last executing test programs: 7m3.362330501s ago: executing program 1 (id=3132): fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 7m3.272264291s ago: executing program 1 (id=3133): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, 0x0, 0x0) 7m1.984586542s ago: executing program 1 (id=3134): setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000851}, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x1f, 0x1, 0x0, r0, 0x0, 0x1802}]) 7m1.702865224s ago: executing program 1 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff2, 0xffff}, {0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x4, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x40}}, 0x0) 7m1.542330236s ago: executing program 1 (id=3136): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/all/ioam6_enabled\x00', 0x2, 0xd3) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0xc, 0xffffffff9673e359]}}) epoll_create1(0x80000) 7m1.432494867s ago: executing program 1 (id=3137): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000002c0)='o', 0x1}], 0x2, 0x8, 0xb) 6m15.703525026s ago: executing program 32 (id=3137): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000002c0)='o', 0x1}], 0x2, 0x8, 0xb) 18.628331916s ago: executing program 0 (id=4234): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110c00000000008510f8ff02000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 18.514113136s ago: executing program 0 (id=4235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x1001}}}}}}}, 0x0) 15.897622588s ago: executing program 0 (id=4236): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) 15.661878701s ago: executing program 0 (id=4237): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1ff, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000140)=0x200000000080f) syz_open_procfs(0x0, 0x0) socket(0x2, 0x80805, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00') ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(0xffffffffffffffff, 0xc138fd0b, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfe4f, &(0x7f0000000000)=ANY=[], 0x0) 15.159589414s ago: executing program 0 (id=4238): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 12.404309357s ago: executing program 0 (id=4245): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(0x0, 0x1) pwritev(r1, 0x0, 0x0, 0x800000, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010120) write(r0, &(0x7f00000004c0)="262100002cea7cb00c020100020880038005000000000000000000000000000000000000000000000000000000000000000000fa764b3f5788b7ccd3c92a6a728e47082074ce8a70e6ead96bf8c1728d6287ac97b60d4f55ce0f6e18852c", 0x5e) 12.404099677s ago: executing program 33 (id=4245): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(0x0, 0x1) pwritev(r1, 0x0, 0x0, 0x800000, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010120) write(r0, &(0x7f00000004c0)="262100002cea7cb00c020100020880038005000000000000000000000000000000000000000000000000000000000000000000fa764b3f5788b7ccd3c92a6a728e47082074ce8a70e6ead96bf8c1728d6287ac97b60d4f55ce0f6e18852c", 0x5e) 1.751778565s ago: executing program 2 (id=4260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42d83}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x4000844) 1.611497337s ago: executing program 2 (id=4261): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r0, &(0x7f00000027c0)="fd3bb4", 0x3, 0x8) 1.432378538s ago: executing program 2 (id=4262): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x40032, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68}) tkill(r0, 0x7) 1.15113745s ago: executing program 2 (id=4263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x9, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e53194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)='d', 0x1}], 0x1}, 0x0) 701.485304ms ago: executing program 2 (id=4264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 436.975736ms ago: executing program 3 (id=4246): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) 171.825578ms ago: executing program 2 (id=4265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="40100a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000200)={0x80000002, 0x1801, 0x9, 0xb, 0x59, "ea7102000000f900edffff0900000000000005", 0x800, 0x3}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000080)) 0s ago: executing program 3 (id=4266): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubs', 0x1b) kernel console output (not intermixed with test programs): , failcnt 134905 [ 3033.163973][T11767] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 3033.164068][T11767] kmem: usage 2080kB, limit 9007199254740988kB, failcnt 0 [ 3033.164152][T11767] Memory cgroup stats for /syz0: [ 3033.164714][T11767] cache 194011136 [ 3033.164800][T11767] rss 118386688 [ 3033.164862][T11767] rss_huge 0 [ 3033.164928][T11767] shmem 187674624 [ 3033.164989][T11767] mapped_file 6336512 [ 3033.165050][T11767] dirty 12288 [ 3033.165110][T11767] writeback 0 [ 3033.165170][T11767] workingset_refault_anon 3891 [ 3033.165232][T11767] workingset_refault_file 2715 [ 3033.165293][T11767] swap 127934464 [ 3033.165353][T11767] swapcached 724217856 [ 3033.165423][T11767] pgpgin 9338313 [ 3033.165487][T11767] pgpgout 9262034 [ 3033.165549][T11767] pgfault 5143928 [ 3033.165612][T11767] pgmajfault 621 [ 3033.165675][T11767] inactive_anon 192937984 [ 3033.165737][T11767] active_anon 28672 [ 3033.165823][T11767] inactive_file 0 [ 3033.165890][T11767] active_file 0 [ 3033.165952][T11767] unevictable 119443456 [ 3033.166013][T11767] hierarchical_memory_limit 314572800 [ 3033.166074][T11767] hierarchical_memsw_limit 9223372036854771712 [ 3033.166135][T11767] total_cache 194011136 [ 3033.166197][T11767] total_rss 118386688 [ 3033.166257][T11767] total_rss_huge 0 [ 3033.166466][T11767] total_shmem 187674624 [ 3033.166535][T11767] total_mapped_file 6336512 [ 3033.166694][T11767] total_dirty 12288 [ 3033.166762][T11767] total_writeback 0 [ 3033.166824][T11767] total_workingset_refault_anon 3891 [ 3033.166962][T11767] total_workingset_refault_file 2715 [ 3033.167038][T11767] total_swap 127934464 [ 3033.167188][T11767] total_swapcached 724217856 [ 3033.167261][T11767] total_pgpgin 9338313 [ 3033.167341][T11767] total_pgpgout 9262034 [ 3033.167437][T11767] total_pgfault 5143928 [ 3033.167507][T11767] total_pgmajfault 621 [ 3033.167568][T11767] total_inactive_anon 192937984 [ 3033.167631][T11767] total_active_anon 28672 [ 3033.167691][T11767] total_inactive_file 0 [ 3033.167751][T11767] total_active_file 0 [ 3033.167811][T11767] total_unevictable 119443456 [ 3033.167879][T11767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2593,pid=11761,uid=0 [ 3033.169122][T11767] Memory cgroup out of memory: Killed process 11761 (syz.0.2593) total-vm:124980kB, anon-rss:111652kB, file-rss:12892kB, shmem-rss:0kB, UID:0 pgtables:296kB oom_score_adj:1000 [ 3036.642729][ T31] oom_reaper: reaped process 11761 (syz.0.2593), now anon-rss:0kB, file-rss:7296kB, shmem-rss:0kB [ 3037.707441][T11772] FAULT_INJECTION: forcing a failure. [ 3037.707441][T11772] name failslab, interval 1, probability 0, space 0, times 0 [ 3037.710672][T11772] CPU: 0 UID: 0 PID: 11772 Comm: syz.1.2595 Tainted: G W syzkaller #0 PREEMPT [ 3037.710811][T11772] Tainted: [W]=WARN [ 3037.710843][T11772] Hardware name: linux,dummy-virt (DT) [ 3037.710880][T11772] Call trace: [ 3037.710975][T11772] show_stack+0x18/0x24 (C) [ 3037.711073][T11772] dump_stack_lvl+0x60/0x80 [ 3037.711140][T11772] dump_stack+0x18/0x24 [ 3037.711210][T11772] should_fail_ex+0x1e0/0x238 [ 3037.711280][T11772] should_failslab+0x54/0x80 [ 3037.711344][T11772] kmem_cache_alloc_noprof+0x54/0x458 [ 3037.711414][T11772] security_inode_alloc+0x30/0x1a0 [ 3037.711482][T11772] inode_init_always_gfp+0x174/0x254 [ 3037.711549][T11772] alloc_inode+0x40/0xdc [ 3037.711613][T11772] sock_alloc+0x20/0xa0 [ 3037.711677][T11772] do_accept+0x78/0x1a8 [ 3037.711739][T11772] __sys_accept4+0x84/0x118 [ 3037.711802][T11772] __arm64_sys_accept4+0x1c/0x38 [ 3037.711866][T11772] invoke_syscall+0x54/0x10c [ 3037.711938][T11772] el0_svc_common.constprop.0+0x40/0xe0 [ 3037.712001][T11772] do_el0_svc+0x1c/0x34 [ 3037.712061][T11772] el0_svc+0x38/0x1fc [ 3037.712130][T11772] el0t_64_sync_handler+0xa0/0xe4 [ 3037.712202][T11772] el0t_64_sync+0x1a4/0x1a8 [ 3038.005344][T11775] input: syz0 as /devices/virtual/input/input80 [ 3039.498738][T11780] FAULT_INJECTION: forcing a failure. [ 3039.498738][T11780] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3039.502265][T11780] CPU: 0 UID: 0 PID: 11780 Comm: syz.0.2596 Tainted: G W syzkaller #0 PREEMPT [ 3039.502420][T11780] Tainted: [W]=WARN [ 3039.502456][T11780] Hardware name: linux,dummy-virt (DT) [ 3039.502496][T11780] Call trace: [ 3039.502530][T11780] show_stack+0x18/0x24 (C) [ 3039.502636][T11780] dump_stack_lvl+0x60/0x80 [ 3039.502710][T11780] dump_stack+0x18/0x24 [ 3039.502791][T11780] should_fail_ex+0x1e0/0x238 [ 3039.502867][T11780] should_fail+0x14/0x40 [ 3039.502970][T11780] get_futex_key+0xdc/0x620 [ 3039.503045][T11780] futex_lock_pi+0xbc/0x3d4 [ 3039.503116][T11780] do_futex+0xf4/0x210 [ 3039.503186][T11780] __arm64_sys_futex+0x100/0x1a0 [ 3039.503257][T11780] invoke_syscall+0x54/0x10c [ 3039.503330][T11780] el0_svc_common.constprop.0+0x40/0xe0 [ 3039.503402][T11780] do_el0_svc+0x1c/0x34 [ 3039.503471][T11780] el0_svc+0x38/0x1fc [ 3039.503547][T11780] el0t_64_sync_handler+0xa0/0xe4 [ 3039.503619][T11780] el0t_64_sync+0x1a4/0x1a8 [ 3049.097952][T11808] input: syz0 as /devices/virtual/input/input81 [ 3064.075171][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2610'. [ 3067.303078][T11832] input: syz0 as /devices/virtual/input/input82 [ 3080.065815][T11867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3080.067196][T11867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3083.003787][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2628'. [ 3084.046287][T11911] input: syz0 as /devices/virtual/input/input83 [ 3085.527320][T11921] kernel profiling enabled (shift: 63) [ 3085.528844][T11921] profiling shift: 63 too large [ 3088.526372][T11938] input: syz1 as /devices/virtual/input/input84 [ 3106.048013][T11985] FAULT_INJECTION: forcing a failure. [ 3106.048013][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.048393][T11985] CPU: 1 UID: 0 PID: 11985 Comm: syz.0.2666 Tainted: G W syzkaller #0 PREEMPT [ 3106.048514][T11985] Tainted: [W]=WARN [ 3106.048551][T11985] Hardware name: linux,dummy-virt (DT) [ 3106.048594][T11985] Call trace: [ 3106.048631][T11985] show_stack+0x18/0x24 (C) [ 3106.048731][T11985] dump_stack_lvl+0x60/0x80 [ 3106.048802][T11985] dump_stack+0x18/0x24 [ 3106.048874][T11985] should_fail_ex+0x1e0/0x238 [ 3106.048949][T11985] should_failslab+0x54/0x80 [ 3106.049021][T11985] kmem_cache_alloc_noprof+0x54/0x458 [ 3106.049096][T11985] do_getname+0x3c/0x1a0 [ 3106.049161][T11985] getname_flags+0x14/0x20 [ 3106.049229][T11985] do_sys_openat2+0x5c/0x104 [ 3106.049321][T11985] __arm64_sys_openat+0x64/0xc0 [ 3106.049391][T11985] invoke_syscall+0x54/0x10c [ 3106.049462][T11985] el0_svc_common.constprop.0+0x40/0xe0 [ 3106.049531][T11985] do_el0_svc+0x1c/0x34 [ 3106.049664][T11985] el0_svc+0x38/0x1fc [ 3106.049744][T11985] el0t_64_sync_handler+0xa0/0xe4 [ 3106.049819][T11985] el0t_64_sync+0x1a4/0x1a8 [ 3106.252621][T11989] FAULT_INJECTION: forcing a failure. [ 3106.252621][T11989] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.254729][T11989] CPU: 0 UID: 0 PID: 11989 Comm: syz.0.2668 Tainted: G W syzkaller #0 PREEMPT [ 3106.254883][T11989] Tainted: [W]=WARN [ 3106.254946][T11989] Hardware name: linux,dummy-virt (DT) [ 3106.254987][T11989] Call trace: [ 3106.255019][T11989] show_stack+0x18/0x24 (C) [ 3106.255133][T11989] dump_stack_lvl+0x60/0x80 [ 3106.255215][T11989] dump_stack+0x18/0x24 [ 3106.255289][T11989] should_fail_ex+0x1e0/0x238 [ 3106.255372][T11989] should_failslab+0x54/0x80 [ 3106.255446][T11989] kmem_cache_alloc_noprof+0x54/0x458 [ 3106.255522][T11989] do_getname+0x3c/0x1a0 [ 3106.255588][T11989] getname_flags+0x14/0x20 [ 3106.255658][T11989] do_sys_openat2+0x5c/0x104 [ 3106.255742][T11989] __arm64_sys_openat+0x64/0xc0 [ 3106.255818][T11989] invoke_syscall+0x54/0x10c [ 3106.255885][T11989] el0_svc_common.constprop.0+0x40/0xe0 [ 3106.255956][T11989] do_el0_svc+0x1c/0x34 [ 3106.256071][T11989] el0_svc+0x38/0x1fc [ 3106.256175][T11989] el0t_64_sync_handler+0xa0/0xe4 [ 3106.256252][T11989] el0t_64_sync+0x1a4/0x1a8 [ 3107.153970][T11999] FAULT_INJECTION: forcing a failure. [ 3107.153970][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.154311][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.1.2672 Tainted: G W syzkaller #0 PREEMPT [ 3107.154430][T11999] Tainted: [W]=WARN [ 3107.154467][T11999] Hardware name: linux,dummy-virt (DT) [ 3107.154509][T11999] Call trace: [ 3107.154542][T11999] show_stack+0x18/0x24 (C) [ 3107.154647][T11999] dump_stack_lvl+0x60/0x80 [ 3107.154720][T11999] dump_stack+0x18/0x24 [ 3107.154791][T11999] should_fail_ex+0x1e0/0x238 [ 3107.154866][T11999] should_failslab+0x54/0x80 [ 3107.154982][T11999] kmem_cache_alloc_noprof+0x54/0x458 [ 3107.155064][T11999] do_getname+0x3c/0x1a0 [ 3107.155134][T11999] getname_flags+0x14/0x20 [ 3107.155206][T11999] do_sys_openat2+0x5c/0x104 [ 3107.155282][T11999] __arm64_sys_openat+0x64/0xc0 [ 3107.155356][T11999] invoke_syscall+0x54/0x10c [ 3107.155429][T11999] el0_svc_common.constprop.0+0x40/0xe0 [ 3107.155502][T11999] do_el0_svc+0x1c/0x34 [ 3107.155570][T11999] el0_svc+0x38/0x1fc [ 3107.155649][T11999] el0t_64_sync_handler+0xa0/0xe4 [ 3107.155724][T11999] el0t_64_sync+0x1a4/0x1a8 [ 3111.388241][T12012] input: syz0 as /devices/virtual/input/input85 [ 3115.125633][T12018] input: syz0 as /devices/virtual/input/input86 [ 3146.984885][T12095] input: syz0 as /devices/virtual/input/input88 [ 3156.298459][T12119] FAULT_INJECTION: forcing a failure. [ 3156.298459][T12119] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.298874][T12119] CPU: 1 UID: 0 PID: 12119 Comm: syz.0.2704 Tainted: G W syzkaller #0 PREEMPT [ 3156.299038][T12119] Tainted: [W]=WARN [ 3156.299076][T12119] Hardware name: linux,dummy-virt (DT) [ 3156.299117][T12119] Call trace: [ 3156.299150][T12119] show_stack+0x18/0x24 (C) [ 3156.299258][T12119] dump_stack_lvl+0x60/0x80 [ 3156.299335][T12119] dump_stack+0x18/0x24 [ 3156.299409][T12119] should_fail_ex+0x1e0/0x238 [ 3156.299514][T12119] should_failslab+0x54/0x80 [ 3156.299607][T12119] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 3156.299786][T12119] __d_alloc+0x3c/0x280 [ 3156.299880][T12119] d_alloc_pseudo+0x10/0x50 [ 3156.299998][T12119] alloc_file_pseudo+0x7c/0x160 [ 3156.300101][T12119] sock_alloc_file+0x40/0xd8 [ 3156.300202][T12119] do_accept+0xb4/0x1a8 [ 3156.300508][T12119] __sys_accept4+0x84/0x118 [ 3156.300613][T12119] __arm64_sys_accept4+0x1c/0x38 [ 3156.300683][T12119] invoke_syscall+0x54/0x10c [ 3156.300754][T12119] el0_svc_common.constprop.0+0x40/0xe0 [ 3156.300830][T12119] do_el0_svc+0x1c/0x34 [ 3156.300900][T12119] el0_svc+0x38/0x1fc [ 3156.301027][T12119] el0t_64_sync_handler+0xa0/0xe4 [ 3156.301105][T12119] el0t_64_sync+0x1a4/0x1a8 [ 3159.952077][T12141] input: syz1 as /devices/virtual/input/input89 [ 3163.481611][T12134] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3169.631453][T12163] input: syz0 as /devices/virtual/input/input90 [ 3176.092523][T12174] input: syz0 as /devices/virtual/input/input91 [ 3177.108176][T12178] input: syz0 as /devices/virtual/input/input92 [ 3186.521416][T12196] input: syz0 as /devices/virtual/input/input93 [ 3190.236316][T12204] FAULT_INJECTION: forcing a failure. [ 3190.236316][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.243995][T12204] CPU: 0 UID: 0 PID: 12204 Comm: syz.1.2728 Tainted: G W syzkaller #0 PREEMPT [ 3190.244149][T12204] Tainted: [W]=WARN [ 3190.244186][T12204] Hardware name: linux,dummy-virt (DT) [ 3190.244234][T12204] Call trace: [ 3190.244270][T12204] show_stack+0x18/0x24 (C) [ 3190.244372][T12204] dump_stack_lvl+0x60/0x80 [ 3190.244439][T12204] dump_stack+0x18/0x24 [ 3190.244507][T12204] should_fail_ex+0x1e0/0x238 [ 3190.244576][T12204] should_failslab+0x54/0x80 [ 3190.244646][T12204] kmem_cache_alloc_noprof+0x54/0x458 [ 3190.244728][T12204] do_fanotify_mark+0xac0/0xec8 [ 3190.244799][T12204] __arm64_sys_fanotify_mark+0x24/0x40 [ 3190.244865][T12204] invoke_syscall+0x54/0x10c [ 3190.244931][T12204] el0_svc_common.constprop.0+0x40/0xe0 [ 3190.244999][T12204] do_el0_svc+0x1c/0x34 [ 3190.245065][T12204] el0_svc+0x38/0x1fc [ 3190.245142][T12204] el0t_64_sync_handler+0xa0/0xe4 [ 3190.245215][T12204] el0t_64_sync+0x1a4/0x1a8 [ 3190.391012][T12206] input: syz0 as /devices/virtual/input/input94 [ 3196.274195][T12214] input: syz1 as /devices/virtual/input/input95 [ 3198.464442][T12220] FAULT_INJECTION: forcing a failure. [ 3198.464442][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 3198.464843][T12220] CPU: 1 UID: 0 PID: 12220 Comm: syz.1.2733 Tainted: G W syzkaller #0 PREEMPT [ 3198.464973][T12220] Tainted: [W]=WARN [ 3198.465011][T12220] Hardware name: linux,dummy-virt (DT) [ 3198.465049][T12220] Call trace: [ 3198.465082][T12220] show_stack+0x18/0x24 (C) [ 3198.465214][T12220] dump_stack_lvl+0x60/0x80 [ 3198.465289][T12220] dump_stack+0x18/0x24 [ 3198.465377][T12220] should_fail_ex+0x1e0/0x238 [ 3198.465458][T12220] should_failslab+0x54/0x80 [ 3198.465529][T12220] __kvmalloc_node_noprof+0xc8/0x65c [ 3198.465618][T12220] seq_read_iter+0x2a8/0x480 [ 3198.465716][T12220] proc_reg_read_iter+0x84/0xe0 [ 3198.465818][T12220] copy_splice_read+0x188/0x320 [ 3198.465914][T12220] do_splice_read+0x7c/0xcc [ 3198.466003][T12220] splice_direct_to_actor+0xac/0x284 [ 3198.466077][T12220] do_splice_direct+0x68/0xb8 [ 3198.466149][T12220] do_sendfile+0x338/0x3c0 [ 3198.466217][T12220] __arm64_sys_sendfile64+0xf8/0x100 [ 3198.466310][T12220] invoke_syscall+0x54/0x10c [ 3198.466394][T12220] el0_svc_common.constprop.0+0x40/0xe0 [ 3198.466495][T12220] do_el0_svc+0x1c/0x34 [ 3198.466617][T12220] el0_svc+0x38/0x1fc [ 3198.466718][T12220] el0t_64_sync_handler+0xa0/0xe4 [ 3198.466962][T12220] el0t_64_sync+0x1a4/0x1a8 [ 3201.521797][T12226] input: syz0 as /devices/virtual/input/input96 [ 3208.058594][T12237] FAULT_INJECTION: forcing a failure. [ 3208.058594][T12237] name failslab, interval 1, probability 0, space 0, times 0 [ 3208.059093][T12237] CPU: 1 UID: 0 PID: 12237 Comm: syz.1.2738 Tainted: G W syzkaller #0 PREEMPT [ 3208.059207][T12237] Tainted: [W]=WARN [ 3208.059244][T12237] Hardware name: linux,dummy-virt (DT) [ 3208.059287][T12237] Call trace: [ 3208.059346][T12237] show_stack+0x18/0x24 (C) [ 3208.059480][T12237] dump_stack_lvl+0x60/0x80 [ 3208.059577][T12237] dump_stack+0x18/0x24 [ 3208.059700][T12237] should_fail_ex+0x1e0/0x238 [ 3208.059788][T12237] should_failslab+0x54/0x80 [ 3208.059868][T12237] __kmalloc_cache_noprof+0x58/0x470 [ 3208.059961][T12237] snd_midi_event_new+0x34/0xa0 [ 3208.060078][T12237] snd_virmidi_output_open+0x50/0x120 [ 3208.060183][T12237] open_substream+0xf8/0x1f8 [ 3208.060285][T12237] rawmidi_open_priv+0x1b0/0x228 [ 3208.060366][T12237] snd_rawmidi_open+0x184/0x33c [ 3208.060460][T12237] snd_open+0x98/0x198 [ 3208.060540][T12237] chrdev_open+0xac/0x220 [ 3208.060643][T12237] do_dentry_open+0x128/0x4fc [ 3208.060725][T12237] vfs_open+0x2c/0xe8 [ 3208.060803][T12237] path_openat+0x5b4/0x960 [ 3208.060881][T12237] do_file_open+0xb0/0x168 [ 3208.060966][T12237] do_sys_openat2+0x84/0x104 [ 3208.061044][T12237] __arm64_sys_openat+0x64/0xc0 [ 3208.061122][T12237] invoke_syscall+0x54/0x10c [ 3208.061250][T12237] el0_svc_common.constprop.0+0x40/0xe0 [ 3208.061349][T12237] do_el0_svc+0x1c/0x34 [ 3208.061450][T12237] el0_svc+0x38/0x1fc [ 3208.061556][T12237] el0t_64_sync_handler+0xa0/0xe4 [ 3208.061652][T12237] el0t_64_sync+0x1a4/0x1a8 [ 3208.241423][T12239] input: syz0 as /devices/virtual/input/input97 [ 3208.370798][T12242] input: syz0 as /devices/virtual/input/input98 [ 3215.358544][T12249] input: syz0 as /devices/virtual/input/input99 [ 3219.397645][T12258] input: syz0 as /devices/virtual/input/input100 [ 3225.134341][T12267] input: syz0 as /devices/virtual/input/input101 [ 3242.127281][T12293] input: syz0 as /devices/virtual/input/input102 [ 3249.346016][T12309] input: syz0 as /devices/virtual/input/input103 [ 3254.132988][T12313] input: syz0 as /devices/virtual/input/input104 [ 3261.953398][T12335] FAULT_INJECTION: forcing a failure. [ 3261.953398][T12335] name failslab, interval 1, probability 0, space 0, times 0 [ 3261.955532][T12335] CPU: 0 UID: 0 PID: 12335 Comm: syz.1.2762 Tainted: G W syzkaller #0 PREEMPT [ 3261.955698][T12335] Tainted: [W]=WARN [ 3261.955734][T12335] Hardware name: linux,dummy-virt (DT) [ 3261.955774][T12335] Call trace: [ 3261.955807][T12335] show_stack+0x18/0x24 (C) [ 3261.955934][T12335] dump_stack_lvl+0x60/0x80 [ 3261.956011][T12335] dump_stack+0x18/0x24 [ 3261.956082][T12335] should_fail_ex+0x1e0/0x238 [ 3261.956156][T12335] should_failslab+0x54/0x80 [ 3261.956227][T12335] __kmalloc_noprof+0xac/0x520 [ 3261.956303][T12335] sock_kmalloc+0x50/0xc4 [ 3261.956381][T12335] skcipher_accept_parent_nokey+0x2c/0xe0 [ 3261.956458][T12335] af_alg_accept+0x118/0x200 [ 3261.956527][T12335] alg_accept+0x14/0x20 [ 3261.956595][T12335] do_accept+0xfc/0x1a8 [ 3261.956661][T12335] __sys_accept4+0x84/0x118 [ 3261.956728][T12335] __arm64_sys_accept+0x1c/0x2c [ 3261.956797][T12335] invoke_syscall+0x54/0x10c [ 3261.956908][T12335] el0_svc_common.constprop.0+0x40/0xe0 [ 3261.956986][T12335] do_el0_svc+0x1c/0x34 [ 3261.957053][T12335] el0_svc+0x38/0x1fc [ 3261.957133][T12335] el0t_64_sync_handler+0xa0/0xe4 [ 3261.957208][T12335] el0t_64_sync+0x1a4/0x1a8 [ 3264.143691][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2765'. [ 3268.611297][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2769'. [ 3270.381168][T12372] input: syz0 as /devices/virtual/input/input105 [ 3274.423145][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2774'. [ 3281.492454][T12403] input: syz0 as /devices/virtual/input/input106 [ 3291.029293][T12421] input: syz0 as /devices/virtual/input/input107 [ 3301.787207][T12453] input: syz0 as /devices/virtual/input/input108 [ 3312.431437][T12474] input: syz0 as /devices/virtual/input/input109 [ 3326.336548][T12509] input: syz1 as /devices/virtual/input/input110 [ 3335.177521][T12532] FAULT_INJECTION: forcing a failure. [ 3335.177521][T12532] name failslab, interval 1, probability 0, space 0, times 0 [ 3335.177877][T12532] CPU: 1 UID: 0 PID: 12532 Comm: syz.0.2812 Tainted: G W syzkaller #0 PREEMPT [ 3335.177987][T12532] Tainted: [W]=WARN [ 3335.178018][T12532] Hardware name: linux,dummy-virt (DT) [ 3335.178053][T12532] Call trace: [ 3335.178083][T12532] show_stack+0x18/0x24 (C) [ 3335.178179][T12532] dump_stack_lvl+0x60/0x80 [ 3335.178245][T12532] dump_stack+0x18/0x24 [ 3335.178384][T12532] should_fail_ex+0x1e0/0x238 [ 3335.178451][T12532] should_failslab+0x54/0x80 [ 3335.178518][T12532] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 3335.178588][T12532] sock_alloc_inode+0x24/0x94 [ 3335.178653][T12532] alloc_inode+0x28/0xdc [ 3335.178726][T12532] sock_alloc+0x20/0xa0 [ 3335.178784][T12532] do_accept+0x78/0x1a8 [ 3335.178845][T12532] __sys_accept4+0x84/0x118 [ 3335.178933][T12532] __arm64_sys_accept4+0x1c/0x38 [ 3335.178997][T12532] invoke_syscall+0x54/0x10c [ 3335.179061][T12532] el0_svc_common.constprop.0+0x40/0xe0 [ 3335.179124][T12532] do_el0_svc+0x1c/0x34 [ 3335.179184][T12532] el0_svc+0x38/0x1fc [ 3335.179255][T12532] el0t_64_sync_handler+0xa0/0xe4 [ 3335.179322][T12532] el0t_64_sync+0x1a4/0x1a8 [ 3349.649041][T12571] input: syz0 as /devices/virtual/input/input111 [ 3359.275464][T12603] FAULT_INJECTION: forcing a failure. [ 3359.275464][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 3359.281092][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.1.2833 Tainted: G W syzkaller #0 PREEMPT [ 3359.281188][T12603] Tainted: [W]=WARN [ 3359.281207][T12603] Hardware name: linux,dummy-virt (DT) [ 3359.281228][T12603] Call trace: [ 3359.281246][T12603] show_stack+0x18/0x24 (C) [ 3359.281307][T12603] dump_stack_lvl+0x60/0x80 [ 3359.281345][T12603] dump_stack+0x18/0x24 [ 3359.281379][T12603] should_fail_ex+0x1e0/0x238 [ 3359.281429][T12603] should_failslab+0x54/0x80 [ 3359.281465][T12603] __kmalloc_noprof+0xac/0x520 [ 3359.281504][T12603] tomoyo_realpath_from_path+0x44/0x1d4 [ 3359.281543][T12603] tomoyo_path_number_perm+0xe0/0x21c [ 3359.281580][T12603] tomoyo_file_ioctl+0x1c/0x30 [ 3359.281616][T12603] security_file_ioctl+0x8c/0x19c [ 3359.281677][T12603] __arm64_sys_ioctl+0x44/0x100 [ 3359.281730][T12603] invoke_syscall+0x54/0x10c [ 3359.281766][T12603] el0_svc_common.constprop.0+0x40/0xe0 [ 3359.281819][T12603] do_el0_svc+0x1c/0x34 [ 3359.281880][T12603] el0_svc+0x38/0x1fc [ 3359.281926][T12603] el0t_64_sync_handler+0xa0/0xe4 [ 3359.281963][T12603] el0t_64_sync+0x1a4/0x1a8 [ 3359.294352][T12603] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3361.453294][T12615] FAULT_INJECTION: forcing a failure. [ 3361.453294][T12615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3361.453685][T12615] CPU: 0 UID: 0 PID: 12615 Comm: syz.1.2837 Tainted: G W syzkaller #0 PREEMPT [ 3361.453801][T12615] Tainted: [W]=WARN [ 3361.453837][T12615] Hardware name: linux,dummy-virt (DT) [ 3361.453880][T12615] Call trace: [ 3361.453916][T12615] show_stack+0x18/0x24 (C) [ 3361.454021][T12615] dump_stack_lvl+0x60/0x80 [ 3361.454146][T12615] dump_stack+0x18/0x24 [ 3361.454225][T12615] should_fail_ex+0x1e0/0x238 [ 3361.454329][T12615] should_fail+0x14/0x40 [ 3361.454421][T12615] should_fail_usercopy+0x1c/0x40 [ 3361.454514][T12615] copy_from_sockptr_offset+0x58/0x118 [ 3361.454598][T12615] do_tcp_setsockopt+0x1b4/0xb80 [ 3361.454683][T12615] tcp_setsockopt+0x30/0x40 [ 3361.454785][T12615] sock_common_setsockopt+0x1c/0x30 [ 3361.454906][T12615] do_sock_setsockopt+0xa4/0x198 [ 3361.455000][T12615] __sys_setsockopt+0x7c/0x100 [ 3361.455097][T12615] __arm64_sys_setsockopt+0x24/0x40 [ 3361.455172][T12615] invoke_syscall+0x54/0x10c [ 3361.455285][T12615] el0_svc_common.constprop.0+0x40/0xe0 [ 3361.455408][T12615] do_el0_svc+0x1c/0x34 [ 3361.455603][T12615] el0_svc+0x38/0x1fc [ 3361.455707][T12615] el0t_64_sync_handler+0xa0/0xe4 [ 3361.455834][T12615] el0t_64_sync+0x1a4/0x1a8 [ 3364.525703][T12622] FAULT_INJECTION: forcing a failure. [ 3364.525703][T12622] name failslab, interval 1, probability 0, space 0, times 0 [ 3364.537448][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.1.2840 Tainted: G W syzkaller #0 PREEMPT [ 3364.537542][T12622] Tainted: [W]=WARN [ 3364.537560][T12622] Hardware name: linux,dummy-virt (DT) [ 3364.537581][T12622] Call trace: [ 3364.537598][T12622] show_stack+0x18/0x24 (C) [ 3364.537657][T12622] dump_stack_lvl+0x60/0x80 [ 3364.537695][T12622] dump_stack+0x18/0x24 [ 3364.537731][T12622] should_fail_ex+0x1e0/0x238 [ 3364.537770][T12622] should_failslab+0x54/0x80 [ 3364.537807][T12622] __kmalloc_noprof+0xac/0x520 [ 3364.537851][T12622] tomoyo_realpath_from_path+0x44/0x1d4 [ 3364.537902][T12622] tomoyo_path_number_perm+0xe0/0x21c [ 3364.537984][T12622] tomoyo_file_ioctl+0x1c/0x30 [ 3364.538065][T12622] security_file_ioctl+0x8c/0x19c [ 3364.538139][T12622] __arm64_sys_ioctl+0x44/0x100 [ 3364.538222][T12622] invoke_syscall+0x54/0x10c [ 3364.538299][T12622] el0_svc_common.constprop.0+0x40/0xe0 [ 3364.538389][T12622] do_el0_svc+0x1c/0x34 [ 3364.538468][T12622] el0_svc+0x38/0x1fc [ 3364.538554][T12622] el0t_64_sync_handler+0xa0/0xe4 [ 3364.538642][T12622] el0t_64_sync+0x1a4/0x1a8 [ 3364.548147][T12622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3393.559510][ T7592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.652984][ T7592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.776594][ T7592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3393.907046][ T7592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3394.401896][ T7592] pimreg: left allmulticast mode [ 3394.784388][ T7592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3394.807629][ T7592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3394.827860][ T7592] bond0 (unregistering): Released all slaves [ 3395.324048][ T7592] hsr_slave_0: left promiscuous mode [ 3395.335203][ T7592] hsr_slave_1: left promiscuous mode [ 3395.356041][ T7592] veth1_macvtap: left promiscuous mode [ 3395.357540][ T7592] veth1_vlan: left promiscuous mode [ 3395.363306][ T7592] veth0_vlan: left promiscuous mode [ 3396.417961][ T3220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3397.373537][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3397.396504][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3397.644356][ T3220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3398.704393][T12788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3398.706250][T12788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3398.871632][T12717] hsr_slave_0: entered promiscuous mode [ 3398.885522][T12717] hsr_slave_1: entered promiscuous mode [ 3398.888942][T12717] debugfs: 'hsr0' already exists in 'hsr' [ 3398.889740][T12717] Cannot create hsr debugfs directory [ 3398.907575][ T3220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3400.443056][T12717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3400.464196][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3400.467595][T12717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3400.482539][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3400.486537][T12717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3400.503146][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3400.513008][T12717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3400.541574][T12717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3401.624365][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3404.128094][T12717] veth0_vlan: entered promiscuous mode [ 3404.194509][T12717] veth1_vlan: entered promiscuous mode [ 3404.339518][T12717] veth0_macvtap: entered promiscuous mode [ 3404.376560][T12717] veth1_macvtap: entered promiscuous mode [ 3404.651361][ T4062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3404.651672][ T4062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3404.651854][ T4062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3404.651989][ T4062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3407.315379][T12902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3407.342662][T12902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3408.532499][T12902] hsr_slave_0: entered promiscuous mode [ 3408.545152][T12902] hsr_slave_1: entered promiscuous mode [ 3408.553023][T12902] debugfs: 'hsr0' already exists in 'hsr' [ 3408.553458][T12902] Cannot create hsr debugfs directory [ 3409.866837][T12902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3409.907895][T12902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3409.915985][T12902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3409.932104][T12902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3409.940573][T12902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3409.962074][T12902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3409.967453][T12902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3409.986961][T12902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3410.892373][T12902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3413.258282][T12902] veth0_vlan: entered promiscuous mode [ 3413.296923][T12902] veth1_vlan: entered promiscuous mode [ 3413.401281][T12902] veth0_macvtap: entered promiscuous mode [ 3413.426228][T12902] veth1_macvtap: entered promiscuous mode [ 3413.567412][ T4062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3413.570787][ T4062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3413.571334][ T4062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3413.600528][ T6193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3421.084300][T13050] syz.0.2912 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3422.514157][ T28] audit: type=1326 audit(2000002086.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.514689][ T28] audit: type=1326 audit(2000002086.960:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.521594][ T28] audit: type=1326 audit(2000002086.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.524079][ T28] audit: type=1326 audit(2000002086.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.527560][ T28] audit: type=1326 audit(2000002086.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.530710][ T28] audit: type=1326 audit(2000002086.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.533016][ T28] audit: type=1326 audit(2000002086.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.536665][ T28] audit: type=1326 audit(2000002086.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.540002][ T28] audit: type=1326 audit(2000002086.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3422.542441][ T28] audit: type=1326 audit(2000002086.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13062 comm="syz.0.2918" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3424.594778][T13073] vxcan0: entered allmulticast mode [ 3424.597242][T13072] vxcan0: left allmulticast mode [ 3438.887710][T13186] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3438.888634][T13186] syzkaller0: linktype set to 27 [ 3443.759309][T13214] TC_ACT_REPEAT abuse ? [ 3444.541503][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 3444.541957][ T28] audit: type=1326 audit(2000002108.980:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.550362][ T28] audit: type=1326 audit(2000002108.990:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.550848][ T28] audit: type=1326 audit(2000002108.990:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.556049][ T28] audit: type=1326 audit(2000002109.000:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.558337][ T28] audit: type=1326 audit(2000002109.000:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.558523][ T28] audit: type=1326 audit(2000002109.000:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.580284][ T28] audit: type=1326 audit(2000002109.010:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.580741][ T28] audit: type=1326 audit(2000002109.020:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.581063][ T28] audit: type=1326 audit(2000002109.020:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.581274][ T28] audit: type=1326 audit(2000002109.020:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.1.2990" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b1792a8 code=0x7ffc0000 [ 3444.728824][T13223] FAULT_INJECTION: forcing a failure. [ 3444.728824][T13223] name failslab, interval 1, probability 0, space 0, times 0 [ 3444.729313][T13223] CPU: 0 UID: 0 PID: 13223 Comm: syz.1.2990 Tainted: G W syzkaller #0 PREEMPT [ 3444.729429][T13223] Tainted: [W]=WARN [ 3444.729467][T13223] Hardware name: linux,dummy-virt (DT) [ 3444.729507][T13223] Call trace: [ 3444.729540][T13223] show_stack+0x18/0x24 (C) [ 3444.729702][T13223] dump_stack_lvl+0x60/0x80 [ 3444.729800][T13223] dump_stack+0x18/0x24 [ 3444.729879][T13223] should_fail_ex+0x1e0/0x238 [ 3444.729984][T13223] should_failslab+0x54/0x80 [ 3444.730060][T13223] kmem_cache_alloc_node_noprof+0x5c/0x448 [ 3444.730744][T13223] __alloc_skb+0x74/0x2e0 [ 3444.730836][T13223] audit_log_start+0x264/0x3d8 [ 3444.731005][T13223] audit_seccomp+0x38/0xb0 [ 3444.731080][T13223] __seccomp_filter+0x44c/0x660 [ 3444.731175][T13223] __seccomp_permit_syscall+0x8c/0xe4 [ 3444.731280][T13223] syscall_trace_enter+0xf4/0x11c [ 3444.731388][T13223] el0_svc_common.constprop.0+0xa4/0xe0 [ 3444.731489][T13223] do_el0_svc+0x1c/0x34 [ 3444.731566][T13223] el0_svc+0x38/0x1fc [ 3444.731688][T13223] el0t_64_sync_handler+0xa0/0xe4 [ 3444.731787][T13223] el0t_64_sync+0x1a4/0x1a8 [ 3448.006338][T13248] FAULT_INJECTION: forcing a failure. [ 3448.006338][T13248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3448.006752][T13248] CPU: 0 UID: 0 PID: 13248 Comm: syz.1.3000 Tainted: G W syzkaller #0 PREEMPT [ 3448.006871][T13248] Tainted: [W]=WARN [ 3448.006968][T13248] Hardware name: linux,dummy-virt (DT) [ 3448.007011][T13248] Call trace: [ 3448.007044][T13248] show_stack+0x18/0x24 (C) [ 3448.007232][T13248] dump_stack_lvl+0x60/0x80 [ 3448.007407][T13248] dump_stack+0x18/0x24 [ 3448.007552][T13248] should_fail_ex+0x1e0/0x238 [ 3448.007688][T13248] should_fail+0x14/0x40 [ 3448.007824][T13248] should_fail_usercopy+0x1c/0x40 [ 3448.007987][T13248] __arm64_sys_rt_sigtimedwait+0x58/0x168 [ 3448.008156][T13248] invoke_syscall+0x54/0x10c [ 3448.008327][T13248] el0_svc_common.constprop.0+0x40/0xe0 [ 3448.008564][T13248] do_el0_svc+0x1c/0x34 [ 3448.008675][T13248] el0_svc+0x38/0x1fc [ 3448.008812][T13248] el0t_64_sync_handler+0xa0/0xe4 [ 3448.008950][T13248] el0t_64_sync+0x1a4/0x1a8 [ 3448.175132][T13250] FAULT_INJECTION: forcing a failure. [ 3448.175132][T13250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3448.175408][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.1.3001 Tainted: G W syzkaller #0 PREEMPT [ 3448.175482][T13250] Tainted: [W]=WARN [ 3448.175502][T13250] Hardware name: linux,dummy-virt (DT) [ 3448.175545][T13250] Call trace: [ 3448.175580][T13250] show_stack+0x18/0x24 (C) [ 3448.175655][T13250] dump_stack_lvl+0x60/0x80 [ 3448.175733][T13250] dump_stack+0x18/0x24 [ 3448.175778][T13250] should_fail_ex+0x1e0/0x238 [ 3448.175819][T13250] should_fail+0x14/0x40 [ 3448.175862][T13250] should_fail_usercopy+0x1c/0x40 [ 3448.175901][T13250] copy_from_sockptr_offset.constprop.0+0x54/0x114 [ 3448.175979][T13250] copy_group_source_from_sockptr+0x78/0x178 [ 3448.176020][T13250] do_ipv6_mcast_group_source+0x64/0x12c [ 3448.176065][T13250] do_ipv6_setsockopt+0x650/0x14dc [ 3448.176116][T13250] ipv6_setsockopt+0x5c/0xe4 [ 3448.176171][T13250] udpv6_setsockopt+0x1c/0x40 [ 3448.176217][T13250] sock_common_setsockopt+0x1c/0x30 [ 3448.176301][T13250] do_sock_setsockopt+0xa4/0x198 [ 3448.176476][T13250] __sys_setsockopt+0x7c/0x100 [ 3448.176575][T13250] __arm64_sys_setsockopt+0x24/0x40 [ 3448.176674][T13250] invoke_syscall+0x54/0x10c [ 3448.176775][T13250] el0_svc_common.constprop.0+0x40/0xe0 [ 3448.176888][T13250] do_el0_svc+0x1c/0x34 [ 3448.176975][T13250] el0_svc+0x38/0x1fc [ 3448.177072][T13250] el0t_64_sync_handler+0xa0/0xe4 [ 3448.177187][T13250] el0t_64_sync+0x1a4/0x1a8 [ 3449.374049][T13264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3008'. [ 3450.644994][T13281] FAULT_INJECTION: forcing a failure. [ 3450.644994][T13281] name failslab, interval 1, probability 0, space 0, times 0 [ 3450.647118][T13281] CPU: 1 UID: 0 PID: 13281 Comm: syz.0.3016 Tainted: G W syzkaller #0 PREEMPT [ 3450.647278][T13281] Tainted: [W]=WARN [ 3450.647319][T13281] Hardware name: linux,dummy-virt (DT) [ 3450.647359][T13281] Call trace: [ 3450.647393][T13281] show_stack+0x18/0x24 (C) [ 3450.647513][T13281] dump_stack_lvl+0x60/0x80 [ 3450.647592][T13281] dump_stack+0x18/0x24 [ 3450.647666][T13281] should_fail_ex+0x1e0/0x238 [ 3450.647746][T13281] should_failslab+0x54/0x80 [ 3450.647821][T13281] __kmalloc_noprof+0xac/0x520 [ 3450.647901][T13281] x509_key_preparse+0x7c/0x1e0 [ 3450.647989][T13281] asymmetric_key_preparse+0x64/0xa4 [ 3450.648068][T13281] __key_create_or_update+0x1b8/0x4f0 [ 3450.648143][T13281] key_create_or_update+0x14/0x20 [ 3450.648232][T13281] __arm64_sys_add_key+0x128/0x21c [ 3450.648308][T13281] invoke_syscall+0x54/0x10c [ 3450.648384][T13281] el0_svc_common.constprop.0+0x40/0xe0 [ 3450.648462][T13281] do_el0_svc+0x1c/0x34 [ 3450.648535][T13281] el0_svc+0x38/0x1fc [ 3450.648618][T13281] el0t_64_sync_handler+0xa0/0xe4 [ 3450.648697][T13281] el0t_64_sync+0x1a4/0x1a8 [ 3454.569510][T13332] TC_ACT_REPEAT abuse ? [ 3455.781287][T13357] FAULT_INJECTION: forcing a failure. [ 3455.781287][T13357] name failslab, interval 1, probability 0, space 0, times 0 [ 3455.781664][T13357] CPU: 0 UID: 0 PID: 13357 Comm: syz.1.3051 Tainted: G W syzkaller #0 PREEMPT [ 3455.781792][T13357] Tainted: [W]=WARN [ 3455.781831][T13357] Hardware name: linux,dummy-virt (DT) [ 3455.781874][T13357] Call trace: [ 3455.781926][T13357] show_stack+0x18/0x24 (C) [ 3455.782059][T13357] dump_stack_lvl+0x60/0x80 [ 3455.782168][T13357] dump_stack+0x18/0x24 [ 3455.782271][T13357] should_fail_ex+0x1e0/0x238 [ 3455.782358][T13357] should_failslab+0x54/0x80 [ 3455.782456][T13357] __kmalloc_noprof+0xac/0x520 [ 3455.782558][T13357] tomoyo_encode2+0x7c/0x13c [ 3455.782656][T13357] tomoyo_encode+0x28/0x40 [ 3455.782757][T13357] tomoyo_realpath_from_path+0x100/0x1d4 [ 3455.782851][T13357] tomoyo_check_open_permission+0x128/0x190 [ 3455.782982][T13357] tomoyo_file_open+0x30/0x3c [ 3455.783087][T13357] security_file_open+0x74/0x148 [ 3455.783198][T13357] do_dentry_open+0xe0/0x4fc [ 3455.783303][T13357] vfs_open+0x2c/0xe8 [ 3455.783391][T13357] path_openat+0x5b4/0x960 [ 3455.783464][T13357] do_file_open+0xb0/0x168 [ 3455.783538][T13357] do_sys_openat2+0x84/0x104 [ 3455.783615][T13357] __arm64_sys_openat+0x64/0xc0 [ 3455.783756][T13357] invoke_syscall+0x54/0x10c [ 3455.783837][T13357] el0_svc_common.constprop.0+0x40/0xe0 [ 3455.783911][T13357] do_el0_svc+0x1c/0x34 [ 3455.784016][T13357] el0_svc+0x38/0x1fc [ 3455.784098][T13357] el0t_64_sync_handler+0xa0/0xe4 [ 3455.784177][T13357] el0t_64_sync+0x1a4/0x1a8 [ 3455.797833][T13357] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3459.677939][T13434] futex_wake_op: syz.0.3086 tries to shift op by 144; fix this program [ 3459.679205][T13434] futex_wake_op: syz.0.3086 tries to shift op by 144; fix this program [ 3461.502684][T13440] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3088'. [ 3463.555932][T13462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3096'. [ 3463.794819][T10383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3464.832617][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3465.092460][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3465.377265][T13492] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3465.378118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3465.606092][T13498] af_packet: tpacket_rcv: packet too big, clamped from 7 to 4294967272. macoff=96 [ 3465.875121][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3466.051319][T13507] netlink: 'syz.0.3116': attribute type 1 has an invalid length. [ 3466.137887][T13511] ./mnt: Can't lookup blockdev [ 3466.911736][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3467.951122][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3468.113216][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.001863][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.638021][T13534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.639087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.642824][T13534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.649223][T13534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.650346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3469.659050][T13534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3470.033353][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3471.072331][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3471.152005][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3471.265951][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3129'. [ 3471.777635][T13545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3131'. [ 3474.193790][T11678] net_ratelimit: 3 callbacks suppressed [ 3474.194263][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3474.198655][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3475.231901][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3475.791934][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3476.271178][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3477.232268][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3477.320856][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3478.356189][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3479.401053][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3480.272318][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3480.273154][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3480.431651][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3481.471336][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3482.511458][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3483.314813][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3483.551543][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3484.591209][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3484.751279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3485.391691][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3485.631539][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3486.354701][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3486.671593][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3487.710630][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3488.752122][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3489.401612][T11678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3489.797590][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3490.511735][T10383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3490.831213][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3491.871710][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3492.911401][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3493.554024][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3493.950792][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3494.991523][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3494.993228][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3496.031495][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3496.591298][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3497.071156][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3498.111395][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3499.151334][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3499.640735][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3500.194180][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3500.456255][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3500.486769][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3500.513449][ T6193] bond0 (unregistering): Released all slaves [ 3500.680717][ T6193] hsr_slave_0: left promiscuous mode [ 3500.684563][ T6193] hsr_slave_1: left promiscuous mode [ 3501.245266][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3502.281032][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3502.676083][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3503.311265][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3504.361188][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3504.600878][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3505.391332][T13006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3505.711683][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3506.431241][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3507.471315][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3508.511240][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3508.753841][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3509.551971][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3510.591309][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3511.631522][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3511.792113][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3512.465476][T13587] @ÿ: renamed from veth0_vlan (while UP) [ 3512.467734][T13587] FAULT_INJECTION: forcing a failure. [ 3512.467734][T13587] name failslab, interval 1, probability 0, space 0, times 0 [ 3512.472102][T13587] CPU: 0 UID: 0 PID: 13587 Comm: syz.0.3148 Tainted: G W syzkaller #0 PREEMPT [ 3512.472262][T13587] Tainted: [W]=WARN [ 3512.472300][T13587] Hardware name: linux,dummy-virt (DT) [ 3512.472340][T13587] Call trace: [ 3512.472373][T13587] show_stack+0x18/0x24 (C) [ 3512.472485][T13587] dump_stack_lvl+0x60/0x80 [ 3512.472559][T13587] dump_stack+0x18/0x24 [ 3512.472630][T13587] should_fail_ex+0x1e0/0x238 [ 3512.472714][T13587] should_failslab+0x54/0x80 [ 3512.472788][T13587] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 3512.472878][T13587] kstrdup+0x48/0xa0 [ 3512.472959][T13587] device_rename+0x40/0x140 [ 3512.473038][T13587] netif_change_name+0x11c/0x39c [ 3512.473112][T13587] dev_change_name+0x78/0xac [ 3512.473185][T13587] dev_ifsioc+0x3b0/0x60c [ 3512.473262][T13587] dev_ioctl+0x18c/0x514 [ 3512.473335][T13587] sock_do_ioctl+0xdc/0x130 [ 3512.473409][T13587] sock_ioctl+0x264/0x35c [ 3512.473478][T13587] __arm64_sys_ioctl+0xa8/0x100 [ 3512.473556][T13587] invoke_syscall+0x54/0x10c [ 3512.473628][T13587] el0_svc_common.constprop.0+0x40/0xe0 [ 3512.473700][T13587] do_el0_svc+0x1c/0x34 [ 3512.473766][T13587] el0_svc+0x38/0x1fc [ 3512.473844][T13587] el0t_64_sync_handler+0xa0/0xe4 [ 3512.473926][T13587] el0t_64_sync+0x1a4/0x1a8 [ 3512.671319][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3513.711423][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3514.191462][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3514.751667][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3514.831466][T12322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3515.791094][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3516.831451][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3517.871689][T10449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3517.875143][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3518.911287][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3519.748385][ T6193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3519.869089][ T6193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3519.954690][T12892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3519.976048][ T6193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3520.084931][ T6193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3520.647874][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3520.687447][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3520.696565][ T6193] bond0 (unregistering): Released all slaves [ 3520.824166][ T6193] hsr_slave_0: left promiscuous mode [ 3520.826559][ T6193] hsr_slave_1: left promiscuous mode [ 3520.842071][ T6193] veth1_macvtap: left promiscuous mode [ 3520.842328][ T6193] veth0_macvtap: left promiscuous mode [ 3520.843278][ T6193] veth1_vlan: left promiscuous mode [ 3520.843687][ T6193] veth0_vlan: left promiscuous mode [ 3522.513138][ T3220] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3522.872878][T13605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3522.886744][T13605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3523.572516][ T3220] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3523.854257][T13605] hsr_slave_0: entered promiscuous mode [ 3523.859471][T13605] hsr_slave_1: entered promiscuous mode [ 3524.525549][T13605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3524.551082][T13605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3524.561681][ T3220] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3524.564922][T13605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3524.580518][T13605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3524.594056][T13605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3524.604056][T13605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3524.609377][T13605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3524.621556][T13605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3525.337945][T13605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3525.464643][ T3220] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3528.080934][T13605] veth0_vlan: entered promiscuous mode [ 3528.136744][T13605] veth1_vlan: entered promiscuous mode [ 3528.286786][T13605] veth0_macvtap: entered promiscuous mode [ 3528.316963][T13605] veth1_macvtap: entered promiscuous mode [ 3528.560997][ T6193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.561462][ T6193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.561596][ T6193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.561718][ T6193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3532.638900][T13762] FAULT_INJECTION: forcing a failure. [ 3532.638900][T13762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3532.639275][T13762] CPU: 0 UID: 0 PID: 13762 Comm: syz.2.3173 Tainted: G W syzkaller #0 PREEMPT [ 3532.639388][T13762] Tainted: [W]=WARN [ 3532.639420][T13762] Hardware name: linux,dummy-virt (DT) [ 3532.639455][T13762] Call trace: [ 3532.639484][T13762] show_stack+0x18/0x24 (C) [ 3532.639577][T13762] dump_stack_lvl+0x60/0x80 [ 3532.639705][T13762] dump_stack+0x18/0x24 [ 3532.639810][T13762] should_fail_ex+0x1e0/0x238 [ 3532.639908][T13762] should_fail_alloc_page+0x60/0x80 [ 3532.639976][T13762] __alloc_frozen_pages_noprof+0x238/0x13e4 [ 3532.640061][T13762] alloc_pages_mpol+0x74/0x1b8 [ 3532.640139][T13762] folio_alloc_mpol_noprof+0x14/0x68 [ 3532.640226][T13762] vma_alloc_folio_noprof+0x80/0xcc [ 3532.640314][T13762] vma_alloc_zeroed_movable_folio+0x34/0x40 [ 3532.640399][T13762] do_anonymous_page+0x2b0/0x9b8 [ 3532.640486][T13762] __handle_mm_fault+0xa5c/0xec0 [ 3532.640568][T13762] handle_mm_fault+0x98/0x338 [ 3532.640659][T13762] __get_user_pages+0x3bc/0xc70 [ 3532.640733][T13762] populate_vma_page_range+0x88/0xe0 [ 3532.640802][T13762] __mm_populate+0xbc/0x180 [ 3532.640865][T13762] __arm64_sys_mlockall+0x15c/0x184 [ 3532.640936][T13762] invoke_syscall+0x54/0x10c [ 3532.640999][T13762] el0_svc_common.constprop.0+0x40/0xe0 [ 3532.641088][T13762] do_el0_svc+0x1c/0x34 [ 3532.641159][T13762] el0_svc+0x38/0x1fc [ 3532.641232][T13762] el0t_64_sync_handler+0xa0/0xe4 [ 3532.641301][T13762] el0t_64_sync+0x1a4/0x1a8 [ 3534.208803][T13776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3534.217298][T13776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3537.470796][T12322] atkbd serio3: keyboard reset failed on [ 3542.534466][T13896] binder: 13894:13896 tried to acquire reference to desc 0, got 1 instead [ 3542.557336][T13006] binder: release 13894:13896 transaction 5 out, still active [ 3542.557865][T13006] binder: undelivered TRANSACTION_COMPLETE [ 3542.572124][T13006] binder: send failed reply for transaction 5, target dead [ 3543.938294][T13918] FAULT_INJECTION: forcing a failure. [ 3543.938294][T13918] name failslab, interval 1, probability 0, space 0, times 0 [ 3543.938704][T13918] CPU: 0 UID: 0 PID: 13918 Comm: syz.2.3225 Tainted: G W syzkaller #0 PREEMPT [ 3543.938819][T13918] Tainted: [W]=WARN [ 3543.938853][T13918] Hardware name: linux,dummy-virt (DT) [ 3543.938932][T13918] Call trace: [ 3543.938969][T13918] show_stack+0x18/0x24 (C) [ 3543.939077][T13918] dump_stack_lvl+0x60/0x80 [ 3543.939149][T13918] dump_stack+0x18/0x24 [ 3543.939219][T13918] should_fail_ex+0x1e0/0x238 [ 3543.939325][T13918] should_failslab+0x54/0x80 [ 3543.939401][T13918] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 3543.939477][T13918] __d_alloc+0x3c/0x280 [ 3543.939594][T13918] d_alloc+0x1c/0x80 [ 3543.939672][T13918] lookup_one_qstr_excl+0x8c/0x100 [ 3543.939744][T13918] start_dirop+0x40/0x90 [ 3543.939827][T13918] simple_start_creating+0x94/0x9c [ 3543.939920][T13918] debugfs_start_creating+0x70/0x104 [ 3543.939999][T13918] debugfs_create_symlink+0x3c/0xfc [ 3543.940069][T13918] ref_tracker_dir_symlink+0x140/0x1a8 [ 3543.940143][T13918] net_ns_net_init+0x2c/0x60 [ 3543.940224][T13918] ops_init+0x74/0x140 [ 3543.940297][T13918] setup_net+0x94/0x180 [ 3543.940370][T13918] copy_net_ns+0x104/0x354 [ 3543.940447][T13918] create_new_namespaces+0x114/0x370 [ 3543.940526][T13918] unshare_nsproxy_namespaces+0x70/0xbc [ 3543.940604][T13918] ksys_unshare+0x1cc/0x3b8 [ 3543.940675][T13918] __arm64_sys_unshare+0x14/0x24 [ 3543.940747][T13918] invoke_syscall+0x54/0x10c [ 3543.940819][T13918] el0_svc_common.constprop.0+0x40/0xe0 [ 3543.940900][T13918] do_el0_svc+0x1c/0x34 [ 3543.940970][T13918] el0_svc+0x38/0x1fc [ 3543.941049][T13918] el0t_64_sync_handler+0xa0/0xe4 [ 3543.941123][T13918] el0t_64_sync+0x1a4/0x1a8 [ 3550.990148][T13956] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 3559.792139][T14002] tmpfs: Bad value for 'mpol' [ 3560.021328][T14008] fuse: Bad value for 'fd' [ 3560.276131][T14012] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3258'. [ 3560.276506][T14012] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3258'. [ 3560.276751][T14012] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 3564.775302][T14029] dlm: Unknown command passed to DLM device : 3 [ 3564.775302][T14029] [ 3565.314816][T14035] netlink: 'syz.2.3268': attribute type 12 has an invalid length. [ 3565.315160][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 3565.368893][T14035] netlink: 'syz.2.3268': attribute type 12 has an invalid length. [ 3565.369196][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 3565.391175][ T4062] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3565.391563][ T4062] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3565.391863][ T4062] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3565.391989][ T4062] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3570.894664][T14084] netlink: 'syz.0.3291': attribute type 3 has an invalid length. [ 3570.898112][T14084] netlink: 'syz.0.3291': attribute type 3 has an invalid length. [ 3571.882725][T14098] fuse: Unknown parameter 'grou00000000000000000000' [ 3572.649285][T14103] input: syz1 as /devices/virtual/input/input113 [ 3572.982652][T14109] fuse: Unknown parameter 'group_i00000000000000000000' [ 3573.214744][T14114] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 3573.884655][T14128] fuse: Unknown parameter 'group_i00000000000000000000' [ 3574.415403][T14143] fuse: Unknown parameter 'group_id00000000000000000000' [ 3578.705978][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3578.707510][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3580.172306][T14194] FAULT_INJECTION: forcing a failure. [ 3580.172306][T14194] name failslab, interval 1, probability 0, space 0, times 0 [ 3580.172534][T14194] CPU: 0 UID: 0 PID: 14194 Comm: syz.2.3338 Tainted: G W syzkaller #0 PREEMPT [ 3580.172648][T14194] Tainted: [W]=WARN [ 3580.172681][T14194] Hardware name: linux,dummy-virt (DT) [ 3580.172717][T14194] Call trace: [ 3580.172747][T14194] show_stack+0x18/0x24 (C) [ 3580.173623][T14194] dump_stack_lvl+0x60/0x80 [ 3580.174036][T14194] dump_stack+0x18/0x24 [ 3580.174222][T14194] should_fail_ex+0x1e0/0x238 [ 3580.174345][T14194] should_failslab+0x54/0x80 [ 3580.174455][T14194] __kvmalloc_node_noprof+0xc8/0x65c [ 3580.174550][T14194] packet_setsockopt+0xc18/0xf20 [ 3580.174671][T14194] do_sock_setsockopt+0xa4/0x198 [ 3580.174759][T14194] __sys_setsockopt+0x7c/0x100 [ 3580.174841][T14194] __arm64_sys_setsockopt+0x24/0x40 [ 3580.174940][T14194] invoke_syscall+0x54/0x10c [ 3580.175012][T14194] el0_svc_common.constprop.0+0x40/0xe0 [ 3580.175098][T14194] do_el0_svc+0x1c/0x34 [ 3580.175158][T14194] el0_svc+0x38/0x1fc [ 3580.175228][T14194] el0t_64_sync_handler+0xa0/0xe4 [ 3580.175296][T14194] el0t_64_sync+0x1a4/0x1a8 [ 3580.347436][T14196] dns_resolver: Unsupported server list version (0) [ 3580.788709][T14198] binder: 14197:14198 ERROR: BC_REGISTER_LOOPER called without request [ 3580.793393][T14198] binder: 14197:14198 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 3580.795984][T14198] binder: 14197:14198 BC_INCREFS_DONE u0000000000000002 no match [ 3580.911556][T14201] input: syz0 as /devices/virtual/input/input114 [ 3583.291437][T14221] fuse: Bad value for 'user_id' [ 3583.292850][T14221] fuse: Bad value for 'user_id' [ 3584.073959][T14231] fuse: Bad value for 'fd' [ 3584.147377][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3356'. [ 3586.173897][T14245] fuse: Bad value for 'fd' [ 3598.204741][T14342] fuse: Bad value for 'fd' [ 3598.873213][T14352] fuse: Bad value for 'fd' [ 3600.672973][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3600.676314][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3606.628514][T14414] fuse: Unknown parameter 'use00000000000000000000' [ 3607.214307][T14427] fuse: Bad value for 'fd' [ 3607.701276][T14437] fuse: Bad value for 'fd' [ 3607.858098][T14441] netlink: 564 bytes leftover after parsing attributes in process `syz.2.3442'. [ 3607.862626][T14441] bridge_slave_0: entered promiscuous mode [ 3608.052274][T14445] syz.2.3444: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 3608.056315][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.2.3444 Tainted: G W syzkaller #0 PREEMPT [ 3608.056469][T14445] Tainted: [W]=WARN [ 3608.056506][T14445] Hardware name: linux,dummy-virt (DT) [ 3608.056545][T14445] Call trace: [ 3608.056578][T14445] show_stack+0x18/0x24 (C) [ 3608.056699][T14445] dump_stack_lvl+0x60/0x80 [ 3608.056771][T14445] dump_stack+0x18/0x24 [ 3608.056835][T14445] warn_alloc+0x134/0x154 [ 3608.056906][T14445] __vmalloc_node_range_noprof+0x8e8/0x8ec [ 3608.056979][T14445] vzalloc_noprof+0x94/0xa4 [ 3608.057050][T14445] disksize_store+0x64/0x1b0 [ 3608.057124][T14445] dev_attr_store+0x18/0x2c [ 3608.057195][T14445] sysfs_kf_write+0x7c/0x98 [ 3608.057263][T14445] kernfs_fop_write_iter+0x138/0x200 [ 3608.057336][T14445] vfs_write+0x244/0x36c [ 3608.057412][T14445] ksys_write+0x70/0x108 [ 3608.057485][T14445] __arm64_sys_write+0x18/0x24 [ 3608.057559][T14445] invoke_syscall+0x54/0x10c [ 3608.057627][T14445] el0_svc_common.constprop.0+0x40/0xe0 [ 3608.057702][T14445] do_el0_svc+0x1c/0x34 [ 3608.057767][T14445] el0_svc+0x38/0x1fc [ 3608.057841][T14445] el0t_64_sync_handler+0xa0/0xe4 [ 3608.057913][T14445] el0t_64_sync+0x1a4/0x1a8 [ 3608.062263][T14445] Mem-Info: [ 3608.062669][T14445] active_anon:14 inactive_anon:6422 isolated_anon:0 [ 3608.062669][T14445] active_file:2805 inactive_file:13524 isolated_file:0 [ 3608.062669][T14445] unevictable:768 dirty:12 writeback:0 [ 3608.062669][T14445] slab_reclaimable:2421 slab_unreclaimable:10143 [ 3608.062669][T14445] mapped:2740 shmem:3232 pagetables:2356 [ 3608.062669][T14445] sec_pagetables:0 bounce:0 [ 3608.062669][T14445] kernel_misc_reclaimable:0 [ 3608.062669][T14445] free:445358 free_pcp:5973 free_cma:8128 [ 3608.063212][T14445] Node 0 active_anon:56kB inactive_anon:25688kB active_file:11220kB inactive_file:54096kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:10960kB dirty:48kB writeback:0kB shmem:12928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3184kB pagetables:9424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 3608.063528][T14445] Node 0 DMA free:1781432kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56kB inactive_anon:25688kB active_file:11220kB inactive_file:54096kB unevictable:3072kB writepending:48kB zspages:0kB present:2097152kB managed:1988404kB mlocked:0kB bounce:0kB free_pcp:23892kB local_pcp:9052kB free_cma:32512kB [ 3608.063910][T14445] lowmem_reserve[]: 0 0 0 0 0 [ 3608.064248][T14445] Node 0 DMA: 16*4kB (ME) 91*8kB (UE) 148*16kB (UME) 909*32kB (UME) 699*64kB (UME) 526*128kB (UME) 317*256kB (UMEC) 159*512kB (UMEC) 78*1024kB (UMEC) 33*2048kB (UMC) 324*4096kB (UMC) = 1781432kB [ 3608.065461][T14445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3608.065573][T14445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 3608.065623][T14445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3608.065667][T14445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 3608.065815][T14445] 19557 total pagecache pages [ 3608.065878][T14445] 0 pages in swap cache [ 3608.065923][T14445] Free swap = 124996kB [ 3608.065964][T14445] Total swap = 124996kB [ 3608.066098][T14445] 524288 pages RAM [ 3608.066136][T14445] 0 pages HighMem/MovableOnly [ 3608.066171][T14445] 27187 pages reserved [ 3608.066211][T14445] 8192 pages cma reserved [ 3608.066251][T14445] 4 pages hwpoisoned [ 3608.297008][T14449] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3611.869506][T14464] binder: 14463:14464 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 3611.945484][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3611.953718][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3611.969226][T14466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3611.981871][T14466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3614.909329][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3614.917484][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3615.874678][T14488] fuse: Unknown parameter '00000000000000000003' [ 3619.252568][T14515] binder: Binderfs stats mode cannot be changed during a remount [ 3619.329537][T14517] xt_hashlimit: size too large, truncated to 1048576 [ 3621.649269][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 3621.793858][T14544] device-mapper: ioctl: Invalid ioctl structure: uuid 18, name , dev 415b [ 3623.336950][T14562] : renamed from bond_slave_0 (while UP) [ 3623.575207][T14567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3623.585760][T14567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3625.353228][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3625.354713][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3636.101601][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3636.105405][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3636.405607][T14645] FAULT_INJECTION: forcing a failure. [ 3636.405607][T14645] name failslab, interval 1, probability 0, space 0, times 0 [ 3636.405907][T14645] CPU: 1 UID: 0 PID: 14645 Comm: syz.0.3523 Tainted: G W syzkaller #0 PREEMPT [ 3636.405994][T14645] Tainted: [W]=WARN [ 3636.406013][T14645] Hardware name: linux,dummy-virt (DT) [ 3636.406035][T14645] Call trace: [ 3636.406052][T14645] show_stack+0x18/0x24 (C) [ 3636.406110][T14645] dump_stack_lvl+0x60/0x80 [ 3636.406148][T14645] dump_stack+0x18/0x24 [ 3636.406183][T14645] should_fail_ex+0x1e0/0x238 [ 3636.406253][T14645] should_failslab+0x54/0x80 [ 3636.406329][T14645] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 3636.406392][T14645] kstrdup+0x48/0xa0 [ 3636.406468][T14645] kstrdup_const+0x40/0x4c [ 3636.406574][T14645] __kernfs_new_node+0x54/0x254 [ 3636.406676][T14645] kernfs_new_node+0x88/0xa4 [ 3636.406898][T14645] __kernfs_create_file+0x30/0xfc [ 3636.406992][T14645] cgroup_addrm_files+0x140/0x2e0 [ 3636.407085][T14645] css_populate_dir+0x16c/0x1e0 [ 3636.407186][T14645] cgroup_mkdir+0x104/0x520 [ 3636.407259][T14645] kernfs_iop_mkdir+0x6c/0xc0 [ 3636.407352][T14645] vfs_mkdir+0xc4/0x210 [ 3636.407421][T14645] filename_mkdirat+0x1dc/0x218 [ 3636.407507][T14645] __arm64_sys_mkdirat+0x40/0x64 [ 3636.407613][T14645] invoke_syscall+0x54/0x10c [ 3636.407694][T14645] el0_svc_common.constprop.0+0x40/0xe0 [ 3636.407793][T14645] do_el0_svc+0x1c/0x34 [ 3636.407879][T14645] el0_svc+0x38/0x1fc [ 3636.407984][T14645] el0t_64_sync_handler+0xa0/0xe4 [ 3636.408058][T14645] el0t_64_sync+0x1a4/0x1a8 [ 3636.409216][T14645] cgroup: cgroup_addrm_files: failed to add cgroup.max.descendants, err=-12 [ 3639.295589][T14662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3639.296472][T14662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3639.715039][T14668] batadv_slave_1: entered promiscuous mode [ 3639.717874][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3532'. [ 3639.786692][T14668] batadv_slave_1 (unregistering): left promiscuous mode [ 3640.234713][T14675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3640.236106][T14675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3640.323526][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3640.326245][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3642.411363][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3642.414684][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3643.686676][T14705] FAULT_INJECTION: forcing a failure. [ 3643.686676][T14705] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3643.690959][T14705] CPU: 1 UID: 0 PID: 14705 Comm: syz.0.3546 Tainted: G W syzkaller #0 PREEMPT [ 3643.691113][T14705] Tainted: [W]=WARN [ 3643.691152][T14705] Hardware name: linux,dummy-virt (DT) [ 3643.691194][T14705] Call trace: [ 3643.691230][T14705] show_stack+0x18/0x24 (C) [ 3643.691342][T14705] dump_stack_lvl+0x60/0x80 [ 3643.691428][T14705] dump_stack+0x18/0x24 [ 3643.691501][T14705] should_fail_ex+0x1e0/0x238 [ 3643.691585][T14705] should_fail+0x14/0x40 [ 3643.691659][T14705] get_futex_key+0xdc/0x620 [ 3643.691733][T14705] futex_wake+0x68/0x240 [ 3643.691807][T14705] do_futex+0x178/0x210 [ 3643.691884][T14705] __arm64_sys_futex+0x100/0x1a0 [ 3643.691962][T14705] invoke_syscall+0x54/0x10c [ 3643.692038][T14705] el0_svc_common.constprop.0+0x40/0xe0 [ 3643.692116][T14705] do_el0_svc+0x1c/0x34 [ 3643.692195][T14705] el0_svc+0x38/0x1fc [ 3643.692280][T14705] el0t_64_sync_handler+0xa0/0xe4 [ 3643.692365][T14705] el0t_64_sync+0x1a4/0x1a8 [ 3644.224406][T14705] block device autoloading is deprecated and will be removed. [ 3644.228970][T14705] EXT4-fs (loop0): unable to read superblock [ 3648.106537][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 3648.107006][ T28] audit: type=1107 audit(2000002312.480:91): pid=14719 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 3649.912295][T14729] input: syz1 as /devices/virtual/input/input115 [ 3651.647034][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3651.652730][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3651.837162][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3651.844483][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3655.326069][T14768] FAULT_INJECTION: forcing a failure. [ 3655.326069][T14768] name failslab, interval 1, probability 0, space 0, times 0 [ 3655.326435][T14768] CPU: 0 UID: 0 PID: 14768 Comm: syz.2.3573 Tainted: G W syzkaller #0 PREEMPT [ 3655.326550][T14768] Tainted: [W]=WARN [ 3655.326586][T14768] Hardware name: linux,dummy-virt (DT) [ 3655.326625][T14768] Call trace: [ 3655.326659][T14768] show_stack+0x18/0x24 (C) [ 3655.326762][T14768] dump_stack_lvl+0x60/0x80 [ 3655.326838][T14768] dump_stack+0x18/0x24 [ 3655.326938][T14768] should_fail_ex+0x1e0/0x238 [ 3655.327019][T14768] should_failslab+0x54/0x80 [ 3655.327092][T14768] __kmalloc_noprof+0xac/0x520 [ 3655.327169][T14768] __list_lru_init+0x4c/0x148 [ 3655.327250][T14768] sget_fc+0x27c/0x790 [ 3655.327329][T14768] get_tree_nodev+0x2c/0xb8 [ 3655.327401][T14768] devpts_get_tree+0x18/0x24 [ 3655.327478][T14768] vfs_get_tree+0x28/0x100 [ 3655.327547][T14768] fc_mount+0x18/0xa0 [ 3655.327625][T14768] path_mount+0x3e8/0xabc [ 3655.327694][T14768] __arm64_sys_mount+0x1b0/0x204 [ 3655.327764][T14768] invoke_syscall+0x54/0x10c [ 3655.327836][T14768] el0_svc_common.constprop.0+0x40/0xe0 [ 3655.327910][T14768] do_el0_svc+0x1c/0x34 [ 3655.327980][T14768] el0_svc+0x38/0x1fc [ 3655.328061][T14768] el0t_64_sync_handler+0xa0/0xe4 [ 3655.328137][T14768] el0t_64_sync+0x1a4/0x1a8 [ 3661.161257][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3661.162882][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3662.484300][T14810] xt_hashlimit: size too large, truncated to 1048576 [ 3665.548220][T14823] binder: 14822:14823 ioctl 400c620e 20000040 returned -22 [ 3665.711321][ T28] audit: type=1326 audit(2000002330.150:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.717651][ T28] audit: type=1326 audit(2000002330.160:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.725661][ T28] audit: type=1326 audit(2000002330.170:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.729121][ T28] audit: type=1326 audit(2000002330.170:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.743815][ T28] audit: type=1326 audit(2000002330.190:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.747675][ T28] audit: type=1326 audit(2000002330.190:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=70 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.763402][ T28] audit: type=1326 audit(2000002330.200:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.767639][ T28] audit: type=1326 audit(2000002330.210:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14824 comm="syz.0.3594" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3665.976817][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3665.992010][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3667.666381][T14854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3608'. [ 3667.667553][T14854] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3608'. [ 3668.215211][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3615'. [ 3672.704536][T14897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3672.706032][T14897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3672.935418][T14903] binder: 14902:14903 ioctl c018620b 0 returned -14 [ 3675.129313][ T28] audit: type=1326 audit(2000002339.570:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.131965][ T28] audit: type=1326 audit(2000002339.580:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.138336][ T28] audit: type=1326 audit(2000002339.580:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.146175][ T28] audit: type=1326 audit(2000002339.590:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.147689][ T28] audit: type=1326 audit(2000002339.590:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.153225][ T28] audit: type=1326 audit(2000002339.590:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.156629][ T28] audit: type=1326 audit(2000002339.600:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3675.157068][ T28] audit: type=1326 audit(2000002339.600:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14930 comm="syz.0.3637" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x7ffc0000 [ 3678.772160][T14959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3678.796541][T14959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3679.392017][T14966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3679.394664][T14966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3679.925115][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 3679.957525][T14971] vlan2: entered allmulticast mode [ 3679.959163][T14971] bridge_slave_0: entered allmulticast mode [ 3680.144985][T14975] netlink: 79 bytes leftover after parsing attributes in process `syz.0.3655'. [ 3680.641201][T14981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3658'. [ 3680.642513][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3658'. [ 3680.648423][T14981] bridge_slave_1: entered allmulticast mode [ 3681.738500][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3681.746449][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3682.088805][T15003] ip6gre1: entered promiscuous mode [ 3682.089111][T15003] ip6gre1: entered allmulticast mode [ 3682.137262][T15005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3682.138574][T15005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3701.209476][T15103] netlink: 'syz.0.3702': attribute type 3 has an invalid length. [ 3701.211782][T15103] netlink: 'syz.0.3702': attribute type 3 has an invalid length. [ 3706.087834][T15152] input: syz0 as /devices/virtual/input/input117 [ 3707.725361][T15160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3707.728113][T15160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3708.644265][T15176] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3731'. [ 3711.927533][T15197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3711.941900][T15197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3716.563996][T15228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3716.564212][T15228] IPv6: NLM_F_CREATE should be set when creating new route [ 3716.564444][T15228] IPv6: NLM_F_CREATE should be set when creating new route [ 3716.710580][T15232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3716.715997][T15232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3719.379044][T15252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3719.382433][T15252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3719.877873][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3719.881541][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3722.592943][T15278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3722.594448][T15278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3722.941581][T15282] FAULT_INJECTION: forcing a failure. [ 3722.941581][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 3722.941865][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.0.3774 Tainted: G W L syzkaller #0 PREEMPT [ 3722.941977][T15282] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3722.942012][T15282] Hardware name: linux,dummy-virt (DT) [ 3722.942047][T15282] Call trace: [ 3722.942077][T15282] show_stack+0x18/0x24 (C) [ 3722.942171][T15282] dump_stack_lvl+0x60/0x80 [ 3722.942239][T15282] dump_stack+0x18/0x24 [ 3722.942303][T15282] should_fail_ex+0x1e0/0x238 [ 3722.942373][T15282] should_failslab+0x54/0x80 [ 3722.942438][T15282] __kvmalloc_node_noprof+0xc8/0x65c [ 3722.942509][T15282] bpf_jit_binary_pack_alloc+0x98/0x154 [ 3722.942574][T15282] bpf_int_jit_compile+0x5b8/0x738 [ 3722.942651][T15282] __bpf_prog_select_runtime+0x140/0x208 [ 3722.942739][T15282] bpf_prog_select_runtime+0x1c/0x30 [ 3722.942816][T15282] bpf_prepare_filter+0x434/0x5ac [ 3722.942910][T15282] bpf_prog_create_from_user+0xac/0x160 [ 3722.942985][T15282] do_seccomp+0x294/0xa84 [ 3722.943055][T15282] __arm64_sys_seccomp+0x1c/0x30 [ 3722.943127][T15282] invoke_syscall+0x54/0x10c [ 3722.943196][T15282] el0_svc_common.constprop.0+0x40/0xe0 [ 3722.943267][T15282] do_el0_svc+0x1c/0x34 [ 3722.943337][T15282] el0_svc+0x38/0x1fc [ 3722.943415][T15282] el0t_64_sync_handler+0xa0/0xe4 [ 3722.943493][T15282] el0t_64_sync+0x1a4/0x1a8 [ 3723.104827][T15284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3775'. [ 3723.342417][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3723.351908][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3727.666550][T15312] syzkaller0: entered promiscuous mode [ 3727.672609][T15312] syzkaller0: entered allmulticast mode [ 3731.277696][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3731.286239][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3732.843550][T15363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3732.845043][T15363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3733.621580][T15376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3733.623127][T15376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3734.187345][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3734.197190][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3734.312890][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3734.314505][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3734.459280][T15389] input: syz0 as /devices/virtual/input/input120 [ 3734.710399][T15391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3734.710611][T15391] IPv6: NLM_F_CREATE should be set when creating new route [ 3734.828136][T15393] binder: 15392:15393 BC_ACQUIRE_DONE u0000000000000200 no match [ 3734.832140][T15393] binder: 15392:15393 BC_INCREFS_DONE node 12 has no pending increfs request [ 3746.394647][T15475] netlink: 'syz.2.3853': attribute type 46 has an invalid length. [ 3746.926496][ T28] audit: type=1326 audit(2000002411.370:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.933281][ T28] audit: type=1326 audit(2000002411.370:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.933765][ T28] audit: type=1326 audit(2000002411.370:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.934056][ T28] audit: type=1326 audit(2000002411.370:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.934210][ T28] audit: type=1326 audit(2000002411.380:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.938709][ T28] audit: type=1326 audit(2000002411.380:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.952454][ T28] audit: type=1326 audit(2000002411.400:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.952961][ T28] audit: type=1326 audit(2000002411.400:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.958355][ T28] audit: type=1326 audit(2000002411.400:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3746.958864][ T28] audit: type=1326 audit(2000002411.400:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15482 comm="syz.2.3857" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3754.937398][T15502] syz.0.3859 (15502): attempted to duplicate a private mapping with mremap. This is not supported. [ 3756.586505][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3876'. [ 3772.929454][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3772.933819][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3776.818315][T15631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3776.834555][T15631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3785.848404][T15695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3785.854071][T15695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3785.951639][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3785.954710][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3786.291895][T15702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3786.295566][T15702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3786.410666][T15704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3786.413524][T15704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3786.600731][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3786.621469][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3786.875357][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3786.876701][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.163608][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.164552][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.378306][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.388742][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.424389][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.425887][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.478494][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.492763][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.534013][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.535472][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.555524][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.558714][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.578559][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.587853][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.783264][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.793689][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.795806][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.821832][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.865218][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.867365][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3787.867591][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3787.876747][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.084735][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.102538][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.106349][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.107853][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.147119][T15716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.148725][T15716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.150306][T15712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.151685][T15712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.322804][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.328848][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.337870][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.352235][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3788.489430][T15720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3788.501520][T15720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3790.947717][T15750] FAULT_INJECTION: forcing a failure. [ 3790.947717][T15750] name failslab, interval 1, probability 0, space 0, times 0 [ 3790.949499][T15750] CPU: 1 UID: 0 PID: 15750 Comm: syz.0.3949 Tainted: G W L syzkaller #0 PREEMPT [ 3790.949702][T15750] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3790.949738][T15750] Hardware name: linux,dummy-virt (DT) [ 3790.949774][T15750] Call trace: [ 3790.949805][T15750] show_stack+0x18/0x24 (C) [ 3790.949905][T15750] dump_stack_lvl+0x60/0x80 [ 3790.949972][T15750] dump_stack+0x18/0x24 [ 3790.950035][T15750] should_fail_ex+0x1e0/0x238 [ 3790.950101][T15750] should_failslab+0x54/0x80 [ 3790.950165][T15750] __kmalloc_cache_noprof+0x58/0x470 [ 3790.950234][T15750] bpf_is_state_visited+0x814/0xe00 [ 3790.950304][T15750] do_check_common+0xa88/0x2bd4 [ 3790.950380][T15750] bpf_check+0x2660/0x2a60 [ 3790.950443][T15750] bpf_prog_load+0x778/0xbec [ 3790.950507][T15750] __sys_bpf+0x8e4/0x1d1c [ 3790.950572][T15750] __arm64_sys_bpf+0x2c/0x40 [ 3790.950637][T15750] invoke_syscall+0x54/0x10c [ 3790.950701][T15750] el0_svc_common.constprop.0+0x40/0xe0 [ 3790.950765][T15750] do_el0_svc+0x1c/0x34 [ 3790.950826][T15750] el0_svc+0x38/0x1fc [ 3790.950921][T15750] el0t_64_sync_handler+0xa0/0xe4 [ 3790.951016][T15750] el0t_64_sync+0x1a4/0x1a8 [ 3791.644935][T15768] FAULT_INJECTION: forcing a failure. [ 3791.644935][T15768] name failslab, interval 1, probability 0, space 0, times 0 [ 3791.645516][T15768] CPU: 0 UID: 0 PID: 15768 Comm: syz.2.3957 Tainted: G W L syzkaller #0 PREEMPT [ 3791.645647][T15768] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3791.645690][T15768] Hardware name: linux,dummy-virt (DT) [ 3791.645735][T15768] Call trace: [ 3791.645810][T15768] show_stack+0x18/0x24 (C) [ 3791.645941][T15768] dump_stack_lvl+0x60/0x80 [ 3791.646073][T15768] dump_stack+0x18/0x24 [ 3791.646169][T15768] should_fail_ex+0x1e0/0x238 [ 3791.646280][T15768] should_failslab+0x54/0x80 [ 3791.646394][T15768] __kmalloc_noprof+0xac/0x520 [ 3791.646493][T15768] do_handle_open+0x17c/0x4a0 [ 3791.646607][T15768] __arm64_sys_open_by_handle_at+0x20/0x2c [ 3791.646701][T15768] invoke_syscall+0x54/0x10c [ 3791.646819][T15768] el0_svc_common.constprop.0+0x40/0xe0 [ 3791.646915][T15768] do_el0_svc+0x1c/0x34 [ 3791.646994][T15768] el0_svc+0x38/0x1fc [ 3791.647078][T15768] el0t_64_sync_handler+0xa0/0xe4 [ 3791.647156][T15768] el0t_64_sync+0x1a4/0x1a8 [ 3792.025935][T15775] FAULT_INJECTION: forcing a failure. [ 3792.025935][T15775] name failslab, interval 1, probability 0, space 0, times 0 [ 3792.030626][T15775] CPU: 1 UID: 0 PID: 15775 Comm: syz.0.3960 Tainted: G W L syzkaller #0 PREEMPT [ 3792.030793][T15775] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3792.030835][T15775] Hardware name: linux,dummy-virt (DT) [ 3792.030876][T15775] Call trace: [ 3792.030981][T15775] show_stack+0x18/0x24 (C) [ 3792.031117][T15775] dump_stack_lvl+0x60/0x80 [ 3792.031191][T15775] dump_stack+0x18/0x24 [ 3792.031257][T15775] should_fail_ex+0x1e0/0x238 [ 3792.031337][T15775] should_failslab+0x54/0x80 [ 3792.031422][T15775] __kvmalloc_node_noprof+0xc8/0x65c [ 3792.031508][T15775] map_get_next_key+0xa4/0x220 [ 3792.031590][T15775] __sys_bpf+0x8f4/0x1d1c [ 3792.031668][T15775] __arm64_sys_bpf+0x2c/0x40 [ 3792.031740][T15775] invoke_syscall+0x54/0x10c [ 3792.031813][T15775] el0_svc_common.constprop.0+0x40/0xe0 [ 3792.031887][T15775] do_el0_svc+0x1c/0x34 [ 3792.031941][T15775] el0_svc+0x38/0x1fc [ 3792.031982][T15775] el0t_64_sync_handler+0xa0/0xe4 [ 3792.032019][T15775] el0t_64_sync+0x1a4/0x1a8 [ 3797.860739][T15815] FAULT_INJECTION: forcing a failure. [ 3797.860739][T15815] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3797.863084][T15815] CPU: 1 UID: 0 PID: 15815 Comm: syz.2.3976 Tainted: G W L syzkaller #0 PREEMPT [ 3797.863259][T15815] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3797.863303][T15815] Hardware name: linux,dummy-virt (DT) [ 3797.863349][T15815] Call trace: [ 3797.863393][T15815] show_stack+0x18/0x24 (C) [ 3797.863496][T15815] dump_stack_lvl+0x60/0x80 [ 3797.863563][T15815] dump_stack+0x18/0x24 [ 3797.863627][T15815] should_fail_ex+0x1e0/0x238 [ 3797.863695][T15815] should_fail+0x14/0x40 [ 3797.863759][T15815] get_futex_key+0xdc/0x620 [ 3797.863834][T15815] futex_wait_setup+0x54/0x240 [ 3797.863902][T15815] __futex_wait+0xd4/0x180 [ 3797.863967][T15815] futex_wait+0x88/0x110 [ 3797.864031][T15815] do_futex+0x1a0/0x210 [ 3797.864094][T15815] __arm64_sys_futex+0x100/0x1a0 [ 3797.864158][T15815] invoke_syscall+0x54/0x10c [ 3797.864223][T15815] el0_svc_common.constprop.0+0x40/0xe0 [ 3797.864290][T15815] do_el0_svc+0x1c/0x34 [ 3797.864353][T15815] el0_svc+0x38/0x1fc [ 3797.864442][T15815] el0t_64_sync_handler+0xa0/0xe4 [ 3797.864520][T15815] el0t_64_sync+0x1a4/0x1a8 [ 3798.530597][T15823] syzkaller0: entered promiscuous mode [ 3798.530821][T15823] syzkaller0: entered allmulticast mode [ 3799.553567][T15831] FAULT_INJECTION: forcing a failure. [ 3799.553567][T15831] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3799.555364][T15831] CPU: 1 UID: 0 PID: 15831 Comm: syz.2.3981 Tainted: G W L syzkaller #0 PREEMPT [ 3799.555502][T15831] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3799.555540][T15831] Hardware name: linux,dummy-virt (DT) [ 3799.555577][T15831] Call trace: [ 3799.555608][T15831] show_stack+0x18/0x24 (C) [ 3799.555703][T15831] dump_stack_lvl+0x60/0x80 [ 3799.555769][T15831] dump_stack+0x18/0x24 [ 3799.555835][T15831] should_fail_ex+0x1e0/0x238 [ 3799.555905][T15831] should_fail+0x14/0x40 [ 3799.555968][T15831] get_futex_key+0xdc/0x620 [ 3799.556034][T15831] futex_wait_setup+0x54/0x240 [ 3799.556101][T15831] __futex_wait+0xd4/0x180 [ 3799.556166][T15831] futex_wait+0x88/0x110 [ 3799.556231][T15831] do_futex+0x1a0/0x210 [ 3799.556300][T15831] __arm64_sys_futex+0x100/0x1a0 [ 3799.556365][T15831] invoke_syscall+0x54/0x10c [ 3799.556429][T15831] el0_svc_common.constprop.0+0x40/0xe0 [ 3799.556495][T15831] do_el0_svc+0x1c/0x34 [ 3799.556557][T15831] el0_svc+0x38/0x1fc [ 3799.556629][T15831] el0t_64_sync_handler+0xa0/0xe4 [ 3799.556699][T15831] el0t_64_sync+0x1a4/0x1a8 [ 3801.446416][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 3801.451300][ T28] audit: type=1326 audit(2000002465.890:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.455981][ T28] audit: type=1326 audit(2000002465.890:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.461244][ T28] audit: type=1326 audit(2000002465.900:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.465050][ T28] audit: type=1326 audit(2000002465.900:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.480951][ T28] audit: type=1326 audit(2000002465.900:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.486435][ T28] audit: type=1326 audit(2000002465.930:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.501798][ T28] audit: type=1326 audit(2000002465.950:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3801.513560][ T28] audit: type=1326 audit(2000002465.960:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.3987" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffa99792a8 code=0x7ffc0000 [ 3810.189111][T15890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4006'. [ 3810.191897][T15890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4006'. [ 3810.950486][T15899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3821.124792][T15970] FAULT_INJECTION: forcing a failure. [ 3821.124792][T15970] name failslab, interval 1, probability 0, space 0, times 0 [ 3821.125373][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.0.4038 Tainted: G W L syzkaller #0 PREEMPT [ 3821.125534][T15970] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3821.125574][T15970] Hardware name: linux,dummy-virt (DT) [ 3821.125614][T15970] Call trace: [ 3821.125646][T15970] show_stack+0x18/0x24 (C) [ 3821.125750][T15970] dump_stack_lvl+0x60/0x80 [ 3821.125824][T15970] dump_stack+0x18/0x24 [ 3821.125947][T15970] should_fail_ex+0x1e0/0x238 [ 3821.126024][T15970] should_failslab+0x54/0x80 [ 3821.126098][T15970] __kmalloc_node_noprof+0xb4/0x524 [ 3821.126177][T15970] __vmalloc_node_range_noprof+0x194/0x8ec [ 3821.126260][T15970] vzalloc_noprof+0x94/0xa4 [ 3821.126339][T15970] xt_counters_alloc+0x38/0x50 [ 3821.126422][T15970] __do_replace+0x54/0x310 [ 3821.126501][T15970] do_ipt_set_ctl+0x394/0x43c [ 3821.126580][T15970] nf_setsockopt+0x68/0xa0 [ 3821.126649][T15970] ip_setsockopt+0x74/0x9c [ 3821.126729][T15970] udp_setsockopt+0x1c/0x40 [ 3821.126800][T15970] sock_common_setsockopt+0x1c/0x30 [ 3821.126882][T15970] do_sock_setsockopt+0xa4/0x198 [ 3821.126976][T15970] __sys_setsockopt+0x7c/0x100 [ 3821.127044][T15970] __arm64_sys_setsockopt+0x24/0x40 [ 3821.127113][T15970] invoke_syscall+0x54/0x10c [ 3821.127182][T15970] el0_svc_common.constprop.0+0x40/0xe0 [ 3821.127251][T15970] do_el0_svc+0x1c/0x34 [ 3821.127317][T15970] el0_svc+0x38/0x1fc [ 3821.127391][T15970] el0t_64_sync_handler+0xa0/0xe4 [ 3821.127460][T15970] el0t_64_sync+0x1a4/0x1a8 [ 3821.141206][T15970] syz.0.4038: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x3000dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_SKIP_ZERO|__GFP_SKIP_KASAN), nodemask=(null),cpuset=/,mems_allowed=0 [ 3821.141678][T15970] CPU: 0 UID: 0 PID: 15970 Comm: syz.0.4038 Tainted: G W L syzkaller #0 PREEMPT [ 3821.141813][T15970] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3821.141879][T15970] Hardware name: linux,dummy-virt (DT) [ 3821.141924][T15970] Call trace: [ 3821.141958][T15970] show_stack+0x18/0x24 (C) [ 3821.142084][T15970] dump_stack_lvl+0x60/0x80 [ 3821.142165][T15970] dump_stack+0x18/0x24 [ 3821.142245][T15970] warn_alloc+0x134/0x154 [ 3821.142328][T15970] __vmalloc_node_range_noprof+0x694/0x8ec [ 3821.142416][T15970] vzalloc_noprof+0x94/0xa4 [ 3821.142556][T15970] xt_counters_alloc+0x38/0x50 [ 3821.142649][T15970] __do_replace+0x54/0x310 [ 3821.142732][T15970] do_ipt_set_ctl+0x394/0x43c [ 3821.142826][T15970] nf_setsockopt+0x68/0xa0 [ 3821.142950][T15970] ip_setsockopt+0x74/0x9c [ 3821.143040][T15970] udp_setsockopt+0x1c/0x40 [ 3821.143115][T15970] sock_common_setsockopt+0x1c/0x30 [ 3821.143223][T15970] do_sock_setsockopt+0xa4/0x198 [ 3821.143304][T15970] __sys_setsockopt+0x7c/0x100 [ 3821.143379][T15970] __arm64_sys_setsockopt+0x24/0x40 [ 3821.143455][T15970] invoke_syscall+0x54/0x10c [ 3821.143530][T15970] el0_svc_common.constprop.0+0x40/0xe0 [ 3821.143604][T15970] do_el0_svc+0x1c/0x34 [ 3821.143673][T15970] el0_svc+0x38/0x1fc [ 3821.143761][T15970] el0t_64_sync_handler+0xa0/0xe4 [ 3821.143837][T15970] el0t_64_sync+0x1a4/0x1a8 [ 3821.143933][T15970] Mem-Info: [ 3821.143977][T15970] active_anon:4110 inactive_anon:6427 isolated_anon:0 [ 3821.143977][T15970] active_file:2878 inactive_file:12074 isolated_file:0 [ 3821.143977][T15970] unevictable:768 dirty:8 writeback:0 [ 3821.143977][T15970] slab_reclaimable:2499 slab_unreclaimable:10328 [ 3821.143977][T15970] mapped:2732 shmem:7348 pagetables:2391 [ 3821.143977][T15970] sec_pagetables:0 bounce:0 [ 3821.143977][T15970] kernel_misc_reclaimable:0 [ 3821.143977][T15970] free:442734 free_pcp:4900 free_cma:8128 [ 3821.144115][T15970] Node 0 active_anon:16440kB inactive_anon:25708kB active_file:11512kB inactive_file:48296kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:10928kB dirty:32kB writeback:0kB shmem:29392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3152kB pagetables:9564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 3821.144340][T15970] Node 0 DMA free:1770936kB boost:0kB min:22528kB low:28160kB high:33792kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16440kB inactive_anon:25708kB active_file:11512kB inactive_file:48296kB unevictable:3072kB writepending:32kB zspages:436kB present:2097152kB managed:1988404kB mlocked:0kB bounce:0kB free_pcp:19600kB local_pcp:3692kB free_cma:32512kB [ 3821.144554][T15970] lowmem_reserve[]: 0 0 0 0 0 [ 3821.144766][T15970] Node 0 DMA: 78*4kB (UE) 522*8kB (UME) 1013*16kB (UME) 1063*32kB (UME) 780*64kB (UME) 434*128kB (UME) 270*256kB (UMEC) 165*512kB (UMEC) 61*1024kB (UMEC) 35*2048kB (UMC) 323*4096kB (UMC) = 1770936kB [ 3821.145636][T15970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3821.145692][T15970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 3821.145742][T15970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3821.145803][T15970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 3821.145851][T15970] 22296 total pagecache pages [ 3821.145889][T15970] 0 pages in swap cache [ 3821.145984][T15970] Free swap = 122940kB [ 3821.146017][T15970] Total swap = 124996kB [ 3821.146048][T15970] 524288 pages RAM [ 3821.146073][T15970] 0 pages HighMem/MovableOnly [ 3821.146099][T15970] 27187 pages reserved [ 3821.146125][T15970] 8192 pages cma reserved [ 3821.146153][T15970] 4 pages hwpoisoned [ 3821.858506][T15988] syzkaller0: entered promiscuous mode [ 3821.860561][T15988] syzkaller0: entered allmulticast mode [ 3823.332790][T12716] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 3823.353501][T12716] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3824.329201][T16034] FAULT_INJECTION: forcing a failure. [ 3824.329201][T16034] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3824.329601][T16034] CPU: 0 UID: 0 PID: 16034 Comm: syz.2.4067 Tainted: G W L syzkaller #0 PREEMPT [ 3824.329773][T16034] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3824.329814][T16034] Hardware name: linux,dummy-virt (DT) [ 3824.329892][T16034] Call trace: [ 3824.329941][T16034] show_stack+0x18/0x24 (C) [ 3824.330046][T16034] dump_stack_lvl+0x60/0x80 [ 3824.330163][T16034] dump_stack+0x18/0x24 [ 3824.330240][T16034] should_fail_ex+0x1e0/0x238 [ 3824.330363][T16034] should_fail+0x14/0x40 [ 3824.330442][T16034] get_futex_key+0xdc/0x620 [ 3824.330550][T16034] futex_wake+0x68/0x240 [ 3824.330694][T16034] do_futex+0x178/0x210 [ 3824.330775][T16034] __arm64_sys_futex+0x100/0x1a0 [ 3824.330868][T16034] invoke_syscall+0x54/0x10c [ 3824.331035][T16034] el0_svc_common.constprop.0+0x40/0xe0 [ 3824.331130][T16034] do_el0_svc+0x1c/0x34 [ 3824.331208][T16034] el0_svc+0x38/0x1fc [ 3824.331287][T16034] el0t_64_sync_handler+0xa0/0xe4 [ 3824.331382][T16034] el0t_64_sync+0x1a4/0x1a8 [ 3824.781706][ T28] audit: type=1326 audit(2000002489.230:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16039 comm="syz.0.4070" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3d792a8 code=0x0 [ 3825.233890][T16051] FAULT_INJECTION: forcing a failure. [ 3825.233890][T16051] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3825.234244][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.2.4075 Tainted: G W L syzkaller #0 PREEMPT [ 3825.234370][T16051] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3825.234411][T16051] Hardware name: linux,dummy-virt (DT) [ 3825.234454][T16051] Call trace: [ 3825.234488][T16051] show_stack+0x18/0x24 (C) [ 3825.234613][T16051] dump_stack_lvl+0x60/0x80 [ 3825.234727][T16051] dump_stack+0x18/0x24 [ 3825.234842][T16051] should_fail_ex+0x1e0/0x238 [ 3825.235027][T16051] should_fail+0x14/0x40 [ 3825.235101][T16051] get_futex_key+0xdc/0x620 [ 3825.235174][T16051] futex_wake+0x68/0x240 [ 3825.235244][T16051] do_futex+0x178/0x210 [ 3825.235392][T16051] __arm64_sys_futex+0x100/0x1a0 [ 3825.235681][T16051] invoke_syscall+0x54/0x10c [ 3825.235785][T16051] el0_svc_common.constprop.0+0x40/0xe0 [ 3825.235946][T16051] do_el0_svc+0x1c/0x34 [ 3825.236043][T16051] el0_svc+0x38/0x1fc [ 3825.236191][T16051] el0t_64_sync_handler+0xa0/0xe4 [ 3825.236296][T16051] el0t_64_sync+0x1a4/0x1a8 [ 3825.825802][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4076'. [ 3828.806122][T12892] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 3828.822812][T12892] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3828.954683][T16074] fido_id[16074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3830.523474][T16085] netlink: 'syz.2.4089': attribute type 1 has an invalid length. [ 3830.523787][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 3831.662874][T16107] netlink: 'syz.0.4099': attribute type 4 has an invalid length. [ 3831.884844][T16111] FAULT_INJECTION: forcing a failure. [ 3831.884844][T16111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3831.890632][T16111] CPU: 1 UID: 0 PID: 16111 Comm: syz.2.4101 Tainted: G W L syzkaller #0 PREEMPT [ 3831.890815][T16111] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3831.890852][T16111] Hardware name: linux,dummy-virt (DT) [ 3831.890949][T16111] Call trace: [ 3831.890993][T16111] show_stack+0x18/0x24 (C) [ 3831.891106][T16111] dump_stack_lvl+0x60/0x80 [ 3831.891175][T16111] dump_stack+0x18/0x24 [ 3831.891244][T16111] should_fail_ex+0x1e0/0x238 [ 3831.891317][T16111] should_fail+0x14/0x40 [ 3831.891396][T16111] should_fail_usercopy+0x1c/0x40 [ 3831.891469][T16111] _inline_copy_from_user+0x24/0xa8 [ 3831.891539][T16111] do_handle_open+0x1b8/0x4a0 [ 3831.891604][T16111] __arm64_sys_open_by_handle_at+0x20/0x2c [ 3831.891671][T16111] invoke_syscall+0x54/0x10c [ 3831.891738][T16111] el0_svc_common.constprop.0+0x40/0xe0 [ 3831.891803][T16111] do_el0_svc+0x1c/0x34 [ 3831.891864][T16111] el0_svc+0x38/0x1fc [ 3831.891939][T16111] el0t_64_sync_handler+0xa0/0xe4 [ 3831.892014][T16111] el0t_64_sync+0x1a4/0x1a8 [ 3832.263908][T16119] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 3832.623713][T16125] FAULT_INJECTION: forcing a failure. [ 3832.623713][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3832.625962][T16125] CPU: 1 UID: 0 PID: 16125 Comm: syz.0.4107 Tainted: G W L syzkaller #0 PREEMPT [ 3832.626120][T16125] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3832.626158][T16125] Hardware name: linux,dummy-virt (DT) [ 3832.626198][T16125] Call trace: [ 3832.626232][T16125] show_stack+0x18/0x24 (C) [ 3832.626336][T16125] dump_stack_lvl+0x60/0x80 [ 3832.626413][T16125] dump_stack+0x18/0x24 [ 3832.626483][T16125] should_fail_ex+0x1e0/0x238 [ 3832.626562][T16125] should_fail+0x14/0x40 [ 3832.626632][T16125] should_fail_usercopy+0x1c/0x40 [ 3832.626707][T16125] _inline_copy_from_user+0x24/0xa8 [ 3832.626783][T16125] do_handle_open+0x1b8/0x4a0 [ 3832.627014][T16125] __arm64_sys_open_by_handle_at+0x20/0x2c [ 3832.627095][T16125] invoke_syscall+0x54/0x10c [ 3832.627194][T16125] el0_svc_common.constprop.0+0x40/0xe0 [ 3832.627276][T16125] do_el0_svc+0x1c/0x34 [ 3832.627351][T16125] el0_svc+0x38/0x1fc [ 3832.627439][T16125] el0t_64_sync_handler+0xa0/0xe4 [ 3832.627516][T16125] el0t_64_sync+0x1a4/0x1a8 [ 3833.517300][T16138] FAULT_INJECTION: forcing a failure. [ 3833.517300][T16138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3833.519319][T16138] CPU: 1 UID: 0 PID: 16138 Comm: syz.0.4112 Tainted: G W L syzkaller #0 PREEMPT [ 3833.519477][T16138] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3833.519516][T16138] Hardware name: linux,dummy-virt (DT) [ 3833.519555][T16138] Call trace: [ 3833.519611][T16138] show_stack+0x18/0x24 (C) [ 3833.519723][T16138] dump_stack_lvl+0x60/0x80 [ 3833.519799][T16138] dump_stack+0x18/0x24 [ 3833.519879][T16138] should_fail_ex+0x1e0/0x238 [ 3833.519956][T16138] should_fail+0x14/0x40 [ 3833.520022][T16138] should_fail_usercopy+0x1c/0x40 [ 3833.520086][T16138] _inline_copy_from_user+0x24/0xa8 [ 3833.520162][T16138] do_handle_open+0x1b8/0x4a0 [ 3833.520230][T16138] __arm64_sys_open_by_handle_at+0x20/0x2c [ 3833.520303][T16138] invoke_syscall+0x54/0x10c [ 3833.520374][T16138] el0_svc_common.constprop.0+0x40/0xe0 [ 3833.520440][T16138] do_el0_svc+0x1c/0x34 [ 3833.520501][T16138] el0_svc+0x38/0x1fc [ 3833.520576][T16138] el0t_64_sync_handler+0xa0/0xe4 [ 3833.520649][T16138] el0t_64_sync+0x1a4/0x1a8 [ 3835.060908][T16151] FAULT_INJECTION: forcing a failure. [ 3835.060908][T16151] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3835.062989][T16151] CPU: 1 UID: 0 PID: 16151 Comm: syz.2.4117 Tainted: G W L syzkaller #0 PREEMPT [ 3835.063155][T16151] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3835.063193][T16151] Hardware name: linux,dummy-virt (DT) [ 3835.063234][T16151] Call trace: [ 3835.063267][T16151] show_stack+0x18/0x24 (C) [ 3835.063395][T16151] dump_stack_lvl+0x60/0x80 [ 3835.063482][T16151] dump_stack+0x18/0x24 [ 3835.063553][T16151] should_fail_ex+0x1e0/0x238 [ 3835.063636][T16151] should_fail+0x14/0x40 [ 3835.063716][T16151] get_futex_key+0xdc/0x620 [ 3835.063794][T16151] futex_wake+0x68/0x240 [ 3835.063874][T16151] do_futex+0x178/0x210 [ 3835.063954][T16151] __arm64_sys_futex+0x100/0x1a0 [ 3835.064035][T16151] invoke_syscall+0x54/0x10c [ 3835.064114][T16151] el0_svc_common.constprop.0+0x40/0xe0 [ 3835.064196][T16151] do_el0_svc+0x1c/0x34 [ 3835.064273][T16151] el0_svc+0x38/0x1fc [ 3835.064368][T16151] el0t_64_sync_handler+0xa0/0xe4 [ 3835.064455][T16151] el0t_64_sync+0x1a4/0x1a8 [ 3836.194839][T16161] FAULT_INJECTION: forcing a failure. [ 3836.194839][T16161] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3836.196067][T16161] CPU: 1 UID: 0 PID: 16161 Comm: syz.2.4122 Tainted: G W L syzkaller #0 PREEMPT [ 3836.196158][T16161] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3836.196179][T16161] Hardware name: linux,dummy-virt (DT) [ 3836.196201][T16161] Call trace: [ 3836.196219][T16161] show_stack+0x18/0x24 (C) [ 3836.196279][T16161] dump_stack_lvl+0x60/0x80 [ 3836.196317][T16161] dump_stack+0x18/0x24 [ 3836.196352][T16161] should_fail_ex+0x1e0/0x238 [ 3836.196390][T16161] should_fail+0x14/0x40 [ 3836.196438][T16161] get_futex_key+0xdc/0x620 [ 3836.196475][T16161] futex_wake+0x68/0x240 [ 3836.196510][T16161] do_futex+0x178/0x210 [ 3836.196544][T16161] __arm64_sys_futex+0x100/0x1a0 [ 3836.196579][T16161] invoke_syscall+0x54/0x10c [ 3836.196614][T16161] el0_svc_common.constprop.0+0x40/0xe0 [ 3836.196649][T16161] do_el0_svc+0x1c/0x34 [ 3836.196683][T16161] el0_svc+0x38/0x1fc [ 3836.196743][T16161] el0t_64_sync_handler+0xa0/0xe4 [ 3836.196811][T16161] el0t_64_sync+0x1a4/0x1a8 [ 3836.853295][T16168] xt_hashlimit: size too large, truncated to 1048576 [ 3837.042643][T16172] FAULT_INJECTION: forcing a failure. [ 3837.042643][T16172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3837.044843][T16172] CPU: 1 UID: 0 PID: 16172 Comm: syz.2.4127 Tainted: G W L syzkaller #0 PREEMPT [ 3837.045013][T16172] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3837.045055][T16172] Hardware name: linux,dummy-virt (DT) [ 3837.045100][T16172] Call trace: [ 3837.045137][T16172] show_stack+0x18/0x24 (C) [ 3837.045250][T16172] dump_stack_lvl+0x60/0x80 [ 3837.045327][T16172] dump_stack+0x18/0x24 [ 3837.045410][T16172] should_fail_ex+0x1e0/0x238 [ 3837.045488][T16172] should_fail+0x14/0x40 [ 3837.045564][T16172] get_futex_key+0xdc/0x620 [ 3837.045643][T16172] futex_wake+0x68/0x240 [ 3837.045719][T16172] do_futex+0x178/0x210 [ 3837.045792][T16172] __arm64_sys_futex+0x100/0x1a0 [ 3837.045868][T16172] invoke_syscall+0x54/0x10c [ 3837.045945][T16172] el0_svc_common.constprop.0+0x40/0xe0 [ 3837.046010][T16172] do_el0_svc+0x1c/0x34 [ 3837.046075][T16172] el0_svc+0x38/0x1fc [ 3837.046149][T16172] el0t_64_sync_handler+0xa0/0xe4 [ 3837.046220][T16172] el0t_64_sync+0x1a4/0x1a8 [ 3837.677146][T16180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3837.906045][T16184] netlink: 'syz.0.4133': attribute type 13 has an invalid length. [ 3837.906495][T16184] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4133'. [ 3841.581575][T16209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3841.603808][T16209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3846.374968][T16242] FAULT_INJECTION: forcing a failure. [ 3846.374968][T16242] name failslab, interval 1, probability 0, space 0, times 0 [ 3846.376826][T16242] CPU: 1 UID: 0 PID: 16242 Comm: syz.0.4155 Tainted: G W L syzkaller #0 PREEMPT [ 3846.376980][T16242] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3846.377018][T16242] Hardware name: linux,dummy-virt (DT) [ 3846.377073][T16242] Call trace: [ 3846.377113][T16242] show_stack+0x18/0x24 (C) [ 3846.377229][T16242] dump_stack_lvl+0x60/0x80 [ 3846.377300][T16242] dump_stack+0x18/0x24 [ 3846.377371][T16242] should_fail_ex+0x1e0/0x238 [ 3846.377440][T16242] should_failslab+0x54/0x80 [ 3846.377509][T16242] __kmalloc_cache_node_noprof+0x60/0x45c [ 3846.377582][T16242] __alloc_workqueue+0x1dc/0x704 [ 3846.377650][T16242] alloc_workqueue_noprof+0x64/0x9c [ 3846.377710][T16242] __rds_conn_create+0x5d4/0x8e0 [ 3846.377783][T16242] rds_conn_create_outgoing+0x24/0x30 [ 3846.377864][T16242] rds_sendmsg+0x580/0xeb4 [ 3846.377951][T16242] __sock_sendmsg+0x54/0x60 [ 3846.378047][T16242] ____sys_sendmsg+0x250/0x2a8 [ 3846.378140][T16242] ___sys_sendmsg+0xb0/0x108 [ 3846.378206][T16242] __sys_sendmsg+0x9c/0x100 [ 3846.378299][T16242] __arm64_sys_sendmsg+0x20/0x38 [ 3846.378380][T16242] invoke_syscall+0x54/0x10c [ 3846.378463][T16242] el0_svc_common.constprop.0+0x40/0xe0 [ 3846.378547][T16242] do_el0_svc+0x1c/0x34 [ 3846.378622][T16242] el0_svc+0x38/0x1fc [ 3846.378697][T16242] el0t_64_sync_handler+0xa0/0xe4 [ 3846.378768][T16242] el0t_64_sync+0x1a4/0x1a8 [ 3846.607914][T16244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3846.609749][T16244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3849.708168][T16253] syzkaller0: entered promiscuous mode [ 3849.716737][T16253] syzkaller0: entered allmulticast mode [ 3849.941069][T16255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3849.944047][T16255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.394411][T16262] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 3850.657632][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 3850.664369][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 3850.669361][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 3850.675772][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 3852.441838][T16288] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 3852.785294][T16290] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 3852.816188][T16290] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 3852.988959][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4177'. [ 3853.211318][T16296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4179'. [ 3860.049533][T16337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 3860.149163][T16337] bond0: (slave bond_slave_0): Releasing backup interface [ 3860.219426][T10383] infiniband syz2: ib_query_port failed (-19) [ 3860.336112][T16337] dvmrp0: entered allmulticast mode [ 3860.512222][T16343] vcan0 speed is unknown, defaulting to 1000 [ 3860.523541][T16343] vcan0 speed is unknown, defaulting to 1000 [ 3860.527979][T16343] vcan0 speed is unknown, defaulting to 1000 [ 3860.946541][T16353] rdma_rxe: rxe_newlink: failed to add syz_tun [ 3861.040280][T10383] vcan0 speed is unknown, defaulting to 1000 [ 3861.042340][T16343] infiniband syz1: set active [ 3861.043459][T16343] infiniband syz1: added vcan0 [ 3861.121779][T16343] RDS/IB: syz1: added [ 3861.128008][T16343] smc: adding ib device syz1 with port count 1 [ 3861.128370][T16343] smc: ib device syz1 port 1 has no pnetid [ 3861.132804][T10383] vcan0 speed is unknown, defaulting to 1000 [ 3861.137143][T16343] vcan0 speed is unknown, defaulting to 1000 [ 3861.626533][T16343] vcan0 speed is unknown, defaulting to 1000 [ 3862.427947][T16375] binder: 16374:16375 tried to acquire reference to desc 0, got 1 instead [ 3862.434269][T16375] binder: 16374:16375 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 3862.439019][T16375] binder: 16375 RLIMIT_NICE not set [ 3862.441957][T16375] binder: 16375 RLIMIT_NICE not set [ 3862.446506][T16375] binder: 16374:16375 got new transaction with bad transaction stack, transaction 17 has target 16374:16375 [ 3862.451624][T16375] binder: 16374:16375 transaction call to 16374:0 failed 18/29201/-71, code 0 size 0-0 line 3312 [ 3862.455912][T10383] binder: release 16374:16375 transaction 17 out, still active [ 3862.457162][T10383] binder: undelivered TRANSACTION_COMPLETE [ 3862.458078][T10383] binder: undelivered TRANSACTION_ERROR: 29201 [ 3862.467603][T10383] binder: release 16374:16375 transaction 17 in, still active [ 3862.468030][T10383] binder: send failed reply for transaction 17, target dead [ 3864.147842][T12734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3864.148224][T12734] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3864.362153][T12734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3864.363782][T12734] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3864.469151][T12734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3864.474563][T12734] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3864.570519][T12734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 3864.570958][T12734] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3865.106661][T12734] dvmrp0: left allmulticast mode [ 3865.691759][T12734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3865.736595][T12734] bond0 (unregistering): Released all slaves [ 3865.823769][T16409] vcan0 speed is unknown, defaulting to 1000 [ 3866.725612][T16451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3866.728455][T16451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3867.439321][ T3220] 8021q: adding VLAN 0 to HW filter on device eth5 [ 3867.614595][T12734] hsr_slave_0: left promiscuous mode [ 3867.626967][T12734] hsr_slave_1: left promiscuous mode [ 3867.649518][T12734] veth1_macvtap: left promiscuous mode [ 3867.651854][T12734] veth0_macvtap: left promiscuous mode [ 3867.659120][T12734] veth1_vlan: left promiscuous mode [ 3867.666699][T12734] veth0_vlan: left promiscuous mode [ 3868.030499][T12716] page_pool_release_retry() stalled pool shutdown: id 40, 1 inflight 60 sec [ 3868.425018][ T4062] smc: removing ib device syz1 [ 3868.443762][T12892] vcan0 speed is unknown, defaulting to 1000 [ 3868.448449][T12892] syz1: Port: 1 Link DOWN [ 3869.873404][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'. [ 3871.053313][ T3220] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3872.147880][T16409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3872.177847][T16409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3872.644419][T16526] netlink: 'syz.0.4222': attribute type 13 has an invalid length. [ 3872.645849][T16526] netlink: 'syz.0.4222': attribute type 17 has an invalid length. [ 3873.097442][T16526] bridge_slave_1: left allmulticast mode [ 3873.676201][T16526] ip6gre1: left promiscuous mode [ 3873.676551][T16526] ip6gre1: left allmulticast mode [ 3873.745993][ T3220] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3875.029196][T16409] hsr_slave_0: entered promiscuous mode [ 3875.047397][T16409] hsr_slave_1: entered promiscuous mode [ 3875.706157][ T3220] 8021q: adding VLAN 0 to HW filter on device eth7 [ 3876.859483][T16409] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3876.877932][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3876.885396][T16409] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3876.921426][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3876.931713][T16409] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3876.954233][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3876.964763][T16409] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3876.982600][T16409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3877.685493][T16409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3880.935424][T16409] veth0_vlan: entered promiscuous mode [ 3880.957172][T16409] veth1_vlan: entered promiscuous mode [ 3881.034967][T16409] veth0_macvtap: entered promiscuous mode [ 3881.049194][T16409] veth1_macvtap: entered promiscuous mode [ 3881.142133][T14891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3881.144249][ T7592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3881.148207][ T7592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3881.152689][ T7592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3882.556787][T16662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3882.558295][T16662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3885.675387][T16667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3885.689321][T16667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3886.681693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 3886.915502][T16667] hsr_slave_0: entered promiscuous mode [ 3886.918171][T16667] hsr_slave_1: entered promiscuous mode [ 3886.922705][T16667] debugfs: 'hsr0' already exists in 'hsr' [ 3886.924727][T16667] Cannot create hsr debugfs directory [ 3887.456729][T16667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3887.487578][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3887.497001][T16667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3887.523129][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3887.529179][T16667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3887.555546][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3887.573587][T16667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3887.595332][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3888.160170][T16713] netlink: 'syz.2.4250': attribute type 12 has an invalid length. [ 3889.285609][T16667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3892.251502][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'. [ 3893.590235][T16773] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 3893.796962][T16667] veth0_vlan: entered promiscuous mode [ 3893.844705][T16667] veth1_vlan: entered promiscuous mode [ 3893.988486][T16667] veth0_macvtap: entered promiscuous mode [ 3894.059148][T16667] veth1_macvtap: entered promiscuous mode [ 3894.334557][T16780] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 3894.344941][T16780] syzkaller0: entered promiscuous mode [ 3894.345314][T16780] syzkaller0: entered allmulticast mode [ 3894.373950][T12734] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3894.376190][T12734] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3894.450555][ T4062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3894.551822][T12734] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3895.246340][T16791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3895.262532][T16791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3895.349121][T16793] nvmet: adding nsid 1 to subsystem testsubsys [ 3895.363761][T16793] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 3895.365905][T16793] Mem abort info: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3895.397637][T16793] ESR = 0x0000000096000006 [ 3895.402437][T16793] EC = 0x25: DABT (current EL), IL = 32 bits [ 3895.405171][T16793] SET = 0, FnV = 0 [ 3895.410846][T16793] EA = 0, S1PTW = 0 [ 3895.413752][T16793] FSC = 0x06: level 2 translation fault [ 3895.416870][T16793] Data abort info: [ 3895.421850][T16793] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 3895.424504][T16793] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 3895.427049][T16793] GCS = 0, Overlay = 0, DirtyBit = 0 [ 3895.430485][T16793] user pgtable: 4k pages, 52-bit VAs, pgdp=0000000059dc2580 [ 3895.433821][T16793] [0000000000000000] pgd=0800000060e59403, p4d=080000009e0c6403, pud=0800000060ec9403, pmd=0000000000000000 [ 3895.451525][T16793] Internal error: Oops: 0000000096000006 [#1] SMP [ 3895.458609][T16793] Modules linked in: [ 3895.467309][T16793] CPU: 0 UID: 0 PID: 16793 Comm: syz.3.4266 Tainted: G W L syzkaller #0 PREEMPT [ 3895.467905][T16793] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 3895.468236][T16793] Hardware name: linux,dummy-virt (DT) [ 3895.468715][T16793] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 3895.469205][T16793] pc : __pi_strlen+0x14/0x150 [ 3895.469609][T16793] lr : do_getname_kernel+0x20/0x12c [ 3895.469969][T16793] sp : ffff80008377bb60 [ 3895.470233][T16793] x29: ffff80008377bb60 x28: f5f0000009ab5500 x27: 0000000000000000 [ 3895.470910][T16793] x26: 0000000000000000 x25: 0000000000000000 x24: fcf000005e052ec0 [ 3895.471396][T16793] x23: fdf000000670bc00 x22: 0000000000000000 x21: 0000000000000000 [ 3895.471825][T16793] x20: 00000000fffffff1 x19: 0000000000020002 x18: 0000000000000000 [ 3895.472256][T16793] x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200004c0 [ 3895.472707][T16793] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 3895.473331][T16793] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000078 [ 3895.473815][T16793] x8 : 0101010101010101 x7 : fcf000005e052ec8 x6 : f0f000005df82001 [ 3895.474247][T16793] x5 : f0f000005df82001 x4 : 0000000000000000 x3 : f5f0000009ab5500 [ 3895.474697][T16793] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 3895.475421][T16793] Call trace: [ 3895.475714][T16793] __pi_strlen+0x14/0x150 (P) [ 3895.476061][T16793] getname_kernel+0x14/0x20 [ 3895.476372][T16793] filp_open+0x34/0x104 [ 3895.476646][T16793] nvmet_file_ns_enable+0x38/0xfc [ 3895.476957][T16793] nvmet_ns_enable+0x12c/0x1e0 [ 3895.477270][T16793] nvmet_ns_enable_store+0x64/0xd4 [ 3895.477610][T16793] configfs_write_iter+0xc4/0x128 [ 3895.477981][T16793] vfs_write+0x244/0x36c [ 3895.478279][T16793] ksys_write+0x70/0x108 [ 3895.478582][T16793] __arm64_sys_write+0x18/0x24 [ 3895.478937][T16793] invoke_syscall+0x54/0x10c [ 3895.479239][T16793] el0_svc_common.constprop.0+0x40/0xe0 [ 3895.479595][T16793] do_el0_svc+0x1c/0x34 [ 3895.479937][T16793] el0_svc+0x38/0x1fc [ 3895.480238][T16793] el0t_64_sync_handler+0xa0/0xe4 [ 3895.480566][T16793] el0t_64_sync+0x1a4/0x1a8 [ 3895.481232][T16793] Code: 92400c04 b200c3e8 f100009f 5400088c (a9400c02) [ 3895.482331][T16793] ---[ end trace 0000000000000000 ]--- [ 3895.483466][T16793] Kernel panic - not syncing: Oops: Fatal exception [ 3895.484323][T16793] SMP: stopping secondary CPUs [ 3895.485601][T16793] Kernel Offset: disabled [ 3895.485874][T16793] CPU features: 0x0,00000000,00d1982f,df188f01,2afff73f [ 3895.486508][T16793] Memory Limit: none [ 3895.487498][T16793] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:18:24 Registers: info registers vcpu 0 CPU#0 PC=ffff80008004dc80 X00=ffff800082f7b630 X01=ffff80008553be10 X02=ffff80008553be80 X03=ffff800085dffedc X04=ffff80008553c000 X05=ffff800082f7b6e0 X06=ffff80008553b4f0 X07=ffff8000800102e0 X08=000000000000002d X09=0000000000000000 X10=86925b5ffad1c4b7 X11=00000000000000c0 X12=000000000000005a X13=0000000000000137 X14=0000000000000137 X15=fbf0000006aa5e00 X16=ffff800082f78000 X17=fff07ffffcd05000 X18=0000000000000000 X19=ffff800082ebbe60 X20=ffff800082f0a000 X21=fff000007b760e20 X22=0000000000000000 X23=f6f00000079b1100 X24=ffff800082bdf000 X25=0000000000000002 X26=f1f0000003736100 X27=00000000000000e8 X28=000000000000001b X29=ffff800082f7b9f0 X30=ffff800080398fac SP=ffff800082f7b730 PSTATE=80402009 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0a0a0a0a0a0a0a0a:0a0a0a0a0a0a0a0a Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:696765725f740000:3a6f666e69207472 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:5d3339373631545b:5d3530393536332e Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000000ffff:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000ff00000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6572656420726574:6e696f70204c4c55 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:7265746e696f7020:4c4c554e206c656e Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2074612065636e65:7265666572656420 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000fffffc1d2b40:0000fffffc1d2b40 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000fffffc1d2b10 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081cd1dc4 X00=ffff800081cd1dc0 X01=f6f0000006718000 X02=fff07ffffcd20000 X03=0000000000000001 X04=00000000003186f1 X05=0000000000155cc0 X06=0000000000000001 X07=0000000000000000 X08=000000000000b67e X09=0000000000000381 X10=0000000003b1ad11 X11=0000000000000136 X12=0000b42fee0a70f4 X13=00000000fa83b2da X14=00000000000001a8 X15=00000000c7a9a90f X16=00000000cce859ce X17=00000000a9c232ed X18=0000000000000014 X19=0000000000000000 X20=ffff800082ceba08 X21=ffff800082ceba00 X22=0000000000000004 X23=ffff800082ceba08 X24=0000000000000028 X25=fff07ffffcd20000 X26=ffff800082be2130 X27=f6f0000006718000 X28=f9f0000046329100 X29=ffff80008585bc90 X30=ffff8000801b9fd8 SP=ffff80008585bc90 PSTATE=814020c9 N--- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2323232323232323:2323232323232323 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:cccccccccccccccc:cccccccccccccccc Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:3333333333333333:3333333333333333 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:cccccccccccccccc Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:bb448243222c92da:e3914ed4e87380b0 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:43788d6f07084f17:4508b00c6052a10f Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:8e9f894b2581e79e:20c883c9819d5c97 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:57c93d417f4d0394:89cd11f6992873d1 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6b69be1163cb6500:a4ac85c293540e63 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0009000700030001 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffff9f9fc8d0 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000100000000000