last executing test programs: 30m49.06251925s ago: executing program 0 (id=3086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x100, &(0x7f00000001c0)="0fdad4f3918e26a50fdbd842b09659925e32025abff0e9066c4d7b1b4b7855e4dfd0488044a4307715cb251cc7b8b1227c3b5608b788c6049d1a2b562acf509f66580c0e3abd3ea84a50cc38656cfa60042cd810607ed1b5678793fceb679ee41980d917a1a5fb9534389564919dec43146a2729b77c8cbf926be2fa077be1d903d642ccad736f2401fe6fe96299c89b75589ff4b84fccf77cc84fed", 0x9c, &(0x7f0000000280), 0x0, &(0x7f0000000340)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0xd25f8e34d7c46251, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) r3 = fcntl$dupfd(r2, 0x406, r2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000680)="f4", 0x1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="1000000000000000000000000700000011"], 0x28}}], 0x1, 0x20008084) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x20d) 30m46.291400968s ago: executing program 0 (id=3087): r0 = socket$packet(0x11, 0x3, 0x300) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x2, 0x4, 0x7a0, 0x10000}) 30m46.191398659s ago: executing program 0 (id=3088): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f00000020c0)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) 30m46.080851362s ago: executing program 0 (id=3089): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x981051, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 30m45.970938344s ago: executing program 0 (id=3090): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4008010) 30m45.651923251s ago: executing program 0 (id=3091): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3ea, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000680)=0x6, 0x4) mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000080)='adfs\x00', 0x14000, 0x0) rseq(&(0x7f00000003c0), 0x20, 0x30000000, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='100', 0x3) chdir(0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000380)={0x9, 0xe600, 0x5, 0x9f, 0xbdea, 0x81d0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x8000) 30m45.651737521s ago: executing program 32 (id=3091): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200003, 0x0, 0x0, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3ea, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000680)=0x6, 0x4) mount(0x0, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', &(0x7f0000000080)='adfs\x00', 0x14000, 0x0) rseq(&(0x7f00000003c0), 0x20, 0x30000000, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='100', 0x3) chdir(0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000380)={0x9, 0xe600, 0x5, 0x9f, 0xbdea, 0x81d0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x2, 0x8000) 16m19.981581551s ago: executing program 2 (id=5977): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000001e40)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000001e80)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0x1c) 16m19.681533176s ago: executing program 2 (id=5979): prlimit64(0x0, 0xe, &(0x7f00000016c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000017c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001840), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000018c0)=0x6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 16m15.620348727s ago: executing program 2 (id=5982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 16m14.860225595s ago: executing program 2 (id=5985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0xd0841, 0x0) 16m14.632963052s ago: executing program 2 (id=5986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) write(r2, &(0x7f0000000500)="01", 0xf) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in=@private=0xa010102, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}}, 0xf0}}, 0x40c4) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000180)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 16m12.281509704s ago: executing program 1 (id=5990): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x3d, 0x5, 0x0, 0x9, 0x800000000, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) 16m12.152074669s ago: executing program 1 (id=5991): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f00000001c0)={0x2e, 0x1fdd1375bdd2e52f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000400)) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) 16m12.079503968s ago: executing program 1 (id=5992): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x16, 0x11, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000001440)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r2, 0x0, 0xe, 0x0, &(0x7f0000001500)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m11.740294057s ago: executing program 1 (id=5993): openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2a881, 0x0) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000280)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x521c, 0x1, 0x61, 0x0, 0x18) 16m11.53986068s ago: executing program 1 (id=5994): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 16m11.381405989s ago: executing program 1 (id=5995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101e01, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x7d) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 16m10.50956947s ago: executing program 2 (id=5996): keyctl$update(0x2, 0x0, &(0x7f00000001c0)="23eb467921", 0x5) 15m0.126203946s ago: executing program 33 (id=5996): keyctl$update(0x2, 0x0, &(0x7f00000001c0)="23eb467921", 0x5) 12m53.100187645s ago: executing program 34 (id=5995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101e01, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x7d) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2m50.529498497s ago: executing program 3 (id=6517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000400300000a30000000030a010800000059b80000000a00000c040004800900010073797a31000000000c0002"], 0x58}, 0x1, 0x0, 0x0, 0x200000a4}, 0x20008040) 2m50.367114866s ago: executing program 3 (id=6518): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "0700567812080078", "12345678123456781234567812345678", "4aa45678", "1234567812345678"}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) epoll_create1(0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5e2043c1da420a92", "0200550200000000917794865181c67a", "212ac500", "f9d632d01e424eff"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x1d40, 0x0, 0x0) 2m49.190982192s ago: executing program 4 (id=6524): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x4, 0x608, [0x200000000a40, 0x0, 0x0, 0x200000000cb0, 0x200000001018], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x26, 0x9100, 'bond_slave_0\x00', 'pim6reg\x00', 'vlan0\x00', 'veth0_to_bond\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0xe0, 0x118, 0x150, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'wg1\x00', 'veth1_macvtap\x00', 0x24, 0x0, 0x7, 0x200, 0x4, 0x5, {0x1e8}, {0x5a6e87df}}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}, {0x3, 0x41, 0x6003, 'syzkaller1\x00', 'veth0_to_hsr\x00', 'veth0_to_team\x00', 'veth0_to_bridge\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xf0, [], [@snat={'snat\x00', 0x10, {{@random="aff5c063bfbe", 0x10}}}], @common=@ERROR={'ERROR\x00', 0x20, {"24f892c63a2e678f73093db00947ccbb68d3eced324e97bc4c2e4461c605"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x3, 0x8864, 'pimreg0\x00', 'ip6_vti0\x00', 'ip6tnl0\x00', 'bond_slave_0\x00', @multicast, [0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0xb0, 0x118, 0x168, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x63, 0x100, 0x7fff, {0x7ffffffffffffffd}}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0xc, {0x1d33cf33}}}}}, {0x3, 0x40, 0x0, 'syz_tun\x00', 'hsr0\x00', 'pimreg\x00', 'pim6reg0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x198, 0x198, 0x1d0, [@comment={{'comment\x00', 0x0, 0x100}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x680) 2m49.091500724s ago: executing program 4 (id=6525): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./dev/vhci\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 2m48.988982776s ago: executing program 4 (id=6526): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80) pipe2(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0) 2m47.149083909s ago: executing program 4 (id=6527): syz_open_procfs$namespace(0x0, &(0x7f0000000b40)='ns/uts\x00') syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x402) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000380), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000780)={0xffffffffffffffff, 0x1f, 0x0, 0x1000000}) socket$inet6(0xa, 0x805, 0x0) 2m46.800066129s ago: executing program 4 (id=6528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) 2m45.890873364s ago: executing program 3 (id=6529): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000580)='dummy_', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='dummy_udc.0', 0xb) mmap(&(0x7f00005d9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) setpriority(0x2, 0x0, 0x10) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, 0x0, &(0x7f00000006c0)=""/43, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000000740)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000440)=0x8, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000480)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r4}}, 0x30) 2m45.697553317s ago: executing program 3 (id=6530): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x80002, 0x0) sendfile(r0, r0, 0x0, 0x2000009) 2m45.24228667s ago: executing program 3 (id=6531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) 2m45.160748949s ago: executing program 3 (id=6532): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x40080) 2m9.065526923s ago: executing program 4 (id=6533): setns(0xc9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000640)={@my=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000900)={@my=0x1}) 1m23.497562734s ago: executing program 35 (id=6532): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, 0x0, 0x40080) 0s ago: executing program 36 (id=6533): setns(0xc9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000640)={@my=0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000900)={@my=0x1}) kernel console output (not intermixed with test programs): ing pfn 0x4f73e at process virtual address 0x2001a000 [ 4971.754270][T16642] Soft offlining pfn 0x57d48 at process virtual address 0x2001b000 [ 4971.772262][ T28] kauditd_printk_skb: 2473 callbacks suppressed [ 4971.772384][ T28] audit: type=1326 audit(2000002784.780:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.772859][ T28] audit: type=1326 audit(2000002784.780:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.773007][ T28] audit: type=1326 audit(2000002784.790:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.773141][ T28] audit: type=1326 audit(2000002784.790:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.774349][ T28] audit: type=1326 audit(2000002784.790:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.774556][ T28] audit: type=1326 audit(2000002784.790:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.774708][ T28] audit: type=1326 audit(2000002784.790:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.774857][ T28] audit: type=1326 audit(2000002784.790:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.774997][ T28] audit: type=1326 audit(2000002784.790:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.775150][ T28] audit: type=1326 audit(2000002784.790:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16624 comm="syz.1.4059" exe="/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffb935baac code=0x7ffc0000 [ 4971.790450][T16642] Soft offlining pfn 0x64e09 at process virtual address 0x2001c000 [ 4971.817418][T16642] Soft offlining pfn 0x4f6a9 at process virtual address 0x2001d000 [ 4971.871985][T16642] Soft offlining pfn 0x5c18d at process virtual address 0x2001e000 [ 4971.894636][T16642] Soft offlining pfn 0x5f1a3 at process virtual address 0x2001f000 [ 4971.905126][T16642] Soft offlining pfn 0x5d417 at process virtual address 0x20020000 [ 4971.909466][T16642] Soft offlining pfn 0x5dd3a at process virtual address 0x20021000 [ 4971.916434][T16642] Soft offlining pfn 0x63130 at process virtual address 0x20022000 [ 4971.924135][T16642] Soft offlining pfn 0x56727 at process virtual address 0x20023000 [ 4971.929432][T16642] Soft offlining pfn 0x51368 at process virtual address 0x20024000 [ 4971.940383][T16642] Soft offlining pfn 0x51cd3 at process virtual address 0x20025000 [ 4971.947636][T16642] Soft offlining pfn 0x57b56 at process virtual address 0x20026000 [ 4971.957728][T16642] Soft offlining pfn 0x5925d at process virtual address 0x20027000 [ 4971.964550][T16642] Soft offlining pfn 0x4d198 at process virtual address 0x20028000 [ 4971.972495][T16642] Soft offlining pfn 0x5b879 at process virtual address 0x20029000 [ 4971.978624][T16642] Soft offlining pfn 0x49e7e at process virtual address 0x2002a000 [ 4971.986785][T16642] Soft offlining pfn 0x88484 at process virtual address 0x2002b000 [ 4971.994777][T16642] Soft offlining pfn 0x4bb7b at process virtual address 0x2002c000 [ 4972.006127][T16642] Soft offlining pfn 0x579ad at process virtual address 0x2002d000 [ 4972.025246][T16642] Soft offlining pfn 0x48c7f at process virtual address 0x2002e000 [ 4972.046456][T16642] Soft offlining pfn 0x5fe1a at process virtual address 0x2002f000 [ 4972.048042][T16642] Soft offlining pfn 0x4f479 at process virtual address 0x20030000 [ 4972.057220][T16642] Soft offlining pfn 0x5136b at process virtual address 0x20031000 [ 4972.066049][T16642] Soft offlining pfn 0x4ece8 at process virtual address 0x20032000 [ 4972.084039][T16642] Soft offlining pfn 0x5747a at process virtual address 0x20033000 [ 4972.109502][T16642] Soft offlining pfn 0x4afab at process virtual address 0x20034000 [ 4972.127355][T16642] Soft offlining pfn 0x58e80 at process virtual address 0x20035000 [ 4972.167357][T16642] Soft offlining pfn 0x61fd6 at process virtual address 0x20036000 [ 4972.187832][T16642] Soft offlining pfn 0x4ba39 at process virtual address 0x20037000 [ 4972.206817][T16642] Soft offlining pfn 0x8bbcd at process virtual address 0x20038000 [ 4972.223359][T16642] Soft offlining pfn 0x4ba3c at process virtual address 0x20039000 [ 4972.237738][T16642] Soft offlining pfn 0x4ba0a at process virtual address 0x2003a000 [ 4972.250380][T16642] Soft offlining pfn 0x54f03 at process virtual address 0x2003b000 [ 4972.284797][T16642] Soft offlining pfn 0x6448c at process virtual address 0x2003c000 [ 4972.295739][T16646] FAULT_INJECTION: forcing a failure. [ 4972.295739][T16646] name failslab, interval 1, probability 0, space 0, times 0 [ 4972.295887][T16646] CPU: 1 UID: 0 PID: 16646 Comm: syz.1.4069 Not tainted syzkaller #0 PREEMPT [ 4972.295972][T16646] Hardware name: linux,dummy-virt (DT) [ 4972.296012][T16646] Call trace: [ 4972.296046][T16646] show_stack+0x18/0x24 (C) [ 4972.296158][T16646] dump_stack_lvl+0x60/0x80 [ 4972.296230][T16646] dump_stack+0x18/0x24 [ 4972.296298][T16646] should_fail_ex+0x1e0/0x238 [ 4972.296376][T16646] should_failslab+0x54/0x80 [ 4972.296449][T16646] __kmalloc_node_track_caller_noprof+0xb0/0x520 [ 4972.296533][T16646] kstrdup+0x48/0xa0 [ 4972.296606][T16646] kstrdup_const+0x40/0x4c [ 4972.296676][T16646] __kernfs_new_node+0x54/0x254 [ 4972.296753][T16646] kernfs_new_node+0x88/0xa4 [ 4972.296821][T16646] __kernfs_create_file+0x30/0xfc [ 4972.296891][T16646] cgroup_addrm_files+0x140/0x2e0 [ 4972.296970][T16646] css_populate_dir+0x110/0x1e0 [ 4972.297047][T16646] cgroup_mkdir+0x104/0x520 [ 4972.297133][T16646] kernfs_iop_mkdir+0x6c/0xc0 [ 4972.297203][T16646] vfs_mkdir+0xc4/0x210 [ 4972.297278][T16646] filename_mkdirat+0x1dc/0x218 [ 4972.297351][T16646] __arm64_sys_mkdirat+0x40/0x64 [ 4972.297430][T16646] invoke_syscall+0x54/0x10c [ 4972.297502][T16646] el0_svc_common.constprop.0+0x40/0xe0 [ 4972.297573][T16646] do_el0_svc+0x1c/0x34 [ 4972.297644][T16646] el0_svc+0x38/0x1fc [ 4972.297722][T16646] el0t_64_sync_handler+0xa0/0xe4 [ 4972.297788][T16646] el0t_64_sync+0x1a4/0x1a8 [ 4972.297865][T16646] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 4972.319574][T16642] Soft offlining pfn 0x619ea at process virtual address 0x2003d000 [ 4972.344449][T16642] Soft offlining pfn 0x58efd at process virtual address 0x2003e000 [ 4972.350867][T16642] Soft offlining pfn 0x4a2d6 at process virtual address 0x2003f000 [ 4972.362615][T16642] Soft offlining pfn 0x6144f at process virtual address 0x20040000 [ 4972.374372][T16642] Soft offlining pfn 0x5a9a4 at process virtual address 0x20041000 [ 4972.385502][T16642] Soft offlining pfn 0x65150 at process virtual address 0x20042000 [ 4972.399309][T16642] Soft offlining pfn 0x4ecca at process virtual address 0x20043000 [ 4972.412525][T16642] Soft offlining pfn 0x51c5d at process virtual address 0x20044000 [ 4972.424238][T16642] Soft offlining pfn 0x51c5f at process virtual address 0x20045000 [ 4972.436161][T16642] Soft offlining pfn 0x88d97 at process virtual address 0x20046000 [ 4972.448042][T16642] Soft offlining pfn 0x56a5d at process virtual address 0x20047000 [ 4972.461972][T16642] Soft offlining pfn 0x52c06 at process virtual address 0x20048000 [ 4972.475112][T16642] Soft offlining pfn 0x8905c at process virtual address 0x20049000 [ 4972.488473][T16642] Soft offlining pfn 0x4baa3 at process virtual address 0x2004a000 [ 4972.505570][T16642] Soft offlining pfn 0x602bb at process virtual address 0x2004b000 [ 4972.522929][T16642] Soft offlining pfn 0x5a0cf at process virtual address 0x2004c000 [ 4972.528443][T16648] ip_tables: iptables: counters copy to user failed while replacing table [ 4972.547034][T16642] Soft offlining pfn 0x8994e at process virtual address 0x2004d000 [ 4972.558501][T16642] Soft offlining pfn 0x5c1c2 at process virtual address 0x2004e000 [ 4972.569619][T16642] Soft offlining pfn 0x61081 at process virtual address 0x2004f000 [ 4972.580306][T16642] Soft offlining pfn 0x5f088 at process virtual address 0x20050000 [ 4972.591607][T16642] Soft offlining pfn 0x64fec at process virtual address 0x20051000 [ 4972.599906][T16642] Soft offlining pfn 0x4ade3 at process virtual address 0x20052000 [ 4972.612468][T16642] Soft offlining pfn 0x509d1 at process virtual address 0x20053000 [ 4972.623598][T16642] Soft offlining pfn 0x4ac76 at process virtual address 0x20054000 [ 4972.634658][T16642] Soft offlining pfn 0x6421f at process virtual address 0x20055000 [ 4972.645922][T16642] Soft offlining pfn 0x565a2 at process virtual address 0x20056000 [ 4972.657196][T16642] Soft offlining pfn 0x54105 at process virtual address 0x20057000 [ 4972.668302][T16642] Soft offlining pfn 0x51d36 at process virtual address 0x20058000 [ 4972.679978][T16642] Soft offlining pfn 0x4f11c at process virtual address 0x20059000 [ 4972.691949][T16642] Soft offlining pfn 0x54e0f at process virtual address 0x2005a000 [ 4972.702943][T16642] Soft offlining pfn 0x4bbed at process virtual address 0x2005b000 [ 4972.713125][T16642] Soft offlining pfn 0x48cee at process virtual address 0x2005c000 [ 4972.722522][T16642] Soft offlining pfn 0x492e5 at process virtual address 0x2005d000 [ 4972.731750][T16642] Soft offlining pfn 0x61d4f at process virtual address 0x2005e000 [ 4972.740277][T16642] Soft offlining pfn 0x4936e at process virtual address 0x2005f000 [ 4972.749159][T16642] Soft offlining pfn 0x48cdd at process virtual address 0x20060000 [ 4972.758325][T16642] Soft offlining pfn 0x48cd0 at process virtual address 0x20061000 [ 4972.768662][T16642] Soft offlining pfn 0x572fa at process virtual address 0x20062000 [ 4972.777626][T16642] Soft offlining pfn 0x509ce at process virtual address 0x20063000 [ 4972.786953][T16642] Soft offlining pfn 0x5b39d at process virtual address 0x20064000 [ 4972.795748][T16642] Soft offlining pfn 0x66435 at process virtual address 0x20065000 [ 4972.810723][T16642] Soft offlining pfn 0x54922 at process virtual address 0x20066000 [ 4972.824415][T16642] Soft offlining pfn 0x5c0f7 at process virtual address 0x20067000 [ 4972.840740][T16642] Soft offlining pfn 0x5a1af at process virtual address 0x20068000 [ 4972.860682][T16642] Soft offlining pfn 0x4a3bd at process virtual address 0x20069000 [ 4972.873790][T16642] Soft offlining pfn 0x5a9c2 at process virtual address 0x2006a000 [ 4972.885615][T16642] Soft offlining pfn 0x8b867 at process virtual address 0x2006b000 [ 4972.908711][T16642] Soft offlining pfn 0x5959d at process virtual address 0x2006c000 [ 4972.926853][T16642] Soft offlining pfn 0x5a022 at process virtual address 0x2006d000 [ 4972.942460][T16642] Soft offlining pfn 0x4a527 at process virtual address 0x2006e000 [ 4972.960883][T16642] Soft offlining pfn 0x4ac61 at process virtual address 0x2006f000 [ 4972.970601][T16642] Soft offlining pfn 0x55702 at process virtual address 0x20070000 [ 4972.984434][T16642] Soft offlining pfn 0x5d45c at process virtual address 0x20071000 [ 4972.998598][T16642] Soft offlining pfn 0x892fe at process virtual address 0x20072000 [ 4973.018887][T16642] Soft offlining pfn 0x5b39e at process virtual address 0x20073000 [ 4973.036849][T16642] Soft offlining pfn 0x4b68c at process virtual address 0x20074000 [ 4973.047736][T16642] Soft offlining pfn 0x65156 at process virtual address 0x20075000 [ 4973.060323][T16642] Soft offlining pfn 0x5c824 at process virtual address 0x20076000 [ 4973.073545][T16642] Soft offlining pfn 0x56564 at process virtual address 0x20077000 [ 4973.080625][T16642] Soft offlining pfn 0x4925e at process virtual address 0x20078000 [ 4973.092941][T16642] Soft offlining pfn 0x48fa3 at process virtual address 0x20079000 [ 4973.107399][T16642] Soft offlining pfn 0x5f264 at process virtual address 0x2007a000 [ 4973.122262][T16642] Soft offlining pfn 0x57dec at process virtual address 0x2007b000 [ 4973.134464][T16642] Soft offlining pfn 0x49dc6 at process virtual address 0x2007c000 [ 4973.149067][T16642] Soft offlining pfn 0x5f1a0 at process virtual address 0x2007d000 [ 4973.174259][T16642] Soft offlining pfn 0x535ce at process virtual address 0x2007e000 [ 4973.188377][T16642] Soft offlining pfn 0x49dcc at process virtual address 0x2007f000 [ 4973.202888][T16642] Soft offlining pfn 0x531bb at process virtual address 0x20080000 [ 4973.214242][T16642] Soft offlining pfn 0x5782b at process virtual address 0x20081000 [ 4973.226424][T16642] Soft offlining pfn 0x49e2f at process virtual address 0x20082000 [ 4973.240780][T16642] Soft offlining pfn 0x4e2b0 at process virtual address 0x20083000 [ 4973.252912][T16642] Soft offlining pfn 0x4f631 at process virtual address 0x20084000 [ 4973.263369][T16642] Soft offlining pfn 0x61377 at process virtual address 0x20085000 [ 4973.277345][T16642] Soft offlining pfn 0x651f9 at process virtual address 0x20086000 [ 4973.290294][T16642] Soft offlining pfn 0x63b64 at process virtual address 0x20087000 [ 4973.305077][T16642] Soft offlining pfn 0x51d35 at process virtual address 0x20088000 [ 4973.316833][T16642] Soft offlining pfn 0x4a291 at process virtual address 0x20089000 [ 4973.329216][T16642] Soft offlining pfn 0x59a12 at process virtual address 0x2008a000 [ 4973.339812][T16642] Soft offlining pfn 0x54e1f at process virtual address 0x2008b000 [ 4973.346581][T16642] Soft offlining pfn 0x610f1 at process virtual address 0x2008c000 [ 4973.369367][T16642] Soft offlining pfn 0x5df0c at process virtual address 0x2008d000 [ 4973.377999][T16642] Soft offlining pfn 0x5bab4 at process virtual address 0x2008e000 [ 4973.406712][T16642] Soft offlining pfn 0x4ac74 at process virtual address 0x2008f000 [ 4973.418683][T16642] Soft offlining pfn 0x52e09 at process virtual address 0x20090000 [ 4973.434273][T16642] Soft offlining pfn 0x8859f at process virtual address 0x20091000 [ 4973.447538][T16642] Soft offlining pfn 0x55780 at process virtual address 0x20092000 [ 4973.459792][T16642] Soft offlining pfn 0x4b813 at process virtual address 0x20093000 [ 4973.479077][T16642] Soft offlining pfn 0x4f40a at process virtual address 0x20094000 [ 4973.495251][T16642] Soft offlining pfn 0x67ae0 at process virtual address 0x20095000 [ 4973.508166][T16642] Soft offlining pfn 0x89939 at process virtual address 0x20096000 [ 4973.523898][T16642] Soft offlining pfn 0x50d0e at process virtual address 0x20097000 [ 4973.542286][T16642] Soft offlining pfn 0x5ae10 at process virtual address 0x20098000 [ 4973.554497][T16642] Soft offlining pfn 0x668de at process virtual address 0x20099000 [ 4973.567884][T16642] Soft offlining pfn 0x56a5f at process virtual address 0x2009a000 [ 4973.579621][T16642] Soft offlining pfn 0x4af12 at process virtual address 0x2009b000 [ 4973.593908][T16642] Soft offlining pfn 0x89bb8 at process virtual address 0x2009c000 [ 4974.325027][T16677] xt_CT: No such helper "pptp" [ 4977.262722][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 4978.089818][T16756] fuse: Bad value for 'fd' [ 4980.830257][T16787] fuse: Bad value for 'fd' [ 4981.477830][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4137'. [ 4981.545316][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'. [ 4982.292342][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 4982.292448][ T28] audit: type=1326 audit(2000002795.310:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.292770][ T28] audit: type=1326 audit(2000002795.310:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.293743][ T28] audit: type=1326 audit(2000002795.310:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.296430][ T28] audit: type=1326 audit(2000002795.310:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.296667][ T28] audit: type=1326 audit(2000002795.310:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.297089][ T28] audit: type=1326 audit(2000002795.310:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.297250][ T28] audit: type=1326 audit(2000002795.310:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.297403][ T28] audit: type=1326 audit(2000002795.310:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.297551][ T28] audit: type=1326 audit(2000002795.310:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4982.298269][ T28] audit: type=1326 audit(2000002795.310:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16813 comm="syz.2.4144" exe="/syz-executor" sig=0 arch=c00000b7 syscall=242 compat=0 ip=0xffffb4b78be8 code=0x7ffc0000 [ 4983.313161][T16829] rxe_eth0 speed is unknown, defaulting to 1000 [ 4986.426378][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4163'. [ 4986.448411][T16858] vlan0: entered promiscuous mode [ 4986.448495][T16858] ifb1: entered promiscuous mode [ 4986.730842][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4167'. [ 4987.637715][T16894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4179'. [ 4987.750461][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 4987.750573][ T28] audit: type=1326 audit(2000002800.760:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.755095][ T28] audit: type=1326 audit(2000002800.770:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.759060][ T28] audit: type=1326 audit(2000002800.770:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.759321][ T28] audit: type=1326 audit(2000002800.770:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.759486][ T28] audit: type=1326 audit(2000002800.770:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.759625][ T28] audit: type=1326 audit(2000002800.770:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.760980][ T28] audit: type=1326 audit(2000002800.770:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.778331][ T28] audit: type=1326 audit(2000002800.780:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.778590][ T28] audit: type=1326 audit(2000002800.790:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4987.778745][ T28] audit: type=1326 audit(2000002800.790:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16896 comm="syz.1.4181" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 4988.043706][T16905] rxe_eth0 speed is unknown, defaulting to 1000 [ 4991.117203][T16929] fuse: Bad value for 'fd' [ 4991.679054][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 4992.759429][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4206'. [ 4993.055337][T16962] ip6gre1: entered promiscuous mode [ 4993.055476][T16962] ip6gre1: entered allmulticast mode [ 4993.263622][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 4994.434757][T16994] fuse: Bad value for 'fd' [ 4995.517729][T17002] rxe_eth0 speed is unknown, defaulting to 1000 [ 4997.113282][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4997.124241][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4997.818409][T17002] hsr_slave_0: entered promiscuous mode [ 4997.820436][T17002] hsr_slave_1: entered promiscuous mode [ 4997.823258][T17002] debugfs: 'hsr0' already exists in 'hsr' [ 4997.823341][T17002] Cannot create hsr debugfs directory [ 4998.240150][T17002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4998.331875][T17002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4998.426596][T17002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4998.537433][T17002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4998.800191][T17002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 4998.829075][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 4998.836349][T17002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 4998.853494][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 4998.858623][T17002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 4998.880784][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 4998.888917][T17002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 4998.906608][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 4999.605516][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5000.699689][T17077] lo: entered promiscuous mode [ 5000.942659][T17077] tunl0: entered promiscuous mode [ 5000.950331][T17077] gre0: entered promiscuous mode [ 5000.995295][T17077] erspan0: entered promiscuous mode [ 5001.013624][T17077] ip_vti0: entered promiscuous mode [ 5001.023883][T17077] ip6_vti0: entered promiscuous mode [ 5001.039825][T17077] sit0: entered promiscuous mode [ 5001.058126][T17077] ip6tnl0: entered promiscuous mode [ 5001.069988][T17077] ip6gre0: entered promiscuous mode [ 5001.086715][T17077] syz_tun: entered promiscuous mode [ 5001.106259][T17077] ip6gretap0: entered promiscuous mode [ 5001.119922][T17077] vcan0: entered promiscuous mode [ 5001.127446][T17077] bond0: entered promiscuous mode [ 5001.127592][T17077] bond_slave_0: entered promiscuous mode [ 5001.128564][T17077] bond_slave_1: entered promiscuous mode [ 5001.143638][T17077] dummy0: entered promiscuous mode [ 5001.155367][T17077] nlmon0: entered promiscuous mode [ 5001.167549][T17077] vxcan0: entered promiscuous mode [ 5001.172934][T17077] vxcan1: entered promiscuous mode [ 5001.177826][T17077] veth0: entered promiscuous mode [ 5001.199393][T17077] veth1: entered promiscuous mode [ 5001.214995][T17077] wg0: entered promiscuous mode [ 5001.225282][T17077] wg1: entered promiscuous mode [ 5001.239626][T17077] wg2: entered promiscuous mode [ 5001.249834][T17077] veth0_to_bridge: entered promiscuous mode [ 5001.261366][T17077] bridge_slave_0: entered promiscuous mode [ 5001.269230][T17077] veth1_to_bridge: entered promiscuous mode [ 5001.283868][T17077] bridge_slave_1: entered promiscuous mode [ 5001.290649][T17077] veth0_to_bond: entered promiscuous mode [ 5001.315853][T17077] veth1_to_bond: entered promiscuous mode [ 5001.330824][T17077] veth0_to_team: entered promiscuous mode [ 5001.348074][T17077] team_slave_0: entered promiscuous mode [ 5001.350888][T17077] veth1_to_team: entered promiscuous mode [ 5001.363062][T17077] team_slave_1: entered promiscuous mode [ 5001.364327][T17077] veth0_to_batadv: entered promiscuous mode [ 5001.375830][T17077] batadv_slave_0: entered promiscuous mode [ 5001.393245][T17077] veth1_to_batadv: entered promiscuous mode [ 5001.404069][T17077] batadv_slave_1: entered promiscuous mode [ 5001.416120][T17077] xfrm0: entered promiscuous mode [ 5001.425511][T17077] veth0_to_hsr: entered promiscuous mode [ 5001.444927][T17077] veth1_to_hsr: entered promiscuous mode [ 5001.467437][T17077] hsr0: entered promiscuous mode [ 5001.480516][T17077] veth1_virt_wifi: entered promiscuous mode [ 5001.498431][T17077] veth0_virt_wifi: entered promiscuous mode [ 5001.537236][T17077] vlan0: entered promiscuous mode [ 5001.548114][T17077] vlan1: entered promiscuous mode [ 5001.602172][T17077] macvlan0: entered promiscuous mode [ 5001.642388][T17077] macvlan1: entered promiscuous mode [ 5001.653805][T17077] ipvlan0: entered promiscuous mode [ 5001.654898][T17077] ipvlan1: entered promiscuous mode [ 5001.742494][T17077] macvtap0: entered promiscuous mode [ 5001.753782][T17077] macsec0: entered promiscuous mode [ 5001.764068][T17077] geneve0: entered promiscuous mode [ 5001.776411][T17077] geneve1: entered promiscuous mode [ 5001.788937][T17077] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 5001.803820][T17077] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 5001.819854][T17077] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 5001.829462][T17077] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 5001.838334][T17077] ip6erspan0: entered promiscuous mode [ 5001.882266][T13269] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5001.882557][T13269] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5001.882696][T13269] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5001.882821][T13269] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5003.184658][T17002] veth0_vlan: entered promiscuous mode [ 5003.248229][T17002] veth1_vlan: entered promiscuous mode [ 5003.417308][T17002] veth0_macvtap: entered promiscuous mode [ 5003.463276][T17002] veth1_macvtap: entered promiscuous mode [ 5003.694450][T13269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5003.695198][T13269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5003.695577][T13269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5003.695703][T13269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5003.937176][T17113] FAULT_INJECTION: forcing a failure. [ 5003.937176][T17113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5003.937310][T17113] CPU: 0 UID: 0 PID: 17113 Comm: syz.1.4245 Not tainted syzkaller #0 PREEMPT [ 5003.937385][T17113] Hardware name: linux,dummy-virt (DT) [ 5003.937420][T17113] Call trace: [ 5003.937453][T17113] show_stack+0x18/0x24 (C) [ 5003.937563][T17113] dump_stack_lvl+0x60/0x80 [ 5003.937631][T17113] dump_stack+0x18/0x24 [ 5003.937696][T17113] should_fail_ex+0x1e0/0x238 [ 5003.937771][T17113] should_fail+0x14/0x40 [ 5003.937837][T17113] should_fail_usercopy+0x1c/0x40 [ 5003.937906][T17113] bpf_verifier_vlog+0x13c/0x3e8 [ 5003.937975][T17113] __btf_verifier_log+0x5c/0x88 [ 5003.938039][T17113] __btf_verifier_log_type+0x124/0x1e8 [ 5003.938102][T17113] btf_ref_type_check_meta+0xf8/0x188 [ 5003.938172][T17113] btf_check_all_metas+0xf0/0x2d4 [ 5003.938264][T17113] btf_new_fd+0x2fc/0xf18 [ 5003.938341][T17113] __sys_bpf+0xb28/0x1d1c [ 5003.938413][T17113] __arm64_sys_bpf+0x2c/0x40 [ 5003.938481][T17113] invoke_syscall+0x54/0x10c [ 5003.938545][T17113] el0_svc_common.constprop.0+0x40/0xe0 [ 5003.938618][T17113] do_el0_svc+0x1c/0x34 [ 5003.938678][T17113] el0_svc+0x38/0x1fc [ 5003.938748][T17113] el0t_64_sync_handler+0xa0/0xe4 [ 5003.938813][T17113] el0t_64_sync+0x1a4/0x1a8 [ 5006.568172][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4266'. [ 5006.877837][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 5006.877915][ T28] audit: type=1326 audit(2000002819.890:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17167 comm="syz.2.4269" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff78be8 code=0x0 [ 5008.127215][T17191] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 5012.028963][T17258] binder: 17257:17258 tried to acquire reference to desc 0, got 1 instead [ 5012.038920][T17258] binder: 17257:17258 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5012.039054][T17258] binder: 17258 RLIMIT_NICE not set [ 5012.039184][T17258] binder: 17258 RLIMIT_NICE not set [ 5012.039657][T17258] binder: send failed reply for transaction 12 to 17257:17258 [ 5012.040045][T17258] binder: 17257:17258 ioctl c0306201 20000480 returned -14 [ 5012.051466][T16062] binder: undelivered TRANSACTION_COMPLETE [ 5012.051724][T16062] binder: undelivered TRANSACTION_ERROR: 29201 [ 5012.373227][T17265] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 5012.813636][T17271] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 5013.173611][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5013.178329][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5014.754667][T17292] FAULT_INJECTION: forcing a failure. [ 5014.754667][T17292] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5014.754837][T17292] CPU: 1 UID: 0 PID: 17292 Comm: syz.2.4325 Not tainted syzkaller #0 PREEMPT [ 5014.754933][T17292] Hardware name: linux,dummy-virt (DT) [ 5014.754976][T17292] Call trace: [ 5014.755011][T17292] show_stack+0x18/0x24 (C) [ 5014.755124][T17292] dump_stack_lvl+0x60/0x80 [ 5014.755200][T17292] dump_stack+0x18/0x24 [ 5014.755275][T17292] should_fail_ex+0x1e0/0x238 [ 5014.755361][T17292] should_fail+0x14/0x40 [ 5014.755454][T17292] get_futex_key+0xdc/0x620 [ 5014.755536][T17292] futex_wake+0x68/0x240 [ 5014.755611][T17292] do_futex+0x178/0x210 [ 5014.755686][T17292] mm_exit_exec_release+0xc0/0xd4 [ 5014.755767][T17292] do_exit+0x1a4/0x940 [ 5014.755847][T17292] do_group_exit+0x34/0x9c [ 5014.755929][T17292] get_signal+0x7a0/0x864 [ 5014.756039][T17292] arch_do_signal_or_restart+0x98/0x3dc [ 5014.756128][T17292] exit_to_user_mode_loop+0x114/0x19c [ 5014.756210][T17292] el0_svc+0x1f0/0x1fc [ 5014.756289][T17292] el0t_64_sync_handler+0xa0/0xe4 [ 5014.756356][T17292] el0t_64_sync+0x1a4/0x1a8 [ 5022.058194][T17311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5022.059229][T17311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5022.701945][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 5023.534747][T17322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5023.536043][T17322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5024.390348][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.390511][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.390597][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.390673][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.390749][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.390827][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.390904][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.405017][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.405170][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.405248][T12912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 5024.423791][T12912] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 5024.722202][T17338] fido_id[17338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 5025.029746][T17345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5025.035918][T17345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5025.223607][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5025.224811][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5028.350529][T17366] binder: 17365:17366 tried to acquire reference to desc 0, got 1 instead [ 5028.358333][T17366] binder: 17365:17366 ioctl c0306201 0 returned -14 [ 5028.359626][T17366] binder_alloc: 17365: binder_alloc_buf, no vma [ 5028.359792][T17366] binder: cannot allocate buffer: vma cleared, target dead or dying [ 5028.360345][T17366] binder: 17365:17366 transaction call to 17365:0 failed 24/29189/-3, code 0 size 0-0 line 3409 [ 5028.364755][T12912] binder: release 17365:17366 transaction 17 out, still active [ 5028.365024][T12912] binder: undelivered TRANSACTION_COMPLETE [ 5028.375454][T12912] binder: undelivered TRANSACTION_ERROR: 29189 [ 5028.376092][T12912] binder: send failed reply for transaction 17, target dead [ 5030.851693][T17389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4360'. [ 5034.412763][T17411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5034.414726][T17411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5034.562743][T17414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5034.564378][T17414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5037.612331][T17434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5037.614517][T17434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5041.083247][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5041.093615][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5043.859848][T17494] ip_tables: iptables: counters copy to user failed while replacing table [ 5044.212210][T17506] input: syz0 as /devices/virtual/input/input89 [ 5048.843394][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5048.844671][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5049.989734][T17586] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4439'. [ 5050.697367][T17588] fuse: Bad value for 'fd' [ 5052.098303][T17605] rxe_eth0 speed is unknown, defaulting to 1000 [ 5059.149506][T17644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5059.156493][T17644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5060.269563][T17648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5060.270419][T17648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5061.777038][T17664] binder: 17663:17664 tried to acquire reference to desc 0, got 1 instead [ 5064.342129][T13875] binder: release 17663:17666 transaction 36 out, still active [ 5064.342286][T13875] binder: undelivered TRANSACTION_COMPLETE [ 5064.342588][T13875] binder: send failed reply for transaction 29 to 17663:17664 [ 5064.343029][T13875] binder: undelivered TRANSACTION_ERROR: 29189 [ 5064.383405][T13875] binder: send failed reply for transaction 36, target dead [ 5070.518506][T17364] hid-generic 0003:046D:C082.0006: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 5070.685905][T17691] fido_id[17691]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 5071.204595][T17703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5071.206566][T17703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5072.558486][T17719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5072.559641][T17719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5074.640663][T17730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5074.645877][T17730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5075.612533][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5075.616104][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5078.087726][T17770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5078.089153][T17770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5078.239026][T17773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5079.138162][T17796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5079.138968][T17796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5081.485968][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5081.487210][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5081.505379][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5081.506506][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5082.222287][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 5082.246871][T17820] FAULT_INJECTION: forcing a failure. [ 5082.246871][T17820] name failslab, interval 1, probability 0, space 0, times 0 [ 5082.247046][T17820] CPU: 0 UID: 0 PID: 17820 Comm: syz.1.4543 Not tainted syzkaller #0 PREEMPT [ 5082.247140][T17820] Hardware name: linux,dummy-virt (DT) [ 5082.247182][T17820] Call trace: [ 5082.247219][T17820] show_stack+0x18/0x24 (C) [ 5082.247332][T17820] dump_stack_lvl+0x60/0x80 [ 5082.247408][T17820] dump_stack+0x18/0x24 [ 5082.247510][T17820] should_fail_ex+0x1e0/0x238 [ 5082.247595][T17820] should_failslab+0x54/0x80 [ 5082.247672][T17820] kmem_cache_alloc_noprof+0x54/0x458 [ 5082.247757][T17820] radix_tree_node_alloc.constprop.0+0x58/0xf0 [ 5082.247841][T17820] idr_get_free+0x220/0x2b4 [ 5082.247914][T17820] idr_alloc_u32+0x84/0x120 [ 5082.247994][T17820] idr_alloc_cyclic+0x6c/0xec [ 5082.248070][T17820] map_create+0x5c8/0xb54 [ 5082.248148][T17820] __sys_bpf+0x9b8/0x1d1c [ 5082.248224][T17820] __arm64_sys_bpf+0x2c/0x40 [ 5082.248302][T17820] invoke_syscall+0x54/0x10c [ 5082.248373][T17820] el0_svc_common.constprop.0+0x40/0xe0 [ 5082.248456][T17820] do_el0_svc+0x1c/0x34 [ 5082.248531][T17820] el0_svc+0x38/0x1fc [ 5082.248606][T17820] el0t_64_sync_handler+0xa0/0xe4 [ 5082.248681][T17820] el0t_64_sync+0x1a4/0x1a8 [ 5084.532112][T17838] netlink: 'syz.2.4551': attribute type 16 has an invalid length. [ 5084.532186][T17838] netlink: 'syz.2.4551': attribute type 17 has an invalid length. [ 5087.704197][T15541] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5087.704477][T15541] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5087.704606][T15541] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5087.704727][T15541] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 5088.210840][T17858] binder: 17857:17858 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5088.214730][T17858] binder: 17858 RLIMIT_NICE not set [ 5091.590128][T17886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5091.595512][T17886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5092.857665][T17901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5092.858851][T17901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5092.966583][T17903] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 5092.967913][T17903] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 5097.348775][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5097.349987][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5097.486721][T17941] binder: 17939:17941 ioctl c00c620f 20000040 returned -22 [ 5097.499394][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5097.505349][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5098.164475][T17958] fuse: Unknown parameter 'grou00000000000000000000' [ 5098.560902][T17966] lo: left promiscuous mode [ 5098.610802][T17968] fuse: Unknown parameter 'grou00000000000000000000' [ 5100.858077][T17984] fuse: Unknown parameter 'grou00000000000000000000' [ 5102.148270][T18009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5102.149431][T18009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5103.137336][T18022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5103.157477][T18022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5103.302133][T15551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5103.339788][T15551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5103.372679][T15551] bond0 (unregistering): Released all slaves [ 5103.388929][T15551] bond1 (unregistering): Released all slaves [ 5103.442605][T15551] bond2 (unregistering): Released all slaves [ 5105.061991][T18048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5105.063173][T18048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5107.346495][T18063] fuse: Unknown parameter 'group_id00000000000000000000' [ 5107.382279][T18065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5107.383912][T18065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5113.845558][T18139] input: syz0 as /devices/virtual/input/input91 [ 5117.460705][T18163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5117.463390][T18163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5118.165501][T18181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5118.167021][T18181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5120.746216][T18197] fuse: Bad value for 'fd' [ 5121.096666][T18208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5121.097846][T18208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5121.109973][T18209] fuse: Invalid rootmode [ 5121.690154][T18225] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 5121.988635][ T28] audit: type=1326 audit(2000003187.999:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5121.988832][ T28] audit: type=1326 audit(2000003187.999:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5121.988932][ T28] audit: type=1326 audit(2000003187.999:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5121.989021][ T28] audit: type=1326 audit(2000003187.999:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5121.989618][ T28] audit: type=1326 audit(2000003187.999:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=146 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5121.990482][ T28] audit: type=1326 audit(2000003187.999:2912): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5122.005313][ T28] audit: type=1326 audit(2000003187.999:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5122.005475][ T28] audit: type=1326 audit(2000003188.009:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5122.005563][ T28] audit: type=1326 audit(2000003188.009:2915): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=446 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5122.005658][ T28] audit: type=1326 audit(2000003188.009:2916): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=18236 comm="syz.1.4714" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5122.604656][T18255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5122.605724][T18255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5123.075386][T18265] fuse: Invalid rootmode [ 5123.748203][T18291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5123.749156][T18291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5124.566009][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5124.567116][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5124.657933][T18317] fuse: Bad value for 'rootmode' [ 5125.265901][T18328] fuse: Unknown parameter 'use00000000000000000000' [ 5125.345632][T18330] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 5126.248678][T18339] ptrace attach of "/syz-executor exec"[17002] was attempted by "/syz-executor exec"[18339] [ 5127.968775][T18365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5127.970138][T18365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5128.077873][T18368] ip_tables: iptables: counters copy to user failed while replacing table [ 5128.089941][T18368] ip_tables: iptables: counters copy to user failed while replacing table [ 5128.145801][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 5128.145908][ T28] audit: type=1326 audit(2000003447.162:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.147215][ T28] audit: type=1326 audit(2000003447.162:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.149682][ T28] audit: type=1326 audit(2000003447.162:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.149803][ T28] audit: type=1326 audit(2000003447.162:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.149898][ T28] audit: type=1326 audit(2000003447.162:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.153495][ T28] audit: type=1326 audit(2000003447.162:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.153642][ T28] audit: type=1326 audit(2000003447.172:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.154542][ T28] audit: type=1326 audit(2000003447.172:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.157704][ T28] audit: type=1326 audit(2000003447.172:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=86 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5128.157948][ T28] audit: type=1326 audit(2000003447.172:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18370 comm="syz.1.4775" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7ffc0000 [ 5129.285738][T18389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5129.286934][T18389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5129.395147][T18392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5129.395918][T18392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5129.922740][T18401] psci: CPU1 killed (polled 0 ms) [ 5130.091192][ T0] Detected PIPT I-cache on CPU1 [ 5130.097197][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 5130.352298][T18406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5130.358205][T18406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5130.884122][T18417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5130.898353][T18417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5131.819652][T18449] fuse: Unknown parameter 'use00000000000000000000' [ 5131.949136][T18455] syzkaller1: entered promiscuous mode [ 5131.949231][T18455] syzkaller1: entered allmulticast mode [ 5132.184702][T18461] fuse: Unknown parameter 'user_i00000000000000000000' [ 5132.455706][T18463] psci: CPU1 killed (polled 0 ms) [ 5132.527088][ T0] Detected PIPT I-cache on CPU1 [ 5132.527736][ T0] CPU1: Booted secondary processor 0x0000000001 [0x000f0510] [ 5133.017576][T18472] futex_wake_op: syz.1.4820 tries to shift op by 144; fix this program [ 5133.317059][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5133.318242][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5135.179966][T18492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5135.192506][T18492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5135.298371][T18494] FAULT_INJECTION: forcing a failure. [ 5135.298371][T18494] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5135.298549][T18494] CPU: 1 UID: 0 PID: 18494 Comm: syz.1.4830 Not tainted syzkaller #0 PREEMPT [ 5135.298653][T18494] Hardware name: linux,dummy-virt (DT) [ 5135.298696][T18494] Call trace: [ 5135.298730][T18494] show_stack+0x18/0x24 (C) [ 5135.298839][T18494] dump_stack_lvl+0x60/0x80 [ 5135.298912][T18494] dump_stack+0x18/0x24 [ 5135.298987][T18494] should_fail_ex+0x1e0/0x238 [ 5135.299065][T18494] should_fail+0x14/0x40 [ 5135.299131][T18494] get_futex_key+0x164/0x620 [ 5135.299203][T18494] futex_lock_pi+0xbc/0x3b8 [ 5135.299269][T18494] do_futex+0xf4/0x210 [ 5135.299332][T18494] __arm64_sys_futex+0x100/0x1a0 [ 5135.299402][T18494] invoke_syscall+0x54/0x10c [ 5135.299468][T18494] el0_svc_common.constprop.0+0x40/0xe0 [ 5135.299534][T18494] do_el0_svc+0x1c/0x34 [ 5135.299598][T18494] el0_svc+0x38/0x1fc [ 5135.299682][T18494] el0t_64_sync_handler+0xa0/0xe4 [ 5135.299756][T18494] el0t_64_sync+0x1a4/0x1a8 [ 5135.392382][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5135.393701][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5136.487272][T18509] binder: 18508:18509 ERROR: BC_REGISTER_LOOPER called without request [ 5136.487461][T18509] binder: 18509 RLIMIT_NICE not set [ 5136.995243][T18510] binder: 18508:18510 ERROR: BC_REGISTER_LOOPER called without request [ 5136.995401][T18510] binder: 18510 RLIMIT_NICE not set [ 5138.359567][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 5138.359674][ T28] audit: type=1326 audit(2000003457.372:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.368134][ T28] audit: type=1326 audit(2000003457.382:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.382808][ T28] audit: type=1326 audit(2000003457.392:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.383087][ T28] audit: type=1326 audit(2000003457.392:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.383238][ T28] audit: type=1326 audit(2000003457.392:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.383679][ T28] audit: type=1326 audit(2000003457.392:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.383823][ T28] audit: type=1326 audit(2000003457.392:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.383985][ T28] audit: type=1326 audit(2000003457.392:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.384141][ T28] audit: type=1326 audit(2000003457.392:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.384288][ T28] audit: type=1326 audit(2000003457.392:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18515 comm="syz.1.4840" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9378be8 code=0x7fc00000 [ 5138.579399][T18521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5138.580113][T18521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5139.420823][T18540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4851'. [ 5139.955395][T18551] fuse: Bad value for 'fd' [ 5140.759123][T18558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5140.762167][T18558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5141.033341][T18562] fuse: Unknown parameter '00000000000000000003' [ 5141.134034][T18564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5141.135180][T18564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5142.430184][T18583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5142.437891][T18583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5142.687599][T18589] binder: 18588:18589 BC_FREEZE_NOTIFICATION_DONE 0000000000400001 not found [ 5142.687785][T18589] binder: 18588:18589 ioctl c0306201 200006c0 returned -22 [ 5146.058328][T18621] fuse: Unknown parameter 'fd00000000000000000003' [ 5147.336170][T18614] udevd[18614]: setting mode of /dev/gsmtty36 to 020600 failed: No such file or directory [ 5147.336802][T18614] udevd[18614]: setting owner of /dev/gsmtty36 to uid=0, gid=0 failed: No such file or directory [ 5148.408353][T12912] hid-generic 0003:046D:C082.0007: item fetching failed at offset 0/2 [ 5148.409383][T12912] hid-generic 0003:046D:C082.0007: probe with driver hid-generic failed with error -22 [ 5149.534004][T18653] binder: 18652:18653 tried to acquire reference to desc 0, got 1 instead [ 5149.543904][T18653] binder: 18652:18653 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 5149.553903][T12912] binder: release 18652:18653 transaction 44 out, still active [ 5149.554034][T12912] binder: undelivered TRANSACTION_COMPLETE [ 5149.555740][T12912] binder: send failed reply for transaction 44, target dead [ 5149.917931][T18663] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5150.073923][T18667] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4905'. [ 5150.104151][T18667] syzkaller1: entered promiscuous mode [ 5150.104314][T18667] syzkaller1: entered allmulticast mode [ 5150.806580][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5150.807773][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5151.056038][T18685] hsr_slave_0: left promiscuous mode [ 5151.059145][T18685] hsr_slave_1: left promiscuous mode [ 5152.509440][T15534] nvmet: connect request for invalid subsystem te! [ 5152.513629][T18720] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 5153.397937][T18729] rxe_eth0 speed is unknown, defaulting to 1000 [ 5154.964475][T18729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5154.975569][T18729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5155.647348][T18766] netlink: 'syz.2.4933': attribute type 10 has an invalid length. [ 5155.884160][T18729] hsr_slave_0: entered promiscuous mode [ 5155.887616][T18729] hsr_slave_1: entered promiscuous mode [ 5155.889813][T18729] debugfs: 'hsr0' already exists in 'hsr' [ 5155.889938][T18729] Cannot create hsr debugfs directory [ 5156.829636][T18788] psci: CPU1 killed (polled 0 ms) [ 5157.480838][T18729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5157.548530][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5157.557484][T18729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5157.602528][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5157.608106][T18729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 5157.657299][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5157.679518][T18729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 5157.722961][T18729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5159.362322][T18729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5159.578284][T18821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5159.579550][T18821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5162.225865][T18848] FAULT_INJECTION: forcing a failure. [ 5162.225865][T18848] name failslab, interval 1, probability 0, space 0, times 0 [ 5162.225996][T18848] CPU: 0 UID: 0 PID: 18848 Comm: syz.2.4957 Not tainted syzkaller #0 PREEMPT [ 5162.226050][T18848] Hardware name: linux,dummy-virt (DT) [ 5162.226072][T18848] Call trace: [ 5162.226091][T18848] show_stack+0x18/0x24 (C) [ 5162.226151][T18848] dump_stack_lvl+0x60/0x80 [ 5162.226215][T18848] dump_stack+0x18/0x24 [ 5162.226299][T18848] should_fail_ex+0x1e0/0x238 [ 5162.226342][T18848] should_failslab+0x54/0x80 [ 5162.226401][T18848] kmem_cache_alloc_noprof+0x54/0x458 [ 5162.226459][T18848] __anon_vma_prepare+0x108/0x1e0 [ 5162.226499][T18848] __vmf_anon_prepare+0x64/0x90 [ 5162.226548][T18848] do_wp_page+0x2d0/0x11e0 [ 5162.226586][T18848] __handle_mm_fault+0x9e8/0xec0 [ 5162.226625][T18848] handle_mm_fault+0x88/0x318 [ 5162.226663][T18848] do_page_fault+0x23c/0x77c [ 5162.226698][T18848] do_mem_abort+0x40/0x90 [ 5162.226731][T18848] el1_abort+0x44/0x64 [ 5162.226769][T18848] el1h_64_sync_handler+0x50/0xac [ 5162.226805][T18848] el1h_64_sync+0x6c/0x70 [ 5162.226936][T18848] __arch_copy_to_user+0x14/0x240 (P) [ 5162.226993][T18848] do_ipv6_getsockopt+0x1fc/0x870 [ 5162.227041][T18848] ipv6_getsockopt+0x94/0x200 [ 5162.227080][T18848] rawv6_getsockopt+0x170/0x320 [ 5162.227113][T18848] sock_common_getsockopt+0x1c/0x28 [ 5162.227150][T18848] do_sock_getsockopt+0x2b8/0x360 [ 5162.227189][T18848] __sys_getsockopt+0x7c/0xec [ 5162.227227][T18848] __arm64_sys_getsockopt+0x20/0x34 [ 5162.227266][T18848] invoke_syscall+0x54/0x10c [ 5162.227301][T18848] el0_svc_common.constprop.0+0x40/0xe0 [ 5162.227337][T18848] do_el0_svc+0x1c/0x34 [ 5162.227371][T18848] el0_svc+0x38/0x1fc [ 5162.227413][T18848] el0t_64_sync_handler+0xa0/0xe4 [ 5162.227449][T18848] el0t_64_sync+0x1a4/0x1a8 [ 5164.003013][T18877] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 5164.684051][T18729] veth0_vlan: entered promiscuous mode [ 5164.719121][T18729] veth1_vlan: entered promiscuous mode [ 5164.828755][T18729] veth0_macvtap: entered promiscuous mode [ 5164.858319][T18729] veth1_macvtap: entered promiscuous mode [ 5165.072512][T15534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5165.072717][T15534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5165.072839][T15534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5165.122451][T13269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5168.767435][T18912] netlink: 'syz.2.4974': attribute type 1 has an invalid length. [ 5168.982148][T18912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5169.096317][T18912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5169.098072][T18912] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 5169.100666][T18912] bond1: (slave gre1): Error -95 calling set_mac_address [ 5169.322450][T18912] gretap1: entered promiscuous mode [ 5169.389520][T18912] bond1: (slave gretap1): making interface the new active one [ 5169.413112][T18912] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 5169.762359][T18912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 5169.810103][T18912] bond1: (slave bond2): Enslaving as an active interface with a down link [ 5169.875849][T18912] bond1 (unregistering): (slave gretap1): Releasing active interface [ 5169.943974][T18912] bond1 (unregistering): (slave bond2): Releasing active interface [ 5169.956029][T18912] bond1 (unregistering): Released all slaves [ 5171.163511][T18921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5171.164774][T18921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5174.032184][T18940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5174.051934][T18940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5174.702203][T18942] vlan2: entered promiscuous mode [ 5174.703155][T18942] vlan2: entered allmulticast mode [ 5174.703259][T18942] veth1_vlan: entered allmulticast mode [ 5176.052140][T18950] FAULT_INJECTION: forcing a failure. [ 5176.052140][T18950] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5176.052259][T18950] CPU: 0 UID: 0 PID: 18950 Comm: syz.2.4990 Not tainted syzkaller #0 PREEMPT [ 5176.052336][T18950] Hardware name: linux,dummy-virt (DT) [ 5176.052373][T18950] Call trace: [ 5176.052408][T18950] show_stack+0x18/0x24 (C) [ 5176.052476][T18950] dump_stack_lvl+0x60/0x80 [ 5176.052516][T18950] dump_stack+0x18/0x24 [ 5176.052551][T18950] should_fail_ex+0x1e0/0x238 [ 5176.052592][T18950] should_fail+0x14/0x40 [ 5176.052628][T18950] get_futex_key+0xdc/0x620 [ 5176.052665][T18950] futex_wake+0x68/0x240 [ 5176.052702][T18950] do_futex+0x178/0x210 [ 5176.052737][T18950] __arm64_sys_futex+0x100/0x1a0 [ 5176.052772][T18950] invoke_syscall+0x54/0x10c [ 5176.052807][T18950] el0_svc_common.constprop.0+0x40/0xe0 [ 5176.052842][T18950] do_el0_svc+0x1c/0x34 [ 5176.052876][T18950] el0_svc+0x38/0x1fc [ 5176.052914][T18950] el0t_64_sync_handler+0xa0/0xe4 [ 5176.052950][T18950] el0t_64_sync+0x1a4/0x1a8 [ 5176.575109][T18952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4991'. [ 5177.779812][T18969] syzkaller1: entered promiscuous mode [ 5177.779953][T18969] syzkaller1: entered allmulticast mode [ 5177.972453][T18972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4998'. [ 5178.059599][T18974] FAULT_INJECTION: forcing a failure. [ 5178.059599][T18974] name failslab, interval 1, probability 0, space 0, times 0 [ 5178.059689][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.2.4999 Not tainted syzkaller #0 PREEMPT [ 5178.059733][T18974] Hardware name: linux,dummy-virt (DT) [ 5178.059754][T18974] Call trace: [ 5178.059771][T18974] show_stack+0x18/0x24 (C) [ 5178.059827][T18974] dump_stack_lvl+0x60/0x80 [ 5178.059863][T18974] dump_stack+0x18/0x24 [ 5178.059898][T18974] should_fail_ex+0x1e0/0x238 [ 5178.059938][T18974] should_failslab+0x54/0x80 [ 5178.059976][T18974] kmem_cache_alloc_noprof+0x54/0x458 [ 5178.060017][T18974] alloc_vfsmnt+0x30/0x220 [ 5178.060052][T18974] clone_mnt+0x28/0x260 [ 5178.060085][T18974] lock_mount_exact+0xd4/0x1c0 [ 5178.060119][T18974] create_new_namespace+0xbc/0x3e8 [ 5178.060164][T18974] vfs_open_tree+0x2fc/0x35c [ 5178.060200][T18974] __arm64_sys_open_tree+0x40/0x90 [ 5178.060236][T18974] invoke_syscall+0x54/0x10c [ 5178.060271][T18974] el0_svc_common.constprop.0+0x40/0xe0 [ 5178.060306][T18974] do_el0_svc+0x1c/0x34 [ 5178.060340][T18974] el0_svc+0x38/0x1fc [ 5178.060379][T18974] el0t_64_sync_handler+0xa0/0xe4 [ 5178.060415][T18974] el0t_64_sync+0x1a4/0x1a8 [ 5178.527261][T18984] syz_tun: entered allmulticast mode [ 5178.538539][T18982] syz_tun: left allmulticast mode [ 5178.734019][T18989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5186.335596][T19035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5186.336831][T19035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5187.818552][T19055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5187.819787][T19055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5191.064211][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 5191.064322][ T28] audit: type=1326 audit(2000003510.072:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19074 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5191.068719][ T28] audit: type=1326 audit(2000003510.082:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19074 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5191.082482][ T28] audit: type=1326 audit(2000003510.082:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19074 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5191.082757][ T28] audit: type=1326 audit(2000003510.092:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19074 comm="syz.1.5038" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5191.612795][T19098] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5046'. [ 5197.331737][T19130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5197.333141][T19130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5209.615130][T19171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5209.616023][T19171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5209.759735][T19174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5209.782312][T19174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5214.915081][T19227] syz_tun: entered allmulticast mode [ 5214.958395][T19226] syz_tun: left allmulticast mode [ 5215.388951][T19235] FAULT_INJECTION: forcing a failure. [ 5215.388951][T19235] name failslab, interval 1, probability 0, space 0, times 0 [ 5215.389112][T19235] CPU: 0 UID: 0 PID: 19235 Comm: syz.1.5105 Not tainted syzkaller #0 PREEMPT [ 5215.389200][T19235] Hardware name: linux,dummy-virt (DT) [ 5215.389241][T19235] Call trace: [ 5215.389275][T19235] show_stack+0x18/0x24 (C) [ 5215.389378][T19235] dump_stack_lvl+0x60/0x80 [ 5215.389450][T19235] dump_stack+0x18/0x24 [ 5215.389519][T19235] should_fail_ex+0x1e0/0x238 [ 5215.389606][T19235] should_failslab+0x54/0x80 [ 5215.389681][T19235] __kmalloc_cache_noprof+0x58/0x470 [ 5215.389762][T19235] __arm64_sys_fanotify_init+0x154/0x3c0 [ 5215.389837][T19235] invoke_syscall+0x54/0x10c [ 5215.389939][T19235] el0_svc_common.constprop.0+0x40/0xe0 [ 5215.390013][T19235] do_el0_svc+0x1c/0x34 [ 5215.390081][T19235] el0_svc+0x38/0x1fc [ 5215.390160][T19235] el0t_64_sync_handler+0xa0/0xe4 [ 5215.390258][T19235] el0t_64_sync+0x1a4/0x1a8 [ 5216.580814][T19255] binder: 19254:19255 tried to acquire reference to desc 0, got 1 instead [ 5216.586037][T19255] binder: 19254:19255 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5216.586125][T19255] binder: 19255 RLIMIT_NICE not set [ 5220.138055][ T28] audit: type=1326 audit(2000003539.152:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.158318][ T28] audit: type=1326 audit(2000003539.172:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.159930][ T28] audit: type=1326 audit(2000003539.172:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.165774][ T28] audit: type=1326 audit(2000003539.182:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.165931][ T28] audit: type=1326 audit(2000003539.182:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.166014][ T28] audit: type=1326 audit(2000003539.182:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.183298][ T28] audit: type=1326 audit(2000003539.202:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.187444][ T28] audit: type=1326 audit(2000003539.202:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.199467][ T28] audit: type=1326 audit(2000003539.212:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5220.210430][ T28] audit: type=1326 audit(2000003539.222:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19280 comm="syz.1.5126" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5234.965991][T19313] bridge_slave_0: entered promiscuous mode [ 5234.966136][T19313] bridge_slave_0: entered allmulticast mode [ 5239.736334][T19372] fuse: Bad value for 'fd' [ 5240.826838][T19382] fuse: Bad value for 'fd' [ 5242.898287][T19411] €Â0ÿÿ•: renamed from pim6reg1 [ 5245.403197][T19446] fuse: Bad value for 'fd' [ 5249.297749][T19468] fuse: Bad value for 'fd' [ 5252.274442][T19515] fuse: Unknown parameter 'user_i00000000000000000000' [ 5254.570988][T19541] fuse: Bad value for 'fd' [ 5255.575130][T19553] fuse: Bad value for 'fd' [ 5256.373031][T19565] fuse: Bad value for 'fd' [ 5257.010464][T19578] IPv6: Can't replace route, no match found [ 5257.366894][T19584] netlink: 'syz.1.5266': attribute type 21 has an invalid length. [ 5259.426184][T19604] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5275'. [ 5263.217889][T19627] netlink: 'syz.2.5285': attribute type 29 has an invalid length. [ 5263.734146][T19635] fuse: Unknown parameter '0xffffffffffffffff' [ 5264.009238][T19639] IPv6: Can't replace route, no match found [ 5264.662668][T19647] fuse: Unknown parameter '0xffffffffffffffff' [ 5265.408271][T19660] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 5265.655479][T19666] netlink: 'syz.1.5303': attribute type 10 has an invalid length. [ 5265.655557][T19666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5303'. [ 5265.660807][T19666] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 5266.065741][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5306'. [ 5270.017715][T19713] FAULT_INJECTION: forcing a failure. [ 5270.017715][T19713] name failslab, interval 1, probability 0, space 0, times 0 [ 5270.017812][T19713] CPU: 0 UID: 0 PID: 19713 Comm: syz.2.5325 Not tainted syzkaller #0 PREEMPT [ 5270.017866][T19713] Hardware name: linux,dummy-virt (DT) [ 5270.017899][T19713] Call trace: [ 5270.017940][T19713] show_stack+0x18/0x24 (C) [ 5270.018013][T19713] dump_stack_lvl+0x60/0x80 [ 5270.018051][T19713] dump_stack+0x18/0x24 [ 5270.018086][T19713] should_fail_ex+0x1e0/0x238 [ 5270.018128][T19713] should_failslab+0x54/0x80 [ 5270.018166][T19713] __kmalloc_noprof+0xac/0x520 [ 5270.018207][T19713] x509_key_preparse+0x7c/0x1e0 [ 5270.018298][T19713] asymmetric_key_preparse+0x64/0xa4 [ 5270.018355][T19713] __key_create_or_update+0x1b4/0x4f0 [ 5270.018422][T19713] key_create_or_update+0x14/0x20 [ 5270.018498][T19713] __arm64_sys_add_key+0x128/0x21c [ 5270.018562][T19713] invoke_syscall+0x54/0x10c [ 5270.018622][T19713] el0_svc_common.constprop.0+0x40/0xe0 [ 5270.018686][T19713] do_el0_svc+0x1c/0x34 [ 5270.018751][T19713] el0_svc+0x38/0x1fc [ 5270.018821][T19713] el0t_64_sync_handler+0xa0/0xe4 [ 5270.018888][T19713] el0t_64_sync+0x1a4/0x1a8 [ 5270.968347][T19720] rxe_eth0 speed is unknown, defaulting to 1000 [ 5274.440372][T19747] xt_hashlimit: size too large, truncated to 1048576 [ 5278.053456][T19767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 5278.053589][T19767] IPv6: NLM_F_CREATE should be set when creating new route [ 5278.053834][T19767] IPv6: NLM_F_CREATE should be set when creating new route [ 5278.524997][T19771] netlink: 'syz.1.5348': attribute type 5 has an invalid length. [ 5280.450108][T19795] fuse: Bad value for 'fd' [ 5296.154659][T19833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5296.155950][T19833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5297.941794][T19868] binder: Unknown parameter 'euid' [ 5302.658987][T19926] syzkaller0: entered promiscuous mode [ 5302.659111][T19926] syzkaller0: entered allmulticast mode [ 5304.654749][T19952] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 5305.492992][T19968] rxe_eth0 speed is unknown, defaulting to 1000 [ 5308.006282][T19983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5308.033239][T19983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5310.908756][T20012] xt_hashlimit: size too large, truncated to 1048576 [ 5315.593193][T20034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5315.890808][T20034] veth1_vlan: left promiscuous mode [ 5315.903607][T20034] veth0_vlan: left promiscuous mode [ 5315.918601][T20034] veth0_vlan: entered promiscuous mode [ 5315.937287][T20034] veth1_vlan: entered promiscuous mode [ 5315.970749][T20034] veth1_macvtap: left promiscuous mode [ 5315.982536][T20034] veth0_macvtap: left promiscuous mode [ 5315.987550][T20034] veth0_macvtap: entered promiscuous mode [ 5316.003654][T20034] veth1_macvtap: entered promiscuous mode [ 5316.035575][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5316.043450][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5316.047291][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5316.056609][T20034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5317.228582][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5472'. [ 5323.571529][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5487'. [ 5337.260455][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5504'. [ 5345.598858][T20148] rxe_eth0 speed is unknown, defaulting to 1000 [ 5394.326564][T20253] ip_tables: iptables: counters copy to user failed while replacing table [ 5396.551953][T20212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5396.575305][T20212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5396.578112][T20212] bond0 (unregistering): Released all slaves [ 5396.629983][T20212] bond2 (unregistering): Released all slaves [ 5399.454345][ T3230] 8021q: adding VLAN 0 to HW filter on device eth5 [ 5399.838404][T20269] rxe_eth0 speed is unknown, defaulting to 1000 [ 5401.973158][ T3230] 8021q: adding VLAN 0 to HW filter on device eth6 [ 5404.373064][ T3230] 8021q: adding VLAN 0 to HW filter on device eth8 [ 5406.954788][ T3230] 8021q: adding VLAN 0 to HW filter on device eth7 [ 5407.844025][T20269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5407.928067][T20269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5409.224688][T20376] xt_hashlimit: size too large, truncated to 1048576 [ 5410.450253][T20269] hsr_slave_0: entered promiscuous mode [ 5410.468690][T20269] hsr_slave_1: entered promiscuous mode [ 5410.485976][T20269] debugfs: 'hsr0' already exists in 'hsr' [ 5410.486134][T20269] Cannot create hsr debugfs directory [ 5413.115993][T20269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 5413.192140][T20269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5413.204121][T20269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 5413.245192][T20269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5413.246979][T20269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 5413.274836][T20269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5413.280299][T20269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 5413.317490][T20269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5415.486423][T20269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5423.647394][T20269] veth0_vlan: entered promiscuous mode [ 5423.852254][T20269] veth1_vlan: entered promiscuous mode [ 5424.250541][T20269] veth0_macvtap: entered promiscuous mode [ 5424.347594][T20269] veth1_macvtap: entered promiscuous mode [ 5425.003555][T20217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5425.004708][T20217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5425.005258][T20217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5425.006433][T20217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5428.389135][T20542] ip_tables: iptables: counters copy to user failed while replacing table [ 5446.018338][T20211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5446.026401][T20211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5446.043743][T20211] bond0 (unregistering): Released all slaves [ 5446.492859][T20566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5446.494296][T20566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5480.497737][T20608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5480.499021][T20608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5493.115512][T20620] fuse: Bad value for 'fd' [ 5500.810481][T20645] veth1_macvtap: left promiscuous mode [ 5500.810645][T20645] macsec0: entered promiscuous mode [ 5500.885316][T20645] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 5503.064141][T20666] syzkaller0: entered promiscuous mode [ 5503.064261][T20666] syzkaller0: entered allmulticast mode [ 5520.483789][T20695] veth1_macvtap: entered promiscuous mode [ 5520.649127][T20217] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5521.961727][T20722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5521.963077][T20722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5523.657425][T20740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5666'. [ 5523.665487][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5666'. [ 5524.621517][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5530.110450][T20754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5530.116239][T20754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5532.783173][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5536.123941][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 5536.124060][ T28] audit: type=1326 audit(2000003855.132:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20768 comm="syz.2.5679" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x0 [ 5536.610027][T20774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5681'. [ 5536.834750][T20778] FAULT_INJECTION: forcing a failure. [ 5536.834750][T20778] name failslab, interval 1, probability 0, space 0, times 0 [ 5536.834934][T20778] CPU: 0 UID: 0 PID: 20778 Comm: syz.1.5683 Not tainted syzkaller #0 PREEMPT [ 5536.835024][T20778] Hardware name: linux,dummy-virt (DT) [ 5536.835076][T20778] Call trace: [ 5536.835113][T20778] show_stack+0x18/0x24 (C) [ 5536.835265][T20778] dump_stack_lvl+0x60/0x80 [ 5536.835345][T20778] dump_stack+0x18/0x24 [ 5536.835418][T20778] should_fail_ex+0x1e0/0x238 [ 5536.835503][T20778] should_failslab+0x54/0x80 [ 5536.835580][T20778] kmem_cache_alloc_node_noprof+0x5c/0x448 [ 5536.835666][T20778] __alloc_skb+0x16c/0x2f0 [ 5536.835748][T20778] tcp_stream_alloc_skb+0x2c/0x158 [ 5536.835822][T20778] tcp_connect+0xbd8/0xfcc [ 5536.835898][T20778] tcp_v6_connect+0x3d0/0x69c [ 5536.835975][T20778] __inet_stream_connect+0x134/0x3c0 [ 5536.836058][T20778] tcp_sendmsg_fastopen+0xd0/0x1dc [ 5536.836131][T20778] tcp_sendmsg_locked+0x878/0xed0 [ 5536.836201][T20778] tcp_sendmsg+0x38/0x60 [ 5536.836270][T20778] inet6_sendmsg+0x44/0x74 [ 5536.836340][T20778] __sock_sendmsg+0x54/0x60 [ 5536.836416][T20778] __sys_sendto+0x114/0x180 [ 5536.836491][T20778] __arm64_sys_sendto+0x24/0x40 [ 5536.836570][T20778] invoke_syscall+0x54/0x10c [ 5536.836642][T20778] el0_svc_common.constprop.0+0x40/0xe0 [ 5536.836714][T20778] do_el0_svc+0x1c/0x34 [ 5536.836782][T20778] el0_svc+0x38/0x1fc [ 5536.836856][T20778] el0t_64_sync_handler+0xa0/0xe4 [ 5536.836927][T20778] el0t_64_sync+0x1a4/0x1a8 [ 5537.891752][T20794] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 5538.946518][T20217] nvmet: connect request for invalid subsystem testsubsys! [ 5538.979715][T20809] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 5540.203736][T20833] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 5541.147688][ T28] audit: type=1326 audit(2000003860.162:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.169858][ T28] audit: type=1326 audit(2000003860.182:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.188835][ T28] audit: type=1326 audit(2000003860.202:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.189112][ T28] audit: type=1326 audit(2000003860.202:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.207970][ T28] audit: type=1326 audit(2000003860.222:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=36 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.208225][ T28] audit: type=1326 audit(2000003860.222:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.218170][ T28] audit: type=1326 audit(2000003860.232:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.240208][ T28] audit: type=1326 audit(2000003860.252:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.253889][ T28] audit: type=1326 audit(2000003860.252:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.270597][ T28] audit: type=1326 audit(2000003860.282:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20847 comm="syz.1.5712" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad578be8 code=0x7ffc0000 [ 5541.365002][T20848] fuse: Bad value for 'fd' [ 5542.076494][T20859] FAULT_INJECTION: forcing a failure. [ 5542.076494][T20859] name failslab, interval 1, probability 0, space 0, times 0 [ 5542.076655][T20859] CPU: 0 UID: 0 PID: 20859 Comm: syz.1.5715 Not tainted syzkaller #0 PREEMPT [ 5542.076743][T20859] Hardware name: linux,dummy-virt (DT) [ 5542.076784][T20859] Call trace: [ 5542.076818][T20859] show_stack+0x18/0x24 (C) [ 5542.076918][T20859] dump_stack_lvl+0x60/0x80 [ 5542.076989][T20859] dump_stack+0x18/0x24 [ 5542.077065][T20859] should_fail_ex+0x1e0/0x238 [ 5542.077145][T20859] should_failslab+0x54/0x80 [ 5542.077220][T20859] kmem_cache_alloc_lru_noprof+0x58/0x458 [ 5542.077300][T20859] proc_alloc_inode+0x20/0x50 [ 5542.077378][T20859] alloc_inode+0x28/0xdc [ 5542.077451][T20859] new_inode+0x14/0x88 [ 5542.077518][T20859] proc_pid_make_inode+0x20/0xac [ 5542.077583][T20859] proc_pid_instantiate+0x28/0x120 [ 5542.077650][T20859] proc_pid_lookup+0x90/0x1a4 [ 5542.077720][T20859] proc_root_lookup+0x2c/0x60 [ 5542.077797][T20859] __lookup_slow+0x68/0x128 [ 5542.077873][T20859] lookup_slow+0x40/0x68 [ 5542.077947][T20859] link_path_walk+0x614/0x688 [ 5542.078025][T20859] path_lookupat+0x40/0x294 [ 5542.078111][T20859] filename_lookup+0xbc/0x1c4 [ 5542.078188][T20859] user_path_at+0x4c/0x70 [ 5542.078293][T20859] __arm64_sys_mount+0x100/0x204 [ 5542.078367][T20859] invoke_syscall+0x54/0x10c [ 5542.078436][T20859] el0_svc_common.constprop.0+0x40/0xe0 [ 5542.078501][T20859] do_el0_svc+0x1c/0x34 [ 5542.078563][T20859] el0_svc+0x38/0x1fc [ 5542.078640][T20859] el0t_64_sync_handler+0xa0/0xe4 [ 5542.078713][T20859] el0t_64_sync+0x1a4/0x1a8 [ 5542.897033][T20872] fuse: Bad value for 'fd' [ 5544.536606][T20902] syzkaller1: entered promiscuous mode [ 5544.536722][T20902] syzkaller1: entered allmulticast mode [ 5548.149760][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5555.746069][T20922] fuse: Bad value for 'fd' [ 5555.967418][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 5555.967541][ T28] audit: type=1326 audit(2000003874.982:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5555.979824][ T28] audit: type=1326 audit(2000003874.992:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5555.993204][ T28] audit: type=1326 audit(2000003875.012:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5555.993468][ T28] audit: type=1326 audit(2000003875.012:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5555.994710][ T28] audit: type=1326 audit(2000003875.012:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5555.996067][ T28] audit: type=1326 audit(2000003875.012:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5556.014127][ T28] audit: type=1326 audit(2000003875.012:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5556.014424][ T28] audit: type=1326 audit(2000003875.012:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20924 comm="syz.2.5745" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbd578be8 code=0x7ffc0000 [ 5556.049826][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5744'. [ 5556.049982][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5744'. [ 5556.345784][T20930] syzkaller0: entered promiscuous mode [ 5556.345911][T20930] syzkaller0: entered allmulticast mode [ 5557.222405][T20941] nbd: must specify a size in bytes for the device [ 5561.015652][T20982] FAULT_INJECTION: forcing a failure. [ 5561.015652][T20982] name failslab, interval 1, probability 0, space 0, times 0 [ 5561.015748][T20982] CPU: 0 UID: 0 PID: 20982 Comm: syz.2.5769 Not tainted syzkaller #0 PREEMPT [ 5561.015798][T20982] Hardware name: linux,dummy-virt (DT) [ 5561.015821][T20982] Call trace: [ 5561.015840][T20982] show_stack+0x18/0x24 (C) [ 5561.015897][T20982] dump_stack_lvl+0x60/0x80 [ 5561.015956][T20982] dump_stack+0x18/0x24 [ 5561.015992][T20982] should_fail_ex+0x1e0/0x238 [ 5561.016038][T20982] should_failslab+0x54/0x80 [ 5561.016114][T20982] kmem_cache_alloc_noprof+0x54/0x458 [ 5561.016183][T20982] copy_net_ns+0x60/0x394 [ 5561.016224][T20982] create_new_namespaces+0x114/0x360 [ 5561.016266][T20982] unshare_nsproxy_namespaces+0x70/0xc0 [ 5561.016337][T20982] ksys_unshare+0x1cc/0x3d8 [ 5561.016414][T20982] __arm64_sys_unshare+0x14/0x24 [ 5561.016466][T20982] invoke_syscall+0x54/0x10c [ 5561.016502][T20982] el0_svc_common.constprop.0+0x40/0xe0 [ 5561.016547][T20982] do_el0_svc+0x1c/0x34 [ 5561.016608][T20982] el0_svc+0x38/0x1fc [ 5561.016682][T20982] el0t_64_sync_handler+0xa0/0xe4 [ 5561.016748][T20982] el0t_64_sync+0x1a4/0x1a8 [ 5561.667532][T20990] rxe_eth0 speed is unknown, defaulting to 1000 [ 5563.850013][T12989] hid_parser_main: 62 callbacks suppressed [ 5563.850108][T12989] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 5563.900848][T12989] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 5564.675612][T21009] fido_id[21009]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 5564.865250][T21012] FAULT_INJECTION: forcing a failure. [ 5564.865250][T21012] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5564.865419][T21012] CPU: 0 UID: 0 PID: 21012 Comm: syz.2.5782 Not tainted syzkaller #0 PREEMPT [ 5564.865509][T21012] Hardware name: linux,dummy-virt (DT) [ 5564.865552][T21012] Call trace: [ 5564.865589][T21012] show_stack+0x18/0x24 (C) [ 5564.865706][T21012] dump_stack_lvl+0x60/0x80 [ 5564.865780][T21012] dump_stack+0x18/0x24 [ 5564.865852][T21012] should_fail_ex+0x1e0/0x238 [ 5564.865935][T21012] should_fail+0x14/0x40 [ 5564.866013][T21012] get_futex_key+0xdc/0x620 [ 5564.866092][T21012] futex_wait_setup+0x54/0x240 [ 5564.866168][T21012] __futex_wait+0xd4/0x180 [ 5564.866264][T21012] futex_wait+0x88/0x110 [ 5564.866331][T21012] do_futex+0x1a0/0x210 [ 5564.866395][T21012] __arm64_sys_futex+0x100/0x1a0 [ 5564.866467][T21012] invoke_syscall+0x54/0x10c [ 5564.866537][T21012] el0_svc_common.constprop.0+0x40/0xe0 [ 5564.866607][T21012] do_el0_svc+0x1c/0x34 [ 5564.866687][T21012] el0_svc+0x38/0x1fc [ 5564.866768][T21012] el0t_64_sync_handler+0xa0/0xe4 [ 5564.866842][T21012] el0t_64_sync+0x1a4/0x1a8 [ 5565.134776][T21018] netlink: 'syz.1.5785': attribute type 1 has an invalid length. [ 5565.320237][T21018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 5565.455708][T21018] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 5565.883651][T21029] netlink: 'syz.2.5789': attribute type 5 has an invalid length. [ 5566.956316][T21041] rxe_eth0 speed is unknown, defaulting to 1000 [ 5568.026486][ T28] audit: type=1326 audit(2000003887.042:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21055 comm="syz.2.5800" exe="/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd578be8 code=0x0 [ 5571.590194][T21103] veth0: entered promiscuous mode [ 5571.611797][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5821'. [ 5571.738214][T21102] veth0: left promiscuous mode [ 5571.983849][T21109] FAULT_INJECTION: forcing a failure. [ 5571.983849][T21109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5571.983937][T21109] CPU: 0 UID: 0 PID: 21109 Comm: syz.1.5824 Not tainted syzkaller #0 PREEMPT [ 5571.983983][T21109] Hardware name: linux,dummy-virt (DT) [ 5571.984004][T21109] Call trace: [ 5571.984021][T21109] show_stack+0x18/0x24 (C) [ 5571.984106][T21109] dump_stack_lvl+0x60/0x80 [ 5571.984169][T21109] dump_stack+0x18/0x24 [ 5571.984205][T21109] should_fail_ex+0x1e0/0x238 [ 5571.984247][T21109] should_fail+0x14/0x40 [ 5571.984284][T21109] should_fail_usercopy+0x1c/0x40 [ 5571.984322][T21109] bpf_vlog_reverse_ubuf+0x178/0x320 [ 5571.984362][T21109] bpf_vlog_finalize+0xa0/0x100 [ 5571.984399][T21109] bpf_log_attr_finalize+0x38/0x100 [ 5571.984436][T21109] btf_new_fd+0x1f8/0xf18 [ 5571.984476][T21109] __sys_bpf+0xb28/0x1d1c [ 5571.984514][T21109] __arm64_sys_bpf+0x2c/0x40 [ 5571.984558][T21109] invoke_syscall+0x54/0x10c [ 5571.984594][T21109] el0_svc_common.constprop.0+0x40/0xe0 [ 5571.984630][T21109] do_el0_svc+0x1c/0x34 [ 5571.984664][T21109] el0_svc+0x38/0x1fc [ 5571.984703][T21109] el0t_64_sync_handler+0xa0/0xe4 [ 5571.984740][T21109] el0t_64_sync+0x1a4/0x1a8 [ 5572.816407][ T28] audit: type=1400 audit(2000003891.832:3041): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=21122 comm="syz.2.5829" src=65532 dest=20002 netif=gretap0 [ 5574.473111][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5842'. [ 5575.002696][T21161] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xf2f0000013800b00 pfn:0x53800 [ 5575.002870][T21161] flags: 0x1ffd40000002000(reserved|node=0|zone=0|lastcpupid=0x7ff|kasantag=0x5) [ 5575.003355][T21161] raw: 01ffd40000002000 ffffc1ffc0379bc8 ffffc1ffc04e0048 0000000000000000 [ 5575.003418][T21161] raw: f2f0000013800b00 0000000000000000 00000001ffffffff 0000000000000000 [ 5575.003500][T21161] page dumped because: unmovable page [ 5575.172784][T21165] nbd: must specify an index to disconnect [ 5576.697343][T21189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5854'. [ 5577.507299][T21204] binder: 21203:21204 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 5577.515495][T21204] binder: 21203:21204 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5577.515628][T21204] binder: 21204 RLIMIT_NICE not set [ 5577.581749][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5580.225969][T21211] infiniband syz2: set active [ 5580.226515][T21211] infiniband syz2: added bond0 [ 5580.369558][T21220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5580.415213][T21211] RDS/IB: syz2: added [ 5580.415350][T21211] smc: adding ib device syz2 with port count 1 [ 5580.415410][T21211] smc: ib device syz2 port 1 has no pnetid [ 5581.277845][T21230] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5583.186565][T21245] binder: 21244:21245 tried to acquire reference to desc 0, got 1 instead [ 5583.195138][T21245] binder: 21244:21245 got transaction with invalid data ptr [ 5583.198893][T21245] binder: 21244:21245 transaction async to 21244:0 failed 61/29201/-14, code 0 size 0-24 line 3512 [ 5583.206430][T21245] binder_alloc: 21244: pid 21244 spamming oneway? 1 buffers allocated for a total size of 6144 [ 5583.206877][T21245] binder: 21244:21245 ioctl c0306201 20000c80 returned -14 [ 5583.231384][T17364] binder: undelivered transaction 62, process died. [ 5584.192815][T21256] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 5584.560393][T21263] syzkaller0: entered promiscuous mode [ 5584.560521][T21263] syzkaller0: entered allmulticast mode [ 5586.105363][T21270] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 5586.524684][T21277] netlink: 67 bytes leftover after parsing attributes in process `syz.2.5888'. [ 5587.240504][T21284] FAULT_INJECTION: forcing a failure. [ 5587.240504][T21284] name fail_futex, interval 1, probability 0, space 0, times 0 [ 5587.240664][T21284] CPU: 0 UID: 0 PID: 21284 Comm: syz.1.5892 Not tainted syzkaller #0 PREEMPT [ 5587.240748][T21284] Hardware name: linux,dummy-virt (DT) [ 5587.240787][T21284] Call trace: [ 5587.240818][T21284] show_stack+0x18/0x24 (C) [ 5587.240956][T21284] dump_stack_lvl+0x60/0x80 [ 5587.241037][T21284] dump_stack+0x18/0x24 [ 5587.241105][T21284] should_fail_ex+0x1e0/0x238 [ 5587.241182][T21284] should_fail+0x14/0x40 [ 5587.241251][T21284] get_futex_key+0xdc/0x620 [ 5587.241321][T21284] futex_wake+0x68/0x240 [ 5587.241389][T21284] do_futex+0x178/0x210 [ 5587.241466][T21284] __arm64_sys_futex+0x100/0x1a0 [ 5587.241533][T21284] invoke_syscall+0x54/0x10c [ 5587.241601][T21284] el0_svc_common.constprop.0+0x40/0xe0 [ 5587.241668][T21284] do_el0_svc+0x1c/0x34 [ 5587.241733][T21284] el0_svc+0x38/0x1fc [ 5587.241807][T21284] el0t_64_sync_handler+0xa0/0xe4 [ 5587.241875][T21284] el0t_64_sync+0x1a4/0x1a8 [ 5590.010564][T21327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 5590.223265][T21329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5912'. [ 5590.223795][T21329] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5912'. [ 5590.893194][T21335] binder: 21334:21335 tried to acquire reference to desc 0, got 1 instead [ 5590.897016][T21335] binder: 21334:21335 got reply transaction with bad transaction stack, transaction 67 has target 21334:0 [ 5590.897277][T21335] binder: 21334:21335 transaction reply to 0:0 failed 68/29201/-71, code 0 size 0-0 line 3171 [ 5590.910820][T21335] binder: 21334:21335 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5590.915476][T21335] binder: 21335 RLIMIT_NICE not set [ 5590.915682][T21335] binder: 21335 RLIMIT_NICE not set [ 5590.919354][T21335] binder: 21335 RLIMIT_NICE not set [ 5590.919668][T21335] binder_alloc: 21334: binder_alloc_buf, no vma [ 5590.919714][T21335] binder: cannot allocate buffer: vma cleared, target dead or dying [ 5590.919885][T21335] binder: 21334:21335 transaction reply to 21334:21335 failed 69/29189/-3, code 0 size 0-0 line 3409 [ 5590.920117][T21335] binder: send failed reply for transaction 67 to 21334:21335 [ 5590.926612][T17364] binder: undelivered TRANSACTION_COMPLETE [ 5590.926791][T17364] binder: undelivered TRANSACTION_ERROR: 29201 [ 5590.926841][T17364] binder: undelivered TRANSACTION_ERROR: 29189 [ 5590.968786][T17364] binder: undelivered TRANSACTION_ERROR: 29190 [ 5593.299825][T21357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5925'. [ 5597.559267][ T5960] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 5597.572914][ T5960] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 5599.423218][T21427] FAULT_INJECTION: forcing a failure. [ 5599.423218][T21427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5599.423397][T21427] CPU: 0 UID: 0 PID: 21427 Comm: syz.2.5953 Not tainted syzkaller #0 PREEMPT [ 5599.423481][T21427] Hardware name: linux,dummy-virt (DT) [ 5599.423517][T21427] Call trace: [ 5599.423547][T21427] show_stack+0x18/0x24 (C) [ 5599.423659][T21427] dump_stack_lvl+0x60/0x80 [ 5599.423728][T21427] dump_stack+0x18/0x24 [ 5599.423794][T21427] should_fail_ex+0x1e0/0x238 [ 5599.423869][T21427] should_fail+0x14/0x40 [ 5599.423935][T21427] should_fail_usercopy+0x1c/0x40 [ 5599.424001][T21427] _inline_copy_from_user+0x24/0xa8 [ 5599.424077][T21427] do_ipt_set_ctl+0x340/0x43c [ 5599.424144][T21427] nf_setsockopt+0x68/0xa0 [ 5599.424214][T21427] ip_setsockopt+0x74/0x9c [ 5599.424281][T21427] ipv6_setsockopt+0xc4/0xe4 [ 5599.424349][T21427] tcp_setsockopt+0x20/0x40 [ 5599.424412][T21427] sock_common_setsockopt+0x1c/0x30 [ 5599.424480][T21427] do_sock_setsockopt+0xa4/0x198 [ 5599.424548][T21427] __sys_setsockopt+0x7c/0x100 [ 5599.424626][T21427] __arm64_sys_setsockopt+0x24/0x40 [ 5599.424695][T21427] invoke_syscall+0x54/0x10c [ 5599.424757][T21427] el0_svc_common.constprop.0+0x40/0xe0 [ 5599.424826][T21427] do_el0_svc+0x1c/0x34 [ 5599.424890][T21427] el0_svc+0x38/0x1fc [ 5599.424960][T21427] el0t_64_sync_handler+0xa0/0xe4 [ 5599.425027][T21427] el0t_64_sync+0x1a4/0x1a8 [ 5602.201414][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5965'. [ 5604.525634][T21466] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 5605.907284][T21488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5980'. [ 5640.317152][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5763.188255][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 5920.570492][T20207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5920.776170][T20207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5920.998662][T20207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5921.289824][T20207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5922.849118][T20214] smc: removing ib device syz2 [ 5922.863246][T20207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5922.877635][T20207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5922.890372][T20207] bond0 (unregistering): Released all slaves [ 5922.920438][T20207] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 5922.934074][T20207] bond1 (unregistering): Released all slaves [ 5924.915120][T21546] rxe_eth0 speed is unknown, defaulting to 1000 [ 5926.524297][ T3230] 8021q: adding VLAN 0 to HW filter on device eth5 [ 5926.925691][T21542] rxe_eth0 speed is unknown, defaulting to 1000 [ 5929.057445][ T3230] 8021q: adding VLAN 0 to HW filter on device eth6 [ 5929.532368][T20207] hsr_slave_0: left promiscuous mode [ 5929.534922][T20207] hsr_slave_1: left promiscuous mode [ 5929.574473][T20207] veth1_macvtap: left promiscuous mode [ 5929.575443][T20207] veth0_macvtap: left promiscuous mode [ 5929.575970][T20207] veth1_vlan: left promiscuous mode [ 5929.576246][T20207] veth0_vlan: left promiscuous mode [ 5931.546671][T20207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5931.726830][T20207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5931.858448][T20207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5931.980185][T20207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5933.704282][T20207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5933.720575][T20207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5933.728081][T20207] bond0 (unregistering): Released all slaves [ 5933.958814][ T3230] 8021q: adding VLAN 0 to HW filter on device eth7 [ 5934.015601][T21546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5934.194684][T21546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5934.403826][T20207] hsr_slave_0: left promiscuous mode [ 5934.417896][T20207] hsr_slave_1: left promiscuous mode [ 5934.448128][T20207] veth1_macvtap: left promiscuous mode [ 5934.448348][T20207] veth0_macvtap: left promiscuous mode [ 5934.448741][T20207] veth1_vlan: left promiscuous mode [ 5934.448998][T20207] veth0_vlan: left promiscuous mode [ 5937.209526][T21542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5937.253965][T21542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5937.963744][ T3230] 8021q: adding VLAN 0 to HW filter on device eth8 [ 5938.030359][T21546] hsr_slave_0: entered promiscuous mode [ 5938.052987][T21546] hsr_slave_1: entered promiscuous mode [ 5940.078642][T21542] hsr_slave_0: entered promiscuous mode [ 5940.093152][T21542] hsr_slave_1: entered promiscuous mode [ 5940.102687][T21542] debugfs: 'hsr0' already exists in 'hsr' [ 5940.102805][T21542] Cannot create hsr debugfs directory [ 5940.367633][T21546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 5940.453329][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5940.459727][ T3230] 8021q: adding VLAN 0 to HW filter on device eth9 [ 5940.470199][T21546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 5940.530793][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5940.545641][T21546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 5940.598627][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5940.615833][T21546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 5940.650402][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5942.333817][T21542] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 5942.387558][T21542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 5942.404216][T21542] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 5942.459422][T21542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 5942.474278][T21542] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 5942.532709][T21542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 5942.546348][T21542] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 5942.604251][T21542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 5943.537889][ T3230] 8021q: adding VLAN 0 to HW filter on device eth10 [ 5943.795446][T21546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5945.533562][T21542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5947.147080][ T3230] 8021q: adding VLAN 0 to HW filter on device eth11 [ 5952.696689][ T3230] 8021q: adding VLAN 0 to HW filter on device eth12 [ 5955.049329][T21542] veth0_vlan: entered promiscuous mode [ 5955.166564][T21546] veth0_vlan: entered promiscuous mode [ 5955.296552][T21542] veth1_vlan: entered promiscuous mode [ 5955.437850][T21546] veth1_vlan: entered promiscuous mode [ 5955.772260][T21542] veth0_macvtap: entered promiscuous mode [ 5955.887066][T21542] veth1_macvtap: entered promiscuous mode [ 5955.908747][T21546] veth0_macvtap: entered promiscuous mode [ 5956.050750][T21546] veth1_macvtap: entered promiscuous mode [ 5956.446483][T20207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.446856][T20207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.447000][T20207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.447144][T20207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.550371][T20203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.550769][T20203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.553516][T20203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5956.553667][T20203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5959.559369][T21798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6004'. [ 5959.560549][T21798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6004'. [ 5963.298158][T21827] fuse: Bad value for 'group_id' [ 5963.298297][T21827] fuse: Bad value for 'group_id' [ 5964.624324][T21842] fuse: Bad value for 'group_id' [ 5964.624439][T21842] fuse: Bad value for 'group_id' [ 5968.974759][T21896] input: syz0 as /devices/virtual/input/input93 [ 5975.463221][T21943] binder: 21942:21943 ioctl 40046205 0 returned -22 [ 5975.477914][T21943] binder: 21942:21943 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5975.477990][T21943] binder: 21943 RLIMIT_NICE not set [ 5975.993967][T21948] binder: 21942:21948 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 5975.994122][T21948] binder: 21948 RLIMIT_NICE not set [ 5993.054648][T21988] se_dev->se_dev_ptr already set for storage object [ 6000.136571][T22004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6000.162562][T22004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6000.533330][T22011] fuse: Unknown parameter 'grou00000000000000000000' [ 6000.708500][T22013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6000.726591][T22013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6023.115931][T22042] ubi0: attaching mtd0 [ 6023.230183][T22042] ubi0: scanning is finished [ 6023.248203][T22042] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 6023.305339][T22042] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 6023.455139][T22046] binder: 22045:22046 ioctl c0306201 0 returned -14 [ 6023.460399][T22046] binder: 22045:22046 got transaction to invalid handle, 1 [ 6023.460547][T22046] binder: 22045:22046 cannot find target node [ 6023.460667][T22046] binder: 22045:22046 transaction async to 0:0 failed 71/29201/-22, code 0 size 0-0 line 3253 [ 6023.473654][T21539] binder: undelivered TRANSACTION_ERROR: 29201 [ 6024.039513][T22053] fuse: Bad value for 'user_id' [ 6024.039682][T22053] fuse: Bad value for 'user_id' [ 6039.988244][T22069] fuse: Bad value for 'fd' [ 6044.004239][T22092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6044.042082][T22092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6047.656165][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6094'. [ 6049.170496][T22121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6049.180856][T22121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6049.591650][T22124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6049.592957][T22124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6065.519857][T22166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6065.568312][T22166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6065.670523][T22166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6065.814360][T22166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6066.138508][T20207] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6066.271587][T20203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6066.342011][T20207] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6066.412374][T20207] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6070.730329][T22189] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6129'. [ 6070.730842][T22189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6129'. [ 6071.184396][T22194] binder: 22193:22194 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 6071.184544][T22194] binder: 22194 RLIMIT_NICE not set [ 6073.034584][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6132'. [ 6073.136775][T22197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 6073.287821][T22197] bond1 (unregistering): Released all slaves [ 6090.968324][T22220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6090.970647][T22220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6091.938587][T22232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6142'. [ 6095.548402][T22244] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6148'. [ 6095.792684][T21539] rxe_eth0 speed is unknown, defaulting to 1000 [ 6096.990626][T22244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6148'. [ 6102.962505][T22281] fuse: Bad value for 'fd' [ 6112.633195][T22291] fuse: Unknown parameter '0x0000000000000003' [ 6126.991549][T22310] fuse: Unknown parameter '0x0000000000000003' [ 6127.861459][T22315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6127.867071][T22315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6128.122751][T22315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6128.134962][T22315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6130.423268][T22323] fuse: Unknown parameter '0x0000000000000003' [ 6131.833427][T22339] fuse: Unknown parameter '0x0000000000000003' [ 6138.792626][T22389] fuse: Unknown parameter '0x0000000000000003' [ 6139.944972][T22405] netlink: 'syz.4.6191': attribute type 5 has an invalid length. [ 6139.966075][T22404] se_dev->se_dev_ptr already set for storage object [ 6170.833011][T22480] netlink: 'syz.3.6220': attribute type 1 has an invalid length. [ 6170.833245][T22480] nbd: couldn't find device at index 131080 [ 6175.283306][T22501] lo: entered allmulticast mode [ 6175.320154][T22500] lo: left allmulticast mode [ 6191.824017][T22518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6233'. [ 6211.640645][T22571] fuse: Unknown parameter '0x0000000000000003' [ 6215.619006][T22587] fuse: Unknown parameter '0x0000000000000003' [ 6215.780436][T22590] lo: entered promiscuous mode [ 6215.864290][T22590] tunl0: entered promiscuous mode [ 6215.870005][T22590] gre0: entered promiscuous mode [ 6215.953204][T22590] gretap0: entered promiscuous mode [ 6215.987713][T22590] erspan0: entered promiscuous mode [ 6216.035254][T22590] ip_vti0: entered promiscuous mode [ 6216.057148][T22590] ip6_vti0: entered promiscuous mode [ 6216.082344][T22590] sit0: entered promiscuous mode [ 6216.136964][T22590] ip6tnl0: entered promiscuous mode [ 6216.167568][T22590] ip6gre0: entered promiscuous mode [ 6216.231636][T22590] syz_tun: entered promiscuous mode [ 6216.283293][T22590] ip6gretap0: entered promiscuous mode [ 6216.309857][T22590] vcan0: entered promiscuous mode [ 6216.353215][T22590] bond0: entered promiscuous mode [ 6216.353363][T22590] bond_slave_0: entered promiscuous mode [ 6216.354343][T22590] bond_slave_1: entered promiscuous mode [ 6216.396332][T22590] dummy0: entered promiscuous mode [ 6216.938143][T22590] nlmon0: entered promiscuous mode [ 6216.956600][T22590] vxcan0: entered promiscuous mode [ 6216.967180][T22590] vxcan1: entered promiscuous mode [ 6216.975256][T22590] veth0: entered promiscuous mode [ 6216.997075][T22590] veth1: entered promiscuous mode [ 6217.019359][T22590] wg0: entered promiscuous mode [ 6217.058184][T22590] wg1: entered promiscuous mode [ 6217.077716][T22590] wg2: entered promiscuous mode [ 6217.094897][T22590] veth0_to_bridge: entered promiscuous mode [ 6217.118197][T22590] bridge_slave_0: entered promiscuous mode [ 6217.146498][T22590] veth1_to_bridge: entered promiscuous mode [ 6217.176490][T22590] bridge_slave_1: entered promiscuous mode [ 6217.194478][T22590] veth0_to_bond: entered promiscuous mode [ 6217.224607][T22590] veth1_to_bond: entered promiscuous mode [ 6217.259492][T22590] veth0_to_team: entered promiscuous mode [ 6217.282901][T22590] team_slave_0: entered promiscuous mode [ 6217.284806][T22590] veth1_to_team: entered promiscuous mode [ 6217.300239][T22590] team_slave_1: entered promiscuous mode [ 6217.307536][T22590] veth0_to_batadv: entered promiscuous mode [ 6217.328771][T22590] batadv_slave_0: entered promiscuous mode [ 6217.358133][T22590] veth1_to_batadv: entered promiscuous mode [ 6217.389176][T22590] batadv_slave_1: entered promiscuous mode [ 6218.380663][T22590] xfrm0: entered promiscuous mode [ 6218.394077][T22590] veth0_to_hsr: entered promiscuous mode [ 6218.522435][T22590] veth1_to_hsr: entered promiscuous mode [ 6218.553354][T22590] hsr0: entered promiscuous mode [ 6218.575309][T22590] veth1_virt_wifi: entered promiscuous mode [ 6218.595976][T22590] veth0_virt_wifi: entered promiscuous mode [ 6218.670153][T22590] vlan0: entered promiscuous mode [ 6218.695102][T22590] vlan1: entered promiscuous mode [ 6218.720718][T22590] macvlan0: entered promiscuous mode [ 6218.755343][T22590] macvlan1: entered promiscuous mode [ 6218.776236][T22590] ipvlan1: entered promiscuous mode [ 6218.815586][T22590] macvtap0: entered promiscuous mode [ 6218.837256][T22590] macsec0: entered promiscuous mode [ 6218.888345][T22590] geneve0: entered promiscuous mode [ 6218.928239][T22590] geneve1: entered promiscuous mode [ 6218.986144][T22590] veth2: entered promiscuous mode [ 6218.987907][T22590] veth3: entered promiscuous mode [ 6218.988586][T22590] netdevsim netdevsim4 eth0: entered promiscuous mode [ 6218.989248][T22590] netdevsim netdevsim4 eth1: entered promiscuous mode [ 6218.990197][T22590] netdevsim netdevsim4 eth2: entered promiscuous mode [ 6218.990896][T22590] netdevsim netdevsim4 eth3: entered promiscuous mode [ 6219.028657][T20209] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6219.028887][T20209] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6219.029021][T20209] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6219.045783][T20209] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6220.738310][T22616] fuse: Unknown parameter 'fd0x0000000000000003' [ 6221.126111][T22620] netlink: 'syz.3.6267': attribute type 1 has an invalid length. [ 6221.126264][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6267'. [ 6221.438315][T22624] fuse: fd is not a fuse device [ 6225.796021][ T28] audit: type=1326 audit(2000000202.350:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22675 comm="syz.3.6285" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9178be8 code=0x7ffc0000 [ 6225.799332][ T28] audit: type=1326 audit(2000000202.350:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22675 comm="syz.3.6285" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9178be8 code=0x7ffc0000 [ 6225.810320][ T28] audit: type=1326 audit(2000000202.350:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22675 comm="syz.3.6285" exe="/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa9178be8 code=0x7ffc0000 [ 6225.810678][ T28] audit: type=1326 audit(2000000202.360:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22675 comm="syz.3.6285" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9178be8 code=0x7ffc0000 [ 6225.824091][ T28] audit: type=1326 audit(2000000202.380:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22675 comm="syz.3.6285" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9178be8 code=0x7ffc0000 [ 6226.140659][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6226.147891][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6226.224721][T22678] netlink: 'syz.3.6286': attribute type 10 has an invalid length. [ 6226.485208][T22680] nvmet: adding nsid 1 to subsystem testsubsys [ 6226.665433][T22682] dummy0: entered promiscuous mode [ 6229.570128][T22699] rxe_eth0 speed is unknown, defaulting to 1000 [ 6231.798491][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6296'. [ 6233.424422][T22704] binder: 22703:22704 tried to acquire reference to desc 0, got 1 instead [ 6233.472991][T22704] binder: 22703:22704 got transaction with invalid offsets ptr [ 6233.473292][T22704] binder: 22703:22704 transaction call to 22703:0 failed 85/29201/-14, code 0 size 0-22 line 3448 [ 6233.558875][T11437] binder: undelivered TRANSACTION_ERROR: 29201 [ 6233.559472][T11437] binder: send failed reply for transaction 78 to 22703:22704 [ 6233.564640][T11437] binder: undelivered TRANSACTION_COMPLETE [ 6233.564737][T11437] binder: undelivered TRANSACTION_ERROR: 29189 [ 6236.160417][T11437] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 6236.185312][T11437] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 6240.446785][T22734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6240.468038][T22734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6240.836400][T22738] misc userio: Begin command sent, but we're already running [ 6241.436465][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6312'. [ 6241.822553][T11437] atkbd serio3: keyboard reset failed on [ 6242.505529][T22747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6242.506778][T22747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6253.543677][T22755] fuse: Bad value for 'fd' [ 6261.845993][T22773] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 6263.118424][T22780] fuse: fd is not a fuse device [ 6263.919189][T22789] binder: 22787:22789 ioctl c0306201 0 returned -14 [ 6264.207840][T22795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6335'. [ 6268.778432][T22819] fuse: fd is not a fuse device [ 6271.526710][T22838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6352'. [ 6271.527288][T22838] geneve0: left promiscuous mode [ 6321.057584][T22923] UDC core: g1: couldn't find an available UDC or it's busy [ 6321.113951][T22923] Need at least one configuration in g1. [ 6321.114532][T22923] udc dummy_udc.0: failed to start g1: -22 [ 6321.114672][T22923] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 6321.117099][T22923] UDC core: g1: couldn't find an available UDC or it's busy [ 6326.894153][T22948] fuse: Bad value for 'fd' [ 6329.581863][T22939] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6329.871933][T22960] fuse: Bad value for 'fd' [ 6330.770084][T22972] fuse: Bad value for 'fd' [ 6345.582771][T23032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6345.585784][T23032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6349.445941][T23053] fuse: fd is not a fuse device [ 6384.314398][T23103] pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 6384.317580][T23103] pci 0000:00:01.0: BAR 0 [io 0x1080-0x109f] [ 6384.318356][T23103] pci 0000:00:01.0: BAR 1 [mem 0x10040000-0x10040fff] [ 6384.318629][T23103] pci 0000:00:01.0: BAR 4 [mem 0x8000000000-0x8000003fff 64bit pref] [ 6384.380303][T23103] pci 0000:00:01.0: BAR 4 [mem 0x8000000000-0x8000003fff 64bit pref]: assigned [ 6384.395961][T23103] pci 0000:00:01.0: BAR 1 [mem 0x10040000-0x10040fff]: assigned [ 6384.396295][T23103] pci 0000:00:01.0: BAR 0 [io 0x1080-0x109f]: assigned [ 6394.400746][T23153] cgroup: Setting release_agent not allowed [ 6404.330771][T23185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6404.348435][T23185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6407.285639][T23205] FAULT_INJECTION: forcing a failure. [ 6407.285639][T23205] name failslab, interval 1, probability 0, space 0, times 0 [ 6407.286089][T23205] CPU: 0 UID: 0 PID: 23205 Comm: syz.3.6478 Tainted: G L syzkaller #0 PREEMPT [ 6407.286306][T23205] Tainted: [L]=SOFTLOCKUP [ 6407.286357][T23205] Hardware name: linux,dummy-virt (DT) [ 6407.286402][T23205] Call trace: [ 6407.286440][T23205] show_stack+0x18/0x24 (C) [ 6407.286544][T23205] dump_stack_lvl+0x60/0x80 [ 6407.286612][T23205] dump_stack+0x18/0x24 [ 6407.286676][T23205] should_fail_ex+0x1e0/0x238 [ 6407.286753][T23205] should_failslab+0x54/0x80 [ 6407.286824][T23205] __kmalloc_cache_noprof+0x58/0x470 [ 6407.286903][T23205] do_epoll_create+0x34/0x1cc [ 6407.286986][T23205] __arm64_sys_epoll_create1+0x14/0x24 [ 6407.287059][T23205] invoke_syscall+0x54/0x10c [ 6407.287129][T23205] el0_svc_common.constprop.0+0x40/0xe0 [ 6407.287198][T23205] do_el0_svc+0x1c/0x34 [ 6407.287261][T23205] el0_svc+0x38/0x1fc [ 6407.287343][T23205] el0t_64_sync_handler+0xa0/0xe4 [ 6407.287415][T23205] el0t_64_sync+0x1a4/0x1a8 [ 6407.677792][T23217] loop0: detected capacity change from 0 to 4096 [ 6407.731808][T23217] loop0: [ 6408.957750][T23233] FAULT_INJECTION: forcing a failure. [ 6408.957750][T23233] name failslab, interval 1, probability 0, space 0, times 0 [ 6408.957945][T23233] CPU: 0 UID: 0 PID: 23233 Comm: syz.3.6487 Tainted: G L syzkaller #0 PREEMPT [ 6408.958053][T23233] Tainted: [L]=SOFTLOCKUP [ 6408.958089][T23233] Hardware name: linux,dummy-virt (DT) [ 6408.958127][T23233] Call trace: [ 6408.958158][T23233] show_stack+0x18/0x24 (C) [ 6408.958301][T23233] dump_stack_lvl+0x60/0x80 [ 6408.958373][T23233] dump_stack+0x18/0x24 [ 6408.958448][T23233] should_fail_ex+0x1e0/0x238 [ 6408.958524][T23233] should_failslab+0x54/0x80 [ 6408.958596][T23233] __kmalloc_cache_noprof+0x58/0x470 [ 6408.958674][T23233] __arm64_sys_mincore+0x118/0x3a0 [ 6408.958753][T23233] invoke_syscall+0x54/0x10c [ 6408.958823][T23233] el0_svc_common.constprop.0+0x40/0xe0 [ 6408.958894][T23233] do_el0_svc+0x1c/0x34 [ 6408.958962][T23233] el0_svc+0x38/0x1fc [ 6408.959041][T23233] el0t_64_sync_handler+0xa0/0xe4 [ 6408.959113][T23233] el0t_64_sync+0x1a4/0x1a8 [ 6411.240844][T23262] netlink: 'syz.3.6503': attribute type 9 has an invalid length. [ 6413.844729][T23290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6413.846185][T23290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6414.715130][T23299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6414.734675][T23299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6419.553717][T23331] Need at least one configuration in g1. [ 6419.553927][T23331] udc dummy_udc.0: failed to start g1: -22 [ 6419.553998][T23331] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 6419.559822][T23331] UDC core: g1: couldn't find an available UDC or it's busy [ 6720.361336][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 6720.365073][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23340/3:b..l [ 6720.366417][ C0] rcu: (detected by 0, t=30002 jiffies, g=417633, q=349 ncpus=1) [ 6720.367361][ C0] task:syz.3.6532 state:R running task stack:0 pid:23340 tgid:23339 ppid:21542 task_flags:0x400040 flags:0x00000011 [ 6720.368391][ C0] Call trace: [ 6720.368745][ C0] __switch_to+0x100/0x200 (T) [ 6720.369136][ C0] __schedule+0x400/0xdc8 [ 6720.369454][ C0] preempt_schedule+0x48/0x60 [ 6720.369766][ C0] __local_bh_enable_ip+0x6c/0x9c [ 6720.370123][ C0] __dev_queue_xmit+0x334/0x1120 [ 6720.370466][ C0] ip_finish_output2+0x504/0x6c0 [ 6720.370779][ C0] __ip_finish_output+0xa4/0x1a0 [ 6720.371105][ C0] ip_finish_output+0x34/0x148 [ 6720.371416][ C0] ip_output+0x70/0x118 [ 6720.371690][ C0] __ip_queue_xmit+0x178/0x480 [ 6720.372012][ C0] ip_queue_xmit+0x14/0x20 [ 6720.372340][ C0] __tcp_transmit_skb+0x5a8/0x1058 [ 6720.372665][ C0] tcp_connect+0x7e8/0xfcc [ 6720.372956][ C0] tcp_v4_connect+0x3b8/0x4c4 [ 6720.373270][ C0] mptcp_connect+0x180/0x2dc [ 6720.373604][ C0] __inet_stream_connect+0x134/0x3c0 [ 6720.373995][ C0] tcp_sendmsg_fastopen+0xd0/0x1dc [ 6720.374373][ C0] mptcp_sendmsg+0x66c/0x870 [ 6720.374692][ C0] inet_sendmsg+0x44/0x70 [ 6720.374973][ C0] __sock_sendmsg+0x54/0x60 [ 6720.375296][ C0] ____sys_sendmsg+0x104/0x2a8 [ 6720.375591][ C0] ___sys_sendmsg+0xb0/0x108 [ 6720.375881][ C0] __sys_sendmmsg+0x110/0x24c [ 6720.376228][ C0] __arm64_sys_sendmmsg+0x24/0x34 [ 6720.376582][ C0] invoke_syscall+0x54/0x10c [ 6720.376903][ C0] el0_svc_common.constprop.0+0x40/0xe0 [ 6720.377267][ C0] do_el0_svc+0x1c/0x34 [ 6720.377551][ C0] el0_svc+0x38/0x1fc [ 6720.377802][ C0] el0t_64_sync_handler+0xa0/0xe4 [ 6720.378095][ C0] el0t_64_sync+0x1a4/0x1a8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)