\x00', 0x2) fcntl$addseals(r0, 0x409, 0xe) 7m6.019766877s ago: executing program 1 (id=6255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x78, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) 7m5.817537253s ago: executing program 1 (id=6256): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 7m5.649089027s ago: executing program 1 (id=6257): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03122b2e0064000200475400f6a13bb1000000086086dd4803", 0x2df1, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 7m5.419922793s ago: executing program 1 (id=6258): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7m4.960658836s ago: executing program 1 (id=6259): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac1000980"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 7m4.530413457s ago: executing program 1 (id=6260): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m4.530279057s ago: executing program 33 (id=6260): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.90176971s ago: executing program 2 (id=7478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 18.50951396s ago: executing program 2 (id=7480): socketpair$unix(0x1, 0x2, 0x0, 0x0) io_getevents(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 10.740127001s ago: executing program 2 (id=7484): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 7.849367667s ago: executing program 2 (id=7486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "872b5248bda97fe1af12235d00c60f6e"}, @NL80211_ATTR_SSID={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004041}, 0x40010) 7.469904997s ago: executing program 2 (id=7487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) 7.279613221s ago: executing program 2 (id=7488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f00000003c0)=[{r2, 0x526}, {r1, 0x4}, {0xffffffffffffffff, 0x1c1ea}, {0xffffffffffffffff, 0x202}], 0x4, 0x0, 0x0, 0x0) 6.809251543s ago: executing program 3 (id=7493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="4a2c3b73870572b40000005908060001080006"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) 3.358961413s ago: executing program 3 (id=7494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000040) 3.237028006s ago: executing program 3 (id=7495): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf727cf8c8df22e7b00314ab6264c931e35661fc189441e0880f", 0x5c}, {&(0x7f0000000a80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c48", 0x78}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.117653809s ago: executing program 3 (id=7496): r0 = socket(0x2000000000000021, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f000081a000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) shutdown(r0, 0x2) 166.874136ms ago: executing program 3 (id=7497): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x20, 0x1f, 0x1e, {0x1e, 0x30, "6b0bc695aebeb305d2af1adc3f9a91be23ec98006dec2f1ab1155a9b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=7498): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) close(r1) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x8, &(0x7f0000000000)="fdffffffffffffff"}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:15418' (ED25519) to the list of known hosts. syzkaller login: [ 69.339029][ T3345] cgroup: Unknown subsys name 'net' [ 69.544266][ T3345] cgroup: Unknown subsys name 'cpuset' [ 69.563909][ T3345] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.940079][ T3345] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.036729][ T3372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.084624][ T3372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.172900][ T3374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.209333][ T3374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.998988][ T3372] hsr_slave_0: entered promiscuous mode [ 77.004948][ T3372] hsr_slave_1: entered promiscuous mode [ 77.220940][ T3374] hsr_slave_0: entered promiscuous mode [ 77.223792][ T3374] hsr_slave_1: entered promiscuous mode [ 77.228053][ T3374] debugfs: 'hsr0' already exists in 'hsr' [ 77.228766][ T3374] Cannot create hsr debugfs directory [ 77.960326][ T3372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.992923][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.000236][ T3372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.014936][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.029236][ T3372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.049319][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.071065][ T3372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.082976][ T3372] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.175452][ T3374] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.188435][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.191568][ T3374] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.207582][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.213354][ T3374] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.232321][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.247621][ T3374] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.262024][ T3374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.022611][ T3374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.165367][ T3372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.820921][ T3374] veth0_vlan: entered promiscuous mode [ 81.870697][ T3374] veth1_vlan: entered promiscuous mode [ 82.035576][ T3374] veth0_macvtap: entered promiscuous mode [ 82.102014][ T3374] veth1_macvtap: entered promiscuous mode [ 82.155070][ T3372] veth0_vlan: entered promiscuous mode [ 82.220866][ T3372] veth1_vlan: entered promiscuous mode [ 82.402824][ T2680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.425210][ T2680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.426608][ T2680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.427294][ T2680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.495305][ T3372] veth0_macvtap: entered promiscuous mode [ 82.554332][ T3372] veth1_macvtap: entered promiscuous mode [ 82.778596][ T191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779035][ T191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779182][ T191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779320][ T191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.977030][ T3374] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.494831][ T3527] fuse: root generation should be zero [ 88.707350][ T3542] Zero length message leads to an empty skb [ 89.869286][ T3550] input: syz0 as /devices/virtual/input/input1 [ 226.269003][ T4099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 236.368984][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 241.863876][ T4213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.222'. [ 256.653473][ T4325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.260'. [ 321.526735][ T4649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.365'. [ 322.478675][ T4656] syz.0.366 uses obsolete (PF_INET,SOCK_PACKET) [ 363.180277][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.423'. [ 384.107970][ T4957] input: syz0 as /devices/virtual/input/input2 [ 504.117567][ T5486] input: syz0 as /devices/virtual/input/input3 [ 550.218923][ T5694] input: syz0 as /devices/virtual/input/input4 [ 572.598454][ T5796] input: syz0 as /devices/virtual/input/input5 [ 583.090297][ T5859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.767'. [ 584.407820][ T5873] process 'syz.1.770' launched './file0' with NULL argv: empty string added [ 586.560954][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.777'. [ 600.062547][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.795'. [ 703.510489][ T6382] input: syz1 as /devices/virtual/input/input6 [ 704.690105][ T6390] : renamed from ipvlan1 [ 732.321571][ T6552] 8021q: VLANs not supported on ip6_vti0 [ 749.758334][ T6585] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 777.176558][ T6727] lo: entered promiscuous mode [ 777.188210][ T6727] lo: left promiscuous mode [ 782.486935][ T3436] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 782.626430][ T3436] usb 1-1: device descriptor read/64, error -71 [ 782.866287][ T3436] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 782.996578][ T3436] usb 1-1: device descriptor read/64, error -71 [ 783.116727][ T3436] usb usb1-port1: attempt power cycle [ 783.456785][ T3436] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 783.479238][ T3436] usb 1-1: device descriptor read/8, error -71 [ 783.716857][ T3436] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 783.742197][ T3436] usb 1-1: device descriptor read/8, error -71 [ 783.848869][ T3436] usb usb1-port1: unable to enumerate USB device [ 788.507486][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.509698][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.303954][ T6891] input: syz0 as /devices/virtual/input/input7 [ 940.657114][ T7384] input: syz0 as /devices/virtual/input/input8 [ 947.409741][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1270'. [ 995.512213][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 1047.878285][ T7936] capability: warning: `syz.0.1446' uses 32-bit capabilities (legacy support in use) [ 1055.180222][ T7958] capability: warning: `syz.1.1453' uses deprecated v2 capabilities in a way that may be insecure [ 1056.591042][ T7971] input: syz0 as /devices/virtual/input/input9 [ 1126.708333][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 1145.093674][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 1146.048223][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1587'. [ 1183.119212][ T8579] input: syz0 as /devices/virtual/input/input10 [ 1202.613909][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.618907][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.216921][ T8653] input: syz0 as /devices/virtual/input/input11 [ 1287.142354][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.149935][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.211071][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'. [ 1372.647139][ T9266] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1410.187114][ T9392] "syz.1.1900" (9392) uses obsolete ecb(arc4) skcipher [ 1418.427609][ T9440] serio: Serial port pts0 [ 1430.807159][ T9517] input: syz0 as /devices/virtual/input/input12 [ 1450.299741][ T9583] input: syz0 as /devices/virtual/input/input13 [ 1463.683298][ T9625] "syz.0.1971" (9625) uses obsolete ecb(arc4) skcipher [ 1517.157296][ C1] sched: DL replenish lagged too much [ 1518.706786][ T9872] input: syz0 as /devices/virtual/input/input14 [ 1541.325498][ T9965] input: syz0 as /devices/virtual/input/input15 [ 1544.207687][ T9976] input: syz0 as /devices/virtual/input/input16 [ 1599.484421][T10159] serio: Serial port pts0 [ 1679.717049][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'. [ 1695.758623][T10532] cgroup: Need name or subsystem set [ 1806.624045][T11030] input: syz0 as /devices/virtual/input/input17 [ 1817.377146][T11069] input: syz1 as /devices/virtual/input/input18 [ 1823.485125][T11087] "syz.0.2425" (11087) uses obsolete ecb(arc4) skcipher [ 1851.944706][T11227] : renamed from veth1_to_team (while UP) [ 1865.603457][T11292] input: syz0 as /devices/virtual/input/input19 [ 1872.938764][T11315] input: syz0 as /devices/virtual/input/input20 [ 1882.277786][ T28] audit: type=1326 audit(2000001253.800:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11332 comm="syz.0.2502" exe="/syz-executor" sig=31 arch=c00000b7 syscall=172 compat=0 ip=0xffffa0972a0c code=0x0 [ 1907.217123][T11423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2528'. [ 1915.817241][T11449] infiniband syz1: set active [ 1915.817679][T11449] infiniband syz1: added syz_tun [ 1916.180460][T11449] RDS/IB: syz1: added [ 1916.181342][T11449] smc: adding ib device syz1 with port count 1 [ 1916.181691][T11449] smc: ib device syz1 port 1 has no pnetid [ 1939.647403][T11516] 8021q: VLANs not supported on vcan0 [ 2001.891017][ T28] audit: type=1326 audit(2000001373.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11728 comm="syz.1.2618" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf78f68 code=0x0 [ 2020.424261][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2630'. [ 2028.820854][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2641'. [ 2033.373527][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2648'. [ 2041.645196][T11879] input: syz0 as /devices/virtual/input/input23 [ 2098.941972][T12073] 8021q: VLANs not supported on vcan0 [ 2113.044698][T12130] input: syz0 as /devices/virtual/input/input24 [ 2132.401208][T12201] pimreg: entered allmulticast mode [ 2135.284845][T12214] pimreg: entered allmulticast mode [ 2159.903293][T12316] fuse: Bad value for 'fd' [ 2212.730354][T13072] fuse: fd is not a fuse device [ 2229.988495][T13373] fuse: fd is not a fuse device [ 2235.251535][T13451] fuse: fd is not a fuse device [ 2251.258723][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.260167][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2293.954474][T13723] input: syz1 as /devices/virtual/input/input25 [ 2334.353280][T13863] input: syz0 as /devices/virtual/input/input27 [ 2342.217591][T13875] fuse: fd is not a fuse device [ 2347.332154][T13907] fuse: fd is not a fuse device [ 2348.140492][T13912] fuse: fd is not a fuse device [ 2374.412769][T14006] fuse: fd is not a fuse device [ 2383.014375][T14037] input: syz0 as /devices/virtual/input/input28 [ 2403.153293][T14096] input: syz1 as /devices/virtual/input/input29 [ 2418.681884][T14147] fuse: fd is not a fuse device [ 2420.449197][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3569'. [ 2424.522364][T14177] input: syz0 as /devices/virtual/input/input30 [ 2435.008291][T14210] input: syz0 as /devices/virtual/input/input31 [ 2437.224547][T14226] fuse: fd is not a fuse device [ 2440.804510][T14246] input: syz1 as /devices/virtual/input/input32 [ 2451.159543][T14272] fuse: fd is not a fuse device [ 2457.892616][T14293] input: syz0 as /devices/virtual/input/input33 [ 2467.302621][T14304] input: syz0 as /devices/virtual/input/input34 [ 2481.225585][T14321] input: syz0 as /devices/virtual/input/input35 [ 2495.144025][T14333] fuse: fd is not a fuse device [ 2500.385291][T14362] input: syz0 as /devices/virtual/input/input36 [ 2509.135686][T14370] fuse: fd is not a fuse device [ 2510.653985][T14382] input: syz1 as /devices/virtual/input/input37 [ 2513.230704][T14390] fuse: fd is not a fuse device [ 2513.334075][T14392] fuse: fd is not a fuse device [ 2513.509662][T14396] fuse: fd is not a fuse device [ 2518.744753][T14407] input: syz0 as /devices/virtual/input/input38 [ 2519.980860][T14411] fuse: fd is not a fuse device [ 2520.015050][T14411] Process accounting resumed [ 2520.142100][T14413] fuse: fd is not a fuse device [ 2541.241942][T14442] fuse: fd is not a fuse device [ 2542.857061][T14451] input: syz0 as /devices/virtual/input/input39 [ 2559.847807][T14474] fuse: fd is not a fuse device [ 2559.895430][T14476] input: syz0 as /devices/virtual/input/input40 [ 2559.965524][T14478] fuse: fd is not a fuse device [ 2567.063643][T14491] input: syz0 as /devices/virtual/input/input41 [ 2573.548045][T14513] fuse: fd is not a fuse device [ 2573.660241][T14515] fuse: fd is not a fuse device [ 2606.064178][T14586] input: syz0 as /devices/virtual/input/input42 [ 2612.071544][T14590] fuse: fd is not a fuse device [ 2626.825414][T14622] fuse: fd is not a fuse device [ 2628.010866][T14630] fuse: fd is not a fuse device [ 2631.507022][T14646] fuse: fd is not a fuse device [ 2667.477194][T14716] fuse: fd is not a fuse device [ 2667.814206][T14721] fuse: fd is not a fuse device [ 2667.954333][T14723] fuse: fd is not a fuse device [ 2668.090416][T14725] fuse: fd is not a fuse device [ 2676.569718][T14745] fuse: fd is not a fuse device [ 2676.700163][T14747] fuse: fd is not a fuse device [ 2676.811284][T14749] fuse: fd is not a fuse device [ 2679.153385][T14754] fuse: fd is not a fuse device [ 2679.268985][T14756] fuse: fd is not a fuse device [ 2690.410803][T14774] fuse: fd is not a fuse device [ 2690.517653][T14776] fuse: fd is not a fuse device [ 2690.590485][T14778] fuse: fd is not a fuse device [ 2690.669600][T14780] fuse: fd is not a fuse device [ 2716.548623][T14823] fuse: fd is not a fuse device [ 2716.677230][T14825] fuse: fd is not a fuse device [ 2716.791779][T14827] fuse: fd is not a fuse device [ 2739.207431][T14870] fuse: fd is not a fuse device [ 2791.189388][T14967] fuse: fd is not a fuse device [ 2796.418315][T14983] fuse: fd is not a fuse device [ 2830.469105][T15036] fuse: fd is not a fuse device [ 2836.409944][T15071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2836.414260][T15071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2842.083178][T15182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2842.093813][T15182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2852.105071][T15423] input: syz0 as /devices/virtual/input/input43 [ 2856.956884][T15448] fuse: fd is not a fuse device [ 2857.444076][T15469] fuse: fd is not a fuse device [ 2857.718352][T15481] fuse: fd is not a fuse device [ 2863.830141][ T4975] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 2863.844985][ T4975] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2879.252287][T15605] fuse: fd is not a fuse device [ 2888.217787][T15634] fuse: fd is not a fuse device [ 2894.914370][T15659] fuse: fd is not a fuse device [ 2898.559024][T15672] fuse: fd is not a fuse device [ 2898.634809][T15674] fuse: fd is not a fuse device [ 2901.632541][T15686] input: syz0 as /devices/virtual/input/input44 [ 2906.631501][T15698] fuse: fd is not a fuse device [ 2906.743947][T15700] fuse: fd is not a fuse device [ 2908.937327][T15712] input: syz0 as /devices/virtual/input/input45 [ 2911.245587][T15724] fuse: fd is not a fuse device [ 2912.774607][T15728] fuse: fd is not a fuse device [ 2918.435255][T15744] fuse: fd is not a fuse device [ 2919.648609][T15755] fuse: fd is not a fuse device [ 2920.420238][T15761] fuse: fd is not a fuse device [ 2920.511042][T15763] fuse: fd is not a fuse device [ 2920.845190][T15773] fuse: fd is not a fuse device [ 2920.969535][T15777] fuse: fd is not a fuse device [ 2921.032994][T15779] fuse: fd is not a fuse device [ 2921.118291][T15781] fuse: fd is not a fuse device [ 2921.200827][T15784] fuse: fd is not a fuse device [ 2921.287028][T15786] input: syz0 as /devices/virtual/input/input46 [ 2921.485606][T15790] fuse: fd is not a fuse device [ 2927.935373][T15807] input: syz0 as /devices/virtual/input/input47 [ 2937.659473][T15823] fuse: fd is not a fuse device [ 2937.817541][T15827] fuse: fd is not a fuse device [ 2937.901606][T15829] fuse: fd is not a fuse device [ 2947.057712][T15862] fuse: fd is not a fuse device [ 2947.179623][T15866] fuse: fd is not a fuse device [ 2947.343650][T15870] fuse: fd is not a fuse device [ 2953.666041][T15904] fuse: fd is not a fuse device [ 2955.243807][T15919] fuse: fd is not a fuse device [ 2958.408369][T15928] fuse: fd is not a fuse device [ 2958.516237][T15930] fuse: fd is not a fuse device [ 2985.431384][T15976] fuse: fd is not a fuse device [ 2996.014490][T16035] input: syz0 as /devices/virtual/input/input48 [ 3007.212298][T13036] syz1: Port: 1 Link DOWN [ 3007.222953][T15270] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.224574][T15270] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.229255][T15270] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3007.230932][T15270] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3015.482214][T16089] input: syz1 as /devices/virtual/input/input49 [ 3015.936457][T16106] fuse: fd is not a fuse device [ 3016.810293][T16140] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 3017.473778][T16159] input: syz0 as /devices/virtual/input/input50 [ 3025.202070][T16194] fuse: fd is not a fuse device [ 3031.329834][T16217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3031.335524][T16217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3033.101683][T16227] fuse: fd is not a fuse device [ 3034.119320][T16232] fuse: fd is not a fuse device [ 3035.982852][T16250] input: syz0 as /devices/virtual/input/input51 [ 3038.395445][T16256] fuse: fd is not a fuse device [ 3041.311841][T16262] fuse: fd is not a fuse device [ 3043.317687][T16269] input: syz0 as /devices/virtual/input/input52 [ 3044.968716][T16273] fuse: fd is not a fuse device [ 3045.051125][T16275] fuse: fd is not a fuse device [ 3050.960849][T16295] fuse: fd is not a fuse device [ 3051.044163][T16297] fuse: fd is not a fuse device [ 3051.135081][T16299] fuse: fd is not a fuse device [ 3051.351188][T16305] fuse: fd is not a fuse device [ 3051.400599][T16307] fuse: fd is not a fuse device [ 3056.151269][T15270] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3056.153500][T15270] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3056.156831][T15270] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3056.161239][T15270] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3056.295566][T16327] input: syz0 as /devices/virtual/input/input53 [ 3062.259773][T16334] fuse: fd is not a fuse device [ 3062.349230][T16336] fuse: fd is not a fuse device [ 3062.579560][T16342] fuse: fd is not a fuse device [ 3063.573805][T16347] fuse: fd is not a fuse device [ 3064.294577][T16357] fuse: fd is not a fuse device [ 3064.353961][T16360] fuse: fd is not a fuse device [ 3064.434037][T16362] fuse: fd is not a fuse device [ 3073.669010][T16390] input: syz1 as /devices/virtual/input/input54 [ 3080.537129][T16415] x_tables: duplicate underflow at hook 3 [ 3080.970598][T16423] FAULT_INJECTION: forcing a failure. [ 3080.970598][T16423] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3080.973274][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.1.4357 Not tainted syzkaller #0 PREEMPT [ 3080.973545][T16423] Hardware name: linux,dummy-virt (DT) [ 3080.973852][T16423] Call trace: [ 3080.974208][T16423] show_stack+0x18/0x24 (C) [ 3080.975117][T16423] dump_stack_lvl+0x60/0x80 [ 3080.975203][T16423] dump_stack+0x18/0x24 [ 3080.975289][T16423] should_fail_ex+0x1e0/0x238 [ 3080.975373][T16423] should_fail+0x14/0x40 [ 3080.975446][T16423] should_fail_usercopy+0x1c/0x40 [ 3080.975519][T16423] _inline_copy_from_user+0x24/0xa8 [ 3080.975602][T16423] copy_msghdr_from_user+0x58/0x160 [ 3080.975712][T16423] ___sys_sendmsg+0x90/0x108 [ 3080.975825][T16423] __sys_sendmsg+0x9c/0x100 [ 3080.975903][T16423] __arm64_sys_sendmsg+0x24/0x38 [ 3080.975980][T16423] invoke_syscall+0x54/0x10c [ 3080.976071][T16423] el0_svc_common.constprop.0+0x40/0xe0 [ 3080.976145][T16423] do_el0_svc+0x1c/0x34 [ 3080.976211][T16423] el0_svc+0x38/0x1fc [ 3080.976307][T16423] el0t_64_sync_handler+0xa0/0xf0 [ 3080.976388][T16423] el0t_64_sync+0x1a4/0x1a8 [ 3081.263003][T16429] FAULT_INJECTION: forcing a failure. [ 3081.263003][T16429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3081.265728][T16429] CPU: 0 UID: 0 PID: 16429 Comm: syz.1.4360 Not tainted syzkaller #0 PREEMPT [ 3081.265887][T16429] Hardware name: linux,dummy-virt (DT) [ 3081.265930][T16429] Call trace: [ 3081.265965][T16429] show_stack+0x18/0x24 (C) [ 3081.266073][T16429] dump_stack_lvl+0x60/0x80 [ 3081.266145][T16429] dump_stack+0x18/0x24 [ 3081.266208][T16429] should_fail_ex+0x1e0/0x238 [ 3081.266330][T16429] should_fail+0x14/0x40 [ 3081.266460][T16429] should_fail_usercopy+0x1c/0x40 [ 3081.266539][T16429] _inline_copy_from_user+0x24/0xa8 [ 3081.266618][T16429] copy_msghdr_from_user+0x58/0x160 [ 3081.266692][T16429] ___sys_sendmsg+0x90/0x108 [ 3081.266762][T16429] __sys_sendmsg+0x9c/0x100 [ 3081.266844][T16429] __arm64_sys_sendmsg+0x24/0x38 [ 3081.266919][T16429] invoke_syscall+0x54/0x10c [ 3081.266988][T16429] el0_svc_common.constprop.0+0x40/0xe0 [ 3081.267054][T16429] do_el0_svc+0x1c/0x34 [ 3081.267123][T16429] el0_svc+0x38/0x1fc [ 3081.267200][T16429] el0t_64_sync_handler+0xa0/0xf0 [ 3081.267275][T16429] el0t_64_sync+0x1a4/0x1a8 [ 3081.353705][T16431] FAULT_INJECTION: forcing a failure. [ 3081.353705][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3081.354008][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.1.4361 Not tainted syzkaller #0 PREEMPT [ 3081.354102][T16431] Hardware name: linux,dummy-virt (DT) [ 3081.354147][T16431] Call trace: [ 3081.354182][T16431] show_stack+0x18/0x24 (C) [ 3081.354339][T16431] dump_stack_lvl+0x60/0x80 [ 3081.354422][T16431] dump_stack+0x18/0x24 [ 3081.354565][T16431] should_fail_ex+0x1e0/0x238 [ 3081.354662][T16431] should_fail+0x14/0x40 [ 3081.354738][T16431] should_fail_usercopy+0x1c/0x40 [ 3081.354851][T16431] _inline_copy_from_user+0x24/0xa8 [ 3081.354944][T16431] copy_msghdr_from_user+0x58/0x160 [ 3081.355020][T16431] ___sys_sendmsg+0x90/0x108 [ 3081.355130][T16431] __sys_sendmsg+0x9c/0x100 [ 3081.355256][T16431] __arm64_sys_sendmsg+0x24/0x38 [ 3081.355382][T16431] invoke_syscall+0x54/0x10c [ 3081.355474][T16431] el0_svc_common.constprop.0+0x40/0xe0 [ 3081.355603][T16431] do_el0_svc+0x1c/0x34 [ 3081.355765][T16431] el0_svc+0x38/0x1fc [ 3081.355861][T16431] el0t_64_sync_handler+0xa0/0xf0 [ 3081.355942][T16431] el0t_64_sync+0x1a4/0x1a8 [ 3084.440382][T16451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3084.448437][T16451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3085.212375][T16461] FAULT_INJECTION: forcing a failure. [ 3085.212375][T16461] name failslab, interval 1, probability 0, space 0, times 1 [ 3085.212665][T16461] CPU: 0 UID: 0 PID: 16461 Comm: syz.1.4371 Not tainted syzkaller #0 PREEMPT [ 3085.212755][T16461] Hardware name: linux,dummy-virt (DT) [ 3085.212788][T16461] Call trace: [ 3085.212806][T16461] show_stack+0x18/0x24 (C) [ 3085.212919][T16461] dump_stack_lvl+0x60/0x80 [ 3085.212961][T16461] dump_stack+0x18/0x24 [ 3085.212997][T16461] should_fail_ex+0x1e0/0x238 [ 3085.213040][T16461] should_failslab+0x54/0x80 [ 3085.213080][T16461] __kmalloc_noprof+0xac/0x528 [ 3085.213122][T16461] tomoyo_encode2+0x7c/0x13c [ 3085.213161][T16461] tomoyo_encode+0x28/0x40 [ 3085.213197][T16461] tomoyo_realpath_from_path+0x100/0x1d4 [ 3085.213238][T16461] tomoyo_path_number_perm+0xe0/0x21c [ 3085.213275][T16461] tomoyo_file_ioctl+0x1c/0x30 [ 3085.213313][T16461] security_file_ioctl+0x8c/0x19c [ 3085.213354][T16461] __arm64_sys_ioctl+0x48/0x104 [ 3085.213433][T16461] invoke_syscall+0x54/0x10c [ 3085.213476][T16461] el0_svc_common.constprop.0+0x40/0xe0 [ 3085.213527][T16461] do_el0_svc+0x1c/0x34 [ 3085.213577][T16461] el0_svc+0x38/0x1fc [ 3085.213675][T16461] el0t_64_sync_handler+0xa0/0xf0 [ 3085.213787][T16461] el0t_64_sync+0x1a4/0x1a8 [ 3085.214250][T16461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3085.516871][T16469] FAULT_INJECTION: forcing a failure. [ 3085.516871][T16469] name failslab, interval 1, probability 0, space 0, times 0 [ 3085.519739][T16469] CPU: 1 UID: 0 PID: 16469 Comm: syz.1.4374 Not tainted syzkaller #0 PREEMPT [ 3085.519885][T16469] Hardware name: linux,dummy-virt (DT) [ 3085.519927][T16469] Call trace: [ 3085.519962][T16469] show_stack+0x18/0x24 (C) [ 3085.520067][T16469] dump_stack_lvl+0x60/0x80 [ 3085.520140][T16469] dump_stack+0x18/0x24 [ 3085.520209][T16469] should_fail_ex+0x1e0/0x238 [ 3085.520297][T16469] should_failslab+0x54/0x80 [ 3085.520370][T16469] __kmalloc_noprof+0xac/0x528 [ 3085.520440][T16469] tomoyo_encode2+0x7c/0x13c [ 3085.520513][T16469] tomoyo_encode+0x28/0x40 [ 3085.520579][T16469] tomoyo_realpath_from_path+0x100/0x1d4 [ 3085.520649][T16469] tomoyo_path_number_perm+0xe0/0x21c [ 3085.520720][T16469] tomoyo_file_ioctl+0x1c/0x30 [ 3085.520801][T16469] security_file_ioctl+0x8c/0x19c [ 3085.520878][T16469] __arm64_sys_ioctl+0x48/0x104 [ 3085.520954][T16469] invoke_syscall+0x54/0x10c [ 3085.521030][T16469] el0_svc_common.constprop.0+0x40/0xe0 [ 3085.521102][T16469] do_el0_svc+0x1c/0x34 [ 3085.521169][T16469] el0_svc+0x38/0x1fc [ 3085.521263][T16469] el0t_64_sync_handler+0xa0/0xf0 [ 3085.521342][T16469] el0t_64_sync+0x1a4/0x1a8 [ 3085.525470][T16469] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3085.733631][T16478] FAULT_INJECTION: forcing a failure. [ 3085.733631][T16478] name failslab, interval 1, probability 0, space 0, times 0 [ 3085.734044][T16478] CPU: 1 UID: 0 PID: 16478 Comm: syz.1.4376 Not tainted syzkaller #0 PREEMPT [ 3085.734143][T16478] Hardware name: linux,dummy-virt (DT) [ 3085.734187][T16478] Call trace: [ 3085.734237][T16478] show_stack+0x18/0x24 (C) [ 3085.734357][T16478] dump_stack_lvl+0x60/0x80 [ 3085.734435][T16478] dump_stack+0x18/0x24 [ 3085.734509][T16478] should_fail_ex+0x1e0/0x238 [ 3085.734614][T16478] should_failslab+0x54/0x80 [ 3085.734715][T16478] kmem_cache_alloc_node_noprof+0x5c/0x460 [ 3085.734818][T16478] __alloc_skb+0x74/0x2e0 [ 3085.734913][T16478] netlink_alloc_large_skb+0x94/0xd4 [ 3085.735055][T16478] netlink_sendmsg+0x10c/0x410 [ 3085.735156][T16478] __sock_sendmsg+0x54/0x60 [ 3085.735294][T16478] ____sys_sendmsg+0x250/0x2a8 [ 3085.735403][T16478] ___sys_sendmsg+0xb0/0x108 [ 3085.735504][T16478] __sys_sendmsg+0x9c/0x100 [ 3085.735622][T16478] __arm64_sys_sendmsg+0x24/0x38 [ 3085.735742][T16478] invoke_syscall+0x54/0x10c [ 3085.735841][T16478] el0_svc_common.constprop.0+0x40/0xe0 [ 3085.735913][T16478] do_el0_svc+0x1c/0x34 [ 3085.736006][T16478] el0_svc+0x38/0x1fc [ 3085.736094][T16478] el0t_64_sync_handler+0xa0/0xf0 [ 3085.736170][T16478] el0t_64_sync+0x1a4/0x1a8 [ 3085.948668][T16488] input: syz0 as /devices/virtual/input/input55 [ 3086.453834][T16493] fuse: fd is not a fuse device [ 3090.792038][T16513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3090.793465][T16513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3092.212112][T16548] FAULT_INJECTION: forcing a failure. [ 3092.212112][T16548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3092.216929][T16548] CPU: 0 UID: 0 PID: 16548 Comm: syz.1.4400 Not tainted syzkaller #0 PREEMPT [ 3092.217082][T16548] Hardware name: linux,dummy-virt (DT) [ 3092.217128][T16548] Call trace: [ 3092.217164][T16548] show_stack+0x18/0x24 (C) [ 3092.217272][T16548] dump_stack_lvl+0x60/0x80 [ 3092.217355][T16548] dump_stack+0x18/0x24 [ 3092.217424][T16548] should_fail_ex+0x1e0/0x238 [ 3092.217502][T16548] should_fail+0x14/0x40 [ 3092.217578][T16548] should_fail_usercopy+0x1c/0x40 [ 3092.217823][T16548] simple_read_from_buffer+0x5c/0x12c [ 3092.217930][T16548] proc_fail_nth_read+0xb4/0x140 [ 3092.218006][T16548] vfs_read+0xc4/0x31c [ 3092.218078][T16548] ksys_read+0x70/0x110 [ 3092.218146][T16548] __arm64_sys_read+0x1c/0x28 [ 3092.218214][T16548] invoke_syscall+0x54/0x10c [ 3092.218326][T16548] el0_svc_common.constprop.0+0x40/0xe0 [ 3092.218400][T16548] do_el0_svc+0x1c/0x34 [ 3092.218468][T16548] el0_svc+0x38/0x1fc [ 3092.218550][T16548] el0t_64_sync_handler+0xa0/0xf0 [ 3092.218628][T16548] el0t_64_sync+0x1a4/0x1a8 [ 3093.174452][T16569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3093.177112][T16569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3094.000658][T16576] FAULT_INJECTION: forcing a failure. [ 3094.000658][T16576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3094.000934][T16576] CPU: 1 UID: 0 PID: 16576 Comm: syz.1.4410 Not tainted syzkaller #0 PREEMPT [ 3094.000993][T16576] Hardware name: linux,dummy-virt (DT) [ 3094.001015][T16576] Call trace: [ 3094.001040][T16576] show_stack+0x18/0x24 (C) [ 3094.001161][T16576] dump_stack_lvl+0x60/0x80 [ 3094.001287][T16576] dump_stack+0x18/0x24 [ 3094.001391][T16576] should_fail_ex+0x1e0/0x238 [ 3094.001482][T16576] should_fail+0x14/0x40 [ 3094.001562][T16576] should_fail_usercopy+0x1c/0x40 [ 3094.001667][T16576] simple_read_from_buffer+0x5c/0x12c [ 3094.001744][T16576] proc_fail_nth_read+0xb4/0x140 [ 3094.001846][T16576] vfs_read+0xc4/0x31c [ 3094.001937][T16576] ksys_read+0x70/0x110 [ 3094.002021][T16576] __arm64_sys_read+0x1c/0x28 [ 3094.002117][T16576] invoke_syscall+0x54/0x10c [ 3094.002254][T16576] el0_svc_common.constprop.0+0x40/0xe0 [ 3094.002336][T16576] do_el0_svc+0x1c/0x34 [ 3094.002403][T16576] el0_svc+0x38/0x1fc [ 3094.002501][T16576] el0t_64_sync_handler+0xa0/0xf0 [ 3094.002606][T16576] el0t_64_sync+0x1a4/0x1a8 [ 3096.722645][T16585] input: syz0 as /devices/virtual/input/input56 [ 3114.914205][T16763] fuse: fd is not a fuse device [ 3122.106741][T16838] fuse: Unknown parameter '' [ 3123.701680][T16883] input: syz0 as /devices/virtual/input/input59 [ 3126.381743][T16900] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 3138.026935][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.028667][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3138.044343][T17022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.060981][T17022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3138.513329][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.519990][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3138.554865][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.559020][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3138.660642][T17036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3138.665493][T17036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3140.176157][T17060] input: syz1 as /devices/virtual/input/input60 [ 3150.368593][T17118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3150.385370][T17118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3154.231538][T17155] input: syz0 as /devices/virtual/input/input61 [ 3154.619343][T17165] input: syz1 as /devices/virtual/input/input62 [ 3176.942945][T17307] syz_tun: entered promiscuous mode [ 3177.715520][T17326] syz_tun: left promiscuous mode [ 3186.458927][T17360] input: syz1 as /devices/virtual/input/input63 [ 3187.494818][T17383] trusted_key: syz.0.4639 sent an empty control message without MSG_MORE. [ 3194.403512][T17453] FAULT_INJECTION: forcing a failure. [ 3194.403512][T17453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3194.408948][T17453] CPU: 0 UID: 0 PID: 17453 Comm: syz.1.4661 Not tainted syzkaller #0 PREEMPT [ 3194.409102][T17453] Hardware name: linux,dummy-virt (DT) [ 3194.409144][T17453] Call trace: [ 3194.409176][T17453] show_stack+0x18/0x24 (C) [ 3194.409292][T17453] dump_stack_lvl+0x60/0x80 [ 3194.409363][T17453] dump_stack+0x18/0x24 [ 3194.409432][T17453] should_fail_ex+0x1e0/0x238 [ 3194.409509][T17453] should_fail+0x14/0x40 [ 3194.409581][T17453] should_fail_usercopy+0x1c/0x40 [ 3194.409654][T17453] _inline_copy_from_user+0x24/0xa8 [ 3194.409733][T17453] copy_msghdr_from_user+0x58/0x160 [ 3194.409807][T17453] ___sys_sendmsg+0x90/0x108 [ 3194.409879][T17453] __sys_sendmsg+0x9c/0x100 [ 3194.409951][T17453] __arm64_sys_sendmsg+0x24/0x38 [ 3194.410025][T17453] invoke_syscall+0x54/0x10c [ 3194.410093][T17453] el0_svc_common.constprop.0+0x40/0xe0 [ 3194.410161][T17453] do_el0_svc+0x1c/0x34 [ 3194.410262][T17453] el0_svc+0x38/0x1fc [ 3194.410345][T17453] el0t_64_sync_handler+0xa0/0xf0 [ 3194.410420][T17453] el0t_64_sync+0x1a4/0x1a8 [ 3194.657031][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3194.658415][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3194.668498][T17455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3194.669911][T17455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3195.655182][T17471] FAULT_INJECTION: forcing a failure. [ 3195.655182][T17471] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.655541][T17471] CPU: 1 UID: 0 PID: 17471 Comm: syz.1.4667 Not tainted syzkaller #0 PREEMPT [ 3195.655635][T17471] Hardware name: linux,dummy-virt (DT) [ 3195.655674][T17471] Call trace: [ 3195.655706][T17471] show_stack+0x18/0x24 (C) [ 3195.655846][T17471] dump_stack_lvl+0x60/0x80 [ 3195.665601][T17471] dump_stack+0x18/0x24 [ 3195.665653][T17471] should_fail_ex+0x1e0/0x238 [ 3195.665771][T17471] should_failslab+0x54/0x80 [ 3195.665857][T17471] kmem_cache_alloc_node_noprof+0x5c/0x460 [ 3195.665963][T17471] __alloc_skb+0x74/0x2e0 [ 3195.666013][T17471] netlink_alloc_large_skb+0x94/0xd4 [ 3195.666078][T17471] netlink_sendmsg+0x10c/0x410 [ 3195.666237][T17471] __sock_sendmsg+0x54/0x60 [ 3195.666321][T17471] ____sys_sendmsg+0x250/0x2a8 [ 3195.666363][T17471] ___sys_sendmsg+0xb0/0x108 [ 3195.666399][T17471] __sys_sendmsg+0x9c/0x100 [ 3195.666464][T17471] __arm64_sys_sendmsg+0x24/0x38 [ 3195.666502][T17471] invoke_syscall+0x54/0x10c [ 3195.666538][T17471] el0_svc_common.constprop.0+0x40/0xe0 [ 3195.666572][T17471] do_el0_svc+0x1c/0x34 [ 3195.666608][T17471] el0_svc+0x38/0x1fc [ 3195.666686][T17471] el0t_64_sync_handler+0xa0/0xf0 [ 3195.666745][T17471] el0t_64_sync+0x1a4/0x1a8 [ 3196.431919][T17487] FAULT_INJECTION: forcing a failure. [ 3196.431919][T17487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3196.434163][T17487] CPU: 0 UID: 0 PID: 17487 Comm: syz.1.4673 Not tainted syzkaller #0 PREEMPT [ 3196.434323][T17487] Hardware name: linux,dummy-virt (DT) [ 3196.434371][T17487] Call trace: [ 3196.434407][T17487] show_stack+0x18/0x24 (C) [ 3196.434518][T17487] dump_stack_lvl+0x60/0x80 [ 3196.434594][T17487] dump_stack+0x18/0x24 [ 3196.434665][T17487] should_fail_ex+0x1e0/0x238 [ 3196.434750][T17487] should_fail+0x14/0x40 [ 3196.434835][T17487] should_fail_usercopy+0x1c/0x40 [ 3196.434916][T17487] _copy_from_iter+0x60/0x6a0 [ 3196.434992][T17487] netlink_sendmsg+0x15c/0x410 [ 3196.435071][T17487] __sock_sendmsg+0x54/0x60 [ 3196.435151][T17487] ____sys_sendmsg+0x250/0x2a8 [ 3196.435225][T17487] ___sys_sendmsg+0xb0/0x108 [ 3196.435388][T17487] __sys_sendmsg+0x9c/0x100 [ 3196.435468][T17487] __arm64_sys_sendmsg+0x24/0x38 [ 3196.435557][T17487] invoke_syscall+0x54/0x10c [ 3196.435710][T17487] el0_svc_common.constprop.0+0x40/0xe0 [ 3196.435869][T17487] do_el0_svc+0x1c/0x34 [ 3196.435935][T17487] el0_svc+0x38/0x1fc [ 3196.436011][T17487] el0t_64_sync_handler+0xa0/0xf0 [ 3196.436083][T17487] el0t_64_sync+0x1a4/0x1a8 [ 3196.734393][T17491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3196.738263][T17491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3198.188348][T17512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4683'. [ 3208.101080][T17647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3208.107610][T17647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3211.084774][T17674] x_tables: duplicate underflow at hook 1 [ 3211.088184][T17676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3211.094340][T17676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3216.101906][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3216.105048][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3216.123779][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3216.128144][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3216.138670][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3216.143377][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3232.291223][T17834] FAULT_INJECTION: forcing a failure. [ 3232.291223][T17834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3232.293682][T17834] CPU: 0 UID: 0 PID: 17834 Comm: syz.1.4756 Not tainted syzkaller #0 PREEMPT [ 3232.293809][T17834] Hardware name: linux,dummy-virt (DT) [ 3232.293854][T17834] Call trace: [ 3232.293889][T17834] show_stack+0x18/0x24 (C) [ 3232.293995][T17834] dump_stack_lvl+0x60/0x80 [ 3232.294069][T17834] dump_stack+0x18/0x24 [ 3232.294138][T17834] should_fail_ex+0x1e0/0x238 [ 3232.294249][T17834] should_fail+0x14/0x40 [ 3232.294337][T17834] should_fail_usercopy+0x1c/0x40 [ 3232.294416][T17834] copy_from_sockptr_offset.constprop.0+0x40/0xc8 [ 3232.294497][T17834] smc_setsockopt+0xcc/0x3c4 [ 3232.294567][T17834] do_sock_setsockopt+0xa4/0x198 [ 3232.294646][T17834] __sys_setsockopt+0x7c/0x100 [ 3232.294721][T17834] __arm64_sys_setsockopt+0x28/0x40 [ 3232.294798][T17834] invoke_syscall+0x54/0x10c [ 3232.294872][T17834] el0_svc_common.constprop.0+0x40/0xe0 [ 3232.294943][T17834] do_el0_svc+0x1c/0x34 [ 3232.295012][T17834] el0_svc+0x38/0x1fc [ 3232.295093][T17834] el0t_64_sync_handler+0xa0/0xf0 [ 3232.295170][T17834] el0t_64_sync+0x1a4/0x1a8 [ 3232.423683][T17837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3232.425135][T17837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.636951][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.637899][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.657961][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.659008][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.671262][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.678995][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.708841][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.710883][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.720056][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.737797][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.742376][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3259.747843][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3289.417781][T18021] input: syz0 as /devices/virtual/input/input65 [ 3307.962905][T18083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3307.964382][T18083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3315.099801][ T28] audit: type=1107 audit(2000002686.630:4): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='iɕčm_9bCC ӊ u(UL0' [ 3315.192202][T18137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3315.193513][T18137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3315.232657][T18137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3315.235474][T18137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.117008][T18153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.118294][T18153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.575724][T18166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.592310][T18166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3317.623695][T18181] fuse: fd is not a fuse device [ 3323.704968][ T28] audit: type=1326 audit(2000002695.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18206 comm="syz.0.4873" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0978f68 code=0x0 [ 3337.460212][T18307] x_tables: duplicate underflow at hook 1 [ 3337.490898][T18307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3337.492587][T18307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3337.519403][T18307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3337.520760][T18307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3347.148645][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4944'. [ 3349.059334][T18468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3349.060788][T18468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3363.886359][T18603] fuse: fd is not a fuse device [ 3365.033065][T18624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3365.034100][T18624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3368.362746][T18658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3368.364269][T18658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3368.557839][T18660] FAULT_INJECTION: forcing a failure. [ 3368.557839][T18660] name failslab, interval 1, probability 0, space 0, times 0 [ 3368.562972][T18660] CPU: 1 UID: 0 PID: 18660 Comm: syz.1.5012 Tainted: G L syzkaller #0 PREEMPT [ 3368.563284][T18660] Tainted: [L]=SOFTLOCKUP [ 3368.563342][T18660] Hardware name: linux,dummy-virt (DT) [ 3368.563389][T18660] Call trace: [ 3368.563430][T18660] show_stack+0x18/0x24 (C) [ 3368.563552][T18660] dump_stack_lvl+0x60/0x80 [ 3368.563639][T18660] dump_stack+0x18/0x24 [ 3368.563717][T18660] should_fail_ex+0x1e0/0x238 [ 3368.563808][T18660] should_failslab+0x54/0x80 [ 3368.563892][T18660] __kmalloc_noprof+0xac/0x528 [ 3368.563983][T18660] tomoyo_realpath_from_path+0x44/0x1d4 [ 3368.564070][T18660] tomoyo_path_number_perm+0xe0/0x21c [ 3368.564150][T18660] tomoyo_file_ioctl+0x1c/0x30 [ 3368.564230][T18660] security_file_ioctl+0x8c/0x19c [ 3368.564328][T18660] __arm64_sys_ioctl+0x48/0x104 [ 3368.564414][T18660] invoke_syscall+0x54/0x10c [ 3368.564492][T18660] el0_svc_common.constprop.0+0x40/0xe0 [ 3368.564571][T18660] do_el0_svc+0x1c/0x34 [ 3368.564647][T18660] el0_svc+0x38/0x1fc [ 3368.564736][T18660] el0t_64_sync_handler+0xa0/0xf0 [ 3368.564821][T18660] el0t_64_sync+0x1a4/0x1a8 [ 3368.590142][T18660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3369.225007][T18671] FAULT_INJECTION: forcing a failure. [ 3369.225007][T18671] name failslab, interval 1, probability 0, space 0, times 0 [ 3369.238562][T18671] CPU: 1 UID: 0 PID: 18671 Comm: syz.1.5017 Tainted: G L syzkaller #0 PREEMPT [ 3369.238751][T18671] Tainted: [L]=SOFTLOCKUP [ 3369.238792][T18671] Hardware name: linux,dummy-virt (DT) [ 3369.238833][T18671] Call trace: [ 3369.238869][T18671] show_stack+0x18/0x24 (C) [ 3369.238979][T18671] dump_stack_lvl+0x60/0x80 [ 3369.239055][T18671] dump_stack+0x18/0x24 [ 3369.239127][T18671] should_fail_ex+0x1e0/0x238 [ 3369.239209][T18671] should_failslab+0x54/0x80 [ 3369.239288][T18671] __kmalloc_noprof+0xac/0x528 [ 3369.239370][T18671] tomoyo_encode2+0x7c/0x13c [ 3369.239447][T18671] tomoyo_encode+0x28/0x40 [ 3369.239519][T18671] tomoyo_realpath_from_path+0x100/0x1d4 [ 3369.239594][T18671] tomoyo_path_number_perm+0xe0/0x21c [ 3369.239666][T18671] tomoyo_file_ioctl+0x1c/0x30 [ 3369.239747][T18671] security_file_ioctl+0x8c/0x19c [ 3369.239831][T18671] __arm64_sys_ioctl+0x48/0x104 [ 3369.239911][T18671] invoke_syscall+0x54/0x10c [ 3369.239983][T18671] el0_svc_common.constprop.0+0x40/0xe0 [ 3369.240056][T18671] do_el0_svc+0x1c/0x34 [ 3369.240125][T18671] el0_svc+0x38/0x1fc [ 3369.240207][T18671] el0t_64_sync_handler+0xa0/0xf0 [ 3369.240287][T18671] el0t_64_sync+0x1a4/0x1a8 [ 3369.263561][T18671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3372.557892][T18677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3372.559460][T18677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3385.869625][T18884] syz.0.5045 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3486.697038][T18897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3486.698516][T18897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3487.605198][T18920] binder: 18919:18920 ioctl c018620c 20000300 returned -1 [ 3489.644875][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3489.649146][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3489.672112][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3489.689934][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3501.182173][T19095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3501.183714][T19095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3501.213812][T19095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3501.215326][T19095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3504.979496][T19116] 8021q: VLANs not supported on ip6_vti0 [ 3518.107740][T19303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3518.109672][T19303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3519.338745][T19308] dlm: non-version read from control device 199 [ 3554.677053][T19560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3554.678732][T19560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3557.954956][T19585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3557.960831][T19585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3561.537710][T19605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3561.538992][T19605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3564.841480][T19632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3564.844072][T19632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3565.843539][T19645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3565.844447][T19645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3582.545514][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3582.548534][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3588.004094][T19787] FAULT_INJECTION: forcing a failure. [ 3588.004094][T19787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3588.004360][T19787] CPU: 1 UID: 0 PID: 19787 Comm: syz.1.5333 Tainted: G L syzkaller #0 PREEMPT [ 3588.004466][T19787] Tainted: [L]=SOFTLOCKUP [ 3588.004502][T19787] Hardware name: linux,dummy-virt (DT) [ 3588.004538][T19787] Call trace: [ 3588.004577][T19787] show_stack+0x18/0x24 (C) [ 3588.004684][T19787] dump_stack_lvl+0x60/0x80 [ 3588.004908][T19787] dump_stack+0x18/0x24 [ 3588.005062][T19787] should_fail_ex+0x1e0/0x238 [ 3588.005304][T19787] should_fail+0x14/0x40 [ 3588.005427][T19787] should_fail_usercopy+0x1c/0x40 [ 3588.005527][T19787] _inline_copy_from_user+0x24/0xa8 [ 3588.005613][T19787] copy_msghdr_from_user+0x58/0x160 [ 3588.005754][T19787] ___sys_sendmsg+0x90/0x108 [ 3588.005842][T19787] __sys_sendmsg+0x9c/0x100 [ 3588.005982][T19787] __arm64_sys_sendmsg+0x24/0x38 [ 3588.006064][T19787] invoke_syscall+0x54/0x10c [ 3588.006145][T19787] el0_svc_common.constprop.0+0x40/0xe0 [ 3588.006292][T19787] do_el0_svc+0x1c/0x34 [ 3588.006361][T19787] el0_svc+0x38/0x1fc [ 3588.006521][T19787] el0t_64_sync_handler+0xa0/0xf0 [ 3588.006597][T19787] el0t_64_sync+0x1a4/0x1a8 [ 3592.325150][T19850] "syz.1.5356" (19850) uses obsolete ecb(arc4) skcipher [ 3592.660923][T19859] 8021q: VLANs not supported on wg0 [ 3598.187258][T19981] fuse: fd is not a fuse device [ 3599.257129][T19994] fuse: fd is not a fuse device [ 3601.024094][T20023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3601.028803][T20023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.244468][T20085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.254206][T20085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.267223][T20086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.270028][T20086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.291796][T20085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.293287][T20085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3609.317839][T20086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3609.322748][T20086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3617.865582][T20142] FAULT_INJECTION: forcing a failure. [ 3617.865582][T20142] name failslab, interval 1, probability 0, space 0, times 0 [ 3617.877245][T20142] CPU: 1 UID: 0 PID: 20142 Comm: syz.1.5429 Tainted: G L syzkaller #0 PREEMPT [ 3617.877393][T20142] Tainted: [L]=SOFTLOCKUP [ 3617.877425][T20142] Hardware name: linux,dummy-virt (DT) [ 3617.877460][T20142] Call trace: [ 3617.877515][T20142] show_stack+0x18/0x24 (C) [ 3617.877627][T20142] dump_stack_lvl+0x60/0x80 [ 3617.877709][T20142] dump_stack+0x18/0x24 [ 3617.877781][T20142] should_fail_ex+0x1e0/0x238 [ 3617.877857][T20142] should_failslab+0x54/0x80 [ 3617.877931][T20142] __kmalloc_noprof+0xac/0x528 [ 3617.878022][T20142] tomoyo_realpath_from_path+0x44/0x1d4 [ 3617.878102][T20142] tomoyo_path_number_perm+0xe0/0x21c [ 3617.878168][T20142] tomoyo_file_ioctl+0x1c/0x30 [ 3617.878258][T20142] security_file_ioctl+0x8c/0x19c [ 3617.878349][T20142] __arm64_sys_ioctl+0x48/0x104 [ 3617.878421][T20142] invoke_syscall+0x54/0x10c [ 3617.878481][T20142] el0_svc_common.constprop.0+0x40/0xe0 [ 3617.878545][T20142] do_el0_svc+0x1c/0x34 [ 3617.878610][T20142] el0_svc+0x38/0x1fc [ 3617.878686][T20142] el0t_64_sync_handler+0xa0/0xf0 [ 3617.878759][T20142] el0t_64_sync+0x1a4/0x1a8 [ 3617.878845][T20142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3650.830798][T20424] 8021q: VLANs not supported on pimreg [ 3650.840264][T20424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3650.843061][T20424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3653.578551][T20464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3653.579928][T20464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3654.587189][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3654.588619][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3654.602963][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3654.604333][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3654.643185][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3654.645105][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3661.731708][T20583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3661.737396][T20583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3661.939853][T20588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3661.942930][T20588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.198358][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.200156][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.212125][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.213711][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.220170][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.221381][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.225582][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.232906][T20802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.234358][T20802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.242084][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.248855][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3689.251666][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3689.596766][T20810] random: crng reseeded on system resumption [ 3691.474590][T20862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3691.484006][T20862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3704.723491][T21042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3704.728268][T21042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3704.741352][T21042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3704.742690][T21042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3718.834358][T21171] fuse: fd is not a fuse device [ 3719.630983][T21176] FAULT_INJECTION: forcing a failure. [ 3719.630983][T21176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3719.631313][T21176] CPU: 1 UID: 0 PID: 21176 Comm: syz.1.5737 Tainted: G L syzkaller #0 PREEMPT [ 3719.631417][T21176] Tainted: [L]=SOFTLOCKUP [ 3719.631452][T21176] Hardware name: linux,dummy-virt (DT) [ 3719.631491][T21176] Call trace: [ 3719.631523][T21176] show_stack+0x18/0x24 (C) [ 3719.631774][T21176] dump_stack_lvl+0x60/0x80 [ 3719.632418][T21176] dump_stack+0x18/0x24 [ 3719.632538][T21176] should_fail_ex+0x1e0/0x238 [ 3719.632633][T21176] should_fail+0x14/0x40 [ 3719.632716][T21176] should_fail_usercopy+0x1c/0x40 [ 3719.632800][T21176] _inline_copy_from_user+0x24/0xa8 [ 3719.632892][T21176] copy_msghdr_from_user+0x58/0x160 [ 3719.632971][T21176] ___sys_sendmsg+0x90/0x108 [ 3719.633054][T21176] __sys_sendmmsg+0x110/0x24c [ 3719.633139][T21176] __arm64_sys_sendmmsg+0x28/0x38 [ 3719.633232][T21176] invoke_syscall+0x54/0x10c [ 3719.633321][T21176] el0_svc_common.constprop.0+0x40/0xe0 [ 3719.633403][T21176] do_el0_svc+0x1c/0x34 [ 3719.633478][T21176] el0_svc+0x38/0x1fc [ 3719.633569][T21176] el0t_64_sync_handler+0xa0/0xf0 [ 3719.633654][T21176] el0t_64_sync+0x1a4/0x1a8 [ 3742.538464][T21398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3742.539981][T21398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3744.040666][T21406] could not allocate digest TFM handle michael_mic [ 3750.154688][T16437] smc: removing ib device syz1 [ 3752.172532][T20820] pimreg: left allmulticast mode [ 3752.515536][T20820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3752.554934][T20820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3752.591145][T20820] bond0 (unregistering): Released all slaves [ 3752.872993][T20820] hsr_slave_0: left promiscuous mode [ 3752.876709][T20820] hsr_slave_1: left promiscuous mode [ 3753.721859][ T3219] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3754.250508][T21420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3754.268247][T21420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3754.738981][ T3219] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3755.188601][T21420] hsr_slave_0: entered promiscuous mode [ 3755.194356][T21420] hsr_slave_1: entered promiscuous mode [ 3755.683279][ T3219] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3756.537334][T21497] FAULT_INJECTION: forcing a failure. [ 3756.537334][T21497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3756.537733][T21497] CPU: 0 UID: 0 PID: 21497 Comm: syz.1.5789 Tainted: G L syzkaller #0 PREEMPT [ 3756.537849][T21497] Tainted: [L]=SOFTLOCKUP [ 3756.537887][T21497] Hardware name: linux,dummy-virt (DT) [ 3756.537926][T21497] Call trace: [ 3756.537998][T21497] show_stack+0x18/0x24 (C) [ 3756.538136][T21497] dump_stack_lvl+0x60/0x80 [ 3756.538314][T21497] dump_stack+0x18/0x24 [ 3756.538427][T21497] should_fail_ex+0x1e0/0x238 [ 3756.538630][T21497] should_fail+0x14/0x40 [ 3756.538730][T21497] should_fail_usercopy+0x1c/0x40 [ 3756.538805][T21497] _inline_copy_from_user+0x24/0xa8 [ 3756.538884][T21497] copy_msghdr_from_user+0x58/0x160 [ 3756.538972][T21497] ___sys_sendmsg+0x90/0x108 [ 3756.539083][T21497] __sys_sendmmsg+0x110/0x24c [ 3756.539161][T21497] __arm64_sys_sendmmsg+0x28/0x38 [ 3756.539260][T21497] invoke_syscall+0x54/0x10c [ 3756.539337][T21497] el0_svc_common.constprop.0+0x40/0xe0 [ 3756.539409][T21497] do_el0_svc+0x1c/0x34 [ 3756.539502][T21497] el0_svc+0x38/0x1fc [ 3756.539588][T21497] el0t_64_sync_handler+0xa0/0xf0 [ 3756.539664][T21497] el0t_64_sync+0x1a4/0x1a8 [ 3756.633172][T21420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3756.679059][T21420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3756.684655][T21420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3756.722493][T21420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3756.731455][T21420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3756.759709][T21420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3756.764131][T21420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3756.779506][T21420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3757.572241][T21420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3758.109172][ T28] audit: type=1326 audit(2000003129.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21533 comm="syz.1.5794" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf78f68 code=0x0 [ 3760.570893][T21420] veth0_vlan: entered promiscuous mode [ 3760.614877][T21420] veth1_vlan: entered promiscuous mode [ 3760.778815][T21420] veth0_macvtap: entered promiscuous mode [ 3760.802799][T21420] veth1_macvtap: entered promiscuous mode [ 3760.945386][T20820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3760.946375][T20820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3760.946676][T20820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3760.946874][T20820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3763.336936][ T9851] pimreg: left allmulticast mode [ 3763.597813][ T9851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3763.646985][ T9851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3763.689878][ T9851] bond0 (unregistering): Released all slaves [ 3763.867081][ T9851] hsr_slave_0: left promiscuous mode [ 3763.872090][ T9851] hsr_slave_1: left promiscuous mode [ 3765.936754][ T3219] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3766.401036][T21590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3766.421003][T21590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3767.197606][ T3219] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3767.632507][T21590] hsr_slave_0: entered promiscuous mode [ 3767.635000][T21590] hsr_slave_1: entered promiscuous mode [ 3767.640412][T21590] debugfs: 'hsr0' already exists in 'hsr' [ 3767.642016][T21590] Cannot create hsr debugfs directory [ 3769.174402][T21590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3769.200364][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3769.204475][T21590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3769.228438][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3769.235525][T21590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3769.289909][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3769.298549][T21590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3769.324412][T21590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3770.613774][T21590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3774.921912][T21590] veth0_vlan: entered promiscuous mode [ 3774.979843][T21590] veth1_vlan: entered promiscuous mode [ 3775.112048][T21590] veth0_macvtap: entered promiscuous mode [ 3775.145077][T21590] veth1_macvtap: entered promiscuous mode [ 3775.291240][T20820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3775.293626][T20820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3775.301069][T20820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3775.301468][T20820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3776.553799][T21860] binder: 21859:21860 ioctl c0306201 20000080 returned -14 [ 3776.568668][T21860] binder: 21859:21860 tried to acquire reference to desc 0, got 1 instead [ 3776.569135][T21860] binder: 21859:21860 ioctl c0306201 200003c0 returned -14 [ 3776.574991][T21860] binder: 21859:21860 got transaction with invalid offset (40, min 24 max 40) or object. [ 3776.580492][T21860] binder: 21859:21860 transaction call to 21859:0 failed 5/29201/-22, code 0 size 40-24 line 3524 [ 3776.585189][T20700] binder: undelivered TRANSACTION_ERROR: 29201 [ 3777.249932][T21885] ubi12: attaching mtd1 [ 3777.254158][T21885] ubi12: scanning is finished [ 3777.257618][T21885] ubi12: empty MTD device detected [ 3777.317265][T21885] ubi12: attached mtd1 (name "mtdram test device", size 0 MiB) [ 3777.317621][T21885] ubi12: PEB size: 4096 bytes (4 KiB), LEB size: 3520 bytes [ 3777.335397][T21885] ubi12: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3777.335545][T21885] ubi12: VID header offset: 512 (aligned 512), data offset: 576 [ 3777.335623][T21885] ubi12: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3777.336855][T21885] ubi12: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 3777.336946][T21885] ubi12: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3578741975 [ 3777.337027][T21885] ubi12: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3777.339618][T21886] ubi12: background thread "ubi_bgt12d" started, PID 21886 [ 3780.351407][T21973] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 3780.354216][T21973] syzkaller0: entered promiscuous mode [ 3780.357718][T21973] syzkaller0: entered allmulticast mode [ 3781.884132][T22016] syzkaller0: entered promiscuous mode [ 3781.884463][T22016] syzkaller0: entered allmulticast mode [ 3783.504915][T22027] syzkaller0: entered promiscuous mode [ 3783.506546][T22027] syzkaller0: entered allmulticast mode [ 3784.047573][T22033] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3784.630543][T22041] syzkaller0: entered promiscuous mode [ 3784.630996][T22041] syzkaller0: entered allmulticast mode [ 3788.374880][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5924'. [ 3791.195396][T22126] syzkaller0: entered promiscuous mode [ 3791.200612][T22126] syzkaller0: entered allmulticast mode [ 3793.835090][T22133] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5942'. [ 3794.754031][T22159] syz_tun: entered promiscuous mode [ 3797.002133][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5957'. [ 3799.415546][T22222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5979'. [ 3799.474462][T22222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3799.494615][T22222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5979'. [ 3799.500250][T22222] bond1: entered promiscuous mode [ 3799.503711][T22222] bond1: entered allmulticast mode [ 3799.540210][T22222] dummy0: entered promiscuous mode [ 3799.542760][T22222] dummy0: entered allmulticast mode [ 3799.545544][T22222] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 3801.188508][T22199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 3801.924192][T22259] syzkaller1: entered promiscuous mode [ 3801.924533][T22259] syzkaller1: entered allmulticast mode [ 3802.867788][T22284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6003'. [ 3802.998730][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999043][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999070][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999088][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999105][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999123][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999140][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999200][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999487][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999534][T22286] tc action pedit 'at' offset 6 out of bounds [ 3802.999730][T22286] 0: reclassify loop, rule prio 0, protocol 800 [ 3807.099660][T22323] IPv6: NLM_F_CREATE should be specified when creating new route [ 3807.100511][T22323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3807.100794][T22323] IPv6: NLM_F_CREATE should be set when creating new route [ 3807.101003][T22323] IPv6: NLM_F_CREATE should be set when creating new route [ 3809.143776][ T4975] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3809.162409][ T4975] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3810.920110][T22360] xt_hashlimit: size too large, truncated to 1048576 [ 3811.155297][T22360] xt_hashlimit: size too large, truncated to 1048576 [ 3812.437423][T22388] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6045'. [ 3812.440351][T22388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6045'. [ 3814.670798][T22424] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6061'. [ 3815.113874][T22436] syzkaller1: entered promiscuous mode [ 3815.114122][T22436] syzkaller1: entered allmulticast mode [ 3817.653539][T22449] netlink: 'syz.1.6070': attribute type 10 has an invalid length. [ 3818.400229][T22458] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6074'. [ 3818.401465][T22458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6074'. [ 3818.406437][T22458] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6074'. [ 3820.072472][T22489] netlink: 'syz.0.6088': attribute type 1 has an invalid length. [ 3820.073523][T22489] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6088'. [ 3823.867574][T22581] TCP: tcp_parse_options: Illegal window scaling value 219 > 14 received [ 3828.323104][T22626] bridge_slave_0: invalid flags given to default FDB implementation [ 3828.327935][T22626] bridge_slave_0: invalid flags given to default FDB implementation [ 3831.220884][T22652] Illegal XDP return value 4294967294 on prog (id 112) dev syz_tun, expect packet loss! [ 3845.129924][T22795] netlink: 'syz.1.6215': attribute type 4 has an invalid length. [ 3846.774556][ T28] audit: type=1326 audit(2000003218.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.783254][ T28] audit: type=1326 audit(2000003218.310:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.787543][ T28] audit: type=1326 audit(2000003218.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.791120][ T28] audit: type=1326 audit(2000003218.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.797780][ T28] audit: type=1326 audit(2000003218.310:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.798171][ T28] audit: type=1326 audit(2000003218.320:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.798425][ T28] audit: type=1326 audit(2000003218.320:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.798587][ T28] audit: type=1326 audit(2000003218.320:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3846.798726][ T28] audit: type=1326 audit(2000003218.310:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22846 comm="syz.1.6240" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db78f68 code=0x7ffc0000 [ 3847.130321][T22851] syzkaller0: entered promiscuous mode [ 3847.131707][T22851] syzkaller0: entered allmulticast mode [ 3848.110512][T20555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3848.219661][T20555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3848.361062][T20555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3848.492916][T20555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3849.413992][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3849.455610][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3849.492879][T20555] bond0 (unregistering): Released all slaves [ 3849.513743][T20555] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 3849.540841][T20555] dummy0: left promiscuous mode [ 3849.542316][T20555] dummy0: left allmulticast mode [ 3849.555066][T20555] bond1 (unregistering): Released all slaves [ 3849.814111][T20555] hsr_slave_0: left promiscuous mode [ 3849.819464][T20555] hsr_slave_1: left promiscuous mode [ 3849.827036][T20555] veth1_macvtap: left promiscuous mode [ 3849.827369][T20555] veth0_macvtap: left promiscuous mode [ 3849.827771][T20555] veth1_vlan: left promiscuous mode [ 3849.828083][T20555] veth0_vlan: left promiscuous mode [ 3851.372242][T20555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.521203][T20555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.659425][T20555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3851.801871][ T3219] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3851.882573][T20555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3852.874371][T20555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3852.899381][T20555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3852.941865][T20555] bond0 (unregistering): Released all slaves [ 3853.145395][T20555] hsr_slave_0: left promiscuous mode [ 3853.150154][T20555] hsr_slave_1: left promiscuous mode [ 3853.159980][T20555] veth1_macvtap: left promiscuous mode [ 3853.160153][T20555] veth0_macvtap: left promiscuous mode [ 3853.160494][T20555] veth1_vlan: left promiscuous mode [ 3853.160700][T20555] veth0_vlan: left promiscuous mode [ 3853.754190][T22867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3853.774860][ T3219] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3853.791172][T22867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3854.789833][ T3219] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3855.062345][T22894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3855.087449][T22867] hsr_slave_0: entered promiscuous mode [ 3855.092179][T22867] hsr_slave_1: entered promiscuous mode [ 3855.112004][T22894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3856.055539][T22867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3856.076669][T22867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3856.083211][T22867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3856.103275][T22867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3856.110210][T22867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3856.140616][T22867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3856.145265][T22867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3856.170058][T22867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3856.455444][ T3219] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3856.484910][T22894] hsr_slave_0: entered promiscuous mode [ 3856.500119][T22894] hsr_slave_1: entered promiscuous mode [ 3856.503892][T22894] debugfs: 'hsr0' already exists in 'hsr' [ 3856.508882][T22894] Cannot create hsr debugfs directory [ 3857.421686][T22894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3857.450400][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3857.471735][T22894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3857.493218][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3857.514060][T22894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3857.535601][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3857.576729][T22894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3857.593938][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3857.604059][ T3219] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3857.671040][T22867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3858.931742][T22894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3859.235530][ T3219] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3860.371012][ T3219] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3861.641403][T22867] veth0_vlan: entered promiscuous mode [ 3861.737284][T22867] veth1_vlan: entered promiscuous mode [ 3861.810393][ T3219] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3861.958803][T22867] veth0_macvtap: entered promiscuous mode [ 3861.982062][T22867] veth1_macvtap: entered promiscuous mode [ 3862.183865][T20820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.184248][T20820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.184378][T20820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.184505][T20820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3862.604365][T22894] veth0_vlan: entered promiscuous mode [ 3862.647817][T22894] veth1_vlan: entered promiscuous mode [ 3862.799912][T23090] fuse: Bad value for 'fd' [ 3862.833275][T22894] veth0_macvtap: entered promiscuous mode [ 3862.854430][T22894] veth1_macvtap: entered promiscuous mode [ 3863.042589][T16437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3863.044223][T16437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3863.045361][T16437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3863.046888][T16437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3863.392200][T23099] netlink: 'syz.2.6264': attribute type 16 has an invalid length. [ 3863.393578][T23099] netlink: 'syz.2.6264': attribute type 17 has an invalid length. [ 3866.744884][ T28] audit: type=1326 audit(2000003238.270:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23146 comm="syz.3.6280" exe="/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x0 [ 3872.844154][T23210] netlink: 'syz.3.6296': attribute type 3 has an invalid length. [ 3872.852081][T23210] futex_wake_op: syz.3.6296 tries to shift op by 32; fix this program [ 3876.820502][ T28] audit: type=1326 audit(2000003248.350:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.821369][ T28] audit: type=1326 audit(2000003248.350:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.831241][ T28] audit: type=1326 audit(2000003248.360:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.831698][ T28] audit: type=1326 audit(2000003248.360:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.831853][ T28] audit: type=1326 audit(2000003248.360:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.843199][ T28] audit: type=1326 audit(2000003248.370:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.843660][ T28] audit: type=1326 audit(2000003248.370:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.843800][ T28] audit: type=1326 audit(2000003248.370:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.843957][ T28] audit: type=1326 audit(2000003248.370:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3876.844120][ T28] audit: type=1326 audit(2000003248.370:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23294 comm="syz.3.6324" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3878.058824][T23316] bridge_slave_0: entered promiscuous mode [ 3880.576262][T23367] fuse: Bad value for 'group_id' [ 3880.576594][T23367] fuse: Bad value for 'group_id' [ 3882.465077][T23393] xt_connbytes: Forcing CT accounting to be enabled [ 3882.477048][T23393] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3886.751449][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 3886.751831][ T28] audit: type=1326 audit(2000003258.280:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.755067][ T28] audit: type=1326 audit(2000003258.280:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.760059][ T28] audit: type=1326 audit(2000003258.290:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.764545][ T28] audit: type=1326 audit(2000003258.290:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.769987][ T28] audit: type=1326 audit(2000003258.290:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.773603][ T28] audit: type=1326 audit(2000003258.290:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.777808][ T28] audit: type=1326 audit(2000003258.290:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.782564][ T28] audit: type=1326 audit(2000003258.290:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.786770][ T28] audit: type=1326 audit(2000003258.300:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3886.792240][ T28] audit: type=1326 audit(2000003258.300:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23463 comm="syz.3.6389" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 3890.818508][T23494] fuse: Unknown parameter 'group_i00000000000000000000' [ 3891.076662][T23498] syzkaller0: entered promiscuous mode [ 3891.076940][T23498] syzkaller0: entered allmulticast mode [ 3891.419966][T23505] fuse: Unknown parameter 'group_i00000000000000000000' [ 3891.830657][T23515] fuse: Unknown parameter 'group_id00000000000000000000' [ 3894.902934][T23572] fuse: Bad value for 'user_id' [ 3894.903632][T23572] fuse: Bad value for 'user_id' [ 3895.818345][T23589] erspan0: entered promiscuous mode [ 3897.577038][T23594] fuse: Bad value for 'user_id' [ 3897.577409][T23594] fuse: Bad value for 'user_id' [ 3899.044809][T23606] fuse: Bad value for 'fd' [ 3900.423614][T23618] fuse: Bad value for 'fd' [ 3901.112947][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6460'. [ 3901.114188][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6460'. [ 3902.580930][T23658] loop7: detected capacity change from 0 to 7 [ 3902.817095][T23669] Injecting memory failure for pfn 0x41ef5 at process virtual address 0x20001000 [ 3902.833822][T23669] Memory failure: 0x41ef5: unhandlable page. [ 3902.834636][T23669] Memory failure: 0x41ef5: recovery action for get hwpoison page: Ignored [ 3903.908236][T23674] Invalid logical block size (3) [ 3904.761512][T23709] fuse: Invalid rootmode [ 3904.938553][T23711] bond1: option resend_igmp: invalid value (4936) [ 3904.940254][T23711] bond1: option resend_igmp: allowed values 0 - 255 [ 3904.949695][T23711] bond1 (unregistering): Released all slaves [ 3906.096648][T23731] fuse: Invalid rootmode [ 3907.499325][T23744] fuse: Bad value for 'rootmode' [ 3908.371505][T23755] fuse: Bad value for 'rootmode' [ 3908.885003][T23765] fuse: Bad value for 'rootmode' [ 3909.800790][T23776] fuse: Unknown parameter 'use00000000000000000000' [ 3911.847551][T23787] fuse: Unknown parameter 'use00000000000000000000' [ 3912.485217][T23800] fuse: Unknown parameter 'use00000000000000000000' [ 3915.569794][T23831] fuse: Unknown parameter 'user_i00000000000000000000' [ 3915.940606][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 3915.940915][ T28] audit: type=1326 audit(2000003287.470:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.942567][ T28] audit: type=1326 audit(2000003287.470:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.945445][ T28] audit: type=1326 audit(2000003287.470:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.957511][ T28] audit: type=1326 audit(2000003287.480:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.957907][ T28] audit: type=1326 audit(2000003287.490:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=239 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.962897][ T28] audit: type=1326 audit(2000003287.490:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.964920][ T28] audit: type=1326 audit(2000003287.490:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.969377][ T28] audit: type=1326 audit(2000003287.490:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3915.970793][ T28] audit: type=1326 audit(2000003287.500:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23838 comm="syz.2.6549" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 3916.061142][T23841] fuse: Unknown parameter 'user_id00000000000000000000' [ 3916.446591][T23852] fuse: Unknown parameter 'user_id00000000000000000000' [ 3917.459747][T23879] fuse: Bad value for 'fd' [ 3917.531638][T23882] CUSE: info not properly terminated [ 3925.258087][T23928] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6587'. [ 3925.363040][T23930] fuse: Unknown parameter '0x0000000000000004' [ 3926.896622][T23944] fuse: Unknown parameter '0x0000000000000004' [ 3929.961573][T23958] fuse: Unknown parameter '0x0000000000000004' [ 3930.471224][T23970] xt_hashlimit: size too large, truncated to 1048576 [ 3930.742877][T23974] fuse: Unknown parameter '0x0000000000000004' [ 3933.817178][T23990] fuse: Unknown parameter '0x0000000000000004' [ 3933.909763][T23992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6610'. [ 3935.105514][T24013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6619'. [ 3937.803263][T24020] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3937.807291][T24020] block device autoloading is deprecated and will be removed. [ 3941.212145][T24045] xt_hashlimit: size too large, truncated to 1048576 [ 3948.684754][T24131] xt_hashlimit: size too large, truncated to 1048576 [ 3952.681293][T24150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6670'. [ 3952.783919][T24150] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 3952.790281][T24150] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 3966.761682][T24245] netlink: 22 bytes leftover after parsing attributes in process `syz.2.6704'. [ 3966.793791][T24245] netlink: 'syz.2.6704': attribute type 4 has an invalid length. [ 3967.325352][T24262] syzkaller0: entered promiscuous mode [ 3967.325571][T24262] syzkaller0: entered allmulticast mode [ 3968.148465][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6716'. [ 4003.555708][T24444] xt_hashlimit: size too large, truncated to 1048576 [ 4003.911111][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'. [ 4003.915116][T24449] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 4018.822214][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6796'. [ 4023.885586][T24527] TCP: tcp_parse_options: Illegal window scaling value 40 > 14 received [ 4023.979989][T24529] bridge_slave_0: entered promiscuous mode [ 4026.085507][T24560] x_tables: ip_tables: osf match: only valid for protocol 6 [ 4032.525594][ T28] audit: type=1326 audit(2000003405.045:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4032.533938][ T28] audit: type=1326 audit(2000003405.055:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4032.540837][ T28] audit: type=1326 audit(2000003405.055:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4032.545368][ T28] audit: type=1326 audit(2000003405.065:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4032.554807][ T28] audit: type=1326 audit(2000003405.075:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4032.555347][ T28] audit: type=1326 audit(2000003405.075:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4032.555558][ T28] audit: type=1326 audit(2000003405.075:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24636 comm="syz.3.6853" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb5378f68 code=0x7ffc0000 [ 4033.061908][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6859'. [ 4033.063686][T24651] bond0: option downdelay: invalid value (18446744071951403948) [ 4033.065302][T24651] bond0: option downdelay: allowed values 0 - 2147483647 [ 4049.709981][T24768] : renamed from vlan0 (while UP) [ 4055.537378][T24857] netlink: 'syz.2.6941': attribute type 4 has an invalid length. [ 4070.413721][T24957] loop4: detected capacity change from 0 to 7 [ 4075.672953][T24981] syzkaller0: entered promiscuous mode [ 4075.674083][T24981] syzkaller0: entered allmulticast mode [ 4078.340509][T24999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4078.351798][T24999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4079.171060][T24999] hsr_slave_0: entered promiscuous mode [ 4079.173268][T24999] hsr_slave_1: entered promiscuous mode [ 4079.174620][T24999] debugfs: 'hsr0' already exists in 'hsr' [ 4079.176888][T24999] Cannot create hsr debugfs directory [ 4079.632498][T25033] syzkaller0: entered promiscuous mode [ 4079.632707][T25033] syzkaller0: entered allmulticast mode [ 4079.661515][T24999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4079.779900][T24999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4079.855396][T24999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4079.964582][T24999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4080.315435][T24999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 4080.344660][T24999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4080.350973][T24999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 4080.372825][T24999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4080.381161][T24999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 4080.406802][T24999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4080.413695][T24999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 4080.436610][T24999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4080.578102][T25056] netlink: 'syz.2.7002': attribute type 10 has an invalid length. [ 4081.305268][T24999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4085.492301][T25114] ======================================================= [ 4085.492301][T25114] WARNING: The mand mount option has been deprecated and [ 4085.492301][T25114] and is ignored by this kernel. Remove the mand [ 4085.492301][T25114] option from the mount to silence this warning. [ 4085.492301][T25114] ======================================================= [ 4085.845124][T24999] veth0_vlan: entered promiscuous mode [ 4085.916280][T24999] veth1_vlan: entered promiscuous mode [ 4086.065282][T24999] veth0_macvtap: entered promiscuous mode [ 4086.089446][T24999] veth1_macvtap: entered promiscuous mode [ 4086.213074][T20822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4086.213945][T20822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4086.214162][T20822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4086.214315][T20822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4090.267773][T25146] loop6: detected capacity change from 0 to 1 [ 4090.282006][ C1] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 4090.973185][T25160] syzkaller0: entered promiscuous mode [ 4090.974801][T25160] syzkaller0: entered allmulticast mode [ 4092.094339][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7037'. [ 4092.460965][T25182] netlink: 'syz.2.7038': attribute type 4 has an invalid length. [ 4092.622612][T25186] batadv_slave_1: entered promiscuous mode [ 4092.627644][T25186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7040'. [ 4092.676413][T25186] batadv_slave_1 (unregistering): left promiscuous mode [ 4098.786738][T25232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7050'. [ 4098.878001][T25232] ip6gre1: entered allmulticast mode [ 4107.871346][T25321] mmap: syz.3.7094 (25321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 4116.504065][ T28] audit: type=1326 audit(2000003489.025:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.509568][ T28] audit: type=1326 audit(2000003489.035:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.512419][ T28] audit: type=1326 audit(2000003489.035:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.515478][ T28] audit: type=1326 audit(2000003489.025:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.521299][ T28] audit: type=1326 audit(2000003489.035:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.527964][ T28] audit: type=1326 audit(2000003489.045:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.530772][ T28] audit: type=1326 audit(2000003489.055:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.535631][ T28] audit: type=1326 audit(2000003489.055:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.537701][ T28] audit: type=1326 audit(2000003489.065:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4116.541954][ T28] audit: type=1326 audit(2000003489.065:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25365 comm="syz.2.7112" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92d78f68 code=0x7ffc0000 [ 4123.856586][T25419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'. [ 4123.858937][T25419] netlink: 'syz.3.7129': attribute type 30 has an invalid length. [ 4123.860399][T25419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7129'. [ 4124.233751][T25429] binder: 25428:25429 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 4124.337275][T25431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7135'. [ 4124.642519][T25433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7136'. [ 4127.459084][T25466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4127.461420][T25466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4128.729372][T25499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4128.730798][T25499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4128.961505][T25508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4128.962796][T25508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4129.093060][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7171'. [ 4129.093296][T25515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7171'. [ 4132.044403][T25530] netlink: 'syz.2.7177': attribute type 1 has an invalid length. [ 4132.048703][T25530] nbd: couldn't find device at index 131080 [ 4132.353411][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 4132.353850][ T28] audit: type=1107 audit(2000003504.875:104): pid=25535 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 4132.783306][T25547] binder: 25546:25547 BC_ACQUIRE_DONE u0000000000000001 no match [ 4132.790339][T25547] binder: 25546:25547 got reply transaction with no transaction stack [ 4132.792284][T25547] binder: 25546:25547 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-0 line 3155 [ 4135.028565][T25577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7195'. [ 4135.154773][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4135.163634][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4136.879519][T25589] netlink: 'syz.2.7200': attribute type 8 has an invalid length. [ 4137.234746][T25598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4137.239309][T25598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4137.269005][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7205'. [ 4137.269192][T25599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7205'. [ 4137.440095][T25605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7207'. [ 4138.984252][T25618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4138.987976][T25618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4139.065215][T25620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4139.069369][T25620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4139.159455][T25622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4139.164632][T25622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4139.336675][T25626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4139.338339][T25626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4139.501022][T25630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4139.508600][T25630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4148.074790][T25685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7236'. [ 4153.130002][T25731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4153.138544][T25731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4153.249442][T25734] netlink: 'syz.3.7251': attribute type 7 has an invalid length. [ 4153.253814][T25734] netlink: 'syz.3.7251': attribute type 1 has an invalid length. [ 4153.414178][T25738] IPv6: NLM_F_CREATE should be specified when creating new route [ 4153.499178][T25740] binder: 25739:25740 got transaction to invalid handle, 1 [ 4153.499581][T25740] binder: 25739:25740 cannot find target node [ 4153.501301][T25740] binder: 25739:25740 transaction async to 0:0 failed 7/29201/-22, code 0 size 0-0 line 3252 [ 4153.513898][T20700] binder: undelivered TRANSACTION_ERROR: 29201 [ 4155.901789][T20820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4155.947872][T20820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4155.995707][T20820] bond0 (unregistering): Released all slaves [ 4156.110801][T20820] hsr_slave_0: left promiscuous mode [ 4156.113681][T20820] hsr_slave_1: left promiscuous mode [ 4156.128461][T20820] veth1_macvtap: left promiscuous mode [ 4156.128797][T20820] veth0_macvtap: left promiscuous mode [ 4156.129338][T20820] veth1_vlan: left promiscuous mode [ 4156.129462][T20820] veth0_vlan: left promiscuous mode [ 4158.638198][T25762] binder_alloc: binder_alloc_mmap_handler: 25761 ffff93c06000-ffff93c1c000 already mapped failed -16 [ 4161.788530][T25779] Trying to write to read-only block-device nullb0 [ 4163.430050][T25810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4163.431494][T25810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4163.504741][T25813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7283'. [ 4163.526617][T25813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7283'. [ 4165.283607][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7285'. [ 4176.401947][T25888] bond0: (slave bond_slave_0): Releasing backup interface [ 4176.462643][T25888] bond0: (slave bond_slave_1): Releasing backup interface [ 4176.533906][T25888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 4178.452624][T25894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4178.454201][T25894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4179.171373][T25908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4179.172735][T25908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4180.731790][T25927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 4182.605574][T25942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4182.609584][T25942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4182.714961][T25947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4182.728085][T25947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4182.733225][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7330'. [ 4184.637077][T25959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4184.640222][T25959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4184.959354][T25965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4184.970153][T25965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4185.821013][T25986] netlink: 'syz.2.7346': attribute type 1 has an invalid length. [ 4186.015584][T25986] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 4186.019628][T25986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7346'. [ 4186.029749][T25986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 4186.260262][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7352'. [ 4186.942677][T20822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4187.044297][T20822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4187.557664][T20822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4188.674813][T20822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4189.817662][T20822] bond0 (unregistering): Released all slaves [ 4189.834753][T20822] bond1 (unregistering): Released all slaves [ 4189.882462][T20822] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 4189.923268][T20822] bond2 (unregistering): Released all slaves [ 4190.199971][T20822] hsr_slave_0: left promiscuous mode [ 4190.204086][T20822] hsr_slave_1: left promiscuous mode [ 4190.221722][T20822] veth1_macvtap: left promiscuous mode [ 4190.222893][T20822] veth0_macvtap: left promiscuous mode [ 4190.226650][T20822] veth1_vlan: left promiscuous mode [ 4190.227837][T20822] veth0_vlan: left promiscuous mode [ 4192.499995][ T3219] 8021q: adding VLAN 0 to HW filter on device eth10 [ 4195.009429][T26005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4195.038401][T26005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4195.438453][ T3219] 8021q: adding VLAN 0 to HW filter on device eth9 [ 4195.685406][T26089] binder_alloc: binder_alloc_mmap_handler: 26087 ffff8bdee000-ffff8be04000 already mapped failed -16 [ 4196.635323][ T3219] 8021q: adding VLAN 0 to HW filter on device eth11 [ 4196.773983][T26005] hsr_slave_0: entered promiscuous mode [ 4196.778883][T26005] hsr_slave_1: entered promiscuous mode [ 4199.894482][T26005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4199.940815][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4199.959147][T26005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4199.988552][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4200.003817][T26005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4200.049272][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4200.054076][T26005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4200.103741][T26005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4201.530004][T26005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4203.896916][T26188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4203.898706][T26188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4204.309468][T26196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7388'. [ 4204.311317][T26196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7388'. [ 4205.539132][T26225] loop8: detected capacity change from 0 to 7 [ 4206.813852][T26005] veth0_vlan: entered promiscuous mode [ 4206.847679][T26005] veth1_vlan: entered promiscuous mode [ 4208.708500][T26005] veth0_macvtap: entered promiscuous mode [ 4208.738549][T26005] veth1_macvtap: entered promiscuous mode [ 4208.862093][T20820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4208.862513][T20820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4208.862887][T20820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4208.863128][T20820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4209.492985][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7395'. [ 4209.554109][T26251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 4209.572584][T26251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7395'. [ 4209.572883][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7395'. [ 4209.611669][T26251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4209.635582][T26251] bond1: (slave bond0): making interface the new active one [ 4209.643322][T26251] bond1: (slave bond0): Enslaving as an active interface with an up link [ 4209.655449][T26251] netlink: 'syz.3.7395': attribute type 10 has an invalid length. [ 4210.638946][T26266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4210.641796][T26266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4211.385597][T26281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4211.388901][T26281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4211.592857][T26285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4211.599043][T26285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4213.427637][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7411'. [ 4217.186943][T26310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4217.188532][T26310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4219.044278][T26320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4219.045654][T26320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4221.598420][T26345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4221.601262][T26345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4221.758440][T26347] binder: 26346:26347 tried to acquire reference to desc 0, got 1 instead [ 4221.768321][T26347] binder: 26346:26347 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 4221.770338][T26347] binder: 26347 RLIMIT_NICE not set [ 4221.775476][T26347] binder: 26347 RLIMIT_NICE not set [ 4221.781003][T26347] binder: release 26346:26347 transaction 12 in, still active [ 4221.800097][T26347] binder: send failed reply for transaction 12 to 26346:26347 [ 4221.809107][T26194] binder: undelivered TRANSACTION_COMPLETE [ 4221.810770][T26194] binder: undelivered TRANSACTION_ERROR: 29189 [ 4221.934337][T26349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4221.945500][T26349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4224.187491][T26361] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 4228.296582][T26376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4228.307203][T26376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4228.626565][T26384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4228.628133][T26384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4232.819514][T26416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4232.823424][T26416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4237.902442][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000067c8727c: rx timeout, send abort [ 4237.904546][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x0000000067c8727c: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 4238.057082][T26446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4238.059580][T26446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4240.859978][T26453] netlink: 'syz.2.7457': attribute type 1 has an invalid length. [ 4240.860341][T26453] nbd: couldn't find device at index 131080 [ 4247.639072][T26473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7463'. [ 4247.640828][T26473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7463'. [ 4247.643853][T26473] netlink: 23 bytes leftover after parsing attributes in process `syz.3.7463'. [ 4251.081302][T26494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4251.089297][T26494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4252.909728][T26504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4252.911745][T26504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4271.301445][T26615] bridge_slave_0: entered promiscuous mode [ 4274.535152][T26623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4274.539457][T26623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4274.663742][T26626] mtd partition "ss_mixer" doesn't have enough space: 0x8000003 < 0x7261632f646e756f, disabled [ 4274.667716][T26626] ------------[ cut here ]------------ [ 4274.671126][T26626] WARNING: drivers/mtd/mtdcore.c:719 at add_mtd_device+0x678/0x740, CPU#0: syz.3.7498/26626 [ 4274.678459][T26626] Modules linked in: [ 4274.680666][T26626] CPU: 0 UID: 0 PID: 26626 Comm: syz.3.7498 Tainted: G L syzkaller #0 PREEMPT [ 4274.681520][T26626] Tainted: [L]=SOFTLOCKUP [ 4274.681833][T26626] Hardware name: linux,dummy-virt (DT) [ 4274.682385][T26626] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 4274.682786][T26626] pc : add_mtd_device+0x678/0x740 [ 4274.683191][T26626] lr : mtd_add_partition+0x110/0x208 [ 4274.683471][T26626] sp : ffff800083653a50 [ 4274.683706][T26626] x29: ffff800083653a90 x28: fcf000000f474800 x27: 0000000000000000 [ 4274.684546][T26626] x26: fbf000000b7d5b60 x25: f9f00000066c9240 x24: fcf000000f474cf8 [ 4274.684936][T26626] x23: f2f0000005587000 x22: f2f00000055874e8 x21: fcf000000f474800 [ 4274.685319][T26626] x20: 0000000000000000 x19: fcf000000f4749a0 x18: 00000000ffffffff [ 4274.685918][T26626] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008326bb4d [ 4274.686471][T26626] x14: 000000000000000a x13: 00000000fa83b2da x12: 0000dd340210d638 [ 4274.686866][T26626] x11: 00000000000000c0 x10: 97419f098f482379 x9 : 9bcfebaa4ae5f926 [ 4274.687300][T26626] x8 : f7f000000634a178 x7 : 0000000000000004 x6 : 0000000000000000 [ 4274.687729][T26626] x5 : fff000007f8b8188 x4 : 0000000000000001 x3 : f2f00000055874e8 [ 4274.688165][T26626] x2 : f7f0000006349100 x1 : 0000000000000000 x0 : 0000000000000c00 [ 4274.688713][T26626] Call trace: [ 4274.689243][T26626] add_mtd_device+0x678/0x740 (P) [ 4274.689713][T26626] mtd_add_partition+0x110/0x208 [ 4274.689975][T26626] mtdchar_blkpg_ioctl+0xd0/0xf4 [ 4274.690340][T26626] mtdchar_ioctl+0x1b8/0xe14 [ 4274.690585][T26626] mtdchar_unlocked_ioctl+0x50/0x80 [ 4274.690851][T26626] __arm64_sys_ioctl+0xac/0x104 [ 4274.691106][T26626] invoke_syscall+0x54/0x10c [ 4274.691345][T26626] el0_svc_common.constprop.0+0x40/0xe0 [ 4274.691717][T26626] do_el0_svc+0x1c/0x34 [ 4274.691956][T26626] el0_svc+0x38/0x1fc [ 4274.692188][T26626] el0t_64_sync_handler+0xa0/0xf0 [ 4274.692449][T26626] el0t_64_sync+0x1a4/0x1a8 [ 4274.693116][T26626] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 4275.240949][T20820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4275.367868][T20820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4275.469773][T20820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4275.583569][T20820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4276.491882][T20820] bond1 (unregistering): (slave bond0): Releasing active interface [ 4276.525427][T20820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4276.568436][T20820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4276.612960][T20820] bond0 (unregistering): Released all slaves [ 4276.634086][T20820] bond1 (unregistering): Released all slaves [ 4276.787947][T20820] hsr_slave_0: left promiscuous mode [ 4276.792516][T20820] hsr_slave_1: left promiscuous mode [ 4276.808744][T20820] veth1_macvtap: left promiscuous mode [ 4276.810024][T20820] veth0_macvtap: left promiscuous mode [ 4276.811402][T20820] veth1_vlan: left promiscuous mode [ 4276.812571][T20820] veth0_vlan: left promiscuous mode [ 4278.204733][T20820] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4278.325309][T20820] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4278.414484][T20820] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4278.507074][ T3219] 8021q: adding VLAN 0 to HW filter on device eth9 [ 4278.524345][T20820] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4279.300067][T20820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4279.358752][T20820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4279.393896][T20820] bond0 (unregistering): Released all slaves [ 4279.492497][ T3219] 8021q: adding VLAN 0 to HW filter on device eth10 [ 4279.511930][T20820] hsr_slave_0: left promiscuous mode [ 4279.514037][T20820] hsr_slave_1: left promiscuous mode [ 4279.528994][T20820] veth1_macvtap: left promiscuous mode [ 4279.529306][T20820] veth0_macvtap: left promiscuous mode [ 4279.531911][T20820] veth1_vlan: left promiscuous mode [ 4279.532207][T20820] veth0_vlan: left promiscuous mode [ 4281.051199][ T3219] 8021q: adding VLAN 0 to HW filter on device eth11 [ 4281.829285][ T3219] 8021q: adding VLAN 0 to HW filter on device eth12 [ 4282.763690][ T3219] 8021q: adding VLAN 0 to HW filter on device eth13 [ 4283.473159][ T3219] 8021q: adding VLAN 0 to HW filter on device eth14 [ 4284.042451][ T3219] 8021q: adding VLAN 0 to HW filter on device eth15 [ 4284.719913][ T3219] 8021q: adding VLAN 0 to HW filter on device eth16